last executing test programs:

3m11.854646483s ago: executing program 32 (id=872):
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x9a28)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, 0x0, 0x6f4)
write$auto(0xffffffffffffffff, 0x0, 0x80000000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
r2 = io_uring_setup$auto(0x1d48, &(0x7f0000000180)={0x7fffefff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0x2, 0x3}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x84)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0)
connect$auto(0x3, &(0x7f00000002c0)=@ethernet={0x306, @broadcast}, 0x54)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000)
io_uring_register$auto(r2, 0x18, 0x0, 0x9)
timer_create$auto(0x0, 0x0, 0x0)
r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x23)
read$auto_kernfs_file_fops_kernfs_internal(r6, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r6, 0x300000000000)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_MM_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r8, 0x301, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)

3m7.615500286s ago: executing program 33 (id=890):
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
rseq$auto(&(0x7f00000001c0)={0xe, 0xfffffff7, 0x1, 0x9, 0xffffffff, 0x9}, 0x8000, 0x0, 0x6)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0)
bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r1, 0x454f, 0xfff, 0x0, 0x0, r0, 0x80000000}, 0x6d4)
flock$auto(r0, 0xc6)
r2 = open(0x0, 0x4242, 0x59)
flock$auto(r2, 0x6)
mmap$auto(0x800, 0x9, 0x4, 0x40eb2, 0xffffffffffffffff, 0x300000000000)
connect$auto(0x3, 0x0, 0x55)
ioctl$auto(0x3, 0x5411, 0x10000000000402)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x90, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
close_range$auto(r4, 0x8, 0x0)
brk$auto(0xffffffffffffff66)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

3m5.720471952s ago: executing program 34 (id=899):
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x40ffff, 0x4, 0x0, 0x0, 0x7)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r2=>0x0})
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd70007ddbdf250c000000040003800c00018008000100", @ANYRES32=r2, @ANYBLOB="a3965e9d48ea718c4a513505a9dc35fb62008c56175a7213905b42b1fb2835d967c6022c3d63c3b5ac20fafa13cff231adf5a2664479b9554aeadadc493185ad60e13f08a315523939c924cc959dd919f32a396947e5"], 0x24}}, 0x0)

2m54.596207135s ago: executing program 35 (id=925):
mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x21f, 0xd, 0xfffffffd, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x400000009b72, 0x2, 0x8000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40090)
mmap$auto(0x0, 0x2020009, 0x3, 0x20000000000eb1, 0xfffffffffffffffa, 0x8008)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
futex$auto(&(0x7f00000000c0)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1)
read$auto(r1, 0x0, 0x20)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/sg0\x00', 0x200, 0x0)
ioctl$auto_BLKTRACESTOP2(r2, 0x1275, 0x0)
accept$auto(r1, 0x0, 0x0)
connect$auto(0xffffffffffffffff, 0x0, 0x9)
write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
madvise$auto(0x110c230000, 0x1, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000)
r6 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r5)
sendmsg$auto_ILA_CMD_DEL(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd70000aa78300020000000c000100c0ffffbfffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004)
r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r7, &(0x7f00000001c0)='/dev/audio1\x00', 0x100000a3d9)

2m40.291992828s ago: executing program 36 (id=948):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x261c2, 0x84)
write$auto_ftrace_enable_fops_trace_events(0xffffffffffffffff, &(0x7f0000000000)="a3a5ef09b5b35e13fae05cbc144f87d25db57560747a31736099f3281707ee3727cf3a430c340438cf2bfc7622074b9cbd47d33a8fcc675f800755e14e21f777602953a87d9d7c2e49c932f1c5241418c259f5e2a1b2503cceab9a366163116b184ac8d1b86457b107f50c1c04046b61946a73c534101cb745306fc6af1c74a0f948cb1d73e2ac13580c7e32d54d85beec07ff2eb69c8d41a15984f1972e642b9b23b6c352632fb7b4c1b5feef4cd41f6952484f2055b21b907aa67292afa156dbcc05f7e43ab888bb5aefab91adddec67f53b894be7cde405bd7a81f8f6cee1360bcea5d4953e7b0bb9c8806ecef879dcc644e379fbc46c61b31442cc91b967248f93ff7d880fe329752c8bb0be92332475e4f68c16a6a16223ad74ddbcc179c23864bc078e5f6da6ab5069a129c08405ad1a796579347990390966d71548262002f495a6824c9aeeae072347691188122d5bdd4b176aa40fe16f6f69f5dffbf63cee5af8facd6f083d35c609173ad85431a24a04d800275057a42ae08f9946f02cc0fcff16db4f719477937bcd107cc88d951326d537efad9840ab2898691d21d6f5ba539cebd073a20e7101b11866edc69c364300d1af3f366af7cbea46921c542e9fdcdbe614a8c5bc635b1b9fd0ea8019192416e2818de6b5c829fcb1551ef3c3916e45f32dca9915be6caef6da2dba8c099d2dbe5f8099afd4e5e1aa355a1a0be46fe5e9a26d9ed0667759cd68ba2a2fff7844016cdda98ad718ed1267d56bc79041edb3f9cf377f16cdd8d812399281f458f6612f66ea5fff4152a388998f91c8784d098276ac9770ffb1245e1e3b0df4d8718733b1aba36eec1fa1b52d01361090a92b65846b9d84bef1c73cb06b9c63d4296e2e08fc654dcdf74e61a88f74ae7f0810d0534dcec6312c2c", 0x28f)
mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, &(0x7f00000001c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2000, 0x0)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r0, 0x4008af25, &(0x7f00000002c0)=0x3)
ioctl$auto_MEMISLOCKED(0xffffffffffffffff, 0x80084d17, &(0x7f0000000080)={0xfffffffc, 0x4f90})
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r1)
r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05082da07000fbdfdf257efe1200f220c0ec4bac3a00d68abaac8c3d869f1c0611662d8763dd296066c3b97f10cccc005de7dcb5cbd1aa1814cd0ff8"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4008040)
mmap$auto(0x0, 0x400007, 0x100, 0x9b72, 0xffffffffffffffff, 0x0)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc)
modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10)
r4 = socket(0xa, 0x1, 0x100)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x0)
r5 = socket(0xa, 0x2, 0x73)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
fanotify_init$auto(0x1f53, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x0)
socket(0x29, 0x2, 0x2)
sendto$auto(r5, 0x0, 0x402, 0x0, 0x0, 0x1c)
setsockopt$auto(r4, 0x6, 0xa, 0x0, 0xfb3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x40802, 0x0)
socket(0xa, 0x5, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000000c0)={[0xc9bd, 0x8, 0xd, 0x7d48, 0x1d97, 0x8, 0x115f4da0c, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0)
ioctl$auto(0xffffffffffffffff, 0x1fffe000, r3)

2m12.645265465s ago: executing program 37 (id=1026):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/cpu.weight.nice\x00', 0x10b142, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x28, 0x801, 0x0)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x22a40, 0x154)
fcntl$auto(r0, 0x400, 0x1)
r1 = fcntl$auto(0x3, 0x8, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyy1\x00', 0x40, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x74202, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0)
sendfile$auto(r3, r2, 0x0, 0x10000)
close_range$auto(r1, r1, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r4, 0x4, 0x7ff)
getsockopt$auto_SO_DEBUG(r0, 0x4, 0x1, &(0x7f00000000c0)='/dev/ttye9\x00', &(0x7f0000000100))
ioctl$auto_EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f00000001c0)={0x6, 0xffffffff, "d7720acbe964ce3a1b9204adda8e8fcb3526e4e602f579efb8"})
r5 = socket(0x2, 0x1, 0x0)
getsockopt$auto_SO_PASSCRED(r5, 0x6, 0x10, &(0x7f0000000000)=',\x00', &(0x7f0000000040)=0x6)
ptrace$auto_PTRACE_OLDSETOPTIONS(0x15, r4, 0x7ffffffe, 0xf)
prctl$auto(0x65, 0x6, r4, 0x0, 0x963)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
r6 = socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r6, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)

1m52.987522109s ago: executing program 7 (id=1134):
r0 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
rt_sigsuspend$auto(0x0, 0x8)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x2}, @OVS_METER_ATTR_KBPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4)
r1 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0)
writev$auto(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xe4}, 0x3)
mmap$auto(0x200000000000000, 0x400007, 0x7, 0x9b76, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/bssid\x00', 0x0, 0x0)
read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0)
socket(0x3, 0x2, 0x800)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x200000000006, 0x8)
ioctl$auto(0x3, 0x89e2, 0x91)

1m52.565875211s ago: executing program 8 (id=1135):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
mmap$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfd5, 0x12, r0, 0xff)
mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0)
socket(0xa, 0x3, 0x73)
mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81)
r3 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x6d, 0x3, "69db5ea9b8412d57853115665c6fd110c98dc874a8323617f3cf82f40135279e6a99327575dd2eb1c368f6fdd7d7928d301be3e67b252967773137ca1c216522bfa0ccf948fe274aba188d326365c524789771165f3fc50a7263b55c0c5a400b2db0868b47f78e2d46"}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000041}, 0x40014)
ioctl$auto_RNDADDENTROPY(r3, 0x40085203, &(0x7f00000001c0)=[0x2, 0x8])
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00\x8f\xda\xf1\xba\xb1h\xee[$B6\x1c\xae?E\f\x94O\xbdAj\xab\xe0\xaa\x86\x1d4C\r8k\xe6L\x96\xba\x932\xc5/c\x81>x3\x88&\x1f\"\xc9Y\xcd\xe1\xf8\xff\x1c\x14\r;\xfb\xa0\xd8\v', 0x6)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8080, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/fail-nth\x00', 0x282082, 0x0)
close_range$auto(r0, 0xffffffffffffffff, 0x94c)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
cachestat$auto(r4, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0)
fanotify_mark$auto(0xffffffffffffffff, 0x100, 0x4, 0xffffffffffffffff, 0x0)

1m52.022200697s ago: executing program 7 (id=1139):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x47, r1, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x0, 0x5, 0xb}, @ETHTOOL_A_LINKINFO_HEADER={0x4, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_NAME, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0xadd}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840)
close_range$auto(0x2, 0x8, 0x0)
userfaultfd$auto(0x1)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0x4a401, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0)
read$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x3, 0x0, 0xfffffdef)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0xfffffffffffffffe)
get_mempolicy$auto(0x0, &(0x7f0000000340)=0xffffffffffffff80, 0x1, 0xa, 0xfffffffffffffff3)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = getpid()
r3 = gettid()
rt_tgsigqueueinfo$auto(r2, r3, 0x1e, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffa, @_sigsys={0x0, 0x2, 0x7}}})
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
kill$auto(r2, 0x8d1d)
ioctl$auto(0x3, 0xae41, r4)
prctl$auto(0x3935, 0x9, r2, 0xfd, 0xae)

1m51.764190642s ago: executing program 8 (id=1140):
mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0xffffffffffffffff, 0x300000000000) (async, rerun: 64)
r0 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000000)="ac10b9bec43dec38c63d2f4716ccabedeb3f93198ddd10237720ddaa72f2d9e57c138dd0f9cff837eda135152ad78538657418d66d4c0a9d3a9aeedbcf321ae2eff0dadd392148c4c3fc6073a9e5b4fbe423aa5ba5c8fce9d6ecc9b2c79110414c60e4b041d144ea8eb4a834edbdd00319ce4132fff8d63049c35c31d0fe82ef0507f7e9dda8b7bfa1ead54c6852") (rerun: 64)
close_range$auto(r0, r0, 0x100000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
socket(0x2, 0x2, 0x1) (async)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendto$auto(0x3, 0x0, 0xffeb, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e22, @multicast2}, 0x19)

1m51.525979205s ago: executing program 7 (id=1142):
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, <r0=>0x4, 0x9, 0xc, 0x24, 0x20000001, <r1=>0xffffffffffffffff, 0x1, 0x5}, 0x4f4)
mmap$auto(0x7617, 0x5, 0x100000000000002, 0x40eb3, r0, 0x300000000003) (async)
mmap$auto(0x7617, 0x5, 0x100000000000002, 0x40eb3, r0, 0x300000000003)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
ioctl$auto(0xffffffffffffffff, 0x4b41, 0xffffffffffffffff)
socket(0x25, 0x2, 0x73)
mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) (async)
r3 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0)
write$auto_uhid_fops_uhid(r3, 0x0, 0xfccd)
socket(0x2b, 0x1, 0x1) (async)
r4 = socket(0x2b, 0x1, 0x1)
sendmsg$auto_NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[], 0x5dc}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) (async)
sendmsg$auto_NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[], 0x5dc}, 0x1, 0x0, 0x0, 0x4}, 0x20000800)
setuid$auto(0xe) (async)
setuid$auto(0xe)
r5 = getsockopt$auto(r4, 0x0, 0x80, 0x0, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000200), r5)
sendmsg$auto_MACSEC_CMD_UPD_RXSC(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000125bd7000fddbdf2503000000180002801400440000002c0000000000000000ffff64010102"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0b, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0x2]}, 0x0)
r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2d2500, 0x0)
read$auto(r7, &(0x7f0000000000)='/proc/scsi/sg/devices\x00', 0xc9e3)
select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1003, 0x206, 0x7, 0xfffffffffffffff6, 0x9, 0x19, 0x79d, 0x5, 0x100000000000000, 0x7f, 0x4]}, 0x0) (async)
select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1003, 0x206, 0x7, 0xfffffffffffffff6, 0x9, 0x19, 0x79d, 0x5, 0x100000000000000, 0x7f, 0x4]}, 0x0)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000) (async)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0)

1m49.957380155s ago: executing program 7 (id=1145):
r0 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pread64$auto(r0, 0x0, 0x7ffc, 0x8001000)

1m49.805978063s ago: executing program 7 (id=1147):
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
r1 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x401, 0x0)
sigaltstack$auto(0x0, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x6d0782, 0x81, 0x7}, 0x18)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0)
read$auto(0x3, 0x0, 0x7fffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r2, &(0x7f0000000240)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\"CZ\xbeA\x11W$\xe0*\x8e\x00\xef\xd9~JZx\x9d\xf2\xc0O\x91\xe2\xb2K\xc0D\xdd\xf2\x9b\xc1VO\x02\xd4\x92+)$\x1e\x87\xaa*k\x9d\xd5z\xcdxlA\x1b\xce\x86\xbe\x1e\\\xf2je\xa4\xd0R\xb8L1cg\xcc\xa6\xbd\xf9[$\xfd\xf6\x91@k\xc3\xf2B\xeb\xbcU\xf94\xc7\xeb\xb6\xb2*\x83\x99\x11\xfd\x8dI\xd4\xa9\x1f\x9b@+\xab\x90\x83DJ\x9e\xb1\xf0\x14S\xbfE\x03\x18\xf8<\xe9b\xe0\xa1\xf5\xbb\v\xe6\x89\x12\x90)M\xc3\x17x\xce\xb2\xc0\xf3\xfd\x1fM\xfe>W\x00\xd7e\x91P\xcb\x91]\xcf\x93H;\xa4\xa4\xa3^G\xaf\x90F-\xa6g_\xb1|\xc3\xaf\x8c\t\xc6\xb6\xbbR8.@R\xb1G@\xcf\x10\xa3eg\x93\xd7B\x8c\x83\x9dY\xa8\xd9\xa6$-\xd6z\x98J\xd7\xbb\x9e@Aw\xb9iu\bn\x88\x93C\xb1\xb6\xef\xb9\xaa\xf8d\xa5\xcc\xc2@*{\xe2|[\xc7F\xe7wS\x96\x80(P\x02\xea\x94-y\xba\xd3I\x98Q\xf0\xb6\xf5\\\x02\vJ\xc6\x1d\xb3#\xfe\x99R/\xe3@\a>)\xd2\xeb\x92\\\xd5\xb6\xe4\x19\x1e\xa8\x18Qb\x9d8\xb8\xad_\x8c\n5\x99\x87\x93\xe2\x96\xd2\xb3\x85f\xbc\xa4\xa4\xa3\f\x9a\xbb\xf0\xf2\x1e\xca\xa4\xb8\x05\x8a\'\x98\r\x97F@\x85=z\xef\x89\xa2\x90\xf4\xf2', 0x81)
listen$auto(r2, 0x1f64b57d)
fcntl$auto(0xff80000000000000, 0x4, 0xfffffffffffffffc)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, 0xffffffffffffffff, 0x4}, 0x7)
syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = socketpair$auto(0x1, 0xfffffffe, 0x10000006, 0x0)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xcf, 0xfffffffffffffffc, 0x0)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), r3)
getsockopt$auto(r1, 0x84, 0x7d, 0x0, 0x0)
openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cpu/0/cpuid\x00', 0x2008c0, 0x0)
pwrite64$auto(r0, &(0x7f00000002c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x4, 0x8)

1m49.155780453s ago: executing program 7 (id=1148):
sysfs$auto(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103280, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
io_uring_setup$auto(0x14f, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x2000, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
open(0x0, 0x261c2, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
write$auto(r0, 0x0, 0xc3)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0582, 0x0)
readv$auto(r1, &(0x7f0000000080)={0x0, 0x200000002}, 0x7)
write$auto(r1, 0x0, 0x2b4)

1m48.306205147s ago: executing program 8 (id=1153):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000)
madvise$auto(0x200000, 0x20499d, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x3, 0x5, 0x3)
write$auto(0x1, 0x0, 0x80000000)
close_range$auto(0x2, 0xa, 0x0)
write$auto(0xca, 0x0, 0x2b)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140))
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
gettid()
setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x100006)
socket(0xa, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r1, &(0x7f0000000a00)="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", 0x837)

1m45.970970532s ago: executing program 8 (id=1157):
socket(0x10, 0x2, 0x0) (async)
mmap$auto(0xffffffffffffffff, 0x400008, 0x8000000000df, 0x9b71, 0x2, 0x8001) (async)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
ioctl$auto_TIOCSWINSZ2(0xffffffffffffffff, 0x5414, &(0x7f00000001c0))
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x22, 0x3, 0x4) (async)
r2 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0) (async)
setsockopt$auto(r2, 0x10f, 0x8, 0x0, 0x14) (async)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async)
recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
mmap$auto(0x0, 0xc, 0x5, 0x16, 0xffffffffffffffff, 0x6)
mbind$auto(0x0, 0x7, 0x10000000000008, 0x0, 0x80000000, 0x10000) (async)
mmap$auto(0x8, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x2, 0x0) (async)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, 0x0)
sendmsg$auto_NL802154_CMD_ASSOCIATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x4b4, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xfffffff8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x3}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x80}, @NL802154_ATTR_WPAN_PHY_CAPS={0xd2, 0x18, 0x0, 0x1, [@nested={0x1d, 0x134, 0x0, 0x1, [@nested={0x4, 0xa9}, @generic="193213c0127812a540f7bc3d9b52ac2f069ceed160"]}, @typed={0x8, 0x80, 0x0, 0x0, @uid}, @generic="4c42200239846b52f429409f5e8ed48720c33f5e26a9f2e1dc266eaeace448d0bf6fb606009eacf2333cc17a637d4b75d5d5da6e732aa5f433089cf5b4f4a69da86e2034a70405bd9f3e005c5f787ff7853db6dda7f50c734d8d73e6f5323a31de23e268dd00a45a29e374cdc31b39245dd7bad90778ca79daa1", @nested={0x2c, 0x7d, 0x0, 0x1, [@nested={0x4, 0xd0}, @nested={0x4, 0x22}, @generic="2456e05fd7aaf6e161bbfb7ed6f9f83a4c59e15d46320378a378c6e42ae7663f"]}]}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_PHY_CAPS={0x3a3, 0x18, 0x0, 0x1, [@nested={0x10a, 0xdb, 0x0, 0x1, [@generic="93221fe23f105519971b0e6e3c7ba6bc4b323895be0da1b8302657e958e3e2de4d21a20b3a65f9213720779ce6434cbe6bfb9993a849c70eb1f0ade66dc227d094f46af1deace2710d7c9c3dbd4b0690c044443c0bcdd29ed4365dd005d01f3d0ff3af6fcd0aa8a246809df13e6c69a0687d7291de3d481fd5dc5a7406f395dd18bd69aed958a46da5fc4f570b12cfbefca70026d6ec996505a278ac0ed36a00b1c32832e46bd1acdcd6f45528b95d671b97ec7c0aa2c61abaf2e4674ebb8a2ca2a9f513fa624a66369d4f38babede1644f930cb12f3c37667409936a4fc40afdeffd8635ea2fef115fa3ce5cbd8ef6fbe956d5721784953a8c1635b1777", @nested={0x4, 0x90}, @typed={0x4, 0x129}]}, @generic="21a435257df525e01b4f5739bdbfa3a8ba928f81f56019872552c706288dae70cebadd1f30628e8c798e8847352457002ca1366934c2f17132c0a9", @generic="0b174753a758811db778666d98a2", @generic="66e28d02b1", @generic="5d4212c13cbddecc18e7b6e3887fab154a8f3c48157cb903da7bb5a1581c8f58cb3a819313abfb3b53e28f2db3ae00c482dfcda1c71ddb29594940d68b319b5d8a5f04b479cba949cf5605d53bcc94800f606659ba4f43dfceb20f6a58879c0806d597f4a984456bf5f0bc3926610dcbb64ded59dc0d5c51de209e8799d9e0dc291bd8925433a54c28d1a16f670e198d10def2600b9e1f8ab28dcb5e2dfe9169a6e542fb3d3baf377681cd473f9096843fcf9fec8a42579d3d8153a8aec8f6bc090b02b696bf34177b09c0", @generic="9af95fdad9490d046e18aec0ede7d2ff3774fe0e3e3ab0574259d7febfc3564b73d2478acadcb87e148ab1d39286e0ee3f2a58319694ef8c8398e8442faea5bdfa01c57f793338d8a32118d652b17d1c28f5dd59402df6fcea7b2bab0fa90b4afa3c3a3d47fd3050684741e4a3d471efb9ce9721b403ff9822ac4997583385fbfea6062ca584516b0a16b26fbe8348ccaad1c92e3643b42f563775accbcdd30761f5ad747b9443018f573bb3ed633a4c38fa641c5390d2881b30bbdfd161afccbe4badd5f7af87a95b5faa8fed395be318bb542a99e54573ecdb15de30755440f9f4b30c1bdf4b76f66e168cc5c7", @typed={0xc, 0x91, 0x0, 0x0, @u64=0x8001}, @nested={0x4, 0x14f}, @typed={0x8, 0xfd, 0x0, 0x0, @u32}, @generic="7c74f92d61ee50b3928d753098c9b3dea85a2f65843e20f135138e39ccf3ce7382cd5183b9d6c61c85a76990433fe56e49709d7e34624c3c1828640131129cd0fffeb87ffa921c2b495e1e8f87c6ab3513782ea03fff355c00615485cade35d5deba86701954aac3ada692dfa4742be9679038c4"]}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
shutdown$auto(0x200000003, 0x2) (async)
lstat$auto(&(0x7f0000000140)='./file0\x00', 0x0) (async)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd3/queue/nr_requests\x00', 0x143262, 0x0)
write$auto(r3, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)

1m44.685340628s ago: executing program 8 (id=1161):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'nicvf0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r5=>0x0})
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r5, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0xd}, 0x92)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x20}, 0x1, 0x0, 0x0, 0x20048800}, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
bpf$auto(0x2, 0x0, 0x1)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r7, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001)

1m43.516089388s ago: executing program 9 (id=1166):
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa1\x00', 0x101041, 0x0)
socket(0x2, 0x3, 0xffffc1e7)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0xd73)
r0 = io_uring_setup$auto(0xa, 0x0)
r1 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000380), 0x22100, 0x0)
r2 = ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, 0x0)
r3 = socket(0x2, 0x1, 0x0)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
openat$auto_fops_u8_(0xffffffffffffff9c, 0x0, 0x440100, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000080)='7\x00\\\x00\x00\x00\x00\a\x00'/24, 0x5)
listen$auto(r3, 0xa1)
lseek$auto(0x3, 0x0, 0x1)
wait4$auto(0x0, 0x0, 0x6, &(0x7f0000000100)={{0x493}, {0x6, 0x2}, 0x100000000, 0x2, 0x3, 0xffffffff, 0x8, 0x800ebf, 0x3, 0x8, 0xfffffffffffffff8, 0x1, 0x7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc})
socket(0x28, 0x805, 0x0)
bind$auto(r2, 0x0, 0x68)
openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x103040, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0x648}, 0x1003)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x8, 0x80002, 0x1)
bind$auto(0x3, &(0x7f00000003c0)=@in={0x2, 0x3, @remote}, 0x6b)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0xa, "2b551d010000ff6101040000ff00"}, 0x66)
lstat$auto(&(0x7f0000000280)=':,\x00', &(0x7f00000002c0)={0xfb, 0x4, 0xfba7, 0x4, 0xee01, 0xee00, 0x0, 0x0, 0x2, 0x56b, 0x3ea, 0x6, 0x10000, 0x400, 0xfffffffffffffff2, 0x7, 0xfffffffffffffffe})
sendmsg$auto_IPVS_CMD_ZERO(r0, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[], 0x3b8}, 0x1, 0x0, 0x0, 0x4000100}, 0x200008c0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

