last executing test programs:

3m44.448356163s ago: executing program 3 (id=1423):
mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7ff)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003)
mount$auto(0x0, &(0x7f00000002c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x80000000000000f, 0x0)
chdir$auto(&(0x7f0000000300)='./file0\x00')
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
bpf$auto(0x9, &(0x7f0000000100)=@token_create={0x2, <r0=>0xffffffffffffffff}, 0x9)
mmap$auto(0x0, 0x20009, 0x2b04ec44, 0xeb1, 0x405, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@link_create={@map_fd=r0, @target_ifindex=r2, 0x8, 0xbfe3, @target_btf_id=0x5}, 0xf)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
shutdown$auto(0x200000003, 0x2)
ioprio_set$auto(0x7, 0x0, 0xfff)
unshare$auto(0x40000080)
process_vm_writev$auto(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x40000000000004, 0x6)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)
keyctl$auto(0x16, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x8800, 0x0)
ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, 0x0)
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000000)={@siginfo_0_0={0x1ff, 0x10000, 0xff, @_sigsys={&(0x7f0000000380)="ab0b5390881479aea0de6593fd34f82cd8c2e8f4e74e2010e34f3a9c7bf5d6b985f2d5a4d397dcb5d990666f17cdd4d6ee58124727172592f3b0c0b6db69247fb3ff89ca86df7af9ebf9d03d38117266cd7927549fa9b1cf6af200ebcb4a9fdfff89cfcb634b10cf2d03f2274e039c2c91ab57d63fa1e7d76a1b3ba7a4f9ee078393378fae3bbc930af3dd6a07da590ba77f4625b4296264a483205343fe13d8147fba1c126c7702125d60509e32ba75261578e09ffb66f269", 0x600, 0x7}}}, 0x20000024, &(0x7f0000000100)={{0x1ff, 0x8}, {0x6, 0x100000001}, 0xfffffffffffffe88, 0x0, 0xa0000, 0x100, 0x2, 0xad44de4, 0xc, 0x8, 0x1, 0x3, 0x200, 0x919d, 0x3ff, 0x10000})
ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={"082699b6be391e4fd86416170c53cb07419f4e9dea446a2598baa50ba85c9e45", 0x62, 0x5, 0x0, 0x17a, 0x1, 0xffffffffffffffff})
mount$auto(0x0, &(0x7f0000000240)='}[,&*}\x00', 0x0, 0xf21, 0x0)
access$auto(&(0x7f0000000280)='\xe1\x9eHU\x00', 0x6)

3m41.252939441s ago: executing program 3 (id=1429):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff)
sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
r0 = socket(0x11, 0x80003, 0x300)
sendto$auto(r0, 0x0, 0x13, 0x2, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x2}}, 0x1e)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x0, r0, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x2, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0)
landlock_add_rule$auto(r1, 0x1, 0x0, 0x0)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

3m40.502381996s ago: executing program 3 (id=1434):
mmap$auto(0x0, 0x10000, 0x4000000000df, 0x20000000040eb1, 0x401, 0x300000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0xc2481, 0x0)
write$auto(r1, 0x0, 0x8)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
r2 = socket(0xa, 0x3, 0x3a)
ioctl$auto(r2, 0x890c, 0x1)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x84)
r3 = socket(0x18, 0x5, 0x1)
connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)

3m39.416643312s ago: executing program 3 (id=1438):
ioctl$auto_VHOST_GET_BACKEND_FEATURES2(0xffffffffffffffff, 0x8008af26, &(0x7f0000000000)=0x94)
r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop6/hctx0/tags\x00', 0x400800, 0x0)
setsockopt$auto_SO_INCOMING_CPU(r0, 0xfb0, 0x31, &(0x7f0000000080)='\x00', 0x7)
getsockopt$auto_SO_PEEK_OFF(r0, 0x0, 0x2a, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x188, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x77, 0xac, "8434f087865b6497b8a96ccfe9e87bc362d1a04d1e3bcf670e5a034571a7f4b9dcb876a09d07d0868ed7a42b140aa21728e2b2a904c1c6292fcd57f892bab1cfbc2b538b049af34ce63ecae6d1ee240c516383b8535084ff17261adce7d01bcbd0937de392cce54a8a00ccc131bbc0d33d41fb"}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x80}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xdb, 0xe8, "02c208c014f89f56b9ace7a9af5ac9106ebfe148f3aaae4c6e8f7aa7dc8a933df616751c02b1296bf923f02cf711112f74d8b8af70f1b8436ddbfe30cfe08b0b775412b8e5ef845400e334dc36205a5ac740c85859d4d5b9906b23236acf3d7a3db2682f9292302d7808f2c1761e632def613e76adf405f13777a43d430fb86083bfdd9139894db17c0171ed3cb4ae3ee8add30f82f6232ec06a2661f70e8664c76531a36aadc97cda4e102015a611f595ff4cdc7e8d14049f7d70b5a355bcf5280da1bc6fac241f60fb2890d71215a573f17ae1df5284"}]}, 0x188}, 0x1, 0x0, 0x0, 0x4091}, 0x44080)
bpf$auto_BPF_OBJ_GET(0x7, &(0x7f00000003c0)=@prog_bind_map={r1, <r2=>r1, 0x9}, 0x8)
ioctl$auto_FITRIM2(r2, 0xc0185879, &(0x7f0000000480)={0x8, 0x4, 0x7fff})
r3 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/tracing/trace\x00', 0x8800, 0x0)
r4 = bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)=@bpf_attr_1={<r5=>r3, 0x4, @value=0x1, 0x9}, 0x9)
ioctl$auto_VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000005c0)=0x9)
ftruncate$auto(r2, 0x85)
bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f0000000600)=@link_update={<r6=>r4, @new_prog_fd=<r7=>r0, 0x80000000, @old_map_fd=<r8=>r1}, 0x8)
r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/iflink\x00', 0x64040, 0x0)
r10 = fanotify_init$auto(0x91ad, 0x2)
fsconfig$auto_FSCONFIG_SET_PATH_EMPTY(r9, 0x4, &(0x7f0000000740)='{{-./\x00', &(0x7f0000000780)="deca91ab4a8573e9462f13e7da836a24a6efad1b2ada8f554b9cd379fd98e3c4bd39dca06f23c51220a9535083afeb3ba9ce4ee0c063ca5a16e6d3dd2c9c", 0x80)
r11 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000800), r10)
sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000001a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000019c0)={&(0x7f0000000840)={0x1168, r11, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_UNSPEC={0x1004, 0x0, "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"}, @TIPC_NLA_PUBL={0x14d, 0x3, 0x0, 0x1, [@generic="14d3f546d913717e3c3f9783f7cefd589b271a6681bb6c2fe2c3f3edce70487d603da12f8f2ecfb74c66c515430bd9b321a2b0897f116894d5008f0bcf0ce0ac0144cd58786924c65d4a233c9d6fb4e64b39187fca9970a0fdf14d48954820e028041fb201ee390e11106e064ce009f00e75edeb8b5f", @typed={0x8, 0x12c, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0x91, 0x0, 0x0, @u64=0x65}, @generic="c2eac4c44e93b8d002ae151914cc173c5a95111c3684a71a8daab32d6da7c2b4f1ed44521e6c51a7ede8d101a9530a40ea06d50c72438ac01a3e86e52020e96e4ad6e40aef6f33fe36bf48527a77458a67987c5fdce4e7a93d8a2a2e02bed92d3301da01fcaa622bb1cb00a4db8bf3a40c049094e1a1953af47bb327adf60aa3c48f8ac6bb4e615c843c0efdb785de036f05fbe30be94427600baec48c8d4a313e56e2c0bcd11fa955c0d93ddca0beacfd99e49e03ead5a88ccb2e64d9dce2"]}]}, 0x1168}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040890)
r12 = open_tree_attr$auto(r8, &(0x7f0000001a40)='./file0\x00', 0x2, &(0x7f0000001a80)={0xe7a4, 0x6, 0x0, @raw=0x7ff}, 0x6)
r13 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001b00), r6)
sendmsg$auto_BATADV_CMD_SET_MESH(r12, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x48, r13, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x3f}, @BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0xfbff}, @BATADV_ATTR_DAT_CACHE_HWADDRESS={0xa, 0x24, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x104}, 0xc004)
ioctl$auto(r2, 0x5, r12)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/irq/15/affinity_hint\x00', 0x202, 0x0)
r14 = ioctl$NS_GET_PARENT(r7, 0xb702, 0x0)
setns(r14, 0x10000000)
madvise$auto(0x10001, 0x1, 0x1)
openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000001c80), 0x81, 0x0)
ioctl$auto(r9, 0x2, 0xffffffffffffffff)
clock_settime$auto(0xffff079d, &(0x7f0000001cc0)={0x7fffffff, 0x6})
recvmmsg$auto(r2, &(0x7f0000001ec0)={{&(0x7f0000001d00)="6013b20443dae5e4741f7351434814e247085884183ef86844103efa8c6e2874e878409f049d66b315302c92c529986aebfb503ff670fd65ef80922039d6c7d89bab94c61e6dc17bbdac6bbc910406be30aff8b8da6077eed77f546c5302a30d", 0x2, &(0x7f0000001e40)={&(0x7f0000001d80)="3a9b114cfafb4fa02f30b5e89c41fdb8208753349f5112afcced3645c1d81794499de184957959a078c9e8b0fde7603a568510053ade885e99c39dcb63d8e6da583afaa151b208d43134f09fde1cd41871f3ef6c15d2c84b1bb456b4e3a0a515300c0f821d0a739d1522c0fdab09290a87368e7236c8728cd72daa90cab820e9a0edf893f5a8310299c26948452378cdc954a972545febf66c41f9053c0b73591af4ec465fae3672319af1153eeddf7c8556bbc113eb", 0x7fffffffffffffff}, 0x8, &(0x7f0000001e80)="107dd4e865af2b2244695411988dbeb3b26c882f8264e7f53f93bf45a861dbd39f1e81b60ff12f4d71bab5", 0x9, 0xd2f9}, 0x80}, 0x0, 0x4, &(0x7f0000001f00)={0x4, 0x3})

3m38.617046518s ago: executing program 3 (id=1441):
mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x80002, 0x0)
read$auto(r0, 0x0, 0x6)
write$auto(0x3, 0x0, 0x6fa9)

3m38.199938489s ago: executing program 3 (id=1442):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
syz_clone(0x1000200, &(0x7f0000000000)="6774dc727f2a5968cd8f9780b97ae6f4caf97a928ddd12b5c007f9675041a4d5ea48af8f910ae13ff920d5f3fc569bcb37d563fcbe7526fa6e6ed70b2d59", 0x3e, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="36ca0f577477c6a24ec3b5780b3cdaf07f613b74546fd1ff3a9a69e06ced353a2f3c5ce74763e93688663348ba6f074175abcb89ffa66a21959b6837fd508f7ffd00941b5d4d0a8abc3dfbc18bba96f0f3fec11747a04b") (async)
syz_clone(0x1000200, &(0x7f0000000000)="6774dc727f2a5968cd8f9780b97ae6f4caf97a928ddd12b5c007f9675041a4d5ea48af8f910ae13ff920d5f3fc569bcb37d563fcbe7526fa6e6ed70b2d59", 0x3e, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="36ca0f577477c6a24ec3b5780b3cdaf07f613b74546fd1ff3a9a69e06ced353a2f3c5ce74763e93688663348ba6f074175abcb89ffa66a21959b6837fd508f7ffd00941b5d4d0a8abc3dfbc18bba96f0f3fec11747a04b")
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x5, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0]}, 0x1fe, 0x200c)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = bpf$auto(0x8000000000000018, 0xfffffffffffffffe, 0x0)
socket(0x10, 0x2, 0x0) (async)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xaa100, 0x0) (async)
r2 = openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xaa100, 0x0)
read$auto_ptdump_curknl_fops_(r2, &(0x7f00000000c0)=""/168, 0xa8)
recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0) (async)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x19, &(0x7f0000000000), 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
bpf$auto(0x1c, &(0x7f0000000040)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x2c}, 0x92)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_VHOST_SET_VRING_KICK2(r0, 0x4008af20, &(0x7f0000000480)={0x3, r1})

3m22.885902325s ago: executing program 32 (id=1442):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
syz_clone(0x1000200, &(0x7f0000000000)="6774dc727f2a5968cd8f9780b97ae6f4caf97a928ddd12b5c007f9675041a4d5ea48af8f910ae13ff920d5f3fc569bcb37d563fcbe7526fa6e6ed70b2d59", 0x3e, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="36ca0f577477c6a24ec3b5780b3cdaf07f613b74546fd1ff3a9a69e06ced353a2f3c5ce74763e93688663348ba6f074175abcb89ffa66a21959b6837fd508f7ffd00941b5d4d0a8abc3dfbc18bba96f0f3fec11747a04b") (async)
syz_clone(0x1000200, &(0x7f0000000000)="6774dc727f2a5968cd8f9780b97ae6f4caf97a928ddd12b5c007f9675041a4d5ea48af8f910ae13ff920d5f3fc569bcb37d563fcbe7526fa6e6ed70b2d59", 0x3e, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="36ca0f577477c6a24ec3b5780b3cdaf07f613b74546fd1ff3a9a69e06ced353a2f3c5ce74763e93688663348ba6f074175abcb89ffa66a21959b6837fd508f7ffd00941b5d4d0a8abc3dfbc18bba96f0f3fec11747a04b")
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x5, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0]}, 0x1fe, 0x200c)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = bpf$auto(0x8000000000000018, 0xfffffffffffffffe, 0x0)
socket(0x10, 0x2, 0x0) (async)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xaa100, 0x0) (async)
r2 = openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xaa100, 0x0)
read$auto_ptdump_curknl_fops_(r2, &(0x7f00000000c0)=""/168, 0xa8)
recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0) (async)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x19, &(0x7f0000000000), 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
bpf$auto(0x1c, &(0x7f0000000040)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x2c}, 0x92)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_VHOST_SET_VRING_KICK2(r0, 0x4008af20, &(0x7f0000000480)={0x3, r1})

2m52.627267663s ago: executing program 2 (id=1552):
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x29)
mmap$auto(0xc, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {0x1, 0x0, 0xff0f}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x541c, r2)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x3}, 0x10)
write$auto_sg_fops_sg(r3, &(0x7f0000000040)="4a0200000000000000899edb610047eb02eff5d2adc245a4e1eded0e91b86c69b6b42ed642438b9d9b81d8e6ecd0", 0x2e)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x0, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x1000000000d, 0x1, 0x948b, 0x6, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0)
read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a)
mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffffd)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0x0, 0xf663, 0x15)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x9)

2m51.24087428s ago: executing program 2 (id=1556):
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xd81, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = socket(0x23, 0x80805, 0x0)
bind$auto(r1, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x4000000000001, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x20000002, 0xfffffffffffffffe]}, 0x0)
socket(0x1a, 0x4, 0x6)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r3, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [@nested={0x4, 0x4d}, @nested={0x4, 0xdf}, @generic="dd118e6d"]}]}, 0x2c}}, 0x4000000)

2m49.648905018s ago: executing program 2 (id=1562):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
unshare$auto(0x400)
select$auto(0x6, 0x0, &(0x7f0000000100)={[0x40020000000000d, 0x6, 0x0, 0x7ffffffffffffffd, 0x200000000004, 0x5, 0xff, 0x1, 0xd, 0xfffffffffffff761, 0x103, 0x1, 0x0, 0x194e, 0x4, 0x4003]}, 0x0, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x2, 0x0)
memfd_create$auto(0x0, 0x83a6)
fchown$auto(0x5, 0x8, 0x3)
fchown$auto(0x5, 0x8, 0x3)

2m49.389137396s ago: executing program 2 (id=1563):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
getsockopt$auto_SO_NETNS_COOKIE(r0, 0x8, 0x47, &(0x7f0000000300)='*]\x00', &(0x7f0000000340)=0xb4)
sysfs$auto(0x2, 0xe, 0x0)
mkdir$auto(0x0, 0x9)
r1 = fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff)
timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6)
exit$auto(0x2)
timer_settime$auto(0x0, 0x100, &(0x7f0000000200)={{0x3, 0x10007}, {0x9}}, 0x0)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd11/hctx0/tags_bitmap\x00', 0x0, 0x0)
pread64$auto(r2, 0x0, 0x6c, 0xfc)
unshare$auto(0x40000080)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0)
sendfile$auto(r3, r3, 0x0, 0x4f64a1d2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r4 = socket(0xa, 0x1, 0x84)
madvise$auto(0x9, 0x3, 0x1000)
mmap$auto(0x0, 0x80000001, 0x400000000003, 0x19, r0, 0x8000)
openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r5 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x8002, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2aa47b3185c3fe6a}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES8=r5, @ANYBLOB="16b7db72982329f40cea54038225", @ANYRESOCT=r3], 0x20}, 0x1, 0x0, 0x0, 0x26044010}, 0x48010)
write$auto_proc_pid_attr_operations_base(r5, &(0x7f00000004c0)="9d21d84deb9de6767364146595a8557089fe27b4795bf3db82d7739fbc8af9e6f4f90c4841e2f848d263bd0ff57a35e24d3cda8ec4e7eef1c29ab7f7f289c090e51acdd624c06e3ed6092ece468a2919950789f01b5a3b525575fe5ee5e5a23f76155627910e1b9d3f3b08f36c99df7bd9c0eea72f90b599b4bbf5237723f4a63e613c268907034101518a92d72111b08564a9ed05cf48ecd5fd76ea0377897e058af4e6b67760055918e78e9267e5de26d0b45d1f7d435a91c2d59157029b881aa8fc9f7d22964c2c00"/213, 0xd5)
r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
ioctl$auto_TIOCSBRK(r7, 0x5427, 0x0)
getsockopt$auto(r4, 0x84, 0x7d, 0x0, &(0x7f0000000040)=0x9b)
r8 = fcntl$auto_F_GETOWN(r0, 0x9, 0x0)
prctl$auto_PR_SYS_DISPATCH_ON(0x7ff, 0x1, r8, 0xf, 0x961)

2m48.286848755s ago: executing program 2 (id=1568):
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
ioctl$auto_SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xd81, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = socket(0x23, 0x80805, 0x0)
bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x4000000000001, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x20000002, 0xfffffffffffffffe]}, 0x0)
socket(0x1a, 0x4, 0x6)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r4, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [@nested={0x4, 0x4d}, @nested={0x4, 0xdf}, @generic="dd118e6d"]}]}, 0x2c}}, 0x4000000)

2m46.821673926s ago: executing program 2 (id=1572):
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip_tables_targets\x00', 0x800, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r0, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x10, 0x2, 0x0)
r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000000), 0x12b002, 0x0)
write$auto(r1, 0x0, 0x1a)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2m44.347032889s ago: executing program 1 (id=1579):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x27ff) (async)
msgget$auto(0xc, 0x77d9)
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x1}, 0x8, 0xff)
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim6/trap_flow_action_cookie\x00', 0x2000, 0x0) (async)
mmap$auto(0x0, 0xc, 0xdd, 0x9b72, 0x2, 0x8000) (async)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x640, 0x0) (async)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b76, 0x8000000000000003, 0x8000) (async)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) (async)
set_mempolicy$auto(0x8001, &(0x7f0000000180)=0x10000, 0xd) (async)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
msgctl$auto_IPC_RMID(0x4, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0xb02, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0)
write$auto(r1, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000200)='/dev/binderfs/binder1\x00', 0x0, 0x0) (async)
r2 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x1938c0, 0x33903f3ada8876ab)
mmap$auto(0x0, 0x2d, 0x24000000000df, 0xeb1, 0x401, 0x8000) (async)
write$auto(0x3, 0x0, 0x5c8) (async)
ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x8, 0x0, 0x2, 0x33}) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
writev$auto(r2, &(0x7f0000000040)={0x0, 0x40}, 0x8) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x10980, 0x0)
ioctl$auto(r3, 0x540a, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)

2m44.180018132s ago: executing program 1 (id=1580):
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
ioctl$auto_SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xd81, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = socket(0x23, 0x80805, 0x0)
bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x4000000000001, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x20000002, 0xfffffffffffffffe]}, 0x0)
socket(0x1a, 0x4, 0x6)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r4, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [@nested={0x4, 0x4d}, @nested={0x4, 0xdf}, @generic="dd118e6d"]}]}, 0x2c}}, 0x4000000)

2m42.915403914s ago: executing program 1 (id=1585):
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto(r0, &(0x7f00000001c0)='/sys/module/apparmor/parameters/audit\x00', 0x2)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) (async)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
getdents$auto(0xffffffffffffffff, 0x0, 0x62d4)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0)
ioperm$auto(0x7, 0x800, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/ff\x00', 0x300, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) (async)
read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
socket(0x2, 0x1, 0x0) (async)
socket(0x2, 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0xd3, 0x8, 0x0, 0x5, 0xa)
select$auto(0x7, 0x0, 0x0, 0x0, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x10, 0x2000c, 0x2e1, 0x11, 0xffffffffffffffff, 0x100000001) (async)
mmap$auto(0x10, 0x2000c, 0x2e1, 0x11, 0xffffffffffffffff, 0x100000001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
sysfs$auto(0x2, 0x7, 0x0)
fsopen$auto(0x0, 0x1) (async)
r4 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r4, 0x6, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/cpu_dma_latency/power/runtime_active_time\x00', 0x200, 0x0)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000000))
statx$auto(r1, &(0x7f0000000180)='./file0\x00', 0x9, 0x9, &(0x7f0000000540)={0x7, 0x101, 0x0, 0x6, 0xee00, 0x0, 0x4, 0xbd49, 0x8, 0x400002, 0x102, 0x4, {0x5, 0xfffffffc}, {0x80000001, 0x2}, {0x100000000, 0x3}, {0xe}, 0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x2, 0x3, 0x481000, 0xfffffffb, 0x3, 0x3, [0x0, 0x2, 0x91, 0xb, 0x3, 0x2, 0x20000cd1, 0x3d7c, 0x2]})

2m41.971511206s ago: executing program 1 (id=1587):
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x2, 0x3a)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
fstatfs$auto(0x3, 0x0)
prctl$auto(0x23, 0xe, 0x0, 0x68, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/yama/ptrace_scope\x00', 0x88c42, 0x0)
pread64$auto(r0, 0x0, 0x640, 0x2da5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = io_uring_setup$auto(0x1fe, 0x0)
ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000600)=0x10001)
read$auto_tun_fops_tun(r2, &(0x7f00000001c0)=""/238, 0xee)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x3c}}, 0x8090)

2m41.824684072s ago: executing program 1 (id=1588):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x210201, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
getcwd$auto(0x0, 0xfffffffeffffffff)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x8, 0x2000000000002)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003)
r1 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/README\x00', 0x2, 0x0)
fcntl$auto_F_GETFL(r1, 0x3, 0x4b53)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000080), r2)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x134, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x42ab}, @THERMAL_GENL_ATTR_TZ_TEMP={0x8}, @THERMAL_GENL_ATTR_TZ_GOV={0x106, 0xc, 0x0, 0x1, [@generic="4ba42c029618894000d64e155490c0514283c825e6c4e3afe32e7fe7599b37a9959048357de3162cb07f53787cc2aff2fa430cd307cfef724ec27dc66cd6d273beb3fa718274e305679894f951aa87f5e5f7a4ac3778ebd0938ec104fce644f029a711afb13e80a298f752e0132560b607e00fb10b6121c1e26d7b", @generic="1e03b807563310d414a805b06ca9aa81ebf1e3d8e8f102bd6fbaadd3f7f76c38e81d2bdf4fe2a8cbec29200edd9d8bdf433001a6982412f4e40c552ee75b64c85b71c844ca8e676cca15f5352088d8c32083da3fab79e115bf8de512506fe0fe92ac59cf81ea9bbcb933980f1d07523da923398a0c0f1cdb72f7d007d2135d", @typed={0x8, 0xe1, 0x0, 0x0, @ipv4=@broadcast}]}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x8}]}, 0x134}, 0x1, 0x0, 0x0, 0x4}, 0x20040000)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa10221}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x3a}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x8}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x6}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'geneve0\x00'}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x104}, 0x4000000)
getcwd$auto(0x0, 0xffffffffffffffff)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
fanotify_mark$auto(0x0, 0x451, 0xa, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(0x4, 0x0, 0xe6e)
r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptysc\x00', 0x480000, 0x0)
ioctl$auto_TIOCGPTPEER(r4, 0x5441, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SETHMAC(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000000c0)={0x2c, r6, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8a}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)

2m41.4261188s ago: executing program 1 (id=1590):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'dummy0\x00'})
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
close_range$auto(r1, r1, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = socket(0xa, 0x1, 0x84)
unshare$auto(0x40000080)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0)
setsockopt$auto_SO_PASSCRED(r2, 0x400002, 0x10, &(0x7f0000000180)='\x01\x00\xae\x16\x01\x00\x00\x00\xca\xf9\x00\x00\xce\xfc(\xfa\xdcJ\x19\x96\xe7v\x9d\xf630\v\x05\x9e+n\xa2AO15#\xec\x16\xdcB\"\xe2=\x02\x03\v\xa7\x10C\xbd#\xd3\x00o\xe5\xd6(\xa2\xe8\x82a\xd2>\x81\xca\x80\x7f\xb2u\x00\x00\x00\x00\xea\xff\xff\xff\x00'/92, 0x6)
socket(0xa, 0x2, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0)
close_range$auto(r3, 0xffffffffffffffff, 0x10009)
socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x2020009, 0x1, 0x24800000000010, r0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
mmap$auto(0x5, 0x8, 0x6, 0x393f, 0xb, 0x0)
sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, r5, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_psample(&(0x7f0000000000), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
close_range$auto(0x0, 0xffffeffe, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pipe$auto(0x0)

2m38.54754133s ago: executing program 4 (id=1597):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
r0 = socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r3 = getpid()
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
sendmsg$auto_NL80211_CMD_SET_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14000000}, 0x20000000)
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
lseek$auto(0x3, 0x8, 0x1)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x0, 0xe0, 0x6)
r6 = io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x401, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_proc_pid_set_timerslack_ns_operations_base(r6, &(0x7f0000000440)=""/242, 0xf2)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x280380, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)

