last executing test programs:

2m56.606459957s ago: executing program 32 (id=873):
r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002cbd708719dbdf25190000000400018004000780"], 0x1c}, 0x1, 0x0, 0x0, 0x802}, 0x4000000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0)
mmap$auto(0xfffffffffffffffe, 0x66e, 0x4, 0x100020eb2, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r5], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
unshare$auto(0x40000000002003)
open(0x0, 0x78081, 0x0)
set_mempolicy$auto(0xf, &(0x7f0000000100), 0xb425)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x9)
socket(0x2, 0x1, 0x0)
prctl$auto(0x3e, 0x6, 0x0, 0x1, 0x0)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0)
ioctl$auto_BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={"6c00cf81000300ffffffffffffff291d00", 0x3f7, 0x408, 0xffc, 0x400004, 0x200000000040000b})
mprotect$auto(0x1ffffffff000, 0x100018, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002)
pread64$auto(0xffffffffffffffff, 0x0, 0x40000000f42c, 0x80002)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)

2m31.785427336s ago: executing program 4 (id=947):
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket(0x25, 0x1, 0x0)
sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
mmap$auto(0x20000, 0x400008, 0x3, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
fallocate$auto(r1, 0x1, 0x2, 0x6657)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x9, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1000000000000001, 0x1]}, 0x0)
socket(0xa, 0x4, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0)
msync$auto(0x1, 0x9, 0xfffffff7)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'})
socket(0x10, 0x2, 0x4)

2m30.844373496s ago: executing program 4 (id=950):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
utimensat$auto(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x38)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000002140)=""/4106, 0xfffffffffffffd1b)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x401, 0x4, 0x0, 0x28)
sendmmsg$auto(0x3, 0x0, 0x9a8, 0x480000)
r3 = prctl$auto(0x3e, 0xc5bb, 0x0, 0xfffffffffffffffd, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x6)
select$auto(0x6, &(0x7f0000000000)={[0x5, 0x3, 0x4, 0xa, 0xccf9, 0x9, 0xffffffffffffffff, 0x3, 0xb, 0x1, 0x100000000000000, 0x3, 0xfffffffffffffe8f, 0x3, 0x40000000000005, 0xfffffffffffffff5]}, &(0x7f0000000100)={[0x8, 0x200000000005, 0x80000000000007, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x0, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x4, 0x8000, 0x1000, 0x8000000000000001, 0x8000000000000081, 0x0, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x7, 0xfffffffffffffff4, 0x80000000009, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRES32=r0, @ANYBLOB="d6796bdb02d966c7127e163dffde92eee0f342784e46cf299e0e5bd89979900eba786e1c5b52d017c94d1cfd483666a509ca7e40a793a9d6422961a6466e0237efa21081fc18e860913b4086f2c14ebc29ad1b467c25ec2cf6555786d0dce7c6de73bdc019bb34c7e49995f9d7b702b3d57bc511beb83624884003e56942027c9c0e5f5cb4e6e5d215202522c1c327e37eb2ad4e824f2343a14cdb6a83616cfb3c8cea956a6179d2bc8616c7353a180ba051b474d2ef6d6f70770fa956edcb9e8f666f239c581e2b60b2c065e693bcfcfbc91344cef89edaed6540d504070b2c9dc81b56fc8b6c802a0b80", @ANYRESHEX=r4, @ANYRESOCT=r1, @ANYRES32=r3, @ANYBLOB="fb8813b3df664c9aff0fef05c69a33d219ecfa516758fb3af4080bb6b261b14bcf08ea883ff24888c6232b6707e9a2e23a83926938927dc147fe24c527612a3335c93b000ab742445c3d60058120cf9618543b944d78b991"], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2)
socket(0xa, 0x2, 0x0)
socket(0x21, 0x2, 0xa)
sendmmsg$auto(0x2, &(0x7f0000000240)={{0x0, 0x6, 0x0, 0x2, 0x0, 0xd8, 0xfff}, 0x8001}, 0x7, 0xfe64)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0)
read$auto_usbfs_devices_fops_usb(r1, &(0x7f0000000440)=""/118, 0x76)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

2m29.086329995s ago: executing program 3 (id=955):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0)
ioctl$auto(r1, 0x9000643a, 0xc35)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x70, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x2c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)
sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x3}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xfd}, @THERMAL_GENL_ATTR_TZ_TRIP={0x1e8, 0x4, 0x0, 0x1, [@nested={0x1ce, 0x145, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x4}, @generic="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", @nested={0x4, 0x16}, @typed={0xa7, 0xfa, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @generic="495a0d7a6e1cb0d1ea3c6d262f", @nested={0x4, 0xcd}, @typed={0x8, 0x121, 0x0, 0x0, @u32=0x350c}]}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@empty}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000)
unshare$auto(0x40000080)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
pread64$auto(r3, 0x0, 0x0, 0x9)
read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
nanosleep$auto(0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30)
openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0)

2m18.169761967s ago: executing program 33 (id=944):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0)
ioctl$auto(r1, 0x9000643a, 0xc35)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x70, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x2c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)
sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x3}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xfd}, @THERMAL_GENL_ATTR_TZ_TRIP={0x1e8, 0x4, 0x0, 0x1, [@nested={0x1ce, 0x145, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x4}, @generic="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", @nested={0x4, 0x16}, @typed={0xa7, 0xfa, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @generic="495a0d7a6e1cb0d1ea3c6d262f", @nested={0x4, 0xcd}, @typed={0x8, 0x121, 0x0, 0x0, @u32=0x350c}]}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@empty}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000)
unshare$auto(0x40000080)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
pread64$auto(r3, 0x0, 0x0, 0x9)
read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
nanosleep$auto(0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30)
openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0)

2m15.564438256s ago: executing program 34 (id=950):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
utimensat$auto(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x38)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000002140)=""/4106, 0xfffffffffffffd1b)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x401, 0x4, 0x0, 0x28)
sendmmsg$auto(0x3, 0x0, 0x9a8, 0x480000)
r3 = prctl$auto(0x3e, 0xc5bb, 0x0, 0xfffffffffffffffd, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x6)
select$auto(0x6, &(0x7f0000000000)={[0x5, 0x3, 0x4, 0xa, 0xccf9, 0x9, 0xffffffffffffffff, 0x3, 0xb, 0x1, 0x100000000000000, 0x3, 0xfffffffffffffe8f, 0x3, 0x40000000000005, 0xfffffffffffffff5]}, &(0x7f0000000100)={[0x8, 0x200000000005, 0x80000000000007, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x0, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x4, 0x8000, 0x1000, 0x8000000000000001, 0x8000000000000081, 0x0, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x7, 0xfffffffffffffff4, 0x80000000009, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRES32=r0, @ANYBLOB="d6796bdb02d966c7127e163dffde92eee0f342784e46cf299e0e5bd89979900eba786e1c5b52d017c94d1cfd483666a509ca7e40a793a9d6422961a6466e0237efa21081fc18e860913b4086f2c14ebc29ad1b467c25ec2cf6555786d0dce7c6de73bdc019bb34c7e49995f9d7b702b3d57bc511beb83624884003e56942027c9c0e5f5cb4e6e5d215202522c1c327e37eb2ad4e824f2343a14cdb6a83616cfb3c8cea956a6179d2bc8616c7353a180ba051b474d2ef6d6f70770fa956edcb9e8f666f239c581e2b60b2c065e693bcfcfbc91344cef89edaed6540d504070b2c9dc81b56fc8b6c802a0b80", @ANYRESHEX=r4, @ANYRESOCT=r1, @ANYRES32=r3, @ANYBLOB="fb8813b3df664c9aff0fef05c69a33d219ecfa516758fb3af4080bb6b261b14bcf08ea883ff24888c6232b6707e9a2e23a83926938927dc147fe24c527612a3335c93b000ab742445c3d60058120cf9618543b944d78b991"], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2)
socket(0xa, 0x2, 0x0)
socket(0x21, 0x2, 0xa)
sendmmsg$auto(0x2, &(0x7f0000000240)={{0x0, 0x6, 0x0, 0x2, 0x0, 0xd8, 0xfff}, 0x8001}, 0x7, 0xfe64)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0)
read$auto_usbfs_devices_fops_usb(r1, &(0x7f0000000440)=""/118, 0x76)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

2m14.246940477s ago: executing program 2 (id=984):
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000000)=""/194, 0xc2)
select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0x7, 0x87, 0x6, 0xc, 0xc, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0xffff, 0xd3, 0x1]}, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x43a080, 0xa3)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x20, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptywe\x00', 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto(0x3, 0x541a, r1)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0)
pwrite64$auto(r2, 0x0, 0x2, 0xfffd)
r3 = open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8)
sendfile$auto(r3, r3, 0x0, 0x7ffff000)
mmap$auto(0x8, 0x9, 0xb, 0x12, 0x401, 0x8000)
io_uring_setup$auto(0x52, 0x0)
r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0)
ioctl$auto_BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mlockall$auto(0x7)
mmap$auto(0x0, 0x1, 0x80000006, 0x9b72, 0x2, 0x8000000000000000)
syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0)
getresuid$auto(0x0, 0x0, 0x0)
sendfile$auto(r3, r2, 0x0, 0x2000)
mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/conf/wg1/drop_unsolicited_na\x00', 0x0, 0x0)

2m14.040624137s ago: executing program 35 (id=955):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0)
ioctl$auto(r1, 0x9000643a, 0xc35)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x70, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x2c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)
sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x3}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xfd}, @THERMAL_GENL_ATTR_TZ_TRIP={0x1e8, 0x4, 0x0, 0x1, [@nested={0x1ce, 0x145, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x4}, @generic="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", @nested={0x4, 0x16}, @typed={0xa7, 0xfa, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @generic="495a0d7a6e1cb0d1ea3c6d262f", @nested={0x4, 0xcd}, @typed={0x8, 0x121, 0x0, 0x0, @u32=0x350c}]}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@empty}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000)
unshare$auto(0x40000080)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
pread64$auto(r3, 0x0, 0x0, 0x9)
read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
nanosleep$auto(0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30)
openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0)

2m12.607065156s ago: executing program 2 (id=981):
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f0000001280)="428112e56c5919b60937b30777b1b745bbc9ae0848b6e2735be5d890751760a05d8ba765a9a9367aa663a7dade95e25b24288775cad7c3d2c3d29e80f425cf0345b983744f96f7322ae88270e3e85b88c4c14f1b75670dc708e3c914a70472a98d740773f7fea40f51045ad7807a")
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
eventfd$auto(0xa)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0)
select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
recvfrom$auto(0xffffffffffffffff, 0x0, 0x1, 0xb, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a)
r2 = socket(0xa, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000006cc0), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_RECONFIGURE(r4, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x24044880)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
r6 = io_uring_setup$auto(0x1, 0x0)
move_mount$auto(0xffffffffffffff9c, 0x0, r6, 0x0, 0x67)
ioctl$auto(r3, 0x4008af21, 0xffffffffffffffff)

2m11.620448343s ago: executing program 2 (id=982):
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x3, 0x29, 0x2d, 0x0, 0x88)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/kcm_stats\x00', 0xe8c1b63324191c35, 0x0)
r1 = socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r2, 0x4b4a, 0x9)
socket(0x11, 0x3, 0x9)
open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x4)
futex$auto(&(0x7f0000000080)=0x2948, 0x9, 0x2948, 0x0, 0x0, 0x5)
futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x1f, 0x0, 0x0, 0x440a48d3)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x100010008000)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
write$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffffff, 0x0, 0x0)
r4 = gettid()
kill$auto(r4, 0x11)
ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={"dfdf0791684bd51960fac9e4d31026fc620a2ec48a4268dd9f21cec448518dae", 0x40, 0x40, 0x7fffffff, 0x1, 0x6, r4})
fcntl$auto_F_GETLK(r1, 0x5, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x12, 0x0)
r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0)
ioctl$auto(r2, 0x64c9, r5)
r6 = fsopen$auto(0x0, 0x1)
fsconfig$auto_SHMEM_HUGE_ADVISE(r6, 0x2, &(0x7f0000000040)=',%!/-%,\x00', &(0x7f0000000080), 0x3)
pread64$auto(r0, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\xe3A{\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8', 0x1ff, 0x5)

2m3.664156705s ago: executing program 5 (id=1001):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x0, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
inotify_init1$auto(0x3000000000000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x15, 0x5, 0x0)
openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.6/usb7/bNumConfigurations\x00', 0x80000, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x2, 0x3a)
inotify_init1$auto(0x3000000000000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x40106f52, r0)

2m3.391658036s ago: executing program 5 (id=1004):
openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/options/event-fork\x00', 0x400, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0)
write$auto(0x3, 0x0, 0x0)
write$auto_proc_loginuid_operations_base(0xffffffffffffffff, &(0x7f0000000040)="9dc4e29815c3dd855a4340428a12ae12c859250e55d63ef492651f515f9a76158c045ff86707a23e18496d5d7129a8e340b7ebcd1806c7b26420ea05cab20eabc25b6240b084785dac9ddeceedcf0c288633b6a40eb3c9a9a00a8140c1a5d3f4418e6820622dc5e8f300f88254e3b7a4052254f9", 0x74)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
open(&(0x7f0000000800)='./file1\x00', 0x173a41, 0xaa)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x29, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0)
ioctl$auto(r3, 0x64cf, 0x1df)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sysfs$auto(0x2, 0x23, 0x0)
r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r4, 0x0, 0x4)
bind$auto(0x3, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x9f, 0x3, 0x0, 0x0, @random="1fed2687fb12"}, 0x6a)
connect$auto(r0, &(0x7f00000000c0)=@in={0x2, 0x3, @rand_addr=0x64010100}, 0x52)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
shutdown$auto(0x200000003, 0x2)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000300), r2)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="42bf", 0x2)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff)

1m56.550966696s ago: executing program 36 (id=982):
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x3, 0x29, 0x2d, 0x0, 0x88)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/kcm_stats\x00', 0xe8c1b63324191c35, 0x0)
r1 = socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r2, 0x4b4a, 0x9)
socket(0x11, 0x3, 0x9)
open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x4)
futex$auto(&(0x7f0000000080)=0x2948, 0x9, 0x2948, 0x0, 0x0, 0x5)
futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x1f, 0x0, 0x0, 0x440a48d3)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x100010008000)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
write$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffffff, 0x0, 0x0)
r4 = gettid()
kill$auto(r4, 0x11)
ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={"dfdf0791684bd51960fac9e4d31026fc620a2ec48a4268dd9f21cec448518dae", 0x40, 0x40, 0x7fffffff, 0x1, 0x6, r4})
fcntl$auto_F_GETLK(r1, 0x5, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x12, 0x0)
r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0)
ioctl$auto(r2, 0x64c9, r5)
r6 = fsopen$auto(0x0, 0x1)
fsconfig$auto_SHMEM_HUGE_ADVISE(r6, 0x2, &(0x7f0000000040)=',%!/-%,\x00', &(0x7f0000000080), 0x3)
pread64$auto(r0, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\xe3A{\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8', 0x1ff, 0x5)

1m52.317055906s ago: executing program 8 (id=1024):
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket(0x25, 0x1, 0x0)
sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
mmap$auto(0x20000, 0x400008, 0x3, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
fallocate$auto(r1, 0x1, 0x2, 0x6657)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x9, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1000000000000001, 0x1]}, 0x0)
socket(0xa, 0x4, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0)
msync$auto(0x1, 0x9, 0xfffffff7)
madvise$auto(0x0, 0x20200, 0x15)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'})
socket(0x10, 0x2, 0x4)

1m51.354949956s ago: executing program 8 (id=1038):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0)
ioctl$auto(r1, 0x9000643a, 0xc35)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x70, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x2c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)
sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x3}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xfd}, @THERMAL_GENL_ATTR_TZ_TRIP={0x1e8, 0x4, 0x0, 0x1, [@nested={0x1ce, 0x145, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x4}, @generic="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", @nested={0x4, 0x16}, @typed={0xa7, 0xfa, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @generic="495a0d7a6e1cb0d1ea3c6d262f", @nested={0x4, 0xcd}, @typed={0x8, 0x121, 0x0, 0x0, @u32=0x350c}]}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@empty}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000)
unshare$auto(0x40000080)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
pread64$auto(r3, 0x0, 0x0, 0x9)
read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
nanosleep$auto(0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30)
openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0)

1m48.393809601s ago: executing program 37 (id=1004):
openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/options/event-fork\x00', 0x400, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0)
write$auto(0x3, 0x0, 0x0)
write$auto_proc_loginuid_operations_base(0xffffffffffffffff, &(0x7f0000000040)="9dc4e29815c3dd855a4340428a12ae12c859250e55d63ef492651f515f9a76158c045ff86707a23e18496d5d7129a8e340b7ebcd1806c7b26420ea05cab20eabc25b6240b084785dac9ddeceedcf0c288633b6a40eb3c9a9a00a8140c1a5d3f4418e6820622dc5e8f300f88254e3b7a4052254f9", 0x74)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
open(&(0x7f0000000800)='./file1\x00', 0x173a41, 0xaa)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x29, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0)
ioctl$auto(r3, 0x64cf, 0x1df)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sysfs$auto(0x2, 0x23, 0x0)
r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r4, 0x0, 0x4)
bind$auto(0x3, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x9f, 0x3, 0x0, 0x0, @random="1fed2687fb12"}, 0x6a)
connect$auto(r0, &(0x7f00000000c0)=@in={0x2, 0x3, @rand_addr=0x64010100}, 0x52)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
shutdown$auto(0x200000003, 0x2)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000300), r2)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="42bf", 0x2)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff)

1m36.259830141s ago: executing program 38 (id=1038):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0)
ioctl$auto(r1, 0x9000643a, 0xc35)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x70, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x2c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)
sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x3}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xfd}, @THERMAL_GENL_ATTR_TZ_TRIP={0x1e8, 0x4, 0x0, 0x1, [@nested={0x1ce, 0x145, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x4}, @generic="45977c8c39b253ade7b8717f9f6b0181d13715a2ebd5d7bbaa3a15b646fce0a7bac662a3b1782b36c2ceb58af8dce5999cd670e6e62a1a143fb12e84a2268c37e1ca55ff2ed100f1cf537c48a735d4721be79277a6d1baa3f93656b347455c36728642f7a6a8de4f4e6d2c01c827122397244c59756dce6505d1ad492e7a0ba37a242944ec4731da56e5b5afb3e45a560bc9a7fbbc4cf811666c305fffc1d0b1adf8674c49a6a513141f5f4880b7146152583d838e1a88ce72316b3294f9f2c2759a78f91d60928419b4f5bee26644cb7821cd8735bf2c13898d36d51ec28a234e72bc5379b95cfd74d37444e8f87275d1a26c92ed2489d39cd219a1ea", @nested={0x4, 0x16}, @typed={0xa7, 0xfa, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @generic="495a0d7a6e1cb0d1ea3c6d262f", @nested={0x4, 0xcd}, @typed={0x8, 0x121, 0x0, 0x0, @u32=0x350c}]}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@empty}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000)
unshare$auto(0x40000080)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
pread64$auto(r3, 0x0, 0x0, 0x9)
read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
nanosleep$auto(0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30)
openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0)

1m27.152352386s ago: executing program 1 (id=1088):
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0)
r0 = epoll_create$auto(0x4)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0)
write$auto(0x3, 0x0, 0x5c8)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x4000000000009, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0)
writev$auto(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0x80000000}, 0x9)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x787001, 0x0)
write$auto(r2, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
timerfd_gettime$auto(0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000)
madvise$auto(0x0, 0x2003f0, 0x15)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0))
socket(0x2, 0x1, 0x106)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe97f, 0x80dc, 0xeb5, 0x401, 0x7)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r3, 0x0)

1m25.756535283s ago: executing program 1 (id=1124):
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket(0x25, 0x1, 0x0)
sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
mmap$auto(0x20000, 0x400008, 0x3, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
fallocate$auto(r1, 0x1, 0x2, 0x6657)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x9, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1000000000000001, 0x1]}, 0x0)
socket(0xa, 0x4, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0)
msync$auto(0x1, 0x9, 0xfffffff7)
madvise$auto(0x0, 0x20200, 0x15)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'})
socket(0x10, 0x2, 0x4)

1m24.294921736s ago: executing program 1 (id=1127):
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8040)
r0 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0)
preadv$auto(r0, &(0x7f00000001c0)={&(0x7f0000000380), 0x82}, 0x8, 0x9, 0xfffffffffffffff3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0)
ioctl$auto_SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000004040))
openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_dump\x00', 0x20000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0)
openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000080), 0x200200, 0x0)
getdents64$auto(r2, &(0x7f0000000440)={0x1, 0x5, 0x8000, 0x5, "916e24dd1734f89641f0f5ce302bcb0205173f36f4b6634b48232ab0875497418dc32e93e467b3b66cf1459da7c958265fa050328e2897357dc0cce15b31d97e8477ae13895b320e505e8778339fc5302358e3464b9687fe617f1a5506d3b8bb67d011c8020000008c57df7ad36779be380000000000000000000000000000000000000032d2c5b5cc0070ae765afaea9ead841a5950b3c8e12fe9bbf5ff2df82c6e32116034ba87e7acd2a9778fee6139cbd0a4dba12382cda13333c36f3df82d5c"}, 0x6)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0x40000000000eb1, 0x401, 0x8000)
r3 = socket(0x2, 0x1, 0x0)
r4 = getsockopt$auto(r3, 0x6, 0x22, 0x0, 0x0)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000200), 0x80840, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x430000, 0x0)
r5 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000140), 0xc080, 0x0)
poll$auto(&(0x7f00000000c0)={r5, 0x1}, 0x1, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_TIOCSBRK2(r4, 0x5427, &(0x7f0000000340))
madvise$auto(0xa, 0x7, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00')
openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x40, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m21.666595397s ago: executing program 6 (id=1137):
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = socketcall$auto(0x8000, 0x0)
set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3)
r2 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x10001, 0x10, 0x2, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x955b, 0x8, 0x7, 0x5}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff)
r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rate_ctrl_alg\x00', 0x0, 0x0)
readv$auto(r5, &(0x7f0000000100)={&(0x7f0000000280), 0x1}, 0x4)
sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf250b0000000a000280019e695f99bb0e0000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
ioctl$auto_BLKTRACESETUP2(r6, 0xc0481273, &(0x7f0000000280)={"b3efc16b86b24b821e90a2e1a74c38c88843237b4095eea24d4d39023c954a56", 0x5, 0x4000, 0xfffff7dc, 0x6, 0x3, 0xffffffffffffffff})
read$auto(r6, 0x0, 0x1ff)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/fs/xfs/stats_clear\x00', 0x1, 0x0)
write$auto(r7, 0x0, 0x3)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
sysfs$auto(0x2, 0x11, 0x0)
r8 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r8, 0x8, 0x0, 0x0, 0x0)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
close_range$auto(r2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0)

1m21.251188816s ago: executing program 6 (id=1138):
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f0000001280)="428112e56c5919b60937b30777b1b745bbc9ae0848b6e2735be5d890751760a05d8ba765a9a9367aa663a7dade95e25b24288775cad7c3d2c3d29e80f425cf0345b983744f96f7322ae88270e3e85b88c4c14f1b75670dc708e3c914a70472a98d740773f7fea40f51045ad7807a")
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
eventfd$auto(0xa)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
recvfrom$auto(r2, 0x0, 0x1, 0xb, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a)
r3 = socket(0xa, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000006cc0), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_RECONFIGURE(r5, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x24044880)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
r7 = io_uring_setup$auto(0x1, 0x0)
move_mount$auto(0xffffffffffffff9c, 0x0, r7, 0x0, 0x67)
ioctl$auto(r4, 0x4008af21, 0xffffffffffffffff)

1m19.696863457s ago: executing program 6 (id=1142):
openat$auto_random_fops_random(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4)
r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram7\x00', 0x159880, 0x0)
r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000001600)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/rc_rateidx_mask_2ghz\x00', 0x0, 0x0)
read$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = socket(0x11, 0xa, 0x9)
socket(0xa, 0x801, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0)
socket(0xa, 0x2, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r2, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082)
write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef)

1m18.722184965s ago: executing program 6 (id=1144):
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket(0x25, 0x1, 0x0)
sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
mmap$auto(0x20000, 0x400008, 0x3, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
fallocate$auto(r1, 0x1, 0x2, 0x6657)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x9, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1000000000000001, 0x1]}, 0x0)
socket(0xa, 0x4, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0)
msync$auto(0x1, 0x9, 0xfffffff7)
madvise$auto(0x0, 0x20200, 0x15)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'})
socket(0x10, 0x2, 0x4)

1m17.548347909s ago: executing program 6 (id=1147):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0)
ioctl$auto(r1, 0x9000643a, 0xc35)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x70, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x2c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)
sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x3}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xfd}, @THERMAL_GENL_ATTR_TZ_TRIP={0x1e8, 0x4, 0x0, 0x1, [@nested={0x1ce, 0x145, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x4}, @generic="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", @nested={0x4, 0x16}, @typed={0xa7, 0xfa, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @generic="495a0d7a6e1cb0d1ea3c6d262f", @nested={0x4, 0xcd}, @typed={0x8, 0x121, 0x0, 0x0, @u32=0x350c}]}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@empty}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000)
unshare$auto(0x40000080)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
pread64$auto(r3, 0x0, 0x0, 0x9)
read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30)
openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0)

1m9.012239457s ago: executing program 39 (id=1127):
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8040)
r0 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0)
preadv$auto(r0, &(0x7f00000001c0)={&(0x7f0000000380), 0x82}, 0x8, 0x9, 0xfffffffffffffff3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0)
ioctl$auto_SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000004040))
openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_dump\x00', 0x20000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0)
openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000080), 0x200200, 0x0)
getdents64$auto(r2, &(0x7f0000000440)={0x1, 0x5, 0x8000, 0x5, "916e24dd1734f89641f0f5ce302bcb0205173f36f4b6634b48232ab0875497418dc32e93e467b3b66cf1459da7c958265fa050328e2897357dc0cce15b31d97e8477ae13895b320e505e8778339fc5302358e3464b9687fe617f1a5506d3b8bb67d011c8020000008c57df7ad36779be380000000000000000000000000000000000000032d2c5b5cc0070ae765afaea9ead841a5950b3c8e12fe9bbf5ff2df82c6e32116034ba87e7acd2a9778fee6139cbd0a4dba12382cda13333c36f3df82d5c"}, 0x6)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0x40000000000eb1, 0x401, 0x8000)
r3 = socket(0x2, 0x1, 0x0)
r4 = getsockopt$auto(r3, 0x6, 0x22, 0x0, 0x0)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000200), 0x80840, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x430000, 0x0)
r5 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000140), 0xc080, 0x0)
poll$auto(&(0x7f00000000c0)={r5, 0x1}, 0x1, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_TIOCSBRK2(r4, 0x5427, &(0x7f0000000340))
madvise$auto(0xa, 0x7, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00')
openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x40, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m6.650340675s ago: executing program 0 (id=1167):
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto(0xffffffffffffffff, 0x4018620d, 0x9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/vhci_hcd.5/usb20/manufacturer\x00', 0x102b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
fcntl$auto_F_SETSIG(r1, 0xa, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8)
unshare$auto(0x40000080)
openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0)
r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/mountinfo\x00', 0x20202, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000000040)=""/4080, 0x1036)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r3, 0x4018620d, 0x9)
socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
r4 = socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, &(0x7f00000000c0)={@inferred=r4, "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"})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
write$auto(0x3, 0x0, 0x800)
mmap$auto(0x12, 0x2b, 0xdf, 0x9b72, 0x1000, 0x7)
setrlimit$auto(0xb, 0x0)
getpid()