1m43.058461572s ago: executing program 9 (id=1167):
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x999, 0x0) (async)
r0 = io_uring_setup$auto(0x999, 0x0)
ustat$auto(0x801, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x758, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x646, 0x2, 0x0, 0x1, [@generic="c6df8bbab70a7433b233c0f664a2947f57bd2b760e6a24372200ebd863cb54b96eeac4067e3f414782e6b2ad5b0dbabbb6b3453bdb992194a1652ff6aa8d98708282a1e56a54e32aafd4bc9c07f42e61a9ac268a21cfd38b2a79f9e077f3e507c7f55486ef9b5406508cd2b7c7b145b39b9cafadb9981cf9b081aacfafc3bca412b7f46f8104fbf3414bef4365c987abd58ba189d0cb3172d3c0ad2257f4356af007dbffa88a", @typed={0xe5, 0x9c, 0x0, 0x0, @binary="ddf52e2a7959cdcd926d43766859fbdc3eedc607362b94422ec4f163bba1cc4d035686d389d1d1bc61d70157a47b24f812980b5c0a954a985053e693d7b3e10e170665d4566f60554afed7cea57746650e82fb0eb93c789a2087db0f237f87bbb136705f646f41340b82226e1a4384a2befb7994436d905449c0b71c67ad5a46df0f6dda581ff497b84704f7c036300db82db42df2bf3f82c305ac9204188dbaae83e37128ad269a263d68418840eb5c877a12629ea1835f3e90103dd24775ae7443dc903cc8893905ea666e0069542118fc90bb3bce71c681d9a07f2a01cd2ebb"}, @typed={0x8, 0x86, 0x0, 0x0, @fd=r0}, @nested={0xd3, 0x10c, 0x0, 0x1, [@typed={0xc, 0xc4, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x3b}, @nested={0x4, 0x121}, @generic="c7c40264c236543df6e96084383d2183ffac9e7c5b24e2f3590ae1c6b3f08c02b95d", @generic="f701c57a2963884aa7e44f6578c31e9ae6d44dcd5df640d8c136b6e2bea41147f4612c705e39266b1082f2f895d2769e90d5387089d4367275b9e33cf77fdf8f28b938dc0d97e490585ede823cdb89531ec5467b31ab40b1583a8ced5b346b4c18785338caf81974658d57a5dae0e6918adffdc1dffd16d395e43699c0", @typed={0x16, 0x28, 0x0, 0x0, @str='/dev/input/event1\x00'}, @nested={0x4, 0x4c}]}, @generic="bd2b6738f0ad836e1426997e05f0d1134cc20511e16658dd83943495c799ce2683a69240d294df1962bf5a7ff40419e4aab6594c465d74ec8ec621fcb0eebd459032d16eaec231676558f7cfc45094cd96340a6c76194155baa22d285ffe5428e6381e707e17ff13b0cc27fb2256fa72819245b93bc70a407d79d15ea93246558cde5c3da6c93a342d9fc86de17701d2d538571cce3dab3c7cf2e40cc3c95234", @generic="79b39481e7cf7dd1c479868fcf3375bb91ebbd1cafebf62cb44ee39125882bec6abdc296b9c3ac66f4c865f654f228279bd3c086a94fe4c5f1c7e60feb69b4f9fa414582bc124c2a27a42a15eb2fefbec2125187124821cddc3dcc566782ec57b8575ac4d5c8112289728e5ff7a569bd6b517d6732f2f797c12c2b8bf850b4038d52ccc3df5896f6d3364af80cb794e364884742545d3e4f96487e3d1ece10245ab59b7e8de91e815dcb21b43e1f30b1fc707cf1edac003338cc1b004fdf79b4c7182e11b4bb7cdf9c7d8ba284c74103eb5a42f2ced1dbbada883448e91a882ed37e64992c50c234", @nested={0x24f, 0xfd, 0x0, 0x1, [@generic="5671c18f31e4dbc40829764d062fc1e3799d75e4b96146ae592f934183955b34d85c808b21d15c0dc6343a36ba4e466656cf46912c11012b0c5c78bac8b4026f7bf96349b26d763d48545598f90ce6f2bad2d7bd879a5dae7c3eec6983157bf432cb30661e2309a413e8279ad0aa36176aa60050181956a9864732d3ea029b752d039d0fe4a6f9ac0f1dbcf6364996dc987f4f3c9c0c121c8330b1c46d50e397753ccd9094d8b931af12f9daa5ba80f646e15c2855f7b9257fc6314e11d236db817fd1d13affc1716a8668a1a9f4ea0513457f38299d2e4d12e48b952e700c9548f011a6354bb2", @typed={0x8, 0x72, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x80}, @generic="bee43f582f56b6b61d4c9d3aac0d3f4d4085e0c6b271f91396ed6647857b86a7c6d4e20e8a2ce777a0115883a80b01ff57a2e11b44de9f0cee75fdc48fc3e0282defc473678e0a69991f8402e92f0f436644c0b43f4c76a07123d5a54862e49fdf9a87daceaa4e64b89ffe04fd4b72048fa9", @typed={0x8, 0x60, 0x0, 0x0, @pid}, @typed={0x4, 0xa5}, @typed={0x4, 0x1c}, @generic="7f89a8d5a8feeda408435f9af667db28f1ba1e1126ddfcab06ab64b4957e021672dd62f24f642b3ec448f12e5869ba0fbf0a1dc28fb893ddc2a32d1cc0e604c4ce8911af7f394774cf8905f4964e8768b28dc88f28580e73860ca0e11591ebaddaae1b78fc40f7654443608592526dea63fb534b517ae6bbdadfd62a045e67cedf6dd997f1e0851479c8d98af74d3ca744a2632ce93fa1d0d398299c784875eded77529688c2ff5a8398fccd8827dae2a53c345939d5a7f38fb17b4abcb971530434629e53b0f05429885f35d64b3b4d2e7aa497f037"]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe0, 0x2, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @uid}, @generic="15d295569bb27c755604e87852599daae15ed6b5e776801c382ce1fe07d3c9fceb5281cc39931289b3da538740cfcef735c49730c5de626ee67eef55a0a07482e87818aea64e23aa516939d41628177c5600d4a48be9b6ddeb567b132f6b70b526e945b10de9937ed51b708cd17e4c50a48714f1edd35c391cda8c41d57c1ef256528d5a873f0cb38540314f8c54c2e7c770fdb57b086344e3d1e3565bbf8dd7d07f08904b932ebfb7ea39cb", @nested={0x8, 0x19, 0x0, 0x1, [@nested={0x4, 0x10e}]}, @typed={0x14, 0x30, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0xec, 0x0, 0x0, @u64=0x4}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x758}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004) (async)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x758, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x646, 0x2, 0x0, 0x1, [@generic="c6df8bbab70a7433b233c0f664a2947f57bd2b760e6a24372200ebd863cb54b96eeac4067e3f414782e6b2ad5b0dbabbb6b3453bdb992194a1652ff6aa8d98708282a1e56a54e32aafd4bc9c07f42e61a9ac268a21cfd38b2a79f9e077f3e507c7f55486ef9b5406508cd2b7c7b145b39b9cafadb9981cf9b081aacfafc3bca412b7f46f8104fbf3414bef4365c987abd58ba189d0cb3172d3c0ad2257f4356af007dbffa88a", @typed={0xe5, 0x9c, 0x0, 0x0, @binary="ddf52e2a7959cdcd926d43766859fbdc3eedc607362b94422ec4f163bba1cc4d035686d389d1d1bc61d70157a47b24f812980b5c0a954a985053e693d7b3e10e170665d4566f60554afed7cea57746650e82fb0eb93c789a2087db0f237f87bbb136705f646f41340b82226e1a4384a2befb7994436d905449c0b71c67ad5a46df0f6dda581ff497b84704f7c036300db82db42df2bf3f82c305ac9204188dbaae83e37128ad269a263d68418840eb5c877a12629ea1835f3e90103dd24775ae7443dc903cc8893905ea666e0069542118fc90bb3bce71c681d9a07f2a01cd2ebb"}, @typed={0x8, 0x86, 0x0, 0x0, @fd=r0}, @nested={0xd3, 0x10c, 0x0, 0x1, [@typed={0xc, 0xc4, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x3b}, @nested={0x4, 0x121}, @generic="c7c40264c236543df6e96084383d2183ffac9e7c5b24e2f3590ae1c6b3f08c02b95d", @generic="f701c57a2963884aa7e44f6578c31e9ae6d44dcd5df640d8c136b6e2bea41147f4612c705e39266b1082f2f895d2769e90d5387089d4367275b9e33cf77fdf8f28b938dc0d97e490585ede823cdb89531ec5467b31ab40b1583a8ced5b346b4c18785338caf81974658d57a5dae0e6918adffdc1dffd16d395e43699c0", @typed={0x16, 0x28, 0x0, 0x0, @str='/dev/input/event1\x00'}, @nested={0x4, 0x4c}]}, @generic="bd2b6738f0ad836e1426997e05f0d1134cc20511e16658dd83943495c799ce2683a69240d294df1962bf5a7ff40419e4aab6594c465d74ec8ec621fcb0eebd459032d16eaec231676558f7cfc45094cd96340a6c76194155baa22d285ffe5428e6381e707e17ff13b0cc27fb2256fa72819245b93bc70a407d79d15ea93246558cde5c3da6c93a342d9fc86de17701d2d538571cce3dab3c7cf2e40cc3c95234", @generic="79b39481e7cf7dd1c479868fcf3375bb91ebbd1cafebf62cb44ee39125882bec6abdc296b9c3ac66f4c865f654f228279bd3c086a94fe4c5f1c7e60feb69b4f9fa414582bc124c2a27a42a15eb2fefbec2125187124821cddc3dcc566782ec57b8575ac4d5c8112289728e5ff7a569bd6b517d6732f2f797c12c2b8bf850b4038d52ccc3df5896f6d3364af80cb794e364884742545d3e4f96487e3d1ece10245ab59b7e8de91e815dcb21b43e1f30b1fc707cf1edac003338cc1b004fdf79b4c7182e11b4bb7cdf9c7d8ba284c74103eb5a42f2ced1dbbada883448e91a882ed37e64992c50c234", @nested={0x24f, 0xfd, 0x0, 0x1, [@generic="5671c18f31e4dbc40829764d062fc1e3799d75e4b96146ae592f934183955b34d85c808b21d15c0dc6343a36ba4e466656cf46912c11012b0c5c78bac8b4026f7bf96349b26d763d48545598f90ce6f2bad2d7bd879a5dae7c3eec6983157bf432cb30661e2309a413e8279ad0aa36176aa60050181956a9864732d3ea029b752d039d0fe4a6f9ac0f1dbcf6364996dc987f4f3c9c0c121c8330b1c46d50e397753ccd9094d8b931af12f9daa5ba80f646e15c2855f7b9257fc6314e11d236db817fd1d13affc1716a8668a1a9f4ea0513457f38299d2e4d12e48b952e700c9548f011a6354bb2", @typed={0x8, 0x72, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x80}, @generic="bee43f582f56b6b61d4c9d3aac0d3f4d4085e0c6b271f91396ed6647857b86a7c6d4e20e8a2ce777a0115883a80b01ff57a2e11b44de9f0cee75fdc48fc3e0282defc473678e0a69991f8402e92f0f436644c0b43f4c76a07123d5a54862e49fdf9a87daceaa4e64b89ffe04fd4b72048fa9", @typed={0x8, 0x60, 0x0, 0x0, @pid}, @typed={0x4, 0xa5}, @typed={0x4, 0x1c}, @generic="7f89a8d5a8feeda408435f9af667db28f1ba1e1126ddfcab06ab64b4957e021672dd62f24f642b3ec448f12e5869ba0fbf0a1dc28fb893ddc2a32d1cc0e604c4ce8911af7f394774cf8905f4964e8768b28dc88f28580e73860ca0e11591ebaddaae1b78fc40f7654443608592526dea63fb534b517ae6bbdadfd62a045e67cedf6dd997f1e0851479c8d98af74d3ca744a2632ce93fa1d0d398299c784875eded77529688c2ff5a8398fccd8827dae2a53c345939d5a7f38fb17b4abcb971530434629e53b0f05429885f35d64b3b4d2e7aa497f037"]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe0, 0x2, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @uid}, @generic="15d295569bb27c755604e87852599daae15ed6b5e776801c382ce1fe07d3c9fceb5281cc39931289b3da538740cfcef735c49730c5de626ee67eef55a0a07482e87818aea64e23aa516939d41628177c5600d4a48be9b6ddeb567b132f6b70b526e945b10de9937ed51b708cd17e4c50a48714f1edd35c391cda8c41d57c1ef256528d5a873f0cb38540314f8c54c2e7c770fdb57b086344e3d1e3565bbf8dd7d07f08904b932ebfb7ea39cb", @nested={0x8, 0x19, 0x0, 0x1, [@nested={0x4, 0x10e}]}, @typed={0x14, 0x30, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0xec, 0x0, 0x0, @u64=0x4}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x758}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x400000f3, 0x400, 0x9}]})
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd4/queue/iosched/front_merges\x00', 0xe0281, 0x0) (async)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd4/queue/iosched/front_merges\x00', 0xe0281, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)='-7', 0x2) (async)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)='-7', 0x2)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x2, 0x0)
r5 = socket(0x2, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0x106) (async)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
r6 = socket(0x2, 0x1, 0x106)
listen$auto(0x3, 0x81)
sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
sendmsg$auto_NETDEV_CMD_DEV_GET(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004091}, 0x800) (async)
sendmsg$auto_NETDEV_CMD_DEV_GET(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004091}, 0x800)
close_range$auto(0x2, 0x8, 0x0)

1m42.881228424s ago: executing program 9 (id=1168):
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0)
mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0x20000000eb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x4c, r1, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x1c, 0x3, 0x0, 0x1, [@nested={0x18, 0x15, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590822ad9"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x101080, 0x0)
r3 = semctl$auto_GETPID(0x7fff, 0x1, 0xb, 0xc6)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@inferred=r3, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x5f32e201}, 0x4, 0x966, 0x1, @raw=0x404, @integer64={0x7, 0x5, 0x80}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_SET_CONFIG(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000002980)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = setfsuid$auto(0xee00)
r7 = setfsuid$auto(0xee01)
setresuid$auto(r6, r7, r6)
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001980)={0x1760, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x74, 0x1, 0x0, 0x1, [@nested={0x68, 0x3e, 0x0, 0x1, [@nested={0x4, 0xf3}, @typed={0x8, 0x3f, 0x0, 0x0, @pid=r3}, @generic="39ec071273c4ee9e6701ca5cb6bb15285a54bff5ec3590fac9ef4554f4365180f91014d5bb304208b26e0de0fee28be6bf1fae13c22a3a76e8e0565e938a1fa40202c94294171674c7fe378d", @typed={0x8, 0xac, 0x0, 0x0, @u32=0x97}, @nested={0x4, 0xc3}]}, @typed={0x8, 0x7, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x15c4, 0x1, 0x0, 0x1, [@nested={0x1da, 0xbd, 0x0, 0x1, [@generic="f14940b4300e4e1dd2d07fa4c7c04fa68faa2a6108349e3ac66ac70f307c5e04ec9c6eeb27b9cc712c8594ec62dd165c511397e9860f0d7ca2c4a0997cbc22946f17d4c319fa0115f7d6d36391eb9ed3e20c91922b00b29519a02f5ec70f129f3da33c5f236c22cdc3e5b25489340fa6452ad0fafc6adb1677096b7f60a1197c1f599f4f47f497759019240e69875259cae7c062f5c604f57d00dfe84c2ece18c918bb5d7bd24c4ad327190d711b198679b0d5dbba58a656d31613dec2248bc6e18a3bcc0e100297d1d10faf5b7d9a830b1971e674aa2bb77e482221c1d440c839641f3e5d9b6207b80db839ac4d0a2984f0b1c401", @nested={0x4, 0x24}, @generic="29281c4747c419e790036593c375ddac6d8f84d2fd30292b738240922a4ddaaca77238605fa14dc0e59566e5e0cc0394c326e18dc083bf02ff59193f1412ff2ad96d77888088514b9b60b40187dbd9fdb9608aa2a32a51adb97826fcb809f346428bcb6960565df65c898582ac84d9b9531598d36fb4aaec78defdc81c5f69fc78139e03d5c48b2868ccd07e5a61df365140b0a2d5fe929087aaefaa486894bd7524e2029cb3617098fde06d689cfe55534bc996f1dc2907d20b7a5c03fb1c2ac2c929235a1a634dcac937fe8bcf28a3ced96db953e7fa69031b7286b8"]}, @nested={0x1310, 0xdd, 0x0, 0x1, [@generic="fbf97b6cd2ad6a7c60e943f377585a60cd54be669aa557d224d7ae3623f6b0fefb210bcd40dc61b61816baf52741c53dd19e8577828f4732b0af8c31c10c2f8468d646d4d034049ba3acca23bf60725fd7602e8f4ba4abc3da365d86cb8e53b0d8e2372d5106fa478239fd76c384aa56a64ac78f0a0c077d5c7323cf196e091eb6a7e36afc7be1c591d428668d72bb8d711e1a7001731f86c45904a10dc98f3b4edcb349ef0b868f40", @generic="08e48a613f962f25f9315356a879a962247c257ed1b6d9fbbfbe28bafca3cc12297faa9c1e11a4fc22c176188d7ba431b23be2b2bf86d3f618959edfa12dc599c3efe44556582b1f7098654ffdd377f663f056743c6d79ff0801daaf7b20", @generic="4bffee7214b4d9e8a4fab54f880351649372e1da7d", @nested={0x4, 0x6e}, @typed={0xfc, 0xec, 0x0, 0x0, @binary="87e9256951a4db4848eb106bec2dbafeb0f8d2adf3954cf7bdcdf685326c970b54b06404cf0c6b9be3c812f391bf36f8526c57526e87f55da5325b14567a22428f4752e507c6ea3d191b2874fd9a90d97a8d9c4e429cae9b4903828f126eb441253222e94b22d9a06e3e21af332754ad47481807a167e2ce5061dbde225d830e0fc81ac1fa69998ce81b702cde59bbf6fad2cb561c9da32236daaa203d4a89911b5300c36eb2052c49a2eb5e4f375a4988412690a99138aace1ef0cf6f2b33a1b466b8ee0290bf62a0b8386171b0480724fc66087d0ddf00bca50136752de4dc4c2e823c51122c6d560f130a2c336d90a72cb10a24700dce"}, @generic="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", @generic="7eb2496f2b99f98c23a8f14c1ff897a64103a37355c5eb3bebbd501e229ec41158cadb57222e9261f8ab960326241192d3f4dd8bd6a48c7d3381437ec0a0ea308df9fa10d97bfcffaf64f6a0cef1aa99208a8aacc5b80db73984191e0d11aaaf6641a37d759dacf084a76238e6f6152a76dc795b0108f50ccc23887491cb37fdf3be5db82f0d576634b0f4b40d88d5e15d54d2fe1e731dd91c0ede04966e1c109ff26161c58a1615d286bd196ec547f2afb03b29f7e142770b209208f886a0f460387fbc73bdcf68bea240d452f6825e9162785db8ff1fa5598ffeedb0eec19ae85d894bcae18826296ee913", @nested={0x4, 0x97}]}, @typed={0x8, 0xda, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xcb, 0xb3, 0x0, 0x0, @binary="a52603e64f57a08ce5bee7effa46028d3d16178c9621ef2f96fbf75872d20550703fd1ed6fb3d31aa12d700a14977275ca3f75a396b71a04099b827badc90b6125ee315eb86323bdd69e101d2e537a1da04d3ae6fe908eb7d2f3ea833feeb4c8c6fa4d12320582cbeb48918c6e02be83ddd656505e2ba31ec90ef23ae1689a690c3f18429785d17dd84a9dbf0d1cf598c4a29552090e66eb442bc99e459710790f94cd4ca3f60f6fee1cf71e9b8356828600cf3d2d5bdde2399cfd26e2356e24d166375d4de0dc"}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x114, 0x1, 0x0, 0x1, [@typed={0xc, 0x123, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r4}, @nested={0xf3, 0xdc, 0x0, 0x1, [@typed={0x14, 0x7, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0xaf}, @generic="726541f44b3ab231b04490df8722acf2995f762d04653e8deb6961a733b7efca61cf458b5a1cc79722a0e65abc2b7a8c4cc71093480123c660a7d55a5b733f8eff3e54d7dd0ca458528eb5332c7911a7c7e13fb650fa8ddc7ebd8c3539f10392301549f5d6795c9828063ea4b810496ed65d7414f1fce7f947d3d66d640193e18d503b5fb68a80582639005c6a3d54eda362acf63b87f2b43141f5890dfc3aa5a3daacf7bcfac7ffed45ecdf1145d1558570207f08bea497121c62a6934331b2aa2739ea09ae9502566811", @typed={0xc, 0x140, 0x0, 0x0, @u64=0x2acf}]}, @typed={0x8, 0x125, 0x0, 0x0, @uid=r7}]}]}, 0x1760}, 0x1, 0x0, 0x0, 0x8001}, 0x4001)
r8 = socket(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x80044944, 0x0)
ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000000)={0xffffffffffffffd7, 0x82, 0x8000, 0x1000, 0x0, 0xff, 0x5, 0x3, 0x9, 0x8, 0x4, 0x3, 0x1, 0x7, 0xffff})
r9 = socket(0xa, 0x2, 0x73)
sendto$auto(r9, 0x0, 0xfdef, 0xfe80, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x9, 0xc, 0x24, 0x20000001, 0xffffffffffffffff, 0x1, 0x5}, 0x4f4)
mmap$auto(0x7617, 0x5, 0x100000000000002, 0x40eb5, 0xffffffffffffffff, 0x300000000005)
r10 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x2000000000000)
write$auto(r10, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)

1m42.857608124s ago: executing program 9 (id=1169):
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL2\x01\x88\v\xae\xa9i8W\xe5\x00W\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\x90\x13\xd5\x84\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x95\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x13#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xbf\xa6\x11YTz\xf3\xdd\xe7i~:\x1a\xd0\xb0R\xb4J}\x00\x00\x00\x00\x00\x00\xa3\x05\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xd5\xc1\"\xact\xff\xc9\x00'/242, 0xfded, 0x4)
mq_open$auto(0x0, 0x6, 0x400b, 0x0)
mq_unlink$auto(0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x9, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/6/smp_affinity\x00', 0x40d81, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2402, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0x40800)
futex$auto(&(0x7f0000000000)=0x5, 0x9, 0x5, &(0x7f0000000040)={0xb, 0x3fd}, &(0x7f0000000080)=0x1006f5, 0x4)
unshare$auto(0x40000080)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_BLKCRYPTOIMPORTKEY(r2, 0xc0401289, &(0x7f00000000c0)={0x5, 0x5, 0x8, 0x5, [0x7fffffffffffffff, 0x9, 0x9, 0x7]})
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)

1m42.605433952s ago: executing program 5 (id=1170):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) (async)
syz_clone(0x4c902300, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) (async)
mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) (async)
io_uring_setup$auto(0x89, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async)
write$auto(0x3, 0x0, 0x7fffffff)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0)
pread64$auto(r0, 0x0, 0x20000000001, 0x7fff) (async, rerun: 64)
ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0x1, 0x0, 0x80000000) (async, rerun: 64)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) (async, rerun: 64)
r1 = socket(0x2b, 0x1, 0x1) (async)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x2, 0x20009, 0xffffffffffff7f1a, 0x4d982c9e, r1, 0x108000)
ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0xb926, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) (rerun: 32)

1m41.972616959s ago: executing program 5 (id=1171):
unshare$auto(0x40000080)
r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim7/psample/enable\x00', 0x0, 0x0)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/0000:00:02.0/name\x00', 0xac301, 0x0)
r1 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)=@link_create={@map_fd=<r2=>r0, @target_ifindex, 0x7, 0x7, @netfilter={0x3, 0x5, 0x5, 0x3}}, 0x4)
write$auto(r1, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim7/psample/enable\x00', 0x9)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80ebd01, 0x0)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
epoll_create$auto(0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000480)={0x20, r4, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x40)
sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_METER_ATTR_USED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20080000)
write$auto_fops_x64_ro_(r1, &(0x7f0000000180)="29e3cb8716a783857d165332fea8987c3bc3f15da157ce100e4d4f3e6ad1d945d0c807e1b6f6775cf92aebdd43570800b45bdcd5f1125df9665fbc3f30eb273051e735393f19755332cc1a8f55d7d58ea3d2a344a1384f702c27e7728b8ee42797d0093f26704152e88028339b4be4243d7b7086a1d762e8cf301e35131ef6d61ddd249c467637abe87ffaff0d231f26bf074bbf733ed041c39d6e484747776d", 0xa0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0xff8000, 0x0)
prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0)
prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7)
r5 = openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim1/ports/0/udp_ports_reset\x00', 0x480000, 0x0)
fchdir$auto(r5)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)

1m41.965861993s ago: executing program 9 (id=1172):
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
r1 = pidfd_open$auto(0x1, 0x0)
setns(r1, 0x40000000)
mount$auto(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
io_cancel$auto(0x7, 0xfffffffffffffffc, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="00b4a888f71cc30ae4dd19d752357779b6f4d155879ef3049f301539", @ANYRES32, @ANYRESHEX=r0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r2 = socket(0xa, 0xa, 0x1)
connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
io_setup$auto(0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00')
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r4 = socketcall$auto(0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000)

1m41.382123379s ago: executing program 5 (id=1173):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
mmap$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfd5, 0x12, r0, 0xff)
mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0)
socket(0xa, 0x3, 0x73)
mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81)
r3 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x6d, 0x3, "69db5ea9b8412d57853115665c6fd110c98dc874a8323617f3cf82f40135279e6a99327575dd2eb1c368f6fdd7d7928d301be3e67b252967773137ca1c216522bfa0ccf948fe274aba188d326365c524789771165f3fc50a7263b55c0c5a400b2db0868b47f78e2d46"}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000041}, 0x40014)
ioctl$auto_RNDADDENTROPY(r3, 0x40085203, &(0x7f00000001c0)=[0x2, 0x8])
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00\x8f\xda\xf1\xba\xb1h\xee[$B6\x1c\xae?E\f\x94O\xbdAj\xab\xe0\xaa\x86\x1d4C\r8k\xe6L\x96\xba\x932\xc5/c\x81>x3\x88&\x1f\"\xc9Y\xcd\xe1\xf8\xff\x1c\x14\r;\xfb\xa0\xd8\v', 0x6)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8080, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/fail-nth\x00', 0x282082, 0x0)
close_range$auto(r0, 0xffffffffffffffff, 0x94c)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
cachestat$auto(r4, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0)
fanotify_mark$auto(0xffffffffffffffff, 0x100, 0x4, 0xffffffffffffffff, 0x0)

1m41.350818781s ago: executing program 9 (id=1174):
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x1ac}}, 0x40000)
bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x9, 0x6, 0x5, 0x1fe, 0x2, 0x1, 0x4, 0x0, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x89, 0x9, 0xffff, 0x3ff, 0x7, @attach_btf_obj_fd, 0x440, 0xa, 0x7, 0x1ff, 0x9}, 0x9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f)
getdents64$auto(r1, 0x0, 0x18)
shmctl$auto_IPC_INFO(0x9207, 0x3, 0x0)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7fffffffffffffff, 0x4)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x2b, 0x1, 0x1)
getsockopt$auto(r2, 0x40000000029, 0x43, 0xfffffffffffffffe, 0x0)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x20008000)
sysfs$auto(0x2, 0x23, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/syscall\x00', 0x80, 0x0)
read$auto_proc_single_file_operations_base(r3, &(0x7f0000000100)=""/148, 0x94)
keyctl$auto(0x11, 0xfffffffd, 0x8, 0x4, 0x9)
mlockall$auto(0x800000000000005)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0xfffffffffffffffc, 0x84020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)

1m40.964231819s ago: executing program 5 (id=1175):
mlock$auto(0xfff, 0xde7f)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/iosched/async_depth\x00', 0x103841, 0x0)
write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4)
ioctl$auto_UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r2 = gettid()
mmap$auto(0x0, 0x2000a, 0x10000000200df, 0x12, 0x401, 0x8000)
close_range$auto(0x0, 0xfffff004, 0x2)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0xa, 0x2, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x8, 0xff, r3, @relative_fd, 0xe600}, 0xf)
r7 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
read$auto_tomoyo_operations_securityfs_if(r7, &(0x7f0000000180)=""/22, 0x16)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
kill$auto(r2, 0x19)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000)
mmap$auto(0x0, 0x2020009, 0xb, 0xeb1, 0xfffffffffffffffa, 0x8000)

1m39.98132416s ago: executing program 5 (id=1176):
io_uring_register$auto(0xffffffffffffffff, 0x1f, 0x0, 0x1)
r0 = socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)
setrlimit$auto(0x1000000007, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
fspick$auto(0xffffffffffffffff, 0x0, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1)
read$auto(r1, &(0x7f0000000000)='\x00', 0x91e2)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffae, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x6cc31ef15fcd919c)
syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000280), r0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x20004004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0xfffffffffffffffe, 0x0, 0x0, 0x1)
mmap$auto(0x0, 0x40009, 0xdb, 0x9b72, 0x7, 0x28000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x761a, 0xe983, 0xd, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x10001, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x6)
pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x4, 0x2, 0xffffffff, 0xc4e, 0x7fff, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0)

1m39.074702122s ago: executing program 5 (id=1177):
r0 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy14/fragmentation_threshold\x00', 0x80000, 0x0)
write$auto(r0, &(0x7f00000000c0)=')*(\\\x00', 0x4) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x3f, 0x93f, 0x1fee0, 0x3, 0x200006, 0xfffffffffffffffe, 0x1ff, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0xb65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, [0x2, 0x0, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffc, 0x0, 0x2d24, 0x9, 0x0, 0x200000000000, 0x9, 0x1000, 0x8f3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x4, 0x3, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x82) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
r1 = socket(0x10, 0x2, 0x0) (async)
r2 = socket(0x28, 0x805, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
bind$auto(r2, &(0x7f0000000080)=@in={0x28, 0x0, @multicast2}, 0x68) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1)
sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x214, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x3}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x7f}, @NL80211_ATTR_MAC={0xee, 0x6, "1d38d971e87ae9adf9f2d88d64def7406e508ab5f3b56cb3e7c69fa367f9b6b750b02a2e05866bbc15e24659db748e32b7407e033d8dc12aa8fe42e3383bd988f462b58864b2eb254fde305c3c97c568e0f34825aeaa1835f7259646d3a3d2fc51048f1b3b020cca67a58fe4e6b741b3461aabd1ab45c91ba98054ca21830c87260f048d65cb03d6161d7957dd0b4712c3a0c2055da61764fe09213b135ec0cda8fe49bbf92d03e16eb4ea86b1e7b9d40dd801aceedd5d0162bc1df1e8a9b5b1ca9494848335897288b5f0c1b6c6e95ce7af6cacc183c4cfcdae9f5546402fe3d50f89cbdb45e4f62b77"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe6, 0xbe, "9d9075d84339f6177a6ddb1f5d1608170e4c8d0d2dbcdb687ea49ff3cdc2816d515dbf1a1c970d88800665bcb133d0aa85ccc440f5ef14ae844c65855905e7d3def4d84d69f2a006a09112c758ecab19027ce4b3881f21762d0b31898a02ca47832bb8dffb8cc61e214f9104916025ac1cbb2fdc6dee89c578d373f3c22d9774d270d8446ed4fec59d4a37d10148e58dbc58084da7c132dbdd9eb42fc8e7fe72a063b170504be5176ac6b31af4b34d4009a7355bd5ec2444070828b11d9165e7b775d84cde36f83bf7dd1e8b72657338e60bfc4db97bd4fe808d8e1a221ee869300c"}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x40}]}, 0x214}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

1m36.581680389s ago: executing program 8 (id=1178):
write$auto(0xffffffffffffffff, 0x0, 0x80000000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x84)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000)
io_uring_register$auto(r0, 0x18, 0x0, 0x9)
timer_create$auto(0x0, 0x0, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r4, 0x300000000000)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x301, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mlock$auto(0xfbea, 0x7fffffffffffffff)

