last executing test programs:

2m20.295374415s ago: executing program 1 (id=1451):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x14)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
socket(0xa, 0x1, 0x84)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", <r2=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
listen$auto(0x3, 0x83)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = socket(0xb, 0x80000, 0x84)
setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4)
close_range$auto(0x2, 0x8, 0x0)
socket(0xf, 0x3, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0)
exit$auto(0x5eb)

2m15.724168035s ago: executing program 32 (id=1424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="07031abd70250c00587b22"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000540)={0x0, 0x6}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000)
r3 = socket(0xa, 0x5, 0x84)
io_uring_setup$auto(0xa, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setsockopt$auto(r3, 0x10000000084, 0x23, 0x0, 0x8)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x6, &(0x7f00000001c0)={&(0x7f00000004c0)="ed0f536394307a6368534e0d1a33f796a943b2677f73d64e900cfa84bfcc3c3c9cb718dd0fb8425520c72400434fe9dad7aaac4a0e086950da78da5c25a58d05297904e7acfcfbcfe905cdfb44109350dc124ceec3a4194d0c7ccf8655ef6b760cf2bfdf0afd56e835f83d7fce90e03015", 0x3}, 0xa, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r7, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50)
rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00')
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
sendmsg$auto_IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "9d7ad483e492af317593d93a9e7a9e37"}, @IEEE802154_ATTR_PHY_NAME={0x11, 0x1f, 'team_slave_0\x00'}, @IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x8}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0xfff2}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}, @IEEE802154_ATTR_TXPOWER={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6a}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8050)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r8, 0x1, 0x94d1)

2m13.231270699s ago: executing program 33 (id=1429):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x24, r3, 0x9ec6579d452c1f15, 0x70bd2e, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080)
unshare$auto(0x40000080)
sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='*?\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fddbdf250e0000000500120040000000"], 0x1c}, 0x1, 0x0, 0x0, 0xfcb3c617dd1c550b}, 0x40000)
io_setup$auto(0x7ffe, 0x0)
fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0)
r4 = socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
r5 = epoll_create$auto(0x70c)
epoll_ctl$auto(r5, 0x1, r0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x2009a6, 0x40006)
r6 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/take_snapshot\x00', 0x140, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r6, 0x8000)
close_range$auto(r4, r1, 0x0)
keyctl$auto(0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x1)
r7 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r7, 0xffffffffffffffff, 0x0)
r8 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0)
ioctl$auto(r8, 0xc058560f, r8)

2m6.101814062s ago: executing program 4 (id=1465):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0xa, 0x2, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
io_uring_setup$auto(0x52, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfdef}, 0x1, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_m5602/parameters/dump_sensor\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001700)=""/4082, 0xff2)
statmount$auto(0x0, 0x0, 0x1fe, 0x8)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x7ff)
r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x6)
getresuid$auto(0xfffffffffffffffe, 0x0, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/eql/queues/rx-0/rps_flow_cnt\x00', 0x42062, 0x0)
write$auto(r3, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7)
io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, &(0x7f0000000100)="9c6beed74c5504d35b108b6e397fb44a", 0x10000)
openat$auto(r2, &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x7ff)
unlinkat$auto(r2, &(0x7f00000001c0)='./file0\x00', 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa502}, 0x800}, 0x7, 0x4008)

2m5.873246635s ago: executing program 4 (id=1466):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x24c602, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/controlC2\x00', 0xa802, 0x0)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
setfsuid$auto(0x0)
umount2$auto(&(0x7f0000000200)='.\x00', 0xd)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x551)
read$auto(r1, 0x0, 0x3)
fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d)
rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00')
write$auto(r0, &(0x7f0000000040)='\x00', 0x1)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40026f33, 0x0)
r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
getdents$auto(r3, 0x0, 0x62d4)
mmap$auto(0x0, 0x8000020009, 0xe2, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5)
socket(0x1d, 0x2, 0x3)

2m5.537621087s ago: executing program 4 (id=1467):
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de)
r1 = bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f00000000c0)=@token_create={0x10001}, 0x401)
bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)=@iter_create={r1, 0xffffff80}, 0x1)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)="158f4a2b")
ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={<r3=>0xffffffffffffffff, &(0x7f0000000000)="33558b4db384dbcec9db072a40743c0a7d3c8c42e5b9d81a1443c203f21668d75641311e409e27a3243ce5fc274d2706d43ad1f59b2cf5d279987f7bf0c4cb7e849bcff3da0e7db27542c2b478e21fac9302ecc8a23cb3f1ea7deb30", 0x7, &(0x7f0000000080)="fc6492c897f986d446d2f75b7acad870841d755df9e142a9f64e9f64f73a45773f202079edfd3ca5ceca491a4eba20f096f40e3c38ce63b40df98db4cc2bc5a5b2ec2b5e0b87eae4a87c1518fe9c4680d9777a762435ef280e3f3e6360e60fd00b55f96a6a6f2eec5d677e6ab64fd034202a269d34ac54b309e44b07555492d49c08efc6160b1adb990e2f59f167c955b009a51556241cf9713198f0e6d44e1fb8c4c7fa3992c98babc298cdb07f91e37b7ea4561cf880a78aed23846c4db3c6a5fa1ebbf40d794d90585745a8191b17b07de9325624", 0x3, &(0x7f0000000180)="675d6129c55ca479d399e684435a38e9ed78b0", &(0x7f00000001c0)=0x100})
mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/stats/shmem_alloc\x00', 0x2400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/8, 0x8)
socket(0x15, 0x5, 0x0)
setsockopt$auto(0x3, 0x114, 0x3f, 0x0, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x4, 0x0)
r5 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0)
mmap$auto(0x5, 0x8, 0xde, 0x9b76, r3, 0x8000)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0)
ioctl$auto(r6, 0xab08, 0xffffffffffffffff)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r7, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)

2m5.193164889s ago: executing program 34 (id=1451):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x14)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
socket(0xa, 0x1, 0x84)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", <r2=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
listen$auto(0x3, 0x83)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = socket(0xb, 0x80000, 0x84)
setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4)
close_range$auto(0x2, 0x8, 0x0)
socket(0xf, 0x3, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0)
exit$auto(0x5eb)

2m4.912046027s ago: executing program 4 (id=1469):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ping_group_range\x00', 0x202, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x54)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x40804)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4fc7, 0x0, 0x1, 0x0, 0x522, 0x8}, 0x3}, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb)
mmap$auto(0x0, 0x80000020009, 0x4000000000df, 0x16, r0, 0x40000008004)
r2 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0)
setsockopt$auto_SO_BUSY_POLL(r2, 0x7, 0x2e, &(0x7f00000000c0)='\x00', 0x6)
add_key$auto_KEY_SPEC_GROUP_KEYRING(&(0x7f0000001240)='.)},]+o)@}/^p,/\x00', 0x0, 0x0, 0x3, 0xfffffffffffffffa)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_macvtap/ioam6_id_wide\x00', 0x169002, 0x0)
read$auto(r3, 0x0, 0x1ff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0xfffffffffffffffd, 0xffffffffffff0005, 0x17)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0)
write$auto(r4, &(0x7f0000000000)='][.\x1f![%\x00', 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)

2m3.164730383s ago: executing program 35 (id=1455):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x24c602, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/controlC2\x00', 0xa802, 0x0)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
setfsuid$auto(0x0)
umount2$auto(&(0x7f0000000200)='.\x00', 0xd)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x551)
read$auto(r1, 0x0, 0x3)
fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d)
rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00')
write$auto(r0, &(0x7f0000000040)='\x00', 0x1)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40026f33, 0x0)
r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
getdents$auto(r3, 0x0, 0x62d4)
mmap$auto(0x0, 0x8000020009, 0xe2, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xfffffffffffffffc, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x1d, 0x2, 0x3)

2m3.002167169s ago: executing program 4 (id=1472):
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
lseek$auto(r0, 0x7, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000080)=0x1)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
r3 = eventfd$auto(0x0)
readv$auto(r3, &(0x7f0000000380)={0x0, 0x8}, 0x100)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x23, 0x0)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
recvfrom$auto(r1, 0x0, 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc)
ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
pwrite64$auto(0xc8, 0x0, 0xedef, 0x3)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bbf, 0x7ff, 0x3, 0xff, 0x10001, 0x1, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0ef1, 0xffffdfffffffff81, 0x4]}, 0x0)

2m1.063060181s ago: executing program 4 (id=1474):
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, <r0=>0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x5, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}})
close_range$auto(0xffffffffffffffff, r0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
open(&(0x7f0000000180)='./file0\x00', 0x440, 0x5bc)
removexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00')
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\r\xaa\x1c\x03\x00\xe0\x00c\x14M>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x15\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x8bd)
ptrace$auto(0xc, 0x0, 0x9, 0xfffffffffffff6de)
unshare$auto(0x20000008)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r2, 0x0, 0x9)
capget$auto(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
write$auto(0xffffffffffffffff, 0x0, 0xb)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_TXSA(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)={0xa8, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MACSEC_ATTR_SA_CONFIG={0x8c, 0x3, 0x0, 0x1, [@nested={0x85, 0x4, 0x0, 0x1, [@generic="4cf5c2317fd9dfc637a94c964a67169a44c71805af71f2d4cd1bb2b09c4a3a1d520ef6530152f3dd3f5c3c96f4f181c7fcb0a4fd622229c3db4c82eb3b227879092fe3325b8805670ba98f3135ce0d440b4bb72e2a49fb7d7272903bfbe3906a0ca0c96f9e9dc9fb8cc4f0683cd7e3d4587595c3dc8f8aee44777503ecbeb2ad9f"]}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0)
write$auto(r2, &(0x7f00000002c0)='\x00\x00s\xa6\xc2\x1d\a\r\x05`\xa6\xfef\xa3\x00\x00q,h\xa2\x99;\xd9S\xbb\x81\xaa2\xa4oJ\x15\xd0\xc8\'h\x8d\x9f&\xc7\xde\xb3\x03\x8eB\x9e%h\xf4\xa5\xfdt{\x82t\xc9\xf9\xf8\xe6\xee}`\xd9\xd8\n\xee\x7f\xbb\x04\x17\xca\x1f~\xaf<\xe7f[*\x02\t\x8f\'t\xbe\xd1\x94\x17\x82\x9c\xb2\xb7\xda\xb0\xc1s\xbeR\x82\x14\xe3Oi\xdaI\xd4N\x00\x19\xa1\xe7\xc43V\t\xe3\xa4d@\xe9\x823P\x9cS\xb3\xe5nz\x99?\xb8\xcb\xcd\x88)\xf9:\x16UB\x15\x1a9\xe05%{X\x1a\\-\xad\xce\x91;\f\xc6\xf43\xcd\x92N\xf9\x97\xcf\x8d\xd1l\xfb\x9d\xa8 \xf3\x99+\x0f\x9eX\xc4\x8a\xf3\x86\x8b \xe6j\xa1\xf3\xf6\xf7\x12\r\xcc\xf2m\xf5\x84\x9b\xf5\rp\x8c\xc9X\xd6u0\xd2\x97f\x95Y\xaeX\x1bP>\x05f\xfbo\x9d\xb2\xc0\x8b|j\x00;\xb6\xee\xeb<#`\xa34\"cD\xcd\xea\a\b\xb2o\x93\xbd\xdc\xd4\xe7\xfaca\xf3\x9eW\xf2\xc9\x8e\xeb^^T\x8d\xf3\tk\x03\xacs\xd0!\xbd\xc3G\x8f\xdf\xc9\xa0\xca\xeb\xc22;GH\xdf \x91\x88\x99\xf8m\xa2\x1e\x81\xfd\x82\x9a\x92\x97\x1f\xb8^\x9eF\x18\xcas\x9a\xeaDD\x19\xfb\xd3\x94|4\xfc\xb0\x7fx$\xc7\xb2\x9cW\xc0\xdd\x16\x16\xaf\xb2@\x81:\x99\xf8\x8b', 0x100400a3da)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0)
unshare$auto(0x40000080)

1m45.60385365s ago: executing program 36 (id=1474):
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, <r0=>0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x5, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}})
close_range$auto(0xffffffffffffffff, r0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
open(&(0x7f0000000180)='./file0\x00', 0x440, 0x5bc)
removexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00')
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\r\xaa\x1c\x03\x00\xe0\x00c\x14M>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x15\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x8bd)
ptrace$auto(0xc, 0x0, 0x9, 0xfffffffffffff6de)
unshare$auto(0x20000008)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r2, 0x0, 0x9)
capget$auto(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, 0x0)
write$auto(0x3, 0x0, 0xfdef)
write$auto(0xffffffffffffffff, 0x0, 0xb)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_TXSA(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)={0xa8, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MACSEC_ATTR_SA_CONFIG={0x8c, 0x3, 0x0, 0x1, [@nested={0x85, 0x4, 0x0, 0x1, [@generic="4cf5c2317fd9dfc637a94c964a67169a44c71805af71f2d4cd1bb2b09c4a3a1d520ef6530152f3dd3f5c3c96f4f181c7fcb0a4fd622229c3db4c82eb3b227879092fe3325b8805670ba98f3135ce0d440b4bb72e2a49fb7d7272903bfbe3906a0ca0c96f9e9dc9fb8cc4f0683cd7e3d4587595c3dc8f8aee44777503ecbeb2ad9f"]}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0)
write$auto(r2, &(0x7f00000002c0)='\x00\x00s\xa6\xc2\x1d\a\r\x05`\xa6\xfef\xa3\x00\x00q,h\xa2\x99;\xd9S\xbb\x81\xaa2\xa4oJ\x15\xd0\xc8\'h\x8d\x9f&\xc7\xde\xb3\x03\x8eB\x9e%h\xf4\xa5\xfdt{\x82t\xc9\xf9\xf8\xe6\xee}`\xd9\xd8\n\xee\x7f\xbb\x04\x17\xca\x1f~\xaf<\xe7f[*\x02\t\x8f\'t\xbe\xd1\x94\x17\x82\x9c\xb2\xb7\xda\xb0\xc1s\xbeR\x82\x14\xe3Oi\xdaI\xd4N\x00\x19\xa1\xe7\xc43V\t\xe3\xa4d@\xe9\x823P\x9cS\xb3\xe5nz\x99?\xb8\xcb\xcd\x88)\xf9:\x16UB\x15\x1a9\xe05%{X\x1a\\-\xad\xce\x91;\f\xc6\xf43\xcd\x92N\xf9\x97\xcf\x8d\xd1l\xfb\x9d\xa8 \xf3\x99+\x0f\x9eX\xc4\x8a\xf3\x86\x8b \xe6j\xa1\xf3\xf6\xf7\x12\r\xcc\xf2m\xf5\x84\x9b\xf5\rp\x8c\xc9X\xd6u0\xd2\x97f\x95Y\xaeX\x1bP>\x05f\xfbo\x9d\xb2\xc0\x8b|j\x00;\xb6\xee\xeb<#`\xa34\"cD\xcd\xea\a\b\xb2o\x93\xbd\xdc\xd4\xe7\xfaca\xf3\x9eW\xf2\xc9\x8e\xeb^^T\x8d\xf3\tk\x03\xacs\xd0!\xbd\xc3G\x8f\xdf\xc9\xa0\xca\xeb\xc22;GH\xdf \x91\x88\x99\xf8m\xa2\x1e\x81\xfd\x82\x9a\x92\x97\x1f\xb8^\x9eF\x18\xcas\x9a\xeaDD\x19\xfb\xd3\x94|4\xfc\xb0\x7fx$\xc7\xb2\x9cW\xc0\xdd\x16\x16\xaf\xb2@\x81:\x99\xf8\x8b', 0x100400a3da)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0)
unshare$auto(0x40000080)

1m45.529878171s ago: executing program 5 (id=1489):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8)
mmap$auto(0x0, 0x8, 0x80004000000000df, 0x10004000eb1, 0xffffffffffffffff, 0x8000008000)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x20082, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c0a, 0x0)
ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
read$auto(0x3, 0x0, 0x7fffffff)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0xc2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8)
r2 = waitid$auto_P_ALL(0x0, 0x8000, &(0x7f0000000340)={@_si_pad}, 0x6, &(0x7f00000003c0)={{0x8001, 0x80000000}, {0x3, 0x1}, 0x0, 0xd, 0x8, 0xae0, 0x1, 0x2, 0xfffffffffffffff8, 0xf62, 0x5dcac2d0, 0x100000000, 0x5, 0x0, 0x2, 0x3})
prctl$auto(0x3e, 0x1, r2, 0x1, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
prlimit64$auto(0x0, 0x7, &(0x7f0000000cc0)={0xfff, 0xf1c6}, 0x0)
poll$auto(&(0x7f0000000f80)={0xffffffffffffffff, 0xa06}, 0x3fa, 0x20)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)

1m43.714151655s ago: executing program 5 (id=1492):
mmap$auto(0x2, 0x20009, 0x4000000000df, 0xebd, 0xffffffffffffffff, 0x8000)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
shmctl$auto_IPC_INFO(0x1, 0x3, &(0x7f00000003c0)={{0xb, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x7, 0x2}, 0x18f, 0x10004, 0x7, 0x4df9e870, @raw=0x3, @raw=0x8001, 0xb, 0x0, 0x0, 0x0})
getsockopt$auto_SO_RCVPRIORITY(r0, 0x0, 0x52, &(0x7f0000001040)='\xf8V\xe1c\xc0\xd4\n\xb6\x0f%\xa7\xee^\xe3\x9fE\x9e)a\xa8\x10\xba8G!o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`t\xf4t\x1e\xd3\xc7\xb8\xe2+\xdb4\xa1\xfdC\xeb\xbc\xdd\x1c\x8cp8\x14\x1d\xeb\xd9C\xd5\xab\x8c\xbb\x0e!\xae\'\x9c<\xe6\x92<\x83Qa$b\xd2\xfc\x90\xcb-\xe2i\xa5!w\x1a\xb1\xe8\xa6o\b\xce\xb5z4k\x035*\' V\xeb\xb1S\xf2-\xd4\xcd\x1c\xf7\x9e-,\xa7\x1a\xd2\x84\x13T\x12\x12\xf8 ;Z4\xa9\xe1\xe0\x93\xb2d\x16r1\'\xf0^\xe41\xa9\x98\b\xc6\b\x83\x8b$\xf9&\x99\x88\x81\xda\x04\x06\xd2(D\xb1\xddZ\xfc\xca~_\xd4\xc7\x17\"\xbei\xc2\xe2\xa8\xee\xed\x95\xe5\xc4F\a\x8cwb$\xc6\x7f61q\xf9\xe5\xe9\xffF2*-D\xa3o\x96\xe8$B\xfd\xfbh\x0e\xf9(\xa0\xd2F2X*\xcc\xa6\xebX\x82cU1\x0e\tL\x99hs?\xd8SP8 F\x18\xed+Q\x03\x9d\x8c\xfc\xdf\xf4\xe3v\"\xfdv\"M\x9a', &(0x7f0000000300)=0x81)
ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x1, 0x66)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sg1\x00', 0x41, 0x0)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec27\x00', 0x80200, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000800000eb1, 0xffffffffffffffff, 0x5)
r1 = ioctl$auto_TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000))
sendmsg$auto(r1, &(0x7f0000000380)={&(0x7f00000000c0)="e94335d9f78f0ebfa34cee0649a4e81bfe9f4d3d4869f82a4e06b0c35f39b47abf7801dcc6611ec31cbd809fa4dc80a94cf6c8f08b315fc2eb07d73b92fed010f33b1a8b69405a6a75d91951c5cdd7b6a3550ca6bcc7230f9d51c27e64e952ee24a75a464edb9ece781616bde2511d67714c1292d4", 0x7, &(0x7f0000000280)={&(0x7f0000000180)="001f0530c7f8735b7f6b67628bcd233676156376b3b6b6f3ae1b58c6e74f93493e3da1ec0a502e0af3368f00f53ba88aca98ce85b6ef7f13c27055623e201582b9abec22f06083fad2b8290495667ee64cd6e952aa453a249db0d17089245e133fed7bad0e4223606935f7059f981e83cd7c9dafe8dbb66668d9d68728ad4c499038c577", 0x3}, 0x6, &(0x7f0000000340)="800923951db691aae3adb6ce57bb14d9d638d33ac9cbbee9ffbed1", 0x4, 0x100}, 0x3)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0xa, 0x2, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
r3 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
r4 = signalfd$auto(r3, 0x0, 0x8)
sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYBLOB="01002abd7000fddbdf250d00000008000300", @ANYRESDEC=r3, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="2207b0ebde99c6d10794befab0efbc7131413ee1a59f2cf20a2c131b09272df960b8ee6f6cd74e596f970d55f536606a765aad6ab23ceb3cd88f8c67998d29c1efb0dfc78361e48134effc7ec4e185b88c9130442eda9162c4bc890b659d32a965e524a073d6eeffb5e46bdd4f99e7c4d89c7d0df0adf9a0469c9d63a525d9b3f2aac8fa84d3d5f6576a70b42527d0881c14256da3927bc53f92964c371f0bc01a86a4ad73bb9b9b56ab2a8157407f3e32e9550d59966b5e"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x15)
io_uring_setup$auto(0x52, 0x0)
madvise$auto(0x6, 0x7, 0x1)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfdef}, 0x1, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2c2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)

1m40.926291458s ago: executing program 5 (id=1496):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x24c602, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/controlC2\x00', 0xa802, 0x0)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
setfsuid$auto(0x0)
umount2$auto(&(0x7f0000000200)='.\x00', 0xd)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x551)
read$auto(r1, 0x0, 0x3)
fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d)
rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00')
write$auto(r0, &(0x7f0000000040)='\x00', 0x1)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40026f33, 0x0)
r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
getdents$auto(r3, 0x0, 0x62d4)
mmap$auto(0x0, 0x8000020009, 0xe2, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5)
socket(0x1d, 0x2, 0x3)

1m40.119279552s ago: executing program 5 (id=1499):
mmap$auto(0x0, 0x4020009, 0x7ff, 0x1000000000ebe, 0x401, 0x8000)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/92, 0x5c)
write$auto(0x3, 0x0, 0x1)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r2, 0x0, 0x400000000006)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80161, 0x0)
prctl$auto(0x1000000003b, 0x401, 0x4, 0x3, 0x7)
mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0)
sysfs$auto(0x2, 0x3c, 0x0)
fsopen$auto(0x0, 0x1)
openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x108c0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
read$auto(0x3, 0x0, 0x80)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@inferred, 0x1000, 0x202000b, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x963, 0x3, @inferred, @integer64={0x400000009, 0x1007, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3372a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
msync$auto(0x1, 0x8002000000005, 0xa)
write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)

1m38.327305856s ago: executing program 5 (id=1500):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card1/pcm1c/sub0/hw_params\x00', 0x109040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x14)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
socket(0xa, 0x1, 0x84)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", <r2=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
listen$auto(0x3, 0x83)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cec21\x00', 0x2002, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xf, 0x3, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0)
exit$auto(0x5eb)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)

1m34.566519098s ago: executing program 5 (id=1511):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x101200, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0)
syz_clone(0x40000000, &(0x7f00000003c0)="2eb9821407237fcfc2a197a2e1b7f544d7f8d288bce347bbe879e1c666f0adf0279bfc2645ca1e3eacee96dbd7e1122d05c14443d8ff1b3f72aedeb6ea216bae2e71ab618600c90169c1e109abb3365480ba5caa20479742d23b58ca5e856a273883c8044ef74bb52041de4af65537a46b3b7fe422889dfd4e315b0e91bcbbc7249fa0d4675ab51e3a56c30d5a928185c0df44e7c5a534f026e2969b812ed2d34e24a03b0b4b8cb07c67", 0xaa, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="232c1db78f17e4d98c581913577a8a894a0abe8ea46168498c3b5608fd24b3c54ab07592d1896ca9123454c6ab61a175ddb8788f6ea79a05f5021c35808842d2302ece72c72ac42f9ddd7b81dc9790359d04ae21")
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSTI2(r0, 0x545c, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
io_uring_setup$auto(0x40005b, &(0x7f0000000080)={0x80000003, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [0x8, 0x4, 0x10], {0xd74c, 0x10000, 0x6, 0xb, 0x100, 0x7, 0x4, 0x406, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x8, 0x400005, 0xa88}})
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x291805d9]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
readv$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffc}, 0x3)
msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x4)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000)
mkdir$auto(0x0, 0x1)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffe, 0x400007, 0x10000, 0x100009b72, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10)
close_range$auto(0x2, 0x8, 0x0)

1m19.323214531s ago: executing program 37 (id=1511):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x101200, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0)
syz_clone(0x40000000, &(0x7f00000003c0)="2eb9821407237fcfc2a197a2e1b7f544d7f8d288bce347bbe879e1c666f0adf0279bfc2645ca1e3eacee96dbd7e1122d05c14443d8ff1b3f72aedeb6ea216bae2e71ab618600c90169c1e109abb3365480ba5caa20479742d23b58ca5e856a273883c8044ef74bb52041de4af65537a46b3b7fe422889dfd4e315b0e91bcbbc7249fa0d4675ab51e3a56c30d5a928185c0df44e7c5a534f026e2969b812ed2d34e24a03b0b4b8cb07c67", 0xaa, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="232c1db78f17e4d98c581913577a8a894a0abe8ea46168498c3b5608fd24b3c54ab07592d1896ca9123454c6ab61a175ddb8788f6ea79a05f5021c35808842d2302ece72c72ac42f9ddd7b81dc9790359d04ae21")
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSTI2(r0, 0x545c, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
io_uring_setup$auto(0x40005b, &(0x7f0000000080)={0x80000003, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [0x8, 0x4, 0x10], {0xd74c, 0x10000, 0x6, 0xb, 0x100, 0x7, 0x4, 0x406, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x8, 0x400005, 0xa88}})
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x291805d9]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
readv$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffc}, 0x3)
msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x4)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000)
mkdir$auto(0x0, 0x1)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffe, 0x400007, 0x10000, 0x100009b72, 0xffffffffffffffff, 0x8)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10)
close_range$auto(0x2, 0x8, 0x0)

1m18.484268326s ago: executing program 6 (id=1532):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a9, 0x7)
r1 = epoll_create$auto(0x8800001)
epoll_ctl$auto(r1, 0x1, r0, 0x0)
mmap$auto(0x0, 0xe981, 0x800000000df, 0xeb1, 0xffffffffffffffff, 0x200008000)
recvmmsg$auto(r1, 0x0, 0x2, 0x100000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, r2)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x2a, 0x1, 0x8)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e1000000ff000000deff00"}, 0x58)
prctl$auto(0x3a, 0x81ef, 0x0, 0x2, 0x8000000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

1m16.269176816s ago: executing program 6 (id=1535):
mmap$auto(0x40000, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x0)
unshare$auto(0x40000080)
setfsuid$auto(0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x401, 0x3ff, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
r1 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f00000000c0)=@enable_stats={0x6}, 0xc0000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto_proc_pid_maps_operations_internal(r0, &(0x7f0000000340)=""/4106, 0x100a)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r2, 0x0, 0x5)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-touch3\x00', 0x16ba00, 0x0)
ioctl$auto(r4, 0x80885659, r4)
unshare$auto(0x40000080)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0)
pread64$auto(r5, 0x0, 0x8, 0x8000)
mmap$auto(0x0, 0x400000400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x2, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
semget$auto(0xd, 0x33, 0x6)
r6 = ioctl$auto_TUNSETGROUP(r1, 0x400454ce, &(0x7f0000000180)=0x7)
mmap$auto(0x0, 0x20009, 0x10000df, 0xff, r6, 0x7ffd)
r7 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r7, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7})
pread64$auto(r7, 0x0, 0x7ff, 0xd)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0)

1m12.339450878s ago: executing program 6 (id=1538):
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder0\x00', 0x739280, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x24001, 0x0)
ioctl$auto_SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000380)="33094ea328b1a461f2910ab6c13634d5264a3d7e12272a34166de90fa08ff26b029c77e5de603f51dadce80ab6eb6140b7a963931a93ac1824501b137a4075a740dbd5897f2e2302375d96766691261820b9c3194b93b9451d6bce6fa64f6070390764627d15aa48e77511bd06a85ccf7dec8469bbf6a0ce3e717e2a47801821b4b53fc3a7782fd35a20582ca7f867c428c5045a128d76a2b1712ebbc6a17e21b0d145ef7d2af28ecf450a1d749dfa741eea85bb8fdf8f64ff21280b451e693db6767488c90feaac87aaec793f")
sysfs$auto(0x2, 0x3e, 0x0)
mmap$auto(0x0, 0x80000400008, 0xde, 0x17, 0x47, 0x9)
futex_wait$auto(0x0, 0x903, 0x0, 0x2, 0x0, 0x1)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyz5\x00', 0x335983, 0x0)
write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xffffffffffffff88)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyd7\x00', 0x270442, 0x0)
ioctl$auto(r3, 0x5608, 0x1)
mmap$auto(0x3, 0x1, 0x9, 0x411, r2, 0xb)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8400, 0x0)
msync$auto(0x78afb701, 0x3ad, 0x7)
io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f0000000080)="f70b9ab1b01332df7889499a3abc470b1756d7614e92", 0x3f26)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/tty/ttye0/power/runtime_suspended_time\x00', 0x0, 0x0)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
ioctl$auto(r4, 0x8004b70f, 0x1)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x200, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptysc\x00', 0x220101, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x0, 0x0)
ioctl$auto(r5, 0x4b3a, 0x1)
r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x0, 0x0)
r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x8a000, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000040)={{@raw=0x7, 0x7, 0x3b6, 0x4, "3c70d528a4a70ef32de672c6300000fc2e990000cc3b67a2203555dc971000", @inferred=<r8=>0x0}, 0x7, 0x6, 0x4, @inferred, @enumerated={0x2, 0xd, "7e84e6c428a94d86f1da07124ae3fe2e694832d7218694764444d9dfa511d5246626da11e26b6b267e1a2cb6e1d41331d12d9e78470cd1d0b56d0cd2145340fc", 0x7, 0x7cd04bb4}, "71bc01bc5686085ca15f095a841b25d66c148f52a1ad31a489e59be291336905d64a8f7dbd9775e74d1ee3d57ca9b9ac2d9c4c00fb687b7327a575257b3c0deb"})
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000000c0)={0x6, 0xfc3, 0x2, 0x6, 0x6, <r9=>0xffffffffffffffff})
syz_clone3(&(0x7f00000018c0)={0x20000000, &(0x7f0000000200), &(0x7f0000000240)=<r10=>0x0, &(0x7f0000000280), {0x37}, &(0x7f0000000840)=""/4096, 0x1000, &(0x7f00000001c0)=""/54, &(0x7f0000001880)=[0x0, r9], 0x2}, 0x58)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f0000000140)={0x0, 0x802000, 0x7, @raw=0x3, &(0x7f0000000100)={@inferred=r8, 0xa, 0x9, 0x407, "60d6d361f5c4a25561a55f282f856a43f1f31f9f3bfe9bd3d86a046f1302fe4a4bb437445efbd6340fe7278d", @inferred=r10}, "1a85cd92a3323d310f5aeae8d3d23add5da57fd039d0c05c700600d1319323563cd57741543e1106d8f63829505c678c9bf6"})
socket$nl_generic(0x10, 0x3, 0x10)

1m11.454209953s ago: executing program 6 (id=1540):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4002, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='*?\x00\x00', @ANYBLOB="08002dbd7000fddbdf250e00000005001200400000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xb, 0x1, 0x800)
setsockopt$auto(r0, 0x6, 0xd, 0x0, 0x4)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x880, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x100, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r2)
sendmsg$auto_OVS_DP_CMD_NEW(r2, 0x0, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x200007, 0x8)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x6, 0x2, 0x0)

1m8.561919716s ago: executing program 6 (id=1544):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8)
ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
socket(0x15, 0x5, 0x0)
r1 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3e, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x8bb, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2000]}, 0x202, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedb04000000000000003500060000000800130001000100"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4c800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0xc100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)

1m6.683467573s ago: executing program 6 (id=1547):
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200, 0x0)
ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x0)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840)
madvise$auto(0x110c230000, 0x1, 0x9)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x2)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r2, 0x8000)
select$auto(0x8, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0)
sendfile$auto(r3, r0, 0x0, 0x400000000002)
capget$auto(&(0x7f0000000040)={0x7, 0xffffffffffffffff}, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'})
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0)
writev$auto(r4, &(0x7f0000000240)={0x0, 0x5}, 0xa)

1m5.42531688s ago: executing program 8 (id=1548):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0)
mmap$auto(0xfffffffffffffff8, 0x4, 0x7fff, 0x800000000801e, 0xffffffffffffffff, 0x9)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socket(0x1, 0x3, 0x0)
getsockopt$auto(r2, 0x26, 0x7, 0x0, 0x0)
epoll_create$auto(0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)
syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0xc008aeb0, 0x0)
mmap$auto(0x4, 0xa00006, 0xfffffffffffffffe, 0x100000000040eb2, 0x602, 0x300000000000)
mmap$auto(0x4, 0x4, 0xdf, 0x400000009b72, 0x7, 0x7)
sysfs$auto(0x2, 0x400000000008, 0x0)
r5 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r5, 0x4, 0x0, 0x0, 0x0)

1m2.378955722s ago: executing program 8 (id=1549):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
r1 = socket(0xa, 0x2, 0x0)
cachestat$auto(r1, &(0x7f0000000000)={0x4000000000000009, 0x7fc}, &(0x7f00000000c0)={0x200000200000006, 0x505, 0x20000000008, 0x203, 0x9}, 0x3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0xffffffffffffffff, 0x205, 0x0, 0xeb)
r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0)
ioctl$auto_USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5516, 0x0})
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
r3 = open(0x0, 0x0, 0x408)
socket(0x27, 0x2, 0xfffffffe)
mmap$auto(0x0, 0x3, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r4 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_notify$auto(r4, 0x0)
mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0x3, 0x200000000001, 0x6, 0x0, 0x0)
getdents$auto(r3, 0x0, 0x400018)
mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000)
clone$auto(0x1, 0x1, 0x0, 0x0, 0x2)
madvise$auto(0x0, 0x200007, 0x19)
socket(0x15, 0x5, 0x0)
connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e24, @broadcast}, 0x55)
mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x400)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon23\x00', 0x82640, 0x0)

1m0.483467891s ago: executing program 8 (id=1552):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x24c602, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/controlC2\x00', 0xa802, 0x0)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
setfsuid$auto(0x0)
umount2$auto(&(0x7f0000000200)='.\x00', 0xd)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x551)
read$auto(r1, 0x0, 0x3)
fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d)
rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00')
write$auto(r0, &(0x7f0000000040)='\x00', 0x1)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40026f33, 0x0)
r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
getdents$auto(r3, 0x0, 0x62d4)
mmap$auto(0x0, 0x8000020009, 0xe2, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0xfffffffffffffffc, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x1d, 0x2, 0x3)

59.218861903s ago: executing program 8 (id=1554):
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x2, 0x1)
bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x16, r0, 0xf23, r0}, 0x10)
bpf$auto(0x4, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x2, 0x5c, 0x4, 0x9, 0x80, 0xe4, 0xfffff7fd, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x9, 0xffffffffffffffff, 0x7, 0x9, 0x22, 0x7, 0x10001, 0x0, 0x4, @attach_prog_fd, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x9)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ieee80211/phy2/rfkill4/name\x00', 0x2a100, 0x0)
read$auto(r1, 0x0, 0x20)
sysfs$auto(0x2, 0x12, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}})
r2 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}}, 0x4000, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x1d, 0x2, 0x0)
unshare$auto(0x101)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00')
write$auto(0xffffffffffffffff, 0x0, 0x8000007f)

58.225216679s ago: executing program 8 (id=1556):
mmap$auto(0x3, 0x402000a, 0x1006, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x2, 0x88)
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0)
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x1000000000006, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x2, 0x6)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0)
openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:160/strict_limit\x00', 0x103a42, 0x0)
socketpair$auto(0x4004, 0x8, 0x7, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5411, 0x0)
r4 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, 0x0, 0x68182, 0x0)
read$auto_fops_init_pkru_pkeys(r0, &(0x7f00000002c0)=""/152, 0x98)
writev$auto(r4, 0x0, 0xb)

55.641722771s ago: executing program 8 (id=1560):
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000380))
mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x3)
r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek$auto(r0, 0x7fffffffffffffff, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r1 = fsopen$auto(&(0x7f0000000180)='$\x00', 0x3ff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010026bd7000f955e8de0c"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080)
sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x8, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008000)
socket(0x8, 0x2, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
madvise$auto(0x110d230000, 0x1, 0x3)
read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto_FIOCLEX(r0, 0x5451, 0x9)
unshare$auto(0x40000080)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6e, {r5}}, 0x58)
r6 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r6, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

51.602312456s ago: executing program 38 (id=1547):
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200, 0x0)
ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x0)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840)
madvise$auto(0x110c230000, 0x1, 0x9)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x2)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r2, 0x8000)
select$auto(0x8, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0)
sendfile$auto(r3, r0, 0x0, 0x400000000002)
capget$auto(&(0x7f0000000040)={0x7, 0xffffffffffffffff}, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'})
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0)
writev$auto(r4, &(0x7f0000000240)={0x0, 0x5}, 0xa)

43.472613004s ago: executing program 9 (id=1572):
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ip6gre0\x00'})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_notify$auto(r3, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000100)={0x4e, r2, 0x6, "81639a79e1e7217ac83540adbe76fe26"})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f00000003c0)={{@inferred=r1, 0x9, 0xfffffffc, 0x4, "1e601d545b2de02f9c0821ed07bfde702502bcd610756c9d807ef2778a9613f3a8dec4f1257f4b783caf7f07", @raw=0x3}, 0x1, @enumerated=@item=[0x9, 0x80000001, 0x0, 0x7, 0x81, 0x69c, 0xf, 0x703, 0x1, 0x99, 0x4, 0xb8, 0x5, 0x2, 0x1, 0x0, 0x8, 0x0, 0xdb, 0x3ff, 0x5, 0x0, 0x6, 0x2, 0x2, 0x6, 0xc, 0x8e9a, 0x2, 0xa, 0xfff, 0x7fff, 0xfffffff8, 0x9, 0x6, 0xb6b, 0x80000001, 0x9, 0xe9, 0x4, 0xe0, 0x9, 0x4, 0xd, 0x4, 0x6, 0x101, 0x5, 0x4, 0x8000, 0x3, 0xffffa40b, 0x0, 0x0, 0x2, 0x391, 0x3, 0x7, 0x8, 0x0, 0xea55, 0xab, 0x5e6d, 0x1, 0x7, 0x637c86d4, 0x3, 0xa8d3, 0x0, 0x94, 0x10, 0x5, 0x2, 0xff, 0x7f, 0x80000000, 0xcf05, 0x6, 0x9c, 0x4, 0x7, 0x352, 0x1, 0x1000, 0x8, 0x5bae, 0x0, 0x3, 0x47, 0x0, 0x1, 0x800, 0x9b9, 0x7, 0x4, 0x8000, 0x2, 0x8, 0x2a24f92f, 0xfff, 0x1, 0x5, 0x3, 0x8, 0x3, 0x9, 0x6, 0x5, 0xa480, 0x9, 0xfe, 0x4, 0x5e16, 0x8, 0x1, 0x10, 0x2, 0x0, 0xac92, 0xcc8, 0x1, 0x0, 0x3, 0x7, 0x5, 0x471, 0x5, 0x6], "f590eadfc2e848f43d32b4b3f13c391f1d929ec2eedd8222112234e6b30444527e07c01bd4982f6dbbe2321dff3a91ece95324424cf862dd2d6c3cedbd8fcc88c15d7a30313ec804a040aaeabae18d02838d2f42c36f43922457be913e27ac0133aab147715d231637b5b28944837b52768297e6ae7a65d3697377783680f465"})
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x400301, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
fanotify_init$auto(0x10, 0x6)
ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x6f29, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x80, 0x44)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff)
lsm_list_modules$auto(&(0x7f0000000040)=0x7fff, &(0x7f0000000080), 0x5)
r7 = socket(0x10, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000008)
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8})
write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmsg$auto_OVS_METER_CMD_SET(r5, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="9d33aa451343eae4676e010025bd7000fedbdf7b707f5f91bfbef4001800048014002b800800018085f65a9a08000200", @ANYRES32=0x0, @ANYBLOB="0800010005000000"], 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4000)

41.861694976s ago: executing program 9 (id=1574):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1c0082, 0x0)
r2 = socket(0x2, 0x3, 0x100)
capget$auto(&(0x7f00000000c0)={0x4, <r3=>0xffffffffffffffff}, &(0x7f0000000100)={0x1ff, 0xfffffffa, 0xa4})
r4 = getuid()
waitid$auto_P_PID(0x1, r3, &(0x7f0000000140)={@siginfo_0_0={0x20000, 0x1, 0x40, @_rt={0x0, r4, @sival_int=0x3}}}, 0xffff8000, &(0x7f0000000240)={{0x20000001, 0x5e7}, {0x7ff, 0x40000000001}, 0x3, 0x9, 0x6, 0xfcad, 0x9, 0xb90, 0x7, 0x3, 0x7, 0x8, 0x5, 0x1, 0x1, 0xfffffffffffffc00})
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
syz_open_procfs$namespace(0x0, 0x0)
syz_genetlink_get_family_id$auto_thermal(0x0, r2)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r2, 0x0, 0x4048005)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18)
capset$auto(&(0x7f00000001c0)={0x5, <r5=>r3}, &(0x7f00000003c0)={0x9, 0x4, 0x35})
shmctl$auto_IPC_SET(0x1, 0x1, &(0x7f00000004c0)={{0x8, 0xffffffffffffffff, 0x0, 0x22, 0x7fffffff, 0x9, 0x4}, 0x0, 0x5a3cbc6a, 0x2, 0x4, @inferred=r5, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000380), &(0x7f0000000400)="bad40ffd72211b15712af6fb4d4dfa686c24f389f6e99151081151c0060adab51093c273df92cd61f007bc6b0c3c205f7877b2032ca17877a160e60691f0980584885c934e7d1294d8006c904f"})
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x80ffff, 0x400000ffb, 0x200000957, 0x3, 0x8000)
r6 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r6, 0x0, 0x1)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r7, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x2)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x400007, 0xd3e, 0x1d, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2)
socket(0x10, 0x80002, 0x0)
openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

40.545859245s ago: executing program 39 (id=1560):
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000380))
mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x3)
r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek$auto(r0, 0x7fffffffffffffff, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r1 = fsopen$auto(&(0x7f0000000180)='$\x00', 0x3ff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010026bd7000f955e8de0c"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080)
sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x8, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008000)
socket(0x8, 0x2, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
madvise$auto(0x110d230000, 0x1, 0x3)
read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto_FIOCLEX(r0, 0x5451, 0x9)
unshare$auto(0x40000080)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6e, {r5}}, 0x58)
r6 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r6, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

38.006069512s ago: executing program 9 (id=1579):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x2008, 0x0)
mmap$auto(0x0, 0x4000002, 0xfffffff7fffffe01, 0x8051, 0x3, 0x0)
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE2(r0, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d")
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040))
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_notify$auto(r2, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon17\x00', 0x220080, 0x0)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da)
r3 = getuid()
keyctl$auto(0x421f, 0x1, r3, 0x3, 0x1)
mlockall$auto(0x800000000000005)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', <r6=>0x0})
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3f}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

36.544254681s ago: executing program 2 (id=1565):
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x2, 0x1)
bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x16, r0, 0xf23, r0}, 0x10)
bpf$auto(0x4, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x2, 0x5c, 0x4, 0x9, 0x80, 0xe4, 0xfffff7fd, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x9, 0xffffffffffffffff, 0x7, 0x9, 0x22, 0x7, 0x10001, 0x0, 0x4, @attach_prog_fd, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x9)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ieee80211/phy2/rfkill4/name\x00', 0x2a100, 0x0)
read$auto(r1, 0x0, 0x20)
sysfs$auto(0x2, 0x12, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}})
r2 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}}, 0x4000, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x1d, 0x2, 0x0)
unshare$auto(0x101)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00')
write$auto(0xffffffffffffffff, 0x0, 0x8000007f)

35.961052944s ago: executing program 9 (id=1581):
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x40, 0x0)
ioctl$auto(r0, 0x9000643f, 0xc35)

35.726623732s ago: executing program 9 (id=1583):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0xffffffffffffffff, r0, 0x1)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
socket(0xa, 0x1, 0x84)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", <r3=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
listen$auto(0x3, 0x83)
close_range$auto(0x2, 0x8, 0x0)
socket(0xf, 0x3, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0xffffffffa75983bd, 0x3a, 0xfffffff1)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)

35.442693131s ago: executing program 2 (id=1584):
preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x1)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0)
unshare$auto(0x40000080)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x80a03, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/022/001\x00', 0x400400, 0x0)
read$auto_usbdev_file_operations_usb(r1, &(0x7f0000000180)=""/38, 0x26)
socket(0x2c, 0x80003, 0x0)
r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x0, 0x0)
r3 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0)
write$auto(r4, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d)
close_range$auto(0x2, 0x8000, 0xffffffa9)
ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x44000, 0x0)
read$auto(r5, 0x0, 0x20)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xffffffff]}, 0x0)
syz_clone(0x611, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x2000110c230000, 0x1fffffd, 0xb)
name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', 0x0, 0x0, 0x1001)

33.184286314s ago: executing program 2 (id=1586):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/can/stats\x00', 0x121040, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffe)
sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mq_getsetattr$auto(0x3, 0x0, &(0x7f0000000100)={0x8, 0x8, 0x2, 0x1})
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x4, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0)
pread64$auto(r2, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0x2)
write$auto(r0, &(0x7f0000000040)='\x00', 0x2)
clone$auto(0x1, 0x0, 0x0, 0x0, 0x42)
preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0)
unshare$auto(0x40000080)

31.516991553s ago: executing program 9 (id=1593):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x24c602, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/controlC2\x00', 0xa802, 0x0)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
setfsuid$auto(0x0)
umount2$auto(&(0x7f0000000200)='.\x00', 0xd)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x551)
read$auto(r1, 0x0, 0x3)
fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d)
rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00')
write$auto(r0, &(0x7f0000000040)='\x00', 0x1)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40026f33, 0x0)
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mmap$auto(0x0, 0x8000020009, 0xe2, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0xfffffffffffffffc, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x1d, 0x2, 0x3)

30.409137647s ago: executing program 2 (id=1600):
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/block/nbd2/sched/read2_next_rq\x00', 0x103702, 0x0)
readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1)

30.230797563s ago: executing program 2 (id=1601):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0xffffffffffffffff, r0, 0x1)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
socket(0xa, 0x1, 0x84)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", <r3=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
listen$auto(0x3, 0x83)
close_range$auto(0x2, 0x8, 0x0)
socket(0xf, 0x3, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0xffffffffa75983bd, 0x3a, 0xfffffff1)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)

26.589982975s ago: executing program 2 (id=1603):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001c00)=""/4111, 0x100f)
openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_table1\x00', 0x408041, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x207ff, 0x8}, {0x10002, 0xffff, 0x5}, {0x0, 0x0, 0x7}]})
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
timer_create$auto(0x2, 0x0, 0x0)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x80, 0x83}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0x40)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4)
r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
pread64$auto(r4, 0x0, 0xffffff7f, 0x8000000000009)
read$auto_mon_fops_text_t_mon_text(r4, 0x0, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x4800, 0x0)

16.074886057s ago: executing program 40 (id=1593):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x24c602, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/controlC2\x00', 0xa802, 0x0)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
setfsuid$auto(0x0)
umount2$auto(&(0x7f0000000200)='.\x00', 0xd)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x551)
read$auto(r1, 0x0, 0x3)
fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d)
rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00')
write$auto(r0, &(0x7f0000000040)='\x00', 0x1)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40026f33, 0x0)
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mmap$auto(0x0, 0x8000020009, 0xe2, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0xfffffffffffffffc, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x1d, 0x2, 0x3)

11.549966474s ago: executing program 41 (id=1603):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001c00)=""/4111, 0x100f)
openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_table1\x00', 0x408041, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x207ff, 0x8}, {0x10002, 0xffff, 0x5}, {0x0, 0x0, 0x7}]})
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
timer_create$auto(0x2, 0x0, 0x0)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x80, 0x83}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0x40)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4)
r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
pread64$auto(r4, 0x0, 0xffffff7f, 0x8000000000009)
read$auto_mon_fops_text_t_mon_text(r4, 0x0, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x4800, 0x0)

10.05516304s ago: executing program 1 (id=1643):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x502, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
preadv$auto(r0, &(0x7f0000000180)={0x0, 0x1003}, 0xa, 0x1, 0x800000000000005)

6.388280865s ago: executing program 1 (id=1654):
statmount$auto(0x0, &(0x7f0000000180)={0x100a, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0x400, 0x8, 0x0, 0x1, 0x0, 0x864, 0xe, 0x22000, 0x8, 0x3, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4000002, 0x0, 0x0, 0x3, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x9, 0xd)
r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r0, 0x2, &(0x7f0000000380)="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")
ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd05, &(0x7f00000001c0))

5.150762051s ago: executing program 3 (id=1645):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x3, 0x8, 0xfff)
prctl$auto(0x7, 0x1, 0x0, 0x3, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x40000c, 0xffffffff, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = socket(0xa, 0x5, 0x84)
r2 = getsockopt$auto(r1, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0xd0)
write$auto(0x3, 0x0, 0x1)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="1b0025bd7000f9dbdf2503000000040008001400038010000c800c00098008003b00ac1e000112000100898771f1c19f17790485908286dd00000400028004000800"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x400c880)
write$auto(0x3, 0x0, 0xfffffdef)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={<r3=>0x19, <r4=>0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r5, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x1028, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x4}, @NL80211_ATTR_TIMED_OUT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8855}, 0x10)
sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4820}, 0x40008015)
r8 = syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x20002, 0x0)
bind$auto(0xffffffffffffffff, 0x0, 0x6b)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0x100000000)
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x20000001005}, 0x0, &(0x7f0000000040)={&(0x7f0000000140)="dc1d31fbfdee9e57afe1c51f9072d3387aba2cd19b7c5ea819b467735e47d5d3d5651a", 0xfffffffc}, 0x4, 0x0)
sendmsg$auto_NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=r8, @ANYBLOB="234389a12297a1806072b40da3e7de50eefe653b"], 0x7c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000004)

5.138168899s ago: executing program 1 (id=1658):
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x2, 0x1)
bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x16, r0, 0xf23, r0}, 0x10)
bpf$auto(0x4, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x2, 0x5c, 0x4, 0x9, 0x80, 0xe4, 0xfffff7fd, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x9, 0xffffffffffffffff, 0x7, 0x9, 0x22, 0x7, 0x10001, 0x0, 0x4, @attach_prog_fd, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x9)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ieee80211/phy2/rfkill4/name\x00', 0x2a100, 0x0)
read$auto(r1, 0x0, 0x20)
sysfs$auto(0x2, 0x12, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}})
r2 = socket(0x2b, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}}, 0x4000, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x1d, 0x2, 0x0)
unshare$auto(0x101)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00')
write$auto(0xffffffffffffffff, 0x0, 0x8000007f)

4.370615863s ago: executing program 1 (id=1653):
preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x1)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0)
unshare$auto(0x40000080)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x80a03, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/022/001\x00', 0x400400, 0x0)
read$auto_usbdev_file_operations_usb(r1, &(0x7f0000000180)=""/38, 0x26)
socket(0x2c, 0x80003, 0x0)
r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x0, 0x0)
r3 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0)
write$auto(r4, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d)
close_range$auto(0x2, 0x8000, 0xffffffa9)
ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x44000, 0x0)
read$auto(r5, 0x0, 0x20)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xffffffff]}, 0x0)
syz_clone(0x611, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x2000110c230000, 0x1fffffd, 0xb)
name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', 0x0, 0x0, 0x1001)

2.821639492s ago: executing program 1 (id=1660):
unshare$auto(0x40000080)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000100)={0x0, 0x6}, 0xf, 0xfffffffffffffffe, 0x8000000000000, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000)
sysfs$auto(0x2, 0x43, 0x0)
add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
ioctl$auto(r2, 0x64c7, 0x1e2)
close_range$auto(r1, r0, 0xff)
listen$auto(r0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0)
close_range$auto(0xffffffffffffffff, 0xa, 0x0)
mmap$auto(0x0, 0x6, 0x200, 0xebd, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x9)
madvise$auto(0x0, 0xffffff7fffff0001, 0x15)
madvise$auto(0x0, 0x1, 0x2)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r3, 0x1269, 0x0)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x48002, 0x0)
ioctl$auto_MEMERASE64(r4, 0x40104d14, &(0x7f0000000000)={0x2})
ioctl$auto_MEMGETINFO(r4, 0x80204d01, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

2.821563152s ago: executing program 0 (id=1661):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x28, 0x5, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
setsockopt$auto(0x3, 0x1, 0x2d, 0x0, 0x8)

2.821514817s ago: executing program 7 (id=1662):
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
madvise$auto(0x0, 0xffffff7fffff0005, 0x8)
r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0)
read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f00000002c0)=""/190, 0xfffffe39)

2.228899464s ago: executing program 0 (id=1663):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/016/001\x00', 0xa901, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240), 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0})
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0)

1.957698889s ago: executing program 7 (id=1664):
close_range$auto(0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x5607, r0)

1.919819001s ago: executing program 0 (id=1665):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x10040026f33, 0x0)

1.69645844s ago: executing program 3 (id=1666):
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6})
openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000002540), 0x48001, 0x0)

1.689813565s ago: executing program 7 (id=1667):
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000)
poll$auto(0x0, 0x7f, 0x9)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b46, 0x1)

1.689115268s ago: executing program 0 (id=1668):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ustat$auto(0x801, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0)
ioctl$auto(r0, 0xc0285629, r0)

1.431340079s ago: executing program 0 (id=1669):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
io_uring_setup$auto(0x85, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x3b71, 0x0)

1.421173698s ago: executing program 3 (id=1670):
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x0, 0x0)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400)
ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080))

1.350522767s ago: executing program 7 (id=1671):
mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r1, 0x2272, r0)

1.096956512s ago: executing program 3 (id=1672):
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1)
setfsuid$auto(0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r0, 0x401070cd, 0x5)

1.020795547s ago: executing program 7 (id=1673):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/016/001\x00', 0xa901, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240), 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0})
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0)

734.464383ms ago: executing program 3 (id=1674):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0)
ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0)

604.987252ms ago: executing program 0 (id=1675):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x3, 0x8, 0xfff)
prctl$auto(0x7, 0x1, 0x0, 0x3, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x40000c, 0xffffffff, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = socket(0xa, 0x5, 0x84)
r2 = getsockopt$auto(r1, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0xd0)
write$auto(0x3, 0x0, 0x1)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="1b0025bd7000f9dbdf2503000000040008001400038010000c800c00098008003b00ac1e000112000100898771f1c19f17790485908286dd00000400028004000800"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x400c880)
write$auto(0x3, 0x0, 0xfffffdef)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={<r3=>0x19, <r4=>0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r5, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x1028, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x4}, @NL80211_ATTR_TIMED_OUT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8855}, 0x10)
sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4820}, 0x40008015)
r8 = syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x20002, 0x0)
bind$auto(0xffffffffffffffff, 0x0, 0x6b)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0x100000000)
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x20000001005}, 0x0, &(0x7f0000000040)={&(0x7f0000000140)="dc1d31fbfdee9e57afe1c51f9072d3387aba2cd19b7c5ea819b467735e47d5d3d5651a", 0xfffffffc}, 0x4, 0x0)
sendmsg$auto_NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=r8, @ANYBLOB="234389a12297a1806072b40da3e7de50eefe653b"], 0x7c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000004)

592.765891ms ago: executing program 7 (id=1676):
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x2, 0x1)
bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x16, r0, 0xf23, r0}, 0x10)
bpf$auto(0x4, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x2, 0x5c, 0x4, 0x9, 0x80, 0xe4, 0xfffff7fd, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x9, 0xffffffffffffffff, 0x7, 0x9, 0x22, 0x7, 0x10001, 0x0, 0x4, @attach_prog_fd, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x9)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ieee80211/phy2/rfkill4/name\x00', 0x2a100, 0x0)
read$auto(r1, 0x0, 0x20)
sysfs$auto(0x2, 0x12, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}}, 0x4000, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x1d, 0x2, 0x0)
unshare$auto(0x101)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00')
write$auto(0xffffffffffffffff, 0x0, 0x8000007f)

0s ago: executing program 3 (id=1677):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x141241, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000340)={0x14, r1, 0x401, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000)

kernel console output (not intermixed with test programs):

7] vivid-007: Generate SCR: true
[  320.364557][ T9957] tpg source WxH: 320x240 (Y'CbCr)
[  320.379121][ T9957] tpg field: 1
[  320.399826][ T9957] tpg crop: (0,0)/320x240
[  320.413637][ T9957] tpg compose: (0,0)/320x240
[  320.423979][ T9957] tpg colorspace: 8
[  320.432038][ T9957] tpg transfer function: 0/0
[  320.439988][ T9957] tpg Y'CbCr encoding: 0/0
[  320.464721][ T9957] tpg quantization: 0/0
[  320.474368][ T9957] tpg RGB range: 0/2
[  320.485227][ T9957] vivid-007: ==================  END STATUS  ==================
[  321.824512][ T9985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1121'.
[  321.852000][ T9985] bridge0: entered promiscuous mode
[  321.857795][ T9985] bridge0: entered allmulticast mode
[  322.814118][T10002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1116'.
[  324.904614][ T5632] Bluetooth: hci2: unexpected event 0x0e length: 0 < 3
[  326.054892][T10050] can: request_module (can-proto-5) failed.
[  328.796157][T10096] random: crng reseeded on system resumption
[  331.285811][   T30] audit: type=1806 audit(1782864807.261:12): xattr="." res=0
[  331.337400][ T5632] Bluetooth: hci0: unexpected event for opcode 0x7c89
[  331.956581][   T30] audit: type=1800 audit(1782864807.935:13): pid=10126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="SYSVff7fffff" dev="tmpfs" ino=0 res=0 errno=0
[  332.079073][T10125] Process accounting resumed
[  333.630337][   T30] audit: type=1800 audit(1782864809.624:14): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1148" name="dbroot" dev="configfs" ino=31039 res=0 errno=0
[  333.796752][T10154] ERROR: Out of memory at tomoyo_memory_ok.
[  334.269176][T10167] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  334.880789][T10192] futex_wake_op: syz.1.1156 tries to shift op by -2048; fix this program
[  335.805791][T10204] block nbd0: NBD_DISCONNECT
[  336.905788][T10214] bond0: Unable to set down delay as MII monitoring is disabled
[  337.709992][T10207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.013163][   T50] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  340.381586][ T5632] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  341.096664][ T5641] Bluetooth: hci0: command 0x0c1a tx timeout
[  342.600914][T10292] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ�¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚'
[  343.167451][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout
[  343.192864][T10304] syz.1.1175 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  344.437813][T10314] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ�¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚'
[  344.960565][T10321] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10321]
[  345.478295][T10329] FAULT_INJECTION: forcing a failure.
[  345.478295][T10329] name failslab, interval 1, probability 0, space 0, times 0
[  345.508733][T10329] CPU: 1 UID: 0 PID: 10329 Comm: syz.0.1179 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  345.508783][T10329] Tainted: [L]=SOFTLOCKUP
[  345.508794][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  345.508813][T10329] Call Trace:
[  345.508824][T10329]  <TASK>
[  345.508837][T10329]  dump_stack_lvl+0x100/0x190
[  345.508882][T10329]  should_fail_ex.cold+0x5/0xa
[  345.508928][T10329]  should_failslab+0xc2/0x120
[  345.508979][T10329]  __kmalloc_cache_noprof+0x91/0x6c0
[  345.509016][T10329]  ? snd_seq_pool_new+0x44/0x230
[  345.509075][T10329]  ? __pfx_snd_seq_open+0x10/0x10
[  345.509120][T10329]  snd_seq_pool_new+0x44/0x230
[  345.509174][T10329]  snd_seq_fifo_new+0x5a/0x270
[  345.509210][T10329]  snd_seq_open+0x3d2/0x540
[  345.509255][T10329]  ? __pfx_snd_seq_open+0x10/0x10
[  345.509307][T10329]  snd_open+0x201/0x450
[  345.509358][T10329]  ? __pfx_snd_open+0x10/0x10
[  345.509406][T10329]  chrdev_open+0x234/0x6a0
[  345.509441][T10329]  ? __pfx_apparmor_file_open+0x10/0x10
[  345.509479][T10329]  ? __pfx_chrdev_open+0x10/0x10
[  345.509517][T10329]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  345.509567][T10329]  do_dentry_open+0x6ab/0x14d0
[  345.509601][T10329]  ? __pfx_chrdev_open+0x10/0x10
[  345.509646][T10329]  vfs_open+0x82/0x3f0
[  345.509695][T10329]  path_openat+0x2873/0x4280
[  345.509749][T10329]  ? __pfx_path_openat+0x10/0x10
[  345.509795][T10329]  do_file_open+0x20e/0x430
[  345.509836][T10329]  ? __pfx_do_file_open+0x10/0x10
[  345.509907][T10329]  ? alloc_fd+0x471/0x7a0
[  345.509948][T10329]  ? do_getname+0x191/0x390
[  345.509999][T10329]  do_sys_openat2+0x10f/0x1e0
[  345.510048][T10329]  ? __pfx_do_sys_openat2+0x10/0x10
[  345.510100][T10329]  ? __fget_files+0x21f/0x3d0
[  345.510141][T10329]  __x64_sys_openat+0x12d/0x210
[  345.510193][T10329]  ? __pfx___x64_sys_openat+0x10/0x10
[  345.510259][T10329]  do_syscall_64+0x115/0x840
[  345.510299][T10329]  ? clear_bhb_loop+0x40/0x90
[  345.510343][T10329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.510379][T10329] RIP: 0033:0x7fd2c659ce59
[  345.510408][T10329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  345.510441][T10329] RSP: 002b:00007fd2c73d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  345.510475][T10329] RAX: ffffffffffffffda RBX: 00007fd2c6816090 RCX: 00007fd2c659ce59
[  345.510497][T10329] RDX: 0000000000020000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  345.510520][T10329] RBP: 00007fd2c6632e6f R08: 0000000000000000 R09: 0000000000000000
[  345.510541][T10329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  345.510561][T10329] R13: 00007fd2c6816128 R14: 00007fd2c6816090 R15: 00007fff02922988
[  345.510605][T10329]  </TASK>
[  347.180653][T10349] =======================================================
[  347.180653][T10349] WARNING: The mand mount option has been deprecated and
[  347.180653][T10349]          and is ignored by this kernel. Remove the mand
[  347.180653][T10349]          option from the mount to silence this warning.
[  347.180653][T10349] =======================================================
[  348.943516][T10360] Process accounting paused
[  349.078263][T10375] bond0: invalid ARP target specified
[  349.263398][T10375] nbd: socks must be embedded in a SOCK_ITEM attr
[  349.350458][T10375] block nbd0: shutting down sockets
[  349.853518][T10385] netlink: 'syz.1.1193': attribute type 22 has an invalid length.
[  349.897665][T10385] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1193'.
[  354.634000][T10449] can: request_module (can-proto-0) failed.
[  355.886100][T10471] capability: warning: `syz.3.1209' uses deprecated v2 capabilities in a way that may be insecure
[  356.032361][   T30] audit: type=1800 audit(1843104530.057:15): pid=10476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1209" name="dbroot" dev="configfs" ino=32363 res=0 errno=0
[  357.450548][T10504] netlink: 'syz.3.1216': attribute type 1 has an invalid length.
[  357.535342][T10504] syz.3.1216 (10504): /proc/10502/oom_adj is deprecated, please use /proc/10502/oom_score_adj instead.
[  357.618239][T10504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'.
[  357.761098][T10504] virt_wifi0: entered allmulticast mode
[  359.690277][T10537] ecryptfs_parse_packet_length: Error parsing packet length
[  359.740814][T10537] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22]
[  361.914784][T10569] FAULT_INJECTION: forcing a failure.
[  361.914784][T10569] name failslab, interval 1, probability 0, space 0, times 0
[  361.930417][T10569] CPU: 0 UID: 0 PID: 10569 Comm: syz.3.1227 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  361.930468][T10569] Tainted: [L]=SOFTLOCKUP
[  361.930478][T10569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  361.930501][T10569] Call Trace:
[  361.930511][T10569]  <TASK>
[  361.930522][T10569]  dump_stack_lvl+0x100/0x190
[  361.930569][T10569]  should_fail_ex.cold+0x5/0xa
[  361.930612][T10569]  should_failslab+0xc2/0x120
[  361.930657][T10569]  kmem_cache_alloc_noprof+0x91/0x6a0
[  361.930693][T10569]  ? __proc_create+0xc1/0x8f0
[  361.930722][T10569]  ? __proc_create+0xc1/0x8f0
[  361.930750][T10569]  ? __proc_create+0x247/0x8f0
[  361.930785][T10569]  __proc_create+0x247/0x8f0
[  361.930815][T10569]  ? __pfx___proc_create+0x10/0x10
[  361.930850][T10569]  ? _raw_write_unlock+0x28/0x50
[  361.930894][T10569]  ? proc_register+0x559/0x8a0
[  361.930937][T10569]  proc_create_reg+0x75/0x170
[  361.930972][T10569]  proc_create_data+0x86/0x110
[  361.931005][T10569]  ? __pfx_proc_create_data+0x10/0x10
[  361.931037][T10569]  ? net_generic+0xea/0x2a0
[  361.931073][T10569]  gss_svc_init_net+0x2e7/0x640
[  361.931103][T10569]  ? __pfx_canbcm_pernet_init+0x10/0x10
[  361.931138][T10569]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[  361.931173][T10569]  ops_init+0x1e2/0x5f0
[  361.931213][T10569]  setup_net+0x118/0x3a0
[  361.931249][T10569]  ? __pfx_setup_net+0x10/0x10
[  361.931285][T10569]  ? mutex_init_lockdep+0xf1/0x120
[  361.931321][T10569]  copy_net_ns+0x46f/0x7c0
[  361.931362][T10569]  create_new_namespaces+0x3ea/0xac0
[  361.931402][T10569]  unshare_nsproxy_namespaces+0xf2/0x220
[  361.931439][T10569]  ksys_unshare+0x438/0xab0
[  361.931480][T10569]  ? __pfx_ksys_unshare+0x10/0x10
[  361.931530][T10569]  __x64_sys_unshare+0x31/0x40
[  361.931568][T10569]  do_syscall_64+0x115/0x840
[  361.931593][T10569]  ? clear_bhb_loop+0x40/0x90
[  361.931631][T10569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.931660][T10569] RIP: 0033:0x7fa97579ce59
[  361.931684][T10569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  361.931713][T10569] RSP: 002b:00007fa9766e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  361.931746][T10569] RAX: ffffffffffffffda RBX: 00007fa975a16180 RCX: 00007fa97579ce59
[  361.931765][T10569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  361.931783][T10569] RBP: 00007fa975832e6f R08: 0000000000000000 R09: 0000000000000000
[  361.931801][T10569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  361.931820][T10569] R13: 00007fa975a16218 R14: 00007fa975a16180 R15: 00007ffd666b5b88
[  361.931859][T10569]  </TASK>
[  362.802266][T10563] Process accounting paused
[  362.958796][   T30] audit: type=1800 audit(1843104537.013:16): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1230" name="dbroot" dev="configfs" ino=33642 res=0 errno=0
[  363.038454][T10581] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5640] was attempted by ""[10581]
[  363.106491][   T30] audit: type=1400 audit(1843104537.174:17): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=10579 comm="syz.2.1231"
[  363.981306][ T5641] Bluetooth: hci1: unexpected event for opcode 0x7c89
[  364.219305][T10594] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  364.322724][T10594] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  364.376017][T10594] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  364.464663][T10594] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  364.674421][T10594] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  365.669292][ T5641] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  365.676941][ T5641] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff
[  366.245123][ T5641] Bluetooth: hci0: command 0x0c1a tx timeout
[  366.324989][ T5641] Bluetooth: hci1: command 0x0c1a tx timeout
[  366.403710][ T5641] Bluetooth: hci2: command 0x0c1a tx timeout
[  366.561341][   T24] Process accounting resumed
[  366.725029][ T5641] Bluetooth: hci3: command 0x0c1a tx timeout
[  366.745733][T10613] Process accounting resumed
[  367.335001][T10644] smpboot: CPU 1 is now offline
[  367.663343][T10647] syz.2.1242(10647): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  368.473011][ T5641] Bluetooth: hci2: command 0x0c1a tx timeout
[  369.233980][T10670] FAULT_INJECTION: forcing a failure.
[  369.233980][T10670] name failslab, interval 1, probability 0, space 0, times 0
[  369.256553][T10662] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1243'.
[  369.415231][T10670] CPU: 0 UID: 0 PID: 10670 Comm: syz.3.1244 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  369.415270][T10670] Tainted: [L]=SOFTLOCKUP
[  369.415279][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  369.415293][T10670] Call Trace:
[  369.415301][T10670]  <TASK>
[  369.415310][T10670]  dump_stack_lvl+0x100/0x190
[  369.415345][T10670]  should_fail_ex.cold+0x5/0xa
[  369.415378][T10670]  should_failslab+0xc2/0x120
[  369.415413][T10670]  __kmalloc_noprof+0xfc/0x820
[  369.415442][T10670]  ? trace_kmem_cache_alloc+0xdd/0x100
[  369.415477][T10670]  ? lsm_blob_alloc+0x68/0x90
[  369.415519][T10670]  lsm_blob_alloc+0x68/0x90
[  369.415565][T10670]  security_sk_alloc+0x2d/0x290
[  369.415593][T10670]  sk_prot_alloc+0x1d1/0x2a0
[  369.415630][T10670]  sk_alloc+0x36/0xe80
[  369.415657][T10670]  inet6_create+0x385/0x12b0
[  369.415699][T10670]  ? inet6_create+0x7f/0x12b0
[  369.415738][T10670]  __sock_create+0x339/0x860
[  369.415781][T10670]  __sys_socket+0x14d/0x260
[  369.415820][T10670]  ? __pfx___sys_socket+0x10/0x10
[  369.415867][T10670]  __x64_sys_socket+0x72/0xb0
[  369.415904][T10670]  ? lockdep_hardirqs_on+0x78/0x100
[  369.415943][T10670]  do_syscall_64+0x115/0x840
[  369.415963][T10670]  ? clear_bhb_loop+0x40/0x90
[  369.415993][T10670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.416018][T10670] RIP: 0033:0x7fa97579ce59
[  369.416038][T10670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  369.416062][T10670] RSP: 002b:00007fa97670a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  369.416085][T10670] RAX: ffffffffffffffda RBX: 00007fa975a16090 RCX: 00007fa97579ce59
[  369.416101][T10670] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a
[  369.416115][T10670] RBP: 00007fa975832e6f R08: 0000000000000000 R09: 0000000000000000
[  369.416130][T10670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  369.416144][T10670] R13: 00007fa975a16128 R14: 00007fa975a16090 R15: 00007ffd666b5b88
[  369.416174][T10670]  </TASK>
[  370.245018][T10678] random: crng reseeded on system resumption
[  370.650468][T10685] input: f¬
 as /devices/virtual/input/input9
[  374.976768][T10737] FAULT_INJECTION: forcing a failure.
[  374.976768][T10737] name failslab, interval 1, probability 0, space 0, times 0
[  375.085538][T10737] CPU: 0 UID: 0 PID: 10737 Comm: syz.2.1253 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  375.085577][T10737] Tainted: [L]=SOFTLOCKUP
[  375.085585][T10737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  375.085600][T10737] Call Trace:
[  375.085608][T10737]  <TASK>
[  375.085617][T10737]  dump_stack_lvl+0x100/0x190
[  375.085653][T10737]  should_fail_ex.cold+0x5/0xa
[  375.085685][T10737]  should_failslab+0xc2/0x120
[  375.085720][T10737]  __kmalloc_cache_noprof+0x91/0x6c0
[  375.085745][T10737]  ? __pfx___debug_object_init+0x10/0x10
[  375.085781][T10737]  ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200
[  375.085822][T10737]  vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200
[  375.085866][T10737]  vidtv_mux_create_pid_ctx_once+0xe6/0x140
[  375.085903][T10737]  vidtv_mux_init+0x740/0xbf0
[  375.085947][T10737]  vidtv_start_feed+0x34e/0x500
[  375.085988][T10737]  ? __pfx_vidtv_start_feed+0x10/0x10
[  375.086029][T10737]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  375.086087][T10737]  dmx_section_feed_start_filtering+0x3a8/0x660
[  375.086123][T10737]  dvb_dmxdev_filter_start+0x767/0xdd0
[  375.086170][T10737]  dvb_demux_do_ioctl+0xe64/0x1200
[  375.086218][T10737]  dvb_usercopy+0x167/0x340
[  375.086250][T10737]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  375.086290][T10737]  ? __pfx_dvb_usercopy+0x10/0x10
[  375.086335][T10737]  ? __fget_files+0x21f/0x3d0
[  375.086363][T10737]  dvb_demux_ioctl+0x29/0x40
[  375.086397][T10737]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  375.086431][T10737]  __x64_sys_ioctl+0x18e/0x210
[  375.086469][T10737]  do_syscall_64+0x115/0x840
[  375.086490][T10737]  ? clear_bhb_loop+0x40/0x90
[  375.086519][T10737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.086544][T10737] RIP: 0033:0x7f197799ce59
[  375.086564][T10737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.086588][T10737] RSP: 002b:00007f1978922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  375.086611][T10737] RAX: ffffffffffffffda RBX: 00007f1977c16090 RCX: 00007f197799ce59
[  375.086627][T10737] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006
[  375.086641][T10737] RBP: 00007f1977a32e6f R08: 0000000000000000 R09: 0000000000000000
[  375.086656][T10737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  375.086670][T10737] R13: 00007f1977c16128 R14: 00007f1977c16090 R15: 00007ffca1737338
[  375.086701][T10737]  </TASK>
[  377.153599][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  377.160115][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  377.977707][T10756] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1256'.
[  378.342015][T10768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1259'.
[  379.498780][T10755] Process accounting resumed
[  379.968400][T10784] can: request_module (can-proto-3) failed.
[  382.316812][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1270'.
[  382.488281][T10826] ipvlan1: entered promiscuous mode
[  382.622948][T10826] ipvlan1: entered allmulticast mode
[  382.683773][T10826] veth0_vlan: entered allmulticast mode
[  383.012070][T10835] random: crng reseeded on system resumption
[  383.895549][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1274'.
[  384.175762][T10851] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1274'.
[  385.491487][T10871] hub 3-0:1.0: USB hub found
[  385.610773][T10871] hub 3-0:1.0: 1 port detected
[  385.785786][T10881] tipc: Started in network mode
[  385.800886][T10881] tipc: Node identity ee00, cluster identity 4711
[  385.829132][T10881] tipc: Node number set to 60928
[  385.965169][T10871] usb usb3: authorized to connect
[  387.319021][T10896] can: request_module (can-proto-0) failed.
[  389.161202][T10928] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1289'.
[  389.525671][T10943] FAULT_INJECTION: forcing a failure.
[  389.525671][T10943] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  389.584178][T10934] can: request_module (can-proto-3) failed.
[  389.594597][T10943] CPU: 0 UID: 0 PID: 10943 Comm: syz.3.1292 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  389.594636][T10943] Tainted: [L]=SOFTLOCKUP
[  389.594645][T10943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  389.594660][T10943] Call Trace:
[  389.594668][T10943]  <TASK>
[  389.594676][T10943]  dump_stack_lvl+0x100/0x190
[  389.594712][T10943]  should_fail_ex.cold+0x5/0xa
[  389.594740][T10943]  ? prepare_alloc_pages+0x16d/0x5f0
[  389.594778][T10943]  should_fail_alloc_page+0xeb/0x140
[  389.594815][T10943]  prepare_alloc_pages+0x1f0/0x5f0
[  389.594851][T10943]  ? rcu_is_watching+0x12/0xc0
[  389.594890][T10943]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  389.594934][T10943]  ? find_held_lock+0x2b/0x80
[  389.594965][T10943]  ? rcu_read_unlock+0x17/0x60
[  389.595002][T10943]  ? rcu_read_unlock+0x17/0x60
[  389.595039][T10943]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  389.595066][T10943]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  389.595098][T10943]  ? rcu_is_watching+0x12/0xc0
[  389.595127][T10943]  ? trace_mm_page_alloc+0x164/0x1c0
[  389.595163][T10943]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[  389.595205][T10943]  ? __lock_acquire+0x49f/0x1a40
[  389.595226][T10943]  ? __css_rstat_updated+0x1ce/0x5a0
[  389.595269][T10943]  ? __lock_acquire+0x49f/0x1a40
[  389.595290][T10943]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  389.595329][T10943]  ? policy_nodemask+0xed/0x4f0
[  389.595367][T10943]  alloc_pages_mpol+0x1fb/0x540
[  389.595408][T10943]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  389.595444][T10943]  ? find_held_lock+0x2b/0x80
[  389.595474][T10943]  ? __pud_alloc+0x4f6/0x690
[  389.595509][T10943]  ? __pud_alloc+0x4f6/0x690
[  389.595547][T10943]  alloc_pages_noprof+0x1a/0x160
[  389.595571][T10943]  __pmd_alloc+0x3b/0x950
[  389.595606][T10943]  ? __pud_alloc+0x4fb/0x690
[  389.595643][T10943]  walk_to_pmd+0x3a3/0x4c0
[  389.595682][T10943]  get_locked_pte+0x25/0xc0
[  389.595719][T10943]  map_ldt_struct+0x3c1/0xa70
[  389.595762][T10943]  ? __pfx_map_ldt_struct+0x10/0x10
[  389.595800][T10943]  ? alloc_pages_noprof+0xf9/0x160
[  389.595827][T10943]  write_ldt+0x6d3/0xd40
[  389.595867][T10943]  ? __pfx_write_ldt+0x10/0x10
[  389.595904][T10943]  ? xfd_validate_state+0x129/0x190
[  389.595941][T10943]  __x64_sys_modify_ldt+0xb1/0x170
[  389.595979][T10943]  do_syscall_64+0x115/0x840
[  389.596001][T10943]  ? clear_bhb_loop+0x40/0x90
[  389.596031][T10943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.596056][T10943] RIP: 0033:0x7fa97579ce59
[  389.596077][T10943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.596101][T10943] RSP: 002b:00007fa97672b028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[  389.596124][T10943] RAX: ffffffffffffffda RBX: 00007fa975a15fa0 RCX: 00007fa97579ce59
[  389.596141][T10943] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001
[  389.596155][T10943] RBP: 00007fa975832e6f R08: 0000000000000000 R09: 0000000000000000
[  389.596170][T10943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  389.596185][T10943] R13: 00007fa975a16038 R14: 00007fa975a15fa0 R15: 00007ffd666b5b88
[  389.596220][T10943]  </TASK>
[  392.903076][T10963] kexec: Could not allocate control_code_buffer
[  393.060260][T10972] ERROR: Out of memory at tomoyo_memory_ok.
[  393.142462][T10972] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci-qemu-gce-upstream-auto/syz-executor /root/ci-qemu-gce-upstream-auto/syz-executor /newroot/314/file0' not defined.
[  394.160732][ T5641] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  394.168304][ T5641] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff
[  395.470688][T11003] overlayfs: missing 'lowerdir'
[  395.770260][T11016] FAULT_INJECTION: forcing a failure.
[  395.770260][T11016] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  395.844577][T11016] CPU: 0 UID: 0 PID: 11016 Comm: syz.0.1305 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  395.844616][T11016] Tainted: [L]=SOFTLOCKUP
[  395.844624][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  395.844639][T11016] Call Trace:
[  395.844647][T11016]  <TASK>
[  395.844656][T11016]  dump_stack_lvl+0x100/0x190
[  395.844691][T11016]  should_fail_ex.cold+0x5/0xa
[  395.844719][T11016]  ? prepare_alloc_pages+0x16d/0x5f0
[  395.844757][T11016]  should_fail_alloc_page+0xeb/0x140
[  395.844799][T11016]  prepare_alloc_pages+0x1f0/0x5f0
[  395.844835][T11016]  ? rcu_is_watching+0x12/0xc0
[  395.844868][T11016]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  395.844919][T11016]  ? find_held_lock+0x2b/0x80
[  395.844950][T11016]  ? rcu_read_unlock+0x17/0x60
[  395.844988][T11016]  ? rcu_read_unlock+0x17/0x60
[  395.845026][T11016]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  395.845054][T11016]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  395.845087][T11016]  ? rcu_is_watching+0x12/0xc0
[  395.845117][T11016]  ? trace_mm_page_alloc+0x164/0x1c0
[  395.845154][T11016]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[  395.845189][T11016]  ? __lock_acquire+0x49f/0x1a40
[  395.845210][T11016]  ? __css_rstat_updated+0x1ce/0x5a0
[  395.845253][T11016]  ? __lock_acquire+0x49f/0x1a40
[  395.845274][T11016]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  395.845312][T11016]  ? policy_nodemask+0xed/0x4f0
[  395.845350][T11016]  alloc_pages_mpol+0x1fb/0x540
[  395.845388][T11016]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  395.845424][T11016]  ? find_held_lock+0x2b/0x80
[  395.845455][T11016]  ? __pud_alloc+0x4f6/0x690
[  395.845489][T11016]  ? __pud_alloc+0x4f6/0x690
[  395.845527][T11016]  alloc_pages_noprof+0x1a/0x160
[  395.845551][T11016]  __pmd_alloc+0x3b/0x950
[  395.845586][T11016]  ? __pud_alloc+0x4fb/0x690
[  395.845623][T11016]  walk_to_pmd+0x3a3/0x4c0
[  395.845662][T11016]  get_locked_pte+0x25/0xc0
[  395.845700][T11016]  map_ldt_struct+0x3c1/0xa70
[  395.845743][T11016]  ? __pfx_map_ldt_struct+0x10/0x10
[  395.845780][T11016]  ? alloc_pages_noprof+0xf9/0x160
[  395.845807][T11016]  write_ldt+0x6d3/0xd40
[  395.845847][T11016]  ? __pfx_write_ldt+0x10/0x10
[  395.845884][T11016]  ? xfd_validate_state+0x129/0x190
[  395.845951][T11016]  __x64_sys_modify_ldt+0xb1/0x170
[  395.845989][T11016]  do_syscall_64+0x115/0x840
[  395.846011][T11016]  ? clear_bhb_loop+0x40/0x90
[  395.846041][T11016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.846066][T11016] RIP: 0033:0x7fd2c659ce59
[  395.846086][T11016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.846110][T11016] RSP: 002b:00007fd2c73f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[  395.846134][T11016] RAX: ffffffffffffffda RBX: 00007fd2c6815fa0 RCX: 00007fd2c659ce59
[  395.846151][T11016] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001
[  395.846166][T11016] RBP: 00007fd2c6632e6f R08: 0000000000000000 R09: 0000000000000000
[  395.846181][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  395.846196][T11016] R13: 00007fd2c6816038 R14: 00007fd2c6815fa0 R15: 00007fff02922988
[  395.846227][T11016]  </TASK>
[  396.757333][ T5734] Process accounting resumed
[  398.184179][T11018] Process accounting paused
[  398.207849][T10997] Process accounting resumed
[  399.884774][T11062] can: request_module (can-proto-0) failed.
[  402.242446][T11095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1317'.
[  402.439149][T11096] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1317'.
[  402.833523][T11102] random: crng reseeded on system resumption
[  402.954981][T11102] hub 1-0:1.0: USB hub found
[  402.984638][ T5641] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  402.992930][ T5641] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff
[  403.011110][T11102] hub 1-0:1.0: 1 port detected
[  404.693956][ T5720] Process accounting resumed
[  405.700062][T11117] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1321'.
[  406.155815][T11135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1324'.
[  406.524007][T11135] ipvlan1: entered promiscuous mode
[  406.556966][T11106] Process accounting resumed
[  406.644471][T11135] ipvlan1: entered allmulticast mode
[  406.738898][T11135] veth0_vlan: entered allmulticast mode
[  407.458078][T11153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1329'.
[  407.618276][T11148] hub 1-0:1.0: USB hub found
[  407.714222][T11148] hub 1-0:1.0: 1 port detected
[  408.122392][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1338'.
[  408.328137][T11168] FAULT_INJECTION: forcing a failure.
[  408.328137][T11168] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  408.408898][T11168] CPU: 0 UID: 0 PID: 11168 Comm: syz.2.1331 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  408.408939][T11168] Tainted: [L]=SOFTLOCKUP
[  408.408947][T11168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  408.408962][T11168] Call Trace:
[  408.408971][T11168]  <TASK>
[  408.408980][T11168]  dump_stack_lvl+0x100/0x190
[  408.409015][T11168]  should_fail_ex.cold+0x5/0xa
[  408.409043][T11168]  ? prepare_alloc_pages+0x16d/0x5f0
[  408.409081][T11168]  should_fail_alloc_page+0xeb/0x140
[  408.409127][T11168]  prepare_alloc_pages+0x1f0/0x5f0
[  408.409163][T11168]  ? rcu_is_watching+0x12/0xc0
[  408.409197][T11168]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  408.409240][T11168]  ? find_held_lock+0x2b/0x80
[  408.409271][T11168]  ? rcu_read_unlock+0x17/0x60
[  408.409308][T11168]  ? rcu_read_unlock+0x17/0x60
[  408.409346][T11168]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  408.409374][T11168]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  408.409410][T11168]  ? rcu_is_watching+0x12/0xc0
[  408.409440][T11168]  ? trace_mm_page_alloc+0x164/0x1c0
[  408.409476][T11168]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[  408.409511][T11168]  ? __lock_acquire+0x49f/0x1a40
[  408.409532][T11168]  ? __css_rstat_updated+0x1ce/0x5a0
[  408.409574][T11168]  ? __lock_acquire+0x49f/0x1a40
[  408.409594][T11168]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  408.409632][T11168]  ? policy_nodemask+0xed/0x4f0
[  408.409669][T11168]  alloc_pages_mpol+0x1fb/0x540
[  408.409706][T11168]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  408.409742][T11168]  ? find_held_lock+0x2b/0x80
[  408.409771][T11168]  ? __pud_alloc+0x4f6/0x690
[  408.409806][T11168]  ? __pud_alloc+0x4f6/0x690
[  408.409844][T11168]  alloc_pages_noprof+0x1a/0x160
[  408.409867][T11168]  __pmd_alloc+0x3b/0x950
[  408.409901][T11168]  ? __pud_alloc+0x4fb/0x690
[  408.409938][T11168]  walk_to_pmd+0x3a3/0x4c0
[  408.409976][T11168]  get_locked_pte+0x25/0xc0
[  408.410013][T11168]  map_ldt_struct+0x3c1/0xa70
[  408.410055][T11168]  ? __pfx_map_ldt_struct+0x10/0x10
[  408.410091][T11168]  ? alloc_pages_noprof+0xf9/0x160
[  408.410123][T11168]  write_ldt+0x6d3/0xd40
[  408.410164][T11168]  ? __pfx_write_ldt+0x10/0x10
[  408.410206][T11168]  ? xfd_validate_state+0x129/0x190
[  408.410243][T11168]  __x64_sys_modify_ldt+0xb1/0x170
[  408.410281][T11168]  do_syscall_64+0x115/0x840
[  408.410302][T11168]  ? clear_bhb_loop+0x40/0x90
[  408.410332][T11168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.410357][T11168] RIP: 0033:0x7f197799ce59
[  408.410377][T11168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.410401][T11168] RSP: 002b:00007f1978943028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[  408.410424][T11168] RAX: ffffffffffffffda RBX: 00007f1977c15fa0 RCX: 00007f197799ce59
[  408.410441][T11168] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001
[  408.410456][T11168] RBP: 00007f1977a32e6f R08: 0000000000000000 R09: 0000000000000000
[  408.410471][T11168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  408.410485][T11168] R13: 00007f1977c16038 R14: 00007f1977c15fa0 R15: 00007ffca1737338
[  408.410516][T11168]  </TASK>
[  411.904276][T11189] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1334'.
[  413.049057][T11219] FAULT_INJECTION: forcing a failure.
[  413.049057][T11219] name failslab, interval 1, probability 0, space 0, times 0
[  413.213464][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'.
[  413.290897][T11219] CPU: 0 UID: 0 PID: 11219 Comm: syz.0.1341 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  413.290936][T11219] Tainted: [L]=SOFTLOCKUP
[  413.290944][T11219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  413.290959][T11219] Call Trace:
[  413.290967][T11219]  <TASK>
[  413.290976][T11219]  dump_stack_lvl+0x100/0x190
[  413.291011][T11219]  should_fail_ex.cold+0x5/0xa
[  413.291043][T11219]  should_failslab+0xc2/0x120
[  413.291079][T11219]  __kmalloc_cache_noprof+0x91/0x6c0
[  413.291103][T11219]  ? __lock_acquire+0x49f/0x1a40
[  413.291126][T11219]  ? tty_open+0x139/0xfa0
[  413.291162][T11219]  ? __pfx_tty_open+0x10/0x10
[  413.291198][T11219]  tty_open+0x139/0xfa0
[  413.291235][T11219]  ? __pfx_tty_open+0x10/0x10
[  413.291267][T11219]  ? chrdev_open+0x10b/0x6a0
[  413.291292][T11219]  ? chrdev_open+0x10b/0x6a0
[  413.291320][T11219]  ? __pfx_tty_open+0x10/0x10
[  413.291353][T11219]  chrdev_open+0x234/0x6a0
[  413.291377][T11219]  ? __pfx_apparmor_file_open+0x10/0x10
[  413.291404][T11219]  ? __pfx_chrdev_open+0x10/0x10
[  413.291431][T11219]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  413.291473][T11219]  do_dentry_open+0x6ab/0x14d0
[  413.291498][T11219]  ? __pfx_chrdev_open+0x10/0x10
[  413.291529][T11219]  vfs_open+0x82/0x3f0
[  413.291564][T11219]  path_openat+0x2873/0x4280
[  413.291601][T11219]  ? __pfx_path_openat+0x10/0x10
[  413.291634][T11219]  do_file_open+0x20e/0x430
[  413.291661][T11219]  ? __pfx_do_file_open+0x10/0x10
[  413.291706][T11219]  ? alloc_fd+0x471/0x7a0
[  413.291733][T11219]  ? do_getname+0x191/0x390
[  413.291767][T11219]  do_sys_openat2+0x10f/0x1e0
[  413.291799][T11219]  ? __pfx_do_sys_openat2+0x10/0x10
[  413.291834][T11219]  ? do_raw_spin_lock+0x128/0x260
[  413.291868][T11219]  __x64_sys_openat+0x12d/0x210
[  413.291902][T11219]  ? __pfx___x64_sys_openat+0x10/0x10
[  413.291946][T11219]  do_syscall_64+0x115/0x840
[  413.291968][T11219]  ? clear_bhb_loop+0x40/0x90
[  413.291997][T11219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.292022][T11219] RIP: 0033:0x7fd2c659ce59
[  413.292042][T11219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.292066][T11219] RSP: 002b:00007fd2c73d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  413.292089][T11219] RAX: ffffffffffffffda RBX: 00007fd2c6816090 RCX: 00007fd2c659ce59
[  413.292105][T11219] RDX: 0000000000103e81 RSI: 0000200000000400 RDI: ffffffffffffff9c
[  413.292121][T11219] RBP: 00007fd2c6632e6f R08: 0000000000000000 R09: 0000000000000000
[  413.292136][T11219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  413.292150][T11219] R13: 00007fd2c6816128 R14: 00007fd2c6816090 R15: 00007fff02922988
[  413.292180][T11219]  </TASK>
[  415.117110][T11228] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1341'.
[  416.971099][T11249] random: crng reseeded on system resumption
[  417.732550][T11252] hub 1-0:1.0: USB hub found
[  417.765565][T11252] hub 1-0:1.0: 1 port detected
[  421.190712][T11281] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1351'.
[  423.371676][T11311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1356'.
[  425.167517][T11325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1358'.
[  425.656968][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'.
[  428.638264][T11351] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1363'.
[  429.451615][T11348] Process accounting resumed
[  431.772440][T11361] Process accounting paused
[  434.299081][T11421] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1375'.
[  436.237117][T11455] can: request_module (can-proto-3) failed.
[  437.558028][T11468] Process accounting paused
[  437.893366][T11490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1386'.
[  438.169547][T11492] can: request_module (can-proto-3) failed.
[  439.547350][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  439.558325][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  439.950190][T11517] can: request_module (can-proto-3) failed.
[  440.326361][T11525] can: request_module (can-proto-3) failed.
[  441.565590][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'.
[  441.653678][T11544] nvme_fabrics: missing parameter 'transport=%s'
[  441.791173][T11544] nvme_fabrics: missing parameter 'nqn=%s'
[  443.018921][T11562] can: request_module (can-proto-3) failed.
[  443.714537][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1405'.
[  444.843582][T11588] can: request_module (can-proto-3) failed.
[  446.964774][T11618] nvme_fabrics: missing parameter 'transport=%s'
[  447.048632][T11618] nvme_fabrics: missing parameter 'nqn=%s'
[  447.580360][T11610] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1412'.
[  448.176793][T11640] ERROR: Out of memory at tomoyo_memory_ok.
[  449.092223][T11647] can: request_module (can-proto-3) failed.
[  450.097617][T11668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1422'.
[  451.175614][T11677] vivid-007: =================  START STATUS  =================
[  451.200455][T11677] vivid-007: Generate PTS: true
[  451.218203][T11677] vivid-007: Generate SCR: true
[  451.230692][T11677] tpg source WxH: 320x240 (Y'CbCr)
[  451.248725][T11677] tpg field: 1
[  451.259893][T11677] tpg crop: (0,0)/320x240
[  451.270596][T11677] tpg compose: (0,0)/320x240
[  451.285963][T11677] tpg colorspace: 8
[  451.299598][T11677] tpg transfer function: 0/0
[  451.330551][T11677] tpg Y'CbCr encoding: 0/0
[  451.345303][T11677] tpg quantization: 0/0
[  451.355617][T11677] tpg RGB range: 0/2
[  451.366613][T11677] vivid-007: ==================  END STATUS  ==================
[  452.043004][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1426'.
[  454.304500][T11712] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1428'.
[  455.290246][T11726] can: request_module (can-proto-3) failed.
[  455.798638][T11730] can: request_module (can-proto-3) failed.
[  455.809031][T11732] can: request_module (can-proto-3) failed.
[  457.712011][T11763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1439'.
[  457.955302][T11768] can: request_module (can-proto-0) failed.
[  458.641462][T11773] can: request_module (can-proto-3) failed.
[  459.993830][T11787] can: request_module (can-proto-3) failed.
[  460.653319][T11801] Device name cannot be null; rc = [-22]
[  461.763663][T11807] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma?
[  461.961407][T11809] Process accounting resumed
[  462.244033][T11814] snd_virmidi snd_virmidi.0: control 61678:131081:3:yª:5 is already present
[  462.776189][T11820] can: request_module (can-proto-3) failed.
[  463.120039][T11827] can: request_module (can-proto-0) failed.
[  466.801234][ T5640] Process accounting paused
[  466.826549][T11837] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  466.862291][T11837] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  466.889124][T11837] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  467.108247][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  467.122970][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  467.132262][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  467.146531][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  467.154258][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  467.764348][T11839] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.773592][T11839] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.781620][T11839] bridge_slave_0: entered allmulticast mode
[  467.793717][T11839] bridge_slave_0: entered promiscuous mode
[  467.804351][T11839] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.811739][T11839] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.819459][T11839] bridge_slave_1: entered allmulticast mode
[  467.827134][T11839] bridge_slave_1: entered promiscuous mode
[  467.862455][T11839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  467.878668][T11839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.916912][T11839] team0: Port device team_slave_0 added
[  467.925086][T11839] team0: Port device team_slave_1 added
[  467.957294][T11839] batman_adv: batadv0: Adding interface: batadv_slave_0
[  467.964316][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  467.993995][T11839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  468.006897][T11839] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.013926][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.042382][T11839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  468.093909][T11839] hsr_slave_0: entered promiscuous mode
[  468.104570][T11839] hsr_slave_1: entered promiscuous mode
[  468.111394][T11839] debugfs: 'hsr0' already exists in 'hsr'
[  468.117383][T11839] Cannot create hsr debugfs directory
[  468.332320][T11839] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  468.350662][T11839] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  468.361108][T11839] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  468.377127][T11839] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  468.387673][T11839] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  468.400436][T11839] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  468.409799][T11839] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  468.419781][T11839] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  468.453619][T11839] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.461617][T11839] bridge0: port 2(bridge_slave_1) entered forwarding state
[  468.469193][T11839] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.476338][T11839] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.548568][T11839] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.571821][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.580267][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.608215][T11839] 8021q: adding VLAN 0 to HW filter on device team0
[  468.627757][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.634968][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.651109][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.658323][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.123082][T11839] 8021q: adding VLAN 0 to HW filter on device batadv0
[  469.221458][ T5632] Bluetooth: hci4: command tx timeout
[  469.568714][T11839] veth0_vlan: entered promiscuous mode
[  469.587099][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  469.602452][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  469.610815][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  469.620345][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  469.628529][ T5641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  469.694459][T11839] veth1_vlan: entered promiscuous mode
[  469.765097][T11839] veth0_macvtap: entered promiscuous mode
[  469.793460][T11839] veth1_macvtap: entered promiscuous mode
[  469.834744][T11839] batman_adv: batadv0: Interface activated: batadv_slave_0
[  469.874621][T11839] batman_adv: batadv0: Interface activated: batadv_slave_1
[  469.910275][ T1165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.941998][ T1165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.972791][ T1165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.994806][ T1165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.238231][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.262761][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.334993][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.356594][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.813971][T11894] can: request_module (can-proto-3) failed.
[  471.039215][T11902] openvswitch: netlink: Message has 4 unknown bytes.
[  471.103377][T11881] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.115519][T11881] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.139367][T11881] bridge_slave_0: entered allmulticast mode
[  471.157020][T11881] bridge_slave_0: entered promiscuous mode
[  471.176274][T11881] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.193772][T11881] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.208921][T11881] bridge_slave_1: entered allmulticast mode
[  471.223986][T11881] bridge_slave_1: entered promiscuous mode
[  471.286876][ T5641] Bluetooth: hci4: command tx timeout
[  471.313641][T11881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.349771][T11881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  471.438074][T11881] team0: Port device team_slave_0 added
[  471.463179][T11881] team0: Port device team_slave_1 added
[  471.523678][T11881] batman_adv: batadv0: Adding interface: batadv_slave_0
[  471.543225][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.601127][T11881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  471.640794][T11881] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.654511][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.691302][ T5641] Bluetooth: hci5: command tx timeout
[  471.727535][T11881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.874608][T11881] hsr_slave_0: entered promiscuous mode
[  471.887691][T11881] hsr_slave_1: entered promiscuous mode
[  471.902201][T11881] debugfs: 'hsr0' already exists in 'hsr'
[  471.916166][T11881] Cannot create hsr debugfs directory
[  472.517696][T11881] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  472.546588][T11881] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  472.584588][T11881] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  472.633108][T11881] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  472.663259][T11881] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  472.704932][T11881] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  472.730858][T11881] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  472.762825][T11881] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  472.991146][T11881] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.035269][T11881] 8021q: adding VLAN 0 to HW filter on device team0
[  473.054328][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.054430][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  473.060652][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.060737][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.356329][ T5641] Bluetooth: hci4: command tx timeout
[  473.753226][ T5641] Bluetooth: hci5: command tx timeout
[  473.809754][T11939] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  473.817823][T11939] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  474.027737][T11881] 8021q: adding VLAN 0 to HW filter on device batadv0
[  474.664593][T11881] veth0_vlan: entered promiscuous mode
[  474.704582][T11881] veth1_vlan: entered promiscuous mode
[  474.917691][T11881] veth0_macvtap: entered promiscuous mode
[  474.960063][T11881] veth1_macvtap: entered promiscuous mode
[  475.130074][T11881] batman_adv: batadv0: Interface activated: batadv_slave_0
[  475.169849][T11881] batman_adv: batadv0: Interface activated: batadv_slave_1
[  475.280516][ T3011] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  475.300121][ T3011] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.342250][ T3011] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.397017][ T3011] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  475.425292][ T5641] Bluetooth: hci4: command tx timeout
[  475.690300][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.719919][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.808022][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.821978][ T5641] Bluetooth: hci5: command tx timeout
[  475.845995][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.208132][T11960] random: crng reseeded on system resumption
[  476.228621][T11958] netlink: 'syz.4.1464': attribute type 22 has an invalid length.
[  476.244781][T11958] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1464'.
[  476.900420][T11967] can: request_module (can-proto-3) failed.
[  477.221194][T11974] block nbd0: NBD_DISCONNECT
[  477.889161][ T5632] Bluetooth: hci5: command tx timeout
[  477.903876][ T5632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  477.921087][ T5632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  477.930456][ T5632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  477.944311][ T5632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  477.957831][ T5632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  478.283796][T11984] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  478.872132][T11995] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1470'.
[  478.934945][T11995] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  479.045016][T11995] batman_adv: batadv0: Removing interface: batadv_slave_1
[  480.037931][ T5632] Bluetooth: hci6: command tx timeout
[  480.068903][ T5641] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  480.085272][ T5641] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  480.097004][ T5641] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  480.110315][ T5641] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  480.121166][ T5641] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  481.018897][T11981] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.051392][T11981] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.091799][T11981] bridge_slave_0: entered allmulticast mode
[  481.139291][T11981] bridge_slave_0: entered promiscuous mode
[  481.174737][T11981] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.207146][T11981] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.245572][T11981] bridge_slave_1: entered allmulticast mode
[  481.277001][T11981] bridge_slave_1: entered promiscuous mode
[  481.473768][T11981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.491384][T11981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  481.589836][T11981] team0: Port device team_slave_0 added
[  481.600602][T11981] team0: Port device team_slave_1 added
[  481.652256][T12018] ubi0: attaching mtd0
[  481.694675][T12018] ubi0: scanning is finished
[  481.694757][T12018] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  481.700435][T11981] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.700454][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.700484][T11981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  481.705902][T11981] batman_adv: batadv0: Adding interface: batadv_slave_1
[  481.705919][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.705949][T11981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.852985][T11981] hsr_slave_0: entered promiscuous mode
[  481.856089][T11981] hsr_slave_1: entered promiscuous mode
[  481.858358][T11981] debugfs: 'hsr0' already exists in 'hsr'
[  481.858381][T11981] Cannot create hsr debugfs directory
[  482.000773][T12018] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  482.108378][ T5641] Bluetooth: hci6: command tx timeout
[  482.188690][ T5641] Bluetooth: hci7: command tx timeout
[  482.846075][T12007] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.846157][T12007] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.846532][T12007] bridge_slave_0: entered allmulticast mode
[  482.848274][T12007] bridge_slave_0: entered promiscuous mode
[  482.851098][T12007] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.851229][T12007] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.851373][T12007] bridge_slave_1: entered allmulticast mode
[  482.852789][T12007] bridge_slave_1: entered promiscuous mode
[  482.954666][T12007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  482.954744][T11981] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  482.964033][T11981] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  482.972868][T12007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  482.994387][T11981] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  482.997696][T11981] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  483.032177][T11981] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  483.038293][T11981] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  483.039037][T11981] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  483.061446][T11981] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  483.065517][T12007] team0: Port device team_slave_0 added
[  483.092622][T12007] team0: Port device team_slave_1 added
[  483.156987][T12007] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.157008][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  483.157038][T12007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.179748][T12007] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.179768][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  483.179799][T12007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  483.276649][T12007] hsr_slave_0: entered promiscuous mode
[  483.290964][T12007] hsr_slave_1: entered promiscuous mode
[  483.291621][T12007] debugfs: 'hsr0' already exists in 'hsr'
[  483.291641][T12007] Cannot create hsr debugfs directory
[  483.711587][T11981] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.780345][T11981] 8021q: adding VLAN 0 to HW filter on device team0
[  483.801335][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.801424][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.803003][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.803083][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.023476][T12007] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  484.027866][T12007] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  484.037473][T12007] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  484.042025][T12007] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  484.050059][T12007] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  484.053339][T12007] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  484.054322][T12007] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  484.066133][T12007] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  484.177444][ T5641] Bluetooth: hci6: command tx timeout