2m36.648767786s ago: executing program 4 (id=1600):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
r0 = socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r3 = getpid()
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
sendmsg$auto_NL80211_CMD_SET_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14000000}, 0x20000000)
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
lseek$auto(0x3, 0x8, 0x1)
ioctl$auto(0x3, 0x400454ca, 0x38)
memfd_create$auto(0x0, 0xe)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x0, 0xe0, 0x6)
r6 = io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x401, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_proc_pid_set_timerslack_ns_operations_base(r6, &(0x7f0000000440)=""/242, 0xf2)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x280380, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)

2m35.384630619s ago: executing program 4 (id=1601):
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/stat\x00', 0x40802, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0)
writev$auto(r0, 0x0, 0x100)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3542, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r2, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
io_uring_register$auto(0x10, 0x7, 0xfffffffffffffffc, 0x1)
ppoll$auto(&(0x7f0000000000)={r1, 0x40}, 0x2, 0x0, 0x0, 0x8)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
write$auto_console_fops_tty_io(r3, &(0x7f0000000e00)="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", 0xd55)
modify_ldt$auto(0x1, 0x0, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
sendmsg$auto_OVS_FLOW_CMD_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fcdbdf2501000000040006000400060008000a0005000000640002800800510002000000060028002e00000014005a00fe8000000000000000000000000000bb0800db00", @ANYRES32=0xee00, @ANYBLOB="1400fe00fc000000000000000000090000000001200030800400c5800400348014001b00000000000000000000000000caa60000326325ec074fff589c051e525468f52f864697dd9242712f68e6b4bb37fe41827f657142830a6dde19e1b7fa3e733fed5752835a0fb57603753d9bc76c833664f2ed0a8d1eca7feb53b9b9dddc8fc312b57d5f3814dc4889e6039a482e29d4bd66521452855c23143c94eefba0a0d6110b00ba2888eeaa7442c33075ff0ec6520fa84e424f230cff47f85d661439a6c5b79e7de49fc1414978c4df"], 0x88}, 0x1, 0x0, 0x0, 0x2004c080}, 0x4000044)
r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r5, 0x0, 0x20000080)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x40, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x20000000007, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
unshare$auto(0x40000080)

2m34.078849939s ago: executing program 4 (id=1605):
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x2, 0x3a)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
fstatfs$auto(0x3, 0x0)
prctl$auto(0x23, 0xe, 0x0, 0x68, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/yama/ptrace_scope\x00', 0x88c42, 0x0)
pread64$auto(r0, 0x0, 0x640, 0x2da5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = io_uring_setup$auto(0x1fe, 0x0)
ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000600)=0x10001)
read$auto_tun_fops_tun(r2, &(0x7f00000001c0)=""/238, 0xee)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x3c}}, 0x8090)

2m33.9043265s ago: executing program 4 (id=1606):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x210201, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
getcwd$auto(0x0, 0xfffffffeffffffff)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x8, 0x2000000000002)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003)
r1 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/README\x00', 0x2, 0x0)
fcntl$auto_F_GETFL(r1, 0x3, 0x4b53)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000080), r2)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x134, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x42ab}, @THERMAL_GENL_ATTR_TZ_TEMP={0x8}, @THERMAL_GENL_ATTR_TZ_GOV={0x106, 0xc, 0x0, 0x1, [@generic="4ba42c029618894000d64e155490c0514283c825e6c4e3afe32e7fe7599b37a9959048357de3162cb07f53787cc2aff2fa430cd307cfef724ec27dc66cd6d273beb3fa718274e305679894f951aa87f5e5f7a4ac3778ebd0938ec104fce644f029a711afb13e80a298f752e0132560b607e00fb10b6121c1e26d7b", @generic="1e03b807563310d414a805b06ca9aa81ebf1e3d8e8f102bd6fbaadd3f7f76c38e81d2bdf4fe2a8cbec29200edd9d8bdf433001a6982412f4e40c552ee75b64c85b71c844ca8e676cca15f5352088d8c32083da3fab79e115bf8de512506fe0fe92ac59cf81ea9bbcb933980f1d07523da923398a0c0f1cdb72f7d007d2135d", @typed={0x8, 0xe1, 0x0, 0x0, @ipv4=@broadcast}]}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x8}]}, 0x134}, 0x1, 0x0, 0x0, 0x4}, 0x20040000)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa10221}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x3a}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x8}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x6}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'geneve0\x00'}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x104}, 0x4000000)
getcwd$auto(0x0, 0xffffffffffffffff)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
fanotify_mark$auto(0x0, 0x451, 0xa, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(0x4, 0x0, 0xe6e)
r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptysc\x00', 0x480000, 0x0)
ioctl$auto_TIOCGPTPEER(r4, 0x5441, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SETHMAC(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000000c0)={0x2c, r6, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8a}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)

2m33.755894657s ago: executing program 4 (id=1607):
socket(0x2, 0x1, 0x120)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
ioprio_get$auto(0x3, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xa00006, 0xfffffffffffffff5, 0x40eb1, 0x602, 0xfffffffffffffffd)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto(0xffffffffffffffff, 0x8983, 0x4)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x3, 0x948b, 0x8000000000003, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb})
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/134, 0x86)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f0000000140)={0x3})
openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20f02, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000002d80)=ANY=[@ANYBLOB="580089", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYRES16=r0], 0x1458}, 0x1, 0x0, 0x0, 0x48000}, 0x20000040)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendfile$auto(0x1, 0x3, 0x0, 0xd551)
shmctl$auto_IPC_STAT(0x9, 0x2, &(0x7f0000000340)={{0xfffffff1, 0xee00, 0xffffffffffffffff, 0x1, 0x9, 0x7}, 0xff, 0x5d, 0x8, 0x5, @inferred, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000200), &(0x7f0000000480)="7b221f4a677bf028391ba080ca7678054230e58216139e0475ebed922aa0665f214da470e23b836aad7da3f2d05811dfe46151948506dc71e7bb753624a08d91409e9e7edfc0845a7d2b432e15d92921f9915bbe0d587aec830e3262844ac801ef3d7f0cd34d604f85bc5defa1ae1ea6c3b57a8cf598a3fab95d5046649262650ea2c0841a"})

2m31.483934637s ago: executing program 33 (id=1572):
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip_tables_targets\x00', 0x800, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r0, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x10, 0x2, 0x0)
r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000000), 0x12b002, 0x0)
write$auto(r1, 0x0, 0x1a)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2m26.315029878s ago: executing program 34 (id=1590):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'dummy0\x00'})
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
close_range$auto(r1, r1, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = socket(0xa, 0x1, 0x84)
unshare$auto(0x40000080)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0)
setsockopt$auto_SO_PASSCRED(r2, 0x400002, 0x10, &(0x7f0000000180)='\x01\x00\xae\x16\x01\x00\x00\x00\xca\xf9\x00\x00\xce\xfc(\xfa\xdcJ\x19\x96\xe7v\x9d\xf630\v\x05\x9e+n\xa2AO15#\xec\x16\xdcB\"\xe2=\x02\x03\v\xa7\x10C\xbd#\xd3\x00o\xe5\xd6(\xa2\xe8\x82a\xd2>\x81\xca\x80\x7f\xb2u\x00\x00\x00\x00\xea\xff\xff\xff\x00'/92, 0x6)
socket(0xa, 0x2, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0)
close_range$auto(r3, 0xffffffffffffffff, 0x10009)
socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x2020009, 0x1, 0x24800000000010, r0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
mmap$auto(0x5, 0x8, 0x6, 0x393f, 0xb, 0x0)
sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, r5, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_psample(&(0x7f0000000000), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
close_range$auto(0x0, 0xffffeffe, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pipe$auto(0x0)

2m22.992250281s ago: executing program 5 (id=1629):
mmap$auto(0x0, 0x10000, 0x4000000000df, 0x20000000040eb1, 0x401, 0x300000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0xc2481, 0x0)
write$auto(r1, &(0x7f0000000040)='\xdb\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
r2 = socket(0xa, 0x3, 0x3a)
ioctl$auto(r2, 0x890c, 0x1) (fail_nth: 10)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x84)
r3 = socket(0x18, 0x5, 0x1)
connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)

2m22.496147991s ago: executing program 0 (id=1631):
madvise$auto(0x0, 0x2000040080000003, 0xe)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0)
r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000080", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf25050000000c0003800800c000e0000002"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2400c885)
r1 = socket(0x5, 0xa, 0x4)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x7ff}, 0x7, 0x4008)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_udc.1/udc/dummy_udc.1/uevent\x00', 0x40000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/195, 0xc3)
mmap$auto(0x0, 0x20007, 0xdf, 0xeb1, 0x401, 0x7ffd)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x9, 0x400008, 0xdf, 0x12, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), 0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x42801, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000040)={0x1, '\x00 \x00', 0xc5, 0xffffffff, 0xeda, 0xbb1b, "011586f1c8b112f0059652a7b9638fe9"})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7)
sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x17)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2m21.931338052s ago: executing program 5 (id=1632):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
ioctl$auto_SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xd81, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = socket(0x23, 0x80805, 0x0)
bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x4000000000001, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x20000002, 0xfffffffffffffffe]}, 0x0)
socket(0x1a, 0x4, 0x6)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r4, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [@nested={0x4, 0x4d}, @nested={0x4, 0xdf}, @generic="dd118e6d"]}]}, 0x2c}}, 0x4000000)

2m21.555028695s ago: executing program 0 (id=1633):
mmap$auto(0x7, 0x3, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x20, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0)
dup$auto(r1)
socket(0x1e, 0x0, 0x935a)
setsockopt$auto_SO_REUSEADDR(r0, 0x5428, 0x2, &(0x7f0000000040)=',.@[\x00', 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r2 = clone$auto(0x6db, 0x9, 0x0, 0x0, 0x6)
migrate_pages$auto(r2, 0x4, 0x0, &(0x7f0000000180)=0x2)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x101, 0xffffffffffffffff, 0x3, 0x62, 0x200000000003, 0x4, 0x6d3f, 0x4, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r3, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x3, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x6)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "04200000000000f4a4103b00ca14e1", "e1ff0080", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ff0b00fbf2ffff0000b401", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]})
sysfs$auto(0x2, 0x23, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0)
write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)

2m20.936605256s ago: executing program 5 (id=1634):
mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card0\x00', 0x80202, 0x0)
ioctl$auto(r0, 0x9000643a, 0xc35)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/nr1/dev_id\x00', 0x800, 0x0)
mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000)
sysfs$auto(0x2, 0x41, 0x0)
r1 = fsopen$auto(0x0, 0x1)
fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x3, &(0x7f0000001640)='+\x00', 0x0, 0x0)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x103340, 0x0)
socket(0x1a, 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0)
socket(0x2, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x76e9, 0x1, 0x0, 0x6, 0x91)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
connect$auto(0x3, 0x0, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00'})
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)

2m20.511397664s ago: executing program 0 (id=1635):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
r0 = socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r3 = getpid()
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
sendmsg$auto_NL80211_CMD_SET_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14000000}, 0x20000000)
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x0, 0xe0, 0x6)
r6 = io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x401, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_proc_pid_set_timerslack_ns_operations_base(r6, &(0x7f0000000440)=""/242, 0xf2)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x280380, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)

2m19.911147188s ago: executing program 5 (id=1636):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1c/sub1/hw_params\x00', 0x61480, 0x0) (async)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1c/sub1/hw_params\x00', 0x61480, 0x0)
mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40d1}, 0x4) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40d1}, 0x4)
r1 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x9b01, 0x0)
ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000004c0)={{r0, &(0x7f0000000100)="85e46f1d2f396b5290755569a5d220bb2399fa4a1c8f12e3d325ae370026fe8f30300b9ceeadcc40dc30b03407a6ce1582a546483bfd098de01185a467f7eae190b818427266983c5264a387cbc2e06bd2144fb94c287fc08d016646f7a799688f9113a989d299ecad2aec32fbab8974bf1e02d1d4b40f548dde604c630a49e0b8fda506c2ba68b41dd9bd80eb461c8f35c96cdb18cd9de1c6f9195ba65b5bb6c98777f131c0fcfcd455ef12f4a813e49cd97533a8e50183c6fd8b761095747328ec8db3ff07d6e374d3e7ad2b111fc26ce141e6182d78c87213d52d0627c8bd65905c2fc736e2ee2d5f4a74c6", 0x3, &(0x7f00000002c0)="dbb4d6d671d19448f7a5932b935561fcad5418fb5d39f3327b05f0283c0328044291d6d7f9bf5a2ac7be3a991c2dcdb33d383da901bcc0d958955a2d44877956e1a78da01659d6aa37fae145ee5f96f85a5595c4b99acb9d888a04018a8a8b7ddcf592fdface02295744be6ab6ea22639ce01bfb13adfe6f36bb224f5d07ae97370815d34ff7b31527f01c14cfe40cb82b02898f0fe1a4d78557dacdcb91c1769c198d74ba70c469ee8edbc29b16c687ee57aefac5d28f9cd7030280c23ac70849cb5e618bee654750a93458f804653384da10021a3a4e3a8f2ad24323f77cc26fde14568d346c8730cacd", 0x2, &(0x7f0000000240)="8526518f7c3eefe7e2d1534e9bca03e80ab14ffbf2c2f2c7104552b71c29b0c5879e8c1bcdad63c45b26fa6580b22cc141ab530d87330944fb", &(0x7f00000003c0)=0x9}, {[0x9, 0x4, 0x2, 0x2]}, 0x3, 0x3, &(0x7f0000000400)="e4a449995837914e006646ef3403041820a83759edea9c226c39f5e55d0c778ae5faa8bbb6484823725038a7fc77ffe203b0353ef3aec3ef21c1e5fe96354b528069a49d450348f103ff2cbabcf5069fba152c47b635906aa094850bce6f396b85e4d433dd3455e0d95df78f2ccef9aed6ebd013af6e173cfc2c188643716c9212d5e350dae3b80b8b772061f3da1df477fbd639e7932e9de07b87b144d90a8b41c9fd3e7dd89332304bb557ce4d5a02"})
r2 = epoll_create$auto(0x2)
epoll_pwait$auto(r2, 0x0, 0x3, 0x0, &(0x7f00000000c0)={0x800}, 0x8)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
madvise$auto(0x0, 0x200007, 0x19)
io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) (async)
io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}})
syz_clone(0x5086000, 0x0, 0xffffff27, 0x0, 0x0, 0x0)

2m18.755409313s ago: executing program 5 (id=1637):
r0 = socket(0x2, 0x1, 0x106)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x20000040007, 0x1, 0x16, 0x7, 0x28000)
connect$auto(r0, &(0x7f0000000080)=@hci, 0x54)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x19ab, 0x4)
mmap$auto(0x0, 0xfffffffe00000000, 0xd2a, 0x16, r1, 0x42000008000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x400800, 0x0)
futex$auto(0x0, 0x5, 0x5, 0x0, 0x0, 0x80000001)
pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x4, 0x6, 0x10000008001, 0x4000000000002bcc, 0x3fd6d3f5, 0x0, 0xffffffffffffffff, 0xffffffff, 0xc4e, 0x0, 0x2f, 0x2, 0xa, 0x6]}, 0x0, 0x0, 0x0, 0x0)
futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x9, 0x8, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8000000000008000)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x88142, 0x1d8)
write$auto(r2, 0x0, 0x100082)
ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0)
pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd5/queue/iosched/front_merges\x00', 0xc0202, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/11, 0xb)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x10001, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
umount2$auto(&(0x7f0000000000)='.\x00', 0x8)
socket(0xa, 0x2, 0x0)

2m18.667063817s ago: executing program 35 (id=1607):
socket(0x2, 0x1, 0x120)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
ioprio_get$auto(0x3, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xa00006, 0xfffffffffffffff5, 0x40eb1, 0x602, 0xfffffffffffffffd)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto(0xffffffffffffffff, 0x8983, 0x4)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x3, 0x948b, 0x8000000000003, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb})
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/134, 0x86)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f0000000140)={0x3})
openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20f02, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000002d80)=ANY=[@ANYBLOB="580089", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYRES16=r0], 0x1458}, 0x1, 0x0, 0x0, 0x48000}, 0x20000040)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendfile$auto(0x1, 0x3, 0x0, 0xd551)
shmctl$auto_IPC_STAT(0x9, 0x2, &(0x7f0000000340)={{0xfffffff1, 0xee00, 0xffffffffffffffff, 0x1, 0x9, 0x7}, 0xff, 0x5d, 0x8, 0x5, @inferred, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000200), &(0x7f0000000480)="7b221f4a677bf028391ba080ca7678054230e58216139e0475ebed922aa0665f214da470e23b836aad7da3f2d05811dfe46151948506dc71e7bb753624a08d91409e9e7edfc0845a7d2b432e15d92921f9915bbe0d587aec830e3262844ac801ef3d7f0cd34d604f85bc5defa1ae1ea6c3b57a8cf598a3fab95d5046649262650ea2c0841a"})

2m18.373807283s ago: executing program 0 (id=1639):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x1)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
ioctl$auto(0xffffffffffffffff, 0x4b3a, 0x1)
socket(0x2, 0x2, 0x73)
socket(0xa, 0x1, 0x84)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$auto_UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0x6, 0x4, {0x6, 0x81c6, 0x1ff, {0x2, 0xb}, {0x5, 0x1}, @condition=[{0x4, 0x6, 0x800, 0x5, 0x200}, {0x6, 0xff, 0x7fff, 0x7, 0xb, 0x9}]}, {0x7ff, 0x2, 0x0, {0xf}, {0x0, 0x2}, @rumble={0x2, 0xdc}}})
r1 = io_uring_setup$auto(0x1, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0x1000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x20001, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000)
select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(r3, 0x6a, 0x3, 0x0, 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/lapb0/mtu\x00', 0x88282, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev7\x00', 0x0, 0x0)
ioctl$auto(0x3, 0xc0305615, 0x38)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
userfaultfd$auto(0x1)
close_range$auto(0x2, 0x8, 0x0)

2m18.256042547s ago: executing program 5 (id=1640):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC1\x00', 0x81, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
pidfd_open$auto(0x1, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/tracing_cpumask\x00', 0x688480, 0x0)
socketpair$auto(0x1, 0x1, 0x4, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYRES16=0x0, @ANYBLOB="2586f2bd7000fedbdf2504000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x4000800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r2 = open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0)
ioctl$auto(0x3, 0x40106f52, r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30cdb5c09e8a18000000b967d5cb6c24ecb2e75d9d8a0c1af70f2275a39ca3ef650d693240617fd8d9006f45bf24028bb2169ea416ac0cc757062d5d18da37ef8c66ddf6e95b89f27ca39f760effde16702f080bbb3aa8fe4457013102d9561c571dd5a41d67bfa33ebc813314cb7531c63098f2a63307ee", @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf2501000000040007800c000300ffffffffffffff7f0c0002000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r6 = io_uring_setup$auto(0x6, 0x0)
bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=@bpf_attr_3={0x3, 0x200, 0xdd5, 0x8, 0xa, 0xd, 0x69, 0xff, 0x3, "083760b0c9f9d28a51a8e4b61727954d", 0x0, 0xf2f3, r6, 0x81, 0x7, 0x4, 0x1000, 0x7, 0xffffffff, 0x8, @attach_btf_obj_fd=r6, 0x0, 0x10000, 0x82b1, 0x3ff, 0xc9, r6, r6}, 0xb611)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto_BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000300)=0x81)

2m17.170449367s ago: executing program 0 (id=1641):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0)
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0xfffffffc}, @BATADV_ATTR_THROUGHPUT={0x8, 0x1a, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x8724}, @BATADV_ATTR_TPMETER_COOKIE={0x8, 0xd, 0x4000}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0xfffffffc}, @BATADV_ATTR_FLAG_BEST={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'dummy0\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x40000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd6/queue/zoned\x00', 0x6a980, 0x0)
read$auto(r4, 0x0, 0x6)

2m16.921001914s ago: executing program 0 (id=1642):
mmap$auto(0x5, 0x4, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async)
write$auto(0x1, 0x0, 0x80000000) (async)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000240)="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", 0x159) (async)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) (async, rerun: 64)
preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) (rerun: 64)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0)
write$auto(r0, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xd3\x11\x8b^', 0x100000a3db) (async)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) (async)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
mmap$auto(0xfffffffffffffffe, 0x2000a, 0x10000000000df, 0xebe, 0x401, 0x8000)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
close_range$auto(0x2, 0xa, 0x0) (async)
userfaultfd$auto(0x1) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0x0, 0x2003f0, 0x15)

2m2.378141889s ago: executing program 36 (id=1640):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC1\x00', 0x81, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
pidfd_open$auto(0x1, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/tracing_cpumask\x00', 0x688480, 0x0)
socketpair$auto(0x1, 0x1, 0x4, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYRES16=0x0, @ANYBLOB="2586f2bd7000fedbdf2504000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x4000800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r2 = open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0)
ioctl$auto(0x3, 0x40106f52, r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30cdb5c09e8a18000000b967d5cb6c24ecb2e75d9d8a0c1af70f2275a39ca3ef650d693240617fd8d9006f45bf24028bb2169ea416ac0cc757062d5d18da37ef8c66ddf6e95b89f27ca39f760effde16702f080bbb3aa8fe4457013102d9561c571dd5a41d67bfa33ebc813314cb7531c63098f2a63307ee", @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf2501000000040007800c000300ffffffffffffff7f0c0002000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r6 = io_uring_setup$auto(0x6, 0x0)
bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=@bpf_attr_3={0x3, 0x200, 0xdd5, 0x8, 0xa, 0xd, 0x69, 0xff, 0x3, "083760b0c9f9d28a51a8e4b61727954d", 0x0, 0xf2f3, r6, 0x81, 0x7, 0x4, 0x1000, 0x7, 0xffffffff, 0x8, @attach_btf_obj_fd=r6, 0x0, 0x10000, 0x82b1, 0x3ff, 0xc9, r6, r6}, 0xb611)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto_BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000300)=0x81)

2m1.865327587s ago: executing program 37 (id=1642):
mmap$auto(0x5, 0x4, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async)
write$auto(0x1, 0x0, 0x80000000) (async)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000240)="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", 0x159) (async)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) (async, rerun: 64)
preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) (rerun: 64)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0)
write$auto(r0, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xd3\x11\x8b^', 0x100000a3db) (async)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) (async)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
mmap$auto(0xfffffffffffffffe, 0x2000a, 0x10000000000df, 0xebe, 0x401, 0x8000)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
close_range$auto(0x2, 0xa, 0x0) (async)
userfaultfd$auto(0x1) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0x0, 0x2003f0, 0x15)

7.039019835s ago: executing program 7 (id=1997):
syslog$auto_SYSLOG_ACTION_CONSOLE_OFF(0x9, &(0x7f00000000c0)=',}.)\x9d]+&&&#.$^/+@)&\x00', 0xf)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000000), 0x0)
openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/id\x00', 0x103000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004)
socket$nl_generic(0x10, 0x3, 0x10)
dup$auto(0xffffffffffffffff)
socket(0x2, 0x1, 0x106)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4, 0xda, 0x948b, 0x0, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000005, 0x7, 0x4, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x46cd40, 0x154)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ff0b00fbf2ffff0000b401", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]})
write$auto(0xffffffffffffffff, 0x0, 0x4)

6.035859515s ago: executing program 7 (id=2002):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D3\x00', 0x20400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9)
mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0)
pivot_root$auto(0x0, 0x0)
open(0x0, 0x7ffd, 0x12)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000000, 0xe)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff)
connect$auto(0x3, 0x0, 0x10)
unshare$auto(0x40000080)
mincore$auto(0x3, 0x2, &(0x7f0000000080)=']#@\x00')
r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0)
lseek$auto(r2, 0x0, 0x2)
readv$auto(r2, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1)
getsockopt$auto(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0)
msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000180)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3, {r1}}, 0x58)
msgctl$auto_MSG_STAT(0x3, 0xb, &(0x7f00000007c0)={{0x3, 0xee00, 0x0, 0x8, 0x4, 0xee, 0x1ff}, &(0x7f0000000740)=0x6, &(0x7f0000000780)=0x1, 0x2, 0x6, 0x7, 0xa, 0x4, 0x3ff, 0x1, 0x3, @raw=0x5, @raw=0x52})

4.520325155s ago: executing program 6 (id=2007):
mmap$auto(0xfffffffffffffbff, 0x202000c, 0x3, 0xebd, 0xffffffffffffffff, 0x8010)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x44, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4bfa, 0x1)
r1 = socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@generic={0x25, "171ddc9e725a01635b8d63a3d6c2"}, 0x51)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
madvise$auto(0x9, 0x2003f0, 0x15)
write$auto(r1, 0x0, 0x4000000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x40010)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80000, 0x0)
prctl$auto(0x10003e, 0x1, 0x0, 0x97d8, 0xfffffffffffffffe)
capget$auto(0x0, 0xfffffffffffffffe)
r3 = inotify_init1$auto(0x3000000000000)
ioctl$auto_BLKPBSZGET(r3, 0x127b, 0x0)
write$auto(0xca, &(0x7f0000000180)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2', 0x2d9)
pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x9)
bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@ax25={0x3, @bcast, 0x1}, 0x6a)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/lo/disable_ipv6\x00', 0x40001, 0x0)
lseek$auto(r4, 0xffffffffffffffff, 0x1)

4.398904224s ago: executing program 7 (id=2008):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r1=>r0, 0x7, 0x6}, 0x6, 0x100000)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
readv$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="13d74dfedecfb8cc353a59dcd16aebddd4f60cf5e516ddccdceb4aa98b4b3cd75177cb244153f7c04f7adc469535fe5b207d1450d7559084911bfa817ec6f00aba13c9c1767a9f94a34289cccf7e581da7bb49c8eee6d1a4f84adeb010b9354cb6e0dc9d30ab8a628298dec7", 0x9841}, 0x10001)
setsockopt$auto(r3, 0x114, 0x8, 0x0, 0x3)
socket(0x10, 0x3, 0x4)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r7=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffefb, &(0x7f0000003980)={&(0x7f0000000000)={0x54, r2, 0x301, 0x70bd2b, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_ID={0x0, 0x1, 0x5}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r7}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_ID={0x0, 0x1, 0x4872b6b0}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
ioctl$auto_FS_IOC_GETFLAGS(r8, 0x80086601, 0x8000000000000001)