1m6.150299613s ago: executing program 0 (id=1175):
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket(0x25, 0x1, 0x0)
sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
mmap$auto(0x20000, 0x400008, 0x3, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
fallocate$auto(r1, 0x1, 0x2, 0x6657)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x9, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1000000000000001, 0x1]}, 0x0)
socket(0xa, 0x4, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0)
msync$auto(0x1, 0x9, 0xfffffff7)
madvise$auto(0x0, 0x20200, 0x15)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'})
socket(0x10, 0x2, 0x4)

1m5.198654877s ago: executing program 0 (id=1177):
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket(0x25, 0x1, 0x0)
sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
mmap$auto(0x20000, 0x400008, 0x3, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
fallocate$auto(r1, 0x1, 0x2, 0x6657)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x9, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1000000000000001, 0x1]}, 0x0)
socket(0xa, 0x4, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0)
msync$auto(0x1, 0x9, 0xfffffff7)
madvise$auto(0x0, 0x20200, 0x15)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'})
socket(0x10, 0x2, 0x4)

1m4.265772454s ago: executing program 0 (id=1180):
waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055})
mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
msgctl$auto_IPC_STAT(0x0, 0x2, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)
writev$auto(r0, &(0x7f0000000300)={&(0x7f0000000200), 0x200}, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0402, 0x0)
ioctl$auto_RTC_UIE_ON(r2, 0x7003, 0x0)
fstat$auto(r1, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x40100, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4610, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d7)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x0, 0x0)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
socket(0x2a, 0xa, 0x83)

1m2.508836901s ago: executing program 40 (id=1147):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0)
ioctl$auto(r1, 0x9000643a, 0xc35)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x70, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x2c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)
sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x3}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xfd}, @THERMAL_GENL_ATTR_TZ_TRIP={0x1e8, 0x4, 0x0, 0x1, [@nested={0x1ce, 0x145, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x4}, @generic="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", @nested={0x4, 0x16}, @typed={0xa7, 0xfa, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @generic="495a0d7a6e1cb0d1ea3c6d262f", @nested={0x4, 0xcd}, @typed={0x8, 0x121, 0x0, 0x0, @u32=0x350c}]}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@empty}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000)
unshare$auto(0x40000080)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
pread64$auto(r3, 0x0, 0x0, 0x9)
read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30)
openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0)

59.987391703s ago: executing program 41 (id=1153):
socket(0x10, 0x2, 0x4)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev6\x00', 0x2, 0x0)
ioctl$auto(0x3, 0xc0585605, 0x38)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000002640)='/dev/mtd0\x00', 0x8000, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sysfs$auto(0x2, 0x46, 0x0)
fsopen$auto(0x0, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r1, 0x1, 0x8070bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x142, 0x0)
socketpair$auto(0x8, 0x5, 0x100000, 0x0)
r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x100, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0)

59.742319847s ago: executing program 4 (id=1182):
socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x4018620d, 0x9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/vhci_hcd.5/usb20/manufacturer\x00', 0x102b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
fcntl$auto_F_SETSIG(r1, 0xa, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8)
unshare$auto(0x40000080)
openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0)
r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/mountinfo\x00', 0x20202, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000000040)=""/4080, 0x1036)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r3, 0x4018620d, 0x9)
socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
write$auto(0x3, 0x0, 0x800)
mmap$auto(0x12, 0x2b, 0xdf, 0x9b72, 0x1000, 0x7)
setrlimit$auto(0xb, 0x0)

58.581408158s ago: executing program 4 (id=1190):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x141100, 0x0)
read$auto(r1, &(0x7f0000000000)='vdpa\x00', 0x8000)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/conf/veth0_to_bridge/addr_gen_mode\x00', 0x2682, 0x0)
sendfile$auto(r0, r2, 0x0, 0x40000000005)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x810)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r3, 0x0, 0x9a28)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0xa, 0x0, 0x95)
bpf$auto(0x18, &(0x7f0000000040)=@token_create={0x3}, 0x92)
socket(0x25, 0x2, 0x0)
mmap$auto(0x10000, 0x40009, 0x4, 0x1a, r3, 0x1)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
connect$auto(0x3, 0x0, 0x54)
mknod$auto(0x0, 0x1001, 0x4)
open$dir(0x0, 0x201, 0x14)
r5 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0)
open(0x0, 0x200, 0x1c7)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
shmctl$auto_IPC_RMID(0xa, 0x0, 0x0)
write$auto(r5, &(0x7f0000000380)='/dev/audio1\x00', 0x8000100000a3d9)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1, 0x9489, 0x1ff, 0x15f4da07, 0x3, 0x8003, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x4]}, 0x0)
select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb})
migrate_pages$auto(0x0, 0x9, &(0x7f0000000100)=0x3, &(0x7f0000000340)=0x2)

58.241775332s ago: executing program 4 (id=1192):
r0 = openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = io_uring_setup$auto(0x6, 0x0)
r2 = socket(0x2, 0x5, 0x0)
close_range$auto(r0, 0x8, 0x100c)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000340)={0xcc, 0x0, [{0x8, 0x400, 0x10000}, {0x8e, 0x7fff, 0x2}, {0x1, 0xfff, 0x8000000000000001}, {0x1, 0x0, 0x8000000000000000}, {0x7f, 0x0, 0x7fffffff}, {0x0, 0x6, 0x80}, {0xfc5f, 0x4, 0xd0b}, {0x3, 0x10001, 0x4}]})
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@isdn={0x22, 0x40, 0x9, 0x7, 0x40}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(0xffffffffffffffff, 0x10000008, &(0x7f00000001c0)={@siginfo_0_0={0x4, 0x44b3, 0x5, @_sigsys={&(0x7f00000002c0)="38e317bdbb1b8c2f134f1009700093a508964fe35bbfe47f1bc2a42a2a2cca7cfb271be30111cae938a9d612f3f3695c52329eddbb1b746c2e85ea6e46b9c5f5a6b0c636161243e26ef89e31c0a6cb7e2b1da916f3f1882217854fb730e60485f630741d7bd5a95694667596fd7fb97c18", 0x7, 0xf25}}}, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/stats\x00', 0x0, 0x0)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
setresuid$auto(0x0, 0x7, 0x8080)
setfsuid$auto(0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r5, 0x4b63, 0x4)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x2, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00"}, 0x4, 0x966, 0x1, @raw=0x3, @integer={0x800000000000400e, 0x2000000b752, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})

56.076901749s ago: executing program 3 (id=1187):
close_range$auto(0x2, 0x8, 0x0)
eventfd$auto(0x3)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0x29, 0x5, 0x0)
socket(0xa, 0x3, 0x3a)
socket(0x2, 0xa, 0x1)
r0 = socket(0x10, 0x2, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x9, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x40, 0x8, 0x100000000}})
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x4040, 0x75)
socket(0xa, 0x2, 0x3a)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x8080, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
select$auto(0x3, &(0x7f0000000440)={[0x5, 0x3, 0x1000, 0xdf, 0x8, 0x7, 0x10001, 0x8, 0x438c82bf, 0x4, 0x0, 0x4, 0x788, 0x6, 0x5, 0x8]}, 0x0, 0x0, 0x0)

55.796452717s ago: executing program 3 (id=1197):
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f0000001280)="428112e56c5919b60937b30777b1b745bbc9ae0848b6e2735be5d890751760a05d8ba765a9a9367aa663a7dade95e25b24288775cad7c3d2c3d29e80f425cf0345b983744f96f7322ae88270e3e85b88c4c14f1b75670dc708e3c914a70472a98d740773f7fea40f51045ad7807a")
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
eventfd$auto(0xa)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0)
select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
recvfrom$auto(r1, 0x0, 0x1, 0xb, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a)
r2 = socket(0xa, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000006cc0), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_RECONFIGURE(r4, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x24044880)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
r6 = io_uring_setup$auto(0x1, 0x0)
move_mount$auto(0xffffffffffffff9c, 0x0, r6, 0x0, 0x67)
ioctl$auto(r3, 0x4008af21, 0xffffffffffffffff)

55.412394001s ago: executing program 3 (id=1198):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/sctp/auth_enable\x00', 0x40a02, 0x0)
write$auto(r1, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/mtu\x00', 0x9)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
socket(0xa, 0x1, 0x0)
socket(0x2, 0x1, 0x84)
connect$auto(0x3, 0x0, 0x55)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0x0, 0x0)
listen$auto(0x3, 0x0)
pipe2$auto(0x0, 0xd)
setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8)
listen$auto(0x3, 0x83)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000814)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
close_range$auto(0x2, 0x8, 0x0)
statx$auto(0xffffffffffffff9c, 0x0, 0xffff, 0x401, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0xf)
open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x82)
open(&(0x7f00000001c0)='./file0\x00', 0x40841, 0x118)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0)
openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$auto(0x3, 0x0, 0x8)
read$auto(0x3, 0x0, 0x7fffffff)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800)

48.985160488s ago: executing program 42 (id=1180):
waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055})
mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
msgctl$auto_IPC_STAT(0x0, 0x2, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)
writev$auto(r0, &(0x7f0000000300)={&(0x7f0000000200), 0x200}, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0402, 0x0)
ioctl$auto_RTC_UIE_ON(r2, 0x7003, 0x0)
fstat$auto(r1, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x40100, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4610, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d7)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x0, 0x0)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
socket(0x2a, 0xa, 0x83)

46.753966888s ago: executing program 2 (id=1211):
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x48041, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x10082, 0x0)
close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffc)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x600000, 0x0)
open(0x0, 0x80400, 0xb5d1af1605322dd2)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf", @ANYRES32=0x4, @ANYBLOB="080001000053520008000200", @ANYRES32=0x9, @ANYBLOB="08000500"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80)
r4 = fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
statx$auto(r4, &(0x7f0000000180)='./file0\x00', 0x7ff, 0x5, &(0x7f00000001c0)={0xed8, 0xb435, 0x40, 0x9, 0xee00, 0xee00, 0xa, 0x8df, 0x9, 0x25e64db5, 0x10001, 0x7fffffff, {0x1, 0xb}, {0x200, 0x8}, {0x7, 0x5}, {0x4, 0x5}, 0x5, 0x401, 0x4, 0x8, 0x7fff, 0x6, 0x0, 0x3ff, 0xa8, 0x4, 0x8, 0x4, [0x0, 0x7, 0x1, 0x9, 0x4, 0xf, 0x0, 0x2, 0xffffffff]})

45.867429961s ago: executing program 2 (id=1218):
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f0000001280)="428112e56c5919b60937b30777b1b745bbc9ae0848b6e2735be5d890751760a05d8ba765a9a9367aa663a7dade95e25b24288775cad7c3d2c3d29e80f425cf0345b983744f96f7322ae88270e3e85b88c4c14f1b75670dc708e3c914a70472a98d740773f7fea40f51045ad7807a")
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
eventfd$auto(0xa)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0)
select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
recvfrom$auto(r2, 0x0, 0x1, 0xb, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a)
r3 = socket(0xa, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000006cc0), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_RECONFIGURE(r5, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x24044880)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
r7 = io_uring_setup$auto(0x1, 0x0)
move_mount$auto(0xffffffffffffff9c, 0x0, r7, 0x0, 0x67)
ioctl$auto(r4, 0x4008af21, 0xffffffffffffffff)

45.678565933s ago: executing program 2 (id=1219):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x1, 0xfd5, 0x12, 0xffffffffffffffff, 0x0)
ioctl$auto_USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000040)=0x6ae)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6}, 0x6, 0x3, 0xff)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
mprotect$auto(0x1ffffffff000, 0x100004, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
epoll_create$auto(0x4)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket$nl_generic(0x10, 0x3, 0x10)
map_shadow_stack$auto(0xb4, 0x1, 0x1)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nbd8\x00', 0x0, 0x0)
mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa)
mmap$auto(0x8, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0x400, 0x0)
io_submit$auto(0x9, 0xfffffffffffffffa, 0x0)
ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5408, 0x0)
ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0)
bind$auto(r1, &(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x3, 0x4}}, 0x4)
r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x4, 0x2, 0x0, 0x9b7, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", "ff7f62c9", ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]})

42.601103554s ago: executing program 43 (id=1192):
r0 = openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = io_uring_setup$auto(0x6, 0x0)
r2 = socket(0x2, 0x5, 0x0)
close_range$auto(r0, 0x8, 0x100c)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000340)={0xcc, 0x0, [{0x8, 0x400, 0x10000}, {0x8e, 0x7fff, 0x2}, {0x1, 0xfff, 0x8000000000000001}, {0x1, 0x0, 0x8000000000000000}, {0x7f, 0x0, 0x7fffffff}, {0x0, 0x6, 0x80}, {0xfc5f, 0x4, 0xd0b}, {0x3, 0x10001, 0x4}]})
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@isdn={0x22, 0x40, 0x9, 0x7, 0x40}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(0xffffffffffffffff, 0x10000008, &(0x7f00000001c0)={@siginfo_0_0={0x4, 0x44b3, 0x5, @_sigsys={&(0x7f00000002c0)="38e317bdbb1b8c2f134f1009700093a508964fe35bbfe47f1bc2a42a2a2cca7cfb271be30111cae938a9d612f3f3695c52329eddbb1b746c2e85ea6e46b9c5f5a6b0c636161243e26ef89e31c0a6cb7e2b1da916f3f1882217854fb730e60485f630741d7bd5a95694667596fd7fb97c18", 0x7, 0xf25}}}, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/stats\x00', 0x0, 0x0)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
setresuid$auto(0x0, 0x7, 0x8080)
setfsuid$auto(0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r5, 0x4b63, 0x4)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x2, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00"}, 0x4, 0x966, 0x1, @raw=0x3, @integer={0x800000000000400e, 0x2000000b752, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})

40.442263352s ago: executing program 44 (id=1198):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/sctp/auth_enable\x00', 0x40a02, 0x0)
write$auto(r1, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/mtu\x00', 0x9)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
socket(0xa, 0x1, 0x0)
socket(0x2, 0x1, 0x84)
connect$auto(0x3, 0x0, 0x55)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0x0, 0x0)
listen$auto(0x3, 0x0)
pipe2$auto(0x0, 0xd)
setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8)
listen$auto(0x3, 0x83)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000814)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
close_range$auto(0x2, 0x8, 0x0)
statx$auto(0xffffffffffffff9c, 0x0, 0xffff, 0x401, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0xf)
open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x82)
open(&(0x7f00000001c0)='./file0\x00', 0x40841, 0x118)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0)
openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$auto(0x3, 0x0, 0x8)
read$auto(0x3, 0x0, 0x7fffffff)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800)

39.398886192s ago: executing program 5 (id=1227):
openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x4018620d, 0x9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/vhci_hcd.5/usb20/manufacturer\x00', 0x102b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
fcntl$auto_F_SETSIG(r1, 0xa, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8)
unshare$auto(0x40000080)
openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0)
r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/mountinfo\x00', 0x20202, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000000040)=""/4080, 0x1036)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r3, 0x4018620d, 0x9)
socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
r4 = socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, &(0x7f00000000c0)={@inferred=r4, "6b5841e2bb77824200ecfebd0cca34e4b0affd664f1325a6e28ee8111f643da2fb5b93564fdeda5482e3d651ac67e80a0433662017ed1d68b79753be5f0b63ef996118beb81630fffa9745561447f930412861306af92bfa9e95292c159eae946f027f16ffcfac4ca0b602d208d8e8a8df5b41336d0dc43fa9003298c0b6a854bddd9e02bb408b7f386697e291f1f0ca63a7805a92283b876be9878fd308c081a4908bdbc49305e26a5a786343e6a6fb0710404682dbf543919b4d656543efbf51a2b185bce2d1f4245ce25a65abc25c4529c253a96cb8735450e4f0e6bee491f8e9bfbaae6e5dd762402794873ad0756e4487b1cc1caa92bbda4f0b55af0b4e638b9f76226e814fbda80f35b5901f41161eec351034331566b6ab093d2e01857d50cbda297704becc6f0debdde7f7cb5f562ba886d55c8f372e79795f9f812a0f85c22bd7903a038dea103efd645ef0ef95c5bf1ce3f1c6edb7e7b83ccd6b19f2274580ff282bc2b7e09c3b95c9617725edc4c22ea025ef8f5d4a7650b67d9a863fd4a467f3b8f3744ad8d18ecabde53b29861df261bdb893a4355c590b866a9d5485c1fd4abdb69c3ebedfc3a074b538c990a8f97abf96703d87f842465dabf62142511c8626c80e019ab4277ee6cf156455eed0ccd1e5ab66562f64335260a3e4a58c925bb9fcfb9494a9529d05fea6907f35cf240d3b312631a801ec427e6ba100c5fd2b1395f8055ec09bbdf1e7ab1988a9ee6317c496f15672925c597d6e3220599edb0b915d8f3f8605da50f4f25acc595a06172206d0c98527abdeacbc5c9ea84890980b3eba8c96456d6aabb72c71fb56ac9483116f81ef927f87ca49317780379e25f2b3eb74f48370b21cc9f08e959325ce0e51a0f2bc9fd26c5cd3b84314a008f4a7d365aff6de38c082ceec60ec92845b6f8ac70837dcf1ba564754e83e342360b850d9fb4aa3533cc892ff84f0ba29455c4bc66ad37d7235e4b8b7e08f78a5c75f4c72108fd12aef3c063754b05fe0c5cfc940995a6ad0d3a4acb466102e5b4c0a4b4349e72154fdb608243f38b5cde324e5822367b2121fa98f326c44c9d5077796aa89748fa8e7498fabe783a0f26fa531456ac3038a7c428a5c9f458bc0583c20794cbc1d55b89ea63086c9c5574f60e1427f2545e96c49deb2147bc8b8dd7a632d6451bff8204df1430e6ac5f32254e58dc6e24550bccd3756a39369d8fc512c20a4377fb2c09de9366788b56ab48ba85ff5b22384f62f6c94cab70c97e39b7e5e8bcfa3979eccb3ff60caeafd972cd64dde0e966063cf079118387dcd87e95a9b05069c3ae1aaec0c14042225ea4d6f379137170f6d2ef0d87f8318e6ebfc3de802ff9ddee95ad17d7a0e2f9d9556bd97e860464ec4767cdbdcbca318d3391aa111272528b60ecd32d15972ec13dfae819fa3f3a7bf9b0a8ee53c8373838062a361e70826c857731fdb65be886c77b41da2cbbbec53de6bd1fd0409c7bb7da6cbf99241e95992a6df4b6f125da603a377a9b0ef70b65c834cbd18257f534af476ebd2c34ae813da5ee8e49fd5f30fa094d6653e01778ceef1090b96d9891a59434d61a0373867e7bfff92f7819c924383923793d92f2ecf098f0564c0fc111ae8e5fa8d7479e98939ed25be24baea6b47e4b37b82445a2851a8a95a8208d5e663e3247c000b1afc788d6ee411519858dc8a988524052bdb648d4ca347189d39e32c14a8c92c361e7e6d13a8e7f53d9d2fa4a1d2093bbd1215921a16244569bc6c8dc79907d09362dcc86e40ff885e0122d9ed18df7efd63b571057dd2a463b8a9cc42f63070529b8e7ea065c8cfcf47cd76de593d0b810f53af530b85e8b9e9c4ad73f5ab295a15c0825de4cf9785be3f266463148d06460df07acb5e67f246ec5fca05ed27be80c38572e608a338cd17dd9ee4e2f4774646a2b1baa64d89b92908660d264b0637d675aafe067ebb5fc40750eb1c7ac2c486058b524fbdbd0c8f3fb08c4c78d55f55d2555cb321de539a0d2be3fabd579b9eb4b5dd9b9e1d17cf99a3ac9bcf369e36bc6d9d7cd6ed63ac45297538cd42709f0bf646e0637db8fd130a4a46c1ee6142ec42b757d3c1fc2e9650999ff998cbe9367aab8c83739c29ff483971d5eebc72df7c18ae501bb69b7b2427fcd7d8257a14453bc7e9e3f907287628fa8a6b0a77ba942b6720149b49e1e452635e602b1a11968751c50cb749cc14bc4397dcfe8961def0a1dca551d225f3c2ba21a535f17c2675b809b127d0674b8c1a235b3918676267de3e1674e68f5272c588314c660008e6698905db2effe5c4ad3a689721ac613a261e01a75bf5c4536104b6d834da7e71ba8425865957493945af21a210f617e8f8536034b5402f2142a8fb221c6ef8d4affe15543f6cd175cb0d97b58382548bd0aa3eb1ee35d7a52328be28a741524726973031b00ee560aea0b50270310277e373a6004b34a6e37a7591f7f1485103b369eea9e22823c4138883d2b80ef49e6576eebb80dc7aca7eccfe3f641b3aff2084377f99bff7243217d350b2e9f9568c5f42bf849fae9a2e2566cf98c45ddc440559f8c85e8aae7e9a7ddf982dba7e7d8f623c5ceb9f1ef700aaf191a47803350a9812de9abefa934e8481fd60bc25fe160ad401be7f2b0a188611ab1ee4350c42f6c040298682e21723c0cb0766d0b539d0d3520d5823d02e49bb4674b8e623e008c654cfea6f7cbb19765a92bf4d083f4265acbdba5ec74bf62f938ac17650ea9a4d947f461c480129bea78f540178e8cb2d32dd51b46a4354de58353cfbd85a6368ba5543fdf0295f949d524058c6e2f7f43800fa02db70653b07fc845235a07f363ffcc0f35b50d4e7ca46a4052491bc89b70d0c1d826b2321876eeb8f3c828ebe542488169ab46a34fbd2b9b7d60de7e4c4c33530f27587735ca82fdaba0a183fd28eeaf45c1d86a8bcdb7bb5af0602888e18f829a81765671513d94701f12b8c3ba42410f3e5bc1cd10ebc265351c0338d03c1bbd26b73ff96429b840fe11011fc77e779b57522fecb3f4a4c5620dd40a1257be9e143423ed2628fb896c2f1199f66c99cbaac2dd21d256459c3c931daeb4891a49121f00bf381087756ba6713ccf849d48122840e96f6f2a0b4665e80dce7f20ba57a4d8fbfaf75be8a7ec3fa2c18a2feeed2db758bb96f6319da02bf5d7ea8a401a702946f1bc3faddeb68504b813a3fb1fc1375321fe57da695d535776e1e039b5772f055c31b54033ae6fcf68983d82b1921a7a3dbfabc3a7b337df32cc9ac3e58dc12764e19e04e063e97f2a924e3d1a777f8a55f20124d600a647479716469ee1578f10ddf2e1e9eb0e4b0b2dc0bb12be91d750ab13ebdefadac68b56fa3dcf22521380b0ddcaa8bd05af38528f4d2a5bc26e88f9928e451a094b1aa12159f1b45bac2291b8f51b018a69f2cd4fa835f22db6c8ce00c47f9fe4d043f84c19d649ebe7696289a635bdb1074aa4324f316a3ee6cb0a7068e618e68d14b2354ec08332f2d7b2cfee2ab279fa96269d423c93a199725802af75a511607853b722d388e22ea43a0934321a0568e47ee245f1b1e5d262e69cc3a1f50150d06df018ba72ba700f396356740e369b4bd8b6604c5161a7faac4943ccf6718d9483dee1c80f879dce0d6d2169de3eed2362abad69eec7a65b7a7e0c245fa7798edacff5436e37ef42ab255b3cd974a61356dcdb43dd5dfbf951304c0db2868f2bccf5e76d54d708c609aeec04cae01d0f1cc0957472720f3f2c2e3ea9170941d28b51a695a1919cf18695332fc9073229b9f6e3226c401963edfcb955438a7be97557c11e8c638ee45d4e1fe73853af2295078a75a8170cc32bc7ceb238f681336661590671539310734b6e89e738be0b8c5d9ca0f07ff6e78c7831fc0ebc9c4254c4b1866070c7b26dd17ede874f17dd021f61f5a0bac484e9d635c75fc8c9f20ec8046502711de2ea5c087a2321d0d57da61240fb6c29ef2934a9cc6c1bf50a6c930e15255d5caf4684e1200c994307b462cc0f7f584334c43f0ad185d406d7adb2c61d8325b9628b284cc2a9646f8d22c5dfb68ab159ed9a758eb88030eb87f380824272e2ba3dae9173ea6d71ef17695fb78977cf14c871cd469f4c9a22e9a9d0a61345a9d6e0dd211e92929633e410c86c2e153bf78f02bb7b43d6105ed9400085c479eb50f756dfe694639e9599ba307a8fb063b42a08392d1ab20eef061cc2d6bcc7bba7bda0f6708bc7e82ed3b2a38bb4c8dfec9cb30180789332436f2ce64f50fcaca288907193338668af5991fd0ab3b4274995b332410ec3679300292bf5bbe18814270e900bf37867137e245e096ea3f93c185353321150a046831acc76a573fe43dcaf176f5c3666a22ba7bedf91c6becfa4a1f60a96316d11a6bee73644f1adfc8d3df87124e6fec885b9f3b487f365989fff5eca31d40a34cd8d4b705270fab09340f0f98cef2b7cc44e63dce3a41add5676f26e6a6beb1672e64b17b711159d1235a33724ce29cd9585474a84eafbf5416ed9456e4a0c150ea4060bca66048e92a46df854c87c23a5a61b44632275d4b22792dd992ae2ba629fa1adcf56c939cdc8e44de7fadf0e0bc6a247492ed6eac3ebdf9f978519caba3569493d4655d17321f631598fc56c0d561018bba11600808549d6d6cdf25224b1530b9727430ba6d3d3198962728a2807b3919dc2ee5b4ffedd5244ea099a79df8d547ab24719bf63b1dd294a0eabc2e0b76d77156ae5c044d1036e18c2b8f6e0694530128e712d8620d481e5593a13c610dce6ffb622e65373bfc0eda0e0c75dce58c6f9114882fbf7c8fd63a4dfb2739f8c7bce9ad9e9c7facd5598e425e9574c78f23100ba23db68126b03bef2dad5b25a871f644a61413074ccf8d4f17b484b54cdbaa45e8069ab9bfec2a99947d483cc868bcfe2190823167885a4042736386db745dca383539b7d4b1b19fa23b2573b259e6b81bb9b1f738a822db8a7dc7cc59cf2f5c7b7e4fa72323db8fddb72a1975e694de4d43e9d4a0779deaeac0debd49297021d67506bee3a65539c1c552be2cc0aeb6d13eff0edcb884178a6faee6059497a9bfc466f591a3d18dd5d2d5b322d4aaed3ccc0e43a606b9d7dd8a930186a13c7f38641d81499d6b82c4af3eb1cf9576c24345fc72f97f97859534fbbccbe7f13dd31865f773837f11f1515572d0cb03539abe63e19299daa27fa8eea45007a026788f1374703bc4b0fcda836ee3fb0f0b56c29d60e53c81555a1b21bf75c351be18869c2555bbbb16abb6f0cc3583343444ddf33ed6ff90777169344d64d813c532319f1b00593f278428b031c01d223232a75b205e926318ce07eca0e5c3b3b8dc75ec23441b44fb34dff2701a088f84726913a68cc3e42b7a1e18e6bfd62e7d0893226f202739d8454c7524f07086bb434fa3e05091d2fc62bbdf2eb398534a935f82de8e89a964d4f4942278f20344e87dbe606ee23f7c312c6768888732c1205c2f23dba35c7aac3e8b1ebb980244878c018bed29c38ecddadff82343c630308076950920a73a06116d1499f9cca63dc1ed8a45131c27aee9269c1ef43d9f49d6db3676328497d08b1ec615a7b5fd2bc5a04a56fd66541f036ed66f0ce222e3b8d0e67e3ad02391bc28ef2f70267f2350c2993430cac78b879c7c3cc697bd63045a8214104d8c9eab62fc0a4d86b162b2dd75758f9c9ebcf8f03f54d128c570e82981d1998190c6292c9512db0759ccf07c39f2d26a"})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
write$auto(0x3, 0x0, 0x800)
mmap$auto(0x12, 0x2b, 0xdf, 0x9b72, 0x1000, 0x7)
setrlimit$auto(0xb, 0x0)
getpid()

