last executing test programs:

4m24.071619387s ago: executing program 32 (id=1648):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = setfsuid$auto(0xee00)
setreuid$auto(r0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/midiC2D0\x00', 0x40041, 0x0)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x2, 0x10, 0x8, 0x4, 0xffffffffffffffff, 0xa, "2af0510000000000562c00", <r2=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x22000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x48880)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r3 = socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
getsockopt$auto(r3, 0x84, 0x70, 0x0, &(0x7f0000000280)=0x1000c0)
capget$auto(0x0, 0xfffffffffffffffe)
clone3$auto(&(0x7f0000000400)={0x100008000, 0x980, 0x4, 0x6, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x3}, 0x40)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)

3m21.037609059s ago: executing program 4 (id=1873):
r0 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000200), 0x5)
socket(0x2c, 0x6, 0x0)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
write$auto_uhid_fops_uhid(0xffffffffffffffff, &(0x7f00000002c0)="44f7bece3a3c8ab3c1a8dc5f979b356bd0bb42ef4565ae386b41c43adc5b250f54ea845f20cac2b637a5457a4b65fb9cee102e741809dee68a52a41c316fe8a64b95b611df6a28087e5a6473ae73f5d74bb6dedb46f9d97b8c622b183a3b4ee2544fe384ccace7de97842c4f203be3556a2860b2fdceebfa9d54a264df87b85e6145468eeabc6618eccab8d96462bb1992255a157b897207ff8542a7f87ad3e369483fecc91650cdd002fddafacb52520d7dfaeac9e9b7784a492f9e8369f05ecc87c9de9d80c67ad1ef4c32d6d02fd08e3f9b80455855fba748ec25fc7a6cde1d0ca8b47a1fd76cdba3f29dd09df26991f479c5edbfefc58583532ef836f1cb93cd60f0d5577f14247ebb4ee6cf40c43fe19ef175d5f6175481701aa92b3eb758b3bf166f81ac5e298248bbeddf3f77035518c413458151abcf57f7f096f2d3de9c8a8167a47e4f2fc20e087bd68414acc9fd27926a6f8e35c7aa92fb94f8091e58e64f747ceb7e8ad04fdacf44b448a8f1e3fa14766fdc46258f6e277275f0f34fd54e12c0dd0221311d413a258ca0338dd433c291cbaa189e13dc803ffa57f9539a0151c24ebb41fc0873d5be3620997c000dcc89805de8bedabe50c8f5e0ad3039f1a8ea2378b7e3414ab3a0a9392a6f613471584959423f9cd55d92e5031f6bb70e0e911582833db633a836ab8199fdeb91c787e959c110fd81e602521a47cd95b747d5334a8fee945e28af227635c16bf0e4e37be06821f290ae3dce18935da6c600d5c38c00f0c559fe7b196f7aa97334072035fce0bff09853c994463e31558fe27fb8645e01300510f8d99b93e06c1de2f9f19b2d39fba7736680c90c6b9737631c1e30361126412e31ffc9c561472bb423b457c04e0a2b35f45309322c5104c5d62da7828ba0dbd3230f640021c4ee57f1a66855c64e4fb123cbd735e99eb49dea9a4a057c11c14f7616460dd82ee0fa2b3dda1e6c1443af24a08b707d00ccbab36718e2140efafa331e5f090ee337bf94e5c1cc594720d16bff0a7e70fe4cf1d8703523fa19003718ac77297a80339781981407c5e5afad7b1a15c9d8eab5a81754b95cbeeaf74c3954609742b85ea1ff4d7e94bf8d18c7180deefefea00871aa5e4dd0b554c861de0d5d572eddec1f55d06bd4ec15c2d36b5a367b225dee53de8d11a0d25dc1364632253bb7f6434fd2453de7b230293c01c36d68f3d04275610e161ae987e177b32bc0aaab5c0c0d5a3472b1a62cd06c6ce9587d8577b7ad6181deda0809f70a756c575e4bf064494728d977da829071c6f6ed018ba22c93d641d62a64ceca25363777a03210311e0d78d012b00e0d554780359ef427a25de6aac7aa6d46e387646c497d537714432990ad3e7182356d6f2411afdf5df6f79d9707f2ea9b82455d0b329853a4c0debd8388d436d79a40326fa5cac37cd2f5e53cd9100f39ba6de49cb392c9e5b63e28753d78377d3ac041190291d1346149c5770461d60a40b97052375e5f331260ba03a08d6d8bb15b46e22dc80f3cec7d34d854a88b1fbdf87fecf33366b425753c384f219d5443c489617af3d06f3e18821dd42b7b1059d85e77f82ed4e4b425f04277380c7a361e46ccbe1d50715ce2d0e6356377ff2a4c85dc6302f0b97ed7e25e629ecaa15dc19ebbaa88b4dbd3e401ab87dba7df93884a6189ce6ea8842685716f10250c4231a60044e3386a744d3d3daee239f13c3f55114697e61fdcc5113d6a15b4997cd8db6d9f75ce573deb71d01338de4c56587cd4253374cdb4e89e05edcd41394da61135401b360742aa79088905e6f7261057797d7ef8a477fd32bf5a452553e9de0e6f0d3092969f6aa54157528631776edfa023117408f4f52e86445da9f7dbabb87bd1a85cac25ebd1f0269aa66ec3c907bd0ba84942d46d1549df1a8d3acc391394b6cc1d1b5c3ccaf5940e0c95a07c19e9f8bdac2f113d6501b194b893d871e54d76f7cfdd565f833e122c8cd5db152ca323edfb3c91b2b23cbb217839d295a6bc57865fde0c5c65f3fe34fb8cd7a4f4c4f7617ff72aa5293f92390bd01b944cb7c97d9eb01de6349b8c58980683f65c67aaef3f4578ce82afee540e095da928ad8ecb0f9dcd3d47ef18731faca3f14432cceb6633a184144a47edbb6fbd1c4f69d5b0d5a0618a297530519c0b5f83de89d6732c67264f22491a3914f34d6e918d1871a69b015da7f96ac88c09da4d4b57ec61a8a7dac9fb537fc9d5bc9fe793f150026e6b00918c35792ef92c3c39b7eb14244c1d8ae26e59c45d7140aef639ad88ce241c37b9aaef5aef5448a8b0d6c6277fb1d45a85b2086dcb8b4656e2961b7acaf10d79d6b56963889ef94d49c41dabd62be13d116223cb7fb83d3021f7596c322ae7bac58a07e44740363252829aefbd3a84544995b4159c883f5060056fb8c8d1be0fadc3fe6b0e4a65a8790c45e69d6253d60e28acd399d2ce25c9c21b85fb619b2749b5b81265543855e3858baf7f858d74af9ca98de3147d6e42adeebb80c63918a32f9b25efcc4ef8087ed93744595ac7e6fc9985555edf3d0583226c0edea0b5638cd12b532b5032a37fd824fe918261139b120f1f6108e1b6bbebcdbab9e5934b9a0e8c5d152b141bbbb824c4d023539e977903ba6846d24e6ff8064a2c8ec703eaf85eaa549851066fb72b81739c196a7905357f433d27b61fe4f7ba16513fffc6095af4fd03b53583b92defd2e503a75cfac70c7f7aa405c595c5088250cd0f0189be71ed7b0738df0201b675fe55d00f6a2172810d7045e638660dd996c11f3f29c2213229bb6949fe2c65f7e2fc75ae749324a122d78ec6823db67ab9b3594c3bd95f6eaee4516de6098138f24dd98571d98b9f26cefc9fdd110f5e92eadaa39ade896feb226207a4503b77f0df41e3c1d531bfe7e244c04757d6f47641fc8188f11d5ce2d59a6d2e11ab53576f38137a25395d89fa5b500da4339b5ec0a802b3862fcb05f926e887d633ee5b69a895e2fc47cdd34864859169fa6431ae7d14c7cba0c6c7cab0d7456c33b252ddea4d0532729ea207e2938829d11c74fac164e4cdc1881d8b730d0b469f62f01a3a5345d22fb09cea4827d3bc9c5ad2778fddd528c038bcb45bf0d9b912260d333c68c6e730b19c7241e568d126d2adb8ffbf695a75bb29be470c0eb817e1331b7427adf44e68880c5285c3c81e7270b8b2de12fc311def6b9bac72586898b8ca167d17bb919d9fd0dbabda183468f2b8d8e069b81ac2d17851968f9b4c94b2db7f8fb93767c8c04b27d1bf6c21f9879ea2404ecf1f966861ef89a7e5b92acb856aa85521c4ec81ab97b6f22973477aa025f026e07972b26c80e6008c29c1100e5d5290979aad3947a715a3079d6c06ff9943bbd1c895c5dcc63dbcd5c2542b17ab169a1d2a7f03cd4ed243534ad468b66abb78595dc3d14586bbb786ba547d8796d474032fc96ad3465fdac60085f53cb549dfa3e85bc5b7a6014b978cbfad710f09e09091070b0a2354f724e6a0ed111e34c6703cc903a2e1f811e944c2ec173204f5e89db3e3e0dd2c03c8ce692033e27e81a1f2511ebe900cb3b39b03761815aca61e7cacc2f43030717bdbb965c7cb9f3c89a90da4d8afdeac908e33bdc2c74302dc3a2833175f89fc9c74e356d11aa951da6991842a9526fe246404f6fc4d17d47371416df72872c75d5f73dd24d1a581b59072d1d2197dbf73616594542596cab27fa041ae0c5ef810ebbcacebb2f7301a0686cf9c4e4b65de7f8d4c48e25b19ed91b078099d0e9493ca399627993408b8790c549d3a7ce4efa7a143a0cae5e1b1b6e6be2c96945feb221915268a495aa4cf34c390bccd360db45bee9dd197452770bca4293d376a45fcbd6e2b86d7d5815659d1bbe168c02ad6397ed85e2366390fded0e6356a21e305b9bcae7c16d1b771bb3e56ede972a32abf835b872751b1518e3c66e563c84f0d6e7b05f5ead5675738601ee50aea83a1e8eca13091866d3b467fe6bd18afd3633becbd82309d789864e67b236e41147ea8ffcaf8c89e9f43f29dd7b059ef1c97d5bca8db5f14069161ad08a39bcb2ff5183df3a2e96113523042ac7df396f4dc541e6d358f4fe475511992449cf944a59d982c7a6b2f98e3c7d2f76d0eb887d8062cee88312b3883fa12689344f34ebd95be00d0ef55cca4fab8ec532da6573622416991f0c55b2468533f13972189ad332872781be1f551097b6aa560d5d37aba5a88e18d680dbd35986b67fa0d2c9a28d5194220f5ff005926208d25bb0aff3eefe894d67cc3fce02357a1edf1dc3883415282f11a0080dc8f85b5c8b0722820fb39a466ca390c1746e26831fb540fbbe08b0fd67a666e62428372dd2ed0248ffa0bd5f602c2363ee861decf01f4954f531ec178193b2b7b44c4a72736107d9fdbe1497a6990f161b02de3630c8b200deed154817e90b25355de391516a6e95be00993de720a20f708f28b2a8425279a17e5b0386b890da868791b40396d27fb6fb3d5cb45992967f1681d6b331d8bcf0279055ca59d7af1f13ada5aa253c29aba8fa551a4e63f75cdd16a13a008bdcb7667005ba244fc65175f9d0ba80c455a1eda6aa935e77b20a5cab60b3f5461c6023de3fa7afabe363f3679fc8dd86530506f4d4ad86e0b55f7619c721463ac43dfb9cd758833aabb0cbaeb00d913f64da9cb9cdd95e935446c4b53ecd664ce17bdcdd0e98e3af6b140831ad277f8127de66763e457d1c0401e24eb32080509a367592f3c3011a106241ecb00b307ad52fed035932f8af76ad131ae1aca60d001fa62089a2cba1f2dc79691abb319f99b13e4bc2ae9d6c812723be82399b88fd5fc109b1a4cae509fddc60a3afde76013579a164eb003edf3238ce75d54b71627c6687b746b898cc63fa2c10d88cbf34877ddd8196236fe27fa95d5a58a986cff8e5c790664f71681224bc500077d5ddb38acf64f40179616f75cfc96504daadd8798469a4219af4e1813d96e93175a8db58b6f0e32fdf4d09ed27a6d4a4b6d2431205ea3177d69c4414a8f43ca4b85eeac71aa93d1ac9bfdfa20510d8a87471fc022e77dd2e6f3b1ae12ab28bf511f299f9f5a39f74b6f8f1ca87d28ff1120e896288758e4582ae760ac4aa73d0744f98bfb2fac002df2c55ec60cbcddeb8aeea580c14f94b06686f087fa5e8df380cc3a9ec9d3d439d1650f2fc78d00c2d4da2723ba379058390a96e41917f3bd4789e1d2079edd82ec3900bc950b2f9337b43219122f89dc7f31b7cbb31d6ed257f2080fe2e4045cea3cf42205ce98a8d9e11acc5f56aa1589540633aaec4c73f34c09213bec1185ef1e74ad7649252f1774c1e9e461d84ec0fe8f139c3504784919905d648b336b81a0b6357f0d8c1ee75d06bae814abadefe60b792d1dc10ce627b4d672028956f33795ab5e304c8716fb55accd4dd8cd12b35d972bf91acfe265f92acb1d654e07987c641eeb7c20172267829ad533b681afc596a40b0065427057e37260c6f0ad2148fd1e5e0aea4a23b35971b8dfaae8ff7f4ac6e6cfd43933ba415e5639c9f4d3d24373d0c35b0a3e990a88570dcaea12e92a023f85133fbb418a0812085098572f8217211cfd60aee2100e37b07e891157ccbd4913dde6358467ac41b98047516365e67e7e3ed3515410a90f9f238ab2d386ceb8e79144edc6d6f6482c7228fc8fef5743a4db49ef5ca43b879a6125cce57ee8743186426f0ed7379565c641e48a7771f1ed1a9f0f810bd1d015bf32c042784207d87f", 0x1000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nbd13\x00', 0xd6400, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x111000, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x5)
select$auto(0x4, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x100000001, 0x4, 0x8000000000000001, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
ioctl$auto_BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000001900)={@raw=0x8, "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"})
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x5)
r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r0, 0x1003, r2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
getsockopt$auto(0x3, 0x200000000001, 0x24, 0x0, 0x0)
setns$auto(r4, 0xfffffffe)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x801, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x5, 0x3, 0x20006)
connect$auto(0x5, 0x0, 0x9)
sendmsg$auto_HSR_C_GET_NODE_STATUS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES16=r5, @ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0x2c050811}, 0x10)
ioctl$auto(0xffffffffffffffff, 0x4018620d, 0x9)
mmap$auto(0x0, 0x40009, 0x3, 0xbc, 0xffffffffffffffff, 0x28000)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x28201, 0x0)

3m19.751068805s ago: executing program 4 (id=1878):
unshare$auto(0x40000080)
mmap$auto(0x10000000000, 0x80, 0xdb, 0x2000000000000d6, 0x2, 0x7ffe)
r0 = socket(0x2, 0x1, 0x0)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap$auto(0x0, 0x400009, 0x80000000df, 0x9b72, 0x2, 0x8000)
bpf$auto(0x8, &(0x7f0000000280)=@bpf_attr_7={@btf_id=0x2, 0x6, 0x23}, 0x96)
openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000280), 0x4080, 0x0)
madvise$auto(0x0, 0xffffffffffff0003, 0x15)
ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, 0x0)
mmap$auto(0x8214, 0x10001, 0x1ff, 0x14, r0, 0x2)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/cmdline\x00', 0x200, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r2 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x80, 0x0)
fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x7, 0xd, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
socket(0xa, 0x801, 0x106)
setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000340)="3190890684d3a37fa2ecd22a7cd80c32f6b309b5bd9de7d9f6d428de78ae5abc1067356bf0b1b4c289692affc5d219a7aa31e71505bff950d8538f6441d8444f7f67a08a61a671663dd55051dac591a03e55e05d141c27a102a0a35ae4cdd08f750ed0101d0afbbe0bf018d5ae1e6f88572f6060e1fa7ba496ead10049d87a2f6ffd71ab60467304714885ee83e84beefe93ed7f0ca5de9f5d53e6aba5863c7ef381d95316c0ce8be92ae3c261068826940000000000000045522d0b53c137", 0x10, &(0x7f00000000c0)={0x0, 0x1}, 0x7, 0x0, 0x2, 0xa}, 0xfff}, 0x5, 0x30e)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
iopl$auto(0xffffffff)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)

3m16.298279452s ago: executing program 4 (id=1885):
r0 = socket(0x25, 0x1, 0x0)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
statmount$auto(&(0x7f0000000180)={0x7, @raw=0x6, 0x2, 0x0, 0x16}, &(0x7f00000001c0)={0xfffffffa, 0xffff2492, 0x5, 0x4, 0xab9, 0x0, 0x7, 0x3, 0x7, 0x0, 0x100, 0x82, 0x8, 0x9, 0x5, 0x1, 0x800, 0x1, 0x6, 0x8, 0x6, 0xf, 0x2, 0x7, 0xfffffffb, 0xd9b0, 0xfffffffffffffffc, 0x1ff, 0x7f, 0x4, 0x8, [0x4, 0x7fffffffffffffff, 0x5, 0x44, 0x8000, 0x100000001, 0xdc73, 0x1, 0x1, 0x5, 0xe, 0x0, 0xa48, 0x4, 0x10000, 0x0, 0x42, 0x1, 0x1, 0x7, 0x3, 0x7, 0xf5, 0x3, 0x4, 0x0, 0x7b, 0xfffffffffffffff7, 0xfffffffffffffffe, 0x200, 0xffffffffffff3e87, 0x4, 0x8001, 0x7, 0x516, 0xef8, 0x8, 0x6, 0x7, 0x9, 0x1, 0x13, 0x4], "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"}, 0xfffffffffffffffd, 0x8)
sendmsg$auto_SMC_NETLINK_ADD_UEID(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@SMC_NLA_EID_TABLE_ENTRY={0x6, 0x1, '%+'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$auto_SMC_NETLINK_DUMP_SEID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r2, 0x802, 0x70bd25, 0x25dfdbfd, {}, "f2e9290f7c95404ca7d1471ed754c828c1663345375ec053e604c88c797028af788b4364be995044afdbd7b66eb39cd780da9cb7b82973d440104e04b8b8281050de34572ee40e8c21a385dd5fc633a326b11465415dabac22fcd8eee5e066e42cb7"}, 0x78}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000001)

3m15.96882629s ago: executing program 4 (id=1886):
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0x9, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(r0, r1, 0xca41)
pipe$auto(0x0)
pipe$auto(0x0)
tee$auto(0x2000000000000, 0x3, 0x402, 0xd)
write$auto(0x1, 0x0, 0x100)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1f00, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40d0)
open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, &(0x7f00000001c0)={0x3, 0x0, 0x7fff, @raw=0x5}, 0x8)
socket(0x2, 0xa, 0xe57a)
r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0)
setsockopt$auto_SO_TIMESTAMP_OLD(r2, 0x5, 0x1d, &(0x7f0000000240)='\x00', 0x3)
ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x9, 0x80}, "6a034a07c7b8edb8fc3b39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x6})
ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r2)
fstat$auto(r3, &(0x7f0000000100)={0x0, 0x4, 0xa6, 0x1, 0xee00, 0xee01, 0x0, 0x2, 0x3, 0xd, 0x7, 0x7, 0x0, 0xc64c, 0x5, 0x3, 0x100000000000005})
sendmsg$auto_NFC_CMD_VENDOR(r2, 0x0, 0x20000000)

3m14.650010925s ago: executing program 4 (id=1889):
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f00000003c0), 0x406a37, 0x0, 0x6, 0x0, 0x7f, 0x5}, 0xa6}, 0x7, 0xdb22, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) (async)
r1 = socket(0x2, 0xa, 0x0)
sendmmsg$auto(r1, &(0x7f00000000c0)={{&(0x7f0000000000), 0xd1, &(0x7f0000000080)={0x0, 0x5ea}, 0x1, 0x0, 0x1, 0xaf23}, 0x6}, 0x5, 0x1997b23d) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73) (async, rerun: 64)
socket(0xa, 0x1, 0x84) (rerun: 64)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0)
socket(0xa, 0x2, 0x0) (async, rerun: 64)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (async)
r3 = socket(0x2c, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x10, 0x2, 0xc) (async)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r2, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c082) (async)
write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/free_buffer\x00', 0x113802, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.7/usb24/urbnum\x00', 0xa8c80, 0x0) (async, rerun: 64)
read$auto(r0, 0x0, 0x7e) (async, rerun: 64)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd10/sched/read1_fifo_list\x00', 0x141100, 0x0) (async)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async)
write$auto(0x3, 0x0, 0xfdef)

2m59.560873022s ago: executing program 33 (id=1889):
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f00000003c0), 0x406a37, 0x0, 0x6, 0x0, 0x7f, 0x5}, 0xa6}, 0x7, 0xdb22, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) (async)
r1 = socket(0x2, 0xa, 0x0)
sendmmsg$auto(r1, &(0x7f00000000c0)={{&(0x7f0000000000), 0xd1, &(0x7f0000000080)={0x0, 0x5ea}, 0x1, 0x0, 0x1, 0xaf23}, 0x6}, 0x5, 0x1997b23d) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73) (async, rerun: 64)
socket(0xa, 0x1, 0x84) (rerun: 64)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0)
socket(0xa, 0x2, 0x0) (async, rerun: 64)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (async)
r3 = socket(0x2c, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x10, 0x2, 0xc) (async)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r2, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c082) (async)
write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/free_buffer\x00', 0x113802, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.7/usb24/urbnum\x00', 0xa8c80, 0x0) (async, rerun: 64)
read$auto(r0, 0x0, 0x7e) (async, rerun: 64)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd10/sched/read1_fifo_list\x00', 0x141100, 0x0) (async)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async)
write$auto(0x3, 0x0, 0xfdef)

2m59.288886007s ago: executing program 2 (id=1931):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram5\x00', 0x301201, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
io_uring_setup$auto(0x87, 0x0)
pwritev2$auto(r1, &(0x7f0000000080)={&(0x7f0000000380)="075cba98eaef130f3621cf3f3e6a76531b4018fdc5237a08f72c148cd6ddb1c36548030d644116f77ccb8375de9e96ba287c71872f396f80ea8975378e1bf43d010cfaed80a09fce8ba5b86514d3ae99e2edeb2f9296edae1be0b72263c9ea83a6db12c0e5b671fbdd78833a8a78b15b74ae5eec325fac5669e1cfc5088b3b8c18cfc08a4832d472d40eabf8a9c97cedee4dab6a6fa4ba7c61fb9bd1587601ba7e1ff2ccb3d8089d47cdc4fb282d55b739ad7ffd11e99c8398", 0x800}, 0x6, 0x4, 0xaf54, 0x3)
r2 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r2, 0x0, 0x487, 0x0, 0x0)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0)
ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, 0x0)
statmount$auto(0x0, 0x0, 0x1fe, 0xb)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0)
write$auto(0x3, 0x0, 0x100082)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93b, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x8, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0xfffffffc, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, [0xfffffffffffffffe, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x8000000000000000, 0x0, 0x10, 0x0, 0x0, 0x1]}, 0x1fe, 0x83)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0xc5f3, &(0x7f0000000100)={0x0, 0xfc2}, 0x4a0, 0x0, 0x8, 0xdc5a}, 0x800007ff}, 0x7, 0x4008)
r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2)
read$auto_proc_pid_maps_operations_internal(r4, &(0x7f0000000900)=""/4096, 0x1000)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, 0x0, 0x20103, 0x0)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x4, 0x0)
mmap$auto(0x0, 0x400008, 0xfffffffffffffffd, 0x9b72, 0x2, 0x8000)

2m58.004631903s ago: executing program 2 (id=1932):
mmap$auto(0xfffffffffffffff7, 0x7, 0x6, 0x14, 0x401, 0x8004)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a6, 0x1fd)
socket(0x2b, 0x1, 0xffffffff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r3 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$auto_IMADDTIMER(r3, 0x80044940, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
read$auto(0x3, 0x0, 0x80)
prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007)
bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000440)=@bpf_attr_0={0x9a, 0x1000004, 0xa, 0x3, 0x7eb, r0, 0x5, "e03f43000b26d5ea743998fb57339a75", 0x0, <r4=>r1, 0x9, 0x3, 0x6, 0xfffffffffffffff3, r1, r1}, 0x7ff)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80)

2m53.499863318s ago: executing program 2 (id=1937):
r0 = socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
connect$auto(r0, &(0x7f00000001c0)=@in={0x2, 0x3}, 0x55)
setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4)
mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/printk_devkmsg\x00', 0x202, 0x0)
read$auto(r1, 0x0, 0x9)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, 0x0)
r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0)
sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x31, 0x19, "ee6779082c3b22c1f8799b6112edd1fe819cd872e09db29ef226c07cb05e802f49d024e2833a66d885f2f3d4cb"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xfffffdac}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xc6}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x40c0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0)
sendmsg$auto_NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x1460, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1443, 0x75, 0x0, 0x1, [@generic="585aa5797b7fe791a442b584cfb2ebeafe8dccbb8435fe6f5281a00e2c0166922f3198307ceaea6d05c107364709570b33832c80abb2737e55f053f513318d3ca699bc58716ec1cd3bc12f6e1b3090d314d4d54d66ef9f41419207b85ed0bed2b16d229fe627e4", @nested={0x3d8, 0x42, 0x0, 0x1, [@generic="1804ad1722", @generic="4dda98cb81787988d70a1b548c526570753f1dee76fc43ac17bf6f44bcbc8f2a8e8d88f76b98ae9e7cbedb3405a139707280e4d2da6048aed7ff838f8820f26991359db050462b415330cf0682513a5fa887f88f5510a295fadabc71bd6f959e5abd9cde284cf60a1aa577ca84c44cddc892e6dd080dfe1369478fbffd072cd9cb08a043035ec158c38e3ef01b1407fcca2128ff02a5dea4dae739851978fc99dc4b987934ed5c574ca9310feaaa", @typed={0x103, 0x130, 0x0, 0x0, @binary="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"}, @generic="67351fc15eb33661133a853312935da06c356d237b077b83f4ac9eb26270d93412c3edc2630f2fa34d690d6a57ccd727c90096bc2118d38421d6003ce5ad499504d8a0bc97f4525263cac0ee667cd0be588a77ffef8ddef0bfa9f22b4781f6a229a3b44bf66c1f504bfcdf6dbe4f138a00e110e91c944d5895786fd85c37a40d2c71df54acad212bb6e699b3d92ed80869d995e78256ad8ce78dd27a4a559b54cd718f8efad552763cc6ef34de44", @nested={0x4, 0x89}, @nested={0x4, 0x146}, @nested={0x4, 0xaf}, @generic="0c46039a51148ba2b4635d40584ac902c8ae10298a2dd68d8774a1650b6b3aaae0c2177a81961ebcaa3605fc270057d69bdb2516bc7d80dc19d335a4da4727467dfa44feb2a73bbc436027a4ccc3d29065cc450175c3be0bd9444c702cf1538cee3c0f8d0eea6211d482f243f5a3dce5502362dce2559b4cc0e07823aa6df598f48dcb2afd0c93e6f2de63e888df2eb5abc367d932311ad191b782c8be63994553a7ac9e6a20f4410ddfcec207023094446ed1182a2fd4", @generic="d3efcba0512d4fac8276a57666e06f01badf0fc290501b7611bdef424695abcc9f56ff", @generic="2ad68b2c55148ec8dde7e8b7038638d55c74a6d9f992f204d1f0bc7c9ea35483d06a1afc60afb55b1c7a2871d7bfcfd0348fcd7314fc06e92a6ed9fa7fd0d685c50a6271345b2c99cb9e9d645514ad21cae39c6849c90b5d703b08e4c7279f4ccf71484a636ded2a6f4ada9f1f8db233d9a5cb74b67afb566badb9edde466b8e37fe21d526b304076b"]}, @generic="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"]}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5aa7}]}, 0x1460}, 0x1, 0x0, 0x0, 0x20000901}, 0x40080)
socket(0x1e, 0x1, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
open(0x0, 0x200, 0x1c7)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r5, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r6, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x88}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x11)

2m52.356564097s ago: executing program 2 (id=1940):
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, &(0x7f0000000000)=0x8)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x4}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x34}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc815)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="010027bd7020fedbdf25010000000400018076e1aa"], 0x18}, 0x1, 0x0, 0x0, 0x4104}, 0x10)
mmap$auto(0x9, 0x2f, 0x3, 0x1214, r2, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
io_uring_register$auto(0xffffffffffffffff, 0xeed4, 0x0, 0x1)

2m50.843763293s ago: executing program 2 (id=1943):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @loopback}, 0x54)
io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, <r1=>0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0x2)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2400000)
syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x482, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x1, 0x106)
socket(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x40100, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/dummy_hcd.7/usb8/power/runtime_active_time\x00', 0x480, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe$auto(0x0)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)
gettid()
close_range$auto(r1, r0, 0xf8c)
sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x20008010)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xe91, 0x405, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
shutdown$auto(0x200000003, 0x2)
unshare$auto(0x40000080)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)

2m47.812711362s ago: executing program 2 (id=1949):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x3e}, 0x4000)

2m47.365537821s ago: executing program 0 (id=1950):
keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000100)={0x105, 0x0, [0x359f, 0x9b4d, 0x7f], 0x2, 0xc})
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, 0x0, 0xe00, 0x0)
read$auto(r2, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0)
mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002)
close_range$auto(0x2, 0x8, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2)
sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYBLOB], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000)
waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8})
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x8, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x804, 0x1, 0x1b)
madvise$auto(0x866d, 0x7fff, 0x9)
madvise$auto(0x0, 0x20499d, 0x9)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5)
timer_create$auto(0x7, 0x0, 0x0)
mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000})

2m45.867873164s ago: executing program 0 (id=1953):
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/wmi/uevent\x00', 0x6c0082, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_NONCES={0x37, 0xf3, "f2c7223822ea0b36a4161d16311b48f779d91cc3492e6b1d7372d7db0ec63b4816b9c2654e68e2e6a8116de0b2478b1e5585c1"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24005084}, 0x0)
openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x8f6e00, 0x0)

2m45.609917666s ago: executing program 0 (id=1954):
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c02, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x82402, 0x0)
read$auto(r2, 0x0, 0x800)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r2, 0xc0585605, 0x38)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, r3, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r5)
mprotect$auto(0x110c230000, 0xa588, 0x6)
mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0)
move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r7=>0x0})
sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="110b27bd7000fbdbdf250900000008000300", @ANYRES32=r7, @ANYBLOB="08000600e1"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4)

2m44.188051107s ago: executing program 5 (id=1929):
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x0, 0x0)
ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
r0 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x8, @old_prog_fd=r0}, 0xa3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu0/hotplug/fail\x00', 0x808882, 0x0)
socket(0x2d, 0x2, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), r1)
sendmsg$auto_CGROUPSTATS_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040801}, 0x44084)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x4042, 0x0)
socket(0x28, 0x801, 0x0)
socket(0xf, 0x3, 0x2)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
add_key$auto(&(0x7f0000000040)='[\xb7^:{\x92#,[*\x00', 0xfffffffffffffffe, 0x0, 0x0, 0xffffffff)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc40, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x2000, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2b, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x1, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
write$auto(0x3, 0x0, 0x34000)

2m43.722052498s ago: executing program 3 (id=1956):
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0x52, 0x0)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0)
ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mlockall$auto(0x7)
mmap$auto(0x0, 0x1, 0x80000006, 0x9b72, 0x2, 0x8000000000000000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0)
write$auto(r2, 0x0, 0x41000008004)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r3)
iopl$auto(0x3)
clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0)
read$auto(r4, 0x0, 0x7)
ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x3, 0xfffffffffffffefa}, {0x805, 0x5, 0x2}, {0x7, 0x0, 0x2}])
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
ioctl$auto_X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000080)=[0x3, 0x0, 0x0, 0x35, 0x2, 0x4543, 0x2, 0x6902351d])
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)={0x7, 0x8, 0x2500, 0x1b, &(0x7f0000000100)="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", 0x1, 0xf, 0x4, @stream_id=0x7f, 0x80, 0x4, &(0x7f0000000240)="05bb53998e9654076427f36afd75ef2ad594f15e3cbf809e08d298783842d039ef8c72eb04b2ede2126a06f60623bd650dc63df93f6be5d751ed907636fcdf5e03535259056af9ded421848df676076a8b5a780e9e2a2ff5ec6f9590e6309f7e824a5306cf40bf064871f6bd2bb0203ca850af0758fe88a1f8011a74dd8ae9f54edfc6be8e6acb5a806794fea31ad3e21da0bbda397c99ece11ad8c38738b026d67e94710ee594e28d", [{0x0, 0x3ff, 0x10001}, {0x40, 0x9, 0x4}]})
syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0)
getresuid$auto(0x0, 0x0, 0x0)

2m42.85168525s ago: executing program 5 (id=1957):
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0x52, 0x0)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0)
ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mlockall$auto(0x7)
mmap$auto(0x0, 0x1, 0x80000006, 0x9b72, 0x2, 0x8000000000000000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0)
write$auto(r2, 0x0, 0x41000008004)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r3)
iopl$auto(0x3)
clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0)
read$auto(r4, 0x0, 0x7)
ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x3, 0xfffffffffffffefa}, {0x805, 0x5, 0x2}, {0x7, 0x0, 0x2}])
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
ioctl$auto_X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000080)=[0x3, 0x0, 0x0, 0x35, 0x2, 0x4543, 0x2, 0x6902351d])
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)={0x7, 0x8, 0x2500, 0x1b, &(0x7f0000000100)="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", 0x1, 0xf, 0x4, @stream_id=0x7f, 0x80, 0x4, &(0x7f0000000240)="05bb53998e9654076427f36afd75ef2ad594f15e3cbf809e08d298783842d039ef8c72eb04b2ede2126a06f60623bd650dc63df93f6be5d751ed907636fcdf5e03535259056af9ded421848df676076a8b5a780e9e2a2ff5ec6f9590e6309f7e824a5306cf40bf064871f6bd2bb0203ca850af0758fe88a1f8011a74dd8ae9f54edfc6be8e6acb5a806794fea31ad3e21da0bbda397c99ece11ad8c38738b026d67e94710ee594e28d", [{0x0, 0x3ff, 0x10001}, {0x40, 0x9, 0x4}]})
syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0)
getresuid$auto(0x0, 0x0, 0x0)

2m41.814135233s ago: executing program 0 (id=1958):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
pipe$auto(0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$auto(r0, 0x80006a, 0x2000, 0x0, 0x0)
socketpair$auto(0x8, 0x101, 0x8, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0)

2m40.956739032s ago: executing program 0 (id=1959):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd04, &(0x7f00000001c0))
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x6, 0x1d2c, 0x6, 0x4, 0x15f4da0d, 0x6, 0x9, 0x1, 0x8, 0x4, 0x5, 0x9, 0x4e, 0x40000000000009]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x8081, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x1)
fadvise64$auto_POSIX_FADV_NOREUSE(0xffffffffffffffff, 0x1, 0x2c3, 0x5)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa})
ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0)

2m40.897645356s ago: executing program 3 (id=1960):
r0 = socket(0x2c, 0x80003, 0x0)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@local}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = getuid()
sendmsg$auto_OVS_FLOW_CMD_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x378, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_MASK={0x88, 0x7, 0x0, 0x1, [@nested={0x84, 0x118, 0x0, 0x1, [@generic="5d71764d981b30edc66e9ec2cd15f1202c2175fdacc2f0534e8862aab80d33a09586c3d06007f521a85b632aaa9e5ebffe592fcd", @typed={0x28, 0xb7, 0x0, 0x0, @binary="ec7752dbe7cc97fe02a067549c415b42ed9a48825281bd82963664eb4bc671ab55a12e06"}, @generic="dfca0669686a5c77f02a64298c3bb2130189068a9cc2c61e0de21db7", @nested={0x4, 0x8}, @typed={0x4, 0xf0}]}]}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x80}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x85, 0x0, 0x0, @fd=r3}]}, @OVS_FLOW_ATTR_MASK={0x2c1, 0x7, 0x0, 0x1, [@nested={0x173, 0x75, 0x0, 0x1, [@generic="918158d8a01a83c1258e3f2f1be5a7331121d0c9bf4721af05fd967c4e3af975786a3ed257331addf1a16cc4613d6ceda46f2b3c5626be95b37b47a3ea48e9e3e1e42b0d547528bde53a3ea8865f1b71113baf019f2c2ca857a47909ccec96d18396c31dfee8023862448cad47765416be454a94e1f9f16163d380450b10dd0a2c022da4595e6bb72a18db93fa0b89f0b10da6ba42199b9fde175e8865e71ce527d9ff6f0042a8c045a6c865947bbde610f609d2be53bd27902a95bb3032bbaa2d016c45c2111ac5ec255d4739626dc67424f8bf0cf2223f92715fea152770a0776b6f31bef2", @generic="1efba33fd7f94d57d99fa3e2c0c75a71e657faf187df3eb36619075572763628eed0f34583e10fb9908560257dcd860f28fcfb630c70cd1f6e9619069f0d857f24f6fabc3669943dd8bd0ec7c43538ce077d318ae32fb00c921cbc350daedb80295acc75ccd77d0161c29ac7b2c6b2262f79fa753b3b1fedb9e2e5ed011ad3064c4683fab18c5e2480"]}, @generic="15acb8c96ada7b67e76df9bb1248c84c2856346d177a10e5ced9f004d9d8d4f88bff4ad781ce5d6d40df", @nested={0x118, 0x131, 0x0, 0x1, [@typed={0xef, 0x1, 0x0, 0x0, @binary="d61b7dc6e2b70a2a5163efba28b3ccb229ebfe0d812c0cd2523d1c083e8f97d68f15dbba09acc3ede0f57e9b3bab5d9b6b5e04c3e4d5891b46e940597b5a774a9d547a4ed23bae9865752493e124393474d2e254d9851c2738a5459439007e3b3e43e2cc78d19c342c4fb3ca865eb79d2a3c35d48a0d82c0387556ab05606ef63afd6fce1760458f65189218ab7b9ad4d13bcc4285312614976e65c8b6caf27b2aae6d5219b8295d8daeb269fe593a63b44b74eb40665f94df1c6f4c41be82a12d0eb120d09cc994bdf42605c8625263089e8768cb81711906d7c820d612aa50e2d0dd7bc770fa1eb5005e"}, @typed={0xc, 0x55, 0x0, 0x0, @u64=0x7fff}, @nested={0x4, 0xc8}, @typed={0x8, 0x12e, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x13f, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x22}]}, @generic="fde2db425eee02"]}]}, 0x378}, 0x1, 0x0, 0x0, 0x800}, 0x44080)
setsockopt$auto(r0, 0x11b, 0x6, 0xffffffffffffffff, 0x0)
unshare$auto(0x40000080)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0x240007, 0x19)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/swradio8\x00', 0x101000, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x5, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000480)="b1c0254bd89f8d0b259d4e8871bcc40ef2a459fe6952433ed91fdff6fccb4864597156aaf463a6ae6cf947db2b5eb166e9f91e4d770ddf1fe0790195447042848fb8f29ca7668cbad2599b3633bfb47264ae8de8b6ac16ec954b7730f5ca6ec186de435193f971c471b1a56510aaa3c4608099e4b8dcd204d8ad55a3596343e47220eeb8cdb1788378213f01"}}}, 0x2, &(0x7f0000000540)={{0xa, 0x1}, {0x5, 0x9}, 0x0, 0x0, 0xfffffffffffffffa, 0x6, 0x100, 0xfc2, 0x5, 0xf, 0x7, 0x8000004, 0xff2, 0xf47, 0x6, 0x200008c})
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)={0x20, r7, 0x1, 0x70bc2f, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x5}]}]}]}, 0x20}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)

2m40.4913685s ago: executing program 5 (id=1961):
keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000100)={0x105, 0x0, [0x359f, 0x9b4d, 0x7f], 0x2, 0xc})
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, 0x0, 0xe00, 0x0)
read$auto(r2, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0)
mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002)
close_range$auto(0x2, 0x8, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2)
sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYBLOB], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000)
waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8})
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x8, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x804, 0x1, 0x1b)
madvise$auto(0x866d, 0x7fff, 0x9)
madvise$auto(0x0, 0x20499d, 0x9)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5)
timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6)
mq_open$auto(0x0, 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000})

2m39.636088136s ago: executing program 0 (id=1962):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x38}, 0x4000)

2m39.078524533s ago: executing program 5 (id=1963):
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004811}, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x2, 0x4)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c8008", @ANYRES32=r0, @ANYBLOB, @ANYRES32], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2m39.051763374s ago: executing program 3 (id=1964):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0)
read$auto(r1, 0x0, 0x900000000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0xc, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0)
mmap$auto(0x0, 0x400008, 0xe0, 0x100000009b72, 0xffffffffffffffff, 0x3)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen_full\x00', 0x18040, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r3 = open(0x0, 0x261c2, 0x84)
close_range$auto(0x2, 0x8000, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
io_uring_setup$auto(0x9, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r6 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'wg0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x4, 0x401, r6, @relative_id=0x13, 0xe600}, 0xf)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc)
bpf$auto(0x2, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x8000000000000001, 0x9, 0x5, 0xf870e9c, 0x7, 0x8}, 0x9)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
fallocate$auto(r2, 0x1, 0x2, 0x6653)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)

2m38.656018417s ago: executing program 5 (id=1965):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0x9, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7)
close_range$auto(0x2, r0, 0x0)
mmap$auto(0x3, 0x1000000002020009, 0x80000000000004, 0xeb5, 0xffffffffffffffff, 0x6)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r3, 0x0, 0x800)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r3)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r3)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x14, r4, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000)
r5 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f00000000c0)={@siginfo_0_0={0xc, 0x10000, 0xe0, @_timer={0xffffffffffffffff, 0x800, @sival_int=0x3, 0x4}}}, 0xe02, &(0x7f00000002c0)={{0xfffffffffffffffc, 0x6}, {0x4, 0x5}, 0x1, 0x8, 0x80000000, 0x5, 0x0, 0x8, 0x0, 0x7fffffffffffffff, 0x4, 0x202e, 0x9, 0xfffffffffffffffd, 0x6, 0x10})
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
r7 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x1, 0x0)
recvmmsg$auto(r7, &(0x7f0000000280)={{&(0x7f0000000040)="4cfaebf5f4376b8e3e2d2296ebecfd771b816a971481aaef55ca08a37ec486c2e7d5b1cae1eacf34222f4387d92cf861abd216d292cdca571782b811b8cbd85541a7d4e7fcb0d72995b4c5b35c965425d4d2d9c18eb4be5bad5ab8c86719737efdb7e4a0dcbe4c253717c948153a5010352263534c4afea2799be2145f47523ff729436548debe05774684c9ccb41f3a2a4967454a48548dc91b91e3a14456b2201b8bbcdf787de70706ca3ae0c740d8fb9827791cdf2112e9182d1e41815697e0a1a16bd70cc8a89428d013f1a4912b1edad6c3cd80aaa89898c2e89f21087c30293ce676d9d1711f8447eb0cc41ce6e073756d55", 0x394, &(0x7f0000000180)={&(0x7f0000000140)="2e6e807619ea684f58d888c18fdb14bc86ee22047c6b7d4dba614ca0a22f86f1d4a6a6b4c3f9b72b8815e25acad55f0b99ef34c06978", 0x10}, 0x7, &(0x7f00000001c0)="00f1e78236a2e0fe08932be90e6c0cdc072287ac48c3e81390e70ce15688b9e75bfa72458c5452b690baa50222dcb82518884def97c8f6c874535239db38874cf853365771b402fd7945a6e8b5f86e68c52edf670add28db65ccb8e43c9b1a47c853b65f3fc34b7b50438445cd05c702296f8a52ba891e525d34766760290d082632c60e0102c013428039934da5205870ee879a11cacb140c7b40a01e", 0x18b52ecf}, 0xfffeffff}, 0x1d3f, 0x694, &(0x7f00000002c0)={0x2, 0x9})
r8 = mq_open$auto(&(0x7f0000001340)='\x00', 0x99, 0x5, &(0x7f0000001380)={0x4, 0x4, 0xe, 0xa28})
io_uring_register$auto_IORING_REGISTER_CLOCK(r8, 0x1d, &(0x7f00000013c0)="e1f6e8b43cbfdbf10726a18032a27ba2c617b171c56070c2154bcf6f9ac49bd67acf2ba8281d18bf9998e6ef844cdde70615f818935415a2e8337c5e2604e7c9887e85853ed80437c21893a0333119d721cd2ac131d8fa44d23003d570afd7752da091ea64f5df404ae5209628275989bc99db5c28fa38472f6e508b4ccbc9a0375f0ceb02d5804c8b194f8e99c2ad154d27ad685216bbc9a4ac3ca37e", 0x8)
ioctl$auto_TIOCGSERIAL(r8, 0x541e, &(0x7f0000001480)="d6d5c35fb20bb75e0b4abcd4045b364a87d9c57160ecfc0c4023b0a3dda64c59466d26ea052f9c90efc358")
ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4058587a, &(0x7f0000002700)={{<r9=>r7, &(0x7f00000014c0)="791b899a4ade49b61d7dd12ddb5c69b356f52fdf70a7125d1e467b66bddac894ab150e9c7c42f833ded9d317269423c819b0273f3ed8adb08c7dacce140532cf019fa3d4b2c87531c370c3796cca1615487303fead178797eba239ce5627f1b43ba713bd38a8755eb30ae4fdf738a2f77781aa78143b7e660461d6ae41d7eeaa54374dec005c2c7fb85d75ed73097c598e93d803e86e186465cece516099492c26ec0c8ff43325328b1f4e0f9df417abc9cef06d7e0910824b4b1711179aa3417cdcf705c7c7f945b2b2", 0x5, 0x0, 0x9, &(0x7f00000025c0)="6ac61fd74206fd2556c6a78a67daf7861a841b8aff26e1181e7ac515a7429ebab9cbd9e7f7c36f920a02a4e365cff381bd937bf5d278b1a4760b4130689a439ae7c58993e984153b6689185ed5231a9d31f9c5f38e2daaa1d0f3f154c747704be2a48f9c3808e41092", &(0x7f0000002640)=0x120}, {[0x9, 0x2, 0x2, 0x4]}, 0x0, 0x5, &(0x7f0000002680)="481bc4918eaa88d789e696ed9e973cd822a9574c66a16c6af3c3af93f63937ec1d80a35e8f06dc89cc60a8a361dc60afe74a432750a2255ac884db27e559a16217c32b39"})
ioctl$auto_VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000002800)=0x94)
sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f0000002900)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002980), r8)
msgctl$auto_MSG_STAT(0x4000, 0xb, &(0x7f0000002a40)={{0xde, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x4, 0x3fd4, 0x8}, &(0x7f00000029c0)=0x9, &(0x7f0000002a00), 0x4, 0xffffffffffffff0c, 0x3, 0x3, 0xfffffffffffffffb, 0x9, 0x519b, 0xaa8, @inferred, @raw=0xa})
waitid$auto(0x3, r8, &(0x7f0000002b00)={@siginfo_0_0={0x6, 0x5, 0x1, @_sigsys={&(0x7f0000002ac0)="5f3eba961ffac708d4deadf8001e55", 0x8, 0x4}}}, 0x3ff, &(0x7f0000002b80)={{0x9, 0x5}, {0x5, 0x3}, 0x8001, 0x3a6, 0x7, 0x3, 0x3, 0x5, 0x200, 0x9, 0xe5a, 0x7, 0xe, 0x4, 0x6, 0xfffffffffffffc01})
ioctl$auto_LOOP_CTL_ADD(r8, 0x4c80, r5)

2m38.29898485s ago: executing program 3 (id=1966):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0)
io_uring_register$auto_IORING_UNREGISTER_FILES(r0, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3)
sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)
ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0)
ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0)
prlimit64$auto(0xffffffffffffffff, 0x101, 0x0, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48041, 0x0)
write$auto(r4, 0x0, 0x6)
unshare$auto(0x40000080)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)="b2", 0x1)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0)
sendfile$auto(r1, r6, 0x0, 0x1)
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
setsockopt$auto(0x3, 0x1, 0x48, 0x0, 0x9)
socket(0x10, 0x80002, 0x0)
bind$auto(r2, &(0x7f0000000140)=@generic={0x1a, "9300000004000000000000000091"}, 0x6a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vgem/driver_override\x00', 0x0, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000)

2m37.750434604s ago: executing program 5 (id=1967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48}, 0x4000)

2m35.107714334s ago: executing program 3 (id=1968):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
pipe$auto(0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$auto(r0, 0x80006a, 0x82000, 0x0, 0x0)
socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x2200000c)
socket(0x2, 0x3, 0x6)
setsockopt$auto(0x4, 0x0, 0x16, 0xfffffffffffffffe, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x16b101, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0)

2m34.222282402s ago: executing program 3 (id=1969):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001600)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004000d}, 0x24048804)
syz_clone3(&(0x7f0000000400)={0x148000400, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0xd0904100, 0x0, 0x0, 0x0, 0x0, 0x0)
kill$auto(0x0, 0x21)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe2180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r5)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0)
sendmsg$auto_NL802154_CMD_SEND_BEACONS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

2m32.466497695s ago: executing program 34 (id=1949):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x3e}, 0x4000)

2m24.443228296s ago: executing program 35 (id=1962):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x38}, 0x4000)

2m22.469287183s ago: executing program 36 (id=1967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48}, 0x4000)

2m18.648760843s ago: executing program 37 (id=1969):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001600)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004000d}, 0x24048804)
syz_clone3(&(0x7f0000000400)={0x148000400, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0xd0904100, 0x0, 0x0, 0x0, 0x0, 0x0)
kill$auto(0x0, 0x21)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe2180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r5)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0)
sendmsg$auto_NL802154_CMD_SEND_BEACONS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

1m27.901748301s ago: executing program 7 (id=2067):
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x40000000)

1m27.028854315s ago: executing program 7 (id=2070):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, 0x0, 0x6a)
r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd04, &(0x7f00000001c0))
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/4096, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x6, 0x1d2c, 0x6, 0x4, 0x15f4da0d, 0x6, 0x9, 0x1, 0x8, 0x4, 0x5, 0x9, 0x4e, 0x40000000000009]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x8081, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x1)
fadvise64$auto_POSIX_FADV_NOREUSE(0xffffffffffffffff, 0x1, 0x2c3, 0x5)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa})
ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0)

1m25.841561265s ago: executing program 7 (id=2072):
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
set_mempolicy$auto(0x5, &(0x7f0000000400)=0xfffffffffffffffd, 0x3b)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
ioctl$auto(0xffffffffffffffff, 0x540a, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x3, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0)
r2 = open(0x0, 0x161342, 0x115)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0)
semctl$auto_IPC_INFO(0x2, 0x8, 0x3, 0x3)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x7)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
msgctl$auto(0x2, 0xec, &(0x7f00000000c0)={{0x1, <r4=>0xee00, 0xffffffffffffffff, 0x7ff, 0x0, 0x7ff, 0xff00}, &(0x7f0000000000)=0x80, &(0x7f0000000080)=0x1, 0x0, 0x3, 0x7f, 0x1, 0x1, 0xb33f, 0x7, 0x1, @raw=0x81, @inferred=0xffffffffffffffff})
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xb, 0x9, 0x63, r4, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000080a, 0x0, 0x13, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002})
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
copy_file_range$auto(r1, 0x0, r2, 0x0, 0x2400000000, 0x0)
utime$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0xffff, 0xd73})

1m24.01791242s ago: executing program 7 (id=2077):
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x7, 0x0, 0xffffff1a, 0x2101}, "654c6dbcd44d3098384410ba9f74c82a3fa6c3ccf1bf000000cd00"})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/edac_core/parameters/edac_mc_poll_msec\x00', 0x60301, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/neigh/hsr_slave_1/base_reachable_time_ms\x00', 0x101000, 0x0)
read$auto(r2, 0x0, 0x1ff)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
eventfd2$auto(0x23b, 0x7)
newfstatat$auto(r3, 0x0, 0x0, 0x3)
madvise$auto(0x4, 0x5, 0xfff)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3)

1m20.405742455s ago: executing program 7 (id=2083):
keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000100)={0x105, 0x0, [0x359f, 0x9b4d, 0x7f], 0x2, 0xc})
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, 0x0, 0xe00, 0x0)
read$auto(r2, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0)
mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002)
close_range$auto(0x2, 0x8, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2)
sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYBLOB], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000)
waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8})
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x8, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x804, 0x1, 0x1b)
madvise$auto(0x866d, 0x7fff, 0x9)
madvise$auto(0x2000000, 0x20499d, 0x9)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5)
timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6)
mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000})

1m18.860221426s ago: executing program 7 (id=2088):
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000)
timer_create$auto(0x0, 0x0, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r2, 0x300000000000)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0xfffffffffffffffe, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0)
socket(0x2, 0x80805, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0)
ioctl$auto(0x3, 0xc0303e03, r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x3, 0x15)
write$auto(r6, &(0x7f0000000000)='-\x00', 0x2fb)
r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r6)
sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01e46cb7b7e6831b0a1672b8d588"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894)
unshare$auto(0x40000080)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock$auto(0xfbea, 0x7fffffffffffffff)

1m3.680064751s ago: executing program 38 (id=2088):
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000)
timer_create$auto(0x0, 0x0, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r2, 0x300000000000)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0xfffffffffffffffe, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0)
socket(0x2, 0x80805, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0)
ioctl$auto(0x3, 0xc0303e03, r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x3, 0x15)
write$auto(r6, &(0x7f0000000000)='-\x00', 0x2fb)
r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r6)
sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01e46cb7b7e6831b0a1672b8d588"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894)
unshare$auto(0x40000080)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock$auto(0xfbea, 0x7fffffffffffffff)

39.983592241s ago: executing program 8 (id=2168):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0xa, 0x4)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dmmidi2\x00', 0x121001, 0x0)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
r1 = fanotify_init$auto(0xc00, 0x2000000000002)
fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)
write$auto(r0, 0x0, 0x100000e3d9)
r2 = gettid()
setpriority$auto_PRIO_PROCESS(0x0, r2, 0x3)
fcntl$auto(r1, 0x0, r2)
mmap$auto(0x0, 0x400008, 0x8, 0x9b72, r0, 0x800008000)
r3 = socket(0xa, 0x2, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0)
pread64$auto(r4, 0x0, 0x488, 0x7)
setsockopt$auto(r3, 0x29, 0x19, 0x0, 0x56b)
socket(0x28, 0x0, 0x3)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000)
socket(0x18, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
socket(0xa, 0x801, 0x84)
socket(0x18, 0x5, 0x1)

39.413932618s ago: executing program 8 (id=2169):
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0)
bind$auto(0x3, 0x0, 0x6a)
r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0xa0, 0x6, 0x5, 0xd102, 0x5, 0x80000, 0x0})
ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0xc0403d11, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x2000e, 0x9, 0x4, 0x100000006, 0x1000000001ff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x200007, 0x1d)
pwrite64$auto(0xc8, 0x0, 0xfded, 0x6)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
r3 = socket(0x2, 0x801, 0x106)
getsockopt$auto(r3, 0x11c, 0x2, 0x0, 0x0)
socket(0x2b, 0x3, 0x7)
socket(0x29, 0x5, 0x0)
madvise$auto(0x6, 0x1, 0x1)
open(&(0x7f0000000040)='./cgroup\x00', 0x3480a0, 0xb5d1af1605322de0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram0\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
close_range$auto(0x2, 0x8, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)

38.103671281s ago: executing program 8 (id=2172):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x800000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000)
write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000fc0)={0x18, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000)
r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0x0)
r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/017/001\x00', 0x802, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, 0x0)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto_nsim_psample_enable_fops_psample(r1, 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x4, 0xf, 0x772, 0xfffc, 0x2, 0x1000, 0x0})
ioctl$auto_MEMGETREGIONCOUNT(r1, 0x80044d07, &(0x7f00000000c0)=0x7ff)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0)
sysfs$auto(0x6, 0x100000000000030, 0x1000)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)

35.336839983s ago: executing program 8 (id=2182):
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
set_mempolicy$auto(0x5, &(0x7f0000000400)=0xfffffffffffffffd, 0x3b)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
ioctl$auto(0xffffffffffffffff, 0x540a, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x3, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0)
semctl$auto_IPC_INFO(0x2, 0x8, 0x3, 0x3)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x7)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000084)
msgctl$auto(0x2, 0xec, &(0x7f00000000c0)={{0x1, <r4=>0xee00, 0xffffffffffffffff, 0x7ff, 0x0, 0x7ff, 0xff00}, &(0x7f0000000000)=0x80, &(0x7f0000000080)=0x1, 0x0, 0x3, 0x7f, 0x1, 0x1, 0xb33f, 0x7, 0x1, @raw=0x81, @inferred=0xffffffffffffffff})
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xb, 0x9, 0x63, r4, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000080a, 0x0, 0x13, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002})
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
copy_file_range$auto(r1, 0x0, r2, 0x0, 0x2400000000, 0x0)
utime$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0xffff, 0xd73})

33.760323507s ago: executing program 8 (id=2187):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x87)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x3, 0x1, 0x52, 0x0, 0x9)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_SEND_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x14}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x3}]}, 0x24}}, 0x880)
mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2)
mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f0000000200))

33.241178763s ago: executing program 8 (id=2189):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f00000003c0), r0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
ioctl$auto(r1, 0x9000643c, 0xc35)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00')
ioctl$NS_GET_PARENT(r2, 0xb701, 0x0)
r3 = socket(0x2a, 0x2, 0x9)
sendto$auto(r3, 0x0, 0x402, 0x0, &(0x7f0000000700)=@generic={0x2a, "e2e1000000000000000400f100"}, 0x9)
mmap$auto(0xfffffffffffffffc, 0x400008, 0x2, 0x400000000809b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
pwrite64$auto(0xc8, 0x0, 0x11, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
clock_settime$auto(0x14, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r4)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r3)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000bad7c7e61d71f611e55dd0ae3cf39fa0df6b3f10ebaacfaf82b63ea1d2de4987e922fbe11817d3dc076b15724c691d4fdaaef68e1c2ff47a82b0816b8af94bfe02f7dfeb4058d352edc80a148e35ec21816bdeee2303645f43b7d8d0d1ff60653626a7de8252feaab3747ebed02f9342e74d185ab4ba5fbac4d7e18fab3d4810a93002e8a3a32b8cee44432cb9a630bffdf0351036833100debf3c6c58acaaf1f3ff409928d204c370fcaa7d2d877993327ff7", @ANYRES16=r5, @ANYBLOB="04002bbd7000ffdbdf250800000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x25)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty39\x00', 0x101e81, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x400, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, r6, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0xf4}}, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
getsockopt$auto(r6, 0x1, 0x4c, 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x608000, 0x4)

17.347104186s ago: executing program 39 (id=2189):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f00000003c0), r0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
ioctl$auto(r1, 0x9000643c, 0xc35)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00')
ioctl$NS_GET_PARENT(r2, 0xb701, 0x0)
r3 = socket(0x2a, 0x2, 0x9)
sendto$auto(r3, 0x0, 0x402, 0x0, &(0x7f0000000700)=@generic={0x2a, "e2e1000000000000000400f100"}, 0x9)
mmap$auto(0xfffffffffffffffc, 0x400008, 0x2, 0x400000000809b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
pwrite64$auto(0xc8, 0x0, 0x11, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
clock_settime$auto(0x14, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r4)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r3)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000bad7c7e61d71f611e55dd0ae3cf39fa0df6b3f10ebaacfaf82b63ea1d2de4987e922fbe11817d3dc076b15724c691d4fdaaef68e1c2ff47a82b0816b8af94bfe02f7dfeb4058d352edc80a148e35ec21816bdeee2303645f43b7d8d0d1ff60653626a7de8252feaab3747ebed02f9342e74d185ab4ba5fbac4d7e18fab3d4810a93002e8a3a32b8cee44432cb9a630bffdf0351036833100debf3c6c58acaaf1f3ff409928d204c370fcaa7d2d877993327ff7", @ANYRES16=r5, @ANYBLOB="04002bbd7000ffdbdf250800000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x25)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty39\x00', 0x101e81, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x400, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, r6, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0xf4}}, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
getsockopt$auto(r6, 0x1, 0x4c, 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x608000, 0x4)

14.956843025s ago: executing program 6 (id=2236):
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3)
timer_create$auto(0x8, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x4, 0xd3, 0xdc, 0xebe, r1, 0xfffffffffffffff9)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x155)
fcntl$auto(r4, 0x400, 0x0)
r5 = socket(0x11, 0x2, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0xa, 0x8})
sendmmsg$auto(r5, 0x0, 0x2, 0x100fe)
ioctl$auto_VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)=0x4000000)
select$auto(0xf329, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1ff, 0x4, 0x6cf212e2, 0x15f4da0c, 0x1, 0x800, 0x8, 0x9, 0x7, 0x0, 0x5, 0x2, 0x3]}, 0x0)

11.143079297s ago: executing program 1 (id=2241):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf2504000000050011"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820)
r2 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/sessionid\x00', 0x101400, 0x0)
read$auto_proc_sessionid_operations_base(r2, &(0x7f00000014c0)=""/4096, 0x1000)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0)
read$auto_mon_fops_binary_mon_bin(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x20, r5, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x4000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r7 = socket(0x2, 0x2, 0x1)
connect$auto(r7, &(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x55)
io_uring_setup$auto(0x6, 0x0)
connect$auto(r7, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x2}}, 0x7f)
write$auto(0x3, 0x0, 0xfdef)
sendmsg$auto_SEG6_CMD_SETHMAC(r6, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="92fc80b7ac6993a7c65ee183", @ANYBLOB="a9e127bd050000000000000000000500060005000000080003000800000005000500fd000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000015}, 0x8810)
mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000)
r8 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r8, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0)
r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
sendfile$auto(r9, r9, 0x0, 0x2)
ioctl$auto_MON_IOCG_STATS(r3, 0x80089203, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x88)

9.790523369s ago: executing program 1 (id=2244):
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mbind$auto(0x0, 0x800605, 0x7, &(0x7f0000000100)=0xfffe, 0x3, 0x3)
timer_create$auto(0x8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0001, 0x0)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r2, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = open(&(0x7f0000000180)='./file0\x00', 0x82240, 0x154)
fcntl$auto(r3, 0x400, 0x0)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="34020000", @ANYRES16=0x0, @ANYRESOCT=r1], 0x234}, 0x1, 0x0, 0x0, 0x40b4ff741f26f506}, 0x0)
socket(0x11, 0x1, 0x4)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0xa, 0x8})
sendmmsg$auto(r1, 0x0, 0x2, 0x100fe)

9.260800896s ago: executing program 9 (id=2245):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14410000", @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf250b000003"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x4)
socket(0x27, 0xa, 0x364e3bc4)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_FIOASYNC(0xffffffffffffffff, 0x5452, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x4, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0)
socket(0x2b, 0x1, 0x0)
socket(0x23, 0xffffffffffffffff, 0x8)
socket(0x28, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@generic={0x1d, "96ffc31d0e0196d7c4164466ee47"}, 0x0)
getxattrat$auto(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0, 0x10)
clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_setup$auto(0x1, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)

8.808915875s ago: executing program 6 (id=2246):
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0x52, 0x0)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0)
ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x1, 0x80000006, 0x9b72, 0x2, 0x8000000000000000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
write$auto(r2, 0x0, 0x41000008004)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r3)
iopl$auto(0x3)
clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0)
read$auto(r4, 0x0, 0x7)
ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x3, 0xfffffffffffffefa}, {0x805, 0x5, 0x2}, {0x7, 0x0, 0x2}])
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
ioctl$auto_X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000080)=[0x3, 0x0, 0x0, 0x35, 0x2, 0x4543, 0x2, 0x6902351d])
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)={0x7, 0x8, 0x2500, 0x1b, &(0x7f0000000100)="db9f503749996783baa709ddeff53b13e297848619deada8cf55936828f45716fd6293278389feb13af0f4da8bd0c2a7175a2f5d01bdcced16ebc41147a13679fe448635db130cca8dc27a05842893740e2f829910f2451c10e9f2d02af6ba696b8ea9da03695354151b1435c7d331988d18b9d4bbc9d9251353a101f5dc250eb23c8851b80d7dfe2e02dd66b93580969e4f7bae2cebab4953ad15908a2fb3692889f2fa2f1809ac9cf00c8829d17a7e6ea8caeb96ab47d7243a1fc6c6172328a49d1d652b8b045cc1dcc74bf2c3abf45cce48f9aef705c07a67ae2764d0ef135617164fd7626ec7f914d9aa9d7681929f5c2ff02e2f3e956f9dbc29cb373c", 0x1, 0xf, 0x4, @stream_id=0x7f, 0x80, 0x4, &(0x7f0000000240)="05bb53998e9654076427f36afd75ef2ad594f15e3cbf809e08d298783842d039ef8c72eb04b2ede2126a06f60623bd650dc63df93f6be5d751ed907636fcdf5e03535259056af9ded421848df676076a8b5a780e9e2a2ff5ec6f9590e6309f7e824a5306cf40bf064871f6bd2bb0203ca850af0758fe88a1f8011a74dd8ae9f54edfc6be8e6acb5a806794fea31ad3e21da0bbda397c99ece11ad8c38738b026d67e94710ee594e28d", [{0x0, 0x3ff, 0x10001}, {0x40, 0x9, 0x4}]})
syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0)
getresuid$auto(0x0, 0x0, 0x0)

7.5272377s ago: executing program 1 (id=2247):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0)
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
mq_open$auto(0x0, 0x83, 0x7, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/loop13\x00', 0x0, 0x0)
fstat$auto(r0, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4610, 0x0)
mmap$auto(0x0, 0x400008, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x407, 0x1, 0x80000000044f, 0x7, 0x9, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x89, 0x25, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffff6, 0x500000000000000, 0x0, 0x30, 0xffffffffffffff14, 0x864, 0xe, 0x22003, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x4000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffc00000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x5]}, 0x9, 0xd)
r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0))
prctl$auto(0x1000000003b, 0xffffffffffffffff, 0x4, 0x3, 0x407)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0)
ioctl$auto(r3, 0x9000643a, 0xc35)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x400101, 0x40, 0xd}, 0x18)
fremovexattr$auto(r4, &(0x7f0000000000)='system.posix_acl_access\x00')
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
getsockopt$auto(0xffffffffffffffff, 0x9, 0x1, &(0x7f0000000080)=']\x00\x00\xff\xff\xff\xff\xff\xff', &(0x7f00000000c0)=0x4)
unshare$auto(0x40000080)
write$auto(0xffffffffffffffff, 0x0, 0x7)
r5 = socket(0x2, 0x2, 0x0)
shmget$auto(0x5, 0x5, 0x7)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
read$auto(r5, 0x0, 0xfdef)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/capability\x00', 0x129102, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x7ad82, 0x0)
ioctl$auto(r1, 0x3, 0xffffffffffffffff)
prctl$auto(0x41, 0x3, 0x0, 0x7, 0x0)

6.817631448s ago: executing program 9 (id=2248):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd04, &(0x7f00000001c0))
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/4096, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
timer_create$auto_CLOCK_TAI(0xb, 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x6, 0x1d2c, 0x6, 0x4, 0x15f4da0d, 0x6, 0x9, 0x1, 0x8, 0x4, 0x5, 0x9, 0x4e, 0x40000000000009]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x8081, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x1)
fadvise64$auto_POSIX_FADV_NOREUSE(0xffffffffffffffff, 0x1, 0x2c3, 0x5)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa})
ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0)

5.899558448s ago: executing program 1 (id=2249):
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
set_mempolicy$auto(0x5, &(0x7f0000000400)=0xfffffffffffffffd, 0x3b)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
ioctl$auto(0xffffffffffffffff, 0x540a, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x3, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0)
semctl$auto_IPC_INFO(0x2, 0x8, 0x3, 0x3)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x7)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
msgctl$auto(0x2, 0xec, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xb, 0x9, 0x63, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000080a, 0x0, 0x13, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002})
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
copy_file_range$auto(r1, 0x0, r2, 0x0, 0x2400000000, 0x0)
utime$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0xffff, 0xd73})

5.839643178s ago: executing program 6 (id=2250):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x243e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptys5\x00', 0x167640, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyde\x00', 0xa0102, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
socket(0x22, 0x1, 0x0)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x23, 0x0)
close_range$auto(0x2, 0xa, 0x0)
clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0)
adjtimex$auto(&(0x7f0000000480)={0x101, 0x0, 0x1, 0x5, 0x7, 0x7f, 0x860, 0x0, 0x1, 0x45079941, 0x8, {0x47a8, 0x100000001}, 0x4, 0x3, 0x9, 0x9000000, 0x0, 0x8, 0x46fa, 0xffffffffffffffff, 0xb4, 0x800, 0xf9})
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
fspick$auto(0xffffffffffffffff, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x238940, 0x0)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0x8)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88282, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000005c40)='/dev/nbd9\x00', 0x2000, 0x0)
fadvise64$auto_POSIX_FADV_SEQUENTIAL(r1, 0x86, 0x8, 0x2)
fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553)
mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)

5.568792531s ago: executing program 9 (id=2251):
r0 = io_uring_setup$auto(0x52, 0x0)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0)
ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x1, 0x80000006, 0x9b72, 0x2, 0x8000000000000000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
write$auto(r2, 0x0, 0x41000008004)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r3)
iopl$auto(0x3)
clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0)
read$auto(r4, 0x0, 0x7)
ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x3, 0xfffffffffffffefa}, {0x805, 0x5, 0x2}, {0x7, 0x0, 0x2}])
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
ioctl$auto_X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000080)=[0x3, 0x0, 0x0, 0x35, 0x2, 0x4543, 0x2, 0x6902351d])
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)={0x7, 0x8, 0x2500, 0x1b, &(0x7f0000000100)="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", 0x1, 0xf, 0x4, @stream_id=0x7f, 0x80, 0x4, &(0x7f0000000240)="05bb53998e9654076427f36afd75ef2ad594f15e3cbf809e08d298783842d039ef8c72eb04b2ede2126a06f60623bd650dc63df93f6be5d751ed907636fcdf5e03535259056af9ded421848df676076a8b5a780e9e2a2ff5ec6f9590e6309f7e824a5306cf40bf064871f6bd2bb0203ca850af0758fe88a1f8011a74dd8ae9f54edfc6be8e6acb5a806794fea31ad3e21da0bbda397c99ece11ad8c38738b026d67e94710ee594e28d", [{0x0, 0x3ff, 0x10001}, {0x40, 0x9, 0x4}]})
syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0)
getresuid$auto(0x0, 0x0, 0x0)

4.706639235s ago: executing program 6 (id=2252):
mknod$auto(0x0, 0xcb, 0xfffffffa)
execve$auto(0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xffffffffffffffff, 0x3fd, 0x7ffd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = open(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103040, 0xd1)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
ioctl$auto_BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x8, {0x8, 0x0, 0x1ff, 0x10000, 0x352}})
read$auto(r1, 0x0, 0x20)
r2 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r2, 0x6, 0x1, &(0x7f0000000000)='l2tp\x00', 0x7)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0)
mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd)
unshare$auto(0x8000000)

3.767580426s ago: executing program 1 (id=2253):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x1, 0x400008, 0xdf, 0x15, r0, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
r1 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x3, 0x0)
fcntl$auto_F_NOTIFY(r0, 0x402, 0x8)
nanosleep$auto(&(0x7f0000000180)={0x3, 0x100000000044d4}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r2, 0x1, &(0x7f0000000000))

2.744904664s ago: executing program 9 (id=2254):
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x9a28)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r2 = inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(r2, 0x0, 0x1000e6e)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dmmidi2\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe98, 0x0, 0x0, &(0x7f0000000040)={[0x54e, 0x10000000000005, 0x1, 0x8fd6, 0x948b, 0x5, 0x3392, 0x4, 0x3, 0x3, 0xffffffff, 0x9, 0x3, 0x4, 0x4, 0xfffffffffffffffe]}, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffff, 0x3, 0xffffffffffffffff, 0x8, 0x5, 0x8000001f, 0x7, 0x6d3e, 0x1, 0x2, 0x6]}, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
waitid$auto_P_PIDFD(0x3, r2, &(0x7f0000000340)={@siginfo_0_0={0x0, 0x81, 0x9, @_rt={0x0, 0x0, @sival_ptr=&(0x7f0000000640)="0de4c5c5ad0b640ec78439ac6411c4749553aa4b30690b7d3f60ff29aefb6c7efd524edaa13ddeb640bab7c382454cbc466445fc244d15491814637370085f124fc2dee5c7781db894d75954f4eafe9b33d1649f6c7555af6f39698035823f3666381e0f9f40eecde74591e7d4"}}}, 0xd, &(0x7f00000003c0)={{0x1000, 0x7ce}, {0x10001}, 0x80000001, 0x9, 0x800, 0x0, 0x99e1, 0x9, 0x3ff, 0x200000000009, 0xbb, 0x8205, 0x3, 0xe, 0x0, 0xe})
ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, 0x0)
msgctl$auto_MSG_INFO(0x5, 0xc, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r5, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r5, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
read$auto_proc_fail_nth_operations_base(r1, &(0x7f0000000040)=""/221, 0xdd)
mmap$auto(0x6, 0xffffffff, 0x400005, 0x10040eb1, 0x602, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)

2.443873982s ago: executing program 6 (id=2255):
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
fcntl$auto(0x3, 0x4, 0xa553)
r0 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/gid_map\x00', 0x20002, 0x0)
write$auto_proc_gid_map_operations_base(r0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FIONCLEX(0xffffffffffffffff, 0x5450, 0x5)
socket(0x1e, 0x0, 0x9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x144000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0xa, 0x2, 0x73)
sendto$auto(r1, 0x0, 0x4, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e208004002de00"}, 0x1c)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x6a)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr0\x00', 0x41, 0x0)
ioctl$auto(r2, 0x540a, 0x1)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e32, @rand_addr=0x64010101}, 0x51)
r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec29\x00', 0x80, 0x0)
ioctl$auto_CEC_ADAP_G_CAPS(r3, 0xc04c6100, &(0x7f0000000180)={"277218c178af9e4660783d6a64eba2e1ebe8bbe2623e391d110a60faba43b40a", "428523ecd76dcdf440e48b85b3a8ca5e803d2962214568a2aab04cdc2dc0a879", 0x4, 0x7, 0x6})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)

1.970589139s ago: executing program 1 (id=2256):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/serial8250/driver_override\x00', 0x22b42, 0x0)
socket(0x2, 0x1, 0x0) (async)
r1 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2000a, 0x802, 0x7ffd, 0xffffffffffffffff, 0x46)
r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r3 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
write$auto_cachefiles_daemon_fops_internal(r3, &(0x7f0000000300)="a04f", 0x2) (async)
write$auto_cachefiles_daemon_fops_internal(r3, &(0x7f0000000300)="a04f", 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x1, 0x1fd, 0x7, 0x3f, 0x1000004909b6f8, 0x1ffe0, 0x7, 0x3, 0x2, 0xd, 0x3, 0x6, 0x4, 0x3, 0x9, 0x6, 0x10003, 0x7, 0x4, 0x0, 0x800007, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2]}, 0x8, 0xd) (async)
statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x1, 0x1fd, 0x7, 0x3f, 0x1000004909b6f8, 0x1ffe0, 0x7, 0x3, 0x2, 0xd, 0x3, 0x6, 0x4, 0x3, 0x9, 0x6, 0x10003, 0x7, 0x4, 0x0, 0x800007, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2]}, 0x8, 0xd)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) (async)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYBLOB="13"], 0x1ac}}, 0x4004)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r5) (async)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r5)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0)
writev$auto(r7, &(0x7f0000000240)={0x0, 0x5}, 0xa) (async)
writev$auto(r7, &(0x7f0000000240)={0x0, 0x5}, 0xa)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto(r1, 0x40045431, r1)
r8 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/mixer\x00', 0x80002, 0x0)
ioctl$auto_SOUND_MIXER_READ_RECSRC(r8, 0x80044dff, &(0x7f00000012c0)) (async)
ioctl$auto_SOUND_MIXER_READ_RECSRC(r8, 0x80044dff, &(0x7f00000012c0))
io_uring_register$auto_IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000840)="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", 0xfffffff9)
fallocate$auto(r0, 0x9, 0x6, 0x7)
r9 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x8a002, 0x0)
ioctl$auto(r9, 0x5319, r9)
sendfile$auto(r0, r0, 0x0, 0x4f64a1d2)

1.384538566s ago: executing program 9 (id=2257):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0x2, 0x3, 0xa)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54)
mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffa6}, 0x1, 0x0, 0x0, 0x20040000}, 0x880)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket(0x11, 0x3, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x7)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x81300, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/i8042/serio0/bind_mode\x00', 0xe3102, 0x0)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x783a06, 0x0)
sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9aa2738b", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082)
write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/sleep_millisecs\x00', 0x181482, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r4, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)

903.169015ms ago: executing program 9 (id=2258):
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7fffffffffffffff, 0x4)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x1)
r1 = getsockopt$auto(r0, 0x40000000029, 0x43, 0xfffffffffffffffe, 0x0)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x20008000)
sysfs$auto(0x2, 0x23, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/syscall\x00', 0x80, 0x0)
read$auto_proc_single_file_operations_base(r2, &(0x7f00000001c0)=""/164, 0xa4)
keyctl$auto(0x11, 0xfffffffd, 0x8, 0x4, 0x9)
mlockall$auto(0x800000000000005)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0xfffffffffffffffc, 0x84020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
write$auto_tty_fops_tty_io(r1, &(0x7f0000000100)="39c0922e75a58dbad48a88c418b8255603c4bbc6615f5047134f17839b0f333f6e270bea073866af237068d833ed612c21e0d41a5454f2276fafc64ed207a8029b50a79ec2b61ec82a8ce5919658f82c8102c92c1050453cc257dfa87c441ab705706142fd0f1d93d6e09c", 0x6b)
writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x10}, 0x3)
mremap$auto(0x200000004000, 0x4, 0x4, 0x3, 0x100000000)
syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0x1df, 0x9b72, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06\x11\x00\x00\x00\x00\x00\x02\x83\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2)
read$auto(r3, 0x0, 0x39b8)

530.199244ms ago: executing program 6 (id=2259):
mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x304a)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x109500, 0x0)
read$auto(r2, 0x0, 0x4b)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x11d802, 0x0)
sendmsg$auto_CGROUPSTATS_CMD_GET(r3, 0x0, 0x20000000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
setsockopt$auto(r3, 0x6, 0x1, 0x0, 0x7)
bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @local}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x14, 0x0)
r4 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram10/queue/discard_max_hw_bytes\x00', 0x68e00, 0x0)
r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa})
ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0)
writev$auto(r5, &(0x7f0000000340)={0x0, 0xda7e}, 0x9)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0)
r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x341001, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000180)={0x2, 0x2, 0x4a47, 0x81, 0x9f, 0x8, 0x0})
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x5)

0s ago: executing program 4 (id=2228):
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0)
pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x40000000)

kernel console output (not intermixed with test programs):

0007fee54b8f7c9
[  609.590219][T15236] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  609.590234][T15236] RBP: 00007fee54c13f91 R08: 0000000000000000 R09: 0000000000000000
[  609.590249][T15236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  609.590264][T15236] R13: 00007fee54de6218 R14: 00007fee54de6180 R15: 00007ffc0dd9c668
[  609.590296][T15236]  </TASK>
[  611.101796][T15286] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50
[  611.513677][T15287] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51
[  612.078395][T15293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1870'.
[  612.740646][T15288] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52
[  615.586706][T15349] FAULT_INJECTION: forcing a failure.
[  615.586706][T15349] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  615.660287][T15349] CPU: 0 UID: 0 PID: 15349 Comm: syz.2.1881 Not tainted syzkaller #0 PREEMPT(full) 
[  615.660319][T15349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  615.660333][T15349] Call Trace:
[  615.660341][T15349]  <TASK>
[  615.660350][T15349]  dump_stack_lvl+0x16c/0x1f0
[  615.660383][T15349]  should_fail_ex+0x512/0x640
[  615.660414][T15349]  _copy_from_iter+0x2a4/0x16c0
[  615.660447][T15349]  ? __alloc_skb+0x200/0x380
[  615.660469][T15349]  ? __pfx__copy_from_iter+0x10/0x10
[  615.660498][T15349]  ? netlink_autobind.isra.0+0x158/0x370
[  615.660538][T15349]  netlink_sendmsg+0x820/0xdd0
[  615.660572][T15349]  ? __pfx_netlink_sendmsg+0x10/0x10
[  615.660605][T15349]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  615.660636][T15349]  __sys_sendto+0x4a3/0x520
[  615.660660][T15349]  ? __pfx___sys_sendto+0x10/0x10
[  615.660692][T15349]  ? find_held_lock+0x2b/0x80
[  615.660736][T15349]  ? exc_page_fault+0x64/0xc0
[  615.660769][T15349]  __x64_sys_sendto+0xe0/0x1c0
[  615.660791][T15349]  ? do_syscall_64+0x91/0xf80
[  615.660818][T15349]  ? lockdep_hardirqs_on+0x7c/0x110
[  615.660845][T15349]  do_syscall_64+0xcd/0xf80
[  615.660874][T15349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.660897][T15349] RIP: 0033:0x7f204839165c
[  615.660915][T15349] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  615.660938][T15349] RSP: 002b:00007f20465cbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  615.660960][T15349] RAX: ffffffffffffffda RBX: 00007f20465cbfc0 RCX: 00007f204839165c
[  615.660976][T15349] RDX: 0000000000000020 RSI: 00007f20465cc010 RDI: 0000000000000002
[  615.660991][T15349] RBP: 0000000000000000 R08: 00007f20465cbf14 R09: 000000000000000c
[  615.661012][T15349] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  615.661026][T15349] R13: 00007f20465cbf68 R14: 00007f20465cc010 R15: 0000000000000000
[  615.661056][T15349]  </TASK>
[  617.119754][T15365] futex_wake_op: syz.0.1884 tries to shift op by -2048; fix this program
[  617.154382][T15365] futex_wake_op: syz.0.1884 tries to shift op by -2048; fix this program
[  617.220383][T15365] 0x000000000001-0x000000020000 : ""
[  617.255924][T15365] ftl_cs: FTL header corrupt!
[  617.923310][T15375] input: jJǸ���;9�%v����l��Q�	J86�� as /devices/virtual/input/input54
[  618.023581][T15375] FAULT_INJECTION: forcing a failure.
[  618.023581][T15375] name failslab, interval 1, probability 0, space 0, times 0
[  618.097717][T15375] CPU: 0 UID: 0 PID: 15375 Comm: syz.4.1886 Not tainted syzkaller #0 PREEMPT(full) 
[  618.097756][T15375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  618.097771][T15375] Call Trace:
[  618.097779][T15375]  <TASK>
[  618.097789][T15375]  dump_stack_lvl+0x16c/0x1f0
[  618.097823][T15375]  should_fail_ex+0x512/0x640
[  618.097852][T15375]  ? kmem_cache_alloc_noprof+0x62/0x720
[  618.097882][T15375]  should_failslab+0xc2/0x120
[  618.097919][T15375]  kmem_cache_alloc_noprof+0x75/0x720
[  618.097945][T15375]  ? __kernfs_new_node+0xd2/0x8d0
[  618.097979][T15375]  ? __kernfs_new_node+0xd2/0x8d0
[  618.098005][T15375]  __kernfs_new_node+0xd2/0x8d0
[  618.098038][T15375]  ? __pfx___kernfs_new_node+0x10/0x10
[  618.098074][T15375]  ? find_held_lock+0x2b/0x80
[  618.098111][T15375]  ? kernfs_root+0xee/0x2a0
[  618.098144][T15375]  kernfs_new_node+0x13c/0x1e0
[  618.098182][T15375]  __kernfs_create_file+0x53/0x350
[  618.098225][T15375]  sysfs_add_file_mode_ns+0x207/0x3c0
[  618.098258][T15375]  sysfs_merge_group+0x1aa/0x340
[  618.098289][T15375]  ? __pfx_sysfs_merge_group+0x10/0x10
[  618.098323][T15375]  ? __pfx_dev_add_physical_location+0x10/0x10
[  618.098350][T15375]  ? bus_to_subsys+0x131/0x160
[  618.098385][T15375]  dpm_sysfs_add+0x237/0x280
[  618.098411][T15375]  device_add+0x9a6/0x1950
[  618.098441][T15375]  ? __pfx_device_add+0x10/0x10
[  618.098466][T15375]  ? __pfx_exact_lock+0x10/0x10
[  618.098507][T15375]  ? kobject_get+0xbb/0x150
[  618.098555][T15375]  cdev_device_add+0xc2/0x1e0
[  618.098593][T15375]  evdev_connect+0x3a4/0x4c0
[  618.098631][T15375]  input_attach_handler.isra.0+0x176/0x250
[  618.098667][T15375]  input_register_device+0xab9/0x1180
[  618.098700][T15375]  ? input_ff_create+0x1c1/0x350
[  618.098751][T15375]  uinput_ioctl_handler.isra.0+0x1357/0x1df0
[  618.098779][T15375]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  618.098808][T15375]  ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10
[  618.098842][T15375]  ? find_held_lock+0x2b/0x80
[  618.098892][T15375]  ? __pfx_uinput_ioctl+0x10/0x10
[  618.098917][T15375]  __x64_sys_ioctl+0x18e/0x210
[  618.098948][T15375]  do_syscall_64+0xcd/0xf80
[  618.098981][T15375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.099006][T15375] RIP: 0033:0x7f226b18f7c9
[  618.099025][T15375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  618.099049][T15375] RSP: 002b:00007f226bf51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  618.099072][T15375] RAX: ffffffffffffffda RBX: 00007f226b3e5fa0 RCX: 00007f226b18f7c9
[  618.099089][T15375] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000d
[  618.099105][T15375] RBP: 00007f226b213f91 R08: 0000000000000000 R09: 0000000000000000
[  618.099121][T15375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  618.099136][T15375] R13: 00007f226b3e6038 R14: 00007f226b3e5fa0 R15: 00007ffcdf404678
[  618.099169][T15375]  </TASK>
[  618.851346][T15375] input: failed to attach handler evdev to device input54, error: -12
[  619.652396][T15400] bridge0: port 3(netdevsim1) entered blocking state
[  619.660242][T15400] bridge0: port 3(netdevsim1) entered disabled state
[  619.667153][T15400] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  619.701745][T15400] FAULT_INJECTION: forcing a failure.
[  619.701745][T15400] name failslab, interval 1, probability 0, space 0, times 0
[  619.761746][T15400] CPU: 0 UID: 0 PID: 15400 Comm: syz.3.1890 Not tainted syzkaller #0 PREEMPT(full) 
[  619.761780][T15400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  619.761794][T15400] Call Trace:
[  619.761802][T15400]  <TASK>
[  619.761812][T15400]  dump_stack_lvl+0x16c/0x1f0
[  619.761844][T15400]  should_fail_ex+0x512/0x640
[  619.761872][T15400]  ? kmem_cache_alloc_noprof+0x62/0x720
[  619.761901][T15400]  should_failslab+0xc2/0x120
[  619.761937][T15400]  kmem_cache_alloc_noprof+0x75/0x720
[  619.761963][T15400]  ? __kernfs_new_node+0xd2/0x8d0
[  619.761996][T15400]  ? __kernfs_new_node+0xd2/0x8d0
[  619.762022][T15400]  __kernfs_new_node+0xd2/0x8d0
[  619.762053][T15400]  ? __pfx___kernfs_new_node+0x10/0x10
[  619.762088][T15400]  ? find_held_lock+0x2b/0x80
[  619.762124][T15400]  ? kernfs_root+0xee/0x2a0
[  619.762157][T15400]  kernfs_new_node+0x13c/0x1e0
[  619.762193][T15400]  kernfs_create_link+0xcc/0x240
[  619.762234][T15400]  sysfs_do_create_link_sd+0x90/0x140
[  619.762263][T15400]  sysfs_create_link+0x61/0xc0
[  619.762289][T15400]  __netdev_adjacent_dev_insert+0x7dc/0xbb0
[  619.762321][T15400]  ? __pfx___netdev_adjacent_dev_insert+0x10/0x10
[  619.762359][T15400]  __netdev_upper_dev_link+0x3d7/0x7f0
[  619.762399][T15400]  ? __pfx___netdev_upper_dev_link+0x10/0x10
[  619.762434][T15400]  ? up_write+0x282/0x4e0
[  619.762467][T15400]  ? kernfs_add_one+0x14e/0x840
[  619.762505][T15400]  netdev_master_upper_dev_link+0x9f/0xd0
[  619.762543][T15400]  ? __pfx_netdev_master_upper_dev_link+0x10/0x10
[  619.762582][T15400]  ? lockdep_rtnl_is_held+0x26/0x40
[  619.762626][T15400]  ? netdev_is_rx_handler_busy+0x83/0x140
[  619.762660][T15400]  br_add_if+0xa7b/0x1b70
[  619.762692][T15400]  ? security_capable+0x7e/0x260
[  619.762723][T15400]  add_del_if+0x114/0x160
[  619.762758][T15400]  br_dev_siocdevprivate+0x908/0x1650
[  619.762794][T15400]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  619.762840][T15400]  ? do_raw_spin_lock+0x12c/0x2b0
[  619.762897][T15400]  ? mark_held_locks+0x49/0x80
[  619.762927][T15400]  ? netdev_name_node_lookup+0x127/0x180
[  619.762950][T15400]  ? __mutex_lock+0x27b/0x1b10
[  619.762985][T15400]  dev_ifsioc+0x8ee/0x1ee0
[  619.763014][T15400]  ? __pfx_dev_ifsioc+0x10/0x10
[  619.763037][T15400]  ? __pfx___mutex_lock+0x10/0x10
[  619.763081][T15400]  ? dev_load+0x8e/0x240
[  619.763111][T15400]  dev_ioctl+0x1b2/0x1060
[  619.763140][T15400]  sock_ioctl+0x5b3/0x6b0
[  619.763176][T15400]  ? __pfx_sock_ioctl+0x10/0x10
[  619.763210][T15400]  ? hook_file_ioctl_common+0x145/0x410
[  619.763250][T15400]  ? __fget_files+0x20e/0x3c0
[  619.763287][T15400]  ? __pfx_sock_ioctl+0x10/0x10
[  619.763324][T15400]  __x64_sys_ioctl+0x18e/0x210
[  619.763354][T15400]  do_syscall_64+0xcd/0xf80
[  619.763386][T15400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.763411][T15400] RIP: 0033:0x7faebcb8f7c9
[  619.763430][T15400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  619.763454][T15400] RSP: 002b:00007faebda78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  619.763476][T15400] RAX: ffffffffffffffda RBX: 00007faebcde5fa0 RCX: 00007faebcb8f7c9
[  619.763493][T15400] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000006
[  619.763509][T15400] RBP: 00007faebcc13f91 R08: 0000000000000000 R09: 0000000000000000
[  619.763524][T15400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  619.763538][T15400] R13: 00007faebcde6038 R14: 00007faebcde5fa0 R15: 00007ffe58551ae8
[  619.763570][T15400]  </TASK>
[  620.549091][T15400] netdevsim netdevsim3 netdevsim1: left allmulticast mode
[  621.860359][T15409] FAULT_INJECTION: forcing a failure.
[  621.860359][T15409] name failslab, interval 1, probability 0, space 0, times 0
[  622.103042][T15409] CPU: 0 UID: 0 PID: 15409 Comm: syz.3.1891 Not tainted syzkaller #0 PREEMPT(full) 
[  622.103078][T15409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  622.103093][T15409] Call Trace:
[  622.103102][T15409]  <TASK>
[  622.103112][T15409]  dump_stack_lvl+0x16c/0x1f0
[  622.103146][T15409]  should_fail_ex+0x512/0x640
[  622.103176][T15409]  ? __kmalloc_cache_noprof+0x5f/0x770
[  622.103205][T15409]  should_failslab+0xc2/0x120
[  622.103242][T15409]  __kmalloc_cache_noprof+0x72/0x770
[  622.103268][T15409]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  622.103307][T15409]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  622.103340][T15409]  trace_pid_list_alloc+0x1b0/0x3f0
[  622.103377][T15409]  trace_pid_write+0x10c/0x4b0
[  622.103405][T15409]  ? __pfx_trace_pid_write+0x10/0x10
[  622.103432][T15409]  ? __pfx_aa_file_perm+0x10/0x10
[  622.103474][T15409]  ? __lock_acquire+0x433/0x22f0
[  622.103502][T15409]  ? update_last_data+0xb3/0x510
[  622.103543][T15409]  event_pid_write.isra.0+0x1e4/0x7f0
[  622.103582][T15409]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  622.103626][T15409]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  622.103662][T15409]  vfs_write+0x2a0/0x11d0
[  622.103697][T15409]  ? __pfx___mutex_lock+0x10/0x10
[  622.103732][T15409]  ? __pfx_vfs_write+0x10/0x10
[  622.103774][T15409]  ? __fget_files+0x20e/0x3c0
[  622.103816][T15409]  ksys_write+0x12a/0x250
[  622.103849][T15409]  ? __pfx_ksys_write+0x10/0x10
[  622.103891][T15409]  do_syscall_64+0xcd/0xf80
[  622.103924][T15409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.103949][T15409] RIP: 0033:0x7faebcb8f7c9
[  622.103968][T15409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  622.103993][T15409] RSP: 002b:00007faebda36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  622.104015][T15409] RAX: ffffffffffffffda RBX: 00007faebcde6180 RCX: 00007faebcb8f7c9
[  622.104032][T15409] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  622.104048][T15409] RBP: 00007faebcc13f91 R08: 0000000000000000 R09: 0000000000000000
[  622.104063][T15409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  622.104078][T15409] R13: 00007faebcde6218 R14: 00007faebcde6180 R15: 00007ffe58551ae8
[  622.104110][T15409]  </TASK>
[  623.875179][T15427] zswap: compressor  not available
[  625.179054][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'.
[  625.499012][T15449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1899'.
[  625.562195][T15447] netlink: 29 bytes leftover after parsing attributes in process `syz.3.1899'.
[  626.962737][T15481] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1906'.
[  629.242043][T15519] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  630.276094][T15536] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1917'.
[  631.845426][T15553] binder: 15550:15553 ioctl c0445624 38 returned -22
[  633.063017][T15569] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  634.666766][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  634.674847][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  634.754816][T15593] binder: 15592:15593 ioctl c018620c 0 returned -1
[  634.844866][T15590] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  636.208506][ T6235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  636.225745][ T6235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  636.234210][ T6235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  636.242108][ T6235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  636.249861][ T6235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  637.360067][T15600] chnl_net:caif_netlink_parms(): no params data found
[  637.924362][T15600] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.992573][T15600] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.036415][T15600] bridge_slave_0: entered allmulticast mode
[  638.088600][T15600] bridge_slave_0: entered promiscuous mode
[  638.139104][T15600] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.187753][T15600] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.195191][T15600] bridge_slave_1: entered allmulticast mode
[  638.288723][T15600] bridge_slave_1: entered promiscuous mode
[  638.298856][T15629] FAULT_INJECTION: forcing a failure.
[  638.298856][T15629] name failslab, interval 1, probability 0, space 0, times 0
[  638.313125][T15627] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input55
[  638.333929][ T6235] Bluetooth: hci3: command tx timeout
[  638.389356][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'.
[  638.398824][T15629] CPU: 0 UID: 0 PID: 15629 Comm: syz.0.1935 Not tainted syzkaller #0 PREEMPT(full) 
[  638.398856][T15629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  638.398872][T15629] Call Trace:
[  638.398880][T15629]  <TASK>
[  638.398890][T15629]  dump_stack_lvl+0x16c/0x1f0
[  638.398925][T15629]  should_fail_ex+0x512/0x640
[  638.398954][T15629]  ? __kvmalloc_node_noprof+0x12e/0x9b0
[  638.398989][T15629]  should_failslab+0xc2/0x120
[  638.399026][T15629]  __kvmalloc_node_noprof+0x141/0x9b0
[  638.399058][T15629]  ? __pfx__mutex_trylock_nest_lock+0x10/0x10
[  638.399092][T15629]  ? file_tty_write.constprop.0+0x6f3/0x9b0
[  638.399135][T15629]  ? file_tty_write.constprop.0+0x6f3/0x9b0
[  638.399170][T15629]  file_tty_write.constprop.0+0x6f3/0x9b0
[  638.399217][T15629]  ? copy_iovec_from_user+0x131/0x170
[  638.399251][T15629]  do_iter_readv_writev+0x662/0x9e0
[  638.399286][T15629]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  638.399318][T15629]  ? common_file_perm+0x1b1/0x500
[  638.399355][T15629]  ? bpf_lsm_file_permission+0x9/0x10
[  638.399380][T15629]  ? security_file_permission+0x71/0x210
[  638.399418][T15629]  ? rw_verify_area+0xcf/0x6c0
[  638.399451][T15629]  vfs_writev+0x35f/0xde0
[  638.399482][T15629]  ? futex_wait+0x120/0x380
[  638.399523][T15629]  ? __pfx_vfs_writev+0x10/0x10
[  638.399576][T15629]  ? __fget_files+0x20e/0x3c0
[  638.399617][T15629]  ? do_writev+0x132/0x340
[  638.399645][T15629]  do_writev+0x132/0x340
[  638.399677][T15629]  ? __pfx_do_writev+0x10/0x10
[  638.399717][T15629]  do_syscall_64+0xcd/0xf80
[  638.399749][T15629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.399774][T15629] RIP: 0033:0x7fee54b8f7c9
[  638.399793][T15629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  638.399817][T15629] RSP: 002b:00007fee5598d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  638.399839][T15629] RAX: ffffffffffffffda RBX: 00007fee54de6180 RCX: 00007fee54b8f7c9
[  638.399855][T15629] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[  638.399871][T15629] RBP: 00007fee54c13f91 R08: 0000000000000000 R09: 0000000000000000
[  638.399886][T15629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  638.399901][T15629] R13: 00007fee54de6218 R14: 00007fee54de6180 R15: 00007ffc0dd9c668
[  638.399933][T15629]  </TASK>
[  640.016635][T15600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  640.086963][T15600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  640.407782][ T6235] Bluetooth: hci3: command tx timeout
[  640.444354][T15600] team0: Port device team_slave_0 added
[  640.579379][T15600] team0: Port device team_slave_1 added
[  640.762971][T15600] batman_adv: batadv0: Adding interface: batadv_slave_0
[  640.801864][T15600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  640.858832][T15644] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1938'.
[  640.945806][T15600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  641.016787][T15600] batman_adv: batadv0: Adding interface: batadv_slave_1
[  641.044555][T15600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  641.192367][T15600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  641.515875][T15600] hsr_slave_0: entered promiscuous mode
[  641.580559][T15600] hsr_slave_1: entered promiscuous mode
[  641.628394][T15600] debugfs: 'hsr0' already exists in 'hsr'
[  641.680957][T15600] Cannot create hsr debugfs directory
[  641.809233][T15656] zram0: detected capacity change from 8 to 0
[  642.099584][T15656] zram: Removed device: zram0
[  642.338338][T15657] =======================================================
[  642.338338][T15657] WARNING: The mand mount option has been deprecated and
[  642.338338][T15657]          and is ignored by this kernel. Remove the mand
[  642.338338][T15657]          option from the mount to silence this warning.
[  642.338338][T15657] =======================================================
[  642.509434][ T6235] Bluetooth: hci3: command tx timeout
[  642.919968][T15600] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  642.996525][T15600] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  643.071861][T15600] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  643.171179][T15600] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  643.773172][T15600] 8021q: adding VLAN 0 to HW filter on device bond0
[  643.909026][T15600] 8021q: adding VLAN 0 to HW filter on device team0
[  643.984295][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.991542][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state
[  644.121695][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.128963][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.567774][ T6235] Bluetooth: hci3: command tx timeout
[  645.660487][T15600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  647.427494][T15600] veth0_vlan: entered promiscuous mode
[  647.506560][T15600] veth1_vlan: entered promiscuous mode
[  647.714244][T15600] veth0_macvtap: entered promiscuous mode
[  647.776819][T15600] veth1_macvtap: entered promiscuous mode
[  647.796216][T15738] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  647.902899][T15600] batman_adv: batadv0: Interface activated: batadv_slave_0
[  647.969792][T15600] batman_adv: batadv0: Interface activated: batadv_slave_1
[  648.084263][T14418] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  648.136577][T14418] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  648.233561][T14418] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  648.390607][T14418] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  648.637921][T15743] zswap: compressor  not available
[  648.912364][T14419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  648.972164][T14419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  649.130983][ T7125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  649.181645][ T7125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.133031][T15759] binder: 15758:15759 ioctl c0306201 0 returned -14
[  650.997802][T15762] binder: 15761:15762 ioctl c0306201 0 returned -14
[  652.893218][T15772] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  652.956115][T15774] openvswitch: netlink: ct_state flags aa1414ac unsupported
[  653.135394][T15779] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input56
[  654.836058][T15793] netlink: 504 bytes leftover after parsing attributes in process `syz.5.1963'.
[  655.099645][T15797] random: crng reseeded on system resumption
[  655.169963][T15795] zswap: compressor  not available
[  655.338634][T15801] FAULT_INJECTION: forcing a failure.
[  655.338634][T15801] name fail_futex, interval 1, probability 0, space 0, times 0
[  655.409534][T15801] CPU: 0 UID: 0 PID: 15801 Comm: syz.5.1965 Not tainted syzkaller #0 PREEMPT(full) 
[  655.409567][T15801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  655.409583][T15801] Call Trace:
[  655.409592][T15801]  <TASK>
[  655.409602][T15801]  dump_stack_lvl+0x16c/0x1f0
[  655.409636][T15801]  should_fail_ex+0x512/0x640
[  655.409670][T15801]  get_futex_key+0x1d0/0x15f0
[  655.409702][T15801]  ? __pfx_get_futex_key+0x10/0x10
[  655.409740][T15801]  futex_wake+0xea/0x530
[  655.409773][T15801]  ? futex_wait+0x120/0x380
[  655.409811][T15801]  ? __pfx_futex_wait+0x10/0x10
[  655.409850][T15801]  ? __pfx_futex_wake+0x10/0x10
[  655.409888][T15801]  ? getname_flags.part.0+0x1c5/0x550
[  655.409918][T15801]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  655.409960][T15801]  do_futex+0x1e3/0x350
[  655.409990][T15801]  ? __pfx_do_futex+0x10/0x10
[  655.410017][T15801]  ? __pfx___do_sys_io_uring_register+0x10/0x10
[  655.410052][T15801]  __x64_sys_futex+0x1e0/0x4c0
[  655.410083][T15801]  ? __pfx___x64_sys_mq_open+0x10/0x10
[  655.410113][T15801]  ? __pfx___x64_sys_futex+0x10/0x10
[  655.410143][T15801]  ? xfd_validate_state+0x61/0x180
[  655.410191][T15801]  do_syscall_64+0xcd/0xf80
[  655.410224][T15801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.410249][T15801] RIP: 0033:0x7ffb62b8f7c9
[  655.410268][T15801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  655.410292][T15801] RSP: 002b:00007ffb639a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  655.410316][T15801] RAX: ffffffffffffffda RBX: 00007ffb62de5fa8 RCX: 00007ffb62b8f7c9
[  655.410332][T15801] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffb62de5fac
[  655.410347][T15801] RBP: 00007ffb62de5fa0 R08: 00007ffb639a3000 R09: 0000000000000000
[  655.410371][T15801] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  655.410391][T15801] R13: 00007ffb62de6038 R14: 00007ffe79189e20 R15: 00007ffe79189f08
[  655.410423][T15801]  </TASK>
[  657.865777][T15808] Console: switching to colour frame buffer device 128x48
[  658.144988][ T6095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.433713][ T6095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.626912][ T6095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.760498][ T6095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.026898][ T6095] bridge_slave_1: left allmulticast mode
[  659.041746][ T6095] bridge_slave_1: left promiscuous mode
[  659.065700][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.095761][ T6095] bridge_slave_0: left allmulticast mode
[  659.116696][ T6095] bridge_slave_0: left promiscuous mode
[  659.149820][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.691816][T15818] netlink: 'syz.3.1969': attribute type 1 has an invalid length.
[  660.203018][ T6095] bond0 (unregistering): (slave �): Releasing backup interface
[  660.229002][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  660.267382][ T6095] bond0 (unregistering): Released all slaves
[  660.805054][ T6095] hsr_slave_0: left promiscuous mode
[  660.843540][ T6095] hsr_slave_1: left promiscuous mode
[  660.859159][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  660.889404][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0
[  660.921178][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  660.938941][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1
[  660.996377][ T6095] veth1_macvtap: left promiscuous mode
[  661.038633][ T6095] veth0_macvtap: left promiscuous mode
[  661.044314][ T6095] veth1_vlan: left promiscuous mode
[  661.063850][ T6095] veth0_vlan: left promiscuous mode