4.024728407s ago: executing program 9 (id=2011):
socket$nl_generic(0x10, 0x3, 0x10)
pread64$auto(0xffffffffffffffff, 0x0, 0x0, 0x9)
read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, 0x0, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
futex$auto(0x0, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0)
mmap$auto(0x9, 0x5, 0x4000000000e2, 0xeb2, 0xffffffffffffffff, 0x8006)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x301, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
write$auto(r1, &(0x7f00000001c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaGr\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1bN\x87\x16\xd2\x80\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\xbb\xc9\xf9\x83=He\xb8\x1f\xbe\t]\x00\xb0\x9f\xa3\xb9\xac\xff\xb4\x93\x99\x97\n\x89>G\xd2\x94D\x91>\n\xbc\xd6\xbbI\x85\x80w\x8d\x9d\xc6\xc4\xb9\x89\xa0\fl\xed\x8d\xe0\xc85W<H\xf1\xfa\xc5ns2\x1f\x157o\xd7L\xaf\xf1\x9f\x0eS\x93?iP\xc2\'\xa4\xc8\x95\xc8G\xb2\xc4\x17\xee\xba\x9ao\x81\xc7\xa9l\'\x12\x10>\xce\xbe{\xfc\x80\x16\xdc\xf9\x16w\xc2a\xc7*\a\vB,\xa3K\x82\xfc:\x97C\x9b\x1b\x87YHXA\xba\x02.Mpy\x96\xab,$p\x0eP\x8a4\xb9\x02F&\xf4\xb0p\x13\xdc\xce\x12G\xba\xd7\nK(\x17H_\xad\xd7\xd4=\xea\x18,\xc5\\ \xb0\x96}-\x11\xfb\xc3\xc0\xf1 N\"\xa6\xd8\x96\vp\xeb\x01#\x9b\xe9\xaa\xaf\xdd\xba\xa8j\x9cv\x82E-\xda\r\xbfWf\n', 0x98c7)
r2 = socket(0x15, 0x3, 0x8000)
bind$auto(0x3, &(0x7f0000000140)=@sco={0x1f, @none}, 0x7)
connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x81)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/time_for_children\x00')
bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000400)=@test={r0, 0x8, 0x0, 0x4, 0x10000, 0x5, 0x7, 0xfffffff2, 0x71, 0x4, 0x8, 0x81, 0x3, 0x5, 0x7ff}, 0x11)
close_range$auto(r0, 0xffffffffffffffff, 0xcdee)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0)
pread64$auto(r3, 0x0, 0x4000fffffffd, 0x1)
readv$auto(r2, 0x0, 0x0)
socket(0x29, 0x4, 0xfffffffe)
listen$auto(0x3, 0x81)
unshare$auto(0x40000080)

3.899881449s ago: executing program 7 (id=2012):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
r0 = socket(0x29, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r3 = getpid()
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
sendmsg$auto_NL80211_CMD_SET_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14000000}, 0x20000000)
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
lseek$auto(0x3, 0x8, 0x1)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x0, 0xe0, 0x6)
r6 = io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x401, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_proc_pid_set_timerslack_ns_operations_base(r6, &(0x7f0000000440)=""/242, 0xf2)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x280380, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)

3.513260219s ago: executing program 6 (id=2013):
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0)
r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000080", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf25050000000c0003800800c000e0000002"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2400c885)
r1 = socket(0x5, 0xa, 0x4)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x7ff}, 0x7, 0x4008)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9)
socket(0x2, 0x3, 0xa)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_udc.1/udc/dummy_udc.1/uevent\x00', 0x40000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/195, 0xc3)
mmap$auto(0x0, 0x20007, 0xdf, 0xeb1, 0x401, 0x7ffd)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x9, 0x400008, 0xdf, 0x12, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), 0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x42801, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000040)={0x1, '\x00 \x00', 0xc5, 0xffffffff, 0xeda, 0xbb1b, "011586f1c8b112f0059652a7b9638fe9"})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7)
sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x17)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2.672311242s ago: executing program 8 (id=2014):
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x106)
io_uring_setup$auto(0x1, 0x0)
getsockopt$auto(r1, 0x0, 0x33, 0xfffffffffffffffe, 0x0)
sendfile$auto(r0, r0, 0x0, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/7:14/min_ratio\x00', 0x80000, 0x0)

2.475563592s ago: executing program 6 (id=2015):
socket(0x2a, 0x3, 0x0)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0xfffffffffffffe00, 0x0)
mmap$auto(0x40000, 0xe983, 0xffff, 0xeb5, r0, 0x6) (async)
mmap$auto(0xd, 0x81, 0x800000000003, 0xeb1, r0, 0x100000000025fd)
mmap$auto(0x0, 0x2000b, 0xfffff7ffffffff80, 0x19, 0x401, 0x8000) (async, rerun: 64)
close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x3) (async, rerun: 64)
memfd_create$auto(0x0, 0x18) (async)
fcntl$auto(0xff80000000000000, 0x409, 0x13) (async)
fallocate$auto(0xffffffffffffffff, 0x3, 0x2, 0x3ff) (async, rerun: 64)
madvise$auto_MADV_GUARD_INSTALL(0x8, 0x2021000, 0x66) (rerun: 64)
r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r2, &(0x7f0000000300)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x6)
bpf$auto(0x0, 0x0, 0x98)
fcntl$auto(r1, 0x400, 0x1) (async)
mremap$auto(0x100000001ff000, 0xff, 0x843, 0x3, 0xfffff000) (async)
mmap$auto(0x0, 0x92, 0x100000001, 0x10, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0) (async)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1ff000)
r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen_full\x00', 0x18000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:00.0/enable\x00', 0x183043, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
writev$auto(r3, &(0x7f0000000100)={0x0, 0x407114}, 0x8) (async)
r4 = memfd_secret$auto(0x8)
fcntl$auto_F_UNLCK(r4, 0x8, 0x2) (async, rerun: 64)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 64)
io_uring_setup$auto(0x8, &(0x7f0000000340)={0x80000003, 0x10, 0x2, 0x5b, 0x67, 0x2, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x5, 0x8000000000000001}, {0x4100, 0x1, 0x52, 0x5, 0xfff, 0x101, 0x876c5, 0xc9, 0x1}})
socket$nl_generic(0x10, 0x3, 0x10)

2.320597504s ago: executing program 9 (id=2016):
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
r0 = socket(0xa, 0x2, 0x0)
ioctl$auto(r0, 0x8916, 0x91)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x60000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.14/usb38/38-0:1.0/usb38-port6/power/runtime_active_time\x00', 0x64040, 0x0)
sendfile$auto(r3, r3, 0x0, 0x4f64a1d5)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000180)={0x63, 0x0, 0xbde, 0x7fffffffefff, 0xfffffffffffffffe, 0x9702, 0x0, 0xdef904b, 0x4, 0x5f, 0x0, 0x8})
write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv$auto(r5, &(0x7f0000000200)={&(0x7f0000000080), 0x9}, 0x5)
ioctl$auto(r5, 0x1, r3)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01042bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24048040}, 0x10804)
madvise$auto(0x0, 0x400053, 0x9)
writev$auto(0x3, 0x0, 0x8009)
syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x203e, 0x5, 0x0, 0x4, 0xffffffffffffffff)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x20, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto(0x3, 0x5402, r6)
ioctl$auto(0x3, 0x80000541b, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(r1, 0x8, 0x0)
brk$auto(0xffffffffffffff66)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)

2.240854711s ago: executing program 8 (id=2017):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20) (async)
read$auto(r0, 0x0, 0x20)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0xc) (async)
socket(0x10, 0x2, 0xc)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x6, 0x8000000000000006, 0x11, 0x0, 0x7ffffc)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0x4188aec6, r1)
close_range$auto(0x2, 0xa, 0x0) (async)
close_range$auto(0x2, 0xa, 0x0)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r4 = socket(0x80000000000000a, 0x2, 0x0)
r5 = getsockopt$auto(r4, 0x88, 0x65, 0x0, 0x0)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0xfffff007)
fstat$auto(r6, 0x0)
r7 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000005f00), 0x80002, 0x0)
ioctl$auto_SIOCSIFHWADDR(r7, 0x8924, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)

2.087513154s ago: executing program 6 (id=2018):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x6)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x123001, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f00000004c0)="ebe0d540ef48", 0x6)

1.799228896s ago: executing program 8 (id=2019):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sda1\x00', 0xe6e43, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0)
iopl$auto(0x2)
iopl$auto(0x1)
write$auto(r1, &(0x7f0000000340)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xc6i{\x83\xaa\x97m\xb02\xf1\xb0~\xfa\xa0\a0\x06\xa0\xe2\t\x1d\xfe\xb9q\x8e\xe3;\x12A\x14L\xbe\xbc\x9f\xe3\xf9\xad\xdf\xe7\x14\xd1\x8eO\xbd\x1f\x1a\xff\xa0%\xc8>\a\xd5\xe8\xd5\xf6\xa3 \xeb~\x04\n\xdby\x1f\xed\x93`\x81w!\xa0\x96G%\xc9\x97\xea\xc5z\x80\xc9\xead\x8e\x8f\xa3;\x97\xdc\xbf\x80\xa7\x87\xe8lRM\xdf\xcd\xb1\xec\xcba\xd7\xfe\x1a|\xd8\xd9\x05(\xb9v\xb0.\xb6\xb6C\x06\a-q\xdb\xe5\x18\x13?R\xb0\xb4\xca\xf9}\xf7+\tV\xc9g\xf0>\xf7\x8a\xab2\x1b\x1a\xb0\xebVQ\x94\x88\xd7B\xa5\v\x93\xae8(\x94\x1e\x7f\v\x96\xf5\x1e\x04\x1d\x11W\xe6\xb6*\x01\x94\xfcq\xe3\x19\x00Y\x13\xe4', 0x87)
mlock$auto(0x2a, 0x4)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)

1.626727839s ago: executing program 8 (id=2020):
sigaltstack$auto(&(0x7f0000000180)={0x0, 0x0, 0x2}, 0x0)
inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0xab)
kexec_load$auto(0x5, 0x2, 0x0, 0x101)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff)
select$auto(0x1000650c, 0x0, 0x0, 0x0, 0x0)

1.096546686s ago: executing program 8 (id=2021):
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
ioctl$auto_SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xd81, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = socket(0x23, 0x80805, 0x0)
bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x4000000000001, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x20000002, 0xfffffffffffffffe]}, 0x0)
socket(0x1a, 0x4, 0x6)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r4, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [@nested={0x4, 0x4d}, @nested={0x4, 0xdf}, @generic="dd118e6d"]}]}, 0x2c}}, 0x4000000)

1.013637485s ago: executing program 9 (id=2022):
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0)
ioctl$auto(r0, 0x64cd, r0)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000300)={0x8, <r2=>r1, 0xde84, "d73ecab0ba8779320f13336fcbefff83"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x4c, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004840}, 0x4000000)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x5a1a5278a87c8593, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7fff}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x5}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x400}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r7=>0x0})
sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010039bd0f0000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x8004805}, 0x20004804)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, <r8=>0xe3, 0x4000000002, 0x3}, 0x6f4)
r9 = bpf$auto(0x18, &(0x7f0000000040)=@link_create={@prog_fd=r8, @target_fd=r8, 0x7fff, 0x40000, @kprobe_multi={0x6, 0x80000001, 0xb70, 0x733, 0x4}}, 0x92)
r10 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r10, &(0x7f0000000000)="c80d1b50", 0x4)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"})
ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000340)={0x5, 0xa, 0x4, 0x400, 0x80009a, "077c1315ff06c9cc9ff4956913870ef95ebcd43e985b110210346f7f05f8bd5d8b4458ef0054da2aab17208e518d2a9b3c20bd53a710ce119b1b61b0"})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000000c0), r11)
sendmsg$auto_SMC_NETLINK_DUMP_UEID(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="150308007072e6dbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008805}, 0x40c0)
sendmsg$auto_SMC_NETLINK_GET_LGR_SMCR(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r12, 0x100, 0x70bd28, 0x25dfdbfc, {}, "84ada962bc032af8e692016fd93216bf4fa631e1ef71450c"}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8800)

931.187265ms ago: executing program 6 (id=2023):
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
ioctl$auto_SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xd81, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = socket(0x23, 0x80805, 0x0)
bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x4000000000001, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x20000002, 0xfffffffffffffffe]}, 0x0)
socket(0x1a, 0x4, 0x6)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r4, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [@nested={0x4, 0x4d}, @nested={0x4, 0xdf}, @generic="dd118e6d"]}]}, 0x2c}}, 0x4000000)

712.822598ms ago: executing program 7 (id=2024):
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
shutdown$auto(0xffffffffffffffff, 0x6)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r0, 0xc0046209, 0xffffffffffffffff)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x1c9802, 0x0)
pread64$auto(r2, 0x0, 0x100000000, 0x2000002)
ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000bc0)="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")
lstat$auto(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000d40)={0x2400000000000, 0x3, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x2, 0x5, 0x5, 0x9, 0x1, 0x2, 0x5, 0x8000000000000001})
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/raw\x00', 0x200, 0x0)
read$auto(r4, 0x0, 0x7f)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES8=r3, @ANYRES64=r4, @ANYRESHEX=r1, @ANYRES8=r3, @ANYBLOB="bd9a3308d07344b47ff7ea335c0f60a8ac560f350ee6c7fb6935d161157191876373d1ca16cd47bc329c025aa64fb6de3bb91070b2d45d030f62df6bd80abf5e4f1905529ee3656990a19369e6922a50964270fc04c58a1a7e4aedb9c9314b6b411b69a3beb65b07e456ec757efda66aceb803e914004f58d56d8ef7556a663076aa520dc5fecc6fe23e4411a0387712dc370c644441b9b7336202f139e01b0bebe0952269c7861356a782f957d7ed2ece6e46723e930a8ed4edb6446f08bb6625"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x90)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket(0x2, 0x1, 0x0)
r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000002c0), r5)
r8 = fcntl$auto_F_GETOWN(r5, 0x9, 0x80)
sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x94, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x31, 0x1f, '/sys/devices/virtual/bluetooth/hci1/hci1:201\x00'}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xf0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3c}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x8000}, @IEEE802154_ATTR_DEV_NAME={0x14, 0x1, 'wg0\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}]}, 0x94}, 0x1, 0x0, 0x0, 0x4010}, 0x4048844)
sendmsg$auto_TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="88010000", @ANYRES16=r7, @ANYBLOB="000428bd9b59f043060b2607de52342342727000ffdbdf25ef000000540004800c0008800800290035662879e6c18b41", @ANYRES32=0x0, @ANYBLOB="59eff992a401a7c8cd2a2585aef5e9b4f77943ce0c9b7651b57a1288498df2300800d100", @ANYRES32=r8, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x11}, 0x4000000)
sendmsg$auto(r6, &(0x7f0000000ac0)={&(0x7f00000006c0)="51607b58e1cad1311d5d0bc2c6c4499305f70781aadefa86600597cb3c8264f66200291c55552df21904c9e27c4086bde909d51355c98a19d07c3fff06084634f630ed92d68550b8c75c583be5a98a38aff26f703424d4baa06b4fa861cdd71cf6cd5ec09620434c6c59e62e93cdb92b53b93062e5fc558da63a7cb56f44158b39073e64f2295960e9148997d479b3c982ee8389871788943ff73deaaed7f0f825d35c56e44817a3813a45a6127fd3094c5c6bec9974e6baf00b59d2742c1f369d1f63ddcbc01a1d12bc655944ea1a66a38399c2be22e04f9298741fbdae665a9416250f6a7b76", 0x6, &(0x7f0000000540)={&(0x7f00000007c0)="9788af0f701ab2987208216b862137c13f1778d61c71883449c1b5b705dfaeb3295908210545e1ecfc1213abd092e93e46e15f788b5475731663f04ab90ddfc621f55433e9340d7846fd5ce5c9f745496505f9eb5577dcf4389abbac908a530833f2ecd416250d7ff8cda01dcfc122b7cc0b8097894e63cabf1ceb6e28156386868e826d0c1c7ea9071615da9bd10a48afdf53e2c638bb06ba42d73a3d7209781e5bad4cf3e4e9138dbcf87531432a89e8d768b57ef2bde9eaaab188c54e21a9ba0ef31a1888814b7149d0f024e2cc8f43", 0x7}, 0x8, &(0x7f0000000b00)="71d58085cd6d6c538404a4e6b5f0d0cbd32b690db441080f9919c4e4e060d91809184b712df4c068ed6a9f409e71ea5cbaab3bbb2fa351de04eef295cbc99d4f9056ae92b850d13edc75a256750b63e926b046531d44f4a817177599dc2c42329c2145fbc71c0127ed69f3100619cddf024f5271b5fc7d5f9c075c80fc19f87776aa13ec6521cd1477d5b8500758e69906a1dd10d15913aee96ff979745794cdde208c39", 0x2, 0x5}, 0x111)
sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc1}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/net/raw6\x00', 0x500, 0x0)
pread64$auto(r9, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7)
r10 = inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(r10, 0x0, 0x8000)
r11 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x88000, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r10, 0xc02054a5, &(0x7f0000000240)={0x7, r11, 0x10000, "48ad94a9edc22273807d8e3aed5ef354"})

628.846473ms ago: executing program 9 (id=2025):
r0 = pidfd_open$auto(0x0, 0xebd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000)
io_uring_setup$auto(0x1, 0x0)
r1 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
r2 = socket(0x3c, 0x2, 0x3a)
setsockopt$auto(r2, 0x29, 0x1d, &(0x7f0000000040)='!\x00', 0x1ff)
r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd12/sched/dispatch2\x00', 0x121000, 0x0)
pread64$auto(r3, 0x0, 0x68, 0xfc)
ioctl$auto_FS_IOC_RESVSP64(r1, 0x4030582a, 0x2)
set_mempolicy$auto(0x1, &(0x7f0000000080)=0x4, 0x18000000000000)

439.490283ms ago: executing program 6 (id=2026):
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000000), 0x0)
openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/id\x00', 0x103000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004)
socket$nl_generic(0x10, 0x3, 0x10)
dup$auto(0xffffffffffffffff)
socket(0x2, 0x1, 0x106)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4, 0xda, 0x948b, 0x0, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000005, 0x7, 0x4, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mbind$auto(0xafa2, 0x2, 0x8, &(0x7f00000000c0)=0xfffffffffffffffc, 0x6, 0x7fffffff)
r3 = socket(0xa, 0x3, 0x3a)
getsockopt$auto(r3, 0x29, 0xd1, 0x0, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ff0b00fbf2ffff0000b401", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]})
write$auto(0xffffffffffffffff, 0x0, 0x4)

262.081145ms ago: executing program 7 (id=2027):
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0)
r1 = socket(0x10, 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x381000, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0xfc3141, 0x995c0a089a12c547)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop4\x00', 0xc040, 0x0)
ioctl$auto(0x3, 0x1, 0x90000800000402)
write$auto(r3, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x202, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9)
r4 = socket(0xa, 0x5, 0x84)
sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xfffffe36)
ioctl$auto_TUNSETPERSIST(r2, 0x400454cb, &(0x7f0000000080)=0x9)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000140)=""/21, 0x15)
ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000340)="7fb9d5")
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'macsec0\x00'})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
mlockall$auto(0x7)
mmap$auto(0x0, 0x8040000b, 0x101, 0x409b72, 0xffffffffffffffff, 0x8000)
mlock$auto(0x7, 0x4)
mlock$auto(0xcecc, 0xd325)
clone$auto(0x7ffa, 0xacc, 0x0, 0x0, 0xffeffffffffeffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0)

260.977121ms ago: executing program 9 (id=2035):
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket(0xa, 0x801, 0x84)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000040), 0x200}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sysfs$auto(0x2, 0x0, 0x0)
fsopen$auto(0x0, 0x1)
epoll_create$auto(0x4)
close_range$auto(r0, r2, 0x0)
epoll_create$auto(0xffffffff)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000240)=""/140, 0x8c)
epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)

14.767825ms ago: executing program 8 (id=2028):
mbind$auto(0xfffffffffffff000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFNAME={0x14, 0x4, 'pimreg0\x00'}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
socket(0x2c, 0x1, 0x0)
socket(0x5, 0x6, 0x2)
sendmsg$auto_NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="80040000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x480}, 0x1, 0x0, 0x0, 0x4004041}, 0x40100)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x660040, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x43, 0x6, 0x1ffde, 0x5, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0x200, 0x6, 0x10003, 0x83, 0x4, 0x8bd71, 0x7, 0x1ffc, 0x203, 0x400, 0x84, 0x0, 0x5, 0x0, 0x0, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
madvise$auto(0x8, 0x1, 0x15)
r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/total_ps_buffered\x00', 0x141482, 0x0)
read$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0xfffffffffffffdd5)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/bdi/7:14/min_bytes\x00', 0x80302, 0x0)
write$auto(r2, &(0x7f0000000000)='!h\xf3\xec@\xdbS\xcc\x04', 0xa)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080)="af101b8f8a7d3fb11541234c841ad04ef950bd816b1a4f98cd92c3e2a12357557135aad56ced71a1f0d966c275daa2c99a9c0ad115b322b5d8183b96ab92708cc68cbbdf", 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0)
futex$auto(0x0, 0x10d, 0x8, &(0x7f0000000000)={0x9, 0x1}, 0x0, 0x5)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
open(0x0, 0x7ffd, 0x12)
write$auto(0x3, 0x0, 0x100082)
madvise$auto(0x0, 0x200007, 0x19)

0s ago: executing program 9 (id=2029):
mmap$auto(0xffffffffffffffff, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=<r0=>0x2, 0x80}, 0x96)
bpf$auto(0x2, 0x0, 0xb)
bpf$auto(0x15, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2b, 0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x0, 0x0, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty19\x00', 0x800, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
socketpair$auto(0x1d, 0x6, 0x8000001, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r3 = socket(0xa, 0x2, 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
setsockopt$auto_SO_MARK(r0, 0x5, 0x24, &(0x7f0000000000)='/dev/tty19\x00', 0x2898)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8090)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
futex$auto(&(0x7f00000023c0)=0xf6, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0)
mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

kernel console output (not intermixed with test programs):