38.614283631s ago: executing program 5 (id=1234):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/write_cache\x00', 0x182b02, 0x0)
sendfile$auto(r1, r1, 0x0, 0xea)
mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
statmount$auto(0x0, &(0x7f0000000700)={0x8, 0x3, 0x1ff, 0x8, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0xc, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x4, 0x3a, 0x22000, 0x200, 0xff, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0))
connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8)
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000080), 0xffffffffffffffff)
listen$auto(r2, 0x6961)
execve$auto(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000400)=&(0x7f0000000640)='f\xde\xd1[\xa8/\x87\rvL \xba\xa9\x98\xd5\xa6\f\xf9\x86H\x9c\x11\xda\xcb\xc0)\x02R\xb6\x8f7\xd0\xc9\xff\x0f\x00\x00\x00\x00\x00\x00^\xb4\xfe\xbeK\"\xbcWjOoK\x90\xdeV\x04\x84E)+y7\x8c\xb9e\x96\x0fh\xb9\xa3\x06Z\x03\x00\xf6\x8c\xbe\xc5\xd8?\x1d\xcf\xc5[\x14\xb2\x94\x84)P\x03\x00\x00\x00\xe5!\x91\x16\xea\x89\xb7\xd1\x1d\xf7\xcd\xbc\x80\x83A\rL|=y,\\\xac\x05\x86H\xaew\x8d\x04\x87\xf5\xe3\x85\x8dG(\xca\xe6\xec\xec\xd8f \x83\xc4*;t\x7f', &(0x7f0000000040)=&(0x7f00000004c0)='/proc/mtrr\x00')
unshare$auto(0x8000000)
syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x484000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000440)=""/82, 0x52)
ioctl$auto_TIOCSWINSZ2(r5, 0x5414, &(0x7f00000001c0))
r6 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r6, 0x29, 0x13, 0x0, 0x1ff)
ioctl$auto(0xffffffffffffffff, 0x80a86f3d, 0x38)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x40, 0x100400008, 0xdf, 0x9b76, 0x2, 0x7ffe)

36.75104027s ago: executing program 5 (id=1237):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mlock$auto(0xfbe8, 0xe2f)
mlock$auto(0x7c88, 0x7fff)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, 0x0, 0x58)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/dummy_pcm\x00', 0x8f3b7a51b804b702, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x181506, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0)
write$auto(r1, 0x0, 0x208)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2b00e2ffb78dc58964d9f9122d93ff2a4d0735d934b9e7a61678523bfb617934a9630a9ce1d04b02dc1fd97cdac315f645c449aefd807efcf12918c680ea0ce5d6a6b3a49dd9db4c1996f8590958a3e636466cf3468e223391c511f07bb9d7251e5fc4f632adf5c5d0f2e69d6f8d30280464dbdf880c4dcc070b377e4195fb3c21ab30f6e79790d7846a4d324705d45a88a8f2f91a9e9cae931d27366c0cd4d108fbec756f0630083e568722384853d0dec1355922cdfd64f6c6e45786e6b85e7bc38297df91a307a96f8ee8be498140da95cf975b6856e4b92e24eafd420c7555809143d6cc3607e98f014494", @ANYRES16=r3, @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
socket(0x2b, 0x1, 0x1)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
getrandom$auto(&(0x7f0000000440)='\x00', 0x5, 0x2)
r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/mode\x00', 0x121102, 0x0)
setreuid$auto(0x15, 0x5)
pwrite64$auto(r6, &(0x7f0000000400)=']\x00', 0x3, 0xd)
ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000040))
write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
fallocate$auto(0xffffffffffffffff, 0x1, 0x9, 0x7fff)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x405c3, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x5, 0x62, 0x100000001, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0)
r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000340)={0x80000001, 0x8})
write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f0000000340)="9d1c4478ced8f6be88709bea262440bf0aa633c16de822069812337d8fed0d9bfc41a68627e7b67abd213242943b441718233a8bdd7bbaa160ec0e1fcdc498e353d1a69b1278cf4bea737a038ec04cbb6ca2e27da2864f877c86bde10542f3fe5bbe31a63870bd588413a233a85c1b3794404802a08937065dfdb23193ce9cf9e5bac896243c70439ae368fd1e0b30ace92f6f0f2cbe7912a89e5e824cc37476a6fe5b798666f050e22d056a", 0xac)
clone$auto(0xfffffffffffffffc, 0x9, &(0x7f0000000140)=0x18, &(0x7f0000000240)=0x81, 0xea3)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c030000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf251c0000000600650008000000f600be003e9322e1a04a72038dc676d306d763a4d682dd6435de6bc299644e8e307d7c657930de4960af39f7943c1a805132d58dfefc126916f58ad5651bca040246b267c2c780e1bf1c9dca3b6299185e44ba4ab33a32e672f7ca3267b65e9daccfd9cddd435f2099232af435cda0e9593c3dabe7fdf0ffccb4ab00a12a9c96684c6afb7a116aec68b978fcddd2ab322921fa64b68421e86bcc38fde35c52302937012a5686bfb86f691b63643e89b563f0294c7df016c7ca5385e1053cc8007508ab7d2d642ea77fe29d21ae82ace47b688a9551acab8c712f28d0c0953de3d9a16bdb2b4a1cc92bcdd7f4b1c01885cdb36808b7b700000800db00", @ANYRES16=r7, @ANYBLOB="f001f080040093004801788014001538f73ab200fe800000000000000000000000000021", @ANYRES16=r7, @ANYBLOB="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"], 0x31c}, 0x1, 0x0, 0x0, 0x4040014}, 0x1)
select$auto(0xc, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0)

35.120826339s ago: executing program 5 (id=1239):
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2c, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
setsockopt$auto(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x7fffffff)
syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
pipe$auto(&(0x7f0000001480)=<r2=>0xffffffffffffffff)
read$auto_console_fops_tty_io(r2, &(0x7f00000001c0)=""/142, 0x8e)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mem\x00', 0x101181, 0x0)
readv$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_submit$auto(0x9, 0xfffffffffffffffa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0)
ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r3, 0x5408, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)

34.310156225s ago: executing program 8 (id=1231):
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x88900, 0x0)
readv$auto(r2, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x131200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r5)
ioctl$auto_KVM_CREATE_VM(r4, 0xae80, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f0000000080)={r3, 0x101})
r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r6)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1b0026bd7000fddbdf2503009e43df81d1f6c84b240000040008000c00038008001780040000d0120001008987713b35b4939ff02c239016aeebafc8ad9df1c19f17790485902f0d4a89babd97892052fbab7871bbf51ca26782d76e83a2f1"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)

33.338337017s ago: executing program 8 (id=1242):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x3a, 0xc8, 0x0, 0x567)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$auto_RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0x4, 0x6, 0x17, 0x8, 0x1, 0x3ff, 0x10, 0x3, 0x3})
unshare$auto(0x40000084)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5)
request_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(&(0x7f0000000080)='L^[^\x00', &(0x7f00000000c0)=',^@\\([-$&$(}/\x00', &(0x7f0000000100)=',^@\\([-$&$(}/\x00', 0xfffffffffffffff9)
fcntl$auto(0x3, 0x4, 0xa553)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000005c0)={{@inferred, 0x1, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0x2, 0x1, @raw=0x8, @reserved="8aa03506c1c39daf5bcda939a026f2d0d75d1e206609e509533b9d37340ed90b2d991dc15b7f54e7228aceb21133c8722c84b0b76691828d127d547a58b659c6d9067aa90ca0ed3b40ec58f8c911bb668c73715853880254b2d220bb3b4357a8feace45c65fb1d9a3c09cf3a379dc1a2acaabb4f067f0d60b906e16aedc80e21", "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e53111217b0000000000000047a99807bcc1"})
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
r4 = epoll_create$auto(0x8800001)
epoll_ctl$auto(r4, 0x1, r0, 0x0)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
r5 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, <r6=>0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x202e40, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"})
ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000000300)={@raw=0x8, 0x100000001, 0xfff, @btrfs_ioctl_vol_args_v2_3_0={0x2, &(0x7f0000000100)={0x10000, 0x2, 0x7, 0xffffffffffffffff, {0x4, 0x1, 0x1, 0x88ba, 0x8}, [0x4, 0x93d2, 0xffffffff, 0x200, 0x3a7, 0x3]}}, @devid=0x80})
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x0, 0x0)
r8 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0)
read$auto(r8, 0x0, 0x100)
mmap$auto(0x0, 0x9, 0xffb, 0x12, 0x3, 0x0)
ioctl$auto_RTC_RD_TIME(r5, 0x80247009, &(0x7f0000000000)={0x1, 0x1, 0x6, 0x7f, 0x8, 0xc, 0x3247, 0xffffff82, 0x5})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtdblock0\x00', 0x80, 0x0)

32.712971495s ago: executing program 8 (id=1246):
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x4018620d, 0x9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/vhci_hcd.5/usb20/manufacturer\x00', 0x102b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
fcntl$auto_F_SETSIG(r1, 0xa, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8)
unshare$auto(0x40000080)
openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0)
r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/mountinfo\x00', 0x20202, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000000040)=""/4080, 0x1036)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r3, 0x4018620d, 0x9)
socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
r4 = socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, &(0x7f00000000c0)={@inferred=r4, "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"})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
write$auto(0x3, 0x0, 0x800)
mmap$auto(0x12, 0x2b, 0xdf, 0x9b72, 0x1000, 0x7)
setrlimit$auto(0xb, 0x0)
getpid()

32.082136464s ago: executing program 8 (id=1248):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_clone3(&(0x7f0000000340)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
waitid$auto(0x80, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x1000007, 0x2}}}, 0x1ff, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x5}, 0x4000000004, 0x5, 0x1, 0x100000000, 0x1, 0x8000, 0x401, 0x7, 0x9, 0x5d9, 0x5, 0xd, 0x2055, 0x3})
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop7\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x20000000008000)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0x8, 0x4, 0x7b)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0)
r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prctl$auto(0x3e, 0x60, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0x5f1, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r3, 0x4018620d, 0x9)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r2, 0x40186211, 0x9)
socket(0x10, 0x2, 0x6)
socketpair$auto(0x3b8e, 0x6, 0x8000000000000000, 0x0)
r4 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/error_log\x00', 0x1, 0x0)
fcntl$auto_F_SETSIG(r4, 0xa, 0xfba)
kcmp$auto_KCMP_FILE(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x55)

31.325119358s ago: executing program 7 (id=1252):
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';')
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001040)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x1000005, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001080), r0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x3)
connect$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto_kernel_debug_fops_orangefs_debugfs(r3, &(0x7f0000000680)='/', 0x1)
ioprio_set$auto(0x3, 0x0, 0x4b34)
mq_notify$auto(r4, &(0x7f00000010c0)={@sival_int=0x6, @inferred, 0xffffff00})
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netlink\x00', 0x40080, 0x0)
pread64$auto(r5, 0x0, 0x566, 0x100080000000)
close_range$auto(0x2, 0x8, 0x0)
mprotect$auto(0x200000000000, 0x806124, 0x8)
utimensat$auto(0xffffffffffffffff, 0x0, 0x0, 0xfffff000)

31.152662201s ago: executing program 7 (id=1253):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r0 = socket(0x2, 0x3, 0x1)
getsockopt$auto_SO_DEBUG(r0, 0xff, 0x1, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
write$auto(0x1, 0x0, 0x80000000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000100)={0x92})
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000c80)="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", 0x144)
madvise$auto(0xfffffffffffffffe, 0xffffffffffff0001, 0x15)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1)
mmap$auto(0x1002, 0xb63, 0x2, 0x1c, 0x401, 0x701cf82d)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/radio25/dev\x00', 0x589401, 0x0)
sendfile$auto(r4, r4, 0x0, 0x6)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x10000010, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x9, 0x15f4da0a, 0x3, 0x400, 0x62, 0x80000000, 0x4, 0x6d41, 0x8001, 0xa, 0xfffffffffffffdf7]}, 0x0)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
getpid()
rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x8001000}, 0xffffffffffffffff, 0x8)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mlockall$auto(0x85)

30.842477261s ago: executing program 7 (id=1254):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0)
ioctl$auto(r0, 0x400, 0x8)
timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000200)={@sival_int=0x40, @inferred=r0, 0x97}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
request_key$auto(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)='\x00', 0x0)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$auto_RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0x1, 0x7, 0x17, 0x8, 0x1, 0x63, 0x10, 0x3, 0x3})
r2 = memfd_secret$auto(0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b02, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
read$auto(r0, &(0x7f0000000240)='\x00', 0xfff)
r6 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f00000044c0)='/proc/thread-self/oom_score_adj\x00', 0x240000, 0x0)
openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000008c80)='/proc/thread-self/oom_score_adj\x00', 0x8c0, 0x0)
epoll_create$auto(0x3e)
epoll_ctl$auto(r4, 0x21, r5, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5408, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r7 = getpid()
select$auto(0x5, 0x0, 0x0, 0x0, 0x0)
setfsgid$auto(0x9)
setresgid$auto(0xffffffffffffffff, 0x0, 0x7fffffffffffffff)
process_vm_readv$auto(r7, &(0x7f0000000080)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0)
setsockopt$auto_SO_RCVMARK(r6, 0x5, 0x4b, &(0x7f0000000040)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x1)

30.460991878s ago: executing program 45 (id=1219):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x1, 0xfd5, 0x12, 0xffffffffffffffff, 0x0)
ioctl$auto_USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000040)=0x6ae)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6}, 0x6, 0x3, 0xff)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
mprotect$auto(0x1ffffffff000, 0x100004, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
epoll_create$auto(0x4)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket$nl_generic(0x10, 0x3, 0x10)
map_shadow_stack$auto(0xb4, 0x1, 0x1)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nbd8\x00', 0x0, 0x0)
mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa)
mmap$auto(0x8, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0x400, 0x0)
io_submit$auto(0x9, 0xfffffffffffffffa, 0x0)
ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5408, 0x0)
ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0)
bind$auto(r1, &(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x3, 0x4}}, 0x4)
r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x4, 0x2, 0x0, 0x9b7, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", "ff7f62c9", ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]})

29.955352226s ago: executing program 7 (id=1256):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x2, 0x8, 0x0)
pipe$auto(&(0x7f0000000500))
fcntl$auto(0x3, 0x4, 0xa553)
select$auto(0x5, &(0x7f0000000180)={[0x400020000008, 0xfffffffffffffffc, 0x6, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0x7, 0x2, 0x9, 0x2, 0xa657, 0x203, 0xd3, 0xfdfe]}, 0x0, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdc00, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x7, 0xfc, "65a512"}]}, 0x30}, 0x1, 0x0, 0x0, 0x8810}, 0x40000)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x400, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0xc4428)
r1 = socket(0x10, 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x0)
io_uring_setup$auto(0x2, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b)
io_uring_setup$auto(0xa, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0c\x00', 0x28002, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x82a02, 0x0)
read$auto(r2, 0x0, 0x20)
ioctl$auto(0x3, 0x80108907, 0x38)

29.653785761s ago: executing program 7 (id=1257):
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket(0x25, 0x1, 0x0)
sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
mmap$auto(0x20000, 0x400008, 0x3, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
fallocate$auto(r1, 0x1, 0x2, 0x6657)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0xa, 0x4, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0)
msync$auto(0x1, 0x9, 0xfffffff7)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'})
socket(0x10, 0x2, 0x4)

29.323422753s ago: executing program 7 (id=1258):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x15, 0x5, 0x0)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
ustat$auto(0x801, 0x0)
getsockopt$auto_SO_RCVPRIORITY(r0, 0x9, 0x52, &(0x7f00000001c0)='@\x00', &(0x7f0000000200)=0x80000001)
mq_getsetattr$auto(r0, &(0x7f0000000380)={0x36, 0x10, 0x4, 0x9}, &(0x7f00000003c0)={0x3, 0xdc, 0x0, 0x180000000000})
sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
shmctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{0xf, 0x0, 0x0, 0x10, 0xd4e8, 0xf6}, 0x4, 0x1, 0x9, 0x2, @inferred, @inferred, 0x2, 0x0, 0x0, 0x0})
open(&(0x7f0000000000)='./file0\x00', 0x62240, 0x154)
prctl$auto(0x43, 0x2000017, 0x0, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0xffffffffffffffff, &(0x7f0000000340)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x0e\xfa{\x15\x1d\x11\x85o\xf1g\xb7\xb3\xdd\\\xfdG\xa9\x16R\xa4\xe9\xd1\xf4S\x94\xe1\x9c\x88\x1b\xe6.\x11\xa3\xe1\xddi\xb66\xaa\xa3\xc7iB\xc84\x11\xac\xfd\x1a*\xd4a\xfe\x05\x96\x0ec\x12\xea\xd5K\xea\xda\xa3\xfa\xc3\xedr\x17\xa5\x1c\x88{v\xb8\bj\x84\xd8g\x05r\xe7n\x7f^\x9d\xc7V\x92\xb9Z.Uc*K', 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x120)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, 0x0, 0x6f4)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048004)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r3 = socket(0x10, 0x2, 0xf)
r4 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_11={0x8, 0x100000001, 0x10001, 0xd67, 0x1007, 0x1, 0x9, r3}, 0xd)
bpf$auto(0x1, &(0x7f0000000080)=@iter_create={r4, 0x98}, 0xf)
r5 = socket(0x2, 0x1, 0x106)
bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6)

28.26375924s ago: executing program 1 (id=1255):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0)
r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000280)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r1, [0x0, 0x0, 0x4], {0x6, 0x6, 0x8c48, 0x29a, 0x109, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}})
r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0)
read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x200007, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x100, 0x3, 0x7, 0x10}, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@link_id=0x1, 0x3, 0x3}, 0x6f3)
mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0))
mmap$auto(0x0, 0x2000c, 0x4000000000e2, 0x100000000000eb1, r3, 0x8000)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
fallocate$auto(r4, 0x0, 0x7, 0x4cbd5d)

27.3328941s ago: executing program 1 (id=1259):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1f, 0x2, 0x7)
mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x59, &(0x7f00000003c0)={0x4, 0xd, 0x20000005, 0x80000001, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xefffffff], {0x7f, 0x6, 0x8, 0x29f, 0x100, 0x8, 0x101, 0x6, 0xffffffff80000000}, {0x101, 0x1, 0x52, 0x5, 0x1e, 0x40, 0x76c5, 0x8, 0x100000000}})
r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0)
readv$auto(r0, &(0x7f0000000400)={0x0, 0x40}, 0x6)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
r2 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f00000000c0), 0x109002, 0x0)
pread64$auto(r2, 0x0, 0x6, 0x400000008)
getdents$auto(r1, 0x0, 0x400018)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
read$auto_uinput_fops_uinput(r3, 0x0, 0x0)
socket(0xa, 0x5, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram6\x00', 0x98c80, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
timer_create$auto(0x0, 0x0, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_system\x00', 0x0, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x2000001, 0x40, 0x4, 0x8, 0x100000004}})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0)
write$auto(0x3, 0x0, 0x7)
close_range$auto(0x2, 0xa, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x8000000000000001, 0x40eb1, r4, 0x300000000000)

27.220078601s ago: executing program 1 (id=1260):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
socket(0x6, 0x3, 0x37)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x26, 0x5, 0x8c68)
r0 = socket(0xa, 0x1, 0x84)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0)
ioperm$auto(0x8, 0x7, 0x2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socket(0x15, 0xa, 0x0)
mmap$auto(0x7, 0x8000007, 0x1, 0xfffffffffffffff7, r0, 0x8005)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sysfs$auto(0x2, 0x7, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0)
r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0)
read$auto(r4, 0x0, 0xb4d3)
unshare$auto(0x40000080)
setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567)

19.941152527s ago: executing program 46 (id=1239):
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2c, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
setsockopt$auto(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x7fffffff)
syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
pipe$auto(&(0x7f0000001480)=<r2=>0xffffffffffffffff)
read$auto_console_fops_tty_io(r2, &(0x7f00000001c0)=""/142, 0x8e)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mem\x00', 0x101181, 0x0)
readv$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_submit$auto(0x9, 0xfffffffffffffffa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0)
ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r3, 0x5408, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)

18.139264747s ago: executing program 6 (id=1261):
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0)
openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/prev\x00', 0x1, 0x0)
ftruncate$auto(0x3, 0x400180200000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
unshare$auto(0x40000080)
unshare$auto(0x6)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0)
socket(0xa, 0x5, 0x84)
init_module$auto(0x0, 0xffff9, 0x0)
r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
read$auto_rng_chrdev_ops_core(r0, 0x0, 0x0)
setgroups$auto(0xe32, 0x0)
get_mempolicy$auto(0x0, 0x0, 0x400, 0x200, 0x3)
r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x408901, 0x0)
ioctl$auto(r0, 0x4, r2)
ioctl$auto(r2, 0x5521, 0xffffffffffffffff)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r4 = epoll_create$auto(0x3e)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/180, 0xb4)
poll$auto(&(0x7f0000000080)={0x3, 0x0, 0xa}, 0xfffffff1, 0x108)
epoll_ctl$auto(r4, 0x1, r3, 0x0)
ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i915/parameters/mitigations\x00', 0x505204, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000001c0)='!\x8f\xb6\xef\x10\x00\x00\x00\x00\x00\x00\x15\xa3\x92\x00\x8ez\xa8\xde', 0xa4)

16.452135288s ago: executing program 47 (id=1248):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_clone3(&(0x7f0000000340)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
waitid$auto(0x80, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x1000007, 0x2}}}, 0x1ff, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x5}, 0x4000000004, 0x5, 0x1, 0x100000000, 0x1, 0x8000, 0x401, 0x7, 0x9, 0x5d9, 0x5, 0xd, 0x2055, 0x3})
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop7\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x20000000008000)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0x8, 0x4, 0x7b)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0)
r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prctl$auto(0x3e, 0x60, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0x5f1, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r3, 0x4018620d, 0x9)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r2, 0x40186211, 0x9)
socket(0x10, 0x2, 0x6)
socketpair$auto(0x3b8e, 0x6, 0x8000000000000000, 0x0)
r4 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/error_log\x00', 0x1, 0x0)
fcntl$auto_F_SETSIG(r4, 0xa, 0xfba)
kcmp$auto_KCMP_FILE(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x55)

14.160946461s ago: executing program 48 (id=1258):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x15, 0x5, 0x0)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
ustat$auto(0x801, 0x0)
getsockopt$auto_SO_RCVPRIORITY(r0, 0x9, 0x52, &(0x7f00000001c0)='@\x00', &(0x7f0000000200)=0x80000001)
mq_getsetattr$auto(r0, &(0x7f0000000380)={0x36, 0x10, 0x4, 0x9}, &(0x7f00000003c0)={0x3, 0xdc, 0x0, 0x180000000000})
sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
shmctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{0xf, 0x0, 0x0, 0x10, 0xd4e8, 0xf6}, 0x4, 0x1, 0x9, 0x2, @inferred, @inferred, 0x2, 0x0, 0x0, 0x0})
open(&(0x7f0000000000)='./file0\x00', 0x62240, 0x154)
prctl$auto(0x43, 0x2000017, 0x0, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0xffffffffffffffff, &(0x7f0000000340)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x0e\xfa{\x15\x1d\x11\x85o\xf1g\xb7\xb3\xdd\\\xfdG\xa9\x16R\xa4\xe9\xd1\xf4S\x94\xe1\x9c\x88\x1b\xe6.\x11\xa3\xe1\xddi\xb66\xaa\xa3\xc7iB\xc84\x11\xac\xfd\x1a*\xd4a\xfe\x05\x96\x0ec\x12\xea\xd5K\xea\xda\xa3\xfa\xc3\xedr\x17\xa5\x1c\x88{v\xb8\bj\x84\xd8g\x05r\xe7n\x7f^\x9d\xc7V\x92\xb9Z.Uc*K', 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x120)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, 0x0, 0x6f4)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048004)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r3 = socket(0x10, 0x2, 0xf)
r4 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_11={0x8, 0x100000001, 0x10001, 0xd67, 0x1007, 0x1, 0x9, r3}, 0xd)
bpf$auto(0x1, &(0x7f0000000080)=@iter_create={r4, 0x98}, 0xf)
r5 = socket(0x2, 0x1, 0x106)
bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6)

12.981341153s ago: executing program 9 (id=1265):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5)
io_uring_setup$auto(0x85, 0x0)
ioctl$auto(r0, 0x4004af07, r0)
socket(0x29, 0x2, 0x0)
r1 = accept$auto(0x3, 0x0, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/workqueue/cpumask_isolated\x00', 0x80100, 0x0)
preadv$auto(r2, &(0x7f0000000080)={0x0, 0x6}, 0x200000000000006, 0x10002, 0x8f8e)
r3 = socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x7e)
sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a)
connect$auto(r3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5)
r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000002c0), 0x101080, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0)
r5 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x0)
mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r6 = socket(0x2, 0x80002, 0x73)
socket(0x9, 0xa, 0x7f)
sysfs$auto(0x0, 0x4, 0x2)
r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$auto_UI_GET_VERSION(r7, 0x8004552d, 0x0)
setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r5)
ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f0000000280)={0x0, 0x5, 0xfcd7, 0x7, 0x8, <r9=>0xffffffffffffffff})
sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000084}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="aa08ff00", @ANYRES16=r8, @ANYBLOB="000225bd7000fddbdf251f00000021042880080014000d00000008001100", @ANYRES32=r9, @ANYBLOB="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", @ANYRESOCT=r6, @ANYBLOB="040029800400510000000c00130004000000000000000000000c0017007341000000000000050013000800000005002600b70000000500240000000000140004006261746164765f736c6176655f3100000500070001000000", @ANYRESDEC=r8, @ANYRESOCT=r4, @ANYRES64=r6, @ANYBLOB="076ed2b58447e155c0aeea7b018de6b284ab021c018a94b5624ec383d2480d309b7813fccb502902632afda5a477a15a239530d2bdc292cad7e42d1db1ec917a4f531c33488904d198d56230e916e8c2425ebc4243dbc5ce277d1e92a19bf4282708a6"], 0x478}, 0x1, 0x0, 0x0, 0x20040000}, 0x4)
bind$auto(0x3, &(0x7f0000000040)=@sco={0x1f, @none}, 0x6a)