1m33.551233419s ago: executing program 38 (id=1148):
sysfs$auto(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103280, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
io_uring_setup$auto(0x14f, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x2000, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
open(0x0, 0x261c2, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
write$auto(r0, 0x0, 0xc3)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0582, 0x0)
readv$auto(r1, &(0x7f0000000080)={0x0, 0x200000002}, 0x7)
write$auto(r1, 0x0, 0x2b4)

1m30.489646261s ago: executing program 2 (id=1181):
mmap$auto(0x0, 0x400008, 0x56f2, 0x9b74, 0x2, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0)
read$auto_tracing_fops_trace(r1, &(0x7f0000000580)=""/4096, 0x1000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r2 = open(0x0, 0x22240, 0x15d)
socket(0x2, 0x80802, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async)
close_range$auto(r3, 0xffffffffffffffff, 0xdd)
r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x20900, 0x0)
mmap$auto(0x0, 0x2000d, 0x4000000000e2, 0xfb1, r2, 0x1000000008000) (async)
setrlimit$auto(0x1000000007, 0x0) (async)
ioctl$auto(r4, 0x64c6, 0x1e2) (async)
socket(0xa, 0x2, 0x0) (async)
r5 = socket(0x18, 0x5, 0x1)
connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) (async)
r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0)
ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f00000001c0)="ff")
open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.4/usb5/descriptors\x00', 0x18b940, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7fffefff) (async)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async)
connect$auto(0x3, 0x0, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) (async)
pwrite64$auto(0xc8, 0x0, 0xf, 0x7) (async)
ioctl$auto_TUNGETVNETHDRSZ2(r0, 0x800454d7, &(0x7f0000000080)=0x7f)

1m30.345654105s ago: executing program 2 (id=1182):
unshare$auto(0x40000080)
r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim7/psample/enable\x00', 0x0, 0x0)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/0000:00:02.0/name\x00', 0xac301, 0x0)
r1 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)=@link_create={@map_fd=<r2=>r0, @target_ifindex, 0x7, 0x7, @netfilter={0x3, 0x5, 0x5, 0x3}}, 0x4)
write$auto(r1, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim7/psample/enable\x00', 0x9)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80ebd01, 0x0)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
epoll_create$auto(0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000480)={0x20, r4, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x40)
sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_METER_ATTR_USED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20080000)
write$auto_fops_x64_ro_(r1, &(0x7f0000000180)="29e3cb8716a783857d165332fea8987c3bc3f15da157ce100e4d4f3e6ad1d945d0c807e1b6f6775cf92aebdd43570800b45bdcd5f1125df9665fbc3f30eb273051e735393f19755332cc1a8f55d7d58ea3d2a344a1384f702c27e7728b8ee42797d0093f26704152e88028339b4be4243d7b7086a1d762e8cf301e35131ef6d61ddd249c467637abe87ffaff0d231f26bf074bbf733ed041c39d6e484747776d", 0xa0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0xff8000, 0x0)
prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0)
prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7)
r5 = openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim1/ports/0/udp_ports_reset\x00', 0x480000, 0x0)
fchdir$auto(r5)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)

1m30.233092038s ago: executing program 2 (id=1183):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60a000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000034, 0x0)
fsopen$auto(0x0, 0x1)
socket(0xa, 0x3, 0x3a)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0)
exit$auto(0x4)
read$auto(r3, 0x0, 0x1f40)
write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)

1m29.321632053s ago: executing program 2 (id=1184):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRESHEX=r0, @ANYBLOB="13002ebd7000dddb6f34c78fba969c368473", @ANYRES32=<r4=>r3, @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x4000001)
sendmsg$auto_NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRESDEC=r2, @ANYRESDEC=r1], 0x40}, 0x1, 0x0, 0x0, 0x44011}, 0x4000010)
mmap$auto(0xfffb, 0x5ee4, 0x1, 0x20000100000ebd, 0x40000000000a1, 0x8000)
r5 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800})
r6 = socket(0x10, 0xa, 0x17fffffc)
mmap$auto(0x1, 0x4000000004020009, 0x7fffffff, 0xeb1, 0x401, 0x7ffd)
sysfs$auto(0x180, 0x1b, 0x0)
fsopen$auto(0x0, 0x1)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x103, 0x0)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x240000, 0xd, 0x1, 0x948b, 0x7, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x300000000000000, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffd]}, 0x0)
close_range$auto(0x2, r7, 0x200000)
sendmmsg$auto(r5, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100)
socket(0x2, 0x3, 0x2)
mmap$auto(0x0, 0xa73, 0xdf, 0x9b72, 0x1000, 0x28000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi5\x00', 0x0, 0x0)
ioctl$auto(r6, 0xc0845655, r6)
setsockopt$auto(0xffffffffffffffff, 0xc2, 0xb, 0xfffffffffffffffc, 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
close_range$auto(0x2, 0x8, 0x3)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
prctl$auto(0x39, 0xfffffffffffffffd, 0x0, 0xa7, 0x0)
mmap$auto(0x3, 0x40009, 0x10000000000000dc, 0x9b72, r0, 0x28000)

1m28.442229718s ago: executing program 2 (id=1185):
socket(0x10, 0x3, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x8000000400, 0x200004007ffffffd, 0x4010006)
write$auto(0xffffffffffffffff, 0x0, 0x4000000)
mlockall$auto(0x6)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
chroot$auto(&(0x7f0000000080)='}[,&*}\x00')
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
pivot_root$auto(&(0x7f0000000040)='..\x00', 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x602, 0x1)
socket(0x2, 0x1, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
close_range$auto(r1, 0xffffffffffffffff, 0x0)

1m28.031542241s ago: executing program 2 (id=1186):
statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0xa28, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0xe3c, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000080)={0xa8})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000800400fadbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="050030000000000009000200252a252f40000000050033000800000008002c0005000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004060}, 0x140000e4)

1m26.010083171s ago: executing program 39 (id=1174):
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x1ac}}, 0x40000)
bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x9, 0x6, 0x5, 0x1fe, 0x2, 0x1, 0x4, 0x0, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x89, 0x9, 0xffff, 0x3ff, 0x7, @attach_btf_obj_fd, 0x440, 0xa, 0x7, 0x1ff, 0x9}, 0x9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f)
getdents64$auto(r1, 0x0, 0x18)
shmctl$auto_IPC_INFO(0x9207, 0x3, 0x0)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7fffffffffffffff, 0x4)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x2b, 0x1, 0x1)
getsockopt$auto(r2, 0x40000000029, 0x43, 0xfffffffffffffffe, 0x0)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x20008000)
sysfs$auto(0x2, 0x23, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/syscall\x00', 0x80, 0x0)
read$auto_proc_single_file_operations_base(r3, &(0x7f0000000100)=""/148, 0x94)
keyctl$auto(0x11, 0xfffffffd, 0x8, 0x4, 0x9)
mlockall$auto(0x800000000000005)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0xfffffffffffffffc, 0x84020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)

1m23.957880567s ago: executing program 40 (id=1177):
r0 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy14/fragmentation_threshold\x00', 0x80000, 0x0)
write$auto(r0, &(0x7f00000000c0)=')*(\\\x00', 0x4) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x3f, 0x93f, 0x1fee0, 0x3, 0x200006, 0xfffffffffffffffe, 0x1ff, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0xb65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, [0x2, 0x0, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffc, 0x0, 0x2d24, 0x9, 0x0, 0x200000000000, 0x9, 0x1000, 0x8f3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x4, 0x3, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x82) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
r1 = socket(0x10, 0x2, 0x0) (async)
r2 = socket(0x28, 0x805, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
bind$auto(r2, &(0x7f0000000080)=@in={0x28, 0x0, @multicast2}, 0x68) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1)
sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x214, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x3}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x7f}, @NL80211_ATTR_MAC={0xee, 0x6, "1d38d971e87ae9adf9f2d88d64def7406e508ab5f3b56cb3e7c69fa367f9b6b750b02a2e05866bbc15e24659db748e32b7407e033d8dc12aa8fe42e3383bd988f462b58864b2eb254fde305c3c97c568e0f34825aeaa1835f7259646d3a3d2fc51048f1b3b020cca67a58fe4e6b741b3461aabd1ab45c91ba98054ca21830c87260f048d65cb03d6161d7957dd0b4712c3a0c2055da61764fe09213b135ec0cda8fe49bbf92d03e16eb4ea86b1e7b9d40dd801aceedd5d0162bc1df1e8a9b5b1ca9494848335897288b5f0c1b6c6e95ce7af6cacc183c4cfcdae9f5546402fe3d50f89cbdb45e4f62b77"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe6, 0xbe, "9d9075d84339f6177a6ddb1f5d1608170e4c8d0d2dbcdb687ea49ff3cdc2816d515dbf1a1c970d88800665bcb133d0aa85ccc440f5ef14ae844c65855905e7d3def4d84d69f2a006a09112c758ecab19027ce4b3881f21762d0b31898a02ca47832bb8dffb8cc61e214f9104916025ac1cbb2fdc6dee89c578d373f3c22d9774d270d8446ed4fec59d4a37d10148e58dbc58084da7c132dbdd9eb42fc8e7fe72a063b170504be5176ac6b31af4b34d4009a7355bd5ec2444070828b11d9165e7b775d84cde36f83bf7dd1e8b72657338e60bfc4db97bd4fe808d8e1a221ee869300c"}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x40}]}, 0x214}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

1m20.901099378s ago: executing program 41 (id=1178):
write$auto(0xffffffffffffffff, 0x0, 0x80000000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x84)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000)
io_uring_register$auto(r0, 0x18, 0x0, 0x9)
timer_create$auto(0x0, 0x0, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r4, 0x300000000000)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x301, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mlock$auto(0xfbea, 0x7fffffffffffffff)

1m12.781621078s ago: executing program 42 (id=1186):
statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0xa28, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0xe3c, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000080)={0xa8})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000800400fadbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="050030000000000009000200252a252f40000000050033000800000008002c0005000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004060}, 0x140000e4)

55.443503139s ago: executing program 1 (id=1221):
r0 = bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=@bpf_attr_5={@target_fd=<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, 0x5, 0xa37, 0xffffffffffffffff, @relative_fd, 0x1}, 0xd7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
open(0x0, 0x22040, 0x75) (async)
connect$auto(r2, &(0x7f0000000180)=@ax25={0x3, @null, 0x4}, 0x7ff)
select$auto(0x4, &(0x7f0000000240)={[0x8, 0x3ff, 0x1, 0x100000001, 0x9, 0xfffffffffffffff9, 0x83e3, 0x10000, 0x8, 0xb9f00000, 0x4000, 0xc2e9, 0x71, 0xffffffffffffff76, 0x9, 0x3]}, &(0x7f00000002c0)={[0x0, 0x10001, 0x7, 0x3, 0x9, 0x3, 0x7, 0x101, 0x1, 0x26, 0x10001, 0x5, 0xfffffffffffffff9, 0xfffffffffffff000, 0x6, 0xfffffffffffff626]}, &(0x7f00000003c0)={[0x101, 0x4, 0x4, 0x7, 0x8, 0x3, 0x8, 0x9, 0xdb0, 0xffffffffffffff0d, 0x477, 0xd4, 0x4, 0x10001, 0x62c, 0x6]}, &(0x7f00000001c0)={0x8000000000000001, 0x7}) (async)
socket(0x840000000002, 0x3, 0xff) (async)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async)
getsockopt$auto_SO_PEERNAME(r2, 0x1ff, 0x1c, &(0x7f0000000340)=':$)\x00', &(0x7f0000000440)=0x2) (async)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.6/usb7/bNumConfigurations\x00', 0x80000, 0x0)
read$auto(r3, &(0x7f0000000180)='^{-!S\x84\x00', 0x9) (async)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) (async)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0xfeb8, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x404c804}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc8}, 0x1, 0x0, 0x3, 0x9}, 0x7}, 0x3, 0x0)

54.929139713s ago: executing program 1 (id=1259):
mmap$auto(0x0, 0x400008, 0xdf, 0x1000000000009b72, 0x2, 0x800008000)
r0 = socket(0xa, 0x5, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000011c0)=""/218, 0xda)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
io_uring_setup$auto(0x85, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
open(&(0x7f00000000c0)='./file1\x00', 0x32b2c1, 0x1c2)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0xa, 0x106)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x161240, 0x0)
write$auto(r5, 0x0, 0x4)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
shutdown$auto(0x200000003, 0x2)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="a001ee00b5b16e51a59d66d5aab3125c9ccd21bc7ebd5f42b5cf5cbe8f63caac1f10d1575c537b8544e7813c7b2f3c3d491a75758912585cf6925295aefd7b005457edcf6b0a72e7320900c674665d2d802be9961959b3530113c70fec783a9d4e7c5a468c252d94934829a43c89a9319705abc8495c2aa494fc792dcbd8559dd13c077167081217a556e557d71c326e2273fd253d6d6ad015d6eaad", @ANYRES16=r4, @ANYBLOB="020029bd7000fcdbdf25010000000400cc007c005b00bea0b3ec708bcbd1c708f07fa26e05d7a1194b36c0d6f3eb94b8eb8649124f784bdf279aa317f5b7de9b30c2d65021ecb8dbdfe9447bd165dcba52185ae9aa477490d3a17d63423a775e8c1df7187542d9d866cd884488074ed67cc757c3278db0a3a86dbfd5dad14850b33705a3b79a1c5c2ee96f12fa120500c20007000000f400210024014d4f75c1346659506b5be8b62248e562cdb5f7adfa26a66a417b39bfcc6bc6594c09ea9366a352bc4beccb7777edbefa05db347f028a932d3e39b5b0a56192712ac22431d1403c56681c71e823bc743673cb0443d17e5c812cffbcc52c6b01a7779cf74ec0511d4f156dda15612628618ccb8d7ee87c840cb160076ba053e33933aaabe44bdc9373b6de5d652ef10eb002ace1848df30745f8e75dd868f428d59e7399a369f2172b4c69cd269ad0e812967aea2b354b8c05a2a8dd459aa075c343a8436c187af14a24b83018c9b1b3b75d05be80346376ea2a41c3082f6d534e7b08e040554f179c4f8500d4a2640500f2001f00000008000b0108000000", @ANYRES16], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24040000)

53.165985135s ago: executing program 1 (id=1267):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x8, 0x0, 0x0, 0x0, 0x0)
write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0)
lseek$auto(0x3, 0x8, 0x1)
ioctl$auto(0x3, 0x400454ca, 0x38)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0)
io_uring_register$auto_IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)="12b74f85be9354f333cfb5d98c72f5295c344cf2449f8a8c4ea5247e3031b6bd949024c1879cdcf14e55a1255c1f524fc6f5391eef75108285c46218a19d4a1a7a5db313353b70e8fb27184384222001b53d83c9011b65cbaf25adc0cdc8d5b2c7bdc897a53abc4a7782fc9cb80ceae3340511142c9af540ade629879caeb83b1e5f3cdb58ca0dbee2aa0240b44607d6adaa26efaa1ad968b5d89066ce4c5882c9370d16efa261c4286695b8c77c61542286a5ee2b3e8e9364ac9c060e46a44641aba6e730ac8e68c7e4947f32e8dd1e035693ead09edf5e28eb157463759875889b6b94", 0x5)
read$auto(r3, 0x0, 0x10)
write$auto(0x3, 0x0, 0xffd8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000)
write$auto(0x1, 0x0, 0x80000000)
fcntl$auto(0x0, 0x407, 0x0)

51.51129601s ago: executing program 1 (id=1274):
openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(0xca, 0x0, 0x2b)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fe5bdf2502000000000035000600000008001300"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x5, 0x84)
semctl$auto(0x2, 0x5, 0x13, 0x9)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200000005002a0001000000080017"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

51.139443308s ago: executing program 1 (id=1275):
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020008, 0x3, 0x7fffffff, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = socket(0x11, 0x80000, 0x809)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)
fspick$auto(0xffffffffffffffff, 0x0, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
open(0x0, 0x161342, 0x130)
r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
pread64$auto(r2, 0x0, 0x101, 0x103)
read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r3, @ANYRES16], 0xb4}}, 0x20000054)
write$auto(r1, 0x0, 0x40000000098c7)
madvise$auto(0x0, 0x8, 0x15)
unshare$auto(0x40000080)

47.485313244s ago: executing program 1 (id=1290):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80)
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x400000000400008, 0x9, 0xf1, 0x2, 0x18000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0)
pread64$auto(r1, &(0x7f000000b040)='\x00', 0x7, 0x6)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0x90100, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendfile$auto(r5, r5, 0x0, 0x3)
write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x22000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x7, 0x1, 0xffffffffffffffff, 0x18, r3, 0x9bdf)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0800, 0x0)
ioctl$auto(r6, 0xc0085666, r6)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffe, 0x115)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
fsopen$auto(0x0, 0x1)

32.003075808s ago: executing program 43 (id=1290):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80)
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x400000000400008, 0x9, 0xf1, 0x2, 0x18000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0)
pread64$auto(r1, &(0x7f000000b040)='\x00', 0x7, 0x6)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0x90100, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendfile$auto(r5, r5, 0x0, 0x3)
write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x22000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x7, 0x1, 0xffffffffffffffff, 0x18, r3, 0x9bdf)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0800, 0x0)
ioctl$auto(r6, 0xc0085666, r6)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffe, 0x115)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
fsopen$auto(0x0, 0x1)

7.628352266s ago: executing program 4 (id=1415):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
socket(0x2, 0x2, 0x88)
eventfd$auto(0x4) (async)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) (async)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) (async)
ioctl$auto(r1, 0x4008af20, r0)
r2 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
splice$auto(r1, &(0x7f0000000000)=0x100010000000000, r2, &(0x7f00000000c0)=0x5, 0x0, 0x1) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, 0x2, 0x8000) (async)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) (async)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyw0\x00', 0x101000, 0x0) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64)
semctl$auto(0x1, 0xf2c, 0x10, 0x6)

6.400376418s ago: executing program 4 (id=1426):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
unlink$auto(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00') (async)
r0 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x8c)
open_by_handle_at$auto(r0, &(0x7f0000000140)={0x8, 0x30001, "b190a905237d4b53"}, 0x42) (async)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18)
r1 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0)
read$auto_hwsim_fops_ps_(r1, 0x0, 0x0)
socket(0x15, 0xa, 0x102) (async)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r2, &(0x7f0000000300)='/dev/audio1\x00N\x00#.\x14\x96\x9c\b\xc0Bf\xdc\xb9\xaf\x88\x9a9\xa0rH\x90\xb9\x00,+1s\xcf\x8aC\x95\xd3J\xc0\xfe\xcdMu:\xeeG$\xa3\xaa0-f\x15!0X#\x95h\xdd\"\xbc\x1e\x03\xa4\xc3Y\xe4d\xa4\'B\xad\xefg\x96\xb2\x99\x15\xfd\x10\xb0\xf3W\xdbFs(\x01x\'^\xf2\xb02 A\xae\xfb\x99%f\xce\x81\xc0J\x99_\x8a\xaf,\xdf\xb2\xbb~\x86\x9e\xa7\xdf\x02\xa9\xb0\xe9\x1f\xc4\nO\xc4\x88\xcd\xfa\x9e7\x90\xad\xb8\xa4\x04\x1b\xecd\x91\x92\x13\x1a\xd5=\xc3\xec\x05\x16\a\x98J\xa7%\xd9Y\xcc\xce=\x94\x9e\x10\xed\xbe\xc1\x99O$\x91\xd9E\x91A\x1f(+\x93\x18\x8b\xd2\x15j3\xa18A2\x06<\t\x99\x1f\t\x99I5\xdc^\xa7F\x1e\x8c\xe7gC\xde:l\x05\x10\x13:[\xa0G\xff\x10b\xa9\xbd6\xbb\xc7F\x81\xb1@\x0f\xac^\xda\x93\xd8\xc8\xe1\xc3\x12d\xdc\xa2\x1c\x7f\xbd\xe6\x04\x95\x1f\x136\xc2\xbb\xf1\xdd\x95\x1ann\x9dR/u\xba\xed\x13\xf7\x18\xdb2\xccnp\xb6\xa0p&\xfc;\xfb\xfaB`\n\x94yi^\x84\x92\xb6\xb5\x0f\xb6\xdc\x98\x19T\xe8\xfd\xe9\xd8\xdb|\xc8R\xd0\xe4\xd7$\xb8Q\xb4\t\x91\x17\xbe\x86\xc3\xb3}\x9a\x803g\x9f\xbd\x0fG\xda\x15\xde\xc4\xa5\xdf9l\xa4o\x8f\v:\xd6w\xf2T}5\xbb\x89\xb7\xc5e8\xab\x8d4F\x10\x15`\x90', 0x0)
mmap$auto(0x100000000, 0x7fffffff, 0x1000000df, 0x9b3f, r0, 0x28000)
mmap$auto(0x0, 0x20000000400008, 0xdf, 0x7fffffffffffffff, 0x2, 0x8000)
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async)
socket(0xa, 0x5, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (rerun: 32)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/power/runtime_status\x00', 0x1a3b02, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0)
ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
madvise$auto(0x0, 0x2003f0, 0x15) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
ioperm$auto(0x5, 0x1, 0x3)
tee$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x3) (async, rerun: 64)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x20000008000) (rerun: 64)
socket(0x21, 0x2, 0x2)
write$auto(0x3, 0x0, 0x80000ffd8)

6.00963811s ago: executing program 0 (id=1421):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
mmap$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfd5, 0x12, r0, 0xff)
mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0)
socket(0xa, 0x3, 0x73)
mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81)
r3 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x6d, 0x3, "69db5ea9b8412d57853115665c6fd110c98dc874a8323617f3cf82f40135279e6a99327575dd2eb1c368f6fdd7d7928d301be3e67b252967773137ca1c216522bfa0ccf948fe274aba188d326365c524789771165f3fc50a7263b55c0c5a400b2db0868b47f78e2d46"}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000041}, 0x40014)
ioctl$auto_RNDADDENTROPY(r3, 0x40085203, &(0x7f00000001c0)=[0x2, 0x8])
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00\x8f\xda\xf1\xba\xb1h\xee[$B6\x1c\xae?E\f\x94O\xbdAj\xab\xe0\xaa\x86\x1d4C\r8k\xe6L\x96\xba\x932\xc5/c\x81>x3\x88&\x1f\"\xc9Y\xcd\xe1\xf8\xff\x1c\x14\r;\xfb\xa0\xd8\v', 0x6)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8080, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/fail-nth\x00', 0x282082, 0x0)
close_range$auto(r0, 0xffffffffffffffff, 0x94c)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
cachestat$auto(r4, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0)
fanotify_mark$auto(0xffffffffffffffff, 0x100, 0x4, 0xffffffffffffffff, 0x0)

5.372789684s ago: executing program 0 (id=1424):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10002c, 0x7f, 0x0, @inferred=r1}, 0x287)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=@bpf_attr_7={@start_id=0x7, 0x2, 0x10000, r2}, 0xac)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
close_range$auto(r3, r3, 0x6)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0)
sendfile$auto(r4, r4, 0x0, 0x1)
socket(0x2, 0x801, 0x106)
unshare$auto(0x40000080)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6})
socket(0x2b, 0x1, 0x0)
ioctl$auto(0x3, 0xae41, r0)

5.073280493s ago: executing program 4 (id=1427):
mmap$auto(0x0, 0x400008, 0xdf, 0x1000000000009b72, 0x2, 0x800008000)
r0 = socket(0xa, 0x5, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000011c0)=""/218, 0xda)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
io_uring_setup$auto(0x85, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x89b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0xa, 0x106)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x161240, 0x0)
write$auto(r4, 0x0, 0x4)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
shutdown$auto(0x200000003, 0x2)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="a001ee00b5b16e51a59d66d5aab3125c9ccd21bc7ebd5f42b5cf5cbe8f63caac1f10d1575c537b8544e7813c7b2f3c3d491a75758912585cf6925295aefd7b005457edcf6b0a72e7320900c674665d2d802be9961959b3530113c70fec783a9d4e7c5a468c252d94934829a43c89a9319705abc8495c2aa494fc792dcbd8559dd13c077167081217a556e557d71c326e2273fd253d6d6ad015d6eaad", @ANYRES16=r3, @ANYBLOB="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", @ANYRES16], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24040000)

4.451849334s ago: executing program 3 (id=1429):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
setresuid$auto(0x0, 0x7, 0x8080)
rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
setfsuid$auto(0x0)
r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
r3 = fcntl$auto_F_GETOWN(r2, 0x9, 0xea6)
r4 = bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000300)=@task_fd_query={r3, <r5=>r2, 0x6, 0xa, 0x5, 0x5, r1, 0x3, 0xffff}, 0x19)
mmap$auto(0x0, 0x2020005, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r6, 0x0, 0x20)
bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000480)=@bpf_attr_7={@btf_id=0xfffff801, 0x80, 0x3, r5}, 0x2)
r7 = setfsgid$auto(0xee01)
setresgid$auto(r7, 0x0, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000140)={0x6, r7, 0x3, 0x1})
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x6}, 0x3)
mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0)
mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x9}, 0x7)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/batman_adv/parameters/routing_algo\x00', 0x8d82, 0x0)
write$auto(r8, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kC\xec\xd7\x88TO\xd6\x8e\x83\xa9\v\xf2\xc8Y\x1c\xd9}\xf9S\x8e\xdf\'O\xc5\xa2tH\x83m\xce<\x85\x9e\xe4\xfe\x88\xb6\xb0\xa0\xb2;\xae\xf2\x02\x00\xb08\xbe\xf0\x1ct\xa4\xe8<\xbb\x83\xebw6\xf6\xd3\t\xcb\xd6\xd7\xa5\bU\f\xb6v\x99r\x87\xafZ\xdfrY\xde\xb1\xd0\vT`\x92\nE>\xf6q1\xf2\\\n\x94\x86#\x93(\x83\r2\x95\xc5[\x8b\x018\x19\xe3 \x034\xf1ux\xa8\x1a\x87o\xe4\x98\xc8\x85\xae\xce\xc8.\xcf:\xd8\x92}\xfd67\x93|\xdc\x06\x1cE\xb1+\xc0}\x8e{Si\xbfxV5\xfc1\f\x02\xc61\x8cY\x95~\xc5A~\xf5\xcc\x82\xc9\xbb\xe8\x1a\xab\x82\x1a\xaf\xd4\x02\x7f\xdb-\xac', 0x81)
r9 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self/mounts\x00', 0x80, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x11, 0x0)
socket(0x9, 0xe, 0x8)
io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f00000001c0), 0xfffe00)
readv$auto(r9, &(0x7f0000001940)={&(0x7f0000001900), 0x80000001}, 0xed)

4.314472922s ago: executing program 6 (id=1430):
mmap$auto(0x0, 0x400008, 0xdf, 0x1000000000009b72, 0x2, 0x800008000)
r0 = socket(0xa, 0x5, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000011c0)=""/218, 0xda)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
io_uring_setup$auto(0x85, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x89b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0xa, 0x106)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x161240, 0x0)
write$auto(r5, 0x0, 0x4)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
shutdown$auto(0x200000003, 0x2)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="a001ee00b5b16e51a59d66d5aab3125c9ccd21bc7ebd5f42b5cf5cbe8f63caac1f10d1575c537b8544e7813c7b2f3c3d491a75758912585cf6925295aefd7b005457edcf6b0a72e7320900c674665d2d802be9961959b3530113c70fec783a9d4e7c5a468c252d94934829a43c89a9319705abc8495c2aa494fc792dcbd8559dd13c077167081217a556e557d71c326e2273fd253d6d6ad015d6eaad", @ANYRES16=r4, @ANYBLOB="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", @ANYRES16], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24040000)

4.178696555s ago: executing program 0 (id=1431):
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x1, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
rseq$auto(0x0, 0x8002, 0x0, 0x6)
r0 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020409, 0x40e, 0x10, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mknod$auto(0x0, 0x63c1, 0x7ff)
close_range$auto(0x2, 0xa, 0x0)
setreuid$auto(0x0, 0x7)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x18, 0x3, 0x0, 0x0, 0x2)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x808a0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
get_robust_list$auto(0x1, 0x0, 0x0)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSFLAGS(r2, 0x40047459, 0x0)
read$auto(r1, 0x0, 0x20)
write$auto(r0, 0x0, 0x7)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.066511395s ago: executing program 3 (id=1432):
unshare$auto(0x40000080)
openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim7/psample/enable\x00', 0x0, 0x0)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/0000:00:02.0/name\x00', 0xac301, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80ebd01, 0x0)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
epoll_create$auto(0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0xff8000, 0x0)
prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0)
prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x2841, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"})
madvise$auto(0x0, 0xffffffffffff0005, 0x19)