49692][   T30] audit: type=1800 audit(4294967434.028:45): pid=13823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1598" name="dbroot" dev="configfs" ino=51212 res=0 errno=0
[  616.650143][T13837] : Can't lookup blockdev
[  616.673766][T13837] tipc: Started in network mode
[  616.678853][T13837] tipc: Node identity ee00, cluster identity 4711
[  616.697028][T13837] tipc: Node number set to 60928
[  616.782335][   T30] audit: type=1800 audit(4294967436.260:46): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1610" name="features" dev="configfs" ino=51238 res=0 errno=0
[  616.800978][T13841] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  617.852537][T13849] block nbd0: Unsupported socket: should be TCP or UNIX.
[  620.668488][ T7787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  620.678603][ T7787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  620.687308][ T7787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  620.695717][ T7787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  620.703442][ T7787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  620.888980][T13869] chnl_net:caif_netlink_parms(): no params data found
[  620.974931][T13869] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.982113][T13869] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.989485][T13869] bridge_slave_0: entered allmulticast mode
[  620.997002][T13869] bridge_slave_0: entered promiscuous mode
[  621.005447][T13869] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.012725][T13869] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.019934][T13869] bridge_slave_1: entered allmulticast mode
[  621.028579][T13869] bridge_slave_1: entered promiscuous mode
[  621.063808][T13869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  621.077110][T13869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  621.115840][T13869] team0: Port device team_slave_0 added
[  621.124243][T13869] team0: Port device team_slave_1 added
[  621.156693][T13869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  621.163839][T13869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  621.195658][T13869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  621.208620][T13869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  621.215754][T13869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  621.241930][T13869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  621.291852][T13869] hsr_slave_0: entered promiscuous mode
[  621.298414][T13869] hsr_slave_1: entered promiscuous mode
[  621.305568][T13869] debugfs: 'hsr0' already exists in 'hsr'
[  621.312030][T13869] Cannot create hsr debugfs directory
[  621.417514][T13878] FAULT_INJECTION: forcing a failure.
[  621.417514][T13878] name failslab, interval 1, probability 0, space 0, times 0
[  621.436726][T13878] CPU: 0 UID: 0 PID: 13878 Comm: syz.0.1614 Not tainted syzkaller #0 PREEMPT(full) 
[  621.436762][T13878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  621.436779][T13878] Call Trace:
[  621.436789][T13878]  <TASK>
[  621.436800][T13878]  dump_stack_lvl+0x16c/0x1f0
[  621.436838][T13878]  should_fail_ex+0x512/0x640
[  621.436877][T13878]  ? __kvmalloc_node_noprof+0x12e/0x9c0
[  621.436917][T13878]  should_failslab+0xc2/0x120
[  621.436956][T13878]  __kvmalloc_node_noprof+0x141/0x9c0
[  621.436991][T13878]  ? __pfx_aa_file_perm+0x10/0x10
[  621.437026][T13878]  ? seq_read_iter+0x830/0x12d0
[  621.437051][T13878]  ? __lock_acquire+0xb97/0x1ce0
[  621.437102][T13878]  ? seq_read_iter+0x830/0x12d0
[  621.437125][T13878]  seq_read_iter+0x830/0x12d0
[  621.437164][T13878]  kernfs_fop_read_iter+0x46c/0x610
[  621.437197][T13878]  ? rw_verify_area+0xcf/0x6c0
[  621.437254][T13878]  vfs_read+0x8bf/0xcf0
[  621.437288][T13878]  ? __pfx___mutex_lock+0x10/0x10
[  621.437322][T13878]  ? __pfx_vfs_read+0x10/0x10
[  621.437394][T13878]  ksys_read+0x12a/0x250
[  621.437433][T13878]  ? __pfx_ksys_read+0x10/0x10
[  621.437483][T13878]  do_syscall_64+0xcd/0x4b0
[  621.437525][T13878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.437554][T13878] RIP: 0033:0x7f932638eec9
[  621.437580][T13878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  621.437612][T13878] RSP: 002b:00007f93272de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  621.437644][T13878] RAX: ffffffffffffffda RBX: 00007f93265e5fa0 RCX: 00007f932638eec9
[  621.437666][T13878] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003
[  621.437686][T13878] RBP: 00007f93272de090 R08: 0000000000000000 R09: 0000000000000000
[  621.437706][T13878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.437727][T13878] R13: 00007f93265e6038 R14: 00007f93265e5fa0 R15: 00007ffc7ad8ecf8
[  621.437771][T13878]  </TASK>
[  621.542068][T13869] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  621.656548][T13869] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  621.668805][T13869] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  621.684401][T13869] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  621.738993][T13882] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21
[  621.759456][T13869] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.766804][T13869] bridge0: port 2(bridge_slave_1) entered forwarding state
[  621.775524][T13869] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.782709][T13869] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.902093][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.918028][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.019609][T13888] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22
[  622.040329][T13869] 8021q: adding VLAN 0 to HW filter on device bond0
[  622.105135][T13869] 8021q: adding VLAN 0 to HW filter on device team0
[  622.145010][ T9730] bridge0: port 1(bridge_slave_0) entered blocking state
[  622.152506][ T9730] bridge0: port 1(bridge_slave_0) entered forwarding state
[  622.225157][ T9730] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.232350][ T9730] bridge0: port 2(bridge_slave_1) entered forwarding state
[  622.361447][T13882] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  622.631804][T13869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  622.774708][ T7787] Bluetooth: hci3: command tx timeout
[  623.100662][T13869] veth0_vlan: entered promiscuous mode
[  623.206120][T13869] veth1_vlan: entered promiscuous mode
[  623.272583][T13869] veth0_macvtap: entered promiscuous mode
[  623.292488][T13869] veth1_macvtap: entered promiscuous mode
[  623.351005][T13869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  623.373625][T13869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  623.419842][ T9738] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  623.466352][ T9738] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  623.525910][ T8316] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  623.541945][ T8316] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  623.599702][ T9738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  623.625589][ T9738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  623.683968][ T9730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  623.704003][ T9730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  624.070321][T13910] : Can't lookup blockdev
[  624.118716][T13910] tipc: Started in network mode
[  624.123645][T13910] tipc: Node identity ee00, cluster identity 4711
[  624.133409][T13910] tipc: Node number set to 60928
[  624.192429][T13912] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23
[  624.238627][   T30] audit: type=1800 audit(4294967443.769:47): pid=13913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1613" name="features" dev="configfs" ino=51684 res=0 errno=0
[  624.852891][ T7787] Bluetooth: hci3: command tx timeout
[  626.220801][   T30] audit: type=1800 audit(4294967445.759:48): pid=13943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1621" name="dbroot" dev="configfs" ino=51736 res=0 errno=0
[  626.453942][T12879] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  626.471886][T12879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  626.481559][T12879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  626.490695][T12879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  626.501155][T12879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  626.914881][T12879] Bluetooth: hci3: command tx timeout
[  627.245135][T13975] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(40.1027276857.7388458), cmd(16)
[  627.267508][T13973] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1624'.
[  627.289589][T13972] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(40.1027276857.7388458), cmd(16)
[  627.313011][T13975] FAULT_INJECTION: forcing a failure.
[  627.313011][T13975] name fail_futex, interval 1, probability 0, space 0, times 0
[  627.328520][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'.
[  627.344813][T13975] CPU: 1 UID: 0 PID: 13975 Comm: syz.5.1625 Not tainted syzkaller #0 PREEMPT(full) 
[  627.344854][T13975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  627.344874][T13975] Call Trace:
[  627.344885][T13975]  <TASK>
[  627.344898][T13975]  dump_stack_lvl+0x16c/0x1f0
[  627.344945][T13975]  should_fail_ex+0x512/0x640
[  627.344999][T13975]  get_futex_key+0x1d0/0x1560
[  627.345046][T13975]  ? find_held_lock+0x2b/0x80
[  627.345088][T13975]  ? __pfx_get_futex_key+0x10/0x10
[  627.345132][T13975]  ? __might_fault+0x13b/0x190
[  627.345186][T13975]  futex_wake+0xea/0x530
[  627.345225][T13975]  ? __pfx_futex_wake+0x10/0x10
[  627.345280][T13975]  do_futex+0x1e3/0x350
[  627.345331][T13975]  ? __pfx_do_futex+0x10/0x10
[  627.345394][T13975]  __x64_sys_futex+0x1e0/0x4c0
[  627.345447][T13975]  ? __fget_files+0x20e/0x3c0
[  627.345484][T13975]  ? __pfx___x64_sys_futex+0x10/0x10
[  627.345536][T13975]  ? xfd_validate_state+0x61/0x180
[  627.345582][T13975]  do_syscall_64+0xcd/0x4b0
[  627.345627][T13975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.345661][T13975] RIP: 0033:0x7f05c918eec9
[  627.345694][T13975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  627.345731][T13975] RSP: 002b:00007f05c9f420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  627.345763][T13975] RAX: ffffffffffffffda RBX: 00007f05c93e6098 RCX: 00007f05c918eec9
[  627.345787][T13975] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f05c93e609c
[  627.345810][T13975] RBP: 00007f05c93e6090 R08: 00007f05c9f64000 R09: 0000000000000000
[  627.345833][T13975] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  627.345855][T13975] R13: 00007f05c93e6128 R14: 00007fff65d783e0 R15: 00007fff65d784c8
[  627.345899][T13975]  </TASK>
[  627.432124][T13954] chnl_net:caif_netlink_parms(): no params data found
[  627.859446][T13954] bridge0: port 1(bridge_slave_0) entered blocking state
[  627.866676][T13954] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.883684][T13954] bridge_slave_0: entered allmulticast mode
[  627.895894][T13954] bridge_slave_0: entered promiscuous mode
[  627.909156][T13954] bridge0: port 2(bridge_slave_1) entered blocking state
[  627.916886][T13954] bridge0: port 2(bridge_slave_1) entered disabled state
[  627.924235][T13954] bridge_slave_1: entered allmulticast mode
[  627.967447][T13954] bridge_slave_1: entered promiscuous mode
[  628.053077][T13954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  628.112312][T13954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  628.248682][T13954] team0: Port device team_slave_0 added
[  628.299693][T13954] team0: Port device team_slave_1 added
[  628.583433][T12879] Bluetooth: hci5: command tx timeout
[  628.596084][T13954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  628.615030][T13954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  628.712530][T13954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  628.727800][T13954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  628.736406][T13954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  628.762796][T13954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  628.981986][T12879] Bluetooth: hci3: command tx timeout
[  629.004038][T13954] hsr_slave_0: entered promiscuous mode
[  629.041781][T13954] hsr_slave_1: entered promiscuous mode
[  629.048899][T13954] debugfs: 'hsr0' already exists in 'hsr'
[  629.078292][T13954] Cannot create hsr debugfs directory
[  629.901038][T13954] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  629.953131][T13954] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  629.971047][   T30] audit: type=1800 audit(4294967449.528:49): pid=14017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1631" name="dbroot" dev="configfs" ino=52415 res=0 errno=0
[  630.045949][T13954] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  630.058544][T13954] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  630.534742][T13954] 8021q: adding VLAN 0 to HW filter on device bond0
[  630.652610][T12879] Bluetooth: hci5: command tx timeout
[  630.841200][T13954] 8021q: adding VLAN 0 to HW filter on device team0
[  630.923294][ T9730] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.930523][ T9730] bridge0: port 1(bridge_slave_0) entered forwarding state
[  631.001438][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.008632][ T8316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  631.186032][T13954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  632.165303][T13954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  632.722777][T12879] Bluetooth: hci5: command tx timeout
[  633.132981][T13954] veth0_vlan: entered promiscuous mode
[  633.249563][T13954] veth1_vlan: entered promiscuous mode
[  633.442796][T14062] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  633.549716][T13954] veth0_macvtap: entered promiscuous mode
[  633.589850][T13954] veth1_macvtap: entered promiscuous mode
[  633.655627][T13954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  633.691188][T13954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  633.728432][ T9730] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  633.877410][ T9730] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  633.897392][ T9730] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  633.924601][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  633.931140][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  633.972720][ T9730] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  634.292254][ T7797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  634.353911][ T7787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  634.363404][ T7787] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  634.373266][ T7787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  634.382650][ T7797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.390947][ T7787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  634.400482][ T7787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  634.545772][ T8316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  634.591974][ T8316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.791794][ T7787] Bluetooth: hci5: command tx timeout
[  635.525821][T14069] chnl_net:caif_netlink_parms(): no params data found
[  636.056074][T14069] bridge0: port 1(bridge_slave_0) entered blocking state
[  636.073463][T14069] bridge0: port 1(bridge_slave_0) entered disabled state
[  636.118164][T14069] bridge_slave_0: entered allmulticast mode
[  636.126969][T14069] bridge_slave_0: entered promiscuous mode
[  636.169155][T14069] bridge0: port 2(bridge_slave_1) entered blocking state
[  636.221878][T14069] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.230556][T14069] bridge_slave_1: entered allmulticast mode
[  636.239021][T14069] bridge_slave_1: entered promiscuous mode
[  636.465393][ T7787] Bluetooth: hci6: command tx timeout
[  636.616691][T14069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  636.642502][T14069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  636.875897][T14069] team0: Port device team_slave_0 added
[  636.934794][T14069] team0: Port device team_slave_1 added
[  637.299813][T14069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  637.306941][T14069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  637.404593][T14069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  637.553685][T14069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  637.576699][T14069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  637.646105][T14069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  637.863560][T14069] hsr_slave_0: entered promiscuous mode
[  637.886671][T14069] hsr_slave_1: entered promiscuous mode
[  637.893463][T14069] debugfs: 'hsr0' already exists in 'hsr'
[  637.920451][T14069] Cannot create hsr debugfs directory
[  638.297940][T14096] [U]  
[  638.300828][T14096] [U] 
[  638.303599][T14096] [U] 
[  638.306359][T14096] [U] 
[  638.310210][T14096] [U] 
[  638.312986][T14096] [U] 
[  638.315771][T14096] [U] 
[  638.318528][T14096] [U] 
[  638.322934][T14096] [U] 
[  638.325715][T14096] [U] 
[  638.328471][T14096] [U] 
[  638.331223][T14096] [U] 
[  638.338940][T14096] [U] 
[  638.341723][T14096] [U] 
[  638.344475][T14096] [U] 
[  638.347245][T14096] [U] 
[  638.358265][T14096] [U] 
[  638.361064][T14096] [U] 
[  638.363825][T14096] [U] 
[  638.366588][T14096] [U] 
[  638.389670][T14096] [U] 
[  638.392484][T14096] [U] 
[  638.395252][T14096] [U] 
[  638.398011][T14096] [U] 
[  638.401986][T14096] [U] 
[  638.404793][T14096] [U] 
[  638.407576][T14096] [U] 
[  638.410328][T14096] [U] 
[  638.413998][T14096] [U] 
[  638.416793][T14096] [U] 
[  638.419560][T14096] [U] 
[  638.422321][T14096] [U] 
[  638.426181][T14096] [U] 
[  638.428954][T14096] [U] 
[  638.431711][T14096] [U] 
[  638.434477][T14096] [U] 
[  638.438195][T14096] [U] 
[  638.440961][T14096] [U] 
[  638.443709][T14096] [U] 
[  638.446497][T14096] [U] 
[  638.450079][T14096] [U] 
[  638.452842][T14096] [U] 
[  638.455603][T14096] [U] 
[  638.458354][T14096] [U] 
[  638.482649][T14096] [U] 
[  638.485478][T14096] [U] 
[  638.488246][T14096] [U] 
[  638.491090][T14096] [U] 
[  638.498912][T14096] [U] 
[  638.501702][T14096] [U] 
[  638.504461][T14096] [U] 
[  638.507214][T14096] [U] 
[  638.511210][T14096] [U] 
[  638.513990][T14096] [U] 
[  638.516751][T14096] [U] 
[  638.519681][T14096] [U] 
[  638.523318][T14096] [U] 
[  638.526103][T14096] [U] 
[  638.528860][T14096] [U] 
[  638.531608][T14096] [U] 
[  638.534550][ T7787] Bluetooth: hci6: command tx timeout
[  638.542383][T14096] [U] 
[  638.545184][T14096] [U] 
[  638.547943][T14096] [U] 
[  638.550700][T14096] [U] 
[  638.554328][T14096] [U] 
[  638.555182][T14069] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  638.557093][T14096] [U] 
[  638.566501][T14096] [U] 
[  638.569263][T14096] [U] 
[  638.573990][T14096] [U] 
[  638.576764][T14096] [U] 
[  638.577759][T14069] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  638.579523][T14096] [U] 
[  638.588948][T14096] [U] 
[  638.603230][T14096] [U] 
[  638.606023][T14096] [U] 
[  638.607154][T14069] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  638.608770][T14096] [U] 
[  638.618290][T14096] [U] 
[  638.624434][T14096] [U] 
[  638.627223][T14096] [U] 
[  638.629982][T14096] [U] 
[  638.632736][T14096] [U] 
[  638.635731][T14096] [U] 
[  638.638504][T14096] [U] 
[  638.641273][T14096] [U] 
[  638.644038][T14096] [U] 
[  638.647577][T14096] [U] 
[  638.650351][T14096] [U] 
[  638.650794][T14069] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  638.653100][T14096] [U] 
[  638.662534][T14096] [U] 
[  638.666782][T14096] [U] 
[  638.669558][T14096] [U] 
[  638.672319][T14096] [U] 
[  638.675072][T14096] [U] 
[  638.686501][T14096] [U] 
[  638.689300][T14096] [U] 
[  638.692064][T14096] [U] 
[  638.694822][T14096] [U] 
[  638.716925][T14096] [U] 
[  638.719726][T14096] [U] 
[  638.722497][T14096] [U] 
[  638.725263][T14096] [U] 
[  638.729416][T14096] [U] 
[  638.732204][T14096] [U] 
[  638.734962][T14096] [U] 
[  638.737715][T14096] [U] 
[  638.741869][T14096] [U] 
[  638.744670][T14096] [U] 
[  638.747431][T14096] [U] 
[  638.750181][T14096] [U] 
[  638.754274][T14096] [U] 
[  638.757138][T14096] [U] 
[  638.759888][T14096] [U] 
[  638.762647][T14096] [U] 
[  638.767011][T14096] [U] 
[  638.769792][T14096] [U] 
[  638.772568][T14096] [U] 
[  638.775344][T14096] [U] 
[  638.782936][T14096] [U] 
[  638.785741][T14096] [U] 
[  638.788517][T14096] [U] 
[  638.791286][T14096] [U] 
[  638.799627][T14096] [U] 
[  638.802473][T14096] [U] 
[  638.805247][T14096] [U] 
[  638.808010][T14096] [U] 
[  638.824823][T14096] [U] 
[  638.827628][T14096] [U] 
[  638.830480][T14096] [U] 
[  638.909167][T14069] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.921455][T14093] [U] 
[  638.965632][T14069] 8021q: adding VLAN 0 to HW filter on device team0
[  639.037154][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state
[  639.044442][ T7797] bridge0: port 1(bridge_slave_0) entered forwarding state
[  639.071870][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.079144][ T7797] bridge0: port 2(bridge_slave_1) entered forwarding state
[  639.461390][   T30] audit: type=1800 audit(4294967459.068:50): pid=14113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1646" name="dbroot" dev="configfs" ino=53541 res=0 errno=0
[  639.764829][T14069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  640.618637][ T7787] Bluetooth: hci6: command tx timeout
[  641.036210][T14069] veth0_vlan: entered promiscuous mode
[  641.071382][T14069] veth1_vlan: entered promiscuous mode
[  641.228925][T14069] veth0_macvtap: entered promiscuous mode
[  641.307182][T14069] veth1_macvtap: entered promiscuous mode
[  641.362538][T14069] batman_adv: batadv0: Interface activated: batadv_slave_0
[  641.440019][T14069] batman_adv: batadv0: Interface activated: batadv_slave_1
[  641.519182][ T9741] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.537795][ T9741] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.583355][ T9741] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.598481][ T9741] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.783212][ T9730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.814351][ T9730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.853699][ T8316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.863776][ T8316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.677548][ T7787] Bluetooth: hci6: command tx timeout
[  643.695154][T14145] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  645.672409][T14159] [U]  
[  645.675308][T14159] [U] 
[  645.678076][T14159] [U] 
[  645.680843][T14159] [U] 
[  645.715998][T14159] [U] 
[  645.718797][T14159] [U] 
[  645.721559][T14159] [U] 
[  645.724321][T14159] [U] 
[  645.755969][T14159] [U] 
[  645.758722][T14159] [U] 
[  645.761542][T14159] [U] 
[  645.764257][T14159] [U] 
[  645.793951][T14159] [U] 
[  645.796726][T14159] [U] 
[  645.799475][T14159] [U] 
[  645.802203][T14159] [U] 
[  645.844653][T14159] [U] 
[  645.847442][T14159] [U] 
[  645.850178][T14159] [U] 
[  645.852922][T14159] [U] 
[  645.913097][T14159] [U] 
[  645.915902][T14159] [U] 
[  645.918655][T14159] [U] 
[  645.921411][T14159] [U] 
[  645.942502][T14159] [U] 
[  645.945324][T14159] [U] 
[  645.948081][T14159] [U] 
[  645.950833][T14159] [U] 
[  646.062574][T14159] [U] 
[  646.065328][T14159] [U] 
[  646.068042][T14159] [U] 
[  646.070823][T14159] [U] 
[  646.082301][T14159] [U] 
[  646.085097][T14159] [U] 
[  646.087860][T14159] [U] 
[  646.090623][T14159] [U] 
[  646.095133][T14159] [U] 
[  646.097990][T14159] [U] 
[  646.100767][T14159] [U] 
[  646.103529][T14159] [U] 
[  646.107082][T14159] [U] 
[  646.109841][T14159] [U] 
[  646.112617][T14159] [U] 
[  646.115368][T14159] [U] 
[  646.118380][T14159] [U] 
[  646.121135][T14159] [U] 
[  646.123975][T14159] [U] 
[  646.126730][T14159] [U] 
[  646.134142][T14159] [U] 
[  646.136917][T14159] [U] 
[  646.139669][T14159] [U] 
[  646.142414][T14159] [U] 
[  646.146029][T14159] [U] 
[  646.148797][T14159] [U] 
[  646.151725][T14159] [U] 
[  646.154510][T14159] [U] 
[  646.159594][T14159] [U] 
[  646.162377][T14159] [U] 
[  646.165149][T14159] [U] 
[  646.167948][T14159] [U] 
[  646.201737][T14159] [U] 
[  646.204537][T14159] [U] 
[  646.207290][T14159] [U] 
[  646.210040][T14159] [U] 
[  646.231642][T14159] [U] 
[  646.234414][T14159] [U] 
[  646.237144][T14159] [U] 
[  646.239888][T14159] [U] 
[  646.252957][T14159] [U] 
[  646.255753][T14159] [U] 
[  646.258525][T14159] [U] 
[  646.261266][T14159] [U] 
[  646.327630][T14159] [U] 
[  646.330483][T14159] [U] 
[  646.333249][T14159] [U] 
[  646.336003][T14159] [U] 
[  646.402481][T14159] [U] 
[  646.405274][T14159] [U] 
[  646.408035][T14159] [U] 
[  646.410784][T14159] [U] 
[  646.482110][T14159] [U] 
[  646.484911][T14159] [U] 
[  646.487677][T14159] [U] 
[  646.490454][T14159] [U] 
[  646.499967][T14159] [U] 
[  646.502774][T14159] [U] 
[  646.505527][T14159] [U] 
[  646.508306][T14159] [U] 
[  646.514745][T14159] [U] 
[  646.779008][T14164] ubi0: attaching mtd0
[  646.785965][T14164] ubi0: scanning is finished
[  646.800227][T14164] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  648.088267][T14164] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  650.243015][T14190] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1657'.