12.834885612s ago: executing program 9 (id=1266):
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x20020000)
pwrite64$auto(0xc8, 0x0, 0xfdf0, 0x39)
mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0B00:00/uevent\x00', 0xb02, 0x0)
sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001980)=ANY=[@ANYBLOB="000428bd7000fddbdf2572000000d5074801df1af0ebe5aff861f90fef1cd29caf556101167b1ccb2741bde9cc96d71b7295da0b178f3145eaa4a00a4fa9fcb281c65c30c1430b48e6f91275f00ee96d06f7e6bd05c1af7b9c0ee013ca8dc3e82a4f7efb413a0b9cd35763b92ded7ee1b9336e0bc7d12d0f26083a168c6a2ee064b2d0f1ae837a4f045fc61d947670f450a56dcff9232275db4c9bdfa9497da2c52e0bf4761f0c22b4a637f951ae926928aa18a8b30cc0c74aecb71862892bac4bf26d65323f9a420a2b0a08b7ae78d2b6c8ab635ddc019192eecf0609683042ca1b7f925fb94234d9a499ac22ca7fb11491478430dfcd6d86fff6598161d76b7688b3af1608daa3de12cffc0dfbfc732073ffd2d967b6a291a471822d0b8c681a370cbb192ac9c7e8f7b2b4119a6549a60dfb08b96f50b9b4143460618f0747ce7330fd6cdc4f79bd47e9420972292f97e72501e07fbf574ddb144caf67a5105d344c669dfa56ee1fd9d0b3c98c72eb8c6c942f9aab5830f2c719947168f101b599369e682da9ba5d3c6019ed6c6c6c376e41e3357455077aa8c321e40f034c6f81eb69767672c53adbfe236c5a49a15ddea8a657a818a8e8ea921fdc11d6034e40ab2afc5e2919de79af646f82d79ca078372f3f1328b25e0718e7f64be83d58a4cbe12ffe3505307434554c96d7095051a6704101a23fb2baf5b81401da72b5213552a7cb54ee801d26f6efb25c3d20c03768e9ffb6b50546735f5d1b553f73d5f8c36a5aa5ab5a5d4e08b910e6f29a52e77d53e27c4827b5bc154c11e8f2625d0c5d8e15a138a0fd72c9458d72bd8be57afa648a003f5d909c0a7aa1062546407f019695df71228ee704c4fe870bca3c4f3d5183aa4f4f19e9bfcf9b282241ee6eabaab6777f72b0b1e52a498464978fa44e2d9a73935efe46b0c3e91fee32949f032740bd3b018c1eb330ce7d0a44553ff12a25f20ed41aefc8b12f4374f1dcdaeae16345ec004ba3bf0d5bf39037bd4b73fb2a6d5022198f3bcf9d623c4f706ae5b3ba632c112424ad5d673f38e3c673c50552731151cb53dd9ec9699d375b451d8f4e2457e5eab34766a66b031dcdcae85e67939edb373588801a5ea82f8d266aa78341c0e1104f2b0dd5ee0c081f3855a06bec389a29645871ea53b10e19e44737951756ecc062dedfccc3fd84aae13d3c5c8328379756f42b1cf8e9453e9491033f2ede522c8daa0577152799451358694c3771169411150f5066a243d6f869671a4a924602cdfa5a35e4cf303cf7271afb702c93a6101275319153d7c88c112b7d1331db47415023ec18b7d558967f82e7970b1616d8cd1bd5deda3f90bcddec801412e8a4ceb854241bcfe0850c7495399338b41ae01528fe5da8296d5cb4a0a5e4ca8c82327da83c0999ab91549f5a08c1ded5d54509bc60b3afbace2fea3c7817aeed4fefc038e86bc77be0029dc5a8f70d41770990583da9b943c9f7c646888171188a9ca40b58b7ff2066bc657dcf369fc8faf74576f61347b0d4016854d5701cacce7eb0ee48f3a302b5892649dad4c910e27976e0ba3f781fb9fc8908904b03455d8d45a6875a18a97da67e91b9f43424c58ceac55ab788fd91097db30ef891cf659dca25f64300f52b544b4be462724803171a0c4328472c3c9a863dbb331029066f55a0e8ef1c3852c3f19c2bbd71c17852bcf22a125ff854592c146258ba99fe1a9dcca3e1a9178ecd0d6096d0642bd1639d547d475dbe4e30b62a0db806e865000b5fac63f537cebc8a4f133843c9d333f566c82a3b2e4a947be01743c36af38975d7396bf804fabf5a102e86ebc9dc18a0f07b5c5ca355cae4000b95f759e53717ec4ccee0778f3cf3f1b3d8a38a"], 0x7ec}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'pimreg0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'})
sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0xfffffffffffffcad}, 0x1, 0x0, 0x0, 0x44000}, 0x8014)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="700000007c564cf5ffa341e302124e01109366e89d1b9bd51946d86bf9248e939f87972ba3ff0f420c2c653ee7705d9e5f43cb98ed604f952e82a0143c7263b69c305cec00c16e5540f896f3db41f6e6cbeb80afd8c67631bae2d0a1beb92f2f91ae906602428baf1b96eb49b507c6aec165", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf2516000000180001801400020076657468315f766972745f776966690004000180050002000900000005000300b30000000000018000000100", @ANYRES32=r0, @ANYBLOB="00000100", @ANYRES32=0x0, @ANYBLOB="050003000000000005000400d900000018000180"], 0x67}}, 0x8000)
write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:\x06F\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f)
r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
lseek$auto(r2, 0x7ff, 0x1)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
setgid$auto(0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioperm$auto(0xdbf, 0x80000000, 0x4b)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r3)
r5 = socket(0xa, 0x2, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team0\x00', <r7=>0x0})
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x4, 0x1, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf)
sendmsg$auto_MACSEC_CMD_DEL_RXSC(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)

12.288407303s ago: executing program 9 (id=1267):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x80802, 0x0)
syz_genetlink_get_family_id$auto_net_shaper(0x0, r0)
sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, 0x0, 0x80)
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00\x00\x00W\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$auto(0xffffffffffffffff, 0xc01070ce, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r1 = socket(0x2, 0x1, 0x0)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, <r2=>0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x839, 0x8}})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000)
socket(0x11, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x6, &(0x7f0000000440), 0x8, 0x1000}, 0x5}, 0x2, 0x100)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
remap_file_pages$auto(0x4, 0x513e42ea, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x741a7954)
socketpair$auto(0xb2c, 0x2, 0x20000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xb}, 0x4, 0xcad7)
mmap$auto(0x0, 0x400007, 0xde, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0x100085)

12.153587763s ago: executing program 49 (id=1260):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
socket(0x6, 0x3, 0x37)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x26, 0x5, 0x8c68)
r0 = socket(0xa, 0x1, 0x84)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0)
ioperm$auto(0x8, 0x7, 0x2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socket(0x15, 0xa, 0x0)
mmap$auto(0x7, 0x8000007, 0x1, 0xfffffffffffffff7, r0, 0x8005)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sysfs$auto(0x2, 0x7, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0)
r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0)
read$auto(r4, 0x0, 0xb4d3)
unshare$auto(0x40000080)
setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567)

11.775527398s ago: executing program 9 (id=1269):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
move_pages$auto(0x0, 0x5, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0xa, 0x8, 0xffffffffffffffff, [0x7], {0x6, 0x6, 0x1, 0x1ff, 0x100, 0x10000000, 0xfd, 0x6, 0x1000000006}, {0x100, 0x1, 0x0, 0x1, 0x1, 0x40, 0x0, 0x7, 0xfffffffc}})
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x6, 0x7, 0x23e, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x18000, 0x80, 0x7, 0x2d7d01bf, 0x7, 0x2000, 0x5, 0x0, 0x84, 0x6ef, 0x0, 0x0, 0x0, 0xffffffe0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x35, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200d)
socket(0x10, 0x2, 0x0)
socket(0x2, 0xa, 0x8)
waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x2001, 0x0)
shmctl$auto_SHM_STAT_ANY(0x0, 0xf, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x106)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
r1 = socket(0x1e, 0x1, 0x0)
connect$auto(r1, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3, 0x1}}, 0x10)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048004)
madvise$auto(0x0, 0x200007, 0x19)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0)
pread64$auto(r2, 0x0, 0x600100000001, 0x1ff)

10.785294413s ago: executing program 9 (id=1270):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
timerfd_create$auto(0x9, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x121042, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_ima_measurements_count_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$auto(r1, 0x0, 0x3)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0)
write$auto(0x3, 0x0, 0xfdef)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
fallocate$auto(r0, 0x1, 0x820, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
r2 = inotify_init1$auto(0x800)
read$auto(r2, 0x0, 0x1002)
mmap$auto(0x0, 0xb9f, 0x8, 0x9b72, 0xffffffffffffffff, 0xc)
prctl$auto(0x3f, 0x1, 0x4, 0x8000000000000000, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x5054c2, 0x0)
unshare$auto(0x40000080)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="ffa727bd7000fedbdf250800000005000280f1000000"], 0x1c}}, 0x40010)
r6 = setfsuid$auto(0xee00)
r7 = setfsuid$auto(0xee01)
setresuid$auto(r6, r7, r6)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000001500)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000001980)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="040061800000"], 0x12b0}, 0x1, 0x0, 0x0, 0x48080}, 0x8000)

9.373061473s ago: executing program 9 (id=1271):
mmap$auto(0x0, 0x2000b, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/tracing_cpumask\x00', 0x0, 0x0)
mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0)
sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1018}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0)
bpf$auto(0x2, &(0x7f0000000000)=@link_create={@prog_fd=r0, @target_fd, 0x5, 0x400, @perf_event={0x55c}}, 0x7)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0xe8)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129a00, 0x0)
mmap$auto(0x3, 0x400008, 0x101, 0x9b72, 0x2, 0x8000)
r6 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r6, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44131011", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100)
ioctl$auto(r5, 0x900064b5, 0xc14)
socket(0x28, 0x5, 0x0)
socket(0x28, 0x801, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
membarrier$auto(0x2, 0x8000000000000000, 0x800)
mmap$auto(0x0, 0x8000000020009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)

8.950870895s ago: executing program 0 (id=1264):
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0)
read$auto_configfs_file_operations_configfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/19, 0x13)
ioctl$auto(r0, 0x5646, r0)
openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/setgroups\x00', 0x80000, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/40, 0x28)
ioctl$auto(r0, 0x2400000, 0xffffffffffffffff)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r1, 0x9, 0x7ff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0)
pread64$auto(r2, 0x0, 0x8, 0xffff)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbff2503000000080004000800000006000700008000000800513a", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa3a000008000200", @ANYRES32=r3, @ANYBLOB="08000300faffffff"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_gl861/parameters/adapter_nr\x00', 0x101800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000380)=""/172, 0xac)
socket(0x2, 0x3, 0x100)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
r5 = getpid()
process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000000c0)="9ddf72c6b3ccf6e596c065e990ce4331174efad4aba90238c76c8e8ace07517933448ddfcdb03b280e903d6b2e9e41b8e66b664881cbfaa982fcf7b370ec62bcdd42a4bea27a5238d1", 0x4000000000123f}, 0xa, 0x0)

7.939410247s ago: executing program 0 (id=1272):
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x2102, 0x0)
mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1)
mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x5, 0x0)
mmap$auto(0x0, 0x3, 0x40000000009f, 0x10000000040eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptyu1\x00', 0x201, 0x0)
write$auto(0x3, 0x0, 0xfdef)
socket(0x28, 0x0, 0x300)
syz_clone(0x2280cd00, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_FREE2(0xffffffffffffffff, 0x4112, 0x0)
migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2)
mmap$auto(0x0, 0xfd6, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_system\x00', 0x0, 0x0)
io_uring_setup$auto(0x59, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0)
write$auto(0x3, 0x0, 0x7)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/resend_igmp\x00', 0x1e2142, 0x0)
sendfile$auto(r0, r0, 0x0, 0x7fff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
statfs$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x7, 0x9, 0x12, 0x0, 0x8, 0x1, 0xffffffff, {[0x16c2, 0xfffffff9]}, 0x9, 0x5, 0x739, [0x5, 0x3ff, 0xfffffffffffffff8, 0x5cd]})

6.907026177s ago: executing program 4 (id=1268):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x422302, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000340)="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")
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
read$auto(0x3, 0x0, 0x8080)
unshare$auto(0x40000080)
socket(0x2, 0x5, 0x3)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r2, 0x0, 0x100000e3d9)
pivot_root$auto(0x0, 0x0)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x20, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto(0x3, 0x5412, r1)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x56b702, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
socketpair$auto(0x7, 0x2, 0x4000003, 0x0)
prctl$auto_PR_SET_VMA(0x53564d41, 0xcbdc, 0xfffffffffffffff9, 0x9, 0x2)
readv$auto(r2, &(0x7f0000000100)={&(0x7f0000000200)="b752bbef418f06cb4e2f2c8709b0b57a5a44970c930478bf7a536bfda78995d541b0ab09c4c080b4978baf5873dc02dd4ff9fcefc5e7a77cf1a7af27f13d68567ddc666a273923a34216e8b754c691a9257240e6a69cca075a8ca0c59882eead992e038a7e4d35a9928eaf48aeae30c6d49c7e5541d3f99a45ba0a6303e6be5812063c142f5998f32e9f60babc54f0f80186df2880922953f1f750bd4efca5738082a6a0ee1b3f173b06dfc4f1d27cebacf0218d811360f06993f4eac1027b482639f4e622ed7e0144e5f195a73641948e9893b0f7", 0x6}, 0x1)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x9, 0x8, 0x1, 0x9, 0x4, 0x15f4da0a, 0x4, 0xd08, 0x7ff, 0xc, 0x4, 0x6d3b, 0xa, 0x2, 0x4000000000000d]}, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x2b, 0x1, 0x0)
socket(0xa, 0x2, 0x3a)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)

2.430347932s ago: executing program 50 (id=1261):
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0)
openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/prev\x00', 0x1, 0x0)
ftruncate$auto(0x3, 0x400180200000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
unshare$auto(0x40000080)
unshare$auto(0x6)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0)
socket(0xa, 0x5, 0x84)
init_module$auto(0x0, 0xffff9, 0x0)
r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
read$auto_rng_chrdev_ops_core(r0, 0x0, 0x0)
setgroups$auto(0xe32, 0x0)
get_mempolicy$auto(0x0, 0x0, 0x400, 0x200, 0x3)
r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x408901, 0x0)
ioctl$auto(r0, 0x4, r2)
ioctl$auto(r2, 0x5521, 0xffffffffffffffff)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r4 = epoll_create$auto(0x3e)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/180, 0xb4)
poll$auto(&(0x7f0000000080)={0x3, 0x0, 0xa}, 0xfffffff1, 0x108)
epoll_ctl$auto(r4, 0x1, r3, 0x0)
ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i915/parameters/mitigations\x00', 0x505204, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000001c0)='!\x8f\xb6\xef\x10\x00\x00\x00\x00\x00\x00\x15\xa3\x92\x00\x8ez\xa8\xde', 0xa4)

476.78148ms ago: executing program 3 (id=1273):
mmap$auto(0x2001fffffffe, 0x40000001, 0x100000000004c, 0xeb1, 0xffffffffffffffff, 0x8004)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0)
ioctl$auto_IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x1})
r1 = open(0x0, 0x0, 0x408)
getdents$auto(r1, 0x0, 0x5f)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xef1, r0, 0x8000)
r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x80002, 0x0)
mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0xe8)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x9, 0x40000c, 0x2, 0x37, r3, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x43, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x7ffffff8, 0x5, 0x7, 0x5, 0x61, 0x103})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9})
read$auto(r1, 0x0, 0xebc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
socket(0x2c, 0x0, 0x6)
pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x7fff)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)

0s ago: executing program 3 (id=1274):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x5, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
r1 = socket(0x15, 0x5, 0x0)
socket(0xa, 0x1, 0x84)
r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
write$auto(0x6, 0x0, 0x100000001)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0x1a29, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0)
read$auto_clear_warn_once_fops_(r2, &(0x7f0000000300)=""/169, 0xa9)
mmap$auto(0xfffffffd, 0x100, 0x7ffffffb, 0x13, r1, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
r3 = socket(0x29, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x24044000)
ioctl$auto(r3, 0x8b0f, 0x24)
close_range$auto(0xffffffffffffffff, r0, 0xffeffffe)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb3, 0xffffffffffffffff, 0x8000)
close_range$auto(r0, 0x8, 0x2)
socket(0x10, 0x2, 0x4)
r4 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci1/force_wakeup\x00', 0x101200, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r4, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3)
getpgid$auto(0xffffffffffffffff)

kernel console output (not intermixed with test programs):