3.758002014s ago: executing program 0 (id=1433):
mmap$auto(0x0, 0x400008, 0xdf, 0x1000000000009b72, 0x2, 0x800008000)
r0 = socket(0xa, 0x5, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000011c0)=""/218, 0xda)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
io_uring_setup$auto(0x85, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
open(&(0x7f00000000c0)='./file1\x00', 0x32b2c1, 0x1c2)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x89b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0xa, 0x106)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3c, 0x1, 0x0, 0x1, 0x9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x161240, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
shutdown$auto(0x200000003, 0x2)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="a001ee00b5b16e51a59d66d5aab3125c9ccd21bc7ebd5f42b5cf5cbe8f63caac1f10d1575c537b8544e7813c7b2f3c3d491a75758912585cf6925295aefd7b005457edcf6b0a72e7320900c674665d2d802be9961959b3530113c70fec783a9d4e7c5a468c252d94934829a43c89a9319705abc8495c2aa494fc792dcbd8559dd13c077167081217a556e557d71c326e2273fd253d6d6ad015d6eaad", @ANYRES16=r4, @ANYBLOB="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", @ANYRES16], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24040000)

3.089256075s ago: executing program 3 (id=1434):
unshare$auto(0x40000080)
openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim7/psample/enable\x00', 0x0, 0x0)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/0000:00:02.0/name\x00', 0xac301, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80ebd01, 0x0)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
epoll_create$auto(0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0xff8000, 0x0)
prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0)
prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7)
sysfs$auto(0x2, 0x9, 0x0)
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x82802, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
socket(0x23, 0x80805, 0x0)
epoll_create$auto(0x3e)
socket(0x2, 0x80002, 0x73)
r1 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x1d, 0x2, 0x2)
sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f0000000140)={&(0x7f0000000380), 0xc, &(0x7f0000000040)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000851)
bind$auto(0x3, 0x0, 0x1ff)
close_range$auto(0x2, 0x8, 0x0)

3.082879187s ago: executing program 4 (id=1442):
mmap$auto(0x0, 0x400008, 0xdf, 0x1000000000009b72, 0x2, 0x800008000)
r0 = socket(0xa, 0x5, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000011c0)=""/218, 0xda)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
io_uring_setup$auto(0x85, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x89b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0xa, 0x106)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x161240, 0x0)
write$auto(r4, 0x0, 0x4)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
shutdown$auto(0x200000003, 0x2)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="a001ee00b5b16e51a59d66d5aab3125c9ccd21bc7ebd5f42b5cf5cbe8f63caac1f10d1575c537b8544e7813c7b2f3c3d491a75758912585cf6925295aefd7b005457edcf6b0a72e7320900c674665d2d802be9961959b3530113c70fec783a9d4e7c5a468c252d94934829a43c89a9319705abc8495c2aa494fc792dcbd8559dd13c077167081217a556e557d71c326e2273fd253d6d6ad015d6eaad", @ANYRES16=r3, @ANYBLOB="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", @ANYRES16], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24040000)

2.156760368s ago: executing program 3 (id=1435):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
mmap$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfd5, 0x12, r0, 0xff)
mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0)
socket(0xa, 0x3, 0x73)
mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81)
r3 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x6d, 0x3, "69db5ea9b8412d57853115665c6fd110c98dc874a8323617f3cf82f40135279e6a99327575dd2eb1c368f6fdd7d7928d301be3e67b252967773137ca1c216522bfa0ccf948fe274aba188d326365c524789771165f3fc50a7263b55c0c5a400b2db0868b47f78e2d46"}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000041}, 0x40014)
ioctl$auto_RNDADDENTROPY(r3, 0x40085203, &(0x7f00000001c0)=[0x2, 0x8])
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00\x8f\xda\xf1\xba\xb1h\xee[$B6\x1c\xae?E\f\x94O\xbdAj\xab\xe0\xaa\x86\x1d4C\r8k\xe6L\x96\xba\x932\xc5/c\x81>x3\x88&\x1f\"\xc9Y\xcd\xe1\xf8\xff\x1c\x14\r;\xfb\xa0\xd8\v', 0x6)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8080, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/fail-nth\x00', 0x282082, 0x0)
close_range$auto(r0, 0xffffffffffffffff, 0x94c)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
cachestat$auto(r4, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0)
fanotify_mark$auto(0xffffffffffffffff, 0x100, 0x4, 0xffffffffffffffff, 0x0)

1.774125922s ago: executing program 6 (id=1436):
write$auto(0x3, 0x0, 0x7)

1.642517559s ago: executing program 4 (id=1437):
r0 = socket(0x2, 0x1, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/43:288/max_bytes\x00', 0x82942, 0x0)
sendfile$auto(r0, r1, 0x0, 0x43f)

1.604711034s ago: executing program 6 (id=1438):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200400, 0x0)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x11, 0x2, 'ovs_datapath\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4019}, 0x0)
socket(0x2, 0x1, 0x0)
socket(0x1e, 0x1, 0x0)
socket(0x10, 0x2, 0x0)
memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/configuration\x00', 0x10b800, 0x0)
prctl$auto_PR_MCE_KILL_GET(0x22, 0x8, 0x0, 0xfff, 0x9)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x100, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0)
socket(0xa, 0x2, 0x3a)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x3, 0x2, 0x20000000000000, 0x1, 0x8, 0x300000000000000, 0x80000001, 0x7, 0x4d40, 0x5, 0x2]}, 0x0)
add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f000000ac80)={0x1c, r4, 0x401, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000)
keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3)
ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x5, &(0x7f0000000040)="83473baae240870a67a3f956cb2920d5bb87617c9d964a6b2e1e5dcd51c85f55c361848fc8b8ee91dc86941d3c5545076115a9c2777febec135fbf87d1e0851bc6045b87dc6cdff367ef8e186c602bba790f3334fab11ac7dc75e3b42848f41cec253d0cb849df90e07a7c6fe71fd970ee8d80b637df1253dc300d4085fadc3a8e842cceb9eff39a6e2b7a288b1c66497b1ab18fd4aabb1cd91dccf5577d44ede0e78f1fc0192a2873ea7dc20a1029cbc319")
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyr2\x00', 0x240, 0x0)

1.60099772s ago: executing program 0 (id=1439):
unshare$auto(0x40000080)
r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim7/psample/enable\x00', 0x0, 0x0)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/0000:00:02.0/name\x00', 0xac301, 0x0)
r1 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)=@link_create={@map_fd=<r2=>r0, @target_ifindex, 0x7, 0x7, @netfilter={0x3, 0x5, 0x5, 0x3}}, 0x4)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80ebd01, 0x0)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
epoll_create$auto(0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000480)={0x20, r4, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x40)
sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_METER_ATTR_USED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20080000)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
write$auto_fops_x64_ro_(r1, &(0x7f0000000180)="29e3cb8716a783857d165332fea8987c3bc3f15da157ce100e4d4f3e6ad1d945d0c807e1b6f6775cf92aebdd43570800b45bdcd5f1125df9665fbc3f30eb273051e735393f19755332cc1a8f55d7d58ea3d2a344a1384f702c27e7728b8ee42797d0093f26704152e88028339b4be4243d7b7086a1d762e8cf301e35131ef6d61ddd249c467637abe87ffaff0d231f26bf074bbf733ed041c39d6e484747776d", 0xa0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0xff8000, 0x0)
prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0)
prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7)
r5 = openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim1/ports/0/udp_ports_reset\x00', 0x480000, 0x0)
fchdir$auto(r5)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)

1.436587318s ago: executing program 4 (id=1440):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10002c, 0x7f, 0x0, @inferred=r1}, 0x287)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=@bpf_attr_7={@start_id=0x7, 0x2, 0x10000, r2}, 0xac)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
close_range$auto(r3, r3, 0x6)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0)
sendfile$auto(r4, r4, 0x0, 0x1)
socket(0x2, 0x801, 0x106)
unshare$auto(0x40000080)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6})
socket(0x2b, 0x1, 0x0)
ioctl$auto(0x3, 0xae41, r0)

1.423284048s ago: executing program 3 (id=1441):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000100)='./cgroup\x00', 0x50800, 0x412)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r1, 0x114, 0x2713, 0xfffffffffffffffc, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0x4048aec9, r0)

1.321374448s ago: executing program 6 (id=1443):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x0, 0x0)
pread64$auto(r0, 0x0, 0x1080000001fc, 0x8800000000)

1.126325789s ago: executing program 6 (id=1444):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
select$auto(0x8, &(0x7f0000000240)={[0x9, 0xa, 0x3, 0x4, 0xffffffffffff7fff, 0x1008000, 0x80004, 0x5, 0xd3b, 0x34, 0x6, 0x800000000000, 0x400, 0x3, 0x3, 0x5]}, 0x0, 0x0, 0x0)
sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x8, 0xb}, 0x800009}, 0x3, 0x20000000)
r1 = inotify_init1$auto(0xf)
read$auto_proc_sessionid_operations_base(r1, &(0x7f00000002c0)=""/180, 0xb4)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250200000800130001"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='1'], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x20008810)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0)
mmap$auto(0x0, 0x20009, 0x7fff, 0xeb1, 0x401, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000820}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1.008227617s ago: executing program 3 (id=1445):
mmap$auto(0x0, 0x200002000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9)
socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000001, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x3ff, 0xffffffffffffffff, 0x8000)
socket(0x8, 0x2, 0xe)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0)
ioctl$auto(r1, 0x4b62, 0x4)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xc00caee0, r0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3)
sendmsg$auto_ETHTOOL_MSG_FEC_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="11032cbd700001dcdf251d0000000c8001800800030007000000c7d3ed2668738c22"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x800)
r5 = socket(0xa, 0x5, 0x84)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x7, 0xb7ba)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r7 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2c00, 0x0)
ioctl$auto_MEMREADOOB(r7, 0xc0104d04, &(0x7f0000000040)={0x20007763, 0x80, 0x0})
write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85)
madvise$auto(0x0, 0x2003f0, 0x15)
r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x9, 0x564, 0x6, 0xb, "93544c9990902d40f3f0f8443662bb029e55d1397db6513b256c4731eed0a6f2b5f792436e0f9de66a0b8fc5", @raw=0xfffffc01}, 0x1, @iec958={"be551833a0c506a797c74b018f25a64195b940fa373017d6", "d6445c8ea5fc859799e3e5a888b54b08f031edc28f30ffdbddc3eae4c137e9fc07751ee93d4afd76ca2ef51f0c12a0fd3b30ba6b522bf06b0c182064cb4fbaf7c59298b983699cb47f12b84532d7bbeb8c5d46ea854491dd3b481b98ba637ca41b8df67eff3d20de7f58ea089e9bce7616f98b7c0cf7a2b9675b0f938a39c8e2d1566cf49b0cf3e29f0202378e7ea756e794dc", 0x0, "d702e592"}, "6ee6ef89bd4652fe0679ac017934ee9204d951ae1937d80909dae2ee22a2e556bcc3fe92c50fd44730fb5721663fbbbc90bc65c839fa0409b8d49edffba503dc1195be11aaf0cd48b1cfaf7451dcd629fdd09d05f2c1205f37946820c9ac206e30bbac819b81045e20fc85ff7229fd7d6eec864712817f6dd27849a7483c1348"})
sendmsg$auto_SMC_PNETID_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7f00aa3b937c292800020000000f5a17e70000", @ANYRES16=0x0, @ANYBLOB="010025bd7000fbdbdf25030000000f0001002c211baa5c5e2f5e2a5e00001f0002002f70726f632f7468726561642d73656c662f6661696c2d6e74680000060003002b0000000500040003000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000801)

904.816577ms ago: executing program 0 (id=1446):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x1d, 0x6, 0xfffff868) (async)
listen$auto(0x3, 0x81) (async)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0x240007, 0x19) (async, rerun: 32)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 32)
madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES16=r3, @ANYBLOB="0100", @ANYRES32=r1, @ANYBLOB], 0xd11}}, 0x24058091) (async)
madvise$auto(0x0, 0x200007, 0x19) (async)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 32)
mknod$auto(&(0x7f0000000040)='./file1\x00', 0xcb, 0x1) (async, rerun: 32)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
fallocate$auto(r4, 0x0, 0x7, 0x4cbd5d) (async)
rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00')
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)={0x0, 0xc9, 0xe}, 0x18)
fremovexattr$auto(r5, 0x0) (async, rerun: 64)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) (async, rerun: 64)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315, r6}, 0x1)
r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0)

0s ago: executing program 6 (id=1447):
mmap$auto(0x0, 0x400008, 0xdf, 0x1000000000009b72, 0x2, 0x800008000)
r0 = socket(0xa, 0x5, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000011c0)=""/218, 0xda)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
io_uring_setup$auto(0x85, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x89b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0xa, 0x106)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x161240, 0x0)
write$auto(r4, 0x0, 0x4)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
shutdown$auto(0x200000003, 0x2)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="a001ee00b5b16e51a59d66d5aab3125c9ccd21bc7ebd5f42b5cf5cbe8f63caac1f10d1575c537b8544e7813c7b2f3c3d491a75758912585cf6925295aefd7b005457edcf6b0a72e7320900c674665d2d802be9961959b3530113c70fec783a9d4e7c5a468c252d94934829a43c89a9319705abc8495c2aa494fc792dcbd8559dd13c077167081217a556e557d71c326e2273fd253d6d6ad015d6eaad", @ANYRES16=r3, @ANYBLOB="020029bd7000fcdbdf25010000000400cc007c005b00bea0b3ec708bcbd1c708f07fa26e05d7a1194b36c0d6f3eb94b8eb8649124f784bdf279aa317f5b7de9b30c2d65021ecb8dbdfe9447bd165dcba52185ae9aa477490d3a17d63423a775e8c1df7187542d9d866cd884488074ed67cc757c3278db0a3a86dbfd5dad14850b33705a3b79a1c5c2ee96f12fa120500c20007000000f400210024014d4f75c1346659506b5be8b62248e562cdb5f7adfa26a66a417b39bfcc6bc6594c09ea9366a352bc4beccb7777edbefa05db347f028a932d3e39b5b0a56192712ac22431d1403c56681c71e823bc743673cb0443d17e5c812cffbcc52c6b01a7779cf74ec0511d4f156dda15612628618ccb8d7ee87c840cb160076ba053e33933aaabe44bdc9373b6de5d652ef10eb002ace1848df30745f8e75dd868f428d59e7399a369f2172b4c69cd269ad0e812967aea2b354b8c05a2a8dd459aa075c343a8436c187af14a24b83018c9b1b3b75d05be80346376ea2a41c3082f6d534e7b08e040554f179c4f8500d4a2640500f2001f00000008000b0108000000", @ANYRES16], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24040000)

kernel console output (not intermixed with test programs):