[  651.275691][T12879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  651.299750][T12879] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  651.319491][T12879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  651.332583][T12879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  651.341142][T12879] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  651.965249][ T7787] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  651.982587][ T7787] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  651.991175][ T7787] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  652.000569][ T7787] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  652.008719][ T7787] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  653.272124][T14195] chnl_net:caif_netlink_parms(): no params data found
[  653.414187][ T7787] Bluetooth: hci7: command tx timeout
[  653.737771][T14204] chnl_net:caif_netlink_parms(): no params data found
[  654.051307][ T7787] Bluetooth: hci8: command tx timeout
[  654.059674][T14195] bridge0: port 1(bridge_slave_0) entered blocking state
[  654.068494][T14195] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.077437][T14195] bridge_slave_0: entered allmulticast mode
[  654.102138][T14195] bridge_slave_0: entered promiscuous mode
[  654.124206][T14195] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.132559][T14195] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.140020][T14195] bridge_slave_1: entered allmulticast mode
[  654.148715][T14195] bridge_slave_1: entered promiscuous mode
[  654.306765][T14195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  654.399773][T14204] bridge0: port 1(bridge_slave_0) entered blocking state
[  654.407070][T14204] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.430195][T14204] bridge_slave_0: entered allmulticast mode
[  654.439642][T14204] bridge_slave_0: entered promiscuous mode
[  654.469754][T14195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  654.546958][ T9741] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.714972][T14204] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.739494][T14204] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.755297][T14204] bridge_slave_1: entered allmulticast mode
[  654.763680][T14204] bridge_slave_1: entered promiscuous mode
[  654.944628][ T9741] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.970472][T14195] team0: Port device team_slave_0 added
[  654.980631][T14204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  654.995472][T14195] team0: Port device team_slave_1 added
[  655.058541][T14204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  655.119419][T14243] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  655.252903][ T9741] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.335191][T14204] team0: Port device team_slave_0 added
[  655.345516][T14195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  655.363034][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.384823][   T30] audit: type=1800 audit(4294967475.081:51): pid=14247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1667" name="dbroot" dev="configfs" ino=54108 res=0 errno=0
[  655.443296][T14195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  655.484162][ T7787] Bluetooth: hci7: command tx timeout
[  655.519000][ T9741] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.553643][T14204] team0: Port device team_slave_1 added
[  655.587415][T14195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  655.595799][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.670033][T14195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  655.778268][T14204] batman_adv: batadv0: Adding interface: batadv_slave_0
[  655.785883][T14204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.821669][T14204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  655.871013][T14204] batman_adv: batadv0: Adding interface: batadv_slave_1
[  655.888697][T14204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.927425][T14204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  656.120506][ T7787] Bluetooth: hci8: command tx timeout
[  656.250621][T14195] hsr_slave_0: entered promiscuous mode
[  656.257823][T14195] hsr_slave_1: entered promiscuous mode
[  656.264609][T14195] debugfs: 'hsr0' already exists in 'hsr'
[  656.270610][T14195] Cannot create hsr debugfs directory
[  656.432507][T14204] hsr_slave_0: entered promiscuous mode
[  656.449847][T14204] hsr_slave_1: entered promiscuous mode
[  656.456493][T14204] debugfs: 'hsr0' already exists in 'hsr'
[  656.464575][T14204] Cannot create hsr debugfs directory
[  656.696311][ T9741] bridge_slave_1: left allmulticast mode
[  656.705575][ T9741] bridge_slave_1: left promiscuous mode
[  656.713493][ T9741] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.716038][T14264] FAULT_INJECTION: forcing a failure.
[  656.716038][T14264] name failslab, interval 1, probability 0, space 0, times 0
[  656.736472][T14264] CPU: 1 UID: 0 PID: 14264 Comm: syz.6.1671 Not tainted syzkaller #0 PREEMPT(full) 
[  656.736520][T14264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  656.736543][T14264] Call Trace:
[  656.736555][T14264]  <TASK>
[  656.736570][T14264]  dump_stack_lvl+0x16c/0x1f0
[  656.736624][T14264]  should_fail_ex+0x512/0x640
[  656.736673][T14264]  ? __kmalloc_cache_noprof+0x5f/0x780
[  656.736714][T14264]  should_failslab+0xc2/0x120
[  656.736763][T14264]  __kmalloc_cache_noprof+0x72/0x780
[  656.736798][T14264]  ? kasan_save_track+0x14/0x30
[  656.736838][T14264]  ? __kasan_kmalloc+0xaa/0xb0
[  656.736877][T14264]  ? apply_subsystem_event_filter+0x32d/0x17e0
[  656.736943][T14264]  ? apply_subsystem_event_filter+0x32d/0x17e0
[  656.736999][T14264]  apply_subsystem_event_filter+0x32d/0x17e0
[  656.737068][T14264]  ? __pfx_apply_subsystem_event_filter+0x10/0x10
[  656.737143][T14264]  ? _copy_from_user+0x59/0xd0
[  656.737203][T14264]  subsystem_filter_write+0x95/0x120
[  656.737260][T14264]  ? __pfx_subsystem_filter_write+0x10/0x10
[  656.737314][T14264]  vfs_write+0x29d/0x11d0
[  656.737362][T14264]  ? __pfx___mutex_lock+0x10/0x10
[  656.737407][T14264]  ? __pfx_vfs_write+0x10/0x10
[  656.737469][T14264]  ? __fget_files+0x20e/0x3c0
[  656.737521][T14264]  ksys_write+0x12a/0x250
[  656.737562][T14264]  ? __pfx_ksys_write+0x10/0x10
[  656.737617][T14264]  do_syscall_64+0xcd/0x4b0
[  656.737664][T14264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.737701][T14264] RIP: 0033:0x7f8dacd8eec9
[  656.737729][T14264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  656.737764][T14264] RSP: 002b:00007f8dadbc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  656.737797][T14264] RAX: ffffffffffffffda RBX: 00007f8dacfe5fa0 RCX: 00007f8dacd8eec9
[  656.737820][T14264] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006
[  656.737840][T14264] RBP: 00007f8dace11f91 R08: 0000000000000000 R09: 0000000000000000
[  656.737859][T14264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  656.737879][T14264] R13: 00007f8dacfe6038 R14: 00007f8dacfe5fa0 R15: 00007ffc128da418
[  656.737923][T14264]  </TASK>
[  656.961845][ T9741] bridge_slave_0: left allmulticast mode
[  656.970247][ T9741] bridge_slave_0: left promiscuous mode
[  656.976466][ T9741] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.474132][   T30] audit: type=1800 audit(4294967477.171:52): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1674" name="dbroot" dev="configfs" ino=54214 res=0 errno=0
[  657.553344][ T7787] Bluetooth: hci7: command tx timeout
[  657.707140][ T9741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  657.742577][ T9741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  657.755675][ T9741] bond0 (unregistering): Released all slaves
[  657.952182][ T9741] tipc: Left network mode
[  658.191849][ T7787] Bluetooth: hci8: command tx timeout
[  659.440095][ T9741] hsr_slave_0: left promiscuous mode
[  659.467532][ T9741] hsr_slave_1: left promiscuous mode
[  659.487845][ T9741] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  659.498488][ T9741] batman_adv: batadv0: Removing interface: batadv_slave_0
[  659.514675][ T9741] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  659.536631][ T9741] batman_adv: batadv0: Removing interface: batadv_slave_1
[  659.613467][ T9741] veth1_macvtap: left promiscuous mode
[  659.622874][ T7787] Bluetooth: hci7: command tx timeout
[  659.638849][ T9741] veth0_macvtap: left promiscuous mode
[  659.657098][ T9741] veth1_vlan: left promiscuous mode
[  659.666235][ T9741] veth0_vlan: left promiscuous mode
[  660.258519][ T7787] Bluetooth: hci8: command tx timeout
[  660.403797][T14311] binder: 14310:14311 ioctl c018620c 0 returned -14
[  660.849183][ T9741] team0 (unregistering): Port device team_slave_1 removed
[  660.911028][ T9741] team0 (unregistering): Port device team_slave_0 removed
[  661.481766][T14299] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  661.523480][T14299] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  661.534055][T14299] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  661.654852][T14195] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  661.746115][T14195] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  661.780979][T14195] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  661.869769][T14195] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  662.175873][T14204] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  662.214193][T14204] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  662.266469][T14204] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  662.306827][T14204] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  663.019029][T14204] 8021q: adding VLAN 0 to HW filter on device bond0
[  663.099160][T14195] 8021q: adding VLAN 0 to HW filter on device bond0
[  663.169281][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1683'.
[  663.373598][T14204] 8021q: adding VLAN 0 to HW filter on device team0
[  663.450680][T14195] 8021q: adding VLAN 0 to HW filter on device team0
[  663.511201][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.518453][ T9741] bridge0: port 1(bridge_slave_0) entered forwarding state
[  663.641412][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.648578][ T7797] bridge0: port 2(bridge_slave_1) entered forwarding state
[  663.695505][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.702822][ T7797] bridge0: port 1(bridge_slave_0) entered forwarding state
[  663.790673][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.797828][ T7797] bridge0: port 2(bridge_slave_1) entered forwarding state
[  664.932277][T14204] 8021q: adding VLAN 0 to HW filter on device batadv0
[  665.122167][T14195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  665.557564][   T30] audit: type=1804 audit(4294967485.303:53): pid=14398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1685" name="/newroot/26/file0" dev="tmpfs" ino=151 res=1 errno=0
[  665.648947][   T30] audit: type=1804 audit(4294967485.344:54): pid=14398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1685" name="/newroot/26/file0" dev="tmpfs" ino=151 res=1 errno=0
[  666.543256][T14195] veth0_vlan: entered promiscuous mode
[  666.670620][T14195] veth1_vlan: entered promiscuous mode
[  666.676556][   T30] audit: type=1800 audit(4294967486.399:55): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1687" name="dbroot" dev="configfs" ino=55843 res=0 errno=0
[  666.694801][T14204] veth0_vlan: entered promiscuous mode
[  666.801606][T14204] veth1_vlan: entered promiscuous mode
[  666.914925][T14195] veth0_macvtap: entered promiscuous mode
[  666.941469][T14195] veth1_macvtap: entered promiscuous mode
[  667.049224][T14195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  667.092401][T14195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  667.204023][T14204] veth0_macvtap: entered promiscuous mode
[  667.227728][ T9857] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  667.283239][ T9857] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  667.351653][ T9857] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  667.364458][ T8316] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  667.389316][T14204] veth1_macvtap: entered promiscuous mode
[  667.593420][T14204] batman_adv: batadv0: Interface activated: batadv_slave_0
[  667.755330][T14204] batman_adv: batadv0: Interface activated: batadv_slave_1
[  667.839946][T10087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.847813][T10087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  668.051121][ T9730] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  668.066151][ T9730] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  668.154787][ T7797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  668.214348][ T9730] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  668.245082][ T7797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  668.296305][ T9730] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  668.799693][ T7794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  668.852882][ T7794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.083613][ T8316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.167555][ T8316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.369788][T14472] FAULT_INJECTION: forcing a failure.
[  669.369788][T14472] name fail_futex, interval 1, probability 0, space 0, times 0
[  669.389293][T14472] CPU: 1 UID: 0 PID: 14472 Comm: syz.7.1693 Not tainted syzkaller #0 PREEMPT(full) 
[  669.389337][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  669.389357][T14472] Call Trace:
[  669.389368][T14472]  <TASK>
[  669.389381][T14472]  dump_stack_lvl+0x16c/0x1f0
[  669.389428][T14472]  should_fail_ex+0x512/0x640
[  669.389481][T14472]  get_futex_key+0x1d0/0x1560
[  669.389539][T14472]  ? __pfx_get_futex_key+0x10/0x10
[  669.389584][T14472]  ? __mutex_trylock_common+0xe9/0x250
[  669.389650][T14472]  futex_wake+0xea/0x530
[  669.389689][T14472]  ? __pfx_futex_wake+0x10/0x10
[  669.389740][T14472]  do_futex+0x1e3/0x350
[  669.389790][T14472]  ? __pfx_do_futex+0x10/0x10
[  669.389837][T14472]  ? __might_fault+0xe3/0x190
[  669.389884][T14472]  mm_release+0x24e/0x300
[  669.389927][T14472]  do_exit+0x68e/0x2bf0
[  669.389965][T14472]  ? __pfx_do_exit+0x10/0x10
[  669.389995][T14472]  ? do_raw_spin_lock+0x12c/0x2b0
[  669.390029][T14472]  ? find_held_lock+0x2b/0x80
[  669.390076][T14472]  do_group_exit+0xd3/0x2a0
[  669.390118][T14472]  get_signal+0x2671/0x26d0
[  669.390166][T14472]  ? kmem_cache_free+0x2d4/0x6c0
[  669.390213][T14472]  ? __pfx_get_signal+0x10/0x10
[  669.390255][T14472]  ? do_futex+0x122/0x350
[  669.390303][T14472]  ? __pfx_do_futex+0x10/0x10
[  669.390355][T14472]  arch_do_signal_or_restart+0x8f/0x790
[  669.390405][T14472]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  669.390474][T14472]  exit_to_user_mode_loop+0x85/0x130
[  669.390508][T14472]  do_syscall_64+0x419/0x4b0
[  669.390552][T14472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.390584][T14472] RIP: 0033:0x7fd6d398eec9
[  669.390610][T14472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  669.390641][T14472] RSP: 002b:00007fd6d47790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  669.390672][T14472] RAX: fffffffffffffe00 RBX: 00007fd6d3be5fa8 RCX: 00007fd6d398eec9
[  669.390695][T14472] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd6d3be5fa8
[  669.390716][T14472] RBP: 00007fd6d3be5fa0 R08: 0000000000000000 R09: 0000000000000000
[  669.390736][T14472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  669.390755][T14472] R13: 00007fd6d3be6038 R14: 00007ffcdd032680 R15: 00007ffcdd032768
[  669.390796][T14472]  </TASK>
[  670.088001][   T30] audit: type=1800 audit(4294967489.857:56): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1695" name="dbroot" dev="configfs" ino=54762 res=0 errno=0
[  670.857132][T14501] device-mapper: ioctl: Invalid ioctl structure: name ÿ, dev 400007f00010006
[  672.037462][T14513] Invalid ELF header magic: != ELF
[  674.742889][   T30] audit: type=1800 audit(4294967494.531:57): pid=14551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1706" name="dbroot" dev="configfs" ino=54823 res=0 errno=0
[  674.763148][    C0] vkms_vblank_simulate: vblank timer overrun
[  678.540523][T14609] FAULT_INJECTION: forcing a failure.
[  678.540523][T14609] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  678.593088][T14609] CPU: 1 UID: 0 PID: 14609 Comm: syz.9.1720 Not tainted syzkaller #0 PREEMPT(full) 
[  678.593138][T14609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  678.593159][T14609] Call Trace:
[  678.593171][T14609]  <TASK>
[  678.593185][T14609]  dump_stack_lvl+0x16c/0x1f0
[  678.593234][T14609]  should_fail_ex+0x512/0x640
[  678.593290][T14609]  should_fail_alloc_page+0xe7/0x130
[  678.593345][T14609]  prepare_alloc_pages+0x3c2/0x610
[  678.593412][T14609]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  678.593468][T14609]  ? find_held_lock+0x2b/0x80
[  678.593514][T14609]  ? is_bpf_text_address+0x8a/0x1a0
[  678.593576][T14609]  ? bpf_ksym_find+0x124/0x1c0
[  678.593622][T14609]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  678.593666][T14609]  ? is_bpf_text_address+0x94/0x1a0
[  678.593719][T14609]  ? kernel_text_address+0x8d/0x100
[  678.593758][T14609]  ? __kernel_text_address+0xd/0x40
[  678.593798][T14609]  ? unwind_get_return_address+0x59/0xa0
[  678.593860][T14609]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  678.593904][T14609]  ? policy_nodemask+0xea/0x4e0
[  678.593959][T14609]  alloc_pages_mpol+0x1fb/0x550
[  678.594010][T14609]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  678.594061][T14609]  ? kasan_save_stack+0x33/0x60
[  678.594104][T14609]  ? kasan_save_track+0x14/0x30
[  678.594145][T14609]  ? __kasan_kmalloc+0xaa/0xb0
[  678.594185][T14609]  ? __get_vm_area_node+0x101/0x330
[  678.594244][T14609]  alloc_pages_noprof+0x131/0x390
[  678.594301][T14609]  get_free_pages_noprof+0x10/0xb0
[  678.594346][T14609]  kasan_populate_vmalloc+0x9f/0x2d0
[  678.594398][T14609]  ? alloc_vmap_area+0x8b5/0x29e0
[  678.594452][T14609]  alloc_vmap_area+0x960/0x29e0
[  678.594519][T14609]  ? __pfx_alloc_vmap_area+0x10/0x10
[  678.594579][T14609]  __get_vm_area_node+0x1ca/0x330
[  678.594639][T14609]  __vmalloc_node_range_noprof+0x271/0x1480
[  678.594696][T14609]  ? n_tty_open+0x1a/0x170
[  678.594729][T14609]  ? look_up_lock_class+0x59/0x150
[  678.594783][T14609]  ? n_tty_open+0x1a/0x170
[  678.594828][T14609]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  678.594884][T14609]  ? console_unlock+0x184/0x210
[  678.594925][T14609]  ? __pfx_console_unlock+0x10/0x10
[  678.594972][T14609]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  678.595014][T14609]  ? n_tty_open+0x1a/0x170
[  678.595044][T14609]  __vmalloc_node_noprof+0xad/0xf0
[  678.595099][T14609]  ? n_tty_open+0x1a/0x170
[  678.595132][T14609]  ? __pfx_n_tty_open+0x10/0x10
[  678.595168][T14609]  n_tty_open+0x1a/0x170
[  678.595200][T14609]  ? __pfx_n_tty_open+0x10/0x10
[  678.595232][T14609]  tty_ldisc_open+0x9c/0x120
[  678.595275][T14609]  tty_ldisc_setup+0x40/0x100
[  678.595324][T14609]  tty_init_dev.part.0+0x1ec/0x500
[  678.595383][T14609]  tty_open+0xa4f/0xf90
[  678.595472][T14609]  ? __pfx_tty_open+0x10/0x10
[  678.595533][T14609]  ? chrdev_open+0x10b/0x6a0
[  678.595586][T14609]  ? __pfx_tty_open+0x10/0x10
[  678.595638][T14609]  chrdev_open+0x231/0x6a0
[  678.595682][T14609]  ? __pfx_apparmor_file_open+0x10/0x10
[  678.595735][T14609]  ? __pfx_chrdev_open+0x10/0x10
[  678.595784][T14609]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  678.595835][T14609]  do_dentry_open+0x97f/0x1530
[  678.595879][T14609]  ? __pfx_chrdev_open+0x10/0x10
[  678.595935][T14609]  vfs_open+0x82/0x3f0
[  678.595994][T14609]  path_openat+0x1de4/0x2cb0
[  678.596052][T14609]  ? __pfx_path_openat+0x10/0x10
[  678.596105][T14609]  do_filp_open+0x20b/0x470
[  678.596148][T14609]  ? __pfx_do_filp_open+0x10/0x10
[  678.596226][T14609]  ? alloc_fd+0x471/0x7d0
[  678.596278][T14609]  do_sys_openat2+0x11b/0x1d0
[  678.596332][T14609]  ? __pfx_do_sys_openat2+0x10/0x10
[  678.596420][T14609]  __x64_sys_openat+0x174/0x210
[  678.596481][T14609]  ? __pfx___x64_sys_openat+0x10/0x10
[  678.596556][T14609]  do_syscall_64+0xcd/0x4b0
[  678.596605][T14609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  678.596642][T14609] RIP: 0033:0x7fde3e98eec9
[  678.596669][T14609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  678.596701][T14609] RSP: 002b:00007fde3f7f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  678.596731][T14609] RAX: ffffffffffffffda RBX: 00007fde3ebe5fa0 RCX: 00007fde3e98eec9
[  678.596752][T14609] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  678.596775][T14609] RBP: 00007fde3ea11f91 R08: 0000000000000000 R09: 0000000000000000
[  678.596796][T14609] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  678.596814][T14609] R13: 00007fde3ebe6038 R14: 00007fde3ebe5fa0 R15: 00007ffc3da49bc8
[  678.596853][T14609]  </TASK>
[  678.599444][T14609] syz.9.1720: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  679.168876][T14609] CPU: 1 UID: 0 PID: 14609 Comm: syz.9.1720 Not tainted syzkaller #0 PREEMPT(full) 
[  679.168921][T14609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  679.168940][T14609] Call Trace:
[  679.168952][T14609]  <TASK>
[  679.168962][T14609]  dump_stack_lvl+0x16c/0x1f0
[  679.168997][T14609]  warn_alloc+0x248/0x3a0
[  679.169026][T14609]  ? __pfx_warn_alloc+0x10/0x10
[  679.169054][T14609]  ? __get_vm_area_node+0x2cd/0x330
[  679.169096][T14609]  ? __get_vm_area_node+0x2cd/0x330
[  679.169130][T14609]  ? __get_vm_area_node+0x1dc/0x330
[  679.169164][T14609]  ? __get_vm_area_node+0x208/0x330
[  679.169206][T14609]  __vmalloc_node_range_noprof+0xaf5/0x1480
[  679.169245][T14609]  ? look_up_lock_class+0x59/0x150
[  679.169282][T14609]  ? n_tty_open+0x1a/0x170
[  679.169313][T14609]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  679.169358][T14609]  ? console_unlock+0x184/0x210
[  679.169387][T14609]  ? __pfx_console_unlock+0x10/0x10
[  679.169419][T14609]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  679.169448][T14609]  ? n_tty_open+0x1a/0x170
[  679.169470][T14609]  __vmalloc_node_noprof+0xad/0xf0
[  679.169507][T14609]  ? n_tty_open+0x1a/0x170
[  679.169530][T14609]  ? __pfx_n_tty_open+0x10/0x10
[  679.169554][T14609]  n_tty_open+0x1a/0x170
[  679.169576][T14609]  ? __pfx_n_tty_open+0x10/0x10
[  679.169598][T14609]  tty_ldisc_open+0x9c/0x120
[  679.169631][T14609]  tty_ldisc_setup+0x40/0x100
[  679.169666][T14609]  tty_init_dev.part.0+0x1ec/0x500
[  679.169708][T14609]  tty_open+0xa4f/0xf90
[  679.169751][T14609]  ? __pfx_tty_open+0x10/0x10
[  679.169789][T14609]  ? chrdev_open+0x10b/0x6a0
[  679.169825][T14609]  ? __pfx_tty_open+0x10/0x10
[  679.169862][T14609]  chrdev_open+0x231/0x6a0
[  679.169893][T14609]  ? __pfx_apparmor_file_open+0x10/0x10
[  679.169931][T14609]  ? __pfx_chrdev_open+0x10/0x10
[  679.169970][T14609]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  679.170016][T14609]  do_dentry_open+0x97f/0x1530
[  679.170068][T14609]  ? __pfx_chrdev_open+0x10/0x10
[  679.170118][T14609]  vfs_open+0x82/0x3f0
[  679.170172][T14609]  path_openat+0x1de4/0x2cb0
[  679.170228][T14609]  ? __pfx_path_openat+0x10/0x10
[  679.170278][T14609]  do_filp_open+0x20b/0x470
[  679.170326][T14609]  ? __pfx_do_filp_open+0x10/0x10
[  679.170401][T14609]  ? alloc_fd+0x471/0x7d0
[  679.170450][T14609]  do_sys_openat2+0x11b/0x1d0
[  679.170503][T14609]  ? __pfx_do_sys_openat2+0x10/0x10
[  679.170573][T14609]  __x64_sys_openat+0x174/0x210
[  679.170628][T14609]  ? __pfx___x64_sys_openat+0x10/0x10
[  679.170701][T14609]  do_syscall_64+0xcd/0x4b0
[  679.170748][T14609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.170782][T14609] RIP: 0033:0x7fde3e98eec9
[  679.170810][T14609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  679.170840][T14609] RSP: 002b:00007fde3f7f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  679.170869][T14609] RAX: ffffffffffffffda RBX: 00007fde3ebe5fa0 RCX: 00007fde3e98eec9
[  679.170892][T14609] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  679.170914][T14609] RBP: 00007fde3ea11f91 R08: 0000000000000000 R09: 0000000000000000
[  679.170935][T14609] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  679.170955][T14609] R13: 00007fde3ebe6038 R14: 00007fde3ebe5fa0 R15: 00007ffc3da49bc8
[  679.171001][T14609]  </TASK>
[  679.552618][T14609] Mem-Info:
[  679.555804][T14609] active_anon:28909 inactive_anon:0 isolated_anon:0
[  679.555804][T14609]  active_file:10001 inactive_file:53063 isolated_file:0
[  679.555804][T14609]  unevictable:768 dirty:4479 writeback:512
[  679.555804][T14609]  slab_reclaimable:12824 slab_unreclaimable:109475
[  679.555804][T14609]  mapped:60654 shmem:15519 pagetables:1574
[  679.555804][T14609]  sec_pagetables:0 bounce:0
[  679.555804][T14609]  kernel_misc_reclaimable:0
[  679.555804][T14609]  free:1227602 free_pcp:19028 free_cma:0
[  679.602209][T14609] Node 0 active_anon:115636kB inactive_anon:0kB active_file:40304kB inactive_file:212120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:240216kB dirty:17916kB writeback:1792kB shmem:60540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:30720kB kernel_stack:14328kB pagetables:6152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  679.635012][T14609] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  679.665377][T14609] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  679.695301][T14609] lowmem_reserve[]: 0 2488 2488 2488 2488