36720][T12272]  __x64_sys_openat+0x12d/0x210
[  558.336743][T12272]  ? __pfx___x64_sys_openat+0x10/0x10
[  558.336765][T12272]  ? xfd_validate_state+0x129/0x190
[  558.336794][T12272]  do_syscall_64+0xc9/0xf80
[  558.336814][T12272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.336830][T12272] RIP: 0033:0x7f3661f9aeb9
[  558.336843][T12272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  558.336857][T12272] RSP: 002b:00007f3662e22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  558.336873][T12272] RAX: ffffffffffffffda RBX: 00007f3662215fa0 RCX: 00007f3661f9aeb9
[  558.336884][T12272] RDX: 0000000000141001 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  558.336895][T12272] RBP: 00007f3662008c1f R08: 0000000000000000 R09: 0000000000000000
[  558.336904][T12272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  558.336914][T12272] R13: 00007f3662216038 R14: 00007f3662215fa0 R15: 00007fff5ff88448
[  558.336934][T12272]  </TASK>
[  558.796017][T12207] veth0_vlan: entered promiscuous mode
[  558.806159][T12207] veth1_vlan: entered promiscuous mode
[  558.829965][T12207] veth0_macvtap: entered promiscuous mode
[  558.838873][T12207] veth1_macvtap: entered promiscuous mode
[  558.853786][T12207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  558.863922][T12207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  558.966687][T11628] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  558.975500][T11628] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  558.985608][T11628] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  558.999616][T11628] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  559.089231][T11626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.097099][T11626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.196826][T11788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.224464][T11788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.422117][T12286] random: crng reseeded on system resumption
[  559.543195][T11822] Bluetooth: hci6: command tx timeout
[  560.063014][T12299] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  560.182668][T12299] netlink: 'syz.6.1036': attribute type 1 has an invalid length.
[  560.458767][T12310] debugfs: '!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211'
[  560.534553][T12313] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  560.654844][T12314] block nbd2: not configured, cannot reconfigure
[  560.879712][T12320] netlink: 186 bytes leftover after parsing attributes in process `syz.7.1040'.
[  561.040586][T12323] device-mapper: ioctl: Unable to rename non-existent device,  to „
[  561.224346][T12326] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  561.255863][T12326] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  561.270796][T12326] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  561.605819][T11822] Bluetooth: hci6: command tx timeout
[  562.358064][T12349] random: crng reseeded on system resumption
[  562.842564][T12356] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  562.913650][T12357] block nbd2: not configured, cannot reconfigure
[  563.343529][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1051'.
[  563.414102][T12366] i: entered promiscuous mode
[  563.526617][T12369] HfR: entered promiscuous mode
[  563.608889][T11629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  563.618927][T11629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  563.627479][T11629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  563.635120][T11629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  563.646056][T11629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  563.675099][T11629] Bluetooth: hci6: command tx timeout
[  564.397712][T12372] chnl_net:caif_netlink_parms(): no params data found
[  564.654895][T12388] netlink: 50 bytes leftover after parsing attributes in process `syz.6.1054'.
[  564.704340][T12372] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.750179][T12372] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.757423][T12372] bridge_slave_0: entered allmulticast mode
[  564.791456][T12372] bridge_slave_0: entered promiscuous mode
[  564.828372][T12372] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.858963][T12372] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.886473][T12372] bridge_slave_1: entered allmulticast mode
[  564.922209][T12372] bridge_slave_1: entered promiscuous mode
[  565.056635][T12400] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  565.082517][T12372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  565.107142][T12372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  565.164425][T12401] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  565.217908][T12401] block nbd2: not configured, cannot reconfigure
[  565.244957][T12372] team0: Port device team_slave_0 added
[  565.281940][T12372] team0: Port device team_slave_1 added
[  565.385344][T12372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  565.409190][T12372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  565.523614][T12372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  565.554321][T12372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  565.571353][T12372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  565.664924][T11629] Bluetooth: hci7: command tx timeout
[  565.677327][T12372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  565.711718][T12409] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  565.827909][T12372] hsr_slave_0: entered promiscuous mode
[  565.852370][T12412] block nbd2: not configured, cannot reconfigure
[  565.863216][T12372] hsr_slave_1: entered promiscuous mode
[  565.887841][T12372] debugfs: 'hsr0' already exists in 'hsr'
[  565.906040][T12372] Cannot create hsr debugfs directory
[  566.393114][T12415] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1059'.
[  566.431271][T12415] vlan1: entered promiscuous mode
[  566.442822][T12415] vlan1: entered allmulticast mode
[  566.452217][T12415] veth0_vlan: entered allmulticast mode
[  566.526370][T12372] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  566.583918][T12372] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  566.635989][T12372] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  566.680501][T12372] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  567.062082][T12372] 8021q: adding VLAN 0 to HW filter on device bond0
[  567.144035][T12372] 8021q: adding VLAN 0 to HW filter on device team0
[  567.177434][T11626] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.184526][T11626] bridge0: port 1(bridge_slave_0) entered forwarding state
[  567.218387][T11626] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.225535][T11626] bridge0: port 2(bridge_slave_1) entered forwarding state
[  567.392977][T12372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  567.604262][T12372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  567.662989][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  567.669848][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  567.735701][T11629] Bluetooth: hci7: command tx timeout
[  567.851580][T12372] veth0_vlan: entered promiscuous mode
[  567.867011][T12372] veth1_vlan: entered promiscuous mode
[  567.904263][T12372] veth0_macvtap: entered promiscuous mode
[  567.915023][T12372] veth1_macvtap: entered promiscuous mode
[  567.958132][T12372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  567.978196][T12372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  567.996790][T11893] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  568.014491][T11893] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  568.045826][T11893] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  568.096124][T11893] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  568.123826][T11788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.131680][T11788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.170785][T11893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.180249][T11893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.295876][T12460] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  568.337718][T12463] random: crng reseeded on system resumption
[  568.415864][T12464] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  568.507784][T12464] block nbd2: not configured, cannot reconfigure
[  569.323629][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1064'.
[  569.367230][T12480] i: entered promiscuous mode
[  569.416273][T12480] HfR: entered promiscuous mode
[  569.803463][T11629] Bluetooth: hci7: command tx timeout
[  570.357206][T12495] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  570.476577][T12501] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  570.558760][T12501] FAULT_INJECTION: forcing a failure.
[  570.558760][T12501] name failslab, interval 1, probability 0, space 0, times 0
[  570.608254][T12501] CPU: 0 UID: 0 PID: 12501 Comm: syz.9.1068 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  570.608283][T12501] Tainted: [L]=SOFTLOCKUP
[  570.608289][T12501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  570.608300][T12501] Call Trace:
[  570.608306][T12501]  <TASK>
[  570.608312][T12501]  dump_stack_lvl+0x100/0x190
[  570.608337][T12501]  should_fail_ex.cold+0x5/0xa
[  570.608360][T12501]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  570.608378][T12501]  should_failslab+0xc2/0x120
[  570.608400][T12501]  kmem_cache_alloc_noprof+0x83/0x780
[  570.608420][T12501]  ? skb_clone+0x190/0x400
[  570.608446][T12501]  ? skb_clone+0x190/0x400
[  570.608466][T12501]  skb_clone+0x190/0x400
[  570.608489][T12501]  netlink_deliver_tap+0xaed/0xcc0
[  570.608516][T12501]  netlink_unicast+0x70c/0x870
[  570.608542][T12501]  ? __pfx_netlink_unicast+0x10/0x10
[  570.608565][T12501]  ? idr_get_next+0xec/0x150
[  570.608588][T12501]  ctrl_getfamily+0x417/0x550
[  570.608605][T12501]  ? __pfx_ctrl_getfamily+0x10/0x10
[  570.608623][T12501]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290
[  570.608640][T12501]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290
[  570.608661][T12501]  genl_family_rcv_msg_doit+0x214/0x300
[  570.608680][T12501]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  570.608697][T12501]  ? genl_get_cmd+0x3ef/0x720
[  570.608717][T12501]  ? __dev_queue_xmit+0x7fd/0x46f0
[  570.608735][T12501]  ? __radix_tree_lookup+0x217/0x2b0
[  570.608754][T12501]  genl_rcv_msg+0x560/0x800
[  570.608772][T12501]  ? __pfx_genl_rcv_msg+0x10/0x10
[  570.608789][T12501]  ? __pfx_ctrl_getfamily+0x10/0x10
[  570.608812][T12501]  netlink_rcv_skb+0x159/0x420
[  570.608843][T12501]  ? __pfx_genl_rcv_msg+0x10/0x10
[  570.608861][T12501]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  570.608893][T12501]  ? netlink_deliver_tap+0x1ae/0xcc0
[  570.608919][T12501]  genl_rcv+0x28/0x40
[  570.608934][T12501]  netlink_unicast+0x5aa/0x870
[  570.608960][T12501]  ? __pfx_netlink_unicast+0x10/0x10
[  570.608992][T12501]  netlink_sendmsg+0x8b0/0xda0
[  570.609018][T12501]  ? __pfx_netlink_sendmsg+0x10/0x10
[  570.609043][T12501]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  570.609066][T12501]  __sys_sendto+0x4aa/0x520
[  570.609088][T12501]  ? __pfx___sys_sendto+0x10/0x10
[  570.609115][T12501]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  570.609150][T12501]  __x64_sys_sendto+0xe0/0x1c0
[  570.609170][T12501]  ? do_syscall_64+0x94/0xf80
[  570.609188][T12501]  ? lockdep_hardirqs_on+0x78/0x100
[  570.609205][T12501]  do_syscall_64+0xc9/0xf80
[  570.609224][T12501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.609240][T12501] RIP: 0033:0x7f25c675b78e
[  570.609254][T12501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  570.609269][T12501] RSP: 002b:00007f25c756de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  570.609285][T12501] RAX: ffffffffffffffda RBX: 00007f25c756f6c0 RCX: 00007f25c675b78e
[  570.609296][T12501] RDX: 000000000000001c RSI: 00007f25c756e000 RDI: 0000000000000004
[  570.609306][T12501] RBP: 0000000000000000 R08: 00007f25c756df04 R09: 000000000000000c
[  570.609315][T12501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  570.609324][T12501] R13: 00007f25c756df58 R14: 00007f25c756e000 R15: 0000000000000000
[  570.609345][T12501]  </TASK>
[  571.393526][T12519] random: crng reseeded on system resumption
[  571.872368][T11629] Bluetooth: hci7: command tx timeout
[  572.119118][T12533] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[  572.143511][T12533] CPU: 0 UID: 0 PID: 12533 Comm: syz.7.1075 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  572.143540][T12533] Tainted: [L]=SOFTLOCKUP
[  572.143546][T12533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  572.143556][T12533] Call Trace:
[  572.143563][T12533]  <TASK>
[  572.143570][T12533]  dump_stack_lvl+0x100/0x190
[  572.143595][T12533]  sysfs_warn_dup.cold+0x1c/0x28
[  572.143618][T12533]  sysfs_do_create_link_sd+0x113/0x140
[  572.143641][T12533]  sysfs_create_link+0x61/0xc0
[  572.143661][T12533]  device_add+0x675/0x1950
[  572.143685][T12533]  ? __pfx_device_add+0x10/0x10
[  572.143705][T12533]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  572.143730][T12533]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[  572.143755][T12533]  wiphy_register+0x1e58/0x2d30
[  572.143779][T12533]  ? __rtnl_unlock+0xb9/0xf0
[  572.143800][T12533]  ? __pfx_wiphy_register+0x10/0x10
[  572.143823][T12533]  ? __asan_memset+0x23/0x50
[  572.143840][T12533]  ? minstrel_ht_alloc+0x5e6/0x7f0
[  572.143872][T12533]  ieee80211_register_hw+0x2c11/0x4040
[  572.143904][T12533]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  572.143926][T12533]  ? __pfx___debug_object_init+0x10/0x10
[  572.143948][T12533]  ? find_held_lock+0x2b/0x80
[  572.143963][T12533]  ? net_generic+0xea/0x2a0
[  572.143981][T12533]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  572.143998][T12533]  ? __hrtimer_setup+0x178/0x280
[  572.144021][T12533]  mac80211_hwsim_new_radio+0x2847/0x57c0
[  572.144056][T12533]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  572.144084][T12533]  hwsim_new_radio_nl+0xc1f/0x1340
[  572.144104][T12533]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290
[  572.144124][T12533]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  572.144152][T12533]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290
[  572.144169][T12533]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290
[  572.144189][T12533]  genl_family_rcv_msg_doit+0x214/0x300
[  572.144208][T12533]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  572.144224][T12533]  ? genl_get_cmd+0x3ef/0x720
[  572.144243][T12533]  ? bpf_lsm_capable+0x9/0x10
[  572.144256][T12533]  ? security_capable+0x80/0x260
[  572.144276][T12533]  ? ns_capable+0xd2/0xf0
[  572.144294][T12533]  genl_rcv_msg+0x560/0x800
[  572.144312][T12533]  ? __pfx_genl_rcv_msg+0x10/0x10
[  572.144329][T12533]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  572.144357][T12533]  netlink_rcv_skb+0x159/0x420
[  572.144380][T12533]  ? __pfx_genl_rcv_msg+0x10/0x10
[  572.144397][T12533]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  572.144428][T12533]  ? netlink_deliver_tap+0x1ae/0xcc0
[  572.144453][T12533]  genl_rcv+0x28/0x40
[  572.144467][T12533]  netlink_unicast+0x5aa/0x870
[  572.144496][T12533]  ? __pfx_netlink_unicast+0x10/0x10
[  572.144518][T12533]  ? __pfx___might_resched+0x10/0x10
[  572.144540][T12533]  ? __lock_acquire+0x4a5/0x2630
[  572.144566][T12533]  netlink_sendmsg+0x8b0/0xda0
[  572.144592][T12533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  572.144614][T12533]  ? __import_iovec+0x1d2/0x640
[  572.144639][T12533]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  572.144661][T12533]  ____sys_sendmsg+0xa54/0xc30
[  572.144682][T12533]  ? __pfx_____sys_sendmsg+0x10/0x10
[  572.144697][T12533]  ? __pfx___futex_wait+0x10/0x10
[  572.144721][T12533]  ? __pfx_futex_wake_mark+0x10/0x10
[  572.144750][T12533]  ___sys_sendmsg+0x190/0x1e0
[  572.144770][T12533]  ? __pfx____sys_sendmsg+0x10/0x10
[  572.144799][T12533]  ? find_held_lock+0x2b/0x80
[  572.144826][T12533]  __sys_sendmsg+0x170/0x220
[  572.144848][T12533]  ? __pfx___sys_sendmsg+0x10/0x10
[  572.144869][T12533]  ? __x64_sys_futex+0x34f/0x4d0
[  572.144901][T12533]  do_syscall_64+0xc9/0xf80
[  572.144922][T12533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.144939][T12533] RIP: 0033:0x7f3768f9aeb9
[  572.144954][T12533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  572.144969][T12533] RSP: 002b:00007f3769e9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  572.144985][T12533] RAX: ffffffffffffffda RBX: 00007f3769215fa0 RCX: 00007f3768f9aeb9
[  572.144996][T12533] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003
[  572.145006][T12533] RBP: 00007f3769008c1f R08: 0000000000000000 R09: 0000000000000000
[  572.145016][T12533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  572.145025][T12533] R13: 00007f3769216038 R14: 00007f3769215fa0 R15: 00007ffda8ac26d8
[  572.145045][T12533]  </TASK>
[  573.576641][T12560] [U] 	
[  573.579538][T12560] [U] 
[  573.582214][T12560] [U] 
[  573.584882][T12560] [U] 
[  573.587554][T12560] [U] 
[  573.595849][T12538] rtc_cmos 00:00: Alarms can be up to one day in the future
[  573.619478][T12560] [U] 
[  573.622204][T12560] [U] 
[  573.624879][T12560] [U] 
[  573.627554][T12560] [U] 
[  573.665369][T12560] [U] 
[  573.668079][T12560] [U] 
[  573.670757][T12560] [U] 
[  573.673429][T12560] [U] 
[  573.717488][T12560] [U] 
[  573.720204][T12560] [U] 
[  573.722880][T12560] [U] 
[  573.725548][T12560] [U] 
[  573.737682][T12567] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  573.798798][T12560] [U] 
[  573.854734][T12570] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  573.897207][T12570] FAULT_INJECTION: forcing a failure.
[  573.897207][T12570] name fail_futex, interval 1, probability 0, space 0, times 0
[  573.925449][T12570] CPU: 0 UID: 0 PID: 12570 Comm: syz.9.1081 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  573.925493][T12570] Tainted: [L]=SOFTLOCKUP
[  573.925505][T12570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  573.925515][T12570] Call Trace:
[  573.925521][T12570]  <TASK>
[  573.925527][T12570]  dump_stack_lvl+0x100/0x190
[  573.925552][T12570]  should_fail_ex.cold+0x5/0xa
[  573.925578][T12570]  get_futex_key+0x1d2/0x1620
[  573.925600][T12570]  ? __pfx_get_futex_key+0x10/0x10
[  573.925625][T12570]  futex_wake+0xea/0x530
[  573.925650][T12570]  ? __pfx_futex_wake+0x10/0x10
[  573.925673][T12570]  ? rcu_is_watching+0x12/0xc0
[  573.925688][T12570]  ? lockdep_hardirqs_on+0x78/0x100
[  573.925711][T12570]  do_futex+0x32b/0x350
[  573.925731][T12570]  ? __pfx_do_futex+0x10/0x10
[  573.925752][T12570]  ? __fput+0x68a/0xb40
[  573.925774][T12570]  __x64_sys_futex+0x34f/0x4d0
[  573.925797][T12570]  ? __pfx___x64_sys_futex+0x10/0x10
[  573.925824][T12570]  do_syscall_64+0xc9/0xf80
[  573.925843][T12570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.925858][T12570] RIP: 0033:0x7f25c679aeb9
[  573.925872][T12570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.925886][T12570] RSP: 002b:00007f25c756f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  573.925901][T12570] RAX: ffffffffffffffda RBX: 00007f25c6a16098 RCX: 00007f25c679aeb9
[  573.925911][T12570] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f25c6a1609c
[  573.925920][T12570] RBP: 00007f25c6a16090 R08: 0000000000000000 R09: 0000000000000000
[  573.925930][T12570] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000000
[  573.925938][T12570] R13: 00007f25c6a16128 R14: 00007fff43f0b640 R15: 00007fff43f0b728
[  573.925958][T12570]  </TASK>
[  574.129605][T12570] block nbd2: not configured, cannot reconfigure
[  574.174182][T12302] rtc_cmos 00:00: Alarms can be up to one day in the future
[  574.182280][T12302] rtc_cmos 00:00: Alarms can be up to one day in the future
[  574.189748][T12302] rtc_cmos 00:00: Alarms can be up to one day in the future
[  574.200506][T12302] rtc_cmos 00:00: Alarms can be up to one day in the future
[  574.207780][T12302] rtc rtc0: __rtc_set_alarm: err=-22
[  574.227844][T12573] futex_wake_op: syz.7.1082 tries to shift op by -2048; fix this program
[  574.236687][T12573] futex_wake_op: syz.7.1082 tries to shift op by -2048; fix this program
[  574.541965][T12582] random: crng reseeded on system resumption
[  575.335290][T12597] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  575.568689][T12602] random: crng reseeded on system resumption
[  575.735213][T11822] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  575.753875][T11822] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  575.762302][T11822] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  575.769974][T11822] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  575.800736][T11822] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  576.592505][T12606] chnl_net:caif_netlink_parms(): no params data found
[  577.248967][T12606] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.273634][T12606] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.294421][T12606] bridge_slave_0: entered allmulticast mode
[  577.320062][T12606] bridge_slave_0: entered promiscuous mode
[  577.370641][T12606] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.397676][T12606] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.426947][T12606] bridge_slave_1: entered allmulticast mode
[  577.443070][T12606] bridge_slave_1: entered promiscuous mode
[  577.585322][T12606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.638944][T12606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  577.657112][T12645] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  577.821158][T12648] block nbd2: not configured, cannot reconfigure
[  577.851324][T11822] Bluetooth: hci8: command tx timeout
[  577.984235][T12606] team0: Port device team_slave_0 added
[  578.046721][T12606] team0: Port device team_slave_1 added
[  578.176704][T12606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  578.249252][T12606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  578.419326][T12606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  578.496275][T12606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  578.522161][   T30] audit: type=1800 audit(1769986809.690:13): pid=12659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1098" name="dbroot" dev="configfs" ino=48358 res=0 errno=0
[  578.565120][T12606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  578.729862][T12606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  578.772756][T12663] random: crng reseeded on system resumption
[  578.924819][T12606] hsr_slave_0: entered promiscuous mode
[  578.960761][T12606] hsr_slave_1: entered promiscuous mode
[  579.000885][T12606] debugfs: 'hsr0' already exists in 'hsr'
[  579.057318][T12606] Cannot create hsr debugfs directory
[  579.661428][T12606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.766259][T12674] phram: not enough arguments
[  579.855754][T12606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.911913][T11822] Bluetooth: hci8: command tx timeout
[  580.164593][T12606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.300870][T12606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.415847][T12693] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  580.537966][T12693] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  580.687516][T12693] block nbd2: not configured, cannot reconfigure
[  580.720609][T12702] random: crng reseeded on system resumption
[  580.849011][T12606] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  580.891689][T12606] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  580.979373][T12606] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  581.038929][T12606] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  581.496610][T12606] 8021q: adding VLAN 0 to HW filter on device bond0
[  581.518959][T12727] random: crng reseeded on system resumption
[  581.688158][T12606] 8021q: adding VLAN 0 to HW filter on device team0
[  581.712316][T12727] hub 1-0:1.0: USB hub found
[  581.755068][T12727] hub 1-0:1.0: 1 port detected
[  581.816032][T11630] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.823193][T11630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  581.891412][T11630] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.898560][T11630] bridge0: port 2(bridge_slave_1) entered forwarding state
[  581.981450][T11822] Bluetooth: hci8: command tx timeout
[  582.793949][T12747] [U] 	
[  582.796753][T12747] [U] 
[  582.799429][T12747] [U] 
[  582.802096][T12747] [U] 
[  582.804765][T12747] [U] 
[  582.874137][T12747] [U] 
[  582.876846][T12747] [U] 
[  582.879516][T12747] [U] 
[  582.882182][T12747] [U] 
[  582.951119][T12747] [U] 
[  582.953825][T12747] [U] 
[  582.956497][T12747] [U] 
[  582.959165][T12747] [U] 
[  583.095708][T12747] [U] 
[  583.111792][T12606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  583.312678][T12768] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  583.388835][T12606] veth0_vlan: entered promiscuous mode
[  583.405959][T12770] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  583.420139][T12606] veth1_vlan: entered promiscuous mode
[  583.477981][T12770] FAULT_INJECTION: forcing a failure.
[  583.477981][T12770] name failslab, interval 1, probability 0, space 0, times 0
[  583.524950][T12606] veth0_macvtap: entered promiscuous mode
[  583.546788][T12770] CPU: 0 UID: 0 PID: 12770 Comm: syz.9.1116 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  583.546816][T12770] Tainted: [L]=SOFTLOCKUP
[  583.546822][T12770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  583.546832][T12770] Call Trace:
[  583.546837][T12770]  <TASK>
[  583.546844][T12770]  dump_stack_lvl+0x100/0x190
[  583.546868][T12770]  should_fail_ex.cold+0x5/0xa
[  583.546894][T12770]  should_failslab+0xc2/0x120
[  583.546916][T12770]  kmem_cache_alloc_node_noprof+0x8c/0x880
[  583.546939][T12770]  ? __alloc_skb+0x156/0x410
[  583.546957][T12770]  ? __alloc_skb+0x35d/0x410
[  583.546979][T12770]  ? __alloc_skb+0x156/0x410
[  583.547001][T12770]  __alloc_skb+0x156/0x410
[  583.547019][T12770]  ? __alloc_skb+0x35d/0x410
[  583.547038][T12770]  ? __pfx___alloc_skb+0x10/0x10
[  583.547059][T12770]  ? netlink_autobind.isra.0+0xa0/0x370
[  583.547087][T12770]  netlink_alloc_large_skb+0x69/0x150
[  583.547112][T12770]  netlink_sendmsg+0x680/0xda0
[  583.547138][T12770]  ? __pfx_netlink_sendmsg+0x10/0x10
[  583.547160][T12770]  ? __import_iovec+0x1d2/0x640
[  583.547184][T12770]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  583.547205][T12770]  ____sys_sendmsg+0xa54/0xc30
[  583.547224][T12770]  ? __pfx_____sys_sendmsg+0x10/0x10
[  583.547243][T12770]  ? try_to_wake_up+0x644/0x1a60
[  583.547263][T12770]  ___sys_sendmsg+0x190/0x1e0
[  583.547281][T12770]  ? __pfx____sys_sendmsg+0x10/0x10
[  583.547298][T12770]  ? futex_private_hash_put+0x107/0x1c0
[  583.547326][T12770]  ? find_held_lock+0x2b/0x80
[  583.547352][T12770]  __sys_sendmsg+0x170/0x220
[  583.547374][T12770]  ? __pfx___sys_sendmsg+0x10/0x10
[  583.547395][T12770]  ? __x64_sys_futex+0x34f/0x4d0
[  583.547426][T12770]  do_syscall_64+0xc9/0xf80
[  583.547446][T12770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.547462][T12770] RIP: 0033:0x7f25c679aeb9
[  583.547476][T12770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  583.547490][T12770] RSP: 002b:00007f25c756f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  583.547506][T12770] RAX: ffffffffffffffda RBX: 00007f25c6a16090 RCX: 00007f25c679aeb9
[  583.547517][T12770] RDX: 0000000024044880 RSI: 0000200000006d80 RDI: 0000000000000003
[  583.547527][T12770] RBP: 00007f25c6808c1f R08: 0000000000000000 R09: 0000000000000000
[  583.547537][T12770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  583.547546][T12770] R13: 00007f25c6a16128 R14: 00007f25c6a16090 R15: 00007fff43f0b728
[  583.547573][T12770]  </TASK>
[  583.820498][T12606] veth1_macvtap: entered promiscuous mode
[  583.835034][T12606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  583.845088][T12606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  583.990415][T11893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.999359][T11893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  584.008137][T11893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  584.017190][T11893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  584.064503][T11822] Bluetooth: hci8: command tx timeout
[  584.142286][T11788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.177182][T11788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.358286][T11893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.380995][T11893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.647234][T12808] binder: 12802:12808 ioctl c018620c 0 returned -1
[  585.971097][T12821] random: crng reseeded on system resumption
[  586.600926][T12834] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  586.767402][T12836] FAULT_INJECTION: forcing a failure.
[  586.767402][T12836] name failslab, interval 1, probability 0, space 0, times 0
[  586.895533][T12836] CPU: 0 UID: 0 PID: 12836 Comm: syz.9.1126 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  586.895560][T12836] Tainted: [L]=SOFTLOCKUP
[  586.895567][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  586.895576][T12836] Call Trace:
[  586.895582][T12836]  <TASK>
[  586.895589][T12836]  dump_stack_lvl+0x100/0x190
[  586.895614][T12836]  should_fail_ex.cold+0x5/0xa
[  586.895639][T12836]  should_failslab+0xc2/0x120
[  586.895661][T12836]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290
[  586.895680][T12836]  __kmalloc_noprof+0xf6/0x9c0
[  586.895695][T12836]  ? __pfx___might_resched+0x10/0x10
[  586.895724][T12836]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290
[  586.895741][T12836]  genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290
[  586.895763][T12836]  genl_family_rcv_msg_doit+0xc7/0x300
[  586.895781][T12836]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  586.895797][T12836]  ? genl_get_cmd+0x3ef/0x720
[  586.895817][T12836]  ? __dev_queue_xmit+0x7fd/0x46f0
[  586.895835][T12836]  ? __radix_tree_lookup+0x217/0x2b0
[  586.895855][T12836]  genl_rcv_msg+0x560/0x800
[  586.895873][T12836]  ? __pfx_genl_rcv_msg+0x10/0x10
[  586.895894][T12836]  ? __pfx_ctrl_getfamily+0x10/0x10
[  586.895918][T12836]  netlink_rcv_skb+0x159/0x420
[  586.895941][T12836]  ? __pfx_genl_rcv_msg+0x10/0x10
[  586.895958][T12836]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  586.895990][T12836]  ? netlink_deliver_tap+0x1ae/0xcc0
[  586.896015][T12836]  genl_rcv+0x28/0x40
[  586.896029][T12836]  netlink_unicast+0x5aa/0x870
[  586.896055][T12836]  ? __pfx_netlink_unicast+0x10/0x10
[  586.896085][T12836]  netlink_sendmsg+0x8b0/0xda0
[  586.896111][T12836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  586.896136][T12836]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  586.896158][T12836]  __sys_sendto+0x4aa/0x520
[  586.896186][T12836]  ? __pfx___sys_sendto+0x10/0x10
[  586.896215][T12836]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  586.896251][T12836]  __x64_sys_sendto+0xe0/0x1c0
[  586.896270][T12836]  ? do_syscall_64+0x94/0xf80
[  586.896288][T12836]  ? lockdep_hardirqs_on+0x78/0x100
[  586.896306][T12836]  do_syscall_64+0xc9/0xf80
[  586.896325][T12836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.896341][T12836] RIP: 0033:0x7f25c675b78e
[  586.896355][T12836] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  586.896370][T12836] RSP: 002b:00007f25c756de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  586.896385][T12836] RAX: ffffffffffffffda RBX: 00007f25c756f6c0 RCX: 00007f25c675b78e
[  586.896395][T12836] RDX: 000000000000001c RSI: 00007f25c756e000 RDI: 0000000000000004
[  586.896404][T12836] RBP: 0000000000000000 R08: 00007f25c756df04 R09: 000000000000000c
[  586.896414][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  586.896423][T12836] R13: 00007f25c756df58 R14: 00007f25c756e000 R15: 0000000000000000
[  586.896443][T12836]  </TASK>
[  587.357476][T12841] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  587.555691][T12843] [U] 	
[  587.558493][T12843] [U] 
[  587.561166][T12843] [U] 
[  587.563832][T12843] [U] 
[  587.566500][T12843] [U] 
[  587.576374][T12843] [U] 
[  587.579093][T12843] [U] 
[  587.581816][T12843] [U] 
[  587.584487][T12843] [U] 
[  587.593911][T12843] [U] 
[  587.596620][T12843] [U] 
[  587.599303][T12843] [U] 
[  587.601975][T12843] [U] 
[  587.675440][T12843] [U] 
[  587.678154][T12843] [U] 
[  587.680829][T12843] [U] 
[  587.683504][T12843] [U] 
[  587.752875][T12843] [U] 
[  587.755589][T12843] [U] 
[  587.758266][T12843] [U] 
[  587.760951][T12843] [U] 
[  587.854787][T12843] [U] 
[  589.394791][T12887] vivid-007: =================  START STATUS  =================
[  589.412348][T12887] vivid-007: Generate PTS: true
[  589.424948][T12887] vivid-007: Generate SCR: true
[  589.435060][T12887] tpg source WxH: 320x240 (Y'CbCr)
[  589.447048][T12887] tpg field: 1
[  589.453794][T12887] tpg crop: (0,0)/320x240
[  589.468991][T12887] tpg compose: (0,0)/320x240
[  589.495310][T12887] tpg colorspace: 8
[  589.499150][T12887] tpg transfer function: 0/0
[  589.526196][T12887] tpg Y'CbCr encoding: 0/0
[  589.542718][T12887] tpg quantization: 0/0
[  589.553801][T12887] tpg RGB range: 0/2
[  589.569367][T12887] vivid-007: ==================  END STATUS  ==================
[  589.671903][T12894] random: crng reseeded on system resumption
[  590.108897][T12902] XFS: Clearing xfsstats
[  590.499081][T12909] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  590.639909][T12912] FAULT_INJECTION: forcing a failure.
[  590.639909][T12912] name failslab, interval 1, probability 0, space 0, times 0