[  484.261648][ T5641] Bluetooth: hci7: command tx timeout
[  484.377918][T12007] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.425326][T12007] 8021q: adding VLAN 0 to HW filter on device team0
[  484.444555][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.444688][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.462368][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.462456][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  485.422923][T11981] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.896780][T12007] 8021q: adding VLAN 0 to HW filter on device batadv0
[  486.246101][ T5641] Bluetooth: hci6: command tx timeout
[  486.289830][T11981] veth0_vlan: entered promiscuous mode
[  486.325958][ T5641] Bluetooth: hci7: command tx timeout
[  486.340431][T11981] veth1_vlan: entered promiscuous mode
[  486.451721][T11981] veth0_macvtap: entered promiscuous mode
[  486.515320][T11981] veth1_macvtap: entered promiscuous mode
[  486.578358][T11981] batman_adv: batadv0: Interface activated: batadv_slave_0
[  486.629687][T11981] batman_adv: batadv0: Interface activated: batadv_slave_1
[  486.690593][ T3011] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  486.733862][ T3011] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.768293][ T3011] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.823636][ T3011] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  487.080764][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.114322][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.146694][T12007] veth0_vlan: entered promiscuous mode
[  487.223422][T12007] veth1_vlan: entered promiscuous mode
[  487.230708][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.257750][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.359237][T12007] veth0_macvtap: entered promiscuous mode
[  487.413006][T12007] veth1_macvtap: entered promiscuous mode
[  487.502135][T12007] batman_adv: batadv0: Interface activated: batadv_slave_0
[  487.562783][T12007] batman_adv: batadv0: Interface activated: batadv_slave_1
[  487.622042][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  487.663938][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  487.738817][ T1177] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  487.792388][ T1177] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  488.254501][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.302046][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.395098][ T5641] Bluetooth: hci7: command tx timeout
[  488.624851][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.658455][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.437275][   T30] audit: type=1800 audit(1843104664.172:18): pid=12101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1476" name="lu_gp_id" dev="configfs" ino=44491 res=0 errno=0
[  491.749204][T12125] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000
[  491.849296][T12125] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  491.933105][T12125] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000
[  492.068101][T12125] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  492.152731][T12125] page dumped because: unmovable page
[  492.221939][T12125] page_owner info is not present (never set?)
[  494.535707][T12144] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  494.567478][T12144] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  494.615077][T12144] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  494.667219][T12144] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  494.710876][T12144] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  494.732755][T12144] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  494.767108][T12144] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  494.820640][T12144] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  494.841778][T12144] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  494.905959][T12144] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  494.944505][T12144] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  494.969139][T12144] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  494.999987][ T5641] Bluetooth: hci0: command 0x0c1a tx timeout
[  495.021217][T12144] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  495.134243][T12144] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  495.182075][T12144] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  495.284771][T12144] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  496.128166][T12171] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma?
[  496.222655][T12170] FAULT_INJECTION: forcing a failure.
[  496.222655][T12170] name failslab, interval 1, probability 0, space 0, times 0
[  496.346824][T12170] CPU: 0 UID: 0 PID: 12170 Comm: syz.6.1486 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  496.346865][T12170] Tainted: [L]=SOFTLOCKUP
[  496.346873][T12170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  496.346889][T12170] Call Trace:
[  496.346897][T12170]  <TASK>
[  496.346906][T12170]  dump_stack_lvl+0x100/0x190
[  496.346940][T12170]  should_fail_ex.cold+0x5/0xa
[  496.346973][T12170]  should_failslab+0xc2/0x120
[  496.347007][T12170]  kmem_cache_alloc_noprof+0x91/0x6a0
[  496.347038][T12170]  ? __pfx_map_id_range_down+0x10/0x10
[  496.347075][T12170]  ? security_inode_alloc+0x3b/0x2c0
[  496.347175][T12170]  security_inode_alloc+0x3b/0x2c0
[  496.347203][T12170]  inode_init_always_gfp+0xc77/0xfb0
[  496.347232][T12170]  alloc_inode+0x8e/0x250
[  496.347265][T12170]  sock_alloc+0x44/0x280
[  496.347329][T12170]  ? security_socket_create+0x7f/0x250
[  496.347371][T12170]  __sock_create+0xc2/0x860
[  496.347414][T12170]  smc_create_clcsk+0x37/0xd0
[  496.347487][T12170]  ? __pfx_smc_inet_init_sock+0x10/0x10
[  496.347547][T12170]  inet6_create+0xb1a/0x12b0
[  496.347634][T12170]  ? inet6_create+0x7f/0x12b0
[  496.347673][T12170]  __sock_create+0x339/0x860
[  496.347715][T12170]  __sys_socket+0x14d/0x260
[  496.347761][T12170]  ? __pfx___sys_socket+0x10/0x10
[  496.347808][T12170]  __x64_sys_socket+0x72/0xb0
[  496.347846][T12170]  ? lockdep_hardirqs_on+0x78/0x100
[  496.347918][T12170]  do_syscall_64+0x115/0x840
[  496.347939][T12170]  ? clear_bhb_loop+0x40/0x90
[  496.347969][T12170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.347994][T12170] RIP: 0033:0x7eff6239ce59
[  496.348015][T12170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  496.348039][T12170] RSP: 002b:00007eff63307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  496.348062][T12170] RAX: ffffffffffffffda RBX: 00007eff62616090 RCX: 00007eff6239ce59
[  496.348078][T12170] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a
[  496.348093][T12170] RBP: 00007eff62432e6f R08: 0000000000000000 R09: 0000000000000000
[  496.348108][T12170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  496.348122][T12170] R13: 00007eff62616128 R14: 00007eff62616090 R15: 00007ffc491c2768
[  496.348153][T12170]  </TASK>
[  496.626279][T12170] socket: no more sockets
[  496.687157][ T5641] Bluetooth: hci1: command 0x0c1a tx timeout
[  496.697235][ T5641] Bluetooth: hci3: command 0x0c1a tx timeout
[  496.703306][ T5641] Bluetooth: hci2: command 0x0c1a tx timeout
[  496.815459][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout
[  496.839289][ T5641] Bluetooth: hci5: command 0x0c1a tx timeout
[  497.025864][ T5632] Bluetooth: hci6: command 0x0c1a tx timeout
[  497.153432][ T5632] Bluetooth: hci7: command 0x0c1a tx timeout
[  497.395259][ T5641] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  497.414533][ T5641] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  497.423975][ T5641] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  497.433627][ T5641] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  497.441565][ T5641] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  498.408137][T12193] can: request_module (can-proto-0) failed.
[  498.820288][ T5641] Bluetooth: hci4: command 0x0c1a tx timeout
[  498.902691][ T5641] Bluetooth: hci5: command 0x0c1a tx timeout
[  499.059465][ T5641] Bluetooth: hci6: command 0x0c1a tx timeout
[  499.224192][ T5641] Bluetooth: hci7: command 0x0c1a tx timeout
[  499.536457][ T5641] Bluetooth: hci8: command tx timeout
[  499.575889][   T30] audit: type=1800 audit(1843104674.364:19): pid=12209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1493" name="dbroot" dev="configfs" ino=45377 res=0 errno=0
[  500.660847][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  500.677596][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  500.889431][ T5641] Bluetooth: hci4: command 0x0c1a tx timeout
[  500.969669][ T5641] Bluetooth: hci5: command 0x0c1a tx timeout
[  501.129017][ T5641] Bluetooth: hci6: command 0x0c1a tx timeout
[  501.292330][ T5632] Bluetooth: hci7: command 0x0c1a tx timeout
[  501.387839][T12183] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.421811][T12183] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.457982][T12183] bridge_slave_0: entered allmulticast mode
[  501.499385][T12183] bridge_slave_0: entered promiscuous mode
[  501.534295][T12183] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.579193][T12183] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.605512][ T5641] Bluetooth: hci8: command tx timeout
[  501.631799][T12183] bridge_slave_1: entered allmulticast mode
[  501.672714][T12183] bridge_slave_1: entered promiscuous mode
[  502.054480][T12183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.151869][T12183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.255418][T12236] can: request_module (can-proto-3) failed.
[  502.337066][T12242] futex_wake_op: syz.7.1497 tries to shift op by -2048; fix this program
[  502.379757][T12183] team0: Port device team_slave_0 added
[  502.440590][T12183] team0: Port device team_slave_1 added
[  502.679094][T12183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  502.718885][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  502.853364][T12183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.015674][T12183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.055704][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.182454][T12183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.227604][T12242] 0x000000000001-0x000000020000 : ""
[  503.449038][T12242] ftl_cs: FTL header corrupt!
[  503.605854][T12183] hsr_slave_0: entered promiscuous mode
[  503.644147][T12183] hsr_slave_1: entered promiscuous mode
[  503.657563][T12257] ERROR: Out of memory at tomoyo_memory_ok.
[  503.676924][ T5641] Bluetooth: hci8: command tx timeout
[  503.693892][T12183] debugfs: 'hsr0' already exists in 'hsr'
[  503.714120][T12183] Cannot create hsr debugfs directory
[  503.930716][T12247] ubi0: attaching mtd0
[  503.995031][T12247] ubi0: scanning is finished
[  504.065047][T12247] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  504.512893][T12247] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  504.811391][T12266] can: request_module (can-proto-0) failed.
[  505.152464][T12183] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  505.185291][T12183] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  505.218720][T12183] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  505.302531][T12183] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  505.372660][T12183] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  505.462890][T12183] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  505.508573][T12183] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  505.583596][T12183] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  505.719727][T12277] can: request_module (can-proto-0) failed.
[  505.747046][ T5632] Bluetooth: hci8: command tx timeout
[  506.685835][T12183] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.755781][T12183] 8021q: adding VLAN 0 to HW filter on device team0
[  506.803839][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.811050][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  506.850500][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.857674][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.831902][T12183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.809797][T12183] veth0_vlan: entered promiscuous mode
[  508.877442][T12183] veth1_vlan: entered promiscuous mode
[  508.979677][T12183] veth0_macvtap: entered promiscuous mode
[  509.015082][T12183] veth1_macvtap: entered promiscuous mode
[  509.101663][T12183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  509.143467][T12183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  509.199016][ T1165] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  509.239209][ T1165] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  509.274161][ T1165] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  509.344170][ T1165] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  509.639408][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.674535][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.787213][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.816740][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.348549][T12332] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  512.147769][T12345] snd_virmidi snd_virmidi.0: control 4096:33685515:3:yª:3 is already present
[  512.736357][T12351] vivid-007: =================  START STATUS  =================
[  512.755205][T12351] vivid-007: Generate PTS: true
[  512.773125][T12351] vivid-007: Generate SCR: true
[  512.800068][T12351] tpg source WxH: 320x240 (Y'CbCr)
[  512.831646][T12351] tpg field: 1
[  512.839848][T12351] tpg crop: (0,0)/320x240
[  512.861648][T12351] tpg compose: (0,0)/320x240
[  512.874988][T12351] tpg colorspace: 8
[  512.886473][T12351] tpg transfer function: 0/0
[  512.918263][T12351] tpg Y'CbCr encoding: 0/0
[  512.935926][T12351] tpg quantization: 0/0
[  512.974751][T12351] tpg RGB range: 0/2
[  513.017540][T12351] vivid-007: ==================  END STATUS  ==================
[  514.127210][T12370] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead.
[  515.001360][T12357] Process accounting resumed
[  518.632272][T12411] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  518.638749][T12411] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  520.185453][T12425] random: crng reseeded on system resumption
[  520.617786][T12423] hub 1-0:1.0: USB hub found
[  520.684788][T12423] hub 1-0:1.0: 1 port detected
[  521.090253][T12429] can: request_module (can-proto-0) failed.
[  522.771053][T12450] ubi0: attaching mtd0
[  522.798077][T12450] ubi0: scanning is finished
[  522.820901][T12450] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  522.939488][T12450] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  523.006805][T12448] can: request_module (can-proto-3) failed.
[  523.491954][T12465] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  523.713276][ T5632] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  523.750169][ T5632] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  523.767736][ T5632] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  523.780358][ T5632] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  523.794005][ T5632] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  524.465812][T12473] can: request_module (can-proto-3) failed.
[  524.773484][T12461] ima: policy update failed
[  524.816590][   T30] audit: type=1802 audit(1843104699.726:20): pid=12461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.1530" res=0 errno=0
[  525.021800][T12491] snd_virmidi snd_virmidi.0: control 61678:131081:3:yª:5 is already present
[  525.880289][ T5632] Bluetooth: hci9: command tx timeout
[  526.166971][T12499] netlink: 504 bytes leftover after parsing attributes in process `syz.8.1534'.
[  527.744936][T12468] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.783632][T12468] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.817429][T12468] bridge_slave_0: entered allmulticast mode
[  527.851227][T12468] bridge_slave_0: entered promiscuous mode
[  527.900122][T12468] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.933534][T12468] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.953288][ T5632] Bluetooth: hci9: command tx timeout
[  527.980521][T12468] bridge_slave_1: entered allmulticast mode
[  528.017124][T12468] bridge_slave_1: entered promiscuous mode
[  528.181997][T12468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.244759][T12468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.413025][T12468] team0: Port device team_slave_0 added
[  528.453580][T12468] team0: Port device team_slave_1 added
[  528.468375][T12502] FAULT_INJECTION: forcing a failure.
[  528.468375][T12502] name failslab, interval 1, probability 0, space 0, times 0
[  528.564801][T12502] CPU: 0 UID: 0 PID: 12502 Comm: syz.6.1535 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  528.564840][T12502] Tainted: [L]=SOFTLOCKUP
[  528.564849][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  528.564864][T12502] Call Trace:
[  528.564871][T12502]  <TASK>
[  528.564887][T12502]  dump_stack_lvl+0x100/0x190
[  528.564922][T12502]  should_fail_ex.cold+0x5/0xa
[  528.564954][T12502]  should_failslab+0xc2/0x120
[  528.564990][T12502]  __kmalloc_noprof+0xfc/0x820
[  528.565025][T12502]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  528.565126][T12502]  ? lockdep_hardirqs_on+0x78/0x100
[  528.565171][T12502]  ? fib6_info_alloc+0x40/0x160
[  528.565283][T12502]  fib6_info_alloc+0x40/0x160
[  528.565320][T12502]  ip6_route_net_init+0x8d/0x8d0
[  528.565374][T12502]  ? __pfx_ip6_route_net_init+0x10/0x10
[  528.565415][T12502]  ops_init+0x1e2/0x5f0
[  528.565471][T12502]  setup_net+0x118/0x3a0
[  528.565501][T12502]  ? __pfx_setup_net+0x10/0x10
[  528.565532][T12502]  ? mutex_init_lockdep+0xf1/0x120
[  528.565562][T12502]  copy_net_ns+0x46f/0x7c0
[  528.565598][T12502]  create_new_namespaces+0x3ea/0xac0
[  528.565632][T12502]  unshare_nsproxy_namespaces+0xf2/0x220
[  528.565662][T12502]  ksys_unshare+0x438/0xab0
[  528.565696][T12502]  ? __pfx_ksys_unshare+0x10/0x10
[  528.565739][T12502]  __x64_sys_unshare+0x31/0x40
[  528.565770][T12502]  do_syscall_64+0x115/0x840
[  528.565791][T12502]  ? clear_bhb_loop+0x40/0x90
[  528.565821][T12502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.565846][T12502] RIP: 0033:0x7eff6239ce59
[  528.565865][T12502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.565897][T12502] RSP: 002b:00007eff63328028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  528.565920][T12502] RAX: ffffffffffffffda RBX: 00007eff62615fa0 RCX: 00007eff6239ce59
[  528.565936][T12502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  528.565951][T12502] RBP: 00007eff62432e6f R08: 0000000000000000 R09: 0000000000000000
[  528.565966][T12502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  528.565980][T12502] R13: 00007eff62616038 R14: 00007eff62615fa0 R15: 00007ffc491c2768
[  528.566011][T12502]  </TASK>
[  529.098897][T12468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  529.136345][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  529.218842][T12468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  529.284222][T12468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  529.329708][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  529.456659][T12468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  529.788217][T12468] hsr_slave_0: entered promiscuous mode
[  529.817278][T12468] hsr_slave_1: entered promiscuous mode
[  529.834511][T12468] debugfs: 'hsr0' already exists in 'hsr'
[  529.853161][T12468] Cannot create hsr debugfs directory
[  530.021805][ T5632] Bluetooth: hci9: command tx timeout
[  531.288417][T12468] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  531.327749][T12468] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  531.381313][T12468] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  531.428100][T12468] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  531.477956][T12468] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  531.528334][T12468] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  531.672672][T12468] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  531.757637][T12468] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  532.087388][ T5632] Bluetooth: hci9: command tx timeout
[  534.073649][T12557] ERROR: Out of memory at tomoyo_memory_ok.
[  534.110770][T12468] 8021q: adding VLAN 0 to HW filter on device bond0
[  534.232562][T12565] can: request_module (can-proto-3) failed.
[  534.253154][T12468] 8021q: adding VLAN 0 to HW filter on device team0
[  534.291158][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1544'.
[  534.434087][T12575] netlink: 'syz.6.1544': attribute type 19 has an invalid length.
[  534.569808][T12575] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1544'.
[  534.735395][T12578] FAULT_INJECTION: forcing a failure.
[  534.735395][T12578] name failslab, interval 1, probability 0, space 0, times 0
[  534.771563][T12574] macvtap0: entered promiscuous mode
[  534.830032][T12578] CPU: 0 UID: 0 PID: 12578 Comm: syz.8.1545 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  534.830072][T12578] Tainted: [L]=SOFTLOCKUP
[  534.830080][T12578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  534.830097][T12578] Call Trace:
[  534.830105][T12578]  <TASK>
[  534.830114][T12578]  dump_stack_lvl+0x100/0x190
[  534.830149][T12578]  should_fail_ex.cold+0x5/0xa
[  534.830183][T12578]  should_failslab+0xc2/0x120
[  534.830225][T12578]  __kmalloc_cache_noprof+0x91/0x6c0
[  534.830254][T12578]  ? rfkill_fop_open+0x1cc/0x480
[  534.830296][T12578]  rfkill_fop_open+0x1cc/0x480
[  534.830333][T12578]  ? __pfx_rfkill_fop_open+0x10/0x10
[  534.830376][T12578]  misc_open+0x26d/0x450
[  534.830462][T12578]  ? __pfx_misc_open+0x10/0x10
[  534.830486][T12578]  chrdev_open+0x234/0x6a0
[  534.830511][T12578]  ? __pfx_apparmor_file_open+0x10/0x10
[  534.830561][T12578]  ? __pfx_chrdev_open+0x10/0x10
[  534.830589][T12578]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  534.830631][T12578]  do_dentry_open+0x6ab/0x14d0
[  534.830655][T12578]  ? __pfx_chrdev_open+0x10/0x10
[  534.830686][T12578]  vfs_open+0x82/0x3f0
[  534.830721][T12578]  path_openat+0x2873/0x4280
[  534.830758][T12578]  ? __pfx_path_openat+0x10/0x10
[  534.830791][T12578]  do_file_open+0x20e/0x430
[  534.830818][T12578]  ? __pfx_do_file_open+0x10/0x10
[  534.830864][T12578]  ? alloc_fd+0x471/0x7a0
[  534.830891][T12578]  ? do_getname+0x191/0x390
[  534.830924][T12578]  do_sys_openat2+0x10f/0x1e0
[  534.830956][T12578]  ? __pfx_do_sys_openat2+0x10/0x10
[  534.830990][T12578]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  534.831039][T12578]  __x64_sys_openat+0x12d/0x210
[  534.831073][T12578]  ? __pfx___x64_sys_openat+0x10/0x10
[  534.831118][T12578]  do_syscall_64+0x115/0x840
[  534.831139][T12578]  ? clear_bhb_loop+0x40/0x90
[  534.831168][T12578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.831193][T12578] RIP: 0033:0x7f9114d9ce59
[  534.831223][T12578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  534.831247][T12578] RSP: 002b:00007f9115c59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  534.831270][T12578] RAX: ffffffffffffffda RBX: 00007f9115015fa0 RCX: 00007f9114d9ce59
[  534.831287][T12578] RDX: 0000000000002502 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  534.831302][T12578] RBP: 00007f9114e32e6f R08: 0000000000000000 R09: 0000000000000000
[  534.831317][T12578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  534.831332][T12578] R13: 00007f9115016038 R14: 00007f9115015fa0 R15: 00007fffe0e87588
[  534.831364][T12578]  </TASK>
[  535.305664][T12574] macvtap0: entered allmulticast mode
[  535.311286][T12574] veth0_macvtap: entered allmulticast mode
[  535.451563][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.458821][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.596701][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.603957][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.210344][T12468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  539.249119][T12468] veth0_vlan: entered promiscuous mode
[  539.307000][T12468] veth1_vlan: entered promiscuous mode
[  539.440502][T12468] veth0_macvtap: entered promiscuous mode
[  539.477941][T12468] veth1_macvtap: entered promiscuous mode
[  539.549499][T12468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  539.603747][T12468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  539.656183][ T1165] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  539.694824][ T1165] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  539.744003][ T1165] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  539.835244][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  540.142960][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.183277][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.311805][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.341713][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.650808][T12626] can: request_module (can-proto-3) failed.
[  541.688726][   T30] audit: type=1804 audit(1843104716.703:21): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1551" name="/newroot/24/file0" dev="tmpfs" ino=148 res=1 errno=0
[  541.800425][   T30] audit: type=1800 audit(1843104716.744:22): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1551" name="file0" dev="tmpfs" ino=148 res=0 errno=0
[  541.906978][   T30] audit: type=1804 audit(1843104716.754:23): pid=12650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1551" name="/newroot/24/file0" dev="tmpfs" ino=148 res=1 errno=0