[  679.701128][T14609] Node 0 DMA32 free:1004436kB boost:0kB min:34396kB low:42992kB high:51588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:115636kB inactive_anon:0kB active_file:40304kB inactive_file:212120kB unevictable:1536kB writepending:19912kB zspages:508kB present:3129332kB managed:2547976kB mlocked:0kB bounce:0kB free_pcp:55624kB local_pcp:39176kB free_cma:0kB
[  679.735380][T14609] lowmem_reserve[]: 0 0 0 0 0
[  679.740155][T14609] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  679.770032][T14609] lowmem_reserve[]: 0 0 0 0 0
[  679.774792][T14609] Node 1 Normal free:3890612kB boost:0kB min:55500kB low:69372kB high:83244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20012kB local_pcp:7564kB free_cma:0kB
[  679.807368][T14609] lowmem_reserve[]: 0 0 0 0 0
[  679.812125][T14609] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  679.824865][T14609] Node 0 DMA32: 2*4kB (ME) 0*8kB 10*16kB (E) 8*32kB (UME) 378*64kB (ME) 356*128kB (UM) 245*256kB (UME) 172*512kB (ME) 97*1024kB (UM) 0*2048kB 167*4096kB (M) = 1004328kB
[  679.927349][T14609] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  680.244247][T14609] Node 1 Normal: 193*4kB (UME) 38*8kB (UME) 38*16kB (UME) 217*32kB (UME) 58*64kB (UME) 13*128kB (UME) 5*256kB (UME) 5*512kB (UME) 4*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3890612kB
[  680.319183][T14609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  680.374735][T14609] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  680.486912][T14609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  680.673600][T14609] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  680.754490][T14609] 79791 total pagecache pages
[  680.835905][T14609] 8 pages in swap cache
[  680.840232][T14609] Free swap  = 124824kB
[  680.876698][T14609] Total swap = 124996kB
[  680.900327][T14609] 2097051 pages RAM
[  680.930533][T14609] 0 pages HighMem/MovableOnly
[  680.970870][T14609] 428415 pages reserved
[  681.009951][T14609] 0 pages cma reserved
[  681.037567][T14609] tty tty26: ldisc open failed (-12), clearing slot 25
[  681.551425][T14642] netlink: 338 bytes leftover after parsing attributes in process `syz.6.1724'.
[  686.611828][T14730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  687.131561][T14723] zswap: compressor û not available
[  688.383400][T14751] FAULT_INJECTION: forcing a failure.
[  688.383400][T14751] name failslab, interval 1, probability 0, space 0, times 0
[  688.397498][T14751] CPU: 1 UID: 0 PID: 14751 Comm: syz.8.1736 Not tainted syzkaller #0 PREEMPT(full) 
[  688.397532][T14751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  688.397548][T14751] Call Trace:
[  688.397557][T14751]  <TASK>
[  688.397566][T14751]  dump_stack_lvl+0x16c/0x1f0
[  688.397601][T14751]  should_fail_ex+0x512/0x640
[  688.397637][T14751]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  688.397667][T14751]  should_failslab+0xc2/0x120
[  688.397702][T14751]  kmem_cache_alloc_noprof+0x75/0x6e0
[  688.397729][T14751]  ? copy_fs_struct+0x49/0x340
[  688.397772][T14751]  ? copy_fs_struct+0x49/0x340
[  688.397806][T14751]  copy_fs_struct+0x49/0x340
[  688.397845][T14751]  copy_process+0x3254/0x76a0
[  688.397880][T14751]  ? __pfx___futex_wait+0x10/0x10
[  688.397916][T14751]  ? __pfx_copy_process+0x10/0x10
[  688.397951][T14751]  ? futex_private_hash_put+0x176/0x300
[  688.397988][T14751]  ? futex_private_hash_put+0x18a/0x300
[  688.398027][T14751]  kernel_clone+0xfc/0x930
[  688.398064][T14751]  ? __pfx_kernel_clone+0x10/0x10
[  688.398115][T14751]  __do_sys_clone+0xce/0x120
[  688.398150][T14751]  ? __pfx___do_sys_clone+0x10/0x10
[  688.398198][T14751]  ? xfd_validate_state+0x61/0x180
[  688.398231][T14751]  do_syscall_64+0xcd/0x4b0
[  688.398264][T14751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.398288][T14751] RIP: 0033:0x7fe21b58eec9
[  688.398307][T14751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  688.398331][T14751] RSP: 002b:00007fe21c49a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  688.398354][T14751] RAX: ffffffffffffffda RBX: 00007fe21b7e5fa0 RCX: 00007fe21b58eec9
[  688.398370][T14751] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001
[  688.398385][T14751] RBP: 00007fe21b611f91 R08: 0000000000000000 R09: 0000000000000000
[  688.398400][T14751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  688.398424][T14751] R13: 00007fe21b7e6038 R14: 00007fe21b7e5fa0 R15: 00007ffdeb4918f8
[  688.398454][T14751]  </TASK>
[  688.704636][T14767] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1739'.
[  688.870172][T14769] FAULT_INJECTION: forcing a failure.
[  688.870172][T14769] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  688.929364][T14769] CPU: 0 UID: 0 PID: 14769 Comm: syz.6.1738 Not tainted syzkaller #0 PREEMPT(full) 
[  688.929407][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  688.929422][T14769] Call Trace:
[  688.929431][T14769]  <TASK>
[  688.929442][T14769]  dump_stack_lvl+0x16c/0x1f0
[  688.929478][T14769]  should_fail_ex+0x512/0x640
[  688.929517][T14769]  should_fail_alloc_page+0xe7/0x130
[  688.929556][T14769]  prepare_alloc_pages+0x3c2/0x610
[  688.929597][T14769]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  688.929634][T14769]  ? find_held_lock+0x2b/0x80
[  688.929670][T14769]  ? is_bpf_text_address+0x8a/0x1a0
[  688.929708][T14769]  ? bpf_ksym_find+0x124/0x1c0
[  688.929738][T14769]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  688.929767][T14769]  ? is_bpf_text_address+0x94/0x1a0
[  688.929805][T14769]  ? kernel_text_address+0x8d/0x100
[  688.929833][T14769]  ? __kernel_text_address+0xd/0x40
[  688.929859][T14769]  ? unwind_get_return_address+0x59/0xa0
[  688.929902][T14769]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  688.929932][T14769]  ? policy_nodemask+0xea/0x4e0
[  688.929969][T14769]  alloc_pages_mpol+0x1fb/0x550
[  688.930005][T14769]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  688.930040][T14769]  ? kasan_save_stack+0x33/0x60
[  688.930069][T14769]  ? kasan_save_track+0x14/0x30
[  688.930106][T14769]  ? __kasan_kmalloc+0xaa/0xb0
[  688.930134][T14769]  ? __get_vm_area_node+0x101/0x330
[  688.930173][T14769]  alloc_pages_noprof+0x131/0x390
[  688.930209][T14769]  get_free_pages_noprof+0x10/0xb0
[  688.930241][T14769]  kasan_populate_vmalloc+0x9f/0x2d0
[  688.930271][T14769]  ? alloc_vmap_area+0x8b5/0x29e0
[  688.930310][T14769]  alloc_vmap_area+0x960/0x29e0
[  688.930357][T14769]  ? __pfx_alloc_vmap_area+0x10/0x10
[  688.930399][T14769]  __get_vm_area_node+0x1ca/0x330
[  688.930441][T14769]  __vmalloc_node_range_noprof+0x271/0x1480
[  688.930480][T14769]  ? n_tty_open+0x1a/0x170
[  688.930502][T14769]  ? look_up_lock_class+0x59/0x150
[  688.930538][T14769]  ? n_tty_open+0x1a/0x170
[  688.930568][T14769]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  688.930606][T14769]  ? console_unlock+0x184/0x210
[  688.930634][T14769]  ? __pfx_console_unlock+0x10/0x10
[  688.930666][T14769]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  688.930695][T14769]  ? n_tty_open+0x1a/0x170
[  688.930717][T14769]  __vmalloc_node_noprof+0xad/0xf0
[  688.930754][T14769]  ? n_tty_open+0x1a/0x170
[  688.930776][T14769]  ? __pfx_n_tty_open+0x10/0x10
[  688.930801][T14769]  n_tty_open+0x1a/0x170
[  688.930822][T14769]  ? __pfx_n_tty_open+0x10/0x10
[  688.930845][T14769]  tty_ldisc_open+0x9c/0x120
[  688.930876][T14769]  tty_ldisc_setup+0x40/0x100
[  688.930909][T14769]  tty_init_dev.part.0+0x1ec/0x500
[  688.930950][T14769]  tty_open+0xa4f/0xf90
[  688.930993][T14769]  ? __pfx_tty_open+0x10/0x10
[  688.931030][T14769]  ? chrdev_open+0x10b/0x6a0
[  688.931066][T14769]  ? __pfx_tty_open+0x10/0x10
[  688.931112][T14769]  chrdev_open+0x231/0x6a0
[  688.931143][T14769]  ? __pfx_apparmor_file_open+0x10/0x10
[  688.931180][T14769]  ? __pfx_chrdev_open+0x10/0x10
[  688.931214][T14769]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  688.931250][T14769]  do_dentry_open+0x97f/0x1530
[  688.931281][T14769]  ? __pfx_chrdev_open+0x10/0x10
[  688.931319][T14769]  vfs_open+0x82/0x3f0
[  688.931359][T14769]  path_openat+0x1de4/0x2cb0
[  688.931399][T14769]  ? __pfx_path_openat+0x10/0x10
[  688.931436][T14769]  do_filp_open+0x20b/0x470
[  688.931466][T14769]  ? __pfx_do_filp_open+0x10/0x10
[  688.931517][T14769]  ? alloc_fd+0x471/0x7d0
[  688.931552][T14769]  do_sys_openat2+0x11b/0x1d0
[  688.931590][T14769]  ? __pfx_do_sys_openat2+0x10/0x10
[  688.931640][T14769]  __x64_sys_openat+0x174/0x210
[  688.931679][T14769]  ? __pfx___x64_sys_openat+0x10/0x10
[  688.931731][T14769]  do_syscall_64+0xcd/0x4b0
[  688.931764][T14769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.931790][T14769] RIP: 0033:0x7f8dacd8eec9
[  688.931810][T14769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  688.931834][T14769] RSP: 002b:00007f8dadb9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  688.931857][T14769] RAX: ffffffffffffffda RBX: 00007f8dacfe6090 RCX: 00007f8dacd8eec9
[  688.931874][T14769] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  688.931889][T14769] RBP: 00007f8dace11f91 R08: 0000000000000000 R09: 0000000000000000
[  688.931904][T14769] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  688.931919][T14769] R13: 00007f8dacfe6128 R14: 00007f8dacfe6090 R15: 00007ffc128da418
[  688.931950][T14769]  </TASK>
[  688.932075][T14769] syz.6.1738: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  689.531230][T14769] CPU: 0 UID: 0 PID: 14769 Comm: syz.6.1738 Not tainted syzkaller #0 PREEMPT(full) 
[  689.531276][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  689.531297][T14769] Call Trace:
[  689.531309][T14769]  <TASK>
[  689.531322][T14769]  dump_stack_lvl+0x16c/0x1f0
[  689.531367][T14769]  warn_alloc+0x248/0x3a0
[  689.531407][T14769]  ? __pfx_warn_alloc+0x10/0x10
[  689.531444][T14769]  ? __get_vm_area_node+0x2cd/0x330
[  689.531500][T14769]  ? __get_vm_area_node+0x2cd/0x330
[  689.531545][T14769]  ? __get_vm_area_node+0x1dc/0x330
[  689.531592][T14769]  ? __get_vm_area_node+0x208/0x330
[  689.531650][T14769]  __vmalloc_node_range_noprof+0xaf5/0x1480
[  689.531703][T14769]  ? look_up_lock_class+0x59/0x150
[  689.531754][T14769]  ? n_tty_open+0x1a/0x170
[  689.531799][T14769]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  689.531847][T14769]  ? console_unlock+0x184/0x210
[  689.531887][T14769]  ? __pfx_console_unlock+0x10/0x10
[  689.531931][T14769]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  689.531972][T14769]  ? n_tty_open+0x1a/0x170
[  689.532014][T14769]  __vmalloc_node_noprof+0xad/0xf0
[  689.532066][T14769]  ? n_tty_open+0x1a/0x170
[  689.532097][T14769]  ? __pfx_n_tty_open+0x10/0x10
[  689.532132][T14769]  n_tty_open+0x1a/0x170
[  689.532163][T14769]  ? __pfx_n_tty_open+0x10/0x10
[  689.532193][T14769]  tty_ldisc_open+0x9c/0x120
[  689.532238][T14769]  tty_ldisc_setup+0x40/0x100
[  689.532286][T14769]  tty_init_dev.part.0+0x1ec/0x500
[  689.532343][T14769]  tty_open+0xa4f/0xf90
[  689.532401][T14769]  ? __pfx_tty_open+0x10/0x10
[  689.532453][T14769]  ? chrdev_open+0x10b/0x6a0
[  689.532502][T14769]  ? __pfx_tty_open+0x10/0x10
[  689.532552][T14769]  chrdev_open+0x231/0x6a0
[  689.532593][T14769]  ? __pfx_apparmor_file_open+0x10/0x10
[  689.532644][T14769]  ? __pfx_chrdev_open+0x10/0x10
[  689.532688][T14769]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  689.532739][T14769]  do_dentry_open+0x97f/0x1530
[  689.532783][T14769]  ? __pfx_chrdev_open+0x10/0x10
[  689.532837][T14769]  vfs_open+0x82/0x3f0
[  689.532895][T14769]  path_openat+0x1de4/0x2cb0
[  689.532950][T14769]  ? __pfx_path_openat+0x10/0x10
[  689.533009][T14769]  do_filp_open+0x20b/0x470
[  689.533050][T14769]  ? __pfx_do_filp_open+0x10/0x10
[  689.533120][T14769]  ? alloc_fd+0x471/0x7d0
[  689.533170][T14769]  do_sys_openat2+0x11b/0x1d0
[  689.533224][T14769]  ? __pfx_do_sys_openat2+0x10/0x10
[  689.533295][T14769]  __x64_sys_openat+0x174/0x210
[  689.533349][T14769]  ? __pfx___x64_sys_openat+0x10/0x10
[  689.533420][T14769]  do_syscall_64+0xcd/0x4b0
[  689.533465][T14769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.533497][T14769] RIP: 0033:0x7f8dacd8eec9
[  689.533524][T14769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  689.533555][T14769] RSP: 002b:00007f8dadb9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  689.533587][T14769] RAX: ffffffffffffffda RBX: 00007f8dacfe6090 RCX: 00007f8dacd8eec9
[  689.533609][T14769] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  689.533630][T14769] RBP: 00007f8dace11f91 R08: 0000000000000000 R09: 0000000000000000
[  689.533651][T14769] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  689.533670][T14769] R13: 00007f8dacfe6128 R14: 00007f8dacfe6090 R15: 00007ffc128da418
[  689.533708][T14769]  </TASK>
[  689.533923][T14769] Mem-Info:
[  689.896219][T14769] active_anon:29108 inactive_anon:0 isolated_anon:0
[  689.896219][T14769]  active_file:10684 inactive_file:50449 isolated_file:0
[  689.896219][T14769]  unevictable:768 dirty:1903 writeback:896
[  689.896219][T14769]  slab_reclaimable:12449 slab_unreclaimable:108571
[  689.896219][T14769]  mapped:63004 shmem:15133 pagetables:1661
[  689.896219][T14769]  sec_pagetables:0 bounce:0
[  689.896219][T14769]  kernel_misc_reclaimable:0
[  689.896219][T14769]  free:1234212 free_pcp:15391 free_cma:0
[  690.024224][T14769] Node 0 active_anon:117312kB inactive_anon:0kB active_file:42736kB inactive_file:201664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:254448kB dirty:7528kB writeback:3600kB shmem:60128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:32768kB kernel_stack:14068kB pagetables:6488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  690.058250][T14769] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  690.105508][T14769] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  690.152246][T14780] HfR: entered promiscuous mode
[  690.337258][T14769] lowmem_reserve[]: 0 2488 2488 2488 2488
[  690.401893][T14769] Node 0 DMA32 free:1013632kB boost:0kB min:34396kB low:42992kB high:51588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:129204kB inactive_anon:0kB active_file:42736kB inactive_file:201664kB unevictable:1536kB writepending:10260kB zspages:508kB present:3129332kB managed:2547976kB mlocked:0kB bounce:0kB free_pcp:45768kB local_pcp:31236kB free_cma:0kB
[  690.521084][T14769] lowmem_reserve[]: 0 0 0 0 0
[  690.557612][T14769] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  690.714661][T14769] lowmem_reserve[]: 0 0 0 0 0
[  690.719517][T14769] Node 1 Normal free:3890612kB boost:0kB min:55500kB low:69372kB high:83244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20012kB local_pcp:12448kB free_cma:0kB
[  690.791264][T14788] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1744'.
[  690.834675][T14769] lowmem_reserve[]: 0 0 0 0 0
[  690.856316][T14789] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  691.066868][T14769] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  691.386724][T14769] Node 0 DMA32: 92*4kB (ME) 53*8kB (ME) 29*16kB (UE) 21*32kB (UE) 43*64kB (UE) 222*128kB (M) 246*256kB (UME) 172*512kB (UME) 100*1024kB (UM) 6*2048kB (UM) 165*4096kB (M) = 974664kB
[  691.478179][T14769] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  691.558785][T14798] FAULT_INJECTION: forcing a failure.
[  691.558785][T14798] name failslab, interval 1, probability 0, space 0, times 0
[  691.576195][T14769] Node 1 Normal: 193*4kB (UME) 38*8kB (UME) 38*16kB (UME) 217*32kB (UME) 58*64kB (UME) 13*128kB (UME) 5*256kB (UME) 5*512kB (UME) 4*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3890612kB
[  691.655217][T14798] CPU: 1 UID: 0 PID: 14798 Comm: syz.8.1745 Not tainted syzkaller #0 PREEMPT(full) 
[  691.655260][T14798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  691.655281][T14798] Call Trace:
[  691.655292][T14798]  <TASK>
[  691.655306][T14798]  dump_stack_lvl+0x16c/0x1f0
[  691.655352][T14798]  should_fail_ex+0x512/0x640
[  691.655400][T14798]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  691.655441][T14798]  should_failslab+0xc2/0x120
[  691.655489][T14798]  kmem_cache_alloc_noprof+0x75/0x6e0
[  691.655527][T14798]  ? alloc_empty_file+0x55/0x1e0
[  691.655587][T14798]  ? alloc_empty_file+0x55/0x1e0
[  691.655634][T14798]  alloc_empty_file+0x55/0x1e0
[  691.655685][T14798]  path_openat+0xda/0x2cb0
[  691.655738][T14798]  ? __pfx_path_openat+0x10/0x10
[  691.655800][T14798]  do_filp_open+0x20b/0x470
[  691.655841][T14798]  ? __pfx_do_filp_open+0x10/0x10
[  691.655913][T14798]  ? alloc_fd+0x471/0x7d0
[  691.655960][T14798]  do_sys_openat2+0x11b/0x1d0
[  691.656011][T14798]  ? __pfx_do_sys_openat2+0x10/0x10
[  691.656067][T14798]  ? __fget_files+0x20e/0x3c0
[  691.656112][T14798]  __x64_sys_openat+0x174/0x210
[  691.656167][T14798]  ? __pfx___x64_sys_openat+0x10/0x10
[  691.656224][T14798]  ? ksys_write+0x1ac/0x250
[  691.656280][T14798]  do_syscall_64+0xcd/0x4b0
[  691.656325][T14798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.656358][T14798] RIP: 0033:0x7fe21b58eec9
[  691.656382][T14798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  691.656413][T14798] RSP: 002b:00007fe21c479038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  691.656443][T14798] RAX: ffffffffffffffda RBX: 00007fe21b7e6090 RCX: 00007fe21b58eec9
[  691.656465][T14798] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  691.656487][T14798] RBP: 00007fe21c479090 R08: 0000000000000000 R09: 0000000000000000
[  691.656508][T14798] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001
[  691.656528][T14798] R13: 00007fe21b7e6128 R14: 00007fe21b7e6090 R15: 00007ffdeb4918f8
[  691.656572][T14798]  </TASK>
[  691.656836][T14769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  691.940250][T14769] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  691.996399][T14769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  692.033656][T14769] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  692.045732][T14769] 87226 total pagecache pages
[  692.050600][T14769] 8 pages in swap cache
[  692.064680][T14769] Free swap  = 124824kB
[  692.086175][T14769] Total swap = 124996kB
[  692.090520][T14769] 2097051 pages RAM
[  692.110166][T14769] 0 pages HighMem/MovableOnly
[  692.119105][T14769] 428415 pages reserved
[  692.129320][T14769] 0 pages cma reserved
[  692.139509][T14769] tty tty26: ldisc open failed (-12), clearing slot 25
[  693.458910][   T30] audit: type=1804 audit(4294967513.349:58): pid=14817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1748" name="/newroot/43/file0" dev="tmpfs" ino=242 res=1 errno=0
[  693.832722][   T30] audit: type=1804 audit(4294967513.721:59): pid=14811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1748" name="/newroot/43/file0" dev="tmpfs" ino=242 res=1 errno=0
[  693.983115][   T30] audit: type=1800 audit(4294967513.751:60): pid=14817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1748" name="file0" dev="tmpfs" ino=242 res=0 errno=0
[  695.052254][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  695.058750][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  695.500229][T12879] Bluetooth: hci8: unexpected event 0x01 length: 5 > 1
[  696.685335][T14842] FAULT_INJECTION: forcing a failure.
[  696.685335][T14842] name failslab, interval 1, probability 0, space 0, times 0
[  696.706253][T14842] CPU: 1 UID: 0 PID: 14842 Comm: syz.7.1755 Not tainted syzkaller #0 PREEMPT(full) 
[  696.706298][T14842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  696.706318][T14842] Call Trace:
[  696.706329][T14842]  <TASK>
[  696.706343][T14842]  dump_stack_lvl+0x16c/0x1f0
[  696.706391][T14842]  should_fail_ex+0x512/0x640
[  696.706438][T14842]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  696.706489][T14842]  should_failslab+0xc2/0x120
[  696.706536][T14842]  kmem_cache_alloc_noprof+0x75/0x6e0
[  696.706574][T14842]  ? security_file_alloc+0x34/0x2b0
[  696.706616][T14842]  ? security_file_alloc+0x34/0x2b0
[  696.706649][T14842]  security_file_alloc+0x34/0x2b0
[  696.706686][T14842]  init_file+0x93/0x4c0
[  696.706736][T14842]  alloc_empty_file+0x73/0x1e0
[  696.706785][T14842]  path_openat+0xda/0x2cb0
[  696.706838][T14842]  ? __pfx_path_openat+0x10/0x10
[  696.706891][T14842]  do_filp_open+0x20b/0x470
[  696.706932][T14842]  ? __pfx_do_filp_open+0x10/0x10
[  696.707003][T14842]  ? alloc_fd+0x471/0x7d0
[  696.707050][T14842]  do_sys_openat2+0x11b/0x1d0
[  696.707100][T14842]  ? __pfx_do_sys_openat2+0x10/0x10
[  696.707157][T14842]  ? __fget_files+0x20e/0x3c0
[  696.707202][T14842]  __x64_sys_openat+0x174/0x210
[  696.707256][T14842]  ? __pfx___x64_sys_openat+0x10/0x10
[  696.707307][T14842]  ? ksys_write+0x1ac/0x250
[  696.707362][T14842]  do_syscall_64+0xcd/0x4b0
[  696.707409][T14842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.707442][T14842] RIP: 0033:0x7fd6d398eec9
[  696.707477][T14842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  696.707513][T14842] RSP: 002b:00007fd6d4779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  696.707547][T14842] RAX: ffffffffffffffda RBX: 00007fd6d3be5fa0 RCX: 00007fd6d398eec9
[  696.707569][T14842] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  696.707593][T14842] RBP: 00007fd6d4779090 R08: 0000000000000000 R09: 0000000000000000
[  696.707625][T14842] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001
[  696.707644][T14842] R13: 00007fd6d3be6038 R14: 00007fd6d3be5fa0 R15: 00007ffcdd032768
[  696.707686][T14842]  </TASK>
[  697.115820][T12879] Bluetooth: hci4: command 0x0406 tx timeout
[  698.176795][T14852] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  698.208576][T14852] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  698.261970][T14852] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  698.336799][T14852] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  698.531244][T14852] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  698.560063][T14852] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  698.636389][T14852] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  698.742380][T14852] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  698.748906][T14852] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  698.777239][T14852] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  698.786783][T14852] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  698.802221][T14852] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  698.905284][T14852] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  698.936101][T14852] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  698.952829][T14852] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  699.039701][T14852] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  699.053188][T14852] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  699.077263][T14852] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  699.107555][T14852] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  699.642892][   T30] audit: type=1800 audit(4294967519.561:61): pid=14879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1760" name="dbroot" dev="configfs" ino=57244 res=0 errno=0
[  699.892382][ T7787] Bluetooth: hci1: command 0x0406 tx timeout
[  700.215946][ T7787] Bluetooth: hci2: command 0x0406 tx timeout
[  700.291300][ T7787] Bluetooth: hci4: command 0x0406 tx timeout
[  700.536126][ T7787] Bluetooth: hci3: command 0x0c1a tx timeout
[  700.769103][ T7787] Bluetooth: hci5: command 0x0c1a tx timeout
[  700.847499][ T7787] Bluetooth: hci6: command 0x0c1a tx timeout
[  700.929487][ T7787] Bluetooth: hci7: command 0x0c1a tx timeout
[  701.088801][ T7787] Bluetooth: hci8: command 0x0c1a tx timeout
[  702.365172][ T7787] Bluetooth: hci4: command 0x0406 tx timeout
[  702.600125][ T7787] Bluetooth: hci3: command 0x0c1a tx timeout
[  702.759964][T14919] FAULT_INJECTION: forcing a failure.
[  702.759964][T14919] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  702.777431][T14919] CPU: 1 UID: 0 PID: 14919 Comm: syz.8.1771 Not tainted syzkaller #0 PREEMPT(full) 
[  702.777472][T14919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  702.777492][T14919] Call Trace:
[  702.777502][T14919]  <TASK>
[  702.777513][T14919]  dump_stack_lvl+0x16c/0x1f0
[  702.777547][T14919]  should_fail_ex+0x512/0x640
[  702.777586][T14919]  should_fail_alloc_page+0xe7/0x130
[  702.777622][T14919]  prepare_alloc_pages+0x3c2/0x610
[  702.777656][T14919]  ? rcu_is_watching+0x12/0xc0
[  702.777690][T14919]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  702.777718][T14919]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  702.777751][T14919]  ? is_bpf_text_address+0x94/0x1a0
[  702.777786][T14919]  ? kernel_text_address+0x8d/0x100
[  702.777812][T14919]  ? __kernel_text_address+0xd/0x40
[  702.777836][T14919]  ? unwind_get_return_address+0x59/0xa0
[  702.777865][T14919]  ? arch_stack_walk+0xa6/0x100
[  702.777894][T14919]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  702.777939][T14919]  ? stack_depot_save_flags+0x29/0x9c0
[  702.777976][T14919]  ? __pfx_stack_trace_save+0x10/0x10
[  702.778011][T14919]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  702.778039][T14919]  ? policy_nodemask+0xea/0x4e0
[  702.778076][T14919]  alloc_pages_mpol+0x1fb/0x550
[  702.778111][T14919]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  702.778154][T14919]  alloc_pages_noprof+0x131/0x390
[  702.778189][T14919]  kimage_alloc_pages+0x74/0x350
[  702.778219][T14919]  kimage_alloc_control_pages+0x153/0xa00
[  702.778255][T14919]  ? __pfx_kimage_alloc_control_pages+0x10/0x10
[  702.778293][T14919]  do_kexec_load+0x478/0x8a0
[  702.778324][T14919]  ? __pfx_do_kexec_load+0x10/0x10