[  590.724990][T12912] CPU: 0 UID: 0 PID: 12912 Comm: syz.6.1138 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  590.725018][T12912] Tainted: [L]=SOFTLOCKUP
[  590.725024][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  590.725036][T12912] Call Trace:
[  590.725042][T12912]  <TASK>
[  590.725049][T12912]  dump_stack_lvl+0x100/0x190
[  590.725074][T12912]  should_fail_ex.cold+0x5/0xa
[  590.725097][T12912]  ? sk_filter_trim_cap+0x571/0xde0
[  590.725116][T12912]  should_failslab+0xc2/0x120
[  590.725137][T12912]  kmem_cache_alloc_noprof+0x83/0x780
[  590.725157][T12912]  ? skb_clone+0x190/0x400
[  590.725184][T12912]  ? skb_clone+0x190/0x400
[  590.725203][T12912]  skb_clone+0x190/0x400
[  590.725226][T12912]  netlink_deliver_tap+0xaed/0xcc0
[  590.725253][T12912]  netlink_unicast+0x70c/0x870
[  590.725282][T12912]  ? __pfx_netlink_unicast+0x10/0x10
[  590.725307][T12912]  ? genl_rcv_msg+0x4be/0x800
[  590.725327][T12912]  netlink_ack+0x655/0xb80
[  590.725356][T12912]  netlink_rcv_skb+0x333/0x420
[  590.725378][T12912]  ? __pfx_genl_rcv_msg+0x10/0x10
[  590.725395][T12912]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  590.725426][T12912]  ? netlink_deliver_tap+0x1ae/0xcc0
[  590.725451][T12912]  genl_rcv+0x28/0x40
[  590.725465][T12912]  netlink_unicast+0x5aa/0x870
[  590.725490][T12912]  ? __pfx_netlink_unicast+0x10/0x10
[  590.725520][T12912]  netlink_sendmsg+0x8b0/0xda0
[  590.725547][T12912]  ? __pfx_netlink_sendmsg+0x10/0x10
[  590.725572][T12912]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  590.725594][T12912]  __sys_sendto+0x4aa/0x520
[  590.725616][T12912]  ? __pfx___sys_sendto+0x10/0x10
[  590.725644][T12912]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  590.725679][T12912]  __x64_sys_sendto+0xe0/0x1c0
[  590.725699][T12912]  ? do_syscall_64+0x94/0xf80
[  590.725716][T12912]  ? lockdep_hardirqs_on+0x78/0x100
[  590.725734][T12912]  do_syscall_64+0xc9/0xf80
[  590.725753][T12912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.725777][T12912] RIP: 0033:0x7f3661f5b78e
[  590.725792][T12912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  590.725808][T12912] RSP: 002b:00007f3662dffe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  590.725824][T12912] RAX: ffffffffffffffda RBX: 00007f3662e016c0 RCX: 00007f3661f5b78e
[  590.725835][T12912] RDX: 000000000000001c RSI: 00007f3662e00000 RDI: 0000000000000004
[  590.725844][T12912] RBP: 0000000000000000 R08: 00007f3662dfff04 R09: 000000000000000c
[  590.725854][T12912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  590.725863][T12912] R13: 00007f3662dfff58 R14: 00007f3662e00000 R15: 0000000000000000
[  590.725883][T12912]  </TASK>
[  592.816351][T12942] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29
[  592.834822][T12931] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1142'.
[  592.977372][T12946] random: crng reseeded on system resumption
[  594.301236][T12968] debugfs: '!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211'
[  595.320732][T12984] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  595.424439][T12985] block nbd2: not configured, cannot reconfigure
[  595.586468][T12989] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  595.727247][T12990] block nbd2: not configured, cannot reconfigure
[  597.225814][T13012] caif:caif_disconnect_client(): nothing to disconnect
[  600.508347][T13036] futex_wake_op: syz.7.1163 tries to shift op by -2048; fix this program
[  600.508419][T13036] futex_wake_op: syz.7.1163 tries to shift op by -2048; fix this program
[  601.433858][T13044] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  601.501618][T13046] block nbd2: not configured, cannot reconfigure
[  602.796234][T11629] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  602.803490][T11629] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  602.804370][T11629] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  602.805016][T11629] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  602.805384][T11629] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  602.940108][T13055] caif:caif_disconnect_client(): nothing to disconnect
[  603.058187][T13057] chnl_net:caif_netlink_parms(): no params data found
[  603.133640][T13057] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.133791][T13057] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.133946][T13057] bridge_slave_0: entered allmulticast mode
[  603.135207][T13057] bridge_slave_0: entered promiscuous mode
[  603.137363][T13057] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.137446][T13057] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.137773][T13057] bridge_slave_1: entered allmulticast mode
[  603.138954][T13057] bridge_slave_1: entered promiscuous mode
[  603.163888][T13057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  603.166720][T13057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  603.187591][T13057] team0: Port device team_slave_0 added
[  603.192197][T13057] team0: Port device team_slave_1 added
[  603.213562][T13057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  603.213577][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.213596][T13057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.215290][T13057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.215303][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.215322][T13057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.255509][T13057] hsr_slave_0: entered promiscuous mode
[  603.256398][T13057] hsr_slave_1: entered promiscuous mode
[  603.257045][T13057] debugfs: 'hsr0' already exists in 'hsr'
[  603.257063][T13057] Cannot create hsr debugfs directory
[  603.397304][T13057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.460882][T13057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.600620][T13057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.684817][T13057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.895272][T13057] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  603.910566][T13057] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  603.913393][T13057] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  603.920290][T13057] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  603.975039][T13057] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.975138][T13057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  603.975448][T13057] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.975516][T13057] bridge0: port 1(bridge_slave_0) entered forwarding state
[  604.027748][T11626] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.028569][T11626] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.090122][T13057] 8021q: adding VLAN 0 to HW filter on device bond0
[  604.121489][T13057] 8021q: adding VLAN 0 to HW filter on device team0
[  604.126916][T11893] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.126993][T11893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  604.139248][T11628] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.139317][T11628] bridge0: port 2(bridge_slave_1) entered forwarding state
[  604.460211][T13057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  604.530674][T13057] veth0_vlan: entered promiscuous mode
[  604.556828][T13057] veth1_vlan: entered promiscuous mode
[  604.597537][T13057] veth0_macvtap: entered promiscuous mode
[  604.605045][T13057] veth1_macvtap: entered promiscuous mode
[  604.635420][T13057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  604.641116][T13057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  604.666604][T11628] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  604.666681][T11628] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  604.666717][T11628] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  604.666743][T11628] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  604.752372][T13057] ieee80211 phy58: Selected rate control algorithm 'minstrel_ht'
[  604.820170][T11628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  604.820190][T11628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  604.821617][T11629] Bluetooth: hci9: command tx timeout
[  604.828925][T13057] ieee80211 phy59: Selected rate control algorithm 'minstrel_ht'
[  604.910330][T11893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  604.910349][T11893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.550846][T13113] random: crng reseeded on system resumption
[  605.560104][T13113] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff]
[  605.560146][T13113] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[  605.560167][T13113] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[  605.560180][T13113] PM: hibernation: Basic memory bitmaps created
[  606.103312][T13113] PM: hibernation: Basic memory bitmaps freed
[  606.103420][T13113] caif:caif_disconnect_client(): nothing to disconnect
[  606.256521][T13124] __vm_enough_memory: pid: 13124, comm: syz.7.1176, bytes: 4398046511104 not enough memory for the allocation
[  606.476358][T13127] random: crng reseeded on system resumption
[  606.480983][T13127] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff]
[  606.481006][T13127] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[  606.481026][T13127] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[  606.481039][T13127] PM: hibernation: Basic memory bitmaps created
[  606.815649][T13127] PM: hibernation: Basic memory bitmaps freed
[  606.815738][T13127] caif:caif_disconnect_client(): nothing to disconnect
[  606.890672][T11629] Bluetooth: hci9: command tx timeout
[  607.769621][T13150] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  607.831607][T13151] block nbd2: not configured, cannot reconfigure
[  608.959638][T11629] Bluetooth: hci9: command tx timeout
[  609.300355][T11822] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  609.302326][T11822] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  609.303238][T11822] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  609.303835][T11822] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  609.304237][T11822] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  609.600570][T13157] chnl_net:caif_netlink_parms(): no params data found
[  609.743154][T13157] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.743398][T13157] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.743704][T13157] bridge_slave_0: entered allmulticast mode
[  609.747433][T13157] bridge_slave_0: entered promiscuous mode
[  609.759261][T13157] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.759391][T13157] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.759575][T13157] bridge_slave_1: entered allmulticast mode
[  609.760871][T13157] bridge_slave_1: entered promiscuous mode
[  609.789603][T13157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  609.793178][T13157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  609.817140][T13157] team0: Port device team_slave_0 added
[  609.819515][T13157] team0: Port device team_slave_1 added
[  609.841623][T13157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  609.841640][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.841659][T13157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  609.843172][T13157] batman_adv: batadv0: Adding interface: batadv_slave_1
[  609.843184][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.843203][T13157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  609.882401][T13157] hsr_slave_0: entered promiscuous mode
[  609.883361][T13157] hsr_slave_1: entered promiscuous mode
[  609.884038][T13157] debugfs: 'hsr0' already exists in 'hsr'
[  609.884060][T13157] Cannot create hsr debugfs directory
[  610.046701][T13157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.162629][T13157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.263759][T13157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.357040][T13157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.647305][T13174] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  610.674083][T13157] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  610.690946][T13157] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  610.695743][T13157] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  610.707424][T13157] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  610.741569][T13175] block nbd2: not configured, cannot reconfigure
[  610.898432][T13157] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.923905][T13157] 8021q: adding VLAN 0 to HW filter on device team0
[  610.929231][T11628] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.929299][T11628] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.937402][T11626] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.937470][T11626] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.028934][T11822] Bluetooth: hci9: command tx timeout
[  611.143498][T13191] caif:caif_disconnect_client(): nothing to disconnect
[  611.253154][T13157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.349630][T11822] Bluetooth: hci10: command tx timeout
[  611.473571][T13157] veth0_vlan: entered promiscuous mode
[  611.488327][T13157] veth1_vlan: entered promiscuous mode
[  611.513570][T13157] veth0_macvtap: entered promiscuous mode
[  611.518342][T13157] veth1_macvtap: entered promiscuous mode
[  611.529537][T13157] batman_adv: batadv0: Interface activated: batadv_slave_0
[  611.540927][T13157] batman_adv: batadv0: Interface activated: batadv_slave_1
[  611.550703][T11788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  611.550739][T11788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  611.550765][T11788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  611.550789][T11788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  611.623431][T13157] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht'
[  611.716909][T11626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.716928][T11626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.726830][T13157] ieee80211 phy61: Selected rate control algorithm 'minstrel_ht'
[  611.820500][T11626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.820520][T11626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.024820][T11629] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  612.026357][T11629] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  612.026979][T11629] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  612.027555][T11629] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  612.027930][T11629] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  612.649163][T13207] chnl_net:caif_netlink_parms(): no params data found
[  612.700236][T13217] caif:caif_disconnect_client(): nothing to disconnect
[  612.998897][T13207] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.998999][T13207] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.999201][T13207] bridge_slave_0: entered allmulticast mode
[  613.001672][T13207] bridge_slave_0: entered promiscuous mode
[  613.006233][T13207] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.006332][T13207] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.006488][T13207] bridge_slave_1: entered allmulticast mode
[  613.021561][T13207] bridge_slave_1: entered promiscuous mode
[  613.107790][T13207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  613.127265][T13207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  613.191876][T13230] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 0.  Contact your vendor for updates.
[  613.204595][T13207] team0: Port device team_slave_0 added
[  613.218296][T13207] team0: Port device team_slave_1 added
[  613.291738][T13207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  613.291755][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  613.291775][T13207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  613.293227][T13207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  613.293239][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  613.293259][T13207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  613.409474][T13207] hsr_slave_0: entered promiscuous mode
[  613.420850][T11629] Bluetooth: hci10: command tx timeout
[  613.429631][T13207] hsr_slave_1: entered promiscuous mode
[  613.435641][T13207] debugfs: 'hsr0' already exists in 'hsr'
[  613.435662][T13207] Cannot create hsr debugfs directory
[  613.961452][T13207] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.052403][T13207] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.056483][T11629] Bluetooth: hci11: command tx timeout
[  614.144044][T13207] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.220718][T13207] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.528114][T13207] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  614.552735][T13207] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  614.584322][T13207] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  614.589027][T13207] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  614.850583][T13207] 8021q: adding VLAN 0 to HW filter on device bond0
[  614.875673][T13207] 8021q: adding VLAN 0 to HW filter on device team0
[  614.901906][T11788] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.901978][T11788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  614.910005][T11893] bridge0: port 2(bridge_slave_1) entered blocking state
[  614.910076][T11893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  615.222153][T13207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  615.271014][T13254] caif:caif_disconnect_client(): nothing to disconnect
[  615.292899][T13207] veth0_vlan: entered promiscuous mode
[  615.300706][T13207] veth1_vlan: entered promiscuous mode
[  615.328138][T13207] veth0_macvtap: entered promiscuous mode
[  615.331383][T13207] veth1_macvtap: entered promiscuous mode
[  615.344792][T13207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  615.358422][T13207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  615.364105][T11630] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  615.364146][T11630] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  615.364172][T11630] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  615.364198][T11630] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  615.431529][T13207] ieee80211 phy62: Selected rate control algorithm 'minstrel_ht'
[  615.467507][T11630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  615.467546][T11630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  615.479647][T13207] ieee80211 phy63: Selected rate control algorithm 'minstrel_ht'
[  615.486622][T11629] Bluetooth: hci10: command tx timeout
[  615.512711][T11630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  615.512731][T11630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  615.775013][T13265] FAULT_INJECTION: forcing a failure.
[  615.775013][T13265] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  615.775044][T13265] CPU: 0 UID: 0 PID: 13265 Comm: syz.3.1187 Tainted: G          I  L      syzkaller #0 PREEMPT(full) 
[  615.775069][T13265] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  615.775076][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  615.775086][T13265] Call Trace:
[  615.775092][T13265]  <TASK>
[  615.775098][T13265]  dump_stack_lvl+0x100/0x190
[  615.775122][T13265]  should_fail_ex.cold+0x5/0xa
[  615.775144][T13265]  ? prepare_alloc_pages+0x16d/0x5f0
[  615.775178][T13265]  should_fail_alloc_page+0xeb/0x140
[  615.775201][T13265]  prepare_alloc_pages+0x1f0/0x5f0
[  615.775228][T13265]  __alloc_frozen_pages_noprof+0x193/0x2410
[  615.775250][T13265]  ? stack_trace_save+0x8e/0xc0
[  615.775266][T13265]  ? __pfx_stack_trace_save+0x10/0x10
[  615.775284][T13265]  ? stack_depot_save_flags+0x27/0x9c0
[  615.775310][T13265]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  615.775328][T13265]  ? __lock_acquire+0x4a5/0x2630
[  615.775348][T13265]  ? css_rstat_updated+0x1ce/0x5a0
[  615.775367][T13265]  ? __pfx_css_rstat_updated+0x10/0x10
[  615.775387][T13265]  ? __lock_acquire+0x4a5/0x2630
[  615.775408][T13265]  ? rcu_is_watching+0x12/0xc0
[  615.775422][T13265]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  615.775440][T13265]  ? policy_nodemask+0xed/0x4f0
[  615.775462][T13265]  alloc_pages_mpol+0x1fb/0x550
[  615.775484][T13265]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  615.775509][T13265]  alloc_pages_noprof+0x131/0x390
[  615.775531][T13265]  pgd_alloc+0x4d/0x640
[  615.775556][T13265]  ? mutex_init_lockep+0x110/0x150
[  615.775580][T13265]  mm_init+0x6da/0x10d0
[  615.775600][T13265]  mm_alloc+0x97/0xd0
[  615.775618][T13265]  alloc_bprm+0x2af/0x710
[  615.775636][T13265]  do_execveat_common.isra.0+0x1d0/0x5b0
[  615.775656][T13265]  __x64_sys_execve+0x8e/0xb0
[  615.775672][T13265]  do_syscall_64+0xc9/0xf80
[  615.775692][T13265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.775708][T13265] RIP: 0033:0x7f5832f9aeb9
[  615.775722][T13265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  615.775736][T13265] RSP: 002b:00007f58311f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  615.775751][T13265] RAX: ffffffffffffffda RBX: 00007f5833215fa0 RCX: 00007f5832f9aeb9
[  615.775762][T13265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  615.775771][T13265] RBP: 00007f5833008c1f R08: 0000000000000000 R09: 0000000000000000
[  615.775780][T13265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  615.775788][T13265] R13: 00007f5833216038 R14: 00007f5833215fa0 R15: 00007ffc68455358
[  615.775807][T13265]  </TASK>
[  615.903228][T13272] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  615.984504][T13273] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  616.019964][T13273] block nbd2: not configured, cannot reconfigure
[  616.123399][T11629] Bluetooth: hci11: command tx timeout
[  617.100326][T13287] caif:caif_disconnect_client(): nothing to disconnect
[  617.555419][T11629] Bluetooth: hci10: command tx timeout
[  617.825807][T13293] Invalid ELF header magic: != ELF
[  618.109345][T13297] caif:caif_disconnect_client(): nothing to disconnect
[  618.192470][T11629] Bluetooth: hci11: command tx timeout
[  619.268529][T13309] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1204'.
[  619.268557][T13309] : renamed from bridge_slave_1 (while UP)
[  619.273144][T13309] bridge0: port 2() entered disabled state
[  619.293145][T13309] ieee80211 phy64: Selected rate control algorithm 'minstrel_ht'
[  620.263990][T11629] Bluetooth: hci11: command tx timeout
[  621.717863][T13326] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  621.789418][T13327] block nbd2: not configured, cannot reconfigure
[  621.996564][T13331] caif:caif_disconnect_client(): nothing to disconnect
[  622.923798][T11822] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  622.926638][T11822] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  622.928693][T11822] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  622.929267][T11822] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  622.929734][T11822] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  623.237474][T13337] chnl_net:caif_netlink_parms(): no params data found
[  623.344162][T13337] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.345218][T13337] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.345503][T13337] bridge_slave_0: entered allmulticast mode
[  623.349179][T13337] bridge_slave_0: entered promiscuous mode
[  623.353668][T13337] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.357192][T13337] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.357572][T13337] bridge_slave_1: entered allmulticast mode
[  623.361618][T13337] bridge_slave_1: entered promiscuous mode
[  623.427676][T13337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  623.430389][T13337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  623.496896][T13337] team0: Port device team_slave_0 added
[  623.518040][T13337] team0: Port device team_slave_1 added
[  623.591619][T13337] batman_adv: batadv0: Adding interface: batadv_slave_0
[  623.591636][T13337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  623.591656][T13337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  623.598431][T13337] batman_adv: batadv0: Adding interface: batadv_slave_1
[  623.598446][T13337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  623.598466][T13337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  623.663906][T13337] hsr_slave_0: entered promiscuous mode
[  623.665084][T13337] hsr_slave_1: entered promiscuous mode
[  623.665807][T13337] debugfs: 'hsr0' already exists in 'hsr'
[  623.665824][T13337] Cannot create hsr debugfs directory
[  623.817197][T13337] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.880676][T13337] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.928631][T13337] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.980836][T13337] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.173643][T13337] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  624.189599][T13337] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  624.194016][T13337] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  624.196808][T13337] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  624.293146][T13337] 8021q: adding VLAN 0 to HW filter on device bond0
[  624.313304][T13337] 8021q: adding VLAN 0 to HW filter on device team0
[  624.341649][T11626] bridge0: port 1(bridge_slave_0) entered blocking state
[  624.341720][T11626] bridge0: port 1(bridge_slave_0) entered forwarding state
[  624.350277][T11626] bridge0: port 2(bridge_slave_1) entered blocking state
[  624.350345][T11626] bridge0: port 2(bridge_slave_1) entered forwarding state
[  624.362409][T13363] Invalid ELF header magic: != ELF
[  624.590591][T13337] 8021q: adding VLAN 0 to HW filter on device batadv0
[  624.639774][T13337] veth0_vlan: entered promiscuous mode
[  624.645455][T13337] veth1_vlan: entered promiscuous mode
[  624.671311][T13337] veth0_macvtap: entered promiscuous mode
[  624.674856][T13337] veth1_macvtap: entered promiscuous mode
[  624.691364][T13337] batman_adv: batadv0: Interface activated: batadv_slave_0
[  624.699167][T13337] batman_adv: batadv0: Interface activated: batadv_slave_1
[  624.707349][T11628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  624.707472][T11628] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  624.707499][T11628] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  624.708687][T11628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  624.769355][T13337] ieee80211 phy65: Selected rate control algorithm 'minstrel_ht'
[  624.799558][T11893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  624.799582][T11893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  624.805012][T13337] ieee80211 phy66: Selected rate control algorithm 'minstrel_ht'
[  624.842664][T11893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  624.842684][T11893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  624.958369][T11822] Bluetooth: hci12: command tx timeout
[  625.398449][T13380] caif:caif_disconnect_client(): nothing to disconnect
[  625.786319][T13382] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  625.841456][T13383] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  625.858227][T13383] FAULT_INJECTION: forcing a failure.
[  625.858227][T13383] name fail_futex, interval 1, probability 0, space 0, times 0
[  625.858257][T13383] CPU: 0 UID: 0 PID: 13383 Comm: syz.2.1218 Tainted: G          I  L      syzkaller #0 PREEMPT(full) 
[  625.858282][T13383] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  625.858288][T13383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  625.858298][T13383] Call Trace:
[  625.858303][T13383]  <TASK>
[  625.858309][T13383]  dump_stack_lvl+0x100/0x190
[  625.858334][T13383]  should_fail_ex.cold+0x5/0xa
[  625.858359][T13383]  get_futex_key+0x1d2/0x1620
[  625.858381][T13383]  ? __pfx_get_futex_key+0x10/0x10
[  625.858407][T13383]  futex_wake+0xea/0x530
[  625.858429][T13383]  ? trace_kmem_cache_alloc+0x80/0xb0
[  625.858452][T13383]  ? __pfx_futex_wake+0x10/0x10
[  625.858477][T13383]  ? errseq_sample+0x51/0x70
[  625.858499][T13383]  ? file_init_path+0x48e/0x670
[  625.858526][T13383]  do_futex+0x32b/0x350
[  625.858547][T13383]  ? __pfx_do_futex+0x10/0x10
[  625.858567][T13383]  ? fd_install+0x223/0x580
[  625.858589][T13383]  __x64_sys_futex+0x34f/0x4d0
[  625.858611][T13383]  ? __sys_socket+0xac/0x260
[  625.858627][T13383]  ? __fget_files+0x21f/0x3d0
[  625.858643][T13383]  ? __pfx___x64_sys_futex+0x10/0x10
[  625.858662][T13383]  ? xfd_validate_state+0x129/0x190
[  625.858691][T13383]  do_syscall_64+0xc9/0xf80
[  625.858711][T13383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.858726][T13383] RIP: 0033:0x7f2b5239aeb9
[  625.858739][T13383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  625.858755][T13383] RSP: 002b:00007f2b531930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  625.858770][T13383] RAX: ffffffffffffffda RBX: 00007f2b52616098 RCX: 00007f2b5239aeb9
[  625.858780][T13383] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2b5261609c
[  625.858789][T13383] RBP: 00007f2b52616090 R08: 0000000000000000 R09: 0000000000000000
[  625.858798][T13383] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  625.858806][T13383] R13: 00007f2b52616128 R14: 00007ffe9b3b3120 R15: 00007ffe9b3b3208
[  625.858825][T13383]  </TASK>
[  627.025661][T11822] Bluetooth: hci12: command tx timeout
[  627.619563][T13411] : left promiscuous mode
[  627.619720][T13411] bridge0: port 2() entered disabled state
[  628.947899][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  628.947962][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  629.095352][T11822] Bluetooth: hci12: command tx timeout
[  629.283532][T11629] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  629.286040][T11629] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  629.286676][T11629] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  629.287223][T11629] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  629.287575][T11629] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  629.434114][T13429] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  629.496666][T13431] block nbd2: not configured, cannot reconfigure
[  629.651565][T13426] chnl_net:caif_netlink_parms(): no params data found
[  629.733643][T13436] __vm_enough_memory: pid: 13436, comm: syz.7.1229, bytes: 4398046511104 not enough memory for the allocation
[  629.786139][T13426] bridge0: port 1(bridge_slave_0) entered blocking state
[  629.786250][T13426] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.786425][T13426] bridge_slave_0: entered allmulticast mode
[  629.787741][T13426] bridge_slave_0: entered promiscuous mode
[  629.789958][T13426] bridge0: port 2(bridge_slave_1) entered blocking state
[  629.790091][T13426] bridge0: port 2(bridge_slave_1) entered disabled state
[  629.790386][T13426] bridge_slave_1: entered allmulticast mode
[  629.792553][T13426] bridge_slave_1: entered promiscuous mode
[  629.831213][T13426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  629.834590][T13426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  629.860187][T13426] team0: Port device team_slave_0 added
[  629.863611][T13426] team0: Port device team_slave_1 added
[  629.889879][T13426] batman_adv: batadv0: Adding interface: batadv_slave_0
[  629.889895][T13426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  629.889914][T13426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  629.894027][T13426] batman_adv: batadv0: Adding interface: batadv_slave_1
[  629.894043][T13426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  629.894063][T13426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  629.937284][T13426] hsr_slave_0: entered promiscuous mode
[  629.938290][T13426] hsr_slave_1: entered promiscuous mode
[  629.938960][T13426] debugfs: 'hsr0' already exists in 'hsr'
[  629.939021][T13426] Cannot create hsr debugfs directory
[  630.110508][T13426] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.157930][T13426] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.208172][T13426] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.244415][T13426] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.375235][T13426] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  630.379444][T13426] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  630.383530][T13426] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  630.387232][T13426] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  630.420294][T13426] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.420481][T13426] bridge0: port 2(bridge_slave_1) entered forwarding state
[  630.420673][T13426] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.420740][T13426] bridge0: port 1(bridge_slave_0) entered forwarding state
[  630.484743][T13426] 8021q: adding VLAN 0 to HW filter on device bond0
[  630.499310][T11630] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.500216][T11630] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.512774][T13426] 8021q: adding VLAN 0 to HW filter on device team0
[  630.519517][T11630] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.519585][T11630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  630.524531][T11630] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.524605][T11630] bridge0: port 2(bridge_slave_1) entered forwarding state
[  630.885926][T13426] 8021q: adding VLAN 0 to HW filter on device batadv0
[  631.164646][T11629] Bluetooth: hci12: command tx timeout
[  631.324823][T11629] Bluetooth: hci13: command tx timeout
[  631.444998][T13426] veth0_vlan: entered promiscuous mode
[  631.466510][T13426] veth1_vlan: entered promiscuous mode
[  631.575100][T13426] veth0_macvtap: entered promiscuous mode
[  631.590925][T13426] veth1_macvtap: entered promiscuous mode