[  543.018345][T12654] can: request_module (can-proto-3) failed.
[  543.103242][T12660] vivid-007: =================  START STATUS  =================
[  543.145120][T12660] vivid-007: Generate PTS: true
[  543.185329][T12660] vivid-007: Generate SCR: true
[  543.220469][T12660] tpg source WxH: 320x240 (Y'CbCr)
[  543.263672][T12660] tpg field: 1
[  543.300257][T12660] tpg crop: (0,0)/320x240
[  543.323808][T12660] tpg compose: (0,0)/320x240
[  543.339680][T12660] tpg colorspace: 8
[  543.357672][T12660] tpg transfer function: 0/0
[  543.390929][T12660] tpg Y'CbCr encoding: 0/0
[  543.420600][T12660] tpg quantization: 0/0
[  543.456164][T12660] tpg RGB range: 0/2
[  543.487104][T12660] vivid-007: ==================  END STATUS  ==================
[  543.794500][T12668] openvswitch: netlink: Message has 4 unknown bytes.
[  544.143161][T12666] can: request_module (can-proto-0) failed.
[  544.568215][T12676] can: request_module (can-proto-0) failed.
[  545.681673][T12690] futex_wake_op: syz.9.1557 tries to shift op by -2048; fix this program
[  546.759210][T12679] Process accounting paused
[  547.561782][T12688] 0x000000000001-0x000000020000 : ""
[  547.650025][T12688] ftl_cs: FTL header corrupt!
[  547.890230][T12711] ERROR: Out of memory at tomoyo_memory_ok.
[  549.612032][T12706] ERROR: Out of memory at tomoyo_memory_ok.
[  551.250796][T12721] FAULT_INJECTION: forcing a failure.
[  551.250796][T12721] name failslab, interval 1, probability 0, space 0, times 0
[  551.315486][ T5641] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  551.335168][ T5641] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  551.355374][ T5641] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  551.363509][ T5641] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  551.371515][ T5641] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  551.487337][T12721] CPU: 0 UID: 0 PID: 12721 Comm: syz.7.1562 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  551.487376][T12721] Tainted: [L]=SOFTLOCKUP
[  551.487384][T12721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  551.487400][T12721] Call Trace:
[  551.487407][T12721]  <TASK>
[  551.487416][T12721]  dump_stack_lvl+0x100/0x190
[  551.487451][T12721]  should_fail_ex.cold+0x5/0xa
[  551.487483][T12721]  should_failslab+0xc2/0x120
[  551.487519][T12721]  kmem_cache_alloc_noprof+0x91/0x6a0
[  551.487549][T12721]  ? __proc_create+0xc1/0x8f0
[  551.487573][T12721]  ? __proc_create+0xc1/0x8f0
[  551.487596][T12721]  ? __proc_create+0x247/0x8f0
[  551.487625][T12721]  __proc_create+0x247/0x8f0
[  551.487653][T12721]  ? __pfx___proc_create+0x10/0x10
[  551.487689][T12721]  proc_mkdir+0x81/0x170
[  551.487714][T12721]  ? __pfx_proc_mkdir+0x10/0x10
[  551.487739][T12721]  ? cache_register_net+0x137/0x5e0
[  551.487834][T12721]  ? cache_register_net+0x137/0x5e0
[  551.487871][T12721]  cache_register_net+0x18f/0x5e0
[  551.487906][T12721]  gss_svc_init_net+0x98/0x640
[  551.487949][T12721]  ? __pfx_canbcm_pernet_init+0x10/0x10
[  551.488008][T12721]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[  551.488054][T12721]  ops_init+0x1e2/0x5f0
[  551.488088][T12721]  setup_net+0x118/0x3a0
[  551.488119][T12721]  ? __pfx_setup_net+0x10/0x10
[  551.488150][T12721]  ? mutex_init_lockdep+0xf1/0x120
[  551.488180][T12721]  copy_net_ns+0x46f/0x7c0
[  551.488216][T12721]  create_new_namespaces+0x3ea/0xac0
[  551.488251][T12721]  unshare_nsproxy_namespaces+0xf2/0x220
[  551.488288][T12721]  ksys_unshare+0x438/0xab0
[  551.488323][T12721]  ? __pfx_ksys_unshare+0x10/0x10
[  551.488367][T12721]  __x64_sys_unshare+0x31/0x40
[  551.488399][T12721]  do_syscall_64+0x115/0x840
[  551.488421][T12721]  ? clear_bhb_loop+0x40/0x90
[  551.488451][T12721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.488476][T12721] RIP: 0033:0x7f59c6f9ce59
[  551.488496][T12721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  551.488519][T12721] RSP: 002b:00007f59c7f19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  551.488543][T12721] RAX: ffffffffffffffda RBX: 00007f59c7216090 RCX: 00007f59c6f9ce59
[  551.488559][T12721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  551.488573][T12721] RBP: 00007f59c7032e6f R08: 0000000000000000 R09: 0000000000000000
[  551.488588][T12721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  551.488602][T12721] R13: 00007f59c7216128 R14: 00007f59c7216090 R15: 00007ffcbe1bd0e8
[  551.488633][T12721]  </TASK>
[  553.416377][ T5641] Bluetooth: hci10: command tx timeout
[  553.879094][T12753] FAULT_INJECTION: forcing a failure.
[  553.879094][T12753] name failslab, interval 1, probability 0, space 0, times 0
[  553.938883][T12753] CPU: 0 UID: 0 PID: 12753 Comm: syz.7.1567 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  553.938922][T12753] Tainted: [L]=SOFTLOCKUP
[  553.938931][T12753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  553.938946][T12753] Call Trace:
[  553.938954][T12753]  <TASK>
[  553.938963][T12753]  dump_stack_lvl+0x100/0x190
[  553.938998][T12753]  should_fail_ex.cold+0x5/0xa
[  553.939032][T12753]  should_failslab+0xc2/0x120
[  553.939067][T12753]  __kmalloc_cache_noprof+0x91/0x6c0
[  553.939100][T12753]  ? vidtv_psi_pmt_table_init+0x4c/0x430
[  553.939194][T12753]  vidtv_psi_pmt_table_init+0x4c/0x430
[  553.939224][T12753]  vidtv_psi_pmt_create_sec_for_each_pat_entry+0x293/0x670
[  553.939263][T12753]  vidtv_channel_si_init+0xf2d/0x18f0
[  553.939323][T12753]  vidtv_mux_init+0x522/0xbf0
[  553.939360][T12753]  vidtv_start_feed+0x34e/0x500
[  553.939418][T12753]  ? __pfx_vidtv_start_feed+0x10/0x10
[  553.939459][T12753]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  553.939516][T12753]  dmx_section_feed_start_filtering+0x3a8/0x660
[  553.939568][T12753]  dvb_dmxdev_filter_start+0x767/0xdd0
[  553.939633][T12753]  dvb_demux_do_ioctl+0xe64/0x1200
[  553.939686][T12753]  dvb_usercopy+0x167/0x340
[  553.939719][T12753]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  553.939759][T12753]  ? __pfx_dvb_usercopy+0x10/0x10
[  553.939804][T12753]  ? __fget_files+0x21f/0x3d0
[  553.939833][T12753]  dvb_demux_ioctl+0x29/0x40
[  553.939866][T12753]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  553.939902][T12753]  __x64_sys_ioctl+0x18e/0x210
[  553.939940][T12753]  do_syscall_64+0x115/0x840
[  553.939961][T12753]  ? clear_bhb_loop+0x40/0x90
[  553.939992][T12753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.940017][T12753] RIP: 0033:0x7f59c6f9ce59
[  553.940037][T12753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  553.940061][T12753] RSP: 002b:00007f59c7f19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  553.940083][T12753] RAX: ffffffffffffffda RBX: 00007f59c7216090 RCX: 00007f59c6f9ce59
[  553.940106][T12753] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006
[  553.940121][T12753] RBP: 00007f59c7032e6f R08: 0000000000000000 R09: 0000000000000000
[  553.940136][T12753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  553.940151][T12753] R13: 00007f59c7216128 R14: 00007f59c7216090 R15: 00007ffcbe1bd0e8
[  553.940182][T12753]  </TASK>
[  554.314380][T12757] FAULT_INJECTION: forcing a failure.
[  554.314380][T12757] name failslab, interval 1, probability 0, space 0, times 0
[  554.327156][T12757] CPU: 0 UID: 0 PID: 12757 Comm: syz.9.1568 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  554.327194][T12757] Tainted: [L]=SOFTLOCKUP
[  554.327203][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  554.327218][T12757] Call Trace:
[  554.327227][T12757]  <TASK>
[  554.327236][T12757]  dump_stack_lvl+0x100/0x190
[  554.327271][T12757]  should_fail_ex.cold+0x5/0xa
[  554.327303][T12757]  should_failslab+0xc2/0x120
[  554.327339][T12757]  __kmalloc_cache_noprof+0x91/0x6c0
[  554.327363][T12757]  ? __kasan_kmalloc+0xaa/0xb0
[  554.327395][T12757]  ? vidtv_psi_network_name_desc_init+0x68/0x310
[  554.327429][T12757]  vidtv_psi_network_name_desc_init+0x68/0x310
[  554.327458][T12757]  vidtv_psi_nit_table_init+0x291/0x5f0
[  554.327491][T12757]  vidtv_channel_si_init+0xccf/0x18f0
[  554.327533][T12757]  vidtv_mux_init+0x522/0xbf0
[  554.327570][T12757]  vidtv_start_feed+0x34e/0x500
[  554.327610][T12757]  ? __pfx_vidtv_start_feed+0x10/0x10
[  554.327651][T12757]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  554.327707][T12757]  dmx_section_feed_start_filtering+0x3a8/0x660
[  554.327743][T12757]  dvb_dmxdev_filter_start+0x767/0xdd0
[  554.327790][T12757]  dvb_demux_do_ioctl+0xe64/0x1200
[  554.327837][T12757]  dvb_usercopy+0x167/0x340
[  554.327871][T12757]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  554.327918][T12757]  ? __pfx_dvb_usercopy+0x10/0x10
[  554.327964][T12757]  ? __fget_files+0x21f/0x3d0
[  554.327993][T12757]  dvb_demux_ioctl+0x29/0x40
[  554.328026][T12757]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  554.328063][T12757]  __x64_sys_ioctl+0x18e/0x210
[  554.328101][T12757]  do_syscall_64+0x115/0x840
[  554.328123][T12757]  ? clear_bhb_loop+0x40/0x90
[  554.328153][T12757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.328178][T12757] RIP: 0033:0x7fd31279ce59
[  554.328199][T12757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.328223][T12757] RSP: 002b:00007fd31361c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  554.328246][T12757] RAX: ffffffffffffffda RBX: 00007fd312a16090 RCX: 00007fd31279ce59
[  554.328274][T12757] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006
[  554.328288][T12757] RBP: 00007fd312832e6f R08: 0000000000000000 R09: 0000000000000000
[  554.328302][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  554.328316][T12757] R13: 00007fd312a16128 R14: 00007fd312a16090 R15: 00007fff4b723cb8
[  554.328347][T12757]  </TASK>
[  555.485763][ T5641] Bluetooth: hci10: command tx timeout
[  555.690652][T12771] Device name cannot be null; rc = [-22]
[  556.234198][T12731] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.257211][T12731] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.286540][T12731] bridge_slave_0: entered allmulticast mode
[  556.306899][T12731] bridge_slave_0: entered promiscuous mode
[  556.371896][T12731] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.394696][T12731] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.416447][T12731] bridge_slave_1: entered allmulticast mode
[  556.434581][T12731] bridge_slave_1: entered promiscuous mode
[  556.604829][T12731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  556.654029][T12731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  556.824974][T12731] team0: Port device team_slave_0 added
[  556.863254][T12731] team0: Port device team_slave_1 added
[  556.999651][T12731] batman_adv: batadv0: Adding interface: batadv_slave_0
[  557.061881][T12731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  557.165831][T12731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  557.346267][T12731] batman_adv: batadv0: Adding interface: batadv_slave_1
[  557.394221][T12731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  557.503614][T12731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  557.555117][ T5641] Bluetooth: hci10: command tx timeout
[  557.938995][T12731] hsr_slave_0: entered promiscuous mode
[  557.967529][T12731] hsr_slave_1: entered promiscuous mode
[  557.986777][T12731] debugfs: 'hsr0' already exists in 'hsr'
[  558.007605][T12731] Cannot create hsr debugfs directory
[  559.624545][ T5641] Bluetooth: hci10: command tx timeout
[  559.747788][T12731] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  559.838253][T12731] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  559.940914][T12731] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  559.978235][T12731] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  560.009980][T12731] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  560.073100][T12731] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  560.094210][T12731] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  560.143244][T12731] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  560.698951][T12731] 8021q: adding VLAN 0 to HW filter on device bond0
[  560.762735][T12731] 8021q: adding VLAN 0 to HW filter on device team0
[  560.795701][T12806] FAULT_INJECTION: forcing a failure.
[  560.795701][T12806] name failslab, interval 1, probability 0, space 0, times 0
[  560.828826][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.836042][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  560.860392][T12806] CPU: 0 UID: 0 PID: 12806 Comm: syz.9.1574 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  560.860430][T12806] Tainted: [L]=SOFTLOCKUP
[  560.860439][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  560.860453][T12806] Call Trace:
[  560.860461][T12806]  <TASK>
[  560.860470][T12806]  dump_stack_lvl+0x100/0x190
[  560.860505][T12806]  should_fail_ex.cold+0x5/0xa
[  560.860538][T12806]  should_failslab+0xc2/0x120
[  560.860573][T12806]  __kmalloc_cache_noprof+0x91/0x6c0
[  560.860600][T12806]  ? rfkill_fop_open+0x1cc/0x480
[  560.860642][T12806]  rfkill_fop_open+0x1cc/0x480
[  560.860679][T12806]  ? __pfx_rfkill_fop_open+0x10/0x10
[  560.860717][T12806]  misc_open+0x26d/0x450
[  560.860742][T12806]  ? __pfx_misc_open+0x10/0x10
[  560.860774][T12806]  chrdev_open+0x234/0x6a0
[  560.860799][T12806]  ? __pfx_apparmor_file_open+0x10/0x10
[  560.860826][T12806]  ? __pfx_chrdev_open+0x10/0x10
[  560.860853][T12806]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  560.860887][T12806]  do_dentry_open+0x6ab/0x14d0
[  560.860912][T12806]  ? __pfx_chrdev_open+0x10/0x10
[  560.860943][T12806]  vfs_open+0x82/0x3f0
[  560.860978][T12806]  path_openat+0x2873/0x4280
[  560.861015][T12806]  ? __pfx_path_openat+0x10/0x10
[  560.861049][T12806]  do_file_open+0x20e/0x430
[  560.861076][T12806]  ? __pfx_do_file_open+0x10/0x10
[  560.861123][T12806]  ? alloc_fd+0x471/0x7a0
[  560.861149][T12806]  ? do_getname+0x191/0x390
[  560.861182][T12806]  do_sys_openat2+0x10f/0x1e0
[  560.861221][T12806]  ? __pfx_do_sys_openat2+0x10/0x10
[  560.861255][T12806]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  560.861306][T12806]  __x64_sys_openat+0x12d/0x210
[  560.861345][T12806]  ? __pfx___x64_sys_openat+0x10/0x10
[  560.861390][T12806]  do_syscall_64+0x115/0x840
[  560.861412][T12806]  ? clear_bhb_loop+0x40/0x90
[  560.861441][T12806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.861466][T12806] RIP: 0033:0x7fd31279ce59
[  560.861486][T12806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  560.861510][T12806] RSP: 002b:00007fd31363d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  560.861532][T12806] RAX: ffffffffffffffda RBX: 00007fd312a15fa0 RCX: 00007fd31279ce59
[  560.861548][T12806] RDX: 0000000000002502 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  560.861564][T12806] RBP: 00007fd312832e6f R08: 0000000000000000 R09: 0000000000000000
[  560.861578][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  560.861592][T12806] R13: 00007fd312a16038 R14: 00007fd312a15fa0 R15: 00007fff4b723cb8
[  560.861623][T12806]  </TASK>
[  561.274406][T12731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  561.287516][T12731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  561.308484][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.315676][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  561.737577][T12816] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  561.783999][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  561.795318][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  562.594445][ T5632] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  562.618000][ T5632] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  562.626531][ T5632] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  562.636270][ T5632] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  562.644228][ T5632] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  563.151848][T12826] can: request_module (can-proto-5) failed.
[  563.308703][T12731] 8021q: adding VLAN 0 to HW filter on device batadv0
[  563.566876][T12731] veth0_vlan: entered promiscuous mode
[  563.631774][T12731] veth1_vlan: entered promiscuous mode
[  563.801634][T12731] veth0_macvtap: entered promiscuous mode
[  563.863803][T12731] veth1_macvtap: entered promiscuous mode
[  563.986317][T12843] FAULT_INJECTION: forcing a failure.
[  563.986317][T12843] name failslab, interval 1, probability 0, space 0, times 0
[  564.087693][T12843] CPU: 0 UID: 0 PID: 12843 Comm: syz.7.1578 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  564.087732][T12843] Tainted: [L]=SOFTLOCKUP
[  564.087741][T12843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  564.087755][T12843] Call Trace:
[  564.087762][T12843]  <TASK>
[  564.087771][T12843]  dump_stack_lvl+0x100/0x190
[  564.087806][T12843]  should_fail_ex.cold+0x5/0xa
[  564.087837][T12843]  should_failslab+0xc2/0x120
[  564.087891][T12843]  __kmalloc_cache_noprof+0x91/0x6c0
[  564.087920][T12843]  ? vidtv_psi_pmt_stream_init+0x4e/0x3e0
[  564.087957][T12843]  vidtv_psi_pmt_stream_init+0x4e/0x3e0
[  564.087987][T12843]  vidtv_channel_si_init+0x1365/0x18f0
[  564.088028][T12843]  vidtv_mux_init+0x522/0xbf0
[  564.088064][T12843]  vidtv_start_feed+0x34e/0x500
[  564.088104][T12843]  ? __pfx_vidtv_start_feed+0x10/0x10
[  564.088143][T12843]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  564.088197][T12843]  dmx_section_feed_start_filtering+0x3a8/0x660
[  564.088233][T12843]  dvb_dmxdev_filter_start+0x767/0xdd0
[  564.088287][T12843]  dvb_demux_do_ioctl+0xe64/0x1200
[  564.088339][T12843]  dvb_usercopy+0x167/0x340
[  564.088372][T12843]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  564.088412][T12843]  ? __pfx_dvb_usercopy+0x10/0x10
[  564.088457][T12843]  ? __fget_files+0x21f/0x3d0
[  564.088485][T12843]  dvb_demux_ioctl+0x29/0x40
[  564.088519][T12843]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  564.088554][T12843]  __x64_sys_ioctl+0x18e/0x210
[  564.088592][T12843]  do_syscall_64+0x115/0x840
[  564.088614][T12843]  ? clear_bhb_loop+0x40/0x90
[  564.088644][T12843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.088669][T12843] RIP: 0033:0x7f59c6f9ce59
[  564.088689][T12843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  564.088713][T12843] RSP: 002b:00007f59c7f19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  564.088736][T12843] RAX: ffffffffffffffda RBX: 00007f59c7216090 RCX: 00007f59c6f9ce59
[  564.088752][T12843] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006
[  564.088766][T12843] RBP: 00007f59c7032e6f R08: 0000000000000000 R09: 0000000000000000
[  564.088781][T12843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  564.088795][T12843] R13: 00007f59c7216128 R14: 00007f59c7216090 R15: 00007ffcbe1bd0e8
[  564.088826][T12843]  </TASK>
[  564.525811][T12731] batman_adv: batadv0: Interface activated: batadv_slave_0
[  564.536504][T12731] batman_adv: batadv0: Interface activated: batadv_slave_1
[  564.650327][   T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  564.792802][ T5641] Bluetooth: hci11: command tx timeout
[  564.853575][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  564.883583][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.046374][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  565.411862][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.446433][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.648722][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.706452][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.402901][T12856] can: request_module (can-proto-3) failed.
[  566.487611][T12865] can: request_module (can-proto-0) failed.
[  566.869629][ T5641] Bluetooth: hci11: command tx timeout
[  567.012757][T12827] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.077999][T12827] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.142815][T12827] bridge_slave_0: entered allmulticast mode
[  567.213889][T12827] bridge_slave_0: entered promiscuous mode
[  567.253718][T12827] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.300625][T12827] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.332099][T12827] bridge_slave_1: entered allmulticast mode
[  567.363379][T12827] bridge_slave_1: entered promiscuous mode
[  567.636612][T12827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.710471][T12827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.070420][T12827] team0: Port device team_slave_0 added
[  568.117371][T12827] team0: Port device team_slave_1 added
[  568.319273][T12827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  568.355183][T12827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.487352][T12827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  568.733401][T12827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.770474][T12827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.885668][T12827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  568.941458][ T5641] Bluetooth: hci11: command tx timeout
[  569.103177][T12897] can: request_module (can-proto-0) failed.
[  569.322645][T12827] hsr_slave_0: entered promiscuous mode
[  569.360784][T12827] hsr_slave_1: entered promiscuous mode
[  569.382477][T12827] debugfs: 'hsr0' already exists in 'hsr'
[  569.400619][T12827] Cannot create hsr debugfs directory
[  569.587192][T12903] FAULT_INJECTION: forcing a failure.
[  569.587192][T12903] name failslab, interval 1, probability 0, space 0, times 0
[  569.690346][T12903] CPU: 0 UID: 0 PID: 12903 Comm: syz.2.1586 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  569.690385][T12903] Tainted: [L]=SOFTLOCKUP
[  569.690394][T12903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  569.690408][T12903] Call Trace:
[  569.690416][T12903]  <TASK>
[  569.690425][T12903]  dump_stack_lvl+0x100/0x190
[  569.690459][T12903]  should_fail_ex.cold+0x5/0xa
[  569.690493][T12903]  should_failslab+0xc2/0x120
[  569.690529][T12903]  __kmalloc_cache_noprof+0x91/0x6c0
[  569.690553][T12903]  ? __pfx___debug_object_init+0x10/0x10
[  569.690676][T12903]  ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200
[  569.690718][T12903]  vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200
[  569.690755][T12903]  vidtv_mux_create_pid_ctx_once+0xe6/0x140
[  569.690792][T12903]  vidtv_mux_init+0x758/0xbf0
[  569.690829][T12903]  vidtv_start_feed+0x34e/0x500
[  569.690870][T12903]  ? __pfx_vidtv_start_feed+0x10/0x10
[  569.690910][T12903]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  569.690965][T12903]  dmx_section_feed_start_filtering+0x3a8/0x660
[  569.691001][T12903]  dvb_dmxdev_filter_start+0x767/0xdd0
[  569.691048][T12903]  dvb_demux_do_ioctl+0xe64/0x1200
[  569.691096][T12903]  dvb_usercopy+0x167/0x340
[  569.691128][T12903]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  569.691169][T12903]  ? __pfx_dvb_usercopy+0x10/0x10
[  569.691213][T12903]  ? __fget_files+0x21f/0x3d0
[  569.691242][T12903]  dvb_demux_ioctl+0x29/0x40
[  569.691275][T12903]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  569.691311][T12903]  __x64_sys_ioctl+0x18e/0x210
[  569.691351][T12903]  do_syscall_64+0x115/0x840
[  569.691374][T12903]  ? clear_bhb_loop+0x40/0x90
[  569.691403][T12903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.691429][T12903] RIP: 0033:0x7ff93019ce59
[  569.691448][T12903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.691471][T12903] RSP: 002b:00007ff9310b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  569.691494][T12903] RAX: ffffffffffffffda RBX: 00007ff930416090 RCX: 00007ff93019ce59
[  569.691511][T12903] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006
[  569.691525][T12903] RBP: 00007ff930232e6f R08: 0000000000000000 R09: 0000000000000000
[  569.691540][T12903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  569.691555][T12903] R13: 00007ff930416128 R14: 00007ff930416090 R15: 00007ffdda815be8
[  569.691592][T12903]  </TASK>
[  570.105720][T12907] can: request_module (can-proto-3) failed.
[  570.991449][T12827] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.006514][ T5641] Bluetooth: hci11: command tx timeout
[  571.300244][T12827] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.496244][T12827] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.579759][T12926] can: request_module (can-proto-0) failed.
[  572.922936][T12827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  572.953219][T12827] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  572.983939][T12827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  573.061961][T12827] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  573.167071][T12827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  573.226779][T12827] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  573.262263][T12827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  573.317087][T12827] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  573.668196][T12827] 8021q: adding VLAN 0 to HW filter on device bond0
[  573.748579][T12827] 8021q: adding VLAN 0 to HW filter on device team0
[  573.794511][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.801736][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state
[  573.886647][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.893879][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state
[  575.092404][T12827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  575.723985][T12827] veth0_vlan: entered promiscuous mode
[  575.798774][T12827] veth1_vlan: entered promiscuous mode
[  575.882889][T12827] veth0_macvtap: entered promiscuous mode
[  575.911469][T12827] veth1_macvtap: entered promiscuous mode
[  575.958591][T12827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  576.000573][T12827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  576.059910][T12834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  576.077626][T12834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  576.109178][T12834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  576.144377][T12834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  576.293709][T12834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  576.319762][T12834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  576.369856][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  576.379240][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  576.702329][T12975] can: request_module (can-proto-3) failed.
[  576.910617][T12976] futex_wake_op: syz.0.1576 tries to shift op by -2048; fix this program
[  577.323192][T12976] 0x000000000001-0x000000020000 : ""
[  577.337621][T12976] ftl_cs: FTL header corrupt!
[  577.574134][T12986] ERROR: Out of memory at tomoyo_memory_ok.
[  578.442823][   T30] audit: type=1804 audit(1843104753.644:24): pid=12990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1604" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0
[  578.491607][   T30] audit: type=1800 audit(1843104753.665:25): pid=12990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1604" name="file0" dev="tmpfs" ino=23 res=0 errno=0
[  578.559416][   T30] audit: type=1804 audit(1843104753.675:26): pid=12990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1604" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0
[  579.045906][T13001] can: request_module (can-proto-0) failed.
[  583.260734][T13062] ERROR: Out of memory at tomoyo_memory_ok.
[  586.761746][ T5632] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  586.784493][ T5632] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  586.797438][ T5632] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  586.809340][ T5632] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  586.822807][ T5632] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  587.183708][T13089] can: request_module (can-proto-3) failed.
[  587.818458][T13101] CIFS: VFS: Invalid SecurityFlags: 
[  588.834354][ T5632] Bluetooth: hci12: command tx timeout
[  588.947066][T13084] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.972468][T13084] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.985233][T13084] bridge_slave_0: entered allmulticast mode
[  589.022417][T13084] bridge_slave_0: entered promiscuous mode
[  589.048397][T13084] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.055791][T13084] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.067058][T13084] bridge_slave_1: entered allmulticast mode
[  589.077330][T13084] bridge_slave_1: entered promiscuous mode
[  589.136714][T13084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  589.156136][T13084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  589.198674][T13084] team0: Port device team_slave_0 added
[  589.208968][T13084] team0: Port device team_slave_1 added
[  589.241214][T13084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  589.248224][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  589.277021][T13084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  589.291586][T13084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  589.307066][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  589.337563][T13084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  589.387902][T13084] hsr_slave_0: entered promiscuous mode
[  589.403905][T13084] hsr_slave_1: entered promiscuous mode
[  589.414827][T13084] debugfs: 'hsr0' already exists in 'hsr'
[  589.421404][T13084] Cannot create hsr debugfs directory
[  589.625577][T13084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.732108][T13084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.824238][T13084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.902556][T13084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.126608][T13084] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  590.137329][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  590.146164][T13084] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  590.158695][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  590.170805][T13084] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  590.181696][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  590.192150][T13084] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  590.203237][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  590.309359][T13084] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.342666][T13084] 8021q: adding VLAN 0 to HW filter on device team0
[  590.359081][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.366287][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  590.388181][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.395376][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  590.901886][ T5632] Bluetooth: hci12: command tx timeout
[  590.966012][T13084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  591.208110][T13084] veth0_vlan: entered promiscuous mode
[  591.286625][T13084] veth1_vlan: entered promiscuous mode
[  591.359750][T13137] can: request_module (can-proto-0) failed.
[  591.437437][T13084] veth0_macvtap: entered promiscuous mode
[  591.505396][T13084] veth1_macvtap: entered promiscuous mode
[  591.611330][ T5641] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  591.626045][ T5641] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  591.635298][ T5641] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  591.661684][ T5641] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  591.669490][ T5641] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  591.728203][T13084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  591.763061][T13084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  591.798287][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  591.819087][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  591.853253][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  591.899426][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  592.142854][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  592.192163][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  592.299015][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  592.321073][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  592.838411][T13154] can: request_module (can-proto-0) failed.
[  592.972552][ T5632] Bluetooth: hci12: command tx timeout
[  593.521977][T13142] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.531624][T13142] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.540328][T13142] bridge_slave_0: entered allmulticast mode
[  593.548475][T13142] bridge_slave_0: entered promiscuous mode
[  593.558425][T13142] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.565688][T13142] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.583814][T13142] bridge_slave_1: entered allmulticast mode
[  593.591690][T13142] bridge_slave_1: entered promiscuous mode
[  593.641172][T13142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  593.654900][T13142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  593.710743][T13142] team0: Port device team_slave_0 added
[  593.719277][T13142] team0: Port device team_slave_1 added
[  593.749930][T13142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  593.757893][T13142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  593.789644][ T5641] Bluetooth: hci13: command tx timeout
[  593.808673][T13142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  593.825570][T13142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  593.832982][T13142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  593.864766][T13142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  593.933892][T13142] hsr_slave_0: entered promiscuous mode
[  593.941399][T13142] hsr_slave_1: entered promiscuous mode
[  593.948103][T13142] debugfs: 'hsr0' already exists in 'hsr'
[  593.953885][T13142] Cannot create hsr debugfs directory
[  594.202068][T13142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.302403][T13142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.370074][T13142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.439548][T13142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.637107][T13142] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  594.647660][T13142] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  594.657161][T13142] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  594.667880][T13142] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  594.676674][T13142] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  594.690016][T13142] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  594.708839][T13142] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  594.719270][T13142] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  594.833494][T13142] 8021q: adding VLAN 0 to HW filter on device bond0
[  594.863107][T13142] 8021q: adding VLAN 0 to HW filter on device team0
[  594.876817][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  594.884094][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  594.925626][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  594.932836][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  595.041211][ T5641] Bluetooth: hci12: command tx timeout
[  595.473647][T13142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  595.542091][T13142] veth0_vlan: entered promiscuous mode
[  595.556381][T13142] veth1_vlan: entered promiscuous mode
[  595.596203][T13142] veth0_macvtap: entered promiscuous mode
[  595.619778][T13142] veth1_macvtap: entered promiscuous mode
[  595.642606][T13142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  595.662538][T13142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  595.683465][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.702224][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.735217][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.826441][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  595.838408][ T5641] Bluetooth: hci13: command tx timeout
[  595.942490][T12834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.969387][T12834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.013631][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.034133][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.259735][T13191] device-mapper: ioctl: Unable to rename non-existent device,  to „
[  596.698566][T13194] futex_wake_op: syz.3.1641 tries to shift op by -2048; fix this program
[  597.020308][T13194] 0x000000000001-0x000000020000 : ""
[  597.065610][T13194] ftl_cs: FTL header corrupt!
[  597.184273][T13200] ERROR: Out of memory at tomoyo_memory_ok.
[  597.905193][ T5641] Bluetooth: hci13: command tx timeout
[  597.961874][T13207] can: request_module (can-proto-0) failed.
[  599.976587][ T5641] Bluetooth: hci13: command tx timeout
[  600.405155][T13244] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  600.836715][T13239] futex_wake_op: syz.1.1660 tries to shift op by -2048; fix this program
[  601.673616][T13269] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  602.320598][T13239] 0x000000000001-0x000000020000 : ""
[  602.427096][T13239] ftl_cs: FTL header corrupt!
[  602.538729][   T31] INFO: task syz-executor:5636 blocked for more than 143 seconds.
[  602.571559][T13278] can: request_module (can-proto-0) failed.
[  602.580042][   T31]       Tainted: G             L      syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  602.663208][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  602.753702][   T31] task:syz-executor    state:D stack:22512 pid:5636  tgid:5636  ppid:1      task_flags:0x400140 flags:0x00080002
[  602.870706][   T31] Call Trace:
[  602.903220][   T31]  <TASK>
[  602.906931][T13283] ERROR: Out of memory at tomoyo_memory_ok.
[  602.934941][   T31]  __schedule+0x125c/0x6730
[  602.968953][   T31]  ? do_raw_spin_lock+0x128/0x260
[  603.009738][   T31]  ? __pfx___schedule+0x10/0x10
[  603.058439][   T31]  ? find_held_lock+0x2b/0x80
[  603.092460][   T31]  ? schedule+0x225/0x2c0
[  603.117743][   T31]  schedule+0xdd/0x2c0
[  603.140651][   T31]  schedule_preempt_disabled+0x13/0x30
[  603.179516][   T31]  __mutex_lock+0xccc/0x1bd0
[  603.206646][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  603.233364][   T31]  ? __lock_acquire+0x49f/0x1a40
[  603.286452][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  603.355588][   T31]  ? net_generic+0xea/0x2a0
[  603.416860][   T31]  ? net_generic+0xea/0x2a0
[  603.470644][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  603.528014][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  603.578332][   T31]  nfsd_umount+0x3b/0x60
[  603.604925][   T31]  deactivate_locked_super+0xc1/0x1b0
[  603.671636][   T31]  deactivate_super+0xe7/0x110
[  603.702741][   T31]  cleanup_mnt+0x21f/0x450
[  603.740569][   T31]  task_work_run+0x150/0x240
[  603.780103][   T31]  ? __pfx_task_work_run+0x10/0x10
[  603.820786][   T31]  exit_to_user_mode_loop+0x1d8/0x6f0
[  603.849277][   T31]  ? rcu_is_watching+0x12/0xc0
[  603.878704][   T31]  do_syscall_64+0x652/0x840
[  603.899673][   T31]  ? clear_bhb_loop+0x40/0x90
[  603.920180][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.947138][   T31] RIP: 0033:0x7fd2c659e097
[  603.975223][   T31] RSP: 002b:00007fff02921bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  604.030348][   T31] RAX: 0000000000000000 RBX: 00007fd2c66322ca RCX: 00007fd2c659e097
[  604.074003][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff02921cb0
[  604.110988][   T31] RBP: 00007fff02921cb0 R08: 00007fff02922cb0 R09: 00000000ffffffff
[  604.143049][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff02922d40
[  604.178696][   T31] R13: 00007fd2c66322ca R14: 000000000006f06b R15: 00007fff02922d80
[  604.206968][   T31]  </TASK>
[  604.217074][   T31] INFO: task syz.2.1424:11696 blocked for more than 145 seconds.
[  604.320792][   T31]       Tainted: G             L      syzkaller #0
[  604.340626][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  604.349834][   T31] task:syz.2.1424      state:D stack:28136 pid:11696 tgid:11688 ppid:5640   task_flags:0x400040 flags:0x00080002
[  604.364577][   T31] Call Trace:
[  604.367923][   T31]  <TASK>
[  604.378709][   T31]  __schedule+0x125c/0x6730
[  604.383657][   T31]  ? do_raw_spin_lock+0x128/0x260
[  604.388755][   T31]  ? __pfx___schedule+0x10/0x10
[  604.398162][   T31]  ? find_held_lock+0x2b/0x80
[  604.406399][   T31]  ? schedule+0x225/0x2c0
[  604.411131][   T31]  schedule+0xdd/0x2c0
[  604.415262][   T31]  schedule_preempt_disabled+0x13/0x30
[  604.422254][   T31]  __mutex_lock+0xccc/0x1bd0
[  604.426895][   T31]  ? nfsd_nl_listener_get_doit+0x13f/0x7c0
[  604.444339][   T31]  ? __kasan_slab_alloc+0x89/0x90
[  604.449455][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  604.454972][   T31]  ? kmalloc_reserve+0xf9/0x350
[  604.459970][   T31]  ? skb_put+0x138/0x180
[  604.464727][   T31]  ? __nlmsg_put+0x152/0x1c0
[  604.469424][   T31]  ? nfsd_nl_listener_get_doit+0x13f/0x7c0
[  604.486899][   T31]  nfsd_nl_listener_get_doit+0x13f/0x7c0
[  604.498093][   T31]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  604.508818][   T31]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  604.521515][   T31]  genl_family_rcv_msg_doit+0x214/0x300
[  604.527127][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  604.534540][   T31]  ? genl_get_cmd+0x3e7/0x760
[  604.539275][   T31]  ? __dev_queue_xmit+0xa11/0x4940
[  604.545058][   T31]  ? __radix_tree_lookup+0x217/0x2b0
[  604.550754][   T31]  genl_rcv_msg+0x560/0x800
[  604.555304][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  604.560820][   T31]  ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10
[  604.567043][   T31]  netlink_rcv_skb+0x159/0x420
[  604.572303][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  604.584741][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  604.590971][   T31]  ? netlink_deliver_tap+0x1ae/0xcc0
[  604.596341][   T31]  genl_rcv+0x28/0x40
[  604.600836][   T31]  netlink_unicast+0x585/0x850
[  604.605657][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  604.615374][   T31]  netlink_sendmsg+0x8b0/0xda0
[  604.622602][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  604.627975][   T31]  ? apparmor_socket_sendmsg+0x15b/0x270
[  604.635478][   T31]  ____sys_sendmsg+0xa4d/0xbe0
[  604.641704][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  604.647108][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  604.653265][   T31]  ? kasan_quarantine_put+0x104/0x240
[  604.658720][   T31]  ? lockdep_hardirqs_on+0x78/0x100
[  604.664504][   T31]  ? find_held_lock+0x2b/0x80
[  604.685192][   T31]  ___sys_sendmsg+0x190/0x1e0
[  604.690406][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  604.695685][   T31]  ? __lock_acquire+0x49f/0x1a40
[  604.701155][   T31]  __sys_sendmsg+0x160/0x210
[  604.705796][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  604.711572][   T31]  ? kcov_ioctl+0x17a/0x750
[  604.716161][   T31]  do_syscall_64+0x115/0x840
[  604.724716][   T31]  ? clear_bhb_loop+0x40/0x90
[  604.731939][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.738576][   T31] RIP: 0033:0x7f197799ce59
[  604.744486][   T31] RSP: 002b:00007f1978922028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  604.754528][   T31] RAX: ffffffffffffffda RBX: 00007f1977c16090 RCX: 00007f197799ce59
[  604.762908][   T31] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 0000000000000004
[  604.771347][   T31] RBP: 00007f1977a32e6f R08: 0000000000000000 R09: 0000000000000000
[  604.787293][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  604.795934][   T31] R13: 00007f1977c16128 R14: 00007f1977c16090 R15: 00007ffca1737338
[  604.804343][   T31]  </TASK>
[  604.873620][   T31] 
[  604.873620][   T31] Showing all locks held in the system:
[  604.955746][   T31] 1 lock held by khungtaskd/31:
[  604.998544][   T31]  #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  605.053907][   T31] 2 locks held by syz-executor/5636:
[  605.081000][   T31]  #0: ffff88802b9660d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  605.123537][   T31]  #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  605.154952][   T31] 2 locks held by syz-executor/5637:
[  605.178847][   T31]  #0: ffff88807eea00d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  605.230361][   T31]  #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  605.282374][   T31] 3 locks held by kworker/0:4/5720:
[  605.309481][   T31]  #0: ffff88813fe6b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[  605.346150][   T31]  #1: ffffc900048efd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[  605.371522][   T31]  #2: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  605.432442][   T31] 4 locks held by kworker/0:5/5734:
[  605.453597][   T31]  #0: ffff8880b843b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140
[  605.485467][   T31]  #1: ffff888057d0c008 (&____s->seqcount#17){.-.-}-{0:0}, at: trace_ignore_this_task+0x56/0x100
[  605.514224][   T31]  #2: ffffe8ffffca8c98 (&ACCESS_PRIVATE(sdp, lock)){....}-{2:2}, at: srcu_invoke_callbacks+0x3be/0x5e0
[  605.528284][   T31]  #3: ffff88805900a6a8 (slock-AF_INET){+.-.}-{3:3}, at: mptcp_release_cb+0x1a0/0x710
[  605.538391][   T31] 2 locks held by getty/5813:
[  605.543137][   T31]  #0: ffff888036d4f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  605.555543][   T31]  #1: ffffc9000303e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  605.566174][   T31] 2 locks held by syz.2.1424/11690:
[  605.571428][   T31]  #0: ffffffff906efda8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  605.580143][   T31]  #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[  605.590915][   T31] 2 locks held by syz.2.1424/11696:
[  605.603564][   T31]  #0: ffffffff906efda8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  605.612860][   T31]  #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13f/0x7c0
[  605.629282][   T31] 2 locks held by syz.1.1451/11816:
[  605.636560][   T31]  #0: ffff88805811e0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  605.647361][   T31]  #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  605.657321][   T31] 2 locks held by syz-executor/11839:
[  605.662724][   T31]  #0: ffff888029bf20d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  605.673526][   T31]  #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  605.683471][   T31] 2 locks held by syz-executor/11881:
[  605.689249][   T31]  #0: ffff88807ec3c0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  605.725319][   T31]  #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  605.739387][   T31] 2 locks held by syz-executor/12468:
[  605.747714][   T31]  #0: ffff888054a360d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  605.758432][   T31]  #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  605.768497][   T31] 3 locks held by syz.6.1547/12596:
[  605.774031][   T31]  #0: ffff888032e6b7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  605.783147][   T31]  #1: ffff8880329d4450 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340
[  605.794745][   T31]  #2: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90
[  605.811337][   T31] 2 locks held by syz.8.1560/12705:
[  605.816887][   T31]  #0: ffffffff906efda8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  605.826586][   T31]  #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x8a/0x2f0
[  605.838563][   T31] 2 locks held by syz-executor/12731:
[  605.850453][   T31]  #0: ffff88802e7220d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  605.863026][   T31]  #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  605.874705][   T31] 4 locks held by kworker/u8:4/12834:
[  605.880115][   T31]  #0: ffff88801c6c6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[  605.891072][   T31]  #1: ffffc90005137d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[  605.908702][   T31]  #2: ffffffff906288e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[  605.918841][   T31]  #3: ffffffff90641500 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0
[  605.928345][   T31] 1 lock held by syz.7.1578/12847:
[  605.934664][   T31]  #0: ffff888075b88ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[  605.945494][   T31] 3 locks held by syz-executor/13084:
[  605.950917][   T31]  #0: ffff88808a6c8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[  605.967724][   T31]  #1: ffff88808a6c80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0
[  605.977900][   T31]  #2: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  605.988335][   T31] 1 lock held by syz-executor/13142:
[  605.994023][   T31]  #0: ffff88808a6f4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[  606.011308][   T31] 1 lock held by syz.0.1675/13273:
[  606.017072][   T31]  #0: ffff88808a78cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[  606.044510][   T31] 
[  606.064840][   T31] =============================================
[  606.064840][   T31] 
[  606.124149][   T31] NMI backtrace for cpu 0
[  606.124174][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  606.124210][   T31] Tainted: [L]=SOFTLOCKUP
[  606.124218][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  606.124232][   T31] Call Trace:
[  606.124239][   T31]  <TASK>
[  606.124248][   T31]  dump_stack_lvl+0x100/0x190
[  606.124283][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  606.124316][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  606.124348][   T31]  nmi_trigger_cpumask_backtrace+0x21c/0x2a0
[  606.124384][   T31]  sys_info+0x141/0x190
[  606.124411][   T31]  watchdog+0xcb1/0x1030
[  606.124453][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  606.124489][   T31]  ? __pfx_watchdog+0x10/0x10
[  606.124524][   T31]  ? __kthread_parkme+0x18c/0x230
[  606.124555][   T31]  ? kthread+0x13a/0x450
[  606.124585][   T31]  ? __pfx_watchdog+0x10/0x10
[  606.124618][   T31]  kthread+0x370/0x450
[  606.124649][   T31]  ? __pfx_kthread+0x10/0x10
[  606.124682][   T31]  ret_from_fork+0x72b/0xd50
[  606.124713][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  606.124744][   T31]  ? __switch_to+0x800/0x10f0
[  606.124765][   T31]  ? __switch_to_asm+0x39/0x70
[  606.124799][   T31]  ? __pfx_kthread+0x10/0x10
[  606.124833][   T31]  ret_from_fork_asm+0x1a/0x30
[  606.124881][   T31]  </TASK>
[  606.584309][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  606.591233][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  606.601926][   T31] Tainted: [L]=SOFTLOCKUP
[  606.606343][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  606.616425][   T31] Call Trace:
[  606.619730][   T31]  <TASK>
[  606.622669][   T31]  dump_stack_lvl+0x100/0x190
[  606.627368][   T31]  vpanic+0x552/0x970
[  606.631361][   T31]  ? __pfx_vpanic+0x10/0x10
[  606.635888][   T31]  ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0
[  606.642073][   T31]  panic+0xd1/0xe0
[  606.645812][   T31]  ? __pfx_panic+0x10/0x10
[  606.650242][   T31]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0
[  606.656439][   T31]  ? nmi_trigger_cpumask_backtrace+0x260/0x2a0
[  606.662621][   T31]  ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0
[  606.668887][   T31]  ? watchdog.cold+0x1ec/0x234
[  606.673674][   T31]  ? watchdog+0xcc1/0x1030
[  606.678121][   T31]  watchdog.cold+0x1fd/0x234
[  606.682734][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  606.688570][   T31]  ? __pfx_watchdog+0x10/0x10
[  606.693275][   T31]  ? __kthread_parkme+0x18c/0x230
[  606.698319][   T31]  ? kthread+0x13a/0x450
[  606.702591][   T31]  ? __pfx_watchdog+0x10/0x10
[  606.707294][   T31]  kthread+0x370/0x450
[  606.711383][   T31]  ? __pfx_kthread+0x10/0x10
[  606.716026][   T31]  ret_from_fork+0x72b/0xd50
[  606.720646][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  606.725777][   T31]  ? __switch_to+0x800/0x10f0
[  606.730467][   T31]  ? __switch_to_asm+0x39/0x70
[  606.735257][   T31]  ? __pfx_kthread+0x10/0x10
[  606.739894][   T31]  ret_from_fork_asm+0x1a/0x30
[  606.744707][   T31]  </TASK>
[  606.747812][   T31] Kernel Offset: disabled
[  606.752151][   T31] Rebooting in 86400 seconds..