[  702.778359][T14919]  ? _copy_from_user+0x59/0xd0
[  702.778398][T14919]  __x64_sys_kexec_load+0x1bf/0x230
[  702.778431][T14919]  do_syscall_64+0xcd/0x4b0
[  702.778485][T14919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.778510][T14919] RIP: 0033:0x7fe21b58eec9
[  702.778529][T14919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  702.778555][T14919] RSP: 002b:00007fe21c479038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  702.778578][T14919] RAX: ffffffffffffffda RBX: 00007fe21b7e6090 RCX: 00007fe21b58eec9
[  702.778595][T14919] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005
[  702.778610][T14919] RBP: 00007fe21b611f91 R08: 0000000000000000 R09: 0000000000000000
[  702.778625][T14919] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[  702.778640][T14919] R13: 00007fe21b7e6128 R14: 00007fe21b7e6090 R15: 00007ffdeb4918f8
[  702.778671][T14919]  </TASK>
[  702.778776][T14919] kexec: Could not allocate control_code_buffer
[  703.051644][ T7787] Bluetooth: hci5: command 0x0c1a tx timeout
[  703.057788][T12879] Bluetooth: hci6: command 0x0c1a tx timeout
[  703.063840][T10028] Bluetooth: hci7: command 0x0c1a tx timeout
[  703.155586][T10028] Bluetooth: hci8: command 0x0c1a tx timeout
[  703.679375][   T30] audit: type=1800 audit(4294967523.592:62): pid=14928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1773" name="dbroot" dev="configfs" ino=58475 res=0 errno=0
[  703.882854][T14941] warn_alloc: 1 callbacks suppressed
[  703.882933][T14941] syz.8.1775: vmalloc error: size 4096, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  703.966372][T14941] CPU: 1 UID: 0 PID: 14941 Comm: syz.8.1775 Not tainted syzkaller #0 PREEMPT(full) 
[  703.966418][T14941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  703.966439][T14941] Call Trace:
[  703.966450][T14941]  <TASK>
[  703.966463][T14941]  dump_stack_lvl+0x16c/0x1f0
[  703.966511][T14941]  warn_alloc+0x248/0x3a0
[  703.966552][T14941]  ? __pfx_warn_alloc+0x10/0x10
[  703.966588][T14941]  ? alloc_pages_mpol+0x25a/0x550
[  703.966624][T14941]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  703.966657][T14941]  ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10
[  703.966701][T14941]  ? __kmalloc_node_noprof+0x364/0x8a0
[  703.966731][T14941]  ? __get_vm_area_node+0x208/0x330
[  703.966772][T14941]  __vmalloc_node_range_noprof+0x119b/0x1480
[  703.966828][T14941]  ? kernel_clone+0xfc/0x930
[  703.966869][T14941]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  703.966913][T14941]  ? rcu_is_watching+0x12/0xc0
[  703.966947][T14941]  ? kernel_clone+0xfc/0x930
[  703.966979][T14941]  __vmalloc_node_noprof+0xad/0xf0
[  703.967016][T14941]  ? kernel_clone+0xfc/0x930
[  703.967052][T14941]  copy_process+0x2c77/0x76a0
[  703.967086][T14941]  ? __pfx___futex_wait+0x10/0x10
[  703.967122][T14941]  ? __pfx_copy_process+0x10/0x10
[  703.967156][T14941]  ? futex_private_hash_put+0x176/0x300
[  703.967194][T14941]  ? futex_private_hash_put+0x18a/0x300
[  703.967233][T14941]  kernel_clone+0xfc/0x930
[  703.967269][T14941]  ? __pfx_kernel_clone+0x10/0x10
[  703.967320][T14941]  __do_sys_clone+0xce/0x120
[  703.967354][T14941]  ? __pfx___do_sys_clone+0x10/0x10
[  703.967402][T14941]  ? xfd_validate_state+0x61/0x180
[  703.967434][T14941]  do_syscall_64+0xcd/0x4b0
[  703.967467][T14941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.967492][T14941] RIP: 0033:0x7fe21b58eec9
[  703.967512][T14941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  703.967537][T14941] RSP: 002b:00007fe21c479038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  703.967560][T14941] RAX: ffffffffffffffda RBX: 00007fe21b7e6090 RCX: 00007fe21b58eec9
[  703.967577][T14941] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001
[  703.967592][T14941] RBP: 00007fe21b611f91 R08: 0000000000000000 R09: 0000000000000000
[  703.967607][T14941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  703.967621][T14941] R13: 00007fe21b7e6128 R14: 00007fe21b7e6090 R15: 00007ffdeb4918f8
[  703.967651][T14941]  </TASK>
[  703.968114][T14941] Mem-Info:
[  704.217870][T14941] active_anon:14999 inactive_anon:4 isolated_anon:0
[  704.217870][T14941]  active_file:8728 inactive_file:52181 isolated_file:0
[  704.217870][T14941]  unevictable:763 dirty:2672 writeback:0
[  704.217870][T14941]  slab_reclaimable:12991 slab_unreclaimable:107872
[  704.217870][T14941]  mapped:50938 shmem:1649 pagetables:1526
[  704.217870][T14941]  sec_pagetables:0 bounce:0
[  704.217870][T14941]  kernel_misc_reclaimable:0
[  704.217870][T14941]  free:1248528 free_pcp:15586 free_cma:0
[  704.265387][T14941] Node 0 active_anon:59996kB inactive_anon:16kB active_file:34912kB inactive_file:208592kB unevictable:1516kB isolated(anon):0kB isolated(file):0kB mapped:203752kB dirty:10944kB writeback:0kB shmem:5060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:28672kB kernel_stack:14268kB pagetables:5960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  704.304727][T14941] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  704.436362][T14941] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  704.478985][T14941] lowmem_reserve[]: 0 2488 2488 2488 2488
[  704.548241][T14941] Node 0 DMA32 free:1090896kB boost:0kB min:34396kB low:42992kB high:51588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57376kB inactive_anon:16kB active_file:34912kB inactive_file:209360kB unevictable:1516kB writepending:11712kB zspages:508kB present:3129332kB managed:2547976kB mlocked:0kB bounce:0kB free_pcp:42104kB local_pcp:19180kB free_cma:0kB
[  704.668091][T10028] Bluetooth: hci3: command 0x0c1a tx timeout
[  704.668885][T14950] FAULT_INJECTION: forcing a failure.
[  704.668885][T14950] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  704.740273][T14941] lowmem_reserve[]: 0 0 0 0 0
[  704.745182][T14941] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  704.775031][T14941] lowmem_reserve[]: 0 0 0 0 0
[  704.783641][T14950] CPU: 0 UID: 0 PID: 14950 Comm: syz.7.1776 Not tainted syzkaller #0 PREEMPT(full) 
[  704.783673][T14950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  704.783688][T14950] Call Trace:
[  704.783696][T14950]  <TASK>
[  704.783705][T14950]  dump_stack_lvl+0x16c/0x1f0
[  704.783739][T14950]  should_fail_ex+0x512/0x640
[  704.783778][T14950]  _copy_to_user+0x32/0xd0
[  704.783816][T14950]  simple_read_from_buffer+0xcb/0x170
[  704.783858][T14950]  proc_fail_nth_read+0x197/0x240
[  704.783887][T14950]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  704.783917][T14950]  ? rw_verify_area+0xcf/0x6c0
[  704.783941][T14950]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  704.783968][T14950]  vfs_read+0x1e1/0xcf0
[  704.783999][T14950]  ? __pfx___mutex_lock+0x10/0x10
[  704.784029][T14950]  ? __pfx_vfs_read+0x10/0x10
[  704.784064][T14950]  ? __fget_files+0x20e/0x3c0
[  704.784099][T14950]  ksys_read+0x12a/0x250
[  704.784126][T14950]  ? __pfx_ksys_read+0x10/0x10
[  704.784154][T14950]  ? fdget+0x187/0x210
[  704.784184][T14950]  do_syscall_64+0xcd/0x4b0
[  704.784215][T14950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.784240][T14950] RIP: 0033:0x7fd6d398d8dc
[  704.784259][T14950] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  704.784282][T14950] RSP: 002b:00007fd6d4758030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  704.784304][T14950] RAX: ffffffffffffffda RBX: 00007fd6d3be6090 RCX: 00007fd6d398d8dc
[  704.784321][T14950] RDX: 000000000000000f RSI: 00007fd6d47580a0 RDI: 0000000000000004
[  704.784335][T14950] RBP: 00007fd6d4758090 R08: 0000000000000000 R09: 0000000000000000
[  704.784350][T14950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  704.784364][T14950] R13: 00007fd6d3be6128 R14: 00007fd6d3be6090 R15: 00007ffcdd032768
[  704.784394][T14950]  </TASK>
[  704.992829][T14941] Node 1 Normal free:3890924kB boost:0kB min:55500kB low:69372kB high:83244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19680kB local_pcp:7200kB free_cma:0kB
[  705.026082][T14941] lowmem_reserve[]: 0 0 0 0 0
[  705.178995][T14941] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  705.244520][T10028] Bluetooth: hci7: command 0x0c1a tx timeout
[  705.250742][T10028] Bluetooth: hci5: command 0x0c1a tx timeout
[  705.256877][T10028] Bluetooth: hci6: command 0x0c1a tx timeout
[  705.262971][T10028] Bluetooth: hci8: command 0x0c1a tx timeout
[  705.272868][T14941] Node 0 DMA32: 1607*4kB (UM) 1378*8kB (UME) 671*16kB (UME) 875*32kB (UM) 507*64kB (UME) 405*128kB (UM) 266*256kB (UM) 176*512kB (ME) 102*1024kB (UM) 8*2048kB (UM) 164*4096kB (UM) = 1091260kB
[  705.384890][T14941] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  705.405136][T14941] Node 1 Normal: 191*4kB (UME) 38*8kB (UME) 38*16kB (UME) 223*32kB (UME) 60*64kB (UME) 13*128kB (UME) 5*256kB (UME) 5*512kB (UME) 4*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3890924kB
[  705.443570][T14941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  705.521844][T14941] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  705.563008][T14941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  705.613077][T14941] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  705.663008][T14941] 63526 total pagecache pages
[  705.670967][T14941] 18 pages in swap cache
[  705.684312][T14941] Free swap  = 124784kB
[  705.695966][T14941] Total swap = 124996kB
[  705.733066][T14941] 2097051 pages RAM
[  705.773396][T14941] 0 pages HighMem/MovableOnly
[  705.783832][T14941] 428415 pages reserved
[  705.788032][T14941] 0 pages cma reserved
[  705.866765][T14958] [U]  
[  705.869656][T14958] [U] 
[  705.872431][T14958] [U] 
[  705.875193][T14958] [U] 
[  705.912404][T14958] [U] 
[  705.915202][T14958] [U] 
[  705.917955][T14958] [U] 
[  705.920718][T14958] [U] 
[  705.970960][T14958] [U] 
[  705.973757][T14958] [U] 
[  705.976517][T14958] [U] 
[  705.979265][T14958] [U] 
[  706.004582][T14958] [U] 
[  706.007391][T14958] [U] 
[  706.010161][T14958] [U] 
[  706.012925][T14958] [U] 
[  706.016283][T14958] [U] 
[  706.019060][T14958] [U] 
[  706.021814][T14958] [U] 
[  706.024581][T14958] [U] 
[  706.050479][T14958] [U] 
[  706.053296][T14958] [U] 
[  706.056087][T14958] [U] 
[  706.058847][T14958] [U] 
[  706.071334][T14958] [U] 
[  706.074141][T14958] [U] 
[  706.076908][T14958] [U] 
[  706.079662][T14958] [U] 
[  706.091024][T14958] [U] 
[  706.093781][T14958] [U] 
[  706.096498][T14958] [U] 
[  706.099228][T14958] [U] 
[  706.118778][T14958] [U] 
[  706.121549][T14958] [U] 
[  706.124320][T14958] [U] 
[  706.127085][T14958] [U] 
[  706.181208][T14958] [U] 
[  706.184018][T14958] [U] 
[  706.186785][T14958] [U] 
[  706.189583][T14958] [U] 
[  706.199600][T14958] [U] 
[  706.202385][T14958] [U] 
[  706.205133][T14958] [U] 
[  706.207853][T14958] [U] 
[  706.236757][T14958] [U] 
[  706.237391][T14953] FAULT_INJECTION: forcing a failure.
[  706.237391][T14953] name failslab, interval 1, probability 0, space 0, times 0
[  706.252423][T14958] [U] 
[  706.255149][T14958] [U] 
[  706.257904][T14958] [U] 
[  706.269441][T14958] [U] 
[  706.272237][T14958] [U] 
[  706.274994][T14958] [U] 
[  706.277776][T14958] [U] 
[  706.279266][T14953] CPU: 1 UID: 0 PID: 14953 Comm: syz.7.1777 Not tainted syzkaller #0 PREEMPT(full) 
[  706.279315][T14953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  706.279340][T14953] Call Trace:
[  706.279353][T14953]  <TASK>
[  706.279370][T14953]  dump_stack_lvl+0x16c/0x1f0
[  706.279424][T14953]  should_fail_ex+0x512/0x640
[  706.279479][T14953]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  706.279526][T14953]  should_failslab+0xc2/0x120
[  706.279590][T14953]  kmem_cache_alloc_noprof+0x75/0x6e0
[  706.279634][T14953]  ? copy_fs_struct+0x49/0x340
[  706.279701][T14953]  ? copy_fs_struct+0x49/0x340
[  706.279755][T14953]  copy_fs_struct+0x49/0x340
[  706.279815][T14953]  copy_process+0x3254/0x76a0
[  706.279868][T14953]  ? __pfx___futex_wait+0x10/0x10
[  706.279924][T14953]  ? __pfx_copy_process+0x10/0x10
[  706.279977][T14953]  ? futex_private_hash_put+0x176/0x300
[  706.280035][T14953]  ? futex_private_hash_put+0x18a/0x300
[  706.280095][T14953]  kernel_clone+0xfc/0x930
[  706.280158][T14953]  ? __pfx_kernel_clone+0x10/0x10
[  706.280240][T14953]  __do_sys_clone+0xce/0x120
[  706.280293][T14953]  ? __pfx___do_sys_clone+0x10/0x10
[  706.280366][T14953]  ? xfd_validate_state+0x61/0x180
[  706.280415][T14953]  do_syscall_64+0xcd/0x4b0
[  706.280465][T14953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.280500][T14953] RIP: 0033:0x7fd6d398eec9
[  706.280530][T14953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  706.280579][T14953] RSP: 002b:00007fd6d4779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  706.280616][T14953] RAX: ffffffffffffffda RBX: 00007fd6d3be5fa0 RCX: 00007fd6d398eec9
[  706.280640][T14953] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001
[  706.280665][T14953] RBP: 00007fd6d3a11f91 R08: 0000000000000000 R09: 0000000000000000
[  706.280690][T14953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  706.280711][T14953] R13: 00007fd6d3be6038 R14: 00007fd6d3be5fa0 R15: 00007ffcdd032768
[  706.280761][T14953]  </TASK>
[  706.543534][T14958] [U] 
[  706.546340][T14958] [U] 
[  706.549107][T14958] [U] 
[  706.551849][T14958] [U] 
[  706.570272][T14958] [U] 
[  706.573080][T14958] [U] 
[  706.575835][T14958] [U] 
[  706.578593][T14958] [U] 
[  706.581604][T14958] [U] 
[  706.584345][T14958] [U] 
[  706.587077][T14958] [U] 
[  706.589799][T14958] [U] 
[  706.593112][T14958] [U] 
[  706.595882][T14958] [U] 
[  706.598634][T14958] [U] 
[  706.601411][T14958] [U] 
[  706.604254][T14958] [U] 
[  706.607048][T14958] [U] 
[  706.609782][T14958] [U] 
[  706.612507][T14958] [U] 
[  706.621557][T14958] [U] 
[  706.624326][T14958] [U] 
[  706.627079][T14958] [U] 
[  706.629800][T14958] [U] 
[  706.662187][T14958] [U] 
[  706.664983][T14958] [U] 
[  706.667745][T14958] [U] 
[  706.670496][T14958] [U] 
[  706.673447][T14958] [U] 
[  706.676213][T14958] [U] 
[  706.678949][T14958] [U] 
[  706.681675][T14958] [U] 
[  706.684679][T14958] [U] 
[  706.687446][T14958] [U] 
[  706.690187][T14958] [U] 
[  706.692927][T14958] [U] 
[  706.695773][T14958] [U] 
[  706.698536][T14958] [U] 
[  706.701288][T14958] [U] 
[  706.704030][T14958] [U] 
[  706.706964][T14958] [U] 
[  706.709729][T14958] [U] 
[  706.712485][T14958] [U] 
[  706.715239][T14958] [U] 
[  706.718115][T14958] [U] 
[  706.720873][T14958] [U] 
[  706.723628][T14958] [U] 
[  706.726372][T14958] [U] 
[  706.729593][T14958] [U] 
[  706.732359][T14958] [U] 
[  706.735113][T14958] [U] 
[  706.737866][T14958] [U] 
[  706.741096][T14958] [U] 
[  710.898404][T15017] FAULT_INJECTION: forcing a failure.
[  710.898404][T15017] name failslab, interval 1, probability 0, space 0, times 0
[  710.942126][T15017] CPU: 0 UID: 0 PID: 15017 Comm: syz.7.1792 Not tainted syzkaller #0 PREEMPT(full) 
[  710.942174][T15017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  710.942198][T15017] Call Trace:
[  710.942211][T15017]  <TASK>
[  710.942225][T15017]  dump_stack_lvl+0x16c/0x1f0
[  710.942274][T15017]  should_fail_ex+0x512/0x640
[  710.942324][T15017]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  710.942368][T15017]  should_failslab+0xc2/0x120
[  710.942418][T15017]  kmem_cache_alloc_noprof+0x75/0x6e0
[  710.942457][T15017]  ? copy_fs_struct+0x49/0x340
[  710.942519][T15017]  ? copy_fs_struct+0x49/0x340
[  710.942568][T15017]  copy_fs_struct+0x49/0x340
[  710.942624][T15017]  copy_process+0x3254/0x76a0
[  710.942676][T15017]  ? __pfx___futex_wait+0x10/0x10
[  710.942735][T15017]  ? __pfx_copy_process+0x10/0x10
[  710.942795][T15017]  ? futex_private_hash_put+0x176/0x300
[  710.942852][T15017]  ? futex_private_hash_put+0x18a/0x300
[  710.942912][T15017]  kernel_clone+0xfc/0x930
[  710.942966][T15017]  ? __pfx_kernel_clone+0x10/0x10
[  710.943041][T15017]  __do_sys_clone+0xce/0x120
[  710.943091][T15017]  ? __pfx___do_sys_clone+0x10/0x10
[  710.943163][T15017]  ? xfd_validate_state+0x61/0x180
[  710.943210][T15017]  do_syscall_64+0xcd/0x4b0
[  710.943257][T15017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.943292][T15017] RIP: 0033:0x7fd6d398eec9
[  710.943321][T15017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  710.943356][T15017] RSP: 002b:00007fd6d4779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  710.943388][T15017] RAX: ffffffffffffffda RBX: 00007fd6d3be5fa0 RCX: 00007fd6d398eec9
[  710.943412][T15017] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001
[  710.943434][T15017] RBP: 00007fd6d3a11f91 R08: 0000000000000000 R09: 0000000000000000
[  710.943456][T15017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  710.943478][T15017] R13: 00007fd6d3be6038 R14: 00007fd6d3be5fa0 R15: 00007ffcdd032768
[  710.943522][T15017]  </TASK>
[  711.866510][T15045] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  711.985289][T15049] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  716.102753][T15095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1809'.
[  717.067370][T15112] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  717.518696][   T30] audit: type=1800 audit(4294967537.534:63): pid=15102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1810" name="dbroot" dev="configfs" ino=57766 res=0 errno=0
[  718.011849][T15129] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  721.795095][T15181] [U]  
[  721.797947][T15181] [U] 
[  721.800668][T15181] [U] 
[  721.803528][T15181] [U] 
[  721.839591][T15181] [U] 
[  721.842405][T15181] [U] 
[  721.845163][T15181] [U] 
[  721.847912][T15181] [U] 
[  721.894216][T15181] [U] 
[  721.897053][T15181] [U] 
[  721.899812][T15181] [U] 
[  721.902574][T15181] [U] 
[  722.105068][T15181] [U] 
[  722.107831][T15181] [U] 
[  722.110572][T15181] [U] 
[  722.113296][T15181] [U] 
[  722.116270][T15181] [U] 
[  722.119001][T15181] [U] 
[  722.121855][T15181] [U] 
[  722.124575][T15181] [U] 
[  722.146886][T15181] [U] 
[  722.149702][T15181] [U] 
[  722.152469][T15181] [U] 
[  722.155247][T15181] [U] 
[  722.206390][T15181] [U] 
[  722.209192][T15181] [U] 
[  722.211998][T15181] [U] 
[  722.214754][T15181] [U] 
[  722.281722][T15181] [U] 
[  722.284566][T15181] [U] 
[  722.287333][T15181] [U] 
[  722.290091][T15181] [U] 
[  722.405401][T15181] [U] 
[  722.408205][T15181] [U] 
[  722.410967][T15181] [U] 
[  722.413730][T15181] [U] 
[  722.635231][T15181] [U] 
[  728.896480][T15242] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in;
[  728.896480][T15242]    program syz.8.1839 not setting count and/or reply_len properly
[  730.636386][T15273] openvswitch: HfR: Dropping previously announced user features
[  730.658361][T15269] netlink: set zone limit has 8 unknown bytes
[  731.884964][T15275] FAULT_INJECTION: forcing a failure.
[  731.884964][T15275] name failslab, interval 1, probability 0, space 0, times 0
[  732.021468][T15275] CPU: 1 UID: 0 PID: 15275 Comm: syz.7.1847 Not tainted syzkaller #0 PREEMPT(full) 
[  732.021515][T15275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  732.021535][T15275] Call Trace:
[  732.021546][T15275]  <TASK>
[  732.021559][T15275]  dump_stack_lvl+0x16c/0x1f0
[  732.021598][T15275]  should_fail_ex+0x512/0x640
[  732.021637][T15275]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  732.021671][T15275]  should_failslab+0xc2/0x120
[  732.021712][T15275]  kmem_cache_alloc_noprof+0x75/0x6e0
[  732.021743][T15275]  ? copy_process+0x3609/0x76a0
[  732.021787][T15275]  ? copy_process+0x3609/0x76a0
[  732.021835][T15275]  copy_process+0x3609/0x76a0
[  732.021877][T15275]  ? __pfx___futex_wait+0x10/0x10
[  732.021904][T15275]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  732.021945][T15275]  ? __pfx_copy_process+0x10/0x10
[  732.021985][T15275]  ? futex_private_hash_put+0x176/0x300
[  732.022028][T15275]  ? futex_private_hash_put+0x18a/0x300
[  732.022073][T15275]  kernel_clone+0xfc/0x930
[  732.022119][T15275]  ? __pfx_kernel_clone+0x10/0x10
[  732.022175][T15275]  __do_sys_clone+0xce/0x120
[  732.022213][T15275]  ? __pfx___do_sys_clone+0x10/0x10
[  732.022266][T15275]  ? xfd_validate_state+0x61/0x180
[  732.022292][T15275]  ? __pfx_do_writev+0x10/0x10
[  732.022341][T15275]  do_syscall_64+0xcd/0x4b0
[  732.022385][T15275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.022420][T15275] RIP: 0033:0x7fd6d398eec9
[  732.022447][T15275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  732.022489][T15275] RSP: 002b:00007fd6d4758038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  732.022518][T15275] RAX: ffffffffffffffda RBX: 00007fd6d3be6090 RCX: 00007fd6d398eec9
[  732.022538][T15275] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001
[  732.022559][T15275] RBP: 00007fd6d3a11f91 R08: 0000000000000000 R09: 0000000000000000
[  732.022577][T15275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  732.022594][T15275] R13: 00007fd6d3be6128 R14: 00007fd6d3be6090 R15: 00007ffcdd032768
[  732.022630][T15275]  </TASK>
[  732.232709][    C1] vkms_vblank_simulate: vblank timer overrun
[  732.794129][T15308] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1854'.
[  733.489223][ T7787] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18
[  734.450794][T15335] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1861'.
[  735.630816][ T7787] Bluetooth: hci6: command 0x0c1a tx timeout
[  736.317474][T15357] netlink: set zone limit has 8 unknown bytes
[  736.645645][T15362] HfR: entered promiscuous mode
[  737.608954][T15394] ima: policy update failed
[  737.621476][   T30] audit: type=1802 audit(4294967557.738:64): pid=15394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.1877" res=0 errno=0
[  738.660230][T15418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1881'.
[  738.688598][T15418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1881'.
[  743.541116][   T30] audit: type=1800 audit(4294967563.689:65): pid=15504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1898" name="dbroot" dev="configfs" ino=59517 res=0 errno=0
[  744.850946][T15545] __vm_enough_memory: pid: 15545, comm: syz.7.1907, bytes: 4398046511104 not enough memory for the allocation
[  746.200658][T15567] [U]  
[  746.203542][T15567] [U] 
[  746.206304][T15567] [U] 
[  746.209072][T15567] [U] 
[  746.291218][T15567] [U] 
[  746.294039][T15567] [U] 
[  746.296788][T15567] [U] 
[  746.299541][T15567] [U] 
[  746.326171][T15567] [U] 
[  746.329066][T15567] [U] 
[  746.331834][T15567] [U] 
[  746.334591][T15567] [U] 
[  746.357477][T15567] [U] 
[  746.360269][T15567] [U] 
[  746.363023][T15567] [U] 
[  746.365789][T15567] [U] 
[  746.398921][T15567] [U] 
[  746.401716][T15567] [U] 
[  746.404479][T15567] [U] 
[  746.407257][T15567] [U] 
[  746.422811][T15567] [U] 
[  746.425607][T15567] [U] 
[  746.428376][T15567] [U] 
[  746.431153][T15567] [U] 
[  746.474658][T15567] [U] 
[  746.477481][T15567] [U] 
[  746.480242][T15567] [U] 
[  746.483002][T15567] [U] 
[  746.524928][T15567] [U] 
[  746.527697][T15567] [U] 
[  746.530424][T15567] [U] 
[  746.533138][T15567] [U] 
[  746.602892][T15567] [U] 
[  746.605692][T15567] [U] 
[  746.608448][T15567] [U] 
[  746.611239][T15567] [U] 
[  746.664783][T15567] [U] 
[  752.676795][T15687] sd 0:0:1:0: PR command failed: 1026
[  752.684847][T15687] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  752.693271][T15687] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  753.692914][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1944'.
[  753.969233][T15720] snd_virmidi snd_virmidi.0: control 61678:131081:32767:yªƒ>oÆ[k<÷:1 is already present
[  754.061732][T15720] snd_virmidi snd_virmidi.0: control 61678:131081:32767:yªƒ>oÆ[k<÷:1 is already present
[  755.508835][T15742] FAULT_INJECTION: forcing a failure.
[  755.508835][T15742] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  755.522461][T15742] CPU: 1 UID: 0 PID: 15742 Comm: syz.9.1951 Not tainted syzkaller #0 PREEMPT(full) 
[  755.522493][T15742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  755.522508][T15742] Call Trace:
[  755.522516][T15742]  <TASK>
[  755.522526][T15742]  dump_stack_lvl+0x16c/0x1f0
[  755.522561][T15742]  should_fail_ex+0x512/0x640
[  755.522600][T15742]  should_fail_alloc_page+0xe7/0x130
[  755.522638][T15742]  prepare_alloc_pages+0x3c2/0x610
[  755.522676][T15742]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  755.522711][T15742]  ? find_held_lock+0x2b/0x80
[  755.522741][T15742]  ? is_bpf_text_address+0x8a/0x1a0
[  755.522777][T15742]  ? bpf_ksym_find+0x124/0x1c0
[  755.522805][T15742]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  755.522833][T15742]  ? is_bpf_text_address+0x94/0x1a0
[  755.522868][T15742]  ? kernel_text_address+0x8d/0x100
[  755.522899][T15742]  ? __kernel_text_address+0xd/0x40
[  755.522925][T15742]  ? unwind_get_return_address+0x59/0xa0
[  755.522983][T15742]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  755.523022][T15742]  ? policy_nodemask+0xea/0x4e0
[  755.523093][T15742]  alloc_pages_mpol+0x1fb/0x550
[  755.523145][T15742]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  755.523213][T15742]  ? kasan_save_stack+0x33/0x60
[  755.523257][T15742]  ? kasan_save_track+0x14/0x30
[  755.523298][T15742]  ? __kasan_kmalloc+0xaa/0xb0
[  755.523338][T15742]  ? __get_vm_area_node+0x101/0x330
[  755.523397][T15742]  alloc_pages_noprof+0x131/0x390
[  755.523448][T15742]  get_free_pages_noprof+0x10/0xb0
[  755.523493][T15742]  kasan_populate_vmalloc+0x9f/0x2d0
[  755.523533][T15742]  ? alloc_vmap_area+0x8b5/0x29e0
[  755.523572][T15742]  alloc_vmap_area+0x960/0x29e0