[  631.646812][T11822] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  631.648964][T13426] batman_adv: batadv0: Interface activated: batadv_slave_0
[  631.658158][T11822] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  631.660422][T11822] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  631.663080][T11822] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  631.672857][T11822] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  631.702817][T13426] batman_adv: batadv0: Interface activated: batadv_slave_1
[  631.721006][T11626] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  631.721235][T11626] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  631.721500][T11626] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  631.721957][T11626] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  631.875816][T13426] ieee80211 phy67: Selected rate control algorithm 'minstrel_ht'
[  631.984163][T11788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.984182][T11788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.010861][T13426] ieee80211 phy68: Selected rate control algorithm 'minstrel_ht'
[  632.140815][T11628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  632.140835][T11628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.415166][T13468] chnl_net:caif_netlink_parms(): no params data found
[  632.472908][T13464] kexec: Could not allocate control_code_buffer
[  632.615607][   T30] audit: type=1326 audit(4294967333.036:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13481 comm="syz.7.1233" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3768f9aeb9 code=0x0
[  632.783272][T13468] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.783379][T13468] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.783658][T13468] bridge_slave_0: entered allmulticast mode
[  632.792114][T13468] bridge_slave_0: entered promiscuous mode
[  632.798114][T13468] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.799308][T13468] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.801947][T13468] bridge_slave_1: entered allmulticast mode
[  632.804373][T13468] bridge_slave_1: entered promiscuous mode
[  632.952285][T13468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  632.963649][T13468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  633.020041][T13468] team0: Port device team_slave_0 added
[  633.029969][T13468] team0: Port device team_slave_1 added
[  633.100768][T13468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  633.100786][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  633.100805][T13468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  633.104981][T13468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  633.104995][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  633.105015][T13468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  633.262566][T13468] hsr_slave_0: entered promiscuous mode
[  633.268643][T13468] hsr_slave_1: entered promiscuous mode
[  633.270695][T13468] debugfs: 'hsr0' already exists in 'hsr'
[  633.270714][T13468] Cannot create hsr debugfs directory
[  633.329162][T13491] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  633.392964][T11629] Bluetooth: hci13: command tx timeout
[  633.711396][T11629] Bluetooth: hci14: command tx timeout
[  633.841130][T13468] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.048743][T13494] caif:caif_disconnect_client(): nothing to disconnect
[  634.078698][T13468] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.312186][T13468] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.400011][T13468] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.822863][T13468] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  634.827775][T13468] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  634.856243][T13468] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  634.895370][T13468] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  635.211064][T13468] 8021q: adding VLAN 0 to HW filter on device bond0
[  635.280383][T13468] 8021q: adding VLAN 0 to HW filter on device team0
[  635.298088][T11626] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.298165][T11626] bridge0: port 1(bridge_slave_0) entered forwarding state
[  635.307938][T11630] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.308005][T11630] bridge0: port 2(bridge_slave_1) entered forwarding state
[  635.463232][T11629] Bluetooth: hci13: command tx timeout
[  635.782916][T11629] Bluetooth: hci14: command tx timeout
[  635.896633][T13468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  636.582554][T13468] veth0_vlan: entered promiscuous mode
[  636.601473][T13468] veth1_vlan: entered promiscuous mode
[  636.667828][T13468] veth0_macvtap: entered promiscuous mode
[  636.739664][T13468] veth1_macvtap: entered promiscuous mode
[  636.820492][T13468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  636.838904][T13468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  636.910018][T11628] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  636.910065][T11628] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  636.910092][T11628] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  636.910118][T11628] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  637.073888][T13468] ieee80211 phy69: Selected rate control algorithm 'minstrel_ht'
[  637.150289][T11626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  637.150309][T11626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.165923][T13468] ieee80211 phy70: Selected rate control algorithm 'minstrel_ht'
[  637.247492][T11626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  637.247510][T11626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.530993][T11629] Bluetooth: hci13: command tx timeout
[  637.641424][T13543] FAULT_INJECTION: forcing a failure.
[  637.641424][T13543] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  637.641455][T13543] CPU: 0 UID: 0 PID: 13543 Comm: syz.8.1231 Tainted: G          I  L      syzkaller #0 PREEMPT(full) 
[  637.641482][T13543] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  637.641488][T13543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  637.641499][T13543] Call Trace:
[  637.641504][T13543]  <TASK>
[  637.641511][T13543]  dump_stack_lvl+0x100/0x190
[  637.641534][T13543]  should_fail_ex.cold+0x5/0xa
[  637.641560][T13543]  _copy_to_user+0x32/0xd0
[  637.641584][T13543]  cpuid_read+0x1d9/0x360
[  637.641611][T13543]  ? __pfx_cpuid_read+0x10/0x10
[  637.641631][T13543]  ? __pfx_cpuid_smp_cpuid+0x10/0x10
[  637.641652][T13543]  ? iovec_from_user+0xbb/0x140
[  637.641681][T13543]  ? bpf_lsm_file_permission+0x9/0x10
[  637.641702][T13543]  ? security_file_permission+0x76/0x210
[  637.641727][T13543]  ? __pfx_cpuid_read+0x10/0x10
[  637.641746][T13543]  vfs_readv+0x5d8/0x8d0
[  637.641767][T13543]  ? __pfx_vfs_readv+0x10/0x10
[  637.641783][T13543]  ? fd_install+0x223/0x580
[  637.641809][T13543]  ? __fget_files+0x21f/0x3d0
[  637.641830][T13543]  ? do_readv+0x13e/0x340
[  637.641843][T13543]  do_readv+0x13e/0x340
[  637.641858][T13543]  ? __pfx_do_readv+0x10/0x10
[  637.641878][T13543]  do_syscall_64+0xc9/0xf80
[  637.641898][T13543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.641913][T13543] RIP: 0033:0x7fdfe639aeb9
[  637.641926][T13543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  637.641941][T13543] RSP: 002b:00007fdfe72ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  637.641956][T13543] RAX: ffffffffffffffda RBX: 00007fdfe6616180 RCX: 00007fdfe639aeb9
[  637.641966][T13543] RDX: 0000000000000003 RSI: 0000200000000680 RDI: 0000000000000004
[  637.641975][T13543] RBP: 00007fdfe6408c1f R08: 0000000000000000 R09: 0000000000000000
[  637.641985][T13543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  637.641994][T13543] R13: 00007fdfe6616218 R14: 00007fdfe6616180 R15: 00007ffd78e393d8
[  637.642014][T13543]  </TASK>
[  637.848690][T13543] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1231'.
[  637.849815][T11629] Bluetooth: hci14: command tx timeout
[  638.697755][T13554] nfs: Unknown parameter 'B�ålY¶	7³w±·E»É®H¶âs[åØ�u` ]‹§e©©6z¦c§ÚÞ•â[$(‡uÊ×ÃÒÃÒž€ô%ÏE¹ƒtO–÷2*è‚pãè[ˆÄÁOugÇãɧr©�ts÷þ¤QZ×€z'
[  638.760843][T13555] block nbd2: not configured, cannot reconfigure
[  639.026133][T13563] caif:caif_disconnect_client(): nothing to disconnect
[  639.798096][T13578] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  639.924417][T11629] Bluetooth: hci14: command tx timeout
[  641.524356][T11822] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  641.525847][T11822] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  641.526556][T11822] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  641.528225][T11822] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  641.528649][T11822] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  641.762106][T13603] chnl_net:caif_netlink_parms(): no params data found
[  641.864184][T13603] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.864368][T13603] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.864565][T13603] bridge_slave_0: entered allmulticast mode
[  641.865921][T13603] bridge_slave_0: entered promiscuous mode
[  641.867886][T13603] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.867981][T13603] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.868273][T13603] bridge_slave_1: entered allmulticast mode
[  641.872339][T13603] bridge_slave_1: entered promiscuous mode
[  641.897646][T13603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  641.900889][T13603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  641.936359][T13603] team0: Port device team_slave_0 added
[  641.948597][T13603] team0: Port device team_slave_1 added
[  641.998509][T13603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  641.998526][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  641.998546][T13603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  642.003687][T13603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  642.003704][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  642.003723][T13603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  642.088775][T13603] hsr_slave_0: entered promiscuous mode
[  642.092043][T13603] hsr_slave_1: entered promiscuous mode
[  642.092667][T13603] debugfs: 'hsr0' already exists in 'hsr'
[  642.092683][T13603] Cannot create hsr debugfs directory
[  642.225832][T13616] caif:caif_disconnect_client(): nothing to disconnect
[  642.398549][T13603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.484424][T13603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.544656][T13603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.592911][T13603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.750146][T13603] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  642.759956][T13603] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  642.765307][T13603] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  642.768742][T13603] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  642.861396][T13603] 8021q: adding VLAN 0 to HW filter on device bond0
[  642.876999][T13603] 8021q: adding VLAN 0 to HW filter on device team0
[  642.881788][T11630] bridge0: port 1(bridge_slave_0) entered blocking state
[  642.881855][T11630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  642.888178][T11630] bridge0: port 2(bridge_slave_1) entered blocking state
[  642.888245][T11630] bridge0: port 2(bridge_slave_1) entered forwarding state
[  643.079148][T13603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  643.117513][T13603] veth0_vlan: entered promiscuous mode
[  643.124323][T13603] veth1_vlan: entered promiscuous mode
[  643.153509][T13603] veth0_macvtap: entered promiscuous mode
[  643.157139][T13603] veth1_macvtap: entered promiscuous mode
[  643.176619][T13603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  643.186518][T13603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  643.193888][T11628] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  643.193930][T11628] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  643.193956][T11628] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  643.193981][T11628] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  643.250264][T13603] ieee80211 phy71: Selected rate control algorithm 'minstrel_ht'
[  643.287157][T11628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.287176][T11628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.295701][T13603] ieee80211 phy72: Selected rate control algorithm 'minstrel_ht'
[  643.326727][T11628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.326745][T11628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.579672][T11822] Bluetooth: hci15: command tx timeout
[  644.497540][T13644] FAULT_INJECTION: forcing a failure.
[  644.497540][T13644] name failslab, interval 1, probability 0, space 0, times 0
[  644.497597][T13644] CPU: 0 UID: 0 PID: 13644 Comm: syz.1.1260 Tainted: G          I  L      syzkaller #0 PREEMPT(full) 
[  644.497622][T13644] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  644.497629][T13644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  644.497638][T13644] Call Trace:
[  644.497644][T13644]  <TASK>
[  644.497651][T13644]  dump_stack_lvl+0x100/0x190
[  644.497674][T13644]  should_fail_ex.cold+0x5/0xa
[  644.497699][T13644]  should_failslab+0xc2/0x120
[  644.497720][T13644]  ? __register_sysctl_table+0xbe4/0x1650
[  644.497744][T13644]  __kmalloc_noprof+0xf6/0x9c0
[  644.497758][T13644]  ? find_held_lock+0x2b/0x80
[  644.497774][T13644]  ? __register_sysctl_table+0xbc8/0x1650
[  644.497797][T13644]  ? __register_sysctl_table+0xbc8/0x1650
[  644.497824][T13644]  ? __register_sysctl_table+0xbe4/0x1650
[  644.497846][T13644]  __register_sysctl_table+0xbe4/0x1650
[  644.497873][T13644]  ? __pfx___register_sysctl_table+0x10/0x10
[  644.497895][T13644]  ? is_module_address+0x69/0xf0
[  644.497915][T13644]  ? register_net_sysctl_sz+0x222/0x430
[  644.497938][T13644]  ? __asan_memcpy+0x3c/0x60
[  644.497956][T13644]  nf_log_net_init+0x109/0x450
[  644.497980][T13644]  ? __pfx_nf_log_net_init+0x10/0x10
[  644.498003][T13644]  ops_init+0x1e2/0x5f0
[  644.498027][T13644]  setup_net+0x118/0x3a0
[  644.498041][T13644]  ? __pfx_setup_net+0x10/0x10
[  644.498062][T13644]  ? lockdep_init_map_type+0x5c/0x250
[  644.498083][T13644]  ? mutex_init_lockep+0x110/0x150
[  644.498106][T13644]  copy_net_ns+0x46f/0x7c0
[  644.498123][T13644]  create_new_namespaces+0x3ea/0xab0
[  644.498145][T13644]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  644.498164][T13644]  ksys_unshare+0x455/0xab0
[  644.498186][T13644]  ? __pfx_ksys_unshare+0x10/0x10
[  644.498215][T13644]  ? xfd_validate_state+0x129/0x190
[  644.498246][T13644]  __x64_sys_unshare+0x31/0x40
[  644.498269][T13644]  do_syscall_64+0xc9/0xf80
[  644.498289][T13644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.498305][T13644] RIP: 0033:0x7fe66ab9aeb9
[  644.498318][T13644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.498333][T13644] RSP: 002b:00007fe66b9e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  644.498348][T13644] RAX: ffffffffffffffda RBX: 00007fe66ae16090 RCX: 00007fe66ab9aeb9
[  644.498359][T13644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  644.498369][T13644] RBP: 00007fe66ac08c1f R08: 0000000000000000 R09: 0000000000000000
[  644.498379][T13644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  644.498388][T13644] R13: 00007fe66ae16128 R14: 00007fe66ae16090 R15: 00007ffd99745a88
[  644.498408][T13644]  </TASK>
[  644.498415][T13644] sysctl could not get directory: /net/netfilter/nf_log -12
[  645.648936][T11822] Bluetooth: hci15: command tx timeout
[  647.718462][T11822] Bluetooth: hci15: command tx timeout
[  649.789187][T11822] Bluetooth: hci15: command tx timeout
[  651.804914][T11629] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  651.811124][T11629] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  651.812237][T11629] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  651.812827][T11629] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  651.813186][T11629] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  651.993430][T13646] chnl_net:caif_netlink_parms(): no params data found
[  652.066806][T13646] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.066914][T13646] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.067219][T13646] bridge_slave_0: entered allmulticast mode
[  652.068433][T13646] bridge_slave_0: entered promiscuous mode
[  652.070544][T13646] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.070643][T13646] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.070812][T13646] bridge_slave_1: entered allmulticast mode
[  652.072012][T13646] bridge_slave_1: entered promiscuous mode
[  652.102579][T13646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  652.106145][T13646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  652.132538][T13646] team0: Port device team_slave_0 added
[  652.137362][T13646] team0: Port device team_slave_1 added
[  652.156913][T13646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  652.156929][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  652.156948][T13646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  652.159114][T13646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  652.159126][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  652.159145][T13646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  652.197901][T13646] hsr_slave_0: entered promiscuous mode
[  652.198955][T13646] hsr_slave_1: entered promiscuous mode
[  652.199593][T13646] debugfs: 'hsr0' already exists in 'hsr'
[  652.199610][T13646] Cannot create hsr debugfs directory
[  652.346857][T13646] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.399756][T13646] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.444950][T13646] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.490607][T13646] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.626216][T13646] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  652.631638][T13646] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  652.641919][T13646] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  652.645528][T13646] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  652.665938][T13646] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.666008][T13646] bridge0: port 2(bridge_slave_1) entered forwarding state
[  652.666162][T13646] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.666227][T13646] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.720623][T13646] 8021q: adding VLAN 0 to HW filter on device bond0
[  652.730420][T11630] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.731652][T11630] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.750038][T13646] 8021q: adding VLAN 0 to HW filter on device team0
[  652.756417][T11788] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.756501][T11788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.761505][T11630] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.761650][T11630] bridge0: port 2(bridge_slave_1) entered forwarding state
[  652.975453][T13646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  653.188925][T13646] veth0_vlan: entered promiscuous mode
[  653.196663][T13646] veth1_vlan: entered promiscuous mode
[  653.226260][T13646] veth0_macvtap: entered promiscuous mode
[  653.231442][T13646] veth1_macvtap: entered promiscuous mode
[  653.244102][T13646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  653.258659][T13646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  653.267643][T11788] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  653.267679][T11788] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  653.267704][T11788] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  653.267728][T11788] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  653.322513][T13646] ieee80211 phy73: Selected rate control algorithm 'minstrel_ht'
[  653.347737][T11630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.347756][T11630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.365180][T13646] ieee80211 phy74: Selected rate control algorithm 'minstrel_ht'
[  653.423702][T11788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.423721][T11788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.847200][T11822] Bluetooth: hci16: command tx timeout
[  655.305073][T13679] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  655.306554][T11625] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  655.307722][T11625] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  655.309062][T11625] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  655.309452][T11625] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  655.486924][T13678] chnl_net:caif_netlink_parms(): no params data found
[  655.564462][T13678] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.564571][T13678] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.564751][T13678] bridge_slave_0: entered allmulticast mode
[  655.565936][T13678] bridge_slave_0: entered promiscuous mode
[  655.572998][T13678] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.573104][T13678] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.573287][T13678] bridge_slave_1: entered allmulticast mode
[  655.574480][T13678] bridge_slave_1: entered promiscuous mode
[  655.604732][T13678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  655.608056][T13678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  655.629248][T13678] team0: Port device team_slave_0 added
[  655.631776][T13678] team0: Port device team_slave_1 added
[  655.650329][T13678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  655.650345][T13678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.650364][T13678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  655.651814][T13678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  655.651827][T13678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.651846][T13678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  655.699886][T13678] hsr_slave_0: entered promiscuous mode
[  655.700886][T13678] hsr_slave_1: entered promiscuous mode
[  655.701542][T13678] debugfs: 'hsr0' already exists in 'hsr'
[  655.701559][T13678] Cannot create hsr debugfs directory
[  655.843160][T13678] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.907819][T13678] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.919950][T11625] Bluetooth: hci16: command tx timeout
[  655.952336][T13678] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.010369][T13678] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.126585][T13678] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  656.130141][T13678] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  656.133677][T13678] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  656.137560][T13678] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  656.161067][T13678] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.161136][T13678] bridge0: port 2(bridge_slave_1) entered forwarding state
[  656.161330][T13678] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.161395][T13678] bridge0: port 1(bridge_slave_0) entered forwarding state
[  656.230961][T13678] 8021q: adding VLAN 0 to HW filter on device bond0
[  656.243953][T11630] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.244817][T11630] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.253245][T13678] 8021q: adding VLAN 0 to HW filter on device team0
[  656.260978][T11630] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.261046][T11630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  656.266230][T11788] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.266295][T11788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  656.316279][T11625] Bluetooth: hci2: command 0x0406 tx timeout
[  656.467868][T13678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  656.688477][T13678] veth0_vlan: entered promiscuous mode
[  656.696276][T13678] veth1_vlan: entered promiscuous mode
[  656.726412][T13678] veth0_macvtap: entered promiscuous mode
[  656.729808][T13678] veth1_macvtap: entered promiscuous mode
[  656.741492][T13678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  656.747735][T13678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  656.757160][T11893] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  656.757203][T11893] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  656.757229][T11893] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  656.757254][T11893] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  656.828059][T13678] ieee80211 phy75: Selected rate control algorithm 'minstrel_ht'
[  656.855392][T11628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  656.855410][T11628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  656.865761][T13678] ieee80211 phy76: Selected rate control algorithm 'minstrel_ht'
[  656.902358][T11628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  656.902376][T11628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  656.988008][T13704] random: crng reseeded on system resumption
[  656.995811][T13704] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff]
[  656.995833][T13704] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[  656.995853][T13704] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[  656.995867][T13704] PM: hibernation: Basic memory bitmaps created
[  657.212507][T13708] PM: hibernation: Basic memory bitmaps freed
[  657.212596][T13708] caif:caif_disconnect_client(): nothing to disconnect
[  657.348313][T11629] Bluetooth: hci17: command tx timeout
[  657.859605][T11625] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  657.861399][T11625] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  657.862023][T11625] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  657.862582][T11625] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  657.862944][T11625] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  657.990700][T11625] Bluetooth: hci16: command tx timeout
[  658.496917][T13713] chnl_net:caif_netlink_parms(): no params data found
[  658.688611][T13713] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.691586][T13713] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.691837][T13713] bridge_slave_0: entered allmulticast mode
[  658.695054][T13713] bridge_slave_0: entered promiscuous mode
[  658.699822][T13713] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.699942][T13713] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.700125][T13713] bridge_slave_1: entered allmulticast mode
[  658.717035][T13713] bridge_slave_1: entered promiscuous mode
[  658.790595][T13713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  658.806079][T13713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.872532][T13713] team0: Port device team_slave_0 added
[  658.877088][T11625] Bluetooth: hci17: unexpected subevent 0x01 length: 123 > 18
[  658.884469][T13713] team0: Port device team_slave_1 added
[  658.925677][T13713] batman_adv: batadv0: Adding interface: batadv_slave_0
[  658.925701][T13713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  658.925721][T13713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  658.927152][T13713] batman_adv: batadv0: Adding interface: batadv_slave_1
[  658.927164][T13713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  658.927183][T13713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  659.010478][T13713] hsr_slave_0: entered promiscuous mode
[  659.015316][T13713] hsr_slave_1: entered promiscuous mode
[  659.015965][T13713] debugfs: 'hsr0' already exists in 'hsr'
[  659.015982][T13713] Cannot create hsr debugfs directory
[  659.303498][T13713] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.417816][T11822] Bluetooth: hci17: command tx timeout
[  659.510625][T13713] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.613716][T13713] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.690326][T13713] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.818396][T13733] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  659.819888][T13733] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  659.820552][T13733] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  659.821120][T13733] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  659.821515][T13733] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  659.896118][T11822] Bluetooth: hci18: command tx timeout
[  660.046398][T13713] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  660.059948][T11822] Bluetooth: hci16: command tx timeout
[  660.081849][T13713] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  660.088318][T13713] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  660.103712][T13713] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  660.436901][T13732] chnl_net:caif_netlink_parms(): no params data found
[  660.652967][T13713] 8021q: adding VLAN 0 to HW filter on device bond0
[  660.691457][T13732] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.691587][T13732] bridge0: port 1(bridge_slave_0) entered disabled state
[  660.691973][T13732] bridge_slave_0: entered allmulticast mode
[  660.693610][T13732] bridge_slave_0: entered promiscuous mode
[  660.709265][T13732] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.709328][T13732] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.709529][T13732] bridge_slave_1: entered allmulticast mode
[  660.711720][T13732] bridge_slave_1: entered promiscuous mode
[  660.736735][T13713] 8021q: adding VLAN 0 to HW filter on device team0
[  660.757976][T11626] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.758045][T11626] bridge0: port 1(bridge_slave_0) entered forwarding state
[  660.763028][T13732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  660.765947][T13732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  660.813427][T11893] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.813547][T11893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  660.861907][T13732] team0: Port device team_slave_0 added
[  660.912258][T13732] team0: Port device team_slave_1 added
[  660.997724][T13732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  660.997740][T13732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  660.997760][T13732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  660.999496][T13732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  660.999509][T13732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  660.999528][T13732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  661.129651][T13732] hsr_slave_0: entered promiscuous mode
[  661.140396][T13732] hsr_slave_1: entered promiscuous mode
[  661.141050][T13732] debugfs: 'hsr0' already exists in 'hsr'
[  661.141066][T13732] Cannot create hsr debugfs directory
[  661.393983][T13713] 8021q: adding VLAN 0 to HW filter on device batadv0
[  661.409674][T11822] Bluetooth: hci4: command 0x0406 tx timeout
[  661.487543][T11629] Bluetooth: hci17: command 0x040f tx timeout
[  661.641956][T13713] veth0_vlan: entered promiscuous mode
[  661.737908][T13732] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.760576][T13713] veth1_vlan: entered promiscuous mode
[  661.827474][T13732] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.880585][T13713] veth0_macvtap: entered promiscuous mode
[  661.888755][T11625] Bluetooth: hci5: command tx timeout
[  661.939473][T13732] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.957136][T13713] veth1_macvtap: entered promiscuous mode
[  661.966480][T11625] Bluetooth: hci18: command tx timeout
[  662.003380][T13732] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.038618][T13713] batman_adv: batadv0: Interface activated: batadv_slave_0
[  662.066895][T13713] batman_adv: batadv0: Interface activated: batadv_slave_1
[  662.126246][T11893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  662.126291][T11893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  662.126318][T11893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  662.126353][T11893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  662.265096][T13713] ieee80211 phy77: Selected rate control algorithm 'minstrel_ht'
[  662.427373][T11630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.427392][T11630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.434912][T13732] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  662.453727][T13732] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  662.462598][T13713] ieee80211 phy78: Selected rate control algorithm 'minstrel_ht'
[  662.488693][T13732] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  662.505736][T13732] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  662.547977][T11788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.547996][T11788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.784223][T13775] vivid-007: =================  START STATUS  =================
[  662.784260][T13775] vivid-007: Generate PTS: true
[  662.784332][T13775] vivid-007: Generate SCR: true
[  662.784357][T13775] tpg source WxH: 320x240 (Y'CbCr)
[  662.784367][T13775] tpg field: 1
[  662.784373][T13775] tpg crop: (0,0)/320x240
[  662.784383][T13775] tpg compose: (0,0)/320x240
[  662.784394][T13775] tpg colorspace: 8
[  662.784400][T13775] tpg transfer function: 0/0
[  662.784408][T13775] tpg Y'CbCr encoding: 0/0
[  662.784415][T13775] tpg quantization: 0/0
[  662.784423][T13775] tpg RGB range: 0/2
[  662.784431][T13775] vivid-007: ==================  END STATUS  ==================
[  662.795171][T13732] 8021q: adding VLAN 0 to HW filter on device bond0
[  662.847174][T13732] 8021q: adding VLAN 0 to HW filter on device team0
[  662.860285][T11788] bridge0: port 1(bridge_slave_0) entered blocking state