5]  ? __pfx_copy_splice_read+0x10/0x10
[  366.963741][T10925]  do_splice_read+0x285/0x370
[  366.963764][T10925]  splice_direct_to_actor+0x2a1/0xa30
[  366.963786][T10925]  ? __pfx_direct_splice_actor+0x10/0x10
[  366.963811][T10925]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  366.963831][T10925]  ? get_pid_task+0xfc/0x250
[  366.963849][T10925]  do_splice_direct+0x174/0x240
[  366.963871][T10925]  ? __pfx_do_splice_direct+0x10/0x10
[  366.963892][T10925]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  366.963916][T10925]  ? rw_verify_area+0xcf/0x6c0
[  366.963936][T10925]  do_sendfile+0xb06/0xe50
[  366.963959][T10925]  ? __pfx_do_sendfile+0x10/0x10
[  366.963978][T10925]  ? __fget_files+0x20e/0x3c0
[  366.964004][T10925]  __x64_sys_sendfile64+0x1d8/0x220
[  366.964018][T10925]  ? ksys_write+0x1ac/0x250
[  366.964037][T10925]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  366.964057][T10925]  do_syscall_64+0xcd/0xf80
[  366.964080][T10925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.964094][T10925] RIP: 0033:0x7fd632f8f7c9
[  366.964107][T10925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.964121][T10925] RSP: 002b:00007fd633da9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  366.964135][T10925] RAX: ffffffffffffffda RBX: 00007fd6331e5fa0 RCX: 00007fd632f8f7c9
[  366.964144][T10925] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  366.964152][T10925] RBP: 00007fd633da9090 R08: 0000000000000000 R09: 0000000000000000
[  366.964161][T10925] R10: 00000000000002f2 R11: 0000000000000246 R12: 0000000000000001
[  366.964169][T10925] R13: 00007fd6331e6038 R14: 00007fd6331e5fa0 R15: 00007fff4c5900c8
[  366.964189][T10925]  </TASK>
[  367.318781][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1047'.
[  367.890888][T10938] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input94
[  368.058540][T10941] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  368.758231][T10940] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input95
[  372.213123][ T5154] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18
[  372.392399][T10997] zswap: compressor � not available
[  372.589791][T11006] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input96
[  372.801996][T11008] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input97
[  373.244187][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1064'.
[  374.973151][T11035] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000
[  375.047488][T11035] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  375.088109][T11035] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000
[  375.123043][T11035] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  375.167899][T11035] page dumped because: unmovable page
[  375.205827][T11035] page_owner info is not present (never set?)
[  375.787253][T11062] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  376.087296][T11065] FAULT_INJECTION: forcing a failure.
[  376.087296][T11065] name failslab, interval 1, probability 0, space 0, times 0
[  376.218442][T11065] CPU: 0 UID: 0 PID: 11065 Comm: syz.7.1071 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  376.218492][T11065] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  376.218499][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  376.218508][T11065] Call Trace:
[  376.218514][T11065]  <TASK>
[  376.218520][T11065]  dump_stack_lvl+0x16c/0x1f0
[  376.218548][T11065]  should_fail_ex+0x512/0x640
[  376.218565][T11065]  ? __kmalloc_cache_noprof+0x5f/0x800
[  376.218585][T11065]  should_failslab+0xc2/0x120
[  376.218609][T11065]  __kmalloc_cache_noprof+0x80/0x800
[  376.218626][T11065]  ? lockdep_hardirqs_on+0x7c/0x110
[  376.218647][T11065]  ? sctp_endpoint_new+0xfc/0xb20
[  376.218673][T11065]  ? sctp_endpoint_new+0xfc/0xb20
[  376.218694][T11065]  ? __pfx___debug_object_init+0x10/0x10
[  376.218716][T11065]  sctp_endpoint_new+0xfc/0xb20
[  376.218741][T11065]  ? __pfx_sctp_endpoint_new+0x10/0x10
[  376.218765][T11065]  ? lockdep_init_map_type+0x5c/0x270
[  376.218781][T11065]  ? lockdep_init_map_type+0x5c/0x270
[  376.218798][T11065]  sctp_init_sock+0xe2b/0x1310
[  376.218819][T11065]  ? __pfx_sctp_v6_init_sock+0x10/0x10
[  376.218842][T11065]  sctp_v6_init_sock+0x16/0x70
[  376.218862][T11065]  ? __pfx_sctp_v6_init_sock+0x10/0x10
[  376.218883][T11065]  inet6_create+0xb30/0x12b0
[  376.218907][T11065]  ? inet6_create+0x7f/0x12b0
[  376.218930][T11065]  __sock_create+0x339/0x8a0
[  376.218948][T11065]  inet_ctl_sock_create+0x94/0x230
[  376.218966][T11065]  ? __pfx_inet_ctl_sock_create+0x10/0x10
[  376.218981][T11065]  ? lockdep_init_map_type+0x5c/0x270
[  376.218995][T11065]  ? do_init_timer+0xc9/0x110
[  376.219019][T11065]  ? __pfx_sctp_ctrlsock_init+0x10/0x10
[  376.219039][T11065]  sctp_ctrlsock_init+0x40/0xf0
[  376.219060][T11065]  ops_init+0x1e2/0x5f0
[  376.219081][T11065]  setup_net+0x11d/0x3a0
[  376.219101][T11065]  ? __pfx_setup_net+0x10/0x10
[  376.219119][T11065]  ? lockdep_init_map_type+0x5c/0x270
[  376.219133][T11065]  ? mutex_init_lockep+0x110/0x150
[  376.219151][T11065]  copy_net_ns+0x351/0x7c0
[  376.219174][T11065]  create_new_namespaces+0x3ea/0xab0
[  376.219198][T11065]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  376.219224][T11065]  ksys_unshare+0x45b/0xa40
[  376.219249][T11065]  ? __pfx_ksys_unshare+0x10/0x10
[  376.219273][T11065]  ? xfd_validate_state+0x61/0x180
[  376.219293][T11065]  __x64_sys_unshare+0x31/0x40
[  376.219305][T11065]  do_syscall_64+0xcd/0xf80
[  376.219328][T11065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.219343][T11065] RIP: 0033:0x7fd632f8f7c9
[  376.219364][T11065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.219379][T11065] RSP: 002b:00007fd633da9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  376.219394][T11065] RAX: ffffffffffffffda RBX: 00007fd6331e5fa0 RCX: 00007fd632f8f7c9
[  376.219404][T11065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  376.219414][T11065] RBP: 00007fd633013f91 R08: 0000000000000000 R09: 0000000000000000
[  376.219423][T11065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.219432][T11065] R13: 00007fd6331e6038 R14: 00007fd6331e5fa0 R15: 00007fff4c5900c8
[  376.219452][T11065]  </TASK>
[  377.744943][   T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  377.772052][   T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  377.781369][   T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  377.789148][   T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  377.801007][   T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  378.554274][T11098] random: crng reseeded on system resumption
[  378.699534][T11098] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1075'.
[  378.858122][T11090] chnl_net:caif_netlink_parms(): no params data found
[  378.901109][T11107] FAULT_INJECTION: forcing a failure.
[  378.901109][T11107] name failslab, interval 1, probability 0, space 0, times 0
[  378.963014][T11107] CPU: 0 UID: 0 PID: 11107 Comm: syz.5.1077 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  378.963043][T11107] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  378.963049][T11107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  378.963058][T11107] Call Trace:
[  378.963064][T11107]  <TASK>
[  378.963069][T11107]  dump_stack_lvl+0x16c/0x1f0
[  378.963096][T11107]  should_fail_ex+0x512/0x640
[  378.963112][T11107]  ? __kmalloc_noprof+0xca/0x910
[  378.963130][T11107]  should_failslab+0xc2/0x120
[  378.963164][T11107]  __kmalloc_noprof+0xeb/0x910
[  378.963179][T11107]  ? copy_splice_read+0x1a8/0xc20
[  378.963204][T11107]  ? copy_splice_read+0x1a8/0xc20
[  378.963222][T11107]  copy_splice_read+0x1a8/0xc20
[  378.963242][T11107]  ? __pfx_iter_file_splice_write+0x10/0x10
[  378.963268][T11107]  ? __pfx_copy_splice_read+0x10/0x10
[  378.963294][T11107]  ? find_held_lock+0x2b/0x80
[  378.963316][T11107]  ? __pfx_copy_splice_read+0x10/0x10
[  378.963336][T11107]  do_splice_read+0x285/0x370
[  378.963359][T11107]  splice_direct_to_actor+0x2a1/0xa30
[  378.963381][T11107]  ? __pfx_direct_splice_actor+0x10/0x10
[  378.963406][T11107]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  378.963426][T11107]  ? get_pid_task+0xfc/0x250
[  378.963443][T11107]  do_splice_direct+0x174/0x240
[  378.963465][T11107]  ? __pfx_do_splice_direct+0x10/0x10
[  378.963486][T11107]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  378.963509][T11107]  ? rw_verify_area+0xcf/0x6c0
[  378.963530][T11107]  do_sendfile+0xb06/0xe50
[  378.963552][T11107]  ? __pfx_do_sendfile+0x10/0x10
[  378.963572][T11107]  ? __fget_files+0x20e/0x3c0
[  378.963597][T11107]  __x64_sys_sendfile64+0x1d8/0x220
[  378.963610][T11107]  ? ksys_write+0x1ac/0x250
[  378.963630][T11107]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  378.963649][T11107]  do_syscall_64+0xcd/0xf80
[  378.963672][T11107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.963687][T11107] RIP: 0033:0x7f6fb298f7c9
[  378.963699][T11107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.963712][T11107] RSP: 002b:00007f6fb37c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  378.963726][T11107] RAX: ffffffffffffffda RBX: 00007f6fb2be5fa0 RCX: 00007f6fb298f7c9
[  378.963736][T11107] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  378.963744][T11107] RBP: 00007f6fb37c4090 R08: 0000000000000000 R09: 0000000000000000
[  378.963752][T11107] R10: 00000000000002f2 R11: 0000000000000246 R12: 0000000000000001
[  378.963761][T11107] R13: 00007f6fb2be6038 R14: 00007f6fb2be5fa0 R15: 00007ffd7b8b0488
[  378.963780][T11107]  </TASK>
[  379.914640][   T52] Bluetooth: hci9: command tx timeout
[  379.943002][T11115] __vm_enough_memory: pid: 11115, comm: syz.5.1080, bytes: 4398046511104 not enough memory for the allocation
[  381.030800][T11090] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.050364][T11090] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.067130][T11090] bridge_slave_0: entered allmulticast mode
[  381.087526][T11090] bridge_slave_0: entered promiscuous mode
[  381.187373][T11090] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.207976][T11090] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.257780][T11090] bridge_slave_1: entered allmulticast mode
[  381.289401][T11090] bridge_slave_1: entered promiscuous mode
[  381.480116][T11133] netlink: 25 bytes leftover after parsing attributes in process `syz.8.1084'.
[  381.574246][T11136] FAULT_INJECTION: forcing a failure.
[  381.574246][T11136] name failslab, interval 1, probability 0, space 0, times 0
[  381.679959][T11136] CPU: 0 UID: 0 PID: 11136 Comm: syz.7.1085 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  381.679987][T11136] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  381.679994][T11136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  381.680003][T11136] Call Trace:
[  381.680008][T11136]  <TASK>
[  381.680014][T11136]  dump_stack_lvl+0x16c/0x1f0
[  381.680042][T11136]  should_fail_ex+0x512/0x640
[  381.680058][T11136]  ? __kmalloc_noprof+0xca/0x910
[  381.680076][T11136]  should_failslab+0xc2/0x120
[  381.680098][T11136]  __kmalloc_noprof+0xeb/0x910
[  381.680114][T11136]  ? kernfs_fop_write_iter+0x237/0x570
[  381.680139][T11136]  ? kernfs_fop_write_iter+0x237/0x570
[  381.680170][T11136]  kernfs_fop_write_iter+0x237/0x570
[  381.680194][T11136]  iter_file_splice_write+0xa24/0x12b0
[  381.680228][T11136]  ? __pfx_iter_file_splice_write+0x10/0x10
[  381.680253][T11136]  ? __pfx_copy_splice_read+0x10/0x10
[  381.680284][T11136]  ? __pfx_iter_file_splice_write+0x10/0x10
[  381.680307][T11136]  direct_splice_actor+0x192/0x6c0
[  381.680331][T11136]  splice_direct_to_actor+0x345/0xa30
[  381.680353][T11136]  ? __pfx_direct_splice_actor+0x10/0x10
[  381.680378][T11136]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  381.680398][T11136]  ? get_pid_task+0xfc/0x250
[  381.680416][T11136]  do_splice_direct+0x174/0x240
[  381.680438][T11136]  ? __pfx_do_splice_direct+0x10/0x10
[  381.680459][T11136]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  381.680482][T11136]  ? rw_verify_area+0xcf/0x6c0
[  381.680502][T11136]  do_sendfile+0xb06/0xe50
[  381.680525][T11136]  ? __pfx_do_sendfile+0x10/0x10
[  381.680544][T11136]  ? __fget_files+0x20e/0x3c0
[  381.680570][T11136]  __x64_sys_sendfile64+0x1d8/0x220
[  381.680583][T11136]  ? ksys_write+0x1ac/0x250
[  381.680603][T11136]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  381.680622][T11136]  do_syscall_64+0xcd/0xf80
[  381.680645][T11136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.680660][T11136] RIP: 0033:0x7fd632f8f7c9
[  381.680672][T11136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  381.680686][T11136] RSP: 002b:00007fd633da9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  381.680700][T11136] RAX: ffffffffffffffda RBX: 00007fd6331e5fa0 RCX: 00007fd632f8f7c9
[  381.680710][T11136] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  381.680719][T11136] RBP: 00007fd633da9090 R08: 0000000000000000 R09: 0000000000000000
[  381.680727][T11136] R10: 00000000000002f2 R11: 0000000000000246 R12: 0000000000000001
[  381.680735][T11136] R13: 00007fd6331e6038 R14: 00007fd6331e5fa0 R15: 00007fff4c5900c8
[  381.680755][T11136]  </TASK>
[  382.295474][T11090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.331759][ T5154] Bluetooth: hci9: command tx timeout
[  382.505658][T11090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.537152][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  382.544724][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  382.619670][T11090] team0: Port device team_slave_0 added
[  382.633938][T11090] team0: Port device team_slave_1 added
[  382.936004][T11090] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.968912][T11090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.092756][T11090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.147178][T11090] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.188431][T11090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.329697][T11090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.677790][T11090] hsr_slave_0: entered promiscuous mode
[  383.731508][T11090] hsr_slave_1: entered promiscuous mode
[  383.776107][T11090] debugfs: 'hsr0' already exists in 'hsr'
[  383.781862][T11090] Cannot create hsr debugfs directory
[  384.441125][ T5154] Bluetooth: hci9: command tx timeout
[  384.712393][T11090] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  384.760761][T11177] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input98
[  384.918026][T11182] Invalid ELF header magic: != ELF
[  384.971700][T11090] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  385.137239][T11090] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  385.209239][T11090] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  385.361546][T11183] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input99
[  385.728531][T11090] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.827795][T11090] 8021q: adding VLAN 0 to HW filter on device team0
[  385.887024][T10687] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.894223][T10687] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.011612][T10742] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.018794][T10742] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.501126][ T5154] Bluetooth: hci9: command tx timeout
[  386.767852][T11090] 8021q: adding VLAN 0 to HW filter on device batadv0
[  388.183999][T11090] veth0_vlan: entered promiscuous mode
[  388.268089][T11090] veth1_vlan: entered promiscuous mode
[  388.443783][T11090] veth0_macvtap: entered promiscuous mode
[  388.496386][T11090] veth1_macvtap: entered promiscuous mode
[  388.578478][T11090] batman_adv: batadv0: Interface activated: batadv_slave_0
[  388.650952][T11090] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.804111][T10687] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.853822][T10687] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.974809][T10687] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.055098][T10687] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.480110][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.495265][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.603385][T10687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.633914][T10687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.467284][T11281] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1072'.
[  390.530469][T11281] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1072'.
[  390.574372][T11281] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1072'.
[  390.669123][T11281] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1072'.
[  390.734771][T11281] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1072'.
[  392.301466][T11279] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input100
[  392.523949][T11303] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  393.287851][T11298] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input101
[  394.515792][T11337] ubi0: attaching mtd0
[  394.553242][T11337] ubi0: scanning is finished
[  394.596282][T11337] ubi0: empty MTD device detected
[  395.250965][T11337] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  395.452920][T11337] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  395.617664][T11337] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  395.733737][T11337] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  395.819057][T11337] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  395.911051][T11337] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  396.063801][T11337] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2679499401
[  396.170530][T11337] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  396.184575][T11369] kexec: Could not allocate control_code_buffer
[  396.311790][T11339] ubi0: detaching mtd0
[  396.363939][T11339] ubi0: mtd0 is detached
[  397.927719][T11421] netlink: 504 bytes leftover after parsing attributes in process `syz.9.1138'.
[  397.982241][T11419] netlink: 504 bytes leftover after parsing attributes in process `syz.9.1138'.
[  398.278767][T11429] FAULT_INJECTION: forcing a failure.
[  398.278767][T11429] name failslab, interval 1, probability 0, space 0, times 0
[  398.366761][T11429] CPU: 0 UID: 0 PID: 11429 Comm: syz.9.1141 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  398.366791][T11429] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  398.366798][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  398.366807][T11429] Call Trace:
[  398.366813][T11429]  <TASK>
[  398.366819][T11429]  dump_stack_lvl+0x16c/0x1f0
[  398.366846][T11429]  should_fail_ex+0x512/0x640
[  398.366862][T11429]  ? __kmalloc_noprof+0xca/0x910
[  398.366881][T11429]  should_failslab+0xc2/0x120
[  398.366904][T11429]  __kmalloc_noprof+0xeb/0x910
[  398.366920][T11429]  ? sk_prot_alloc+0x1a8/0x2a0
[  398.366944][T11429]  ? sk_prot_alloc+0x1a8/0x2a0
[  398.366964][T11429]  sk_prot_alloc+0x1a8/0x2a0
[  398.366987][T11429]  sk_alloc+0x36/0xe30
[  398.367004][T11429]  __netlink_create+0x5e/0x2c0
[  398.367021][T11429]  ? __wake_up+0x3f/0x60
[  398.367043][T11429]  netlink_create+0x39e/0x620
[  398.367061][T11429]  ? __pfx_genl_bind+0x10/0x10
[  398.367081][T11429]  ? __pfx_genl_unbind+0x10/0x10
[  398.367102][T11429]  ? __pfx_genl_release+0x10/0x10
[  398.367116][T11429]  __sock_create+0x339/0x8a0
[  398.367132][T11429]  __sys_socket+0x14d/0x260
[  398.367147][T11429]  ? __pfx___sys_socket+0x10/0x10
[  398.367161][T11429]  ? xfd_validate_state+0x61/0x180
[  398.367179][T11429]  __x64_sys_socket+0x72/0xb0
[  398.367192][T11429]  ? lockdep_hardirqs_on+0x7c/0x110
[  398.367214][T11429]  do_syscall_64+0xcd/0xf80
[  398.367244][T11429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.367260][T11429] RIP: 0033:0x7fa77fb8f7c9
[  398.367273][T11429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  398.367288][T11429] RSP: 002b:00007fa780a28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  398.367302][T11429] RAX: ffffffffffffffda RBX: 00007fa77fde5fa0 RCX: 00007fa77fb8f7c9
[  398.367312][T11429] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  398.367321][T11429] RBP: 00007fa77fc13f91 R08: 0000000000000000 R09: 0000000000000000
[  398.367329][T11429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.367338][T11429] R13: 00007fa77fde6038 R14: 00007fa77fde5fa0 R15: 00007ffd1125bc98
[  398.367358][T11429]  </TASK>
[  399.037544][T11440] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input103
[  399.783190][T11446] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input104
[  400.316098][T11460] FAULT_INJECTION: forcing a failure.
[  400.316098][T11460] name fail_futex, interval 1, probability 0, space 0, times 0
[  400.373618][T11460] CPU: 0 UID: 0 PID: 11460 Comm: syz.7.1147 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  400.373650][T11460] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  400.373657][T11460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  400.373666][T11460] Call Trace:
[  400.373671][T11460]  <TASK>
[  400.373677][T11460]  dump_stack_lvl+0x16c/0x1f0
[  400.373705][T11460]  should_fail_ex+0x512/0x640
[  400.373726][T11460]  get_futex_key+0x1d0/0x15f0
[  400.373743][T11460]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  400.373758][T11460]  ? __pfx_get_futex_key+0x10/0x10
[  400.373776][T11460]  ? blk_finish_plug+0x53/0xa0
[  400.373793][T11460]  ? madvise_do_behavior+0x1f4/0x530
[  400.373810][T11460]  futex_wake+0xea/0x530
[  400.373832][T11460]  ? __pfx_futex_wake+0x10/0x10
[  400.373870][T11460]  ? up_write+0x282/0x4e0
[  400.373889][T11460]  ? madvise_unlock+0x7c/0x220
[  400.373916][T11460]  do_futex+0x1e3/0x350
[  400.373933][T11460]  ? __pfx_do_futex+0x10/0x10
[  400.373955][T11460]  __x64_sys_futex+0x1e0/0x4c0
[  400.373975][T11460]  ? __pfx___x64_sys_futex+0x10/0x10
[  400.373991][T11460]  ? xfd_validate_state+0x61/0x180
[  400.374011][T11460]  do_syscall_64+0xcd/0xf80
[  400.374035][T11460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.374050][T11460] RIP: 0033:0x7fd632f8f7c9
[  400.374063][T11460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.374077][T11460] RSP: 002b:00007fd633da90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  400.374100][T11460] RAX: ffffffffffffffda RBX: 00007fd6331e5fa8 RCX: 00007fd632f8f7c9
[  400.374110][T11460] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd6331e5fac
[  400.374119][T11460] RBP: 00007fd6331e5fa0 R08: 00007fd633daa000 R09: 0000000000000000
[  400.374129][T11460] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  400.374138][T11460] R13: 00007fd6331e6038 R14: 00007fff4c58ffe0 R15: 00007fff4c5900c8
[  400.374159][T11460]  </TASK>
[  404.078125][T11508] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input105
[  404.308003][T11513] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input106
[  406.461319][T11573] FAULT_INJECTION: forcing a failure.
[  406.461319][T11573] name failslab, interval 1, probability 0, space 0, times 0
[  406.474442][T11573] CPU: 0 UID: 0 PID: 11573 Comm: syz.9.1166 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  406.474472][T11573] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  406.474479][T11573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  406.474489][T11573] Call Trace:
[  406.474496][T11573]  <TASK>
[  406.474503][T11573]  dump_stack_lvl+0x16c/0x1f0
[  406.474533][T11573]  should_fail_ex+0x512/0x640
[  406.474553][T11573]  should_failslab+0xc2/0x120
[  406.474576][T11573]  kmem_cache_alloc_noprof+0x83/0x770
[  406.474594][T11573]  ? trace_kmem_cache_alloc+0x28/0xb0
[  406.474616][T11573]  ? kmem_cache_alloc_noprof+0x2af/0x770
[  406.474633][T11573]  ? inet_bind2_bucket_create+0x36/0x5f0
[  406.474655][T11573]  ? inet_bind2_bucket_create+0x36/0x5f0
[  406.474672][T11573]  inet_bind2_bucket_create+0x36/0x5f0
[  406.474689][T11573]  ? inet_bind_bucket_create+0x2d/0x280
[  406.474708][T11573]  inet_csk_get_port+0x17c9/0x2890
[  406.474740][T11573]  ? trace_inet_sock_set_state+0x194/0x1f0
[  406.474758][T11573]  ? __pfx_inet_csk_get_port+0x10/0x10
[  406.474780][T11573]  inet_csk_listen_start+0x158/0x380
[  406.474805][T11573]  __inet_listen_sk+0x20f/0x520
[  406.474822][T11573]  ? __pfx___inet_listen_sk+0x10/0x10
[  406.474844][T11573]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  406.474866][T11573]  ? __local_bh_enable_ip+0xa4/0x120
[  406.474890][T11573]  inet_listen+0x93/0xd0
[  406.474908][T11573]  __sys_listen_socket+0x117/0x160
[  406.474925][T11573]  __sys_listen+0xa7/0x130
[  406.474939][T11573]  __x64_sys_listen+0x53/0x80
[  406.474954][T11573]  do_syscall_64+0xcd/0xf80
[  406.474978][T11573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.474993][T11573] RIP: 0033:0x7fa77fb8f7c9
[  406.475007][T11573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  406.475021][T11573] RSP: 002b:00007fa780a28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032
[  406.475036][T11573] RAX: ffffffffffffffda RBX: 00007fa77fde5fa0 RCX: 00007fa77fb8f7c9
[  406.475046][T11573] RDX: 0000000000000000 RSI: 00000000000000a1 RDI: 0000000000000006
[  406.475055][T11573] RBP: 00007fa77fc13f91 R08: 0000000000000000 R09: 0000000000000000
[  406.475064][T11573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  406.475073][T11573] R13: 00007fa77fde6038 R14: 00007fa77fde5fa0 R15: 00007ffd1125bc98
[  406.475093][T11573]  </TASK>
[  406.926995][T11580] netlink: 'syz.9.1168': attribute type 1 has an invalid length.
[  406.936582][T11580] snd_virmidi snd_virmidi.0: control 61678:131081:3:y��>o�[k<�:1597170177 is already present
[  413.393419][T11620] FAULT_INJECTION: forcing a failure.
[  413.393419][T11620] name fail_futex, interval 1, probability 0, space 0, times 0
[  413.450478][T11620] CPU: 0 UID: 0 PID: 11620 Comm: syz.8.1178 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  413.450509][T11620] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  413.450516][T11620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  413.450526][T11620] Call Trace:
[  413.450531][T11620]  <TASK>
[  413.450537][T11620]  dump_stack_lvl+0x16c/0x1f0
[  413.450566][T11620]  should_fail_ex+0x512/0x640
[  413.450586][T11620]  get_futex_key+0x1d0/0x15f0
[  413.450606][T11620]  ? __pfx_get_futex_key+0x10/0x10
[  413.450628][T11620]  futex_wait_setup+0x9d/0x570
[  413.450654][T11620]  __futex_wait+0x193/0x2f0
[  413.450675][T11620]  ? __pfx___futex_wait+0x10/0x10
[  413.450697][T11620]  ? __pfx_futex_wake_mark+0x10/0x10
[  413.450719][T11620]  ? futex_hash+0x2c5/0x380
[  413.450736][T11620]  ? futex_private_hash_put+0x160/0x1b0
[  413.450753][T11620]  futex_wait+0xe8/0x380
[  413.450779][T11620]  ? __pfx_futex_wait+0x10/0x10
[  413.450803][T11620]  ? __might_fault+0xe3/0x190
[  413.450820][T11620]  ? __might_fault+0x13b/0x190
[  413.450841][T11620]  do_futex+0x229/0x350
[  413.450858][T11620]  ? __pfx_do_futex+0x10/0x10
[  413.450875][T11620]  ? fput+0x70/0xf0
[  413.450889][T11620]  ? __sys_connect+0xe0/0x160
[  413.450907][T11620]  __x64_sys_futex+0x1e0/0x4c0
[  413.450926][T11620]  ? __pfx___x64_sys_futex+0x10/0x10
[  413.450946][T11620]  ? xfd_validate_state+0x61/0x180
[  413.450960][T11620]  ? __pfx_ksys_write+0x10/0x10
[  413.450986][T11620]  do_syscall_64+0xcd/0xf80
[  413.451010][T11620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.451025][T11620] RIP: 0033:0x7fe2b698f7c9
[  413.451039][T11620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  413.451054][T11620] RSP: 002b:00007fe2b77710e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  413.451069][T11620] RAX: ffffffffffffffda RBX: 00007fe2b6be6098 RCX: 00007fe2b698f7c9
[  413.451078][T11620] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe2b6be6098
[  413.451087][T11620] RBP: 00007fe2b6be6090 R08: 0000000000000000 R09: 0000000000000000
[  413.451096][T11620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  413.451104][T11620] R13: 00007fe2b6be6128 R14: 00007ffe92e058f0 R15: 00007ffe92e059d8
[  413.451124][T11620]  </TASK>
[  413.805797][T11266] syz.8.1109 (11266) used greatest stack depth: 18728 bytes left
[  414.812921][T11618] syz.8.1178 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  414.856525][T11618] CPU: 0 UID: 0 PID: 11618 Comm: syz.8.1178 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  414.856555][T11618] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  414.856561][T11618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  414.856570][T11618] Call Trace:
[  414.856575][T11618]  <TASK>
[  414.856581][T11618]  dump_stack_lvl+0x16c/0x1f0
[  414.856617][T11618]  dump_header+0x101/0x960
[  414.856637][T11618]  oom_kill_process+0x176/0x910
[  414.856654][T11618]  out_of_memory+0x350/0x1700
[  414.856671][T11618]  ? __lock_acquire+0x436/0x2890
[  414.856687][T11618]  ? __pfx_out_of_memory+0x10/0x10
[  414.856712][T11618]  mem_cgroup_out_of_memory+0x118/0x130
[  414.856730][T11618]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  414.856752][T11618]  ? do_raw_spin_unlock+0x172/0x230
[  414.856772][T11618]  try_charge_memcg+0x695/0xd30
[  414.856798][T11618]  ? __pfx_try_charge_memcg+0x10/0x10
[  414.856824][T11618]  ? find_held_lock+0x2b/0x80
[  414.856846][T11618]  charge_memcg+0x8a/0x230
[  414.856868][T11618]  mem_cgroup_swapin_charge_folio+0xeb/0x470
[  414.856885][T11618]  __read_swap_cache_async+0x397/0x500
[  414.856906][T11618]  ? __pfx___read_swap_cache_async+0x10/0x10
[  414.856924][T11618]  ? finish_task_switch.isra.0+0x202/0xbd0
[  414.856945][T11618]  ? rcu_is_watching+0x12/0xc0
[  414.856966][T11618]  ? finish_task_switch.isra.0+0x207/0xbd0
[  414.856985][T11618]  ? lockdep_hardirqs_on+0x7c/0x110
[  414.857009][T11618]  swap_cluster_readahead+0x432/0x770
[  414.857031][T11618]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  414.857051][T11618]  ? __lock_acquire+0x436/0x2890
[  414.857073][T11618]  ? get_vma_policy+0x242/0x3c0
[  414.857089][T11618]  swapin_readahead+0x160/0x1220
[  414.857114][T11618]  ? __pfx_swapin_readahead+0x10/0x10
[  414.857132][T11618]  ? find_held_lock+0x2b/0x80
[  414.857149][T11618]  ? swap_cache_get_folio+0x267/0x8e0
[  414.857165][T11618]  ? swap_cache_get_folio+0x267/0x8e0
[  414.857180][T11618]  ? swap_cache_get_folio+0x267/0x8e0
[  414.857198][T11618]  ? swap_cache_get_folio+0x267/0x8e0
[  414.857214][T11618]  ? swap_cache_get_folio+0x293/0x8e0
[  414.857232][T11618]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  414.857248][T11618]  ? __pfx_get_swap_device+0x10/0x10
[  414.857268][T11618]  ? rcu_read_unlock+0x2d/0xb0
[  414.857287][T11618]  ? do_swap_page+0x962/0x64a0
[  414.857300][T11618]  do_swap_page+0x962/0x64a0
[  414.857318][T11618]  ? __lock_acquire+0x436/0x2890
[  414.857336][T11618]  ? __pfx_do_swap_page+0x10/0x10
[  414.857352][T11618]  ? __pfx_default_wake_function+0x10/0x10
[  414.857373][T11618]  ? rcu_is_watching+0x12/0xc0
[  414.857392][T11618]  ? __free_object+0x286/0x410
[  414.857415][T11618]  ? rcu_is_watching+0x12/0xc0
[  414.857434][T11618]  ? ___pte_offset_map+0x175/0x380
[  414.857457][T11618]  __handle_mm_fault+0x19cb/0x2bb0
[  414.857475][T11618]  ? reacquire_held_locks+0xcd/0x1f0
[  414.857489][T11618]  ? __pfx___handle_mm_fault+0x10/0x10
[  414.857506][T11618]  ? lock_vma_under_rcu+0x176/0x580
[  414.857528][T11618]  ? get_timespec64+0x136/0x1b0
[  414.857547][T11618]  handle_mm_fault+0x3fe/0xad0
[  414.857566][T11618]  do_user_addr_fault+0x60c/0x1370
[  414.857586][T11618]  ? rcu_is_watching+0x12/0xc0
[  414.857612][T11618]  exc_page_fault+0x64/0xc0
[  414.857633][T11618]  asm_exc_page_fault+0x26/0x30
[  414.857647][T11618] RIP: 0033:0x7fe2b69b75f0
[  414.857661][T11618] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00
[  414.857675][T11618] RSP: 002b:00007ffe92e05ac8 EFLAGS: 00010246
[  414.857687][T11618] RAX: 0000000000000000 RBX: 00007fe2b6be5fa0 RCX: 00007fe2b69c2085
[  414.857696][T11618] RDX: 00007ffe92e05b10 RSI: 0000000000000000 RDI: 0000000000000000
[  414.857705][T11618] RBP: 00007fe2b6be7da0 R08: 0000000000000000 R09: 00007fe2b7793000
[  414.857714][T11618] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000659f8
[  414.857722][T11618] R13: 00007fe2b6be6180 R14: ffffffffffffffff R15: 00007ffe92e05c50
[  414.857742][T11618]  </TASK>
[  414.857747][T11618] memory: usage 3072kB, limit 3072kB, failcnt 13108
[  415.293695][T11618] memory+swap: usage 20980kB, limit 9007199254740988kB, failcnt 0
[  415.306153][T11618] kmem: usage 2396kB, limit 9007199254740988kB, failcnt 0
[  415.313811][T11618] Memory cgroup stats for /syz8:
[  415.314155][T11618] cache 659456
[  415.322808][T11618] rss 0
[  415.325590][T11618] rss_huge 0
[  415.328774][T11618] shmem 659456
[  415.332869][T11618] mapped_file 659456
[  415.336779][T11618] dirty 0
[  415.339697][T11618] writeback 0
[  415.350015][T11618] workingset_refault_anon 1766
[  415.356075][T11618] workingset_refault_file 193
[  415.361896][T11618] swap 18337792
[  415.365446][T11618] swapcached 32768
[  415.369164][T11618] pgpgin 59353
[  415.373580][T11618] pgpgout 65409
[  415.377085][T11618] pgfault 21116
[  415.381563][T11618] pgmajfault 646
[  415.385119][T11618] inactive_anon 0
[  415.388734][T11618] active_anon 32768
[  415.397182][T11618] inactive_file 0
[  415.402879][T11618] active_file 0
[  415.406333][T11618] unevictable 659456
[  415.411452][T11618] hierarchical_memory_limit 3145728
[  415.416670][T11618] hierarchical_memsw_limit 9223372036854771712
[  415.423160][T11618] total_cache 659456
[  415.427066][T11618] total_rss 0
[  415.430950][T11618] total_rss_huge 0
[  415.434663][T11618] total_shmem 659456
[  415.438537][T11618] total_mapped_file 659456
[  415.443771][T11618] total_dirty 0
[  415.452805][T11618] total_writeback 0
[  415.456618][T11618] total_workingset_refault_anon 1766
[  415.463164][T11618] total_workingset_refault_file 193
[  415.468368][T11618] total_swap 18337792
[  415.478004][T11618] total_swapcached 32768
[  415.482752][T11618] total_pgpgin 59353
[  415.486633][T11618] total_pgpgout 65409
[  415.492409][T11618] total_pgfault 21116
[  415.496473][T11618] total_pgmajfault 646
[  415.504957][T11618] total_inactive_anon 0
[  415.509146][T11618] total_active_anon 32768
[  415.516333][T11618] total_inactive_file 0
[  415.520769][T11618] total_active_file 0
[  415.524759][T11618] total_unevictable 659456
[  415.529152][T11618] anon_cost 0
[  415.533103][T11618] file_cost 0
[  415.536379][T11618] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1178,pid=11618,uid=0
[  415.558770][T11618] Memory cgroup out of memory: Killed process 11618 (syz.8.1178) total-vm:143668kB, anon-rss:1168kB, file-rss:30792kB, shmem-rss:532kB, UID:0 pgtables:168kB oom_score_adj:1000
[  416.392231][   T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  416.410891][   T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  416.419985][   T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  416.428276][   T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  416.438389][   T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  416.618149][T11628] chnl_net:caif_netlink_parms(): no params data found
[  416.696409][T11628] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.704395][T11628] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.711597][T11628] bridge_slave_0: entered allmulticast mode
[  416.719879][T11628] bridge_slave_0: entered promiscuous mode
[  416.729039][T11628] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.741519][T11628] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.749434][T11628] bridge_slave_1: entered allmulticast mode
[  416.757889][T11628] bridge_slave_1: entered promiscuous mode
[  416.790912][T11628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.806029][T11628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.841108][T11628] team0: Port device team_slave_0 added
[  416.855160][T11628] team0: Port device team_slave_1 added
[  416.884090][T11628] batman_adv: batadv0: Adding interface: batadv_slave_0
[  416.892002][T11628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.924088][T11628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  416.937046][T11628] batman_adv: batadv0: Adding interface: batadv_slave_1
[  416.945145][T11628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.981550][T11628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.024563][T11628] hsr_slave_0: entered promiscuous mode
[  417.031015][T11628] hsr_slave_1: entered promiscuous mode
[  417.038006][T11628] debugfs: 'hsr0' already exists in 'hsr'
[  417.044223][T11628] Cannot create hsr debugfs directory
[  417.160186][T11628] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.225901][T11628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.299977][T11628] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.366620][T11628] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.417675][T11628] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.551258][T11628] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  417.561802][T11628] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  417.576463][T11628] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  417.594938][T11628] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  417.624809][   T32] oom_reaper: reaped process 11618 (syz.8.1178), now anon-rss:24kB, file-rss:29696kB, shmem-rss:532kB
[  417.697352][T11628] 8021q: adding VLAN 0 to HW filter on device bond0
[  417.718680][T11628] 8021q: adding VLAN 0 to HW filter on device team0
[  417.730829][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.737978][ T6407] bridge0: port 1(bridge_slave_0) entered forwarding state
[  417.770723][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.777874][ T6407] bridge0: port 2(bridge_slave_1) entered forwarding state
[  417.962140][T11628] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.013093][T11628] veth0_vlan: entered promiscuous mode
[  418.029120][T11628] veth1_vlan: entered promiscuous mode
[  418.058897][T11628] veth0_macvtap: entered promiscuous mode
[  418.069571][T11628] veth1_macvtap: entered promiscuous mode
[  418.093252][T11628] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.113253][T11628] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.129257][ T6407] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.148698][ T6407] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.192051][ T6407] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.250173][ T6407] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.274414][ T6407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.302278][ T6407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.336405][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.344268][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.494682][   T52] Bluetooth: hci10: command tx timeout
[  419.733938][T11668] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input108
[  419.805963][T11669] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input109
[  420.563845][   T52] Bluetooth: hci10: command tx timeout
[  421.420543][T11677] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1185'.
[  422.636582][   T52] Bluetooth: hci10: command tx timeout
[  423.938689][ T5154] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  423.949491][ T5154] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  423.958609][ T5154] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  423.966445][ T5154] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  423.973954][ T5154] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  424.159587][T11680] chnl_net:caif_netlink_parms(): no params data found
[  424.239516][T11680] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.248228][T11680] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.257893][T11680] bridge_slave_0: entered allmulticast mode
[  424.266608][T11680] bridge_slave_0: entered promiscuous mode
[  424.275671][T11680] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.282851][T11680] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.290463][T11680] bridge_slave_1: entered allmulticast mode
[  424.298997][T11680] bridge_slave_1: entered promiscuous mode
[  424.334650][T11680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.349174][T11680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.382059][T11680] team0: Port device team_slave_0 added
[  424.390639][T11680] team0: Port device team_slave_1 added
[  424.422032][T11680] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.431154][T11680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.461020][T11680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.476817][T11680] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.484455][T11680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.511971][T11680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.558699][T11680] hsr_slave_0: entered promiscuous mode
[  424.569130][T11680] hsr_slave_1: entered promiscuous mode
[  424.575633][T11680] debugfs: 'hsr0' already exists in 'hsr'
[  424.581577][T11680] Cannot create hsr debugfs directory
[  424.704880][ T5154] Bluetooth: hci10: command tx timeout
[  424.749357][T11680] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.813952][T11680] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.878987][T11680] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.948309][T11680] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.084635][T11680] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  425.096261][T11680] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  425.114350][T11680] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  425.134642][T11680] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  425.166029][T11680] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.173263][T11680] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.180817][T11680] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.187898][T11680] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.201533][T10805] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.210681][T10805] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.280303][T11680] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.301051][T11680] 8021q: adding VLAN 0 to HW filter on device team0
[  425.315964][T10805] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.323208][T10805] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.361268][T10805] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.368422][T10805] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.552668][T11680] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.598507][T11680] veth0_vlan: entered promiscuous mode
[  425.610995][T11680] veth1_vlan: entered promiscuous mode
[  425.644729][T11680] veth0_macvtap: entered promiscuous mode
[  425.663730][T11680] veth1_macvtap: entered promiscuous mode
[  425.687911][T11680] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.704198][T11680] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.719098][ T6406] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.741042][ T6406] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.782731][ T6406] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.815363][ T6406] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.908893][T10805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.937911][T10805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.998188][ T6407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.026359][ T6407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.055581][ T5154] Bluetooth: hci11: command tx timeout
[  426.148166][   T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  426.164564][   T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  426.173909][   T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  426.183275][   T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  426.191459][   T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  426.546133][T11699] chnl_net:caif_netlink_parms(): no params data found
[  426.732426][T11699] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.739619][T11699] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.751680][T11699] bridge_slave_0: entered allmulticast mode
[  426.782639][T11699] bridge_slave_0: entered promiscuous mode
[  426.801568][T11699] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.809284][T11699] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.828003][T11699] bridge_slave_1: entered allmulticast mode
[  426.849759][T11699] bridge_slave_1: entered promiscuous mode
[  426.928948][T11699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.956347][T11699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.041077][T11699] team0: Port device team_slave_0 added
[  427.064681][T11699] team0: Port device team_slave_1 added
[  427.126870][T11699] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.145619][T11699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.220106][T11699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.242642][T11699] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.259804][T11699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.330673][T11699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.416588][T11699] hsr_slave_0: entered promiscuous mode
[  427.441572][T11699] hsr_slave_1: entered promiscuous mode
[  427.458882][T11699] debugfs: 'hsr0' already exists in 'hsr'
[  427.464659][T11699] Cannot create hsr debugfs directory
[  427.754243][T11699] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.861981][T11699] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.967958][T11699] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.124944][   T52] Bluetooth: hci11: command tx timeout
[  428.204232][   T52] Bluetooth: hci12: command tx timeout
[  428.220103][T11699] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  428.244068][T11699] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  428.268524][T11699] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  428.289848][T11699] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  428.473169][T11699] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.514109][T11699] 8021q: adding VLAN 0 to HW filter on device team0
[  428.538500][T10805] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.545659][T10805] bridge0: port 1(bridge_slave_0) entered forwarding state
[  428.597478][T10805] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.604656][T10805] bridge0: port 2(bridge_slave_1) entered forwarding state
[  428.649493][T11699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  428.669973][T11699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  428.857224][T11699] 8021q: adding VLAN 0 to HW filter on device batadv0
[  428.966689][T11699] veth0_vlan: entered promiscuous mode
[  429.018962][T11699] veth1_vlan: entered promiscuous mode
[  429.076408][T11699] veth0_macvtap: entered promiscuous mode
[  429.113619][T11699] veth1_macvtap: entered promiscuous mode
[  429.149835][T11699] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.182092][T11699] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.217067][ T1157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.249422][ T1157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.309446][ T1157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.334852][ T1157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  429.455547][T11716] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  429.462937][T11716] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  429.470412][T11716] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  429.476586][T11716] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  429.488545][T11716] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  429.495779][T11716] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  429.502331][T11716] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  429.515983][T11716] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  429.525466][T11716] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  429.533416][T11716] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  429.544430][T11716] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  429.553939][T11716] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  429.564404][T11716] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  429.571176][T11716] Bluetooth: hci9: Opcode 0x0406 failed: -4
[  429.579688][T11716] Bluetooth: hci9: Opcode 0x0406 failed: -4
[  429.589162][T11716] Bluetooth: hci10: Opcode 0x0c1a failed: -4
[  429.595290][T11716] Bluetooth: hci10: Opcode 0x0406 failed: -4
[  429.603422][T11716] Bluetooth: hci10: Opcode 0x0406 failed: -4
[  429.617376][T11716] Bluetooth: hci11: Opcode 0x0c1a failed: -4
[  429.625965][T11716] Bluetooth: hci11: Opcode 0x0406 failed: -4
[  429.635219][T11716] Bluetooth: hci11: Opcode 0x0406 failed: -4
[  429.654717][T11716] Bluetooth: hci12: Opcode 0x0c1a failed: -4
[  429.663468][T11716] Bluetooth: hci12: Opcode 0x0406 failed: -4
[  429.673853][T11716] Bluetooth: hci12: Opcode 0x0406 failed: -4
[  429.704442][ T5154] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  429.725810][ T5154] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  429.734133][ T5154] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  429.757400][ T5154] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  429.771294][ T5154] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  429.851813][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.896569][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.007422][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.122615][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.383185][T11740] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input110
[  430.533594][T11746] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input111
[  430.634427][T11725] chnl_net:caif_netlink_parms(): no params data found
[  430.673679][ T5154] Bluetooth: hci0: command 0x0c1a tx timeout
[  430.688840][T11740] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  430.827967][T11725] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.849089][T11725] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.857654][T11725] bridge_slave_0: entered allmulticast mode
[  430.865884][T11725] bridge_slave_0: entered promiscuous mode
[  430.882513][T11725] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.891095][T11725] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.898449][T11725] bridge_slave_1: entered allmulticast mode
[  430.908214][T11725] bridge_slave_1: entered promiscuous mode
[  430.955775][T11725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.968839][T11725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.017377][T11725] team0: Port device team_slave_0 added
[  431.026792][T11725] team0: Port device team_slave_1 added
[  431.061110][T11725] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.068283][T11725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.102265][T11725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.117331][T11725] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.126520][T11725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.161888][T11725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.261839][T11725] hsr_slave_0: entered promiscuous mode
[  431.276090][T11725] hsr_slave_1: entered promiscuous mode
[  431.290740][T11725] debugfs: 'hsr0' already exists in 'hsr'
[  431.303287][T11725] Cannot create hsr debugfs directory
[  431.467497][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout
[  431.473587][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  431.479686][ T5154] Bluetooth: hci3: command 0x0c1a tx timeout
[  431.553749][ T5840] Bluetooth: hci7: command 0x0c1a tx timeout
[  431.561379][   T52] Bluetooth: hci6: command 0x0c1a tx timeout
[  431.567444][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout
[  431.574018][ T5840] Bluetooth: hci4: command 0x2016 tx timeout
[  431.582598][ T5154] Bluetooth: hci8: command 0x0c1a tx timeout
[  431.626861][ T5839] Bluetooth: hci11: command 0x0419 tx timeout
[  431.633581][ T5839] Bluetooth: hci9: command 0x0c1a tx timeout
[  431.649434][T11765] Bluetooth: hci10: command 0x0c1a tx timeout
[  431.706483][T11765] Bluetooth: hci12: command 0x040f tx timeout
[  431.785016][T11765] Bluetooth: hci13: command tx timeout
[  431.816417][T11725] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.894510][T11770] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input112
[  432.013142][T11725] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.230511][T11725] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.266701][T11776] bridge0: port 3(macvlan0) entered blocking state
[  432.279887][T11776] bridge0: port 3(macvlan0) entered disabled state
[  432.304626][T11776] macvlan0: entered allmulticast mode
[  432.314080][T11776] veth1_vlan: entered allmulticast mode
[  432.329297][T11776] macvlan0: entered promiscuous mode
[  432.339276][T11776] bridge0: port 3(macvlan0) entered blocking state
[  432.345974][T11776] bridge0: port 3(macvlan0) entered forwarding state
[  432.403317][T11725] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.524035][T11783] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  432.935493][T11725] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  433.003968][T11725] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  433.017076][T11794] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input113
[  433.052932][T11725] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  433.146010][T11725] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  433.526632][T11725] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.575216][T11725] 8021q: adding VLAN 0 to HW filter on device team0
[  433.619581][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout
[  433.626086][T11765] Bluetooth: hci8: command 0x0c1a tx timeout
[  433.637944][T11258] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.645130][T11258] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.689717][T11258] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.696903][T11258] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.712285][ T5840] Bluetooth: hci11: command 0x0419 tx timeout
[  433.721197][T11765] Bluetooth: hci10: command 0x0c1a tx timeout
[  433.729775][ T5839] Bluetooth: hci9: command 0x0c1a tx timeout
[  433.776268][ T5839] Bluetooth: hci12: command 0x040f tx timeout
[  433.856799][ T5839] Bluetooth: hci13: command tx timeout
[  434.399782][T11725] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.558113][T11725] veth0_vlan: entered promiscuous mode
[  434.589488][T11725] veth1_vlan: entered promiscuous mode
[  434.686570][T11725] veth0_macvtap: entered promiscuous mode
[  434.732863][T11725] veth1_macvtap: entered promiscuous mode
[  434.790508][T11725] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.863534][T11725] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.908090][T11258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.949185][T11258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.995479][T11258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.090994][T11258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.301326][T10756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.351352][T10756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.472415][T10861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.509038][T10861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.684903][ T5839] Bluetooth: hci8: command 0x0c1a tx timeout
[  435.774251][ T5840] Bluetooth: hci11: command 0x0419 tx timeout
[  435.780452][ T5839] Bluetooth: hci9: command 0x0c1a tx timeout
[  435.786921][T11765] Bluetooth: hci10: command 0x0c1a tx timeout
[  435.844255][ T5839] Bluetooth: hci12: command 0x040f tx timeout
[  435.928425][ T5839] Bluetooth: hci13: command tx timeout
[  436.634222][T11862] zswap: compressor  not available
[  437.639231][T11765] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  437.661178][T11765] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  437.681951][T11765] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  437.693828][T11765] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  437.701842][T11765] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  437.789019][T11886] could not allocate digest TFM handle 
[  437.844484][T11765] Bluetooth: hci11: command 0x0419 tx timeout
[  437.917045][T11765] Bluetooth: hci12: command 0x040f tx timeout
[  437.992893][T11765] Bluetooth: hci13: command tx timeout
[  438.660820][T11893] chnl_net:caif_netlink_parms(): no params data found
[  438.993775][T10520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.163386][T10520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.217713][T11893] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.235142][T11893] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.253742][T11893] bridge_slave_0: entered allmulticast mode
[  439.277212][T11893] bridge_slave_0: entered promiscuous mode
[  439.364162][T10520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.406164][ T5839] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  439.419283][ T5839] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  439.429275][ T5839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  439.439896][ T5839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  439.448190][ T5839] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  439.480802][T11893] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.496174][T11893] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.511160][T11893] bridge_slave_1: entered allmulticast mode
[  439.519793][T11893] bridge_slave_1: entered promiscuous mode
[  439.564032][T10520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.723796][T11893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.744412][T11765] Bluetooth: hci14: command tx timeout
[  439.775511][T11893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.982860][T11765] Bluetooth: hci12: command 0x040f tx timeout
[  440.045352][T11893] team0: Port device team_slave_0 added
[  440.086008][T11893] team0: Port device team_slave_1 added
[  440.208993][T10520] bridge_slave_1: left allmulticast mode
[  440.225240][T10520] bridge_slave_1: left promiscuous mode
[  440.237787][T10520] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.279260][T10520] bridge_slave_0: left allmulticast mode
[  440.298484][T10520] bridge_slave_0: left promiscuous mode
[  440.335899][T10520] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.887758][T10520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  440.901784][T10520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  440.922505][T10520] bond0 (unregistering): Released all slaves
[  440.945578][T11893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.980400][T11893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.072760][T11938] cifs: Unknown parameter 'no+ 1����`��r�sFn)��a�H��ā��h`����9k�A}���1\D@��.��Z�Cg^�'
[  441.084123][T11893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.095900][T11938] CIFS mount error: No usable UNC path provided in device string!
[  441.095900][T11938] 
[  441.144727][T11938] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  441.212559][T11893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.228565][T11893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.263982][T11893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.497044][T11765] Bluetooth: hci13: command tx timeout
[  441.553138][T10520] hsr_slave_0: left promiscuous mode
[  441.572231][T10520] hsr_slave_1: left promiscuous mode
[  441.595501][T10520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.616687][T10520] batman_adv: batadv0: Removing interface: batadv_slave_0
[  441.645635][T10520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.670139][T10520] batman_adv: batadv0: Removing interface: batadv_slave_1
[  441.781057][T10520] veth1_macvtap: left promiscuous mode
[  441.791039][T10520] veth0_macvtap: left promiscuous mode
[  441.800932][T10520] veth1_vlan: left promiscuous mode
[  441.809886][T10520] veth0_vlan: left promiscuous mode
[  441.815777][T11765] Bluetooth: hci14: command tx timeout
[  442.476770][T10520] team0 (unregistering): Port device team_slave_1 removed
[  442.526072][T10520] team0 (unregistering): Port device team_slave_0 removed
[  443.110581][T11893] hsr_slave_0: entered promiscuous mode
[  443.130646][T11893] hsr_slave_1: entered promiscuous mode
[  443.148139][T11893] debugfs: 'hsr0' already exists in 'hsr'
[  443.153888][T11893] Cannot create hsr debugfs directory
[  443.521733][T11922] chnl_net:caif_netlink_parms(): no params data found
[  443.567994][T11765] Bluetooth: hci13: command tx timeout
[  443.655846][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  443.662168][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  443.882445][T11765] Bluetooth: hci14: command tx timeout
[  444.395281][T11893] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.448567][T11922] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.474830][T11922] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.526478][T11922] bridge_slave_0: entered allmulticast mode
[  444.537742][T11922] bridge_slave_0: entered promiscuous mode
[  444.644260][T11893] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.705475][T11922] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.727837][T11922] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.741110][T11922] bridge_slave_1: entered allmulticast mode
[  444.756465][T11922] bridge_slave_1: entered promiscuous mode
[  444.842953][T11893] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.949915][T11893] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.043358][T11983] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input114
[  445.057529][T11922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.132346][T11922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.320686][T11986] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input115
[  445.411126][T11922] team0: Port device team_slave_0 added
[  445.492947][T11922] team0: Port device team_slave_1 added
[  445.639236][T11765] Bluetooth: hci13: command tx timeout
[  445.751052][T11922] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.798019][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.936162][T11922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.955670][T11765] Bluetooth: hci14: command tx timeout
[  446.001395][T11893] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  446.073486][T11893] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  446.131277][T11922] batman_adv: batadv0: Adding interface: batadv_slave_1
[  446.138244][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  446.294881][T11922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.361126][T11893] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  446.403272][T11893] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  446.751377][T11922] hsr_slave_0: entered promiscuous mode
[  446.770228][T11922] hsr_slave_1: entered promiscuous mode
[  446.789871][T11922] debugfs: 'hsr0' already exists in 'hsr'
[  446.795645][T11922] Cannot create hsr debugfs directory
[  447.325022][T11893] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.531020][T11893] 8021q: adding VLAN 0 to HW filter on device team0
[  447.696670][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.703847][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state
[  447.712725][T11765] Bluetooth: hci13: command tx timeout
[  447.949295][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.956475][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.849944][T11922] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  448.931350][T11922] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  449.029019][T11922] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  449.078638][T11922] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  449.237341][T11893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  449.500522][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'.
[  449.591293][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'.
[  449.608512][T11922] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.719316][T12079] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  449.734115][T11922] 8021q: adding VLAN 0 to HW filter on device team0
[  449.835098][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.842290][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.937326][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.944492][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  450.276754][T12100] zero sized request
[  450.379626][T12100] zero sized request
[  450.420953][T12100] zero sized request
[  450.461002][T12100] zero sized request
[  450.486818][T12100] zero sized request
[  450.521389][T11893] veth0_vlan: entered promiscuous mode
[  450.550875][T12100] zero sized request
[  450.560949][T12100] zero sized request
[  450.611568][T11893] veth1_vlan: entered promiscuous mode
[  450.618316][T12100] zero sized request
[  450.628608][T12100] zero sized request
[  450.657605][T12100] zero sized request
[  450.671982][T12100] zero sized request
[  450.697722][T12100] zero sized request
[  450.738733][T12100] zero sized request
[  450.768173][T12100] zero sized request
[  450.778171][T12100] zero sized request
[  450.811322][T12100] zero sized request
[  450.827738][T12100] zero sized request
[  450.847743][T12100] zero sized request
[  450.859613][T12100] zero sized request
[  450.879326][T12100] zero sized request
[  450.917663][T12100] zero sized request
[  450.936958][T12100] zero sized request
[  450.966029][T12100] zero sized request
[  450.976677][T11893] veth0_macvtap: entered promiscuous mode
[  450.985519][T12100] zero sized request
[  450.997516][T11922] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.026767][T12100] zero sized request
[  451.036785][T12100] zero sized request
[  451.053226][T11893] veth1_macvtap: entered promiscuous mode
[  451.077501][T12100] zero sized request
[  451.087541][T12100] zero sized request
[  451.396549][T11893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.531933][T11893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.550564][T12193] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1249'.
[  451.606313][T12190] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1249'.
[  451.646613][T11922] veth0_vlan: entered promiscuous mode
[  451.675101][T10861] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.728298][T10861] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.779569][T10861] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.876598][T10861] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.936399][T11922] veth1_vlan: entered promiscuous mode
[  452.005818][T12209] [U] ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
[  452.216544][T11922] veth0_macvtap: entered promiscuous mode
[  452.253008][T11922] veth1_macvtap: entered promiscuous mode
[  452.314623][T11922] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.386519][T11922] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.445116][   T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.490666][   T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.532713][   T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.601522][   T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.659134][T12200] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  452.721217][T12200] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  452.763613][T12200] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  452.792097][T12200] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  452.843468][T12200] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  452.874897][T12200] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  452.921722][T12200] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  452.956982][T12200] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  452.966875][T12200] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  452.993859][T12200] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  453.022538][T12200] Bluetooth: hci10: Opcode 0x0c1a failed: -4
[  453.043671][T12200] Bluetooth: hci11: Opcode 0x0c1a failed: -4
[  453.060983][T12200] Bluetooth: hci12: Opcode 0x0c1a failed: -4
[  453.078234][T12200] Bluetooth: hci14: Opcode 0x0c1a failed: -4
[  453.096522][T12200] Bluetooth: hci14: Opcode 0x0406 failed: -4
[  453.132561][T12200] Bluetooth: hci14: Opcode 0x0406 failed: -4
[  453.160326][T12200] Bluetooth: hci13: Opcode 0x0c1a failed: -4
[  453.179282][T12200] Bluetooth: hci13: Opcode 0x0406 failed: -4
[  453.218799][T12200] Bluetooth: hci13: Opcode 0x0406 failed: -4
[  453.410359][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.463607][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.619392][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.693883][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.706597][T12242] binder: 12234:12242 ioctl c018620c 0 returned -22
[  453.827575][ T3425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.941686][T10805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.949516][T10805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.970435][ T3425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.228543][T11765] Bluetooth: hci0: command 0x0c1a tx timeout
[  454.420172][T12252] netlink: 'syz.6.1215': attribute type 14 has an invalid length.
[  454.505325][T12252] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1215'.
[  454.707565][T11765] Bluetooth: hci1: command 0x0c1a tx timeout
[  454.787147][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout
[  454.793222][T11765] Bluetooth: hci3: command 0x0c1a tx timeout
[  454.865037][ T5839] Bluetooth: hci4: command 0x2016 tx timeout
[  454.873470][T11765] Bluetooth: hci5: command 0x0c1a tx timeout
[  454.945647][T11765] Bluetooth: hci6: command 0x0c1a tx timeout
[  455.025693][T11765] Bluetooth: hci10: command 0x0c1a tx timeout
[  455.031820][T11765] Bluetooth: hci8: command 0x0c1a tx timeout
[  455.038556][ T5839] Bluetooth: hci9: command 0x0c1a tx timeout
[  455.044685][ T5840] Bluetooth: hci7: command 0x0c1a tx timeout
[  455.124460][ T5839] Bluetooth: hci11: command 0x0419 tx timeout
[  455.130623][T11765] Bluetooth: hci14: command 0x0c1a tx timeout
[  455.136879][ T5840] Bluetooth: hci12: command 0x040f tx timeout
[  455.183338][T11765] Bluetooth: hci13: command 0x0c1a tx timeout
[  455.265800][T12277] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116
[  455.516468][T12279] zswap: compressor  not available
[  455.548462][T12292] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  456.022346][T12305] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  456.117894][T12285] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input117
[  457.173712][T11765] Bluetooth: hci14: command 0x0c1a tx timeout
[  457.249560][T12366] program syz.6.1268 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  457.259503][T11765] Bluetooth: hci13: command 0x0c1a tx timeout
[  457.431284][   T30] audit: type=1800 audit(1766642824.079:40): pid=12371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1267" name="features" dev="configfs" ino=52726 res=0 errno=0
[  458.474768][T11765] Bluetooth: hci13: SCO packet for unknown connection handle 0
[  458.504552][T12389] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1274'.
[  458.565451][T12385] hub 1-0:1.0: USB hub found
[  458.620636][T12385] hub 1-0:1.0: 1 port detected
[  458.813441][T12386] Process accounting resumed
[  459.079388][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'.
[  459.243298][T11765] Bluetooth: hci14: command 0x0c1a tx timeout
[  459.326996][T11765] Bluetooth: hci13: command 0x0c1a tx timeout
[  462.240852][T12451] [U] ^@^@
[  463.315434][T12482] ptrace attach of "./syz-executor exec"[11893] was attempted by ""[12482]
[  463.375724][T12487] FAULT_INJECTION: forcing a failure.
[  463.375724][T12487] name failslab, interval 1, probability 0, space 0, times 0
[  463.461820][T12487] CPU: 0 UID: 0 PID: 12487 Comm: syz.0.1296 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  463.461859][T12487] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  463.461866][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  463.461875][T12487] Call Trace:
[  463.461881][T12487]  <TASK>
[  463.461887][T12487]  dump_stack_lvl+0x16c/0x1f0
[  463.461915][T12487]  should_fail_ex+0x512/0x640
[  463.461932][T12487]  ? fs_reclaim_acquire+0xae/0x150
[  463.461957][T12487]  should_failslab+0xc2/0x120
[  463.461981][T12487]  __kmalloc_noprof+0xeb/0x910
[  463.461997][T12487]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  463.462021][T12487]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  463.462040][T12487]  tomoyo_realpath_from_path+0xc2/0x6e0
[  463.462065][T12487]  tomoyo_check_open_permission+0x2ab/0x3c0
[  463.462083][T12487]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  463.462118][T12487]  ? lock_acquire+0x179/0x330
[  463.462132][T12487]  ? find_held_lock+0x2b/0x80
[  463.462152][T12487]  ? mnt_get_write_access+0x52/0x2f0
[  463.462170][T12487]  tomoyo_file_open+0x6b/0x90
[  463.462193][T12487]  security_file_open+0x84/0x1e0
[  463.462213][T12487]  do_dentry_open+0x597/0x1590
[  463.462236][T12487]  ? security_inode_permission+0xbf/0x260
[  463.462256][T12487]  vfs_open+0x82/0x3f0
[  463.462274][T12487]  path_openat+0x2078/0x3140
[  463.462302][T12487]  ? __pfx_path_openat+0x10/0x10
[  463.462330][T12487]  do_filp_open+0x20b/0x470
[  463.462352][T12487]  ? __pfx_do_filp_open+0x10/0x10
[  463.462388][T12487]  ? alloc_fd+0x471/0x7d0
[  463.462414][T12487]  do_sys_openat2+0x121/0x290
[  463.462430][T12487]  ? __pfx_do_sys_openat2+0x10/0x10
[  463.462454][T12487]  __x64_sys_openat+0x174/0x210
[  463.462470][T12487]  ? __pfx___x64_sys_openat+0x10/0x10
[  463.462494][T12487]  do_syscall_64+0xcd/0xf80
[  463.462518][T12487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.462533][T12487] RIP: 0033:0x7f64f078f7c9
[  463.462546][T12487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  463.462561][T12487] RSP: 002b:00007f64f15b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  463.462575][T12487] RAX: ffffffffffffffda RBX: 00007f64f09e5fa0 RCX: 00007f64f078f7c9
[  463.462585][T12487] RDX: 000000000010b142 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  463.462594][T12487] RBP: 00007f64f0813f91 R08: 0000000000000000 R09: 0000000000000000
[  463.462603][T12487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  463.462611][T12487] R13: 00007f64f09e6038 R14: 00007f64f09e5fa0 R15: 00007fff15f45148
[  463.462632][T12487]  </TASK>
[  463.462639][T12487] ERROR: Out of memory at tomoyo_realpath_from_path.
[  464.157871][T12499] futex_wake_op: syz.6.1299 tries to shift op by -2048; fix this program
[  464.207994][T12499] futex_wake_op: syz.6.1299 tries to shift op by -2048; fix this program
[  464.266764][T12504] 0x000000000001-0x000000020000 : ""
[  464.411557][T12504] ftl_cs: FTL header corrupt!
[  465.030031][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1301'.
[  465.113850][T12505] KVM: debugfs: duplicate directory 12505-3
[  465.328528][T12521] zram0: detected capacity change from 0 to 8
[  466.227358][T12533] kAFS: Invalid Command on /proc/fs/afs/cells file
[  467.078459][T12555] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input120

syzkaller
syzkaller login: [  468.999633][T12583] FAULT_INJECTION: forcing a failure.
[  468.999633][T12583] name failslab, interval 1, probability 0, space 0, times 0
[  469.069843][T12583] CPU: 0 UID: 0 PID: 12583 Comm: syz.3.1315 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  469.069873][T12583] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  469.069887][T12583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  469.069896][T12583] Call Trace:
[  469.069902][T12583]  <TASK>
[  469.069909][T12583]  dump_stack_lvl+0x16c/0x1f0
[  469.069938][T12583]  should_fail_ex+0x512/0x640
[  469.069955][T12583]  ? __kmalloc_node_noprof+0xcd/0x930
[  469.069978][T12583]  should_failslab+0xc2/0x120
[  469.070001][T12583]  __kmalloc_node_noprof+0xee/0x930
[  469.070022][T12583]  ? user_buffer_init+0x4d0/0x750
[  469.070045][T12583]  ? user_buffer_init+0x4d0/0x750
[  469.070062][T12583]  user_buffer_init+0x4d0/0x750
[  469.070084][T12583]  tracing_mark_open+0x19d/0x220
[  469.070106][T12583]  do_dentry_open+0x748/0x1590
[  469.070127][T12583]  ? __pfx_tracing_mark_open+0x10/0x10
[  469.070153][T12583]  vfs_open+0x82/0x3f0
[  469.070171][T12583]  path_openat+0x2078/0x3140
[  469.070199][T12583]  ? __pfx_path_openat+0x10/0x10
[  469.070228][T12583]  do_filp_open+0x20b/0x470
[  469.070250][T12583]  ? __pfx_do_filp_open+0x10/0x10
[  469.070285][T12583]  ? alloc_fd+0x471/0x7d0
[  469.070311][T12583]  do_sys_openat2+0x121/0x290
[  469.070332][T12583]  ? __pfx_do_sys_openat2+0x10/0x10
[  469.070357][T12583]  __x64_sys_openat+0x174/0x210
[  469.070375][T12583]  ? __pfx___x64_sys_openat+0x10/0x10
[  469.070399][T12583]  do_syscall_64+0xcd/0xf80
[  469.070424][T12583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.070440][T12583] RIP: 0033:0x7eff5e98f7c9
[  469.070453][T12583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.070467][T12583] RSP: 002b:00007eff5f7ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  469.070481][T12583] RAX: ffffffffffffffda RBX: 00007eff5ebe5fa0 RCX: 00007eff5e98f7c9
[  469.070491][T12583] RDX: 0000000000000201 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  469.070500][T12583] RBP: 00007eff5ea13f91 R08: 0000000000000000 R09: 0000000000000000
[  469.070509][T12583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  469.070517][T12583] R13: 00007eff5ebe6038 R14: 00007eff5ebe5fa0 R15: 00007ffc2b297ea8
[  469.070538][T12583]  </TASK>
[  469.465774][T12589] random: crng reseeded on system resumption
[  470.353023][T12605] zswap: compressor  not available
[  471.437496][T12628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1323'.
[  471.495376][T12628] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.629105][T12628] bridge_slave_1 (unregistering): left allmulticast mode
[  471.646670][T12628] bridge_slave_1 (unregistering): left promiscuous mode
[  471.656813][T12628] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.280774][T12657] program syz.3.1330 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  473.696424][T12670] ERROR: Out of memory at tomoyo_memory_ok.
[  474.261909][T12685] __vm_enough_memory: pid: 12685, comm: syz.0.1337, bytes: 4398046511104 not enough memory for the allocation
[  475.300732][T12703] FAULT_INJECTION: forcing a failure.
[  475.300732][T12703] name failslab, interval 1, probability 0, space 0, times 0
[  475.361998][T12703] CPU: 0 UID: 0 PID: 12703 Comm: syz.3.1342 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  475.362028][T12703] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  475.362035][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  475.362045][T12703] Call Trace:
[  475.362050][T12703]  <TASK>
[  475.362061][T12703]  dump_stack_lvl+0x16c/0x1f0
[  475.362090][T12703]  should_fail_ex+0x512/0x640
[  475.362108][T12703]  ? kmem_cache_alloc_noprof+0x62/0x770
[  475.362128][T12703]  should_failslab+0xc2/0x120
[  475.362151][T12703]  kmem_cache_alloc_noprof+0x83/0x770
[  475.362169][T12703]  ? prepare_creds+0x2c/0x940
[  475.362190][T12703]  ? prepare_creds+0x2c/0x940
[  475.362205][T12703]  prepare_creds+0x2c/0x940
[  475.362223][T12703]  __sys_setuid+0x9a/0x440
[  475.362243][T12703]  do_syscall_64+0xcd/0xf80
[  475.362266][T12703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.362282][T12703] RIP: 0033:0x7eff5e98f7c9
[  475.362295][T12703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  475.362309][T12703] RSP: 002b:00007eff5f7ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069
[  475.362323][T12703] RAX: ffffffffffffffda RBX: 00007eff5ebe5fa0 RCX: 00007eff5e98f7c9
[  475.362332][T12703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e
[  475.362341][T12703] RBP: 00007eff5ea13f91 R08: 0000000000000000 R09: 0000000000000000
[  475.362349][T12703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  475.362358][T12703] R13: 00007eff5ebe6038 R14: 00007eff5ebe5fa0 R15: 00007ffc2b297ea8
[  475.362377][T12703]  </TASK>
[  477.448822][T12732] zswap: compressor  not available
[  478.275644][ T5840] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  478.287617][ T5840] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  478.297603][ T5840] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  478.318030][ T5840] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  478.326237][ T5840] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  478.832342][T12753] zswap: compressor  not available
[  479.293472][T12749] chnl_net:caif_netlink_parms(): no params data found
[  479.888026][T12749] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.926749][T12749] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.983671][T12749] bridge_slave_0: entered allmulticast mode
[  480.025343][T12749] bridge_slave_0: entered promiscuous mode
[  480.117366][T12749] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.150707][T12749] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.167325][T12772] FAULT_INJECTION: forcing a failure.
[  480.167325][T12772] name failslab, interval 1, probability 0, space 0, times 0
[  480.193310][T12749] bridge_slave_1: entered allmulticast mode
[  480.216247][T12749] bridge_slave_1: entered promiscuous mode
[  480.234514][T12772] CPU: 0 UID: 0 PID: 12772 Comm: syz.3.1354 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  480.234546][T12772] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  480.234553][T12772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  480.234562][T12772] Call Trace:
[  480.234567][T12772]  <TASK>
[  480.234573][T12772]  dump_stack_lvl+0x16c/0x1f0
[  480.234601][T12772]  should_fail_ex+0x512/0x640
[  480.234619][T12772]  ? kmem_cache_alloc_noprof+0x62/0x770
[  480.234640][T12772]  should_failslab+0xc2/0x120
[  480.234663][T12772]  kmem_cache_alloc_noprof+0x83/0x770
[  480.234682][T12772]  ? getname_flags.part.0+0x4c/0x550
[  480.234701][T12772]  ? getname_flags.part.0+0x4c/0x550
[  480.234716][T12772]  getname_flags.part.0+0x4c/0x550
[  480.234734][T12772]  getname_flags+0x93/0xf0
[  480.234753][T12772]  do_sys_openat2+0xb9/0x290
[  480.234770][T12772]  ? __pfx_do_sys_openat2+0x10/0x10
[  480.234786][T12772]  ? find_held_lock+0x2b/0x80
[  480.234811][T12772]  __x64_sys_openat+0x174/0x210
[  480.234828][T12772]  ? __pfx___x64_sys_openat+0x10/0x10
[  480.234851][T12772]  do_syscall_64+0xcd/0xf80
[  480.234875][T12772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.234890][T12772] RIP: 0033:0x7eff5e98f7c9
[  480.234902][T12772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  480.234916][T12772] RSP: 002b:00007eff5f7ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  480.234931][T12772] RAX: ffffffffffffffda RBX: 00007eff5ebe5fa0 RCX: 00007eff5e98f7c9
[  480.234941][T12772] RDX: 0000000000020401 RSI: 0000200000001c80 RDI: ffffffffffffff9c
[  480.234950][T12772] RBP: 00007eff5ea13f91 R08: 0000000000000000 R09: 0000000000000000
[  480.234959][T12772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  480.234967][T12772] R13: 00007eff5ebe6038 R14: 00007eff5ebe5fa0 R15: 00007ffc2b297ea8
[  480.234986][T12772]  </TASK>
[  480.731812][ T5840] Bluetooth: hci15: command tx timeout
[  480.809059][T12749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  480.843817][T12749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  480.913064][T12749] team0: Port device team_slave_0 added
[  480.931649][T12749] team0: Port device team_slave_1 added
[  481.009805][T12749] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.016791][T12749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.096782][T12749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  481.121941][T12749] batman_adv: batadv0: Adding interface: batadv_slave_1
[  481.145726][T12749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.236862][T12749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.673436][T12749] hsr_slave_0: entered promiscuous mode
[  481.707460][T12749] hsr_slave_1: entered promiscuous mode
[  481.742100][T12749] debugfs: 'hsr0' already exists in 'hsr'
[  481.758227][T12749] Cannot create hsr debugfs directory
[  481.805935][T12781] __vm_enough_memory: pid: 12781, comm: syz.6.1356, bytes: 8589938688 not enough memory for the allocation
[  482.432495][T12749] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.799799][ T5840] Bluetooth: hci15: command tx timeout
[  482.867364][T12805] FAULT_INJECTION: forcing a failure.
[  482.867364][T12805] name failslab, interval 1, probability 0, space 0, times 0
[  482.921068][T12749] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.943742][T12805] CPU: 0 UID: 0 PID: 12805 Comm: syz.3.1361 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  482.943773][T12805] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  482.943780][T12805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  482.943790][T12805] Call Trace:
[  482.943795][T12805]  <TASK>
[  482.943801][T12805]  dump_stack_lvl+0x16c/0x1f0
[  482.943828][T12805]  should_fail_ex+0x512/0x640
[  482.943846][T12805]  ? __kmalloc_cache_noprof+0x5f/0x800
[  482.943864][T12805]  should_failslab+0xc2/0x120
[  482.943897][T12805]  __kmalloc_cache_noprof+0x80/0x800
[  482.943914][T12805]  ? loop_add+0xb6/0xb70
[  482.943939][T12805]  ? loop_add+0xb6/0xb70
[  482.943959][T12805]  loop_add+0xb6/0xb70
[  482.943982][T12805]  ? __pfx_loop_add+0x10/0x10
[  482.944016][T12805]  ? find_held_lock+0x2b/0x80
[  482.944038][T12805]  loop_control_ioctl+0x13e/0x640
[  482.944061][T12805]  ? __pfx_loop_control_ioctl+0x10/0x10
[  482.944086][T12805]  ? __pfx_loop_control_ioctl+0x10/0x10
[  482.944110][T12805]  __x64_sys_ioctl+0x18e/0x210
[  482.944130][T12805]  do_syscall_64+0xcd/0xf80
[  482.944153][T12805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.944169][T12805] RIP: 0033:0x7eff5e98f7c9
[  482.944182][T12805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  482.944196][T12805] RSP: 002b:00007eff5f7ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  482.944211][T12805] RAX: ffffffffffffffda RBX: 00007eff5ebe5fa0 RCX: 00007eff5e98f7c9
[  482.944221][T12805] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003
[  482.944230][T12805] RBP: 00007eff5ea13f91 R08: 0000000000000000 R09: 0000000000000000
[  482.944238][T12805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  482.944247][T12805] R13: 00007eff5ebe6038 R14: 00007eff5ebe5fa0 R15: 00007ffc2b297ea8
[  482.944266][T12805]  </TASK>
[  483.674389][T12813] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input122
[  484.483087][T12749] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.548687][T12823] zswap: compressor �W���;�0����?u=8�}���L��(�E���ֹ�jj�8+��xp���Ȝ��NkR����uo��o���<�S�H��}�Ed	}���P��8a<v not available
[  484.715195][T12817] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input123
[  484.795061][T12749] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.879012][ T5840] Bluetooth: hci15: command tx timeout
[  485.429618][T12749] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  485.517134][T12749] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  485.574653][T12749] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  485.642544][T12828] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  485.662038][T12749] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  485.894990][T12828] futex_wake_op: syz.0.1365 tries to shift op by -1; fix this program
[  485.962855][T12828] FAULT_INJECTION: forcing a failure.
[  485.962855][T12828] name failslab, interval 1, probability 0, space 0, times 0
[  486.084184][T12828] CPU: 0 UID: 0 PID: 12828 Comm: syz.0.1365 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  486.084218][T12828] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  486.084225][T12828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  486.084234][T12828] Call Trace:
[  486.084240][T12828]  <TASK>
[  486.084246][T12828]  dump_stack_lvl+0x16c/0x1f0
[  486.084274][T12828]  should_fail_ex+0x512/0x640
[  486.084291][T12828]  ? fs_reclaim_acquire+0xae/0x150
[  486.084316][T12828]  should_failslab+0xc2/0x120
[  486.084339][T12828]  __kmalloc_noprof+0xeb/0x910
[  486.084357][T12828]  ? mempool_init_node+0x2f7/0x6e0
[  486.084380][T12828]  ? __pfx_mempool_kmalloc+0x10/0x10
[  486.084397][T12828]  ? mempool_init_node+0x2f7/0x6e0
[  486.084415][T12828]  ? __pfx_mempool_kmalloc+0x10/0x10
[  486.084432][T12828]  mempool_init_node+0x2f7/0x6e0
[  486.084455][T12828]  ? __pfx_mempool_kmalloc+0x10/0x10
[  486.084473][T12828]  ? __pfx_mempool_kfree+0x10/0x10
[  486.084491][T12828]  mempool_init_noprof+0x3a/0x50
[  486.084513][T12828]  do_fanotify_mark+0x2ebd/0x3a30
[  486.084542][T12828]  ? __pfx_do_fanotify_mark+0x10/0x10
[  486.084563][T12828]  ? __x64_sys_futex+0x1e9/0x4c0
[  486.084583][T12828]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x230
[  486.084618][T12828]  ? syscall_user_dispatch+0x78/0x140
[  486.084641][T12828]  __x64_sys_fanotify_mark+0xbd/0x160
[  486.084662][T12828]  ? syscall_trace_enter+0x5e/0x220
[  486.084681][T12828]  do_syscall_64+0xcd/0xf80
[  486.084705][T12828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.084720][T12828] RIP: 0033:0x7f64f078f7c9
[  486.084734][T12828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  486.084748][T12828] RSP: 002b:00007f64f15b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d
[  486.084764][T12828] RAX: ffffffffffffffda RBX: 00007f64f09e5fa0 RCX: 00007f64f078f7c9
[  486.084773][T12828] RDX: 0000000000008009 RSI: 0000000000000105 RDI: 0000000000000000
[  486.084783][T12828] RBP: 00007f64f0813f91 R08: 0000000000000000 R09: 0000000000000000
[  486.084791][T12828] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  486.084800][T12828] R13: 00007f64f09e6038 R14: 00007f64f09e5fa0 R15: 00007fff15f45148
[  486.084820][T12828]  </TASK>
[  486.967926][ T5840] Bluetooth: hci15: command tx timeout
[  487.417714][T12749] 8021q: adding VLAN 0 to HW filter on device bond0
[  487.527921][T12749] 8021q: adding VLAN 0 to HW filter on device team0
[  487.598423][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.605581][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  487.957824][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.965027][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  488.291607][T12857] nbd: must specify at least one socket
[  489.061514][T12749] 8021q: adding VLAN 0 to HW filter on device batadv0
[  489.492953][T10021] NFSD: Failed to start, no listeners configured.
[  489.809040][T12883] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input124
[  489.969614][T12749] veth0_vlan: entered promiscuous mode
[  490.090567][T12749] veth1_vlan: entered promiscuous mode
[  490.284506][T12749] veth0_macvtap: entered promiscuous mode
[  490.296940][T12862] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  490.351431][T12749] veth1_macvtap: entered promiscuous mode
[  490.381458][T12862] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  490.434053][T12749] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.453126][T12862] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  490.504963][T12884] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input125
[  490.523545][T12749] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.542732][T12862] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  490.548769][T12862] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  490.591367][   T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.651336][   T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.670191][T12862] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  490.686540][T12862] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  490.715172][T12862] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  490.752210][   T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.763108][T11765] Bluetooth: hci0: command 0x0c1a tx timeout
[  490.777340][T12862] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  490.805494][T12862] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  490.825112][   T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  490.850003][T12862] Bluetooth: hci10: Opcode 0x0c1a failed: -4
[  490.878109][T12862] Bluetooth: hci11: Opcode 0x0c1a failed: -4
[  490.902119][T12862] Bluetooth: hci12: Opcode 0x0c1a failed: -4
[  490.959046][T12862] Bluetooth: hci14: Opcode 0x0c1a failed: -4
[  491.004384][T12862] Bluetooth: hci13: Opcode 0x0c1a failed: -4
[  491.027550][T12862] Bluetooth: hci15: Opcode 0x0c1a failed: -4
[  491.101765][T12862] Bluetooth: hci15: Opcode 0x0406 failed: -4
[  491.152984][T12862] Bluetooth: hci15: Opcode 0x0406 failed: -4
[  491.376234][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.419186][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.548260][T12592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.582355][T12592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.653875][T12901] FAULT_INJECTION: forcing a failure.
[  491.653875][T12901] name failslab, interval 1, probability 0, space 0, times 0
[  491.708895][T12903] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input126
[  491.764031][T12901] CPU: 0 UID: 0 PID: 12901 Comm: syz.6.1376 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  491.764069][T12901] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  491.764076][T12901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  491.764085][T12901] Call Trace:
[  491.764090][T12901]  <TASK>
[  491.764097][T12901]  dump_stack_lvl+0x16c/0x1f0
[  491.764124][T12901]  should_fail_ex+0x512/0x640
[  491.764142][T12901]  ? __kmalloc_cache_noprof+0x5f/0x800
[  491.764162][T12901]  should_failslab+0xc2/0x120
[  491.764185][T12901]  __kmalloc_cache_noprof+0x80/0x800
[  491.764202][T12901]  ? loop_add+0xb6/0xb70
[  491.764227][T12901]  ? loop_add+0xb6/0xb70
[  491.764247][T12901]  loop_add+0xb6/0xb70
[  491.764270][T12901]  ? __pfx_loop_add+0x10/0x10
[  491.764304][T12901]  ? find_held_lock+0x2b/0x80
[  491.764326][T12901]  loop_control_ioctl+0x13e/0x640
[  491.764349][T12901]  ? __pfx_loop_control_ioctl+0x10/0x10
[  491.764375][T12901]  ? __pfx_loop_control_ioctl+0x10/0x10
[  491.764398][T12901]  __x64_sys_ioctl+0x18e/0x210
[  491.764418][T12901]  do_syscall_64+0xcd/0xf80
[  491.764442][T12901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.764457][T12901] RIP: 0033:0x7f1d30d8f7c9
[  491.764470][T12901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  491.764486][T12901] RSP: 002b:00007f1d31b53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  491.764501][T12901] RAX: ffffffffffffffda RBX: 00007f1d30fe5fa0 RCX: 00007f1d30d8f7c9
[  491.764511][T12901] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003
[  491.764520][T12901] RBP: 00007f1d30e13f91 R08: 0000000000000000 R09: 0000000000000000
[  491.764529][T12901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  491.764537][T12901] R13: 00007f1d30fe6038 R14: 00007f1d30fe5fa0 R15: 00007ffe40c8a268
[  491.764556][T12901]  </TASK>
[  492.086115][T12893] Process accounting paused
[  492.164645][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'.
[  492.431440][T11765] Bluetooth: hci1: command 0x0c1a tx timeout
[  492.511116][T11765] Bluetooth: hci2: command 0x0c1a tx timeout
[  492.570502][T12921] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  492.589451][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout
[  492.595506][T11765] Bluetooth: hci4: command 0x2016 tx timeout
[  492.618232][T12904] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input127
[  492.681937][T11765] Bluetooth: hci5: command 0x0c1a tx timeout
[  492.700086][T12923] dlm: non-version read from control device 51055
[  492.749291][ T5840] Bluetooth: hci6: command 0x0c1a tx timeout
[  492.755426][T11765] Bluetooth: hci7: command 0x0c1a tx timeout
[  492.829222][ T5840] Bluetooth: hci8: command 0x0c1a tx timeout
[  492.835335][T11765] Bluetooth: hci9: command 0x0c1a tx timeout
[  492.908311][ T5154] Bluetooth: hci10: command 0x0c1a tx timeout
[  492.914510][ T5840] Bluetooth: hci11: command 0x0419 tx timeout
[  492.921043][T11765] Bluetooth: hci12: command 0x040f tx timeout
[  492.991885][ T5840] Bluetooth: hci14: command 0x0c1a tx timeout
[  492.998254][T11765] Bluetooth: hci13: command 0x0c1a tx timeout
[  493.074941][ T5840] Bluetooth: hci15: command 0x0c1a tx timeout
[  493.482581][T12939] zram0: detected capacity change from 8 to 0
[  494.504091][T12953] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  494.683556][T12953] futex_wake_op: syz.3.1385 tries to shift op by -1; fix this program
[  494.735608][T12953] FAULT_INJECTION: forcing a failure.
[  494.735608][T12953] name failslab, interval 1, probability 0, space 0, times 0
[  494.801275][T12953] CPU: 0 UID: 0 PID: 12953 Comm: syz.3.1385 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  494.801321][T12953] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  494.801329][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  494.801338][T12953] Call Trace:
[  494.801343][T12953]  <TASK>
[  494.801349][T12953]  dump_stack_lvl+0x16c/0x1f0
[  494.801377][T12953]  should_fail_ex+0x512/0x640
[  494.801394][T12953]  ? fs_reclaim_acquire+0xae/0x150
[  494.801420][T12953]  should_failslab+0xc2/0x120
[  494.801443][T12953]  __kmalloc_noprof+0xeb/0x910
[  494.801460][T12953]  ? mempool_init_node+0x11b/0x6e0
[  494.801479][T12953]  ? mempool_init_node+0x2f7/0x6e0
[  494.801500][T12953]  ? __pfx_mempool_kmalloc+0x10/0x10
[  494.801518][T12953]  ? mempool_init_node+0x2f7/0x6e0
[  494.801536][T12953]  ? __pfx_mempool_kmalloc+0x10/0x10
[  494.801553][T12953]  mempool_init_node+0x2f7/0x6e0
[  494.801576][T12953]  ? __pfx_mempool_kmalloc+0x10/0x10
[  494.801593][T12953]  ? __pfx_mempool_kfree+0x10/0x10
[  494.801611][T12953]  mempool_init_noprof+0x3a/0x50
[  494.801633][T12953]  do_fanotify_mark+0x2ebd/0x3a30
[  494.801662][T12953]  ? __pfx_do_fanotify_mark+0x10/0x10
[  494.801683][T12953]  ? __x64_sys_futex+0x1e9/0x4c0
[  494.801703][T12953]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x230
[  494.801796][T12953]  ? syscall_user_dispatch+0x78/0x140
[  494.801820][T12953]  __x64_sys_fanotify_mark+0xbd/0x160
[  494.801840][T12953]  ? syscall_trace_enter+0x5e/0x220
[  494.801860][T12953]  do_syscall_64+0xcd/0xf80
[  494.801885][T12953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.801900][T12953] RIP: 0033:0x7eff5e98f7c9
[  494.801913][T12953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  494.801927][T12953] RSP: 002b:00007eff5f7ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d
[  494.801942][T12953] RAX: ffffffffffffffda RBX: 00007eff5ebe5fa0 RCX: 00007eff5e98f7c9
[  494.801952][T12953] RDX: 0000000000008009 RSI: 0000000000000105 RDI: 0000000000000000
[  494.801960][T12953] RBP: 00007eff5ea13f91 R08: 0000000000000000 R09: 0000000000000000
[  494.801969][T12953] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  494.801977][T12953] R13: 00007eff5ebe6038 R14: 00007eff5ebe5fa0 R15: 00007ffc2b297ea8
[  494.801997][T12953]  </TASK>
[  495.299681][ T5840] Bluetooth: hci15: command 0x0c1a tx timeout
[  495.427787][T12970] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input128
[  495.751830][   T30] audit: type=1804 audit(1766642862.498:41): pid=12974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1388" name="/newroot/sys/kernel/debug/tracing/set_event" dev="tracefs" ino=1069 res=1 errno=0
[  496.167247][T12973] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input129
[  497.368616][T11765] Bluetooth: hci15: command 0x0c1a tx timeout
[  498.352389][T13015] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  498.543168][T13015] futex_wake_op: syz.6.1397 tries to shift op by -1; fix this program
[  498.649186][T13015] FAULT_INJECTION: forcing a failure.
[  498.649186][T13015] name failslab, interval 1, probability 0, space 0, times 0
[  498.733813][T13015] CPU: 0 UID: 0 PID: 13015 Comm: syz.6.1397 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  498.733844][T13015] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  498.733850][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  498.733860][T13015] Call Trace:
[  498.733866][T13015]  <TASK>
[  498.733872][T13015]  dump_stack_lvl+0x16c/0x1f0
[  498.733900][T13015]  should_fail_ex+0x512/0x640
[  498.733916][T13015]  ? fs_reclaim_acquire+0xae/0x150
[  498.733941][T13015]  should_failslab+0xc2/0x120
[  498.733965][T13015]  __kmalloc_noprof+0xeb/0x910
[  498.733981][T13015]  ? mempool_init_node+0x2f7/0x6e0
[  498.734004][T13015]  ? __pfx_mempool_kmalloc+0x10/0x10
[  498.734022][T13015]  ? mempool_init_node+0x2f7/0x6e0
[  498.734040][T13015]  ? __pfx_mempool_kmalloc+0x10/0x10
[  498.734058][T13015]  mempool_init_node+0x2f7/0x6e0
[  498.734081][T13015]  ? __pfx_mempool_kmalloc+0x10/0x10
[  498.734098][T13015]  ? __pfx_mempool_kfree+0x10/0x10
[  498.734116][T13015]  mempool_init_noprof+0x3a/0x50
[  498.734138][T13015]  do_fanotify_mark+0x2ebd/0x3a30
[  498.734168][T13015]  ? __pfx_do_fanotify_mark+0x10/0x10
[  498.734189][T13015]  ? __x64_sys_futex+0x1e9/0x4c0
[  498.734209][T13015]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x230
[  498.734235][T13015]  ? syscall_user_dispatch+0x78/0x140
[  498.734256][T13015]  __x64_sys_fanotify_mark+0xbd/0x160
[  498.734276][T13015]  ? syscall_trace_enter+0x5e/0x220
[  498.734294][T13015]  do_syscall_64+0xcd/0xf80
[  498.734317][T13015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.734333][T13015] RIP: 0033:0x7f1d30d8f7c9
[  498.734346][T13015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  498.734359][T13015] RSP: 002b:00007f1d31b53038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d
[  498.734374][T13015] RAX: ffffffffffffffda RBX: 00007f1d30fe5fa0 RCX: 00007f1d30d8f7c9
[  498.734383][T13015] RDX: 0000000000008009 RSI: 0000000000000105 RDI: 0000000000000000
[  498.734392][T13015] RBP: 00007f1d30e13f91 R08: 0000000000000000 R09: 0000000000000000
[  498.734401][T13015] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  498.734409][T13015] R13: 00007f1d30fe6038 R14: 00007f1d30fe5fa0 R15: 00007ffe40c8a268
[  498.734428][T13015]  </TASK>
[  499.529342][T13045] zero sized request
[  499.588802][T13044] FAULT_INJECTION: forcing a failure.
[  499.588802][T13044] name failslab, interval 1, probability 0, space 0, times 0
[  499.734709][T13044] CPU: 0 UID: 0 PID: 13044 Comm: syz.4.1409 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  499.734739][T13044] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  499.734746][T13044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  499.734755][T13044] Call Trace:
[  499.734761][T13044]  <TASK>
[  499.734767][T13044]  dump_stack_lvl+0x16c/0x1f0
[  499.734794][T13044]  should_fail_ex+0x512/0x640
[  499.734811][T13044]  ? __kmalloc_cache_noprof+0x5f/0x800
[  499.734831][T13044]  should_failslab+0xc2/0x120
[  499.734853][T13044]  __kmalloc_cache_noprof+0x80/0x800
[  499.734870][T13044]  ? alloc_tty_struct+0x96/0x8c0
[  499.734896][T13044]  ? alloc_tty_struct+0x96/0x8c0
[  499.734917][T13044]  alloc_tty_struct+0x96/0x8c0
[  499.734939][T13044]  ? __pfx_alloc_tty_struct+0x10/0x10
[  499.734967][T13044]  tty_init_dev.part.0+0x1e/0x500
[  499.734990][T13044]  tty_open+0xa4f/0xf90
[  499.735015][T13044]  ? __pfx_tty_open+0x10/0x10
[  499.735037][T13044]  ? chrdev_open+0x10b/0x6a0
[  499.735066][T13044]  ? __pfx_tty_open+0x10/0x10
[  499.735087][T13044]  chrdev_open+0x234/0x6a0
[  499.735109][T13044]  ? __pfx_apparmor_file_open+0x10/0x10
[  499.735125][T13044]  ? __pfx_chrdev_open+0x10/0x10
[  499.735148][T13044]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  499.735175][T13044]  do_dentry_open+0x748/0x1590
[  499.735195][T13044]  ? __pfx_chrdev_open+0x10/0x10
[  499.735229][T13044]  vfs_open+0x82/0x3f0
[  499.735248][T13044]  path_openat+0x2078/0x3140
[  499.735277][T13044]  ? __pfx_path_openat+0x10/0x10
[  499.735306][T13044]  do_filp_open+0x20b/0x470
[  499.735329][T13044]  ? __pfx_do_filp_open+0x10/0x10
[  499.735364][T13044]  ? alloc_fd+0x471/0x7d0
[  499.735391][T13044]  do_sys_openat2+0x121/0x290
[  499.735407][T13044]  ? __pfx_do_sys_openat2+0x10/0x10
[  499.735431][T13044]  __x64_sys_openat+0x174/0x210
[  499.735447][T13044]  ? __pfx___x64_sys_openat+0x10/0x10
[  499.735471][T13044]  do_syscall_64+0xcd/0xf80
[  499.735495][T13044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.735510][T13044] RIP: 0033:0x7f0341b8f7c9
[  499.735523][T13044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  499.735537][T13044] RSP: 002b:00007f033fdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  499.735552][T13044] RAX: ffffffffffffffda RBX: 00007f0341de5fa0 RCX: 00007f0341b8f7c9
[  499.735561][T13044] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  499.735571][T13044] RBP: 00007f0341c13f91 R08: 0000000000000000 R09: 0000000000000000
[  499.735579][T13044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  499.735588][T13044] R13: 00007f0341de6038 R14: 00007f0341de5fa0 R15: 00007ffca1747bd8
[  499.735608][T13044]  </TASK>
[  500.564815][T13054] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input130
[  500.715793][T13062] bond0: no command found in slaves file - use +ifname or -ifname
[  501.082482][T13065] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input131
[  502.072923][T13089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1413'.
[  502.736076][T13102] FAULT_INJECTION: forcing a failure.
[  502.736076][T13102] name failslab, interval 1, probability 0, space 0, times 0
[  502.824419][T13102] CPU: 0 UID: 0 PID: 13102 Comm: syz.3.1417 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  502.824449][T13102] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  502.824456][T13102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  502.824466][T13102] Call Trace:
[  502.824471][T13102]  <TASK>
[  502.824477][T13102]  dump_stack_lvl+0x16c/0x1f0
[  502.824505][T13102]  should_fail_ex+0x512/0x640
[  502.824521][T13102]  ? __kmalloc_cache_noprof+0x5f/0x800
[  502.824540][T13102]  should_failslab+0xc2/0x120
[  502.824563][T13102]  __kmalloc_cache_noprof+0x80/0x800
[  502.824579][T13102]  ? __lock_acquire+0x436/0x2890
[  502.824593][T13102]  ? tty_open+0x13e/0xf90
[  502.824617][T13102]  ? tty_open+0x13e/0xf90
[  502.824636][T13102]  ? __pfx_tty_open+0x10/0x10
[  502.824656][T13102]  tty_open+0x13e/0xf90
[  502.824680][T13102]  ? __pfx_tty_open+0x10/0x10
[  502.824702][T13102]  ? chrdev_open+0x10b/0x6a0
[  502.824726][T13102]  ? __pfx_tty_open+0x10/0x10
[  502.824747][T13102]  chrdev_open+0x234/0x6a0
[  502.824768][T13102]  ? __pfx_apparmor_file_open+0x10/0x10
[  502.824783][T13102]  ? __pfx_chrdev_open+0x10/0x10
[  502.824806][T13102]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  502.824833][T13102]  do_dentry_open+0x748/0x1590
[  502.824853][T13102]  ? __pfx_chrdev_open+0x10/0x10
[  502.824880][T13102]  vfs_open+0x82/0x3f0
[  502.824897][T13102]  path_openat+0x2078/0x3140
[  502.824924][T13102]  ? __pfx_path_openat+0x10/0x10
[  502.824953][T13102]  do_filp_open+0x20b/0x470
[  502.824983][T13102]  ? __pfx_do_filp_open+0x10/0x10
[  502.825018][T13102]  ? alloc_fd+0x471/0x7d0
[  502.825046][T13102]  do_sys_openat2+0x121/0x290
[  502.825062][T13102]  ? __pfx_do_sys_openat2+0x10/0x10
[  502.825086][T13102]  __x64_sys_openat+0x174/0x210
[  502.825103][T13102]  ? __pfx___x64_sys_openat+0x10/0x10
[  502.825127][T13102]  do_syscall_64+0xcd/0xf80
[  502.825151][T13102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.825167][T13102] RIP: 0033:0x7eff5e98f7c9
[  502.825180][T13102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  502.825194][T13102] RSP: 002b:00007eff5f7ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  502.825209][T13102] RAX: ffffffffffffffda RBX: 00007eff5ebe5fa0 RCX: 00007eff5e98f7c9
[  502.825218][T13102] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  502.825228][T13102] RBP: 00007eff5ea13f91 R08: 0000000000000000 R09: 0000000000000000
[  502.825238][T13102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  502.825247][T13102] R13: 00007eff5ebe6038 R14: 00007eff5ebe5fa0 R15: 00007ffc2b297ea8
[  502.825267][T13102]  </TASK>
[  503.221455][T13105] bridge0: port 3(bond0) entered blocking state
[  503.227867][T13105] bridge0: port 3(bond0) entered disabled state
[  503.234681][T13105] bond0: entered allmulticast mode
[  503.239795][T13105] bond_slave_0: entered allmulticast mode
[  503.245656][T13105] bond_slave_1: entered allmulticast mode
[  503.252901][T13105] bond0: entered promiscuous mode
[  503.260251][T13105] bond_slave_0: entered promiscuous mode
[  503.267880][T13105] bond_slave_1: entered promiscuous mode
[  503.277015][T13105] bridge0: port 3(bond0) entered blocking state
[  503.283430][T13105] bridge0: port 3(bond0) entered forwarding state
[  503.520710][T13112] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1419'.
[  503.566159][T13113] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1419'.
[  504.386769][T13110] workqueue: Failed to create a rescuer kthread for wq "nfc13_nci_tx_wq": -EINTR
[  504.784918][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  504.826120][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  505.572345][T13189] batman_adv: Routing algorithm '7' is not supported
[  505.843209][T13191] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input132
[  506.206487][T13198] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input133
[  508.954498][T13250] FAULT_INJECTION: forcing a failure.
[  508.954498][T13250] name failslab, interval 1, probability 0, space 0, times 0
[  509.053091][T13250] CPU: 0 UID: 0 PID: 13250 Comm: syz.6.1444 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  509.053122][T13250] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  509.053128][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  509.053137][T13250] Call Trace:
[  509.053143][T13250]  <TASK>
[  509.053150][T13250]  dump_stack_lvl+0x16c/0x1f0
[  509.053176][T13250]  should_fail_ex+0x512/0x640
[  509.053193][T13250]  ? kmem_cache_alloc_noprof+0x62/0x770
[  509.053214][T13250]  should_failslab+0xc2/0x120
[  509.053236][T13250]  kmem_cache_alloc_noprof+0x83/0x770
[  509.053254][T13250]  ? vm_area_alloc+0x1f/0x160
[  509.053274][T13250]  ? vm_area_alloc+0x1f/0x160
[  509.053287][T13250]  vm_area_alloc+0x1f/0x160
[  509.053301][T13250]  __mmap_region+0x107a/0x2a00
[  509.053328][T13250]  ? __pfx___mmap_region+0x10/0x10
[  509.053362][T13250]  ? rcu_is_watching+0x12/0xc0
[  509.053419][T13250]  ? rcu_is_watching+0x12/0xc0
[  509.053444][T13250]  mmap_region+0x1ab/0x3f0
[  509.053462][T13250]  ? __get_unmapped_area+0x267/0x3f0
[  509.053486][T13250]  do_mmap+0xa3e/0x1210
[  509.053510][T13250]  ? __pfx_do_mmap+0x10/0x10
[  509.053531][T13250]  ? __pfx_down_write_killable+0x10/0x10
[  509.053547][T13250]  ? percpu_counter_add_batch+0xca/0x200
[  509.053564][T13250]  vm_mmap_pgoff+0x29e/0x470
[  509.053588][T13250]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  509.053608][T13250]  ? fd_install+0x223/0x570
[  509.053634][T13250]  ? __x64_sys_futex+0x1e0/0x4c0
[  509.053651][T13250]  ? __x64_sys_futex+0x1e9/0x4c0
[  509.053670][T13250]  ksys_mmap_pgoff+0x7d/0x5c0
[  509.053690][T13250]  ? xfd_validate_state+0x61/0x180
[  509.053703][T13250]  ? __pfx_do_writev+0x10/0x10
[  509.053724][T13250]  __x64_sys_mmap+0x125/0x190
[  509.053741][T13250]  do_syscall_64+0xcd/0xf80
[  509.053765][T13250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.053779][T13250] RIP: 0033:0x7f1d30d8f7c9
[  509.053792][T13250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.053807][T13250] RSP: 002b:00007f1d2eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  509.053822][T13250] RAX: ffffffffffffffda RBX: 00007f1d30fe6090 RCX: 00007f1d30d8f7c9
[  509.053832][T13250] RDX: 0000000000000006 RSI: 0000000004020009 RDI: 0000000000000000
[  509.053841][T13250] RBP: 00007f1d30e13f91 R08: 0000000000000401 R09: 0000000000008000
[  509.053850][T13250] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  509.053858][T13250] R13: 00007f1d30fe6128 R14: 00007f1d30fe6090 R15: 00007ffe40c8a268
[  509.053878][T13250]  </TASK>
[  509.326510][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'.
[  509.403300][T13255] FAULT_INJECTION: forcing a failure.
[  509.403300][T13255] name failslab, interval 1, probability 0, space 0, times 0
[  509.415995][T13255] CPU: 0 UID: 0 PID: 13255 Comm: syz.3.1445 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  509.416024][T13255] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  509.416031][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  509.416041][T13255] Call Trace:
[  509.416046][T13255]  <TASK>
[  509.416052][T13255]  dump_stack_lvl+0x16c/0x1f0
[  509.416079][T13255]  should_fail_ex+0x512/0x640
[  509.416100][T13255]  ? fs_reclaim_acquire+0xae/0x150
[  509.416126][T13255]  should_failslab+0xc2/0x120
[  509.416148][T13255]  __kmalloc_noprof+0xeb/0x910
[  509.416166][T13255]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  509.416189][T13255]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  509.416208][T13255]  tomoyo_realpath_from_path+0xc2/0x6e0
[  509.416233][T13255]  tomoyo_check_open_permission+0x2ab/0x3c0
[  509.416251][T13255]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  509.416288][T13255]  ? do_raw_spin_lock+0x12c/0x2b0
[  509.416310][T13255]  tomoyo_file_open+0x6b/0x90
[  509.416339][T13255]  security_file_open+0x84/0x1e0
[  509.416359][T13255]  do_dentry_open+0x597/0x1590
[  509.416383][T13255]  ? security_inode_permission+0xbf/0x260
[  509.416404][T13255]  vfs_open+0x82/0x3f0
[  509.416422][T13255]  path_openat+0x2078/0x3140
[  509.416450][T13255]  ? __pfx_path_openat+0x10/0x10
[  509.416479][T13255]  do_filp_open+0x20b/0x470
[  509.416501][T13255]  ? __pfx_do_filp_open+0x10/0x10
[  509.416536][T13255]  ? alloc_fd+0x471/0x7d0
[  509.416562][T13255]  do_sys_openat2+0x121/0x290
[  509.416587][T13255]  ? __pfx_do_sys_openat2+0x10/0x10
[  509.416612][T13255]  __x64_sys_openat+0x174/0x210
[  509.416629][T13255]  ? __pfx___x64_sys_openat+0x10/0x10
[  509.416655][T13255]  do_syscall_64+0xcd/0xf80
[  509.416678][T13255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.416694][T13255] RIP: 0033:0x7eff5e98f7c9
[  509.416711][T13255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.416726][T13255] RSP: 002b:00007eff5f78b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  509.416740][T13255] RAX: ffffffffffffffda RBX: 00007eff5ebe6090 RCX: 00007eff5e98f7c9
[  509.416750][T13255] RDX: 0000000000000100 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  509.416760][T13255] RBP: 00007eff5ea13f91 R08: 0000000000000000 R09: 0000000000000000
[  509.416769][T13255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  509.416778][T13255] R13: 00007eff5ebe6128 R14: 00007eff5ebe6090 R15: 00007ffc2b297ea8
[  509.416799][T13255]  </TASK>
[  509.416829][T13255] ERROR: Out of memory at tomoyo_realpath_from_path.
[  509.898771][   T31] INFO: task syz-executor:5834 blocked for more than 184 seconds.
[  509.929934][   T31]       Tainted: G     U    I  L      syzkaller #0
[  509.966158][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  509.998130][   T31] task:syz-executor    state:D stack:22552 pid:5834  tgid:5834  ppid:1      task_flags:0x400140 flags:0x00080002
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  510.066717][   T31] Call Trace:
[  510.072618][   T31]  <TASK>
[  510.086320][   T31]  ? __schedule+0x10b9/0x6150
[  510.105493][   T31]  __schedule+0x1139/0x6150
[  510.124407][   T31]  ? __lock_acquire+0x436/0x2890
[  510.139750][   T31]  ? __pfx___schedule+0x10/0x10
[  510.162916][   T31]  ? find_held_lock+0x2b/0x80
[  510.178995][   T31]  ? schedule+0x2d7/0x3a0
[  510.207075][   T31]  schedule+0xe7/0x3a0
[  510.211184][   T31]  schedule_preempt_disabled+0x13/0x30
[  510.255766][   T31]  __mutex_lock+0xc69/0x1ca0
[  510.304297][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  510.340269][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  510.372552][   T31]  ? net_generic+0xea/0x2a0
[  510.410413][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  510.415763][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  510.466449][   T31]  nfsd_umount+0x3b/0x60
[  510.470739][   T31]  deactivate_locked_super+0xc1/0x1a0
[  510.534733][   T31]  deactivate_super+0xde/0x100
[  510.555281][   T31]  cleanup_mnt+0x225/0x450
[  510.559740][   T31]  task_work_run+0x150/0x240
[  510.564349][   T31]  ? __pfx_task_work_run+0x10/0x10
[  510.634982][   T31]  exit_to_user_mode_loop+0xfb/0x540
[  510.640316][   T31]  do_syscall_64+0x4ee/0xf80
[  510.691956][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.737792][   T31] RIP: 0033:0x7f6044f90af7
[  510.742239][   T31] RSP: 002b:00007ffe2f417328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  510.812865][   T31] RAX: 0000000000000000 RBX: 00007f6045013d7d RCX: 00007f6044f90af7
[  510.858599][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2f418470
[  510.893331][   T31] RBP: 00007ffe2f41845c R08: 0000000000000000 R09: 0000000000000000
[  510.924470][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2f418470
[  510.932496][   T31] R13: 00007f6045013d7d R14: 000000000004b7b3 R15: 00007ffe2f4184b0
[  510.963376][   T31]  </TASK>
[  511.083617][   T31] INFO: task syz-executor:5842 blocked for more than 185 seconds.
[  511.097785][   T31]       Tainted: G     U    I  L      syzkaller #0
[  511.108860][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  511.121450][   T31] task:syz-executor    state:D stack:23640 pid:5842  tgid:5842  ppid:1      task_flags:0x400140 flags:0x00080002
[  511.141618][   T31] Call Trace:
[  511.145683][   T31]  <TASK>
[  511.148619][   T31]  ? __schedule+0x10b9/0x6150
[  511.156769][   T31]  __schedule+0x1139/0x6150
[  511.161323][   T31]  ? __lock_acquire+0x436/0x2890
[  511.168841][   T31]  ? __pfx___schedule+0x10/0x10
[  511.175368][   T31]  ? find_held_lock+0x2b/0x80
[  511.180056][   T31]  ? schedule+0x2d7/0x3a0
[  511.184981][   T31]  schedule+0xe7/0x3a0
[  511.189059][   T31]  schedule_preempt_disabled+0x13/0x30
[  511.195585][   T31]  __mutex_lock+0xc69/0x1ca0
[  511.200200][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  511.215585][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  511.224870][   T31]  ? net_generic+0xea/0x2a0
[  511.229411][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  511.235403][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  511.240545][   T31]  nfsd_umount+0x3b/0x60
[  511.245106][   T31]  deactivate_locked_super+0xc1/0x1a0
[  511.250484][   T31]  deactivate_super+0xde/0x100
[  511.256828][   T31]  cleanup_mnt+0x225/0x450
[  511.261261][   T31]  task_work_run+0x150/0x240
[  511.268878][   T31]  ? __pfx_task_work_run+0x10/0x10
[  511.276253][   T31]  exit_to_user_mode_loop+0xfb/0x540
[  511.283907][   T31]  do_syscall_64+0x4ee/0xf80
[  511.288516][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.296617][   T31] RIP: 0033:0x7f7ca4b90af7
[  511.301038][   T31] RSP: 002b:00007ffec029ac98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  511.313958][   T31] RAX: 0000000000000000 RBX: 00007f7ca4c13d7d RCX: 00007f7ca4b90af7
[  511.330720][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec029ad50
[  511.339353][   T31] RBP: 00007ffec029ad50 R08: 0000000000000000 R09: 0000000000000000
[  511.347773][   T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec029be40
[  511.356790][   T31] R13: 00007f7ca4c13d7d R14: 000000000004b0ac R15: 00007ffec029cf10
[  511.366130][   T31]  </TASK>
[  511.403239][   T31] INFO: task syz-executor:10230 blocked for more than 144 seconds.
[  511.430737][   T31]       Tainted: G     U    I  L      syzkaller #0
[  511.437264][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  511.461210][   T31] task:syz-executor    state:D stack:24056 pid:10230 tgid:10230 ppid:1      task_flags:0x400140 flags:0x00080002
[  511.492440][   T31] Call Trace:
[  511.495745][   T31]  <TASK>
[  511.498691][   T31]  ? __schedule+0x10b9/0x6150
[  511.530998][   T31]  __schedule+0x1139/0x6150
[  511.535551][   T31]  ? __lock_acquire+0x436/0x2890
[  511.556277][   T31]  ? __pfx___schedule+0x10/0x10
[  511.570605][   T31]  ? find_held_lock+0x2b/0x80
[  511.575358][   T31]  ? schedule+0x2d7/0x3a0
[  511.579689][   T31]  schedule+0xe7/0x3a0
[  511.601841][   T31]  schedule_preempt_disabled+0x13/0x30
[  511.607371][   T31]  __mutex_lock+0xc69/0x1ca0
[  511.640310][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  511.645659][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  511.666890][   T31]  ? net_generic+0xea/0x2a0
[  511.672087][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  511.677383][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  511.687459][   T31]  nfsd_umount+0x3b/0x60
[  511.695351][   T31]  deactivate_locked_super+0xc1/0x1a0
[  511.704274][   T31]  deactivate_super+0xde/0x100
[  511.709067][   T31]  cleanup_mnt+0x225/0x450
[  511.720744][   T31]  task_work_run+0x150/0x240
[  511.725363][   T31]  ? __pfx_task_work_run+0x10/0x10
[  511.735664][   T31]  exit_to_user_mode_loop+0xfb/0x540
[  511.741544][   T31]  do_syscall_64+0x4ee/0xf80
[  511.746148][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.752478][   T31] RIP: 0033:0x7f8401790af7
[  511.756917][   T31] RSP: 002b:00007ffef9a77728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  511.766545][   T31] RAX: 0000000000000000 RBX: 00007f8401813d7d RCX: 00007f8401790af7
[  511.782001][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef9a78870
[  511.790378][   T31] RBP: 00007ffef9a7885c R08: 0000000000000000 R09: 0000000000000000
[  511.798346][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef9a78870
[  511.808591][   T31] R13: 00007f8401813d7d R14: 0000000000057c28 R15: 00007ffef9a788b0
[  511.824738][   T31]  </TASK>
[  511.867612][   T31] INFO: task syz.1.925:10260 blocked for more than 186 seconds.
[  511.877323][   T31]       Tainted: G     U    I  L      syzkaller #0
[  511.886075][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  511.895322][   T31] task:syz.1.925       state:D stack:27080 pid:10260 tgid:10259 ppid:5843   task_flags:0x400140 flags:0x00080002
[  511.909251][   T31] Call Trace:
[  511.912549][   T31]  <TASK>
[  511.915470][   T31]  ? __schedule+0x10b9/0x6150
[  511.924512][   T31]  __schedule+0x1139/0x6150
[  511.940046][   T31]  ? __lock_acquire+0x436/0x2890
[  511.945026][   T31]  ? __pfx___schedule+0x10/0x10
[  511.951819][   T31]  ? find_held_lock+0x2b/0x80
[  511.956538][   T31]  ? schedule+0x2d7/0x3a0
[  511.962799][   T31]  schedule+0xe7/0x3a0
[  511.966878][   T31]  schedule_preempt_disabled+0x13/0x30
[  511.973009][   T31]  __mutex_lock+0xc69/0x1ca0
[  511.977619][   T31]  ? nfsd_nl_threads_set_doit+0x687/0xbc0
[  511.983642][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  511.990115][   T31]  ? net_generic+0xea/0x2a0
[  511.994637][   T31]  ? nfsd_nl_threads_set_doit+0x687/0xbc0
[  512.000666][   T31]  nfsd_nl_threads_set_doit+0x687/0xbc0
[  512.006245][   T31]  genl_family_rcv_msg_doit+0x209/0x2f0
[  512.016075][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  512.026854][   T31]  ? genl_get_cmd+0x194/0x580
[  512.035822][   T31]  ? bpf_lsm_capable+0x9/0x10
[  512.044496][   T31]  ? security_capable+0x7e/0x260
[  512.051793][   T31]  genl_rcv_msg+0x55c/0x800
[  512.056358][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  512.062885][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  512.069557][   T31]  netlink_rcv_skb+0x158/0x420
[  512.074336][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  512.079709][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  512.085052][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  512.098755][   T31]  genl_rcv+0x28/0x40
[  512.102803][   T31]  netlink_unicast+0x5aa/0x870
[  512.108295][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  512.113604][   T31]  netlink_sendmsg+0x8c8/0xdd0
[  512.118841][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  512.129727][   T31]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  512.140735][   T31]  ____sys_sendmsg+0xa5d/0xc30
[  512.145527][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  512.155290][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  512.162629][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[  512.170920][   T31]  ___sys_sendmsg+0x134/0x1d0
[  512.175651][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  512.181271][   T31]  ? futex_private_hash_put+0x160/0x1b0
[  512.187815][   T31]  __sys_sendmsg+0x16d/0x220
[  512.192520][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  512.197900][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[  512.202887][   T31]  do_syscall_64+0xcd/0xf80
[  512.208501][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.214439][   T31] RIP: 0033:0x7fc555f8f7c9
[  512.219384][   T31] RSP: 002b:00007fc556e83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  512.232328][   T31] RAX: ffffffffffffffda RBX: 00007fc5561e5fa0 RCX: 00007fc555f8f7c9
[  512.245166][   T31] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000006
[  512.255676][   T31] RBP: 00007fc556013f91 R08: 0000000000000000 R09: 0000000000000000
[  512.269442][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  512.278456][   T31] R13: 00007fc5561e6038 R14: 00007fc5561e5fa0 R15: 00007ffd8380cfd8
[  512.287003][   T31]  </TASK>
[  512.302595][   T31] INFO: task syz-executor:10304 blocked for more than 166 seconds.
[  512.314270][   T31]       Tainted: G     U    I  L      syzkaller #0
[  512.321610][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  512.334772][   T31] task:syz-executor    state:D stack:23992 pid:10304 tgid:10304 ppid:1      task_flags:0x400140 flags:0x00080002
[  512.352100][   T31] Call Trace:
[  512.355379][   T31]  <TASK>
[  512.358596][   T31]  ? __schedule+0x10b9/0x6150
[  512.363280][   T31]  __schedule+0x1139/0x6150
[  512.370205][   T31]  ? __lock_acquire+0x436/0x2890
[  512.375211][   T31]  ? __pfx___schedule+0x10/0x10
[  512.383996][   T31]  ? find_held_lock+0x2b/0x80
[  512.390573][   T31]  ? schedule+0x2d7/0x3a0
[  512.394920][   T31]  schedule+0xe7/0x3a0
[  512.399383][   T31]  schedule_preempt_disabled+0x13/0x30
[  512.404866][   T31]  __mutex_lock+0xc69/0x1ca0
[  512.419307][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  512.424638][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  512.434292][   T31]  ? net_generic+0xea/0x2a0
[  512.442969][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  512.448837][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  512.453981][   T31]  nfsd_umount+0x3b/0x60
[  512.459749][   T31]  deactivate_locked_super+0xc1/0x1a0
[  512.465132][   T31]  deactivate_super+0xde/0x100
[  512.471099][   T31]  cleanup_mnt+0x225/0x450
[  512.477358][   T31]  task_work_run+0x150/0x240
[  512.481975][   T31]  ? __pfx_task_work_run+0x10/0x10
[  512.491707][   T31]  exit_to_user_mode_loop+0xfb/0x540
[  512.498004][   T31]  do_syscall_64+0x4ee/0xf80
[  512.502640][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.509800][   T31] RIP: 0033:0x7fd620d90af7
[  512.514223][   T31] RSP: 002b:00007ffc891df5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  512.522992][   T31] RAX: 0000000000000000 RBX: 00007fd620e13d7d RCX: 00007fd620d90af7
[  512.535911][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc891df660
[  512.547970][   T31] RBP: 00007ffc891df660 R08: 0000000000000000 R09: 0000000000000000
[  512.557088][   T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc891e06f0
[  512.565962][   T31] R13: 00007fd620e13d7d R14: 0000000000051c0a R15: 00007ffc891e0730
[  512.573974][   T31]  </TASK>
[  512.604324][   T31] 
[  512.604324][   T31] Showing all locks held in the system:
[  512.626786][   T31] 1 lock held by pool_workqueue_/3:
[  512.636753][   T31]  #0: ffffffff8e3d4c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  512.650844][   T31] 1 lock held by khungtaskd/31:
[  512.656772][   T31]  #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  512.666984][   T31] 2 locks held by syz-executor/5834:
[  512.672261][   T31]  #0: ffff88807dbb00e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  512.683873][   T31]  #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  512.694609][   T31] 2 locks held by syz-executor/5842:
[  512.699920][   T31]  #0: ffff888033f3e0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  512.716311][   T31]  #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  512.728520][   T31] 2 locks held by syz.2.872/10021:
[  512.738106][   T31]  #0: ffffffff901eb6d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  512.750640][   T31]  #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  512.761638][   T31] 2 locks held by syz-executor/10230:
[  512.767914][   T31]  #0: ffff8880340bc0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  512.778795][   T31]  #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  512.789216][   T31] 2 locks held by syz.1.925/10260:
[  512.794881][   T31]  #0: ffffffff901eb6d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  512.803096][   T31]  #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  512.820571][   T31] 2 locks held by syz-executor/10286:
[  512.828280][   T31]  #0: ffff888020b520e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  512.843728][   T31]  #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  512.857824][   T31] 2 locks held by syz-executor/10304:
[  512.864129][   T31]  #0: ffff88807ad2e0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  512.874740][   T31]  #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  512.889548][   T31] 2 locks held by syz-executor/10444:
[  512.895761][   T31]  #0: ffff8880525e20e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  512.906578][   T31]  #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  512.916969][   T31] 2 locks held by kworker/u8:25/10687:
[  512.922425][   T31]  #0: ffff88801d305948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[  512.944698][   T31]  #1: ffffc900046cfc90 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[  512.960533][   T31] 2 locks held by syz-executor/11090:
[  512.968794][   T31]  #0: ffff88807afa00e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  512.980066][   T31]  #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  512.990485][   T31] 2 locks held by syz.8.1178/11619:
[  512.996088][   T31]  #0: ffffffff901eb6d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  513.005177][   T31]  #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  513.015753][   T31] 2 locks held by syz-executor/11628:
[  513.021120][   T31]  #0: ffff888024e860e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  513.032147][   T31]  #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  513.061449][   T31] 2 locks held by syz-executor/11922:
[  513.067107][   T31]  #0: ffff8880828ee0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  513.077923][   T31]  #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  513.088580][   T31] 2 locks held by getty/12562:
[  513.093866][   T31]  #0: ffff88803528d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  513.104436][   T31]  #1: ffffc900035dd2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510
[  513.115648][   T31] 4 locks held by kworker/u8:42/12592:
[  513.121096][   T31]  #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[  513.143938][   T31]  #1: ffffc9000495fc90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[  513.160752][   T31]  #2: ffffffff9012e890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830
[  513.174547][   T31]  #3: ffffffff90145068 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x17/0xe0
[  513.184768][   T31] 2 locks held by syz.4.1440/13236:
[  513.189963][   T31]  #0: ffffffff9012e890 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[  513.199799][   T31]  #1: ffffffff90145068 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x17/0xe0
[  513.212127][   T31] 2 locks held by syz.0.1446/13253:
[  513.217357][   T31]  #0: ffffffff9012e890 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[  513.227988][   T31]  #1: ffffffff90145068 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0
[  513.237354][   T31] 1 lock held by syz.6.1447/13262:
[  513.247474][   T31]  #0: ffffffff90145068 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  513.290442][   T31] 
[  513.310723][   T31] =============================================
[  513.310723][   T31] 
[  513.372938][   T31] NMI backtrace for cpu 0
[  513.372962][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  513.372986][   T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  513.372992][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  513.373001][   T31] Call Trace:
[  513.373006][   T31]  <TASK>
[  513.373012][   T31]  dump_stack_lvl+0x116/0x1f0
[  513.373038][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  513.373055][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  513.373072][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  513.373090][   T31]  sys_info+0x133/0x180
[  513.373104][   T31]  watchdog+0xe66/0x1180
[  513.373129][   T31]  ? rcu_is_watching+0x12/0xc0
[  513.373149][   T31]  ? __pfx_watchdog+0x10/0x10
[  513.373169][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  513.373192][   T31]  ? __kthread_parkme+0x19e/0x250
[  513.373214][   T31]  ? __pfx_watchdog+0x10/0x10
[  513.373234][   T31]  kthread+0x3c5/0x780
[  513.373248][   T31]  ? __pfx_kthread+0x10/0x10
[  513.373262][   T31]  ? rcu_is_watching+0x12/0xc0
[  513.373282][   T31]  ? __pfx_kthread+0x10/0x10
[  513.373296][   T31]  ret_from_fork+0x983/0xb10
[  513.373311][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  513.373327][   T31]  ? __switch_to+0x7af/0x10d0
[  513.373345][   T31]  ? __pfx_kthread+0x10/0x10
[  513.373360][   T31]  ret_from_fork_asm+0x1a/0x30
[  513.373390][   T31]  </TASK>
[  513.745059][T12592] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.891794][T12592] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.911179][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  513.918051][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  513.928809][   T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  513.936157][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  513.946218][   T31] Call Trace:
[  513.949484][   T31]  <TASK>
[  513.952404][   T31]  dump_stack_lvl+0x3d/0x1f0
[  513.956995][   T31]  vpanic+0x640/0x6f0
[  513.960966][   T31]  panic+0xca/0xd0
[  513.964673][   T31]  ? __pfx_panic+0x10/0x10
[  513.969098][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  513.975067][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[  513.981213][   T31]  ? nmi_trigger_cpumask_backtrace+0x2be/0x300
[  513.987361][   T31]  ? watchdog+0xe83/0x1180
[  513.991803][   T31]  ? watchdog+0xe76/0x1180
[  513.996217][   T31]  watchdog+0xe94/0x1180
[  514.000483][   T31]  ? rcu_is_watching+0x12/0xc0
[  514.005245][   T31]  ? __pfx_watchdog+0x10/0x10
[  514.009920][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  514.015115][   T31]  ? __kthread_parkme+0x19e/0x250
[  514.020136][   T31]  ? __pfx_watchdog+0x10/0x10
[  514.024811][   T31]  kthread+0x3c5/0x780
[  514.028938][   T31]  ? __pfx_kthread+0x10/0x10
[  514.033548][   T31]  ? rcu_is_watching+0x12/0xc0
[  514.038322][   T31]  ? __pfx_kthread+0x10/0x10
[  514.042905][   T31]  ret_from_fork+0x983/0xb10
[  514.047485][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  514.052582][   T31]  ? __switch_to+0x7af/0x10d0
[  514.057260][   T31]  ? __pfx_kthread+0x10/0x10
[  514.061917][   T31]  ret_from_fork_asm+0x1a/0x30
[  514.066750][   T31]  </TASK>
[  514.069820][   T31] Kernel Offset: disabled
[  514.074142][   T31] Rebooting in 86400 seconds..