[  755.523618][T15742]  ? __pfx_alloc_vmap_area+0x10/0x10
[  755.523659][T15742]  __get_vm_area_node+0x1ca/0x330
[  755.523701][T15742]  __vmalloc_node_range_noprof+0x271/0x1480
[  755.523739][T15742]  ? n_tty_open+0x1a/0x170
[  755.523762][T15742]  ? look_up_lock_class+0x59/0x150
[  755.523798][T15742]  ? n_tty_open+0x1a/0x170
[  755.523827][T15742]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  755.523865][T15742]  ? console_unlock+0x184/0x210
[  755.523893][T15742]  ? __pfx_console_unlock+0x10/0x10
[  755.523924][T15742]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  755.523953][T15742]  ? n_tty_open+0x1a/0x170
[  755.523974][T15742]  __vmalloc_node_noprof+0xad/0xf0
[  755.524010][T15742]  ? n_tty_open+0x1a/0x170
[  755.524032][T15742]  ? __pfx_n_tty_open+0x10/0x10
[  755.524056][T15742]  n_tty_open+0x1a/0x170
[  755.524077][T15742]  ? __pfx_n_tty_open+0x10/0x10
[  755.524098][T15742]  tty_ldisc_open+0x9c/0x120
[  755.524129][T15742]  tty_ldisc_setup+0x40/0x100
[  755.524161][T15742]  tty_init_dev.part.0+0x1ec/0x500
[  755.524208][T15742]  tty_open+0xa4f/0xf90
[  755.524250][T15742]  ? __pfx_tty_open+0x10/0x10
[  755.524287][T15742]  ? chrdev_open+0x10b/0x6a0
[  755.524323][T15742]  ? __pfx_tty_open+0x10/0x10
[  755.524359][T15742]  chrdev_open+0x231/0x6a0
[  755.524389][T15742]  ? __pfx_apparmor_file_open+0x10/0x10
[  755.524426][T15742]  ? __pfx_chrdev_open+0x10/0x10
[  755.524458][T15742]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  755.524493][T15742]  do_dentry_open+0x97f/0x1530
[  755.524524][T15742]  ? __pfx_chrdev_open+0x10/0x10
[  755.524562][T15742]  vfs_open+0x82/0x3f0
[  755.524601][T15742]  path_openat+0x1de4/0x2cb0
[  755.524640][T15742]  ? __pfx_path_openat+0x10/0x10
[  755.524677][T15742]  do_filp_open+0x20b/0x470
[  755.524706][T15742]  ? __pfx_do_filp_open+0x10/0x10
[  755.524733][T15742]  ? lockdep_hardirqs_on+0x7c/0x110
[  755.524782][T15742]  ? alloc_fd+0x471/0x7d0
[  755.524816][T15742]  do_sys_openat2+0x11b/0x1d0
[  755.524853][T15742]  ? __pfx_do_sys_openat2+0x10/0x10
[  755.524903][T15742]  __x64_sys_openat+0x174/0x210
[  755.524942][T15742]  ? __pfx___x64_sys_openat+0x10/0x10
[  755.524993][T15742]  do_syscall_64+0xcd/0x4b0
[  755.525025][T15742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.525050][T15742] RIP: 0033:0x7fde3e98eec9
[  755.525070][T15742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  755.525095][T15742] RSP: 002b:00007fde3f7f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  755.525118][T15742] RAX: ffffffffffffffda RBX: 00007fde3ebe5fa0 RCX: 00007fde3e98eec9
[  755.525134][T15742] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  755.525150][T15742] RBP: 00007fde3ea11f91 R08: 0000000000000000 R09: 0000000000000000
[  755.525165][T15742] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  755.525199][T15742] R13: 00007fde3ebe6038 R14: 00007fde3ebe5fa0 R15: 00007ffc3da49bc8
[  755.525231][T15742]  </TASK>
[  756.065057][T15742] syz.9.1951: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  756.080685][T15742] CPU: 1 UID: 0 PID: 15742 Comm: syz.9.1951 Not tainted syzkaller #0 PREEMPT(full) 
[  756.080730][T15742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  756.080753][T15742] Call Trace:
[  756.080764][T15742]  <TASK>
[  756.080779][T15742]  dump_stack_lvl+0x16c/0x1f0
[  756.080829][T15742]  warn_alloc+0x248/0x3a0
[  756.080871][T15742]  ? __pfx_warn_alloc+0x10/0x10
[  756.080913][T15742]  ? __get_vm_area_node+0x2cd/0x330
[  756.080972][T15742]  ? __get_vm_area_node+0x2cd/0x330
[  756.081019][T15742]  ? __get_vm_area_node+0x1dc/0x330
[  756.081067][T15742]  ? __get_vm_area_node+0x208/0x330
[  756.081125][T15742]  __vmalloc_node_range_noprof+0xaf5/0x1480
[  756.081180][T15742]  ? look_up_lock_class+0x59/0x150
[  756.081232][T15742]  ? n_tty_open+0x1a/0x170
[  756.081277][T15742]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  756.081331][T15742]  ? console_unlock+0x184/0x210
[  756.081372][T15742]  ? __pfx_console_unlock+0x10/0x10
[  756.081424][T15742]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  756.081465][T15742]  ? n_tty_open+0x1a/0x170
[  756.081496][T15742]  __vmalloc_node_noprof+0xad/0xf0
[  756.081548][T15742]  ? n_tty_open+0x1a/0x170
[  756.081580][T15742]  ? __pfx_n_tty_open+0x10/0x10
[  756.081616][T15742]  n_tty_open+0x1a/0x170
[  756.081647][T15742]  ? __pfx_n_tty_open+0x10/0x10
[  756.081684][T15742]  tty_ldisc_open+0x9c/0x120
[  756.081730][T15742]  tty_ldisc_setup+0x40/0x100
[  756.081777][T15742]  tty_init_dev.part.0+0x1ec/0x500
[  756.081836][T15742]  tty_open+0xa4f/0xf90
[  756.081897][T15742]  ? __pfx_tty_open+0x10/0x10
[  756.081949][T15742]  ? chrdev_open+0x10b/0x6a0
[  756.082000][T15742]  ? __pfx_tty_open+0x10/0x10
[  756.082067][T15742]  chrdev_open+0x231/0x6a0
[  756.082111][T15742]  ? __pfx_apparmor_file_open+0x10/0x10
[  756.082165][T15742]  ? __pfx_chrdev_open+0x10/0x10
[  756.082212][T15742]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  756.082275][T15742]  do_dentry_open+0x97f/0x1530
[  756.082327][T15742]  ? __pfx_chrdev_open+0x10/0x10
[  756.082388][T15742]  vfs_open+0x82/0x3f0
[  756.082479][T15742]  path_openat+0x1de4/0x2cb0
[  756.082547][T15742]  ? __pfx_path_openat+0x10/0x10
[  756.082593][T15742]  do_filp_open+0x20b/0x470
[  756.082628][T15742]  ? __pfx_do_filp_open+0x10/0x10
[  756.082665][T15742]  ? lockdep_hardirqs_on+0x7c/0x110
[  756.082722][T15742]  ? alloc_fd+0x471/0x7d0
[  756.082762][T15742]  do_sys_openat2+0x11b/0x1d0
[  756.082807][T15742]  ? __pfx_do_sys_openat2+0x10/0x10
[  756.082866][T15742]  __x64_sys_openat+0x174/0x210
[  756.082912][T15742]  ? __pfx___x64_sys_openat+0x10/0x10
[  756.082972][T15742]  do_syscall_64+0xcd/0x4b0
[  756.083010][T15742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.083039][T15742] RIP: 0033:0x7fde3e98eec9
[  756.083062][T15742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  756.083089][T15742] RSP: 002b:00007fde3f7f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  756.083116][T15742] RAX: ffffffffffffffda RBX: 00007fde3ebe5fa0 RCX: 00007fde3e98eec9
[  756.083134][T15742] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  756.083153][T15742] RBP: 00007fde3ea11f91 R08: 0000000000000000 R09: 0000000000000000
[  756.083171][T15742] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  756.083188][T15742] R13: 00007fde3ebe6038 R14: 00007fde3ebe5fa0 R15: 00007ffc3da49bc8
[  756.083224][T15742]  </TASK>
[  756.083332][T15742] Mem-Info:
[  756.187204][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  756.203432][T15742] active_anon:14921 inactive_anon:10 isolated_anon:0
[  756.203432][T15742]  active_file:8441 inactive_file:50591 isolated_file:0
[  756.203432][T15742]  unevictable:768 dirty:1509 writeback:0
[  756.203432][T15742]  slab_reclaimable:13116 slab_unreclaimable:107893
[  756.203432][T15742]  mapped:48932 shmem:2596 pagetables:1517
[  756.203432][T15742]  sec_pagetables:0 bounce:0
[  756.203432][T15742]  kernel_misc_reclaimable:0
[  756.203432][T15742]  free:1245517 free_pcp:16723 free_cma:0
[  756.237711][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  756.241662][T15742] Node 0 active_anon:59684kB inactive_anon:40kB active_file:33764kB inactive_file:202232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:195728kB dirty:6036kB writeback:0kB shmem:8848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:26624kB kernel_stack:14088kB pagetables:5924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  756.558749][T15742] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  756.721321][T15742] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  756.769573][T15742] lowmem_reserve[]: 0 2488 2488 2488 2488
[  756.777543][T15742] Node 0 DMA32 free:1074336kB boost:0kB min:34396kB low:42992kB high:51588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65984kB inactive_anon:40kB active_file:33764kB inactive_file:202232kB unevictable:1536kB writepending:4932kB zspages:508kB present:3129332kB managed:2547976kB mlocked:0kB bounce:0kB free_pcp:54964kB local_pcp:34220kB free_cma:0kB
[  756.826276][T15742] lowmem_reserve[]: 0 0 0 0 0
[  756.846134][T15742] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  756.927239][T15742] lowmem_reserve[]: 0 0 0 0 0
[  756.933945][T15742] Node 1 Normal free:3891616kB boost:0kB min:55500kB low:69372kB high:83244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19004kB local_pcp:9600kB free_cma:0kB
[  756.984967][T15742] lowmem_reserve[]: 0 0 0 0 0
[  756.993866][T15742] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  757.021267][T15742] Node 0 DMA32: 3362*4kB (UM) 1600*8kB (UME) 1034*16kB (UME) 933*32kB (UME) 813*64kB (UME) 362*128kB (UM) 245*256kB (UM) 175*512kB (M) 87*1024kB (UME) 7*2048kB (UME) 158*4096kB (UM) = 1073928kB
[  757.096886][T15742] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  757.126621][T15742] Node 1 Normal: 188*4kB (UME) 38*8kB (UME) 38*16kB (UME) 237*32kB (UME) 62*64kB (UME) 16*128kB (UME) 4*256kB (UME) 5*512kB (UME) 4*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3891616kB
[  757.145414][T15742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  757.209179][T15742] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  757.242461][T15742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  757.276740][T15742] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  757.303853][T15742] 63504 total pagecache pages
[  757.318891][T15742] 30 pages in swap cache
[  757.333716][T15742] Free swap  = 124732kB
[  757.346733][T15742] Total swap = 124996kB
[  757.360010][T15742] 2097051 pages RAM
[  757.370838][T15742] 0 pages HighMem/MovableOnly
[  757.387940][T15742] 428415 pages reserved
[  757.394757][T15742] 0 pages cma reserved
[  757.419834][T15742] tty tty26: ldisc open failed (-12), clearing slot 25
[  757.450899][T15766] tty tty1: ldisc open failed (-12), clearing slot 0
[  758.388622][T15792] FAULT_INJECTION: forcing a failure.
[  758.388622][T15792] name failslab, interval 1, probability 0, space 0, times 0
[  758.425404][T15792] CPU: 1 UID: 0 PID: 15792 Comm: syz.9.1964 Not tainted syzkaller #0 PREEMPT(full) 
[  758.425451][T15792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  758.425477][T15792] Call Trace:
[  758.425489][T15792]  <TASK>
[  758.425503][T15792]  dump_stack_lvl+0x16c/0x1f0
[  758.425552][T15792]  should_fail_ex+0x512/0x640
[  758.425602][T15792]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  758.425645][T15792]  should_failslab+0xc2/0x120
[  758.425692][T15792]  kmem_cache_alloc_noprof+0x75/0x6e0
[  758.425731][T15792]  ? copy_fs_struct+0x49/0x340
[  758.425790][T15792]  ? copy_fs_struct+0x49/0x340
[  758.425838][T15792]  copy_fs_struct+0x49/0x340
[  758.425902][T15792]  copy_process+0x3254/0x76a0
[  758.425952][T15792]  ? __pfx___futex_wait+0x10/0x10
[  758.426003][T15792]  ? __pfx_copy_process+0x10/0x10
[  758.426050][T15792]  ? futex_private_hash_put+0x176/0x300
[  758.426105][T15792]  ? futex_private_hash_put+0x18a/0x300
[  758.426162][T15792]  kernel_clone+0xfc/0x930
[  758.426215][T15792]  ? __pfx_kernel_clone+0x10/0x10
[  758.426289][T15792]  __do_sys_clone+0xce/0x120
[  758.426339][T15792]  ? __pfx___do_sys_clone+0x10/0x10
[  758.426408][T15792]  ? xfd_validate_state+0x61/0x180
[  758.426454][T15792]  do_syscall_64+0xcd/0x4b0
[  758.426499][T15792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.426535][T15792] RIP: 0033:0x7fde3e98eec9
[  758.426563][T15792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  758.426598][T15792] RSP: 002b:00007fde3f7d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  758.426631][T15792] RAX: ffffffffffffffda RBX: 00007fde3ebe6090 RCX: 00007fde3e98eec9
[  758.426654][T15792] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001
[  758.426676][T15792] RBP: 00007fde3ea11f91 R08: 0000000000000000 R09: 0000000000000000
[  758.426697][T15792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  758.426718][T15792] R13: 00007fde3ebe6128 R14: 00007fde3ebe6090 R15: 00007ffc3da49bc8
[  758.426761][T15792]  </TASK>
[  759.676411][   T30] audit: type=1800 audit(4294967579.913:66): pid=15833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1972" name="dbroot" dev="configfs" ino=60363 res=0 errno=0
[  761.950649][   T30] audit: type=1800 audit(4294967582.205:67): pid=15867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1980" name="dbroot" dev="configfs" ino=61443 res=0 errno=0
[  762.561781][T15894] bond0: invalid ARP target specified
[  763.255571][T15908] __vm_enough_memory: pid: 15908, comm: syz.8.1988, bytes: 4398046511104 not enough memory for the allocation
[  765.632446][T15970] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2001'.
[  765.684401][T15970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  765.718445][T15970] batman_adv: batadv0: Removing interface: batadv_slave_0
[  765.791119][T15970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  765.818334][T15970] batman_adv: batadv0: Removing interface: batadv_slave_1
[  766.280067][T15978] random: crng reseeded on system resumption
[  766.572578][T15983] openvswitch: HfR: Dropping previously announced user features
[  767.231614][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2006'.
[  767.852033][ T7787] Bluetooth: hci5: unexpected event 0x02 length: 726 > 260
[  769.674060][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2016'.
[  770.999993][T16071] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2022'.
[  771.464055][T16081] binder: 16078:16081 ioctl c0046209 ffffffffffffffff returned -22
[  772.087026][   T31] INFO: task syz-executor:5846 blocked for more than 143 seconds.
[  772.095086][   T31]       Not tainted syzkaller #0
[  772.112740][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  772.140280][   T31] task:syz-executor    state:D stack:23608 pid:5846  tgid:5846  ppid:1      task_flags:0x400140 flags:0x00080002
[  772.191359][   T31] Call Trace:
[  772.198193][   T31]  <TASK>
[  772.205033][   T31]  __schedule+0x1190/0x5de0
[  772.214604][   T31]  ? __pfx___schedule+0x10/0x10
[  772.230865][   T31]  ? find_held_lock+0x2b/0x80
[  772.252397][T16107] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2028'.
[  772.267614][   T31]  ? schedule+0x2d7/0x3a0
[  772.296272][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  772.315045][   T31]  schedule+0xe7/0x3a0
[  772.376079][   T31]  schedule_preempt_disabled+0x13/0x30
[  772.419597][   T31]  __mutex_lock+0x818/0x1060
[  772.450989][   T31]  ? __lock_acquire+0x62e/0x1ce0
[  772.460897][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  772.477978][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  772.495728][   T31]  ? net_generic+0xea/0x2a0
[  772.512979][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  772.528721][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  772.544052][   T31]  nfsd_umount+0x48/0xe0
[  772.568342][   T31]  deactivate_locked_super+0xc1/0x1a0
[  772.581478][   T31]  deactivate_super+0xde/0x100
[  772.588886][   T31]  cleanup_mnt+0x225/0x450
[  772.595230][   T31]  task_work_run+0x14d/0x240
[  772.605169][   T31]  ? __pfx_task_work_run+0x10/0x10
[  772.617535][   T31]  ? __pfx___x64_sys_umount+0x10/0x10
[  772.629236][   T31]  exit_to_user_mode_loop+0xec/0x130
[  772.661293][   T31]  do_syscall_64+0x419/0x4b0
[  772.681624][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  772.700434][   T31] RIP: 0033:0x7ff1c2f901f7
[  772.726604][   T31] RSP: 002b:00007fffa057d5e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  772.744864][   T31] RAX: 0000000000000000 RBX: 00007ff1c3011d7d RCX: 00007ff1c2f901f7
[  772.800390][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa057d6a0
[  772.824668][   T31] RBP: 00007fffa057d6a0 R08: 0000000000000000 R09: 0000000000000000
[  772.833025][   T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa057e730
[  772.841461][   T31] R13: 00007ff1c3011d7d R14: 0000000000095312 R15: 00007fffa057e770
[  772.868806][   T31]  </TASK>
[  772.879887][   T31] INFO: task syz-executor:13106 blocked for more than 144 seconds.
[  772.901069][   T31]       Not tainted syzkaller #0
[  772.914052][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  772.935443][   T31] task:syz-executor    state:D stack:23816 pid:13106 tgid:13106 ppid:1      task_flags:0x400140 flags:0x00080002
[  772.948041][   T31] Call Trace:
[  772.951527][   T31]  <TASK>
[  772.959426][   T31]  __schedule+0x1190/0x5de0
[  772.964405][   T31]  ? __lock_acquire+0x62e/0x1ce0
[  772.969794][   T31]  ? __pfx___schedule+0x10/0x10
[  772.976504][   T31]  ? find_held_lock+0x2b/0x80
[  772.981468][   T31]  ? schedule+0x2d7/0x3a0
[  772.989295][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  772.997579][   T31]  schedule+0xe7/0x3a0
[  773.002462][   T31]  schedule_preempt_disabled+0x13/0x30
[  773.008356][   T31]  __mutex_lock+0x818/0x1060
[  773.013662][   T31]  ? __lock_acquire+0x62e/0x1ce0
[  773.019089][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  773.025051][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  773.030443][   T31]  ? net_generic+0xea/0x2a0
[  773.038090][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  773.044822][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  773.050304][   T31]  nfsd_umount+0x48/0xe0
[  773.059919][   T31]  deactivate_locked_super+0xc1/0x1a0
[  773.066052][   T31]  deactivate_super+0xde/0x100
[  773.071377][   T31]  cleanup_mnt+0x225/0x450
[  773.076652][   T31]  task_work_run+0x14d/0x240
[  773.081498][   T31]  ? __pfx_task_work_run+0x10/0x10
[  773.088586][   T31]  ? __pfx___x64_sys_umount+0x10/0x10
[  773.097220][   T31]  exit_to_user_mode_loop+0xec/0x130
[  773.110064][   T31]  do_syscall_64+0x419/0x4b0
[  773.118642][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.125234][   T31] RIP: 0033:0x7f4acf5901f7
[  773.129863][   T31] RSP: 002b:00007ffcca2030f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  773.138949][   T31] RAX: 0000000000000000 RBX: 00007f4acf611d7d RCX: 00007f4acf5901f7
[  773.148127][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcca2031b0
[  773.164993][   T31] RBP: 00007ffcca2031b0 R08: 0000000000000000 R09: 0000000000000000
[  773.174234][   T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcca204240
[  773.182427][   T31] R13: 00007f4acf611d7d R14: 0000000000097177 R15: 00007ffcca204280
[  773.190646][   T31]  </TASK>
[  773.195306][   T31] 
[  773.195306][   T31] Showing all locks held in the system:
[  773.238819][   T31] 1 lock held by khungtaskd/31:
[  773.255584][   T31]  #0: ffffffff8e1c2220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  773.275027][   T31] 2 locks held by syz-executor/5846:
[  773.280384][   T31]  #0: ffff88802b5300e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  773.302341][   T31]  #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  773.312480][   T31] 4 locks held by kworker/u10:25/10087:
[  773.318084][   T31]  #0: ffff8880b863a498 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  773.328681][   T31]  #1: ffff8880b8624088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0
[  773.337901][   T31]  #2: ffff8880b8625b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0
[  773.347739][   T31]  #3: ffffffff9ab3d7b0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0
[  773.358931][   T31] 2 locks held by getty/10590:
[  773.364061][   T31]  #0: ffff8880305df0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  773.374881][   T31]  #1: ffffc900032542f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  773.385566][   T31] 2 locks held by syz-executor/13106:
[  773.391364][   T31]  #0: ffff88804adfa0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  773.402478][   T31]  #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  773.412734][   T31] 2 locks held by syz.2.1572/13647:
[  773.418082][   T31]  #0: ffffffff8ff8c250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  773.427010][   T31]  #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  773.437991][   T31] 2 locks held by syz-executor/13869:
[  773.443624][   T31]  #0: ffff88807e2540e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  773.454179][   T31]  #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  773.464437][   T31] 1 lock held by syz.8.2028/16104:
[  773.469679][   T31]  #0: ffffffff8fed24d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690
[  773.479622][   T31] 2 locks held by syz.9.2029/16105:
[  773.484888][   T31]  #0: ffffffff8fed24d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690
[  773.494726][   T31]  #1: ffffffff8e1cd7b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  773.505322][   T31] 2 locks held by dhcpcd/16110:
[  773.510619][   T31]  #0: ffff888012374148 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270
[  773.521461][   T31]  #1: ffffffff8e1cd7b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0
[  773.532991][   T31] 
[  773.535653][   T31] =============================================
[  773.535653][   T31] 
[  773.544551][   T31] NMI backtrace for cpu 0
[  773.544577][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  773.544612][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  773.544632][   T31] Call Trace:
[  773.544642][   T31]  <TASK>
[  773.544655][   T31]  dump_stack_lvl+0x116/0x1f0
[  773.544697][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  773.544743][   T31]  ? preempt_count_add+0x7a/0x150
[  773.544776][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  773.544830][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  773.544886][   T31]  watchdog+0xf3f/0x1170
[  773.544916][   T31]  ? rcu_is_watching+0x12/0xc0
[  773.544946][   T31]  ? __pfx_watchdog+0x10/0x10
[  773.544969][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  773.544997][   T31]  ? __kthread_parkme+0x19e/0x250
[  773.545032][   T31]  ? __pfx_watchdog+0x10/0x10
[  773.545056][   T31]  kthread+0x3c5/0x780
[  773.545079][   T31]  ? __pfx_kthread+0x10/0x10
[  773.545103][   T31]  ? rcu_is_watching+0x12/0xc0
[  773.545131][   T31]  ? __pfx_kthread+0x10/0x10
[  773.545154][   T31]  ret_from_fork+0x56a/0x730
[  773.545176][   T31]  ? __pfx_kthread+0x10/0x10
[  773.545199][   T31]  ret_from_fork_asm+0x1a/0x30
[  773.545244][   T31]  </TASK>
[  773.545256][   T31] Sending NMI from CPU 0 to CPUs 1:
[  773.676019][    C1] NMI backtrace for cpu 1
[  773.676040][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  773.676071][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  773.676088][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  773.676125][    C1] Code: 6e 5e 02 e9 c3 09 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 de 1b 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  773.676152][    C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2
[  773.676173][    C1] RAX: 0000000000719bef RBX: 0000000000000001 RCX: ffffffff8b4e2a59
[  773.676191][    C1] RDX: 0000000000000000 RSI: ffffffff8d8245fd RDI: ffffffff8bd04640
[  773.676209][    C1] RBP: ffffed1003b5eb58 R08: 0000000000000001 R09: ffffed10170e6655
[  773.676231][    C1] R10: ffff8880b87332ab R11: 0000000000000000 R12: 0000000000000001
[  773.676253][    C1] R13: ffff88801daf5ac0 R14: ffffffff905ff190 R15: 0000000000000000
[  773.676271][    C1] FS:  0000000000000000(0000) GS:ffff888124f6f000(0000) knlGS:0000000000000000
[  773.676301][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  773.676319][    C1] CR2: 000055b00fe28168 CR3: 000000007766c000 CR4: 00000000003526f0
[  773.676337][    C1] Call Trace:
[  773.676347][    C1]  <TASK>
[  773.676357][    C1]  default_idle+0x13/0x20
[  773.676392][    C1]  default_idle_call+0x6c/0xb0
[  773.676428][    C1]  do_idle+0x38d/0x500
[  773.676462][    C1]  ? __pfx_do_idle+0x10/0x10
[  773.676494][    C1]  ? trace_sched_exit_tp+0x2f/0x120
[  773.676525][    C1]  cpu_startup_entry+0x4f/0x60
[  773.676559][    C1]  start_secondary+0x21d/0x2b0
[  773.676600][    C1]  ? __pfx_start_secondary+0x10/0x10
[  773.676645][    C1]  common_startup_64+0x13e/0x148
[  773.676687][    C1]  </TASK>
[  773.697982][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  773.698017][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  773.698062][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  773.698085][   T31] Call Trace:
[  773.698099][   T31]  <TASK>
[  773.698116][   T31]  dump_stack_lvl+0x3d/0x1f0
[  773.698167][   T31]  vpanic+0x640/0x6f0
[  773.698207][   T31]  panic+0xca/0xd0
[  773.698239][   T31]  ? __pfx_panic+0x10/0x10
[  773.698272][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  773.698322][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[  773.698385][   T31]  ? watchdog+0xe48/0x1170
[  773.698428][   T31]  ? watchdog+0xe3b/0x1170
[  773.698469][   T31]  watchdog+0xe59/0x1170
[  773.698516][   T31]  ? rcu_is_watching+0x12/0xc0
[  773.698571][   T31]  ? __pfx_watchdog+0x10/0x10
[  773.698609][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  773.698655][   T31]  ? __kthread_parkme+0x19e/0x250
[  773.698710][   T31]  ? __pfx_watchdog+0x10/0x10
[  773.698750][   T31]  kthread+0x3c5/0x780
[  773.698785][   T31]  ? __pfx_kthread+0x10/0x10
[  773.698826][   T31]  ? rcu_is_watching+0x12/0xc0
[  773.698871][   T31]  ? __pfx_kthread+0x10/0x10
[  773.698911][   T31]  ret_from_fork+0x56a/0x730
[  773.698946][   T31]  ? __pfx_kthread+0x10/0x10
[  773.698985][   T31]  ret_from_fork_asm+0x1a/0x30
[  773.699055][   T31]  </TASK>
[  773.982247][   T31] Kernel Offset: disabled
[  773.986595][   T31] Rebooting in 86400 seconds..