[  662.860362][T11788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  662.874405][T11788] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.874473][T11788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  663.556615][T11625] Bluetooth: hci17: command 0x040f tx timeout
[  663.692406][T13732] 8021q: adding VLAN 0 to HW filter on device batadv0
[  663.822537][T13789] : Can't lookup blockdev
[  663.953616][T11625] Bluetooth: hci5: command tx timeout
[  664.035030][T11625] Bluetooth: hci18: command tx timeout
[  664.098779][T13732] veth0_vlan: entered promiscuous mode
[  664.117902][T13732] veth1_vlan: entered promiscuous mode
[  664.211689][T13732] veth0_macvtap: entered promiscuous mode
[  664.224994][T13732] veth1_macvtap: entered promiscuous mode
[  664.281460][T13732] batman_adv: batadv0: Interface activated: batadv_slave_0
[  664.290971][T13732] batman_adv: batadv0: Interface activated: batadv_slave_1
[  664.333817][T11626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  664.334559][T11626] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  664.334588][T11626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  664.334614][T11626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  664.458782][T13732] ieee80211 phy79: Selected rate control algorithm 'minstrel_ht'
[  664.566978][T11628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  664.566998][T11628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  664.575675][T13732] ieee80211 phy80: Selected rate control algorithm 'minstrel_ht'
[  664.654201][T11628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  664.654221][T11628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  665.625100][T11625] Bluetooth: hci17: command 0x040f tx timeout
[  666.023694][T11625] Bluetooth: hci5: command tx timeout
[  666.103217][T11625] Bluetooth: hci18: command tx timeout
[  667.696458][T11625] Bluetooth: hci17: command 0x040f tx timeout
[  668.092920][T11625] Bluetooth: hci5: command tx timeout
[  669.601000][T11629] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  669.602482][T11629] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  669.603137][T11629] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  669.604608][T11629] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  669.605051][T11629] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  669.821616][T13804] chnl_net:caif_netlink_parms(): no params data found
[  669.894378][T13804] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.894490][T13804] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.894676][T13804] bridge_slave_0: entered allmulticast mode
[  669.895999][T13804] bridge_slave_0: entered promiscuous mode
[  669.898129][T13804] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.898234][T13804] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.898406][T13804] bridge_slave_1: entered allmulticast mode
[  669.899603][T13804] bridge_slave_1: entered promiscuous mode
[  669.931571][T13804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  669.938512][T13804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  669.965614][T13804] team0: Port device team_slave_0 added
[  669.968126][T13804] team0: Port device team_slave_1 added
[  669.989809][T13804] batman_adv: batadv0: Adding interface: batadv_slave_0
[  669.989826][T13804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.989846][T13804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  669.991391][T13804] batman_adv: batadv0: Adding interface: batadv_slave_1
[  669.991403][T13804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.991422][T13804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  670.030985][T13804] hsr_slave_0: entered promiscuous mode
[  670.033172][T13804] hsr_slave_1: entered promiscuous mode
[  670.033892][T13804] debugfs: 'hsr0' already exists in 'hsr'
[  670.033909][T13804] Cannot create hsr debugfs directory
[  670.192944][T13804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.252448][T13804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.296773][T13804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.351912][T13804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.486748][T13804] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  670.490884][T13804] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  670.493791][T13804] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  670.497136][T13804] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  670.527276][T13804] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.527365][T13804] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.527527][T13804] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.527592][T13804] bridge0: port 1(bridge_slave_0) entered forwarding state
[  670.605045][T13804] 8021q: adding VLAN 0 to HW filter on device bond0
[  670.615840][T11626] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.616746][T11626] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.626716][T13804] 8021q: adding VLAN 0 to HW filter on device team0
[  670.638327][T11626] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.638395][T11626] bridge0: port 1(bridge_slave_0) entered forwarding state
[  670.653727][T11626] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.653815][T11626] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.855720][T13804] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.898965][T13804] veth0_vlan: entered promiscuous mode
[  670.904564][T13804] veth1_vlan: entered promiscuous mode
[  670.929567][T13804] veth0_macvtap: entered promiscuous mode
[  670.932967][T13804] veth1_macvtap: entered promiscuous mode
[  670.952158][T13804] batman_adv: batadv0: Interface activated: batadv_slave_0
[  670.964066][T13804] batman_adv: batadv0: Interface activated: batadv_slave_1
[  670.971414][T11630] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.977176][T11628] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.978242][T11628] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.978270][T11628] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  671.033348][T13804] ieee80211 phy81: Selected rate control algorithm 'minstrel_ht'
[  671.079719][T11628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.079738][T11628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.085665][T13804] ieee80211 phy82: Selected rate control algorithm 'minstrel_ht'
[  671.119125][T11624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.119144][T11624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.270896][T13826] bridge0: port 3(netdevsim0) entered blocking state
[  671.271002][T13826] bridge0: port 3(netdevsim0) entered disabled state
[  671.271418][T13826] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  671.273120][T13826] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  671.273237][T13826] FAULT_INJECTION: forcing a failure.
[  671.273237][T13826] name failslab, interval 1, probability 0, space 0, times 0
[  671.273307][T13826] CPU: 0 UID: 0 PID: 13826 Comm: syz.3.1273 Tainted: G          I  L      syzkaller #0 PREEMPT(full) 
[  671.273331][T13826] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  671.273338][T13826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  671.273392][T13826] Call Trace:
[  671.273399][T13826]  <TASK>
[  671.273413][T13826]  dump_stack_lvl+0x100/0x190
[  671.273438][T13826]  should_fail_ex.cold+0x5/0xa
[  671.273463][T13826]  should_failslab+0xc2/0x120
[  671.273486][T13826]  kmem_cache_alloc_node_noprof+0x8c/0x880
[  671.273507][T13826]  ? __alloc_skb+0x156/0x410
[  671.273534][T13826]  ? __alloc_skb+0x156/0x410
[  671.273553][T13826]  __alloc_skb+0x156/0x410
[  671.273572][T13826]  ? __alloc_skb+0x35d/0x410
[  671.273592][T13826]  ? __pfx___alloc_skb+0x10/0x10
[  671.273616][T13826]  ? __pfx_fdb_create+0x10/0x10
[  671.273634][T13826]  fdb_notify+0xa2/0x190
[  671.273651][T13826]  fdb_add_local+0x184/0x1c0
[  671.273668][T13826]  br_fdb_add_local+0x39/0x60
[  671.273686][T13826]  br_add_if+0xe89/0x1b40
[  671.273711][T13826]  add_del_if+0x114/0x160
[  671.273731][T13826]  br_dev_siocdevprivate+0x8ac/0x1650
[  671.273755][T13826]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  671.273783][T13826]  ? lock_acquire+0x17c/0x330
[  671.273805][T13826]  ? __pfx___might_resched+0x10/0x10
[  671.273831][T13826]  ? netdev_name_node_lookup+0x107/0x150
[  671.273850][T13826]  ? __mutex_lock+0x26a/0x1b90
[  671.273871][T13826]  dev_ifsioc+0xc15/0x1eb0
[  671.273893][T13826]  ? __pfx_dev_ifsioc+0x10/0x10
[  671.273912][T13826]  ? __pfx___mutex_lock+0x10/0x10
[  671.273937][T13826]  ? dev_load+0x8e/0x240
[  671.273955][T13826]  ? dev_load+0x8e/0x240
[  671.273978][T13826]  dev_ioctl+0x70e/0x1070
[  671.273999][T13826]  sock_ioctl+0x494/0x6b0
[  671.274017][T13826]  ? __pfx_sock_ioctl+0x10/0x10
[  671.274042][T13826]  ? __pfx_sock_ioctl+0x10/0x10
[  671.274060][T13826]  __x64_sys_ioctl+0x18e/0x210
[  671.274085][T13826]  do_syscall_64+0xc9/0xf80
[  671.274104][T13826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.274119][T13826] RIP: 0033:0x7fcb2fd9aeb9
[  671.274133][T13826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.274147][T13826] RSP: 002b:00007fcb30c1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  671.274163][T13826] RAX: ffffffffffffffda RBX: 00007fcb30015fa0 RCX: 00007fcb2fd9aeb9
[  671.274173][T13826] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000007
[  671.274183][T13826] RBP: 00007fcb2fe08c1f R08: 0000000000000000 R09: 0000000000000000
[  671.274192][T13826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  671.274201][T13826] R13: 00007fcb30016038 R14: 00007fcb30015fa0 R15: 00007ffc2036fd78
[  671.274222][T13826]  </TASK>
[  671.274479][T13826] bridge0: port 3(netdevsim0) entered blocking state
[  671.274548][T13826] bridge0: port 3(netdevsim0) entered forwarding state
[  671.674310][T11625] Bluetooth: hci19: command tx timeout
[  673.742679][T11625] Bluetooth: hci19: command tx timeout
[  675.258696][   T31] INFO: task kworker/u8:8:6335 blocked for more than 143 seconds.
[  675.258723][   T31]       Tainted: G          I  L      syzkaller #0
[  675.258733][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  675.258740][   T31] task:kworker/u8:8    state:D stack:21184 pid:6335  tgid:6335  ppid:2      task_flags:0x4208160 flags:0x00080000
[  675.258790][   T31] Workqueue: netns cleanup_net
[  675.258812][   T31] Call Trace:
[  675.258818][   T31]  <TASK>
[  675.258827][   T31]  ? __schedule+0xf65/0x5e10
[  675.258845][   T31]  __schedule+0xfe4/0x5e10
[  675.258863][   T31]  ? __lock_acquire+0x4a5/0x2630
[  675.258894][   T31]  ? __pfx___schedule+0x10/0x10
[  675.258910][   T31]  ? find_held_lock+0x2b/0x80
[  675.258926][   T31]  ? schedule+0x2bf/0x390
[  675.258946][   T31]  schedule+0xdd/0x390
[  675.258963][   T31]  schedule_timeout+0x1b2/0x280
[  675.258987][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  675.259019][   T31]  ? mark_held_locks+0x40/0x70
[  675.259042][   T31]  __wait_for_common+0x2e7/0x4c0
[  675.259061][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  675.259089][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  675.259106][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  675.259125][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  675.259149][   T31]  __flush_workqueue+0x3f7/0x1200
[  675.259172][   T31]  ? __virt_addr_valid+0x32d/0x620
[  675.259199][   T31]  ? find_held_lock+0x2b/0x80
[  675.259214][   T31]  ? find_held_lock+0x2b/0x80
[  675.259231][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  675.259268][   T31]  ? queue_work_on+0x11b/0x1e0
[  675.259291][   T31]  ? lockdep_hardirqs_on+0x78/0x100
[  675.259313][   T31]  rxrpc_destroy_all_connections+0xf9/0x420
[  675.259337][   T31]  ? __pfx_rxrpc_destroy_all_connections+0x10/0x10
[  675.259358][   T31]  ? __pfx___try_to_del_timer_sync+0x10/0x10
[  675.259383][   T31]  ? __timer_delete_sync+0x151/0x1c0
[  675.259404][   T31]  rxrpc_exit_net+0x7b/0xc0
[  675.259420][   T31]  ? __pfx_rxrpc_exit_net+0x10/0x10
[  675.259436][   T31]  ops_undo_list+0x2ee/0xab0
[  675.259465][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  675.259489][   T31]  ? cleanup_net+0x345/0x830
[  675.259505][   T31]  ? idr_destroy+0x62/0x2e0
[  675.259532][   T31]  cleanup_net+0x419/0x830
[  675.259549][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  675.259567][   T31]  ? rcu_is_watching+0x12/0xc0
[  675.259586][   T31]  process_one_work+0x9c2/0x1840
[  675.259618][   T31]  ? __pfx_process_one_work+0x10/0x10
[  675.259647][   T31]  ? assign_work+0x19c/0x250
[  675.259671][   T31]  worker_thread+0x5da/0xe40
[  675.259699][   T31]  ? __pfx_worker_thread+0x10/0x10
[  675.259724][   T31]  ? kthread+0x17d/0x730
[  675.259745][   T31]  ? __pfx_worker_thread+0x10/0x10
[  675.259767][   T31]  kthread+0x3b3/0x730
[  675.259790][   T31]  ? __pfx_kthread+0x10/0x10
[  675.259811][   T31]  ? ret_from_fork+0x79/0xaf0
[  675.259827][   T31]  ? ret_from_fork+0x79/0xaf0
[  675.259842][   T31]  ? rcu_is_watching+0x12/0xc0
[  675.259858][   T31]  ? __pfx_kthread+0x10/0x10
[  675.259881][   T31]  ret_from_fork+0x754/0xaf0
[  675.259897][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  675.259914][   T31]  ? __switch_to+0x7b9/0x10c0
[  675.259934][   T31]  ? __pfx_kthread+0x10/0x10
[  675.259957][   T31]  ret_from_fork_asm+0x1a/0x30
[  675.259990][   T31]  </TASK>
[  675.260010][   T31] INFO: task syz.0.944:11645 blocked for more than 143 seconds.
[  675.260021][   T31]       Tainted: G          I  L      syzkaller #0
[  675.260030][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  675.260037][   T31] task:syz.0.944       state:D stack:22712 pid:11645 tgid:11645 ppid:6425   task_flags:0x400040 flags:0x00080002
[  675.260079][   T31] Call Trace:
[  675.260084][   T31]  <TASK>
[  675.260092][   T31]  ? __schedule+0xf65/0x5e10
[  675.260108][   T31]  __schedule+0xfe4/0x5e10
[  675.260125][   T31]  ? __lock_acquire+0x4a5/0x2630
[  675.260155][   T31]  ? __pfx___schedule+0x10/0x10
[  675.260171][   T31]  ? find_held_lock+0x2b/0x80
[  675.260187][   T31]  ? schedule+0x2bf/0x390
[  675.260207][   T31]  schedule+0xdd/0x390
[  675.260223][   T31]  schedule_timeout+0x1b2/0x280
[  675.260257][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  675.260288][   T31]  ? mark_held_locks+0x40/0x70
[  675.260311][   T31]  __wait_for_common+0x2e7/0x4c0
[  675.260329][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  675.260357][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  675.260375][   T31]  ? touch_wq_lockdep_map+0x9c/0x1c0
[  675.260396][   T31]  ? find_held_lock+0x2b/0x80
[  675.260411][   T31]  ? __flush_work+0x928/0xcb0
[  675.260425][   T31]  ? __flush_work+0x928/0xcb0
[  675.260441][   T31]  ? __flush_work+0x4ca/0xcb0
[  675.260457][   T31]  __flush_work+0x7c7/0xcb0
[  675.260475][   T31]  ? __pfx___flush_work+0x10/0x10
[  675.260492][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[  675.260519][   T31]  ? __pfx___might_resched+0x10/0x10
[  675.260543][   T31]  ? drm_atomic_helper_wait_for_flip_done+0x190/0x1f0
[  675.260568][   T31]  vkms_atomic_commit_tail+0x172/0x240
[  675.260589][   T31]  ? __pfx_vkms_atomic_commit_tail+0x10/0x10
[  675.260609][   T31]  commit_tail+0x293/0x430
[  675.260634][   T31]  drm_atomic_helper_commit+0x303/0x380
[  675.260657][   T31]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[  675.260679][   T31]  drm_atomic_commit+0x230/0x300
[  675.260699][   T31]  ? __pfx_drm_atomic_commit+0x10/0x10
[  675.260719][   T31]  ? __pfx___drm_printfn_info+0x10/0x10
[  675.260746][   T31]  ? drm_client_rotation+0x451/0x6a0
[  675.260771][   T31]  drm_client_modeset_commit_atomic+0x6a6/0x7e0
[  675.260800][   T31]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  675.260841][   T31]  drm_client_modeset_commit_locked+0x14d/0x580
[  675.260867][   T31]  drm_client_modeset_commit+0x4f/0x80
[  675.260890][   T31]  __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160
[  675.260915][   T31]  drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0
[  675.260940][   T31]  drm_fbdev_client_restore+0x1b/0x30
[  675.260959][   T31]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  675.260976][   T31]  drm_client_dev_restore+0x205/0x2a0
[  675.261002][   T31]  drm_release+0x2c6/0x360
[  675.261023][   T31]  ? __pfx_drm_release+0x10/0x10
[  675.261043][   T31]  __fput+0x3ff/0xb40
[  675.261070][   T31]  task_work_run+0x150/0x240
[  675.261095][   T31]  ? __pfx_task_work_run+0x10/0x10
[  675.261124][   T31]  exit_to_user_mode_loop+0x100/0x4b0
[  675.261147][   T31]  ? rcu_is_watching+0x12/0xc0
[  675.261164][   T31]  do_syscall_64+0x4ea/0xf80
[  675.261185][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  675.261202][   T31] RIP: 0033:0x7f727359aeb9
[  675.261216][   T31] RSP: 002b:00007ffc2682e1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  675.261232][   T31] RAX: 0000000000000000 RBX: 00007f7273817da0 RCX: 00007f727359aeb9
[  675.261247][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  675.261257][   T31] RBP: 00007f7273817da0 R08: 0000000000000006 R09: 0000000000000000
[  675.261267][   T31] R10: 00007f7273817cb0 R11: 0000000000000246 R12: 000000000007f10c
[  675.261278][   T31] R13: 00007f727381627c R14: 000000000007f012 R15: 00007f7273816270
[  675.261299][   T31]  </TASK>
[  675.261307][   T31] INFO: task syz.4.950:11683 blocked for more than 143 seconds.
[  675.261319][   T31]       Tainted: G          I  L      syzkaller #0
[  675.261328][   T31]       Blocked by coredump.
[  675.261333][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  675.261339][   T31] task:syz.4.950       state:D stack:28264 pid:11683 tgid:11679 ppid:11358  task_flags:0x40054c flags:0x00080001
[  675.261386][   T31] Call Trace:
[  675.261391][   T31]  <TASK>
[  675.261399][   T31]  ? __schedule+0xf65/0x5e10
[  675.261415][   T31]  __schedule+0xfe4/0x5e10
[  675.261432][   T31]  ? __lock_acquire+0x4a5/0x2630
[  675.261462][   T31]  ? __pfx___schedule+0x10/0x10
[  675.261478][   T31]  ? find_held_lock+0x2b/0x80
[  675.261494][   T31]  ? schedule+0x2bf/0x390
[  675.261513][   T31]  schedule+0xdd/0x390
[  675.261530][   T31]  schedule_timeout+0x1b2/0x280
[  675.261554][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  675.261585][   T31]  ? mark_held_locks+0x40/0x70
[  675.261608][   T31]  __wait_for_common+0x2e7/0x4c0
[  675.261626][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  675.261654][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  675.261671][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  675.261690][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  675.261713][   T31]  __flush_workqueue+0x3f7/0x1200
[  675.261743][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  675.261766][   T31]  ? net_generic+0xea/0x2a0
[  675.261796][   T31]  ? rxrpc_discard_prealloc+0x752/0x9c0
[  675.261820][   T31]  ? rxrpc_release_calls_on_socket+0x384/0x4e0
[  675.261841][   T31]  rxrpc_release+0x2a7/0x6a0
[  675.261864][   T31]  __sock_release+0xb3/0x260
[  675.261888][   T31]  ? __pfx_sock_close+0x10/0x10
[  675.261912][   T31]  sock_close+0x1c/0x30
[  675.261935][   T31]  __fput+0x3ff/0xb40
[  675.261961][   T31]  task_work_run+0x150/0x240
[  675.261985][   T31]  ? __pfx_task_work_run+0x10/0x10
[  675.262010][   T31]  ? do_raw_spin_unlock+0x145/0x1e0
[  675.262037][   T31]  do_exit+0x829/0x2a30
[  675.262063][   T31]  ? __pfx_do_exit+0x10/0x10
[  675.262086][   T31]  ? do_raw_spin_lock+0x128/0x260
[  675.262109][   T31]  ? find_held_lock+0x2b/0x80
[  675.262124][   T31]  ? get_signal+0x7e0/0x21e0
[  675.262145][   T31]  do_group_exit+0xd5/0x2a0
[  675.262170][   T31]  get_signal+0x1ec7/0x21e0
[  675.262188][   T31]  ? security_file_permission+0x76/0x210
[  675.262220][   T31]  ? __pfx_get_signal+0x10/0x10
[  675.262243][   T31]  ? __pfx_vfs_read+0x10/0x10
[  675.262260][   T31]  ? do_futex+0x192/0x350
[  675.262284][   T31]  arch_do_signal_or_restart+0x91/0x770
[  675.262306][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  675.262334][   T31]  ? ksys_read+0x1ac/0x250
[  675.262355][   T31]  exit_to_user_mode_loop+0x86/0x4b0
[  675.262376][   T31]  ? rcu_is_watching+0x12/0xc0
[  675.262394][   T31]  do_syscall_64+0x4ea/0xf80
[  675.262414][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  675.262430][   T31] RIP: 0033:0x7fef8099aeb9
[  675.262442][   T31] RSP: 002b:00007fef818e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  675.262457][   T31] RAX: fffffffffffffe00 RBX: 00007fef80c16090 RCX: 00007fef8099aeb9
[  675.262468][   T31] RDX: 0000000000000076 RSI: 0000200000000440 RDI: 0000000000000000
[  675.262478][   T31] RBP: 00007fef80a08c1f R08: 0000000000000000 R09: 0000000000000000
[  675.262489][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  675.262499][   T31] R13: 00007fef80c16128 R14: 00007fef80c16090 R15: 00007ffd28cced38
[  675.262520][   T31]  </TASK>
[  675.262528][   T31] INFO: task syz.3.955:11718 blocked for more than 143 seconds.
[  675.262539][   T31]       Tainted: G          I  L      syzkaller #0
[  675.262548][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  675.262555][   T31] task:syz.3.955       state:D stack:28488 pid:11718 tgid:11714 ppid:5828   task_flags:0x400140 flags:0x00080002
[  675.262603][   T31] Call Trace:
[  675.262609][   T31]  <TASK>
[  675.262616][   T31]  ? __schedule+0xf65/0x5e10
[  675.262633][   T31]  __schedule+0xfe4/0x5e10
[  675.262650][   T31]  ? __lock_acquire+0x4a5/0x2630
[  675.262673][   T31]  ? vfs_open+0x82/0x3f0
[  675.262696][   T31]  ? do_sys_openat2+0x12e/0x220
[  675.262723][   T31]  ? __pfx___schedule+0x10/0x10
[  675.262739][   T31]  ? find_held_lock+0x2b/0x80
[  675.262755][   T31]  ? schedule+0x2bf/0x390
[  675.262774][   T31]  schedule+0xdd/0x390
[  675.262791][   T31]  schedule_preempt_disabled+0x13/0x30
[  675.262808][   T31]  __mutex_lock+0xc9a/0x1b90
[  675.262830][   T31]  ? drm_master_open+0x78/0x220
[  675.262855][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  675.262883][   T31]  ? drm_debugfs_clients_add+0x1a1/0x210
[  675.262905][   T31]  ? drm_master_open+0x78/0x220
[  675.262926][   T31]  drm_master_open+0x78/0x220
[  675.262949][   T31]  drm_open_helper+0x42b/0x540
[  675.262972][   T31]  drm_open+0x1a0/0x3e0
[  675.262991][   T31]  ? __pfx_drm_open+0x10/0x10
[  675.263011][   T31]  drm_stub_open+0x20f/0x380
[  675.263032][   T31]  ? __pfx_drm_stub_open+0x10/0x10
[  675.263052][   T31]  chrdev_open+0x234/0x6a0
[  675.263071][   T31]  ? __pfx_apparmor_file_open+0x10/0x10
[  675.263093][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  675.263113][   T31]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  675.263138][   T31]  do_dentry_open+0x73e/0x1570
[  675.263156][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  675.263176][   T31]  ? security_inode_permission+0xbf/0x250
[  675.263202][   T31]  vfs_open+0x82/0x3f0
[  675.263227][   T31]  path_openat+0x21dc/0x3120
[  675.263257][   T31]  ? __pfx_path_openat+0x10/0x10
[  675.263283][   T31]  do_filp_open+0x1f7/0x420
[  675.263303][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  675.263335][   T31]  ? _raw_spin_unlock+0x28/0x50
[  675.263351][   T31]  ? alloc_fd+0x476/0x790
[  675.263375][   T31]  do_sys_openat2+0x12e/0x220
[  675.263399][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  675.263430][   T31]  __x64_sys_openat+0x12d/0x210
[  675.263455][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[  675.263478][   T31]  ? xfd_validate_state+0x129/0x190
[  675.263509][   T31]  do_syscall_64+0xc9/0xf80
[  675.263530][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  675.263546][   T31] RIP: 0033:0x7f24adb9aeb9
[  675.263558][   T31] RSP: 002b:00007f24aea11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  675.263574][   T31] RAX: ffffffffffffffda RBX: 00007f24ade16090 RCX: 00007f24adb9aeb9
[  675.263585][   T31] RDX: 0000000000101002 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  675.263595][   T31] RBP: 00007f24adc08c1f R08: 0000000000000000 R09: 0000000000000000
[  675.263605][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  675.263616][   T31] R13: 00007f24ade16128 R14: 00007f24ade16090 R15: 00007ffc9eaf3b78
[  675.263636][   T31]  </TASK>
[  675.263754][   T31] 
[  675.263754][   T31] Showing all locks held in the system:
[  675.263766][   T31] 1 lock held by khungtaskd/31:
[  675.263776][   T31]  #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  675.263850][   T31] 3 locks held by kworker/u8:8/6335:
[  675.263859][   T31]  #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[  675.263906][   T31]  #1: ffffc90002f87c98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[  675.263952][   T31]  #2: ffffffff903dcef0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830
[  675.263991][   T31] 2 locks held by getty/7428:
[  675.264000][   T31]  #0: ffff88814cfdc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  675.264043][   T31]  #1: ffffc900032442f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[  675.264084][   T31] 3 locks held by kworker/0:0/10720:
[  675.264093][   T31]  #0: ffff88813fe15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[  675.264140][   T31]  #1: ffffc9000fb57c98 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[  675.264188][   T31]  #2: ffff888140590280 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_damage_work+0x159/0x640
[  675.264238][   T31] 3 locks held by kworker/u11:3/11630:
[  675.264247][   T31] 6 locks held by syz.0.944/11645:
[  675.264256][   T31]  #0: ffff8880261b6270 (&dev->clientlist_mutex){+.+.}-{4:4}, at: drm_client_dev_restore+0xe9/0x2a0
[  675.264300][   T31]  #1: ffff888140590280 (&helper->lock){+.+.}-{4:4}, at: __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x21/0x160
[  675.264346][   T31]  #2: ffff8880261b6128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x21/0x80
[  675.265731][   T31]  #3: ffff888140590098 (&client->modeset_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_locked+0x4c/0x580
[  675.265784][   T31]  #4: ffffc90002f27b38 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_client_modeset_commit_atomic+0xc4/0x7e0
[  675.265829][   T31]  #5: ffffc90002f27b60 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_atomic+0xc4/0x7e0
[  675.265877][   T31] 1 lock held by syz.4.950/11683:
[  675.265888][   T31]  #0: ffff888012a72488 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260
[  675.265942][   T31] 1 lock held by syz.3.955/11718:
[  675.265951][   T31]  #0: ffff8880261b6128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x78/0x220
[  675.266000][   T31] 1 lock held by syz.2.982/11926:
[  675.266009][   T31]  #0: ffff8880261b6128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x78/0x220
[  675.266054][   T31] 1 lock held by syz.5.1004/12086:
[  675.266062][   T31]  #0: ffff8880261b6128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x78/0x220
[  675.266108][   T31] 1 lock held by syz.8.1038/12309:
[  675.266117][   T31]  #0: ffff8880261b6128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x78/0x220
[  675.266166][   T31] 1 lock held by syz.1.1127/12841:
[  675.266175][   T31]  #0: ffff8880261b6128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x78/0x220
[  675.266219][   T31] 1 lock held by syz.6.1147/12967:
[  675.266227][   T31]  #0: ffff8880261b6128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x78/0x220
[  675.266278][   T31] 3 locks held by syz.9.1153/12999:
[  675.266288][   T31]  #0: ffffffff8e5cf320 (console_lock){+.+.}-{0:0}, at: do_fb_ioctl+0x1d9/0x7e0
[  675.266335][   T31]  #1: ffff8880261bd078 (&fb_info->lock){+.+.}-{4:4}, at: do_fb_ioctl+0x1e3/0x7e0
[  675.266380][   T31]  #2: ffff888140590280 (&helper->lock){+.+.}-{4:4}, at: __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x21/0x160
[  675.266428][   T31] 1 lock held by syz.0.1180/13147:
[  675.266437][   T31]  #0: ffff8880261bd078 (&fb_info->lock){+.+.}-{4:4}, at: fb_open+0xa1/0x3d0
[  675.266483][   T31] 2 locks held by syz.4.1192/13236:
[  675.266492][   T31]  #0: ffffffff8f2d67a8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0
[  675.266529][   T31]  #1: ffff88804750a1c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x39/0x470
[  675.266567][   T31] 1 lock held by syz.3.1198/13282:
[  675.266576][   T31]  #0: ffffffff8f2d67a8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0
[  675.266613][   T31] 1 lock held by syz.2.1219/13388:
[  675.266622][   T31]  #0: ffffffff8f2d67a8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0
[  675.266657][   T31] 1 lock held by syz.2.1219/13389:
[  675.266666][   T31]  #0: ffffffff8f2d67a8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0
[  675.266705][   T31] 1 lock held by syz.5.1239/13532:
[  675.266714][   T31]  #0: ffffffff8f2d67a8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0
[  675.266750][   T31] 4 locks held by syz.8.1248/13575:
[  675.266760][   T31]  #0: ffff888159652b78 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  675.266833][   T31]  #1: ffff888032802420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  675.266878][   T31]  #2: ffff8880753e5488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  675.266917][   T31]  #3: ffff8881412a3f08 (kn->active#201){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  675.266962][   T31] 1 lock held by syz.7.1258/13621:
[  675.266971][   T31]  #0: ffff88804bd94148 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260
[  675.267022][   T31] 1 lock held by syz.1.1260/13643:
[  675.267032][   T31]  #0: ffffffff8f2d67a8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0
[  675.267069][   T31] 1 lock held by syz.6.1261/13674:
[  675.267078][   T31]  #0: ffffffff8f2d67a8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0
[  675.267118][   T31] 1 lock held by syz.9.1271/13766:
[  675.267127][   T31]  #0: ffff8880261b6128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x78/0x220
[  675.267171][   T31] 1 lock held by syz.0.1272/13786:
[  675.267180][   T31]  #0: ffffffff8f2d67a8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0
[  675.267216][   T31] 1 lock held by syz.0.1272/13789:
[  675.267225][   T31]  #0: ffffffff8f2d67a8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0
[  675.267266][   T31] 1 lock held by syz.4.1268/13797:
[  675.267275][   T31]  #0: ffffffff8f2d67a8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0
[  675.267312][   T31] 1 lock held by syz.3.1274/13832:
[  675.267321][   T31]  #0: ffffffff8f2d67a8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0
[  675.267358][   T31] 
[  675.267363][   T31] =============================================
[  675.267363][   T31] 
[  675.267377][   T31] NMI backtrace for cpu 0
[  675.267390][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G          I  L      syzkaller #0 PREEMPT(full) 
[  675.267412][   T31] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  675.267419][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  675.267428][   T31] Call Trace:
[  675.267434][   T31]  <TASK>
[  675.267440][   T31]  dump_stack_lvl+0x100/0x190
[  675.267459][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  675.267480][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  675.267504][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  675.267530][   T31]  sys_info+0x141/0x190
[  675.267550][   T31]  watchdog+0xcc3/0xfe0
[  675.267571][   T31]  ? __pfx_watchdog+0x10/0x10
[  675.267587][   T31]  ? __kthread_parkme+0x18c/0x230
[  675.267605][   T31]  ? __pfx_watchdog+0x10/0x10
[  675.267621][   T31]  ? __pfx_watchdog+0x10/0x10
[  675.267635][   T31]  kthread+0x3b3/0x730
[  675.267657][   T31]  ? __pfx_kthread+0x10/0x10
[  675.267677][   T31]  ? ret_from_fork+0x79/0xaf0
[  675.267690][   T31]  ? ret_from_fork+0x79/0xaf0
[  675.267704][   T31]  ? rcu_is_watching+0x12/0xc0
[  675.267719][   T31]  ? __pfx_kthread+0x10/0x10
[  675.267740][   T31]  ret_from_fork+0x754/0xaf0
[  675.267755][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  675.267771][   T31]  ? __switch_to+0x7b9/0x10c0
[  675.267790][   T31]  ? __pfx_kthread+0x10/0x10
[  675.267811][   T31]  ret_from_fork_asm+0x1a/0x30
[  675.267841][   T31]  </TASK>
[  675.267853][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  675.267864][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G          I  L      syzkaller #0 PREEMPT(full) 
[  675.267886][   T31] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  675.267892][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  675.267901][   T31] Call Trace:
[  675.267906][   T31]  <TASK>
[  675.267912][   T31]  dump_stack_lvl+0x100/0x190
[  675.267930][   T31]  vpanic+0x20d/0x630
[  675.267963][   T31]  panic+0xd1/0xd1
[  675.267977][   T31]  ? __pfx_panic+0x10/0x10
[  675.267992][   T31]  ? nmi_cpu_backtrace+0x79/0x200
[  675.268016][   T31]  ? nmi_trigger_cpumask_backtrace+0x1be/0x230
[  675.268038][   T31]  ? watchdog.cold+0x198/0x1ca
[  675.268054][   T31]  ? watchdog+0xcd3/0xfe0
[  675.268071][   T31]  watchdog.cold+0x1a9/0x1ca
[  675.268092][   T31]  ? __pfx_watchdog+0x10/0x10
[  675.268109][   T31]  ? __kthread_parkme+0x18c/0x230
[  675.268127][   T31]  ? __pfx_watchdog+0x10/0x10
[  675.268144][   T31]  ? __pfx_watchdog+0x10/0x10
[  675.268159][   T31]  kthread+0x3b3/0x730
[  675.268181][   T31]  ? __pfx_kthread+0x10/0x10
[  675.268201][   T31]  ? ret_from_fork+0x79/0xaf0
[  675.268214][   T31]  ? ret_from_fork+0x79/0xaf0
[  675.268228][   T31]  ? rcu_is_watching+0x12/0xc0
[  675.268247][   T31]  ? __pfx_kthread+0x10/0x10
[  675.268269][   T31]  ret_from_fork+0x754/0xaf0
[  675.268284][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  675.268300][   T31]  ? __switch_to+0x7b9/0x10c0
[  675.268319][   T31]  ? __pfx_kthread+0x10/0x10
[  675.268340][   T31]  ret_from_fork_asm+0x1a/0x30
[  675.268371][   T31]  </TASK>
[  675.268427][   T31] Kernel Offset: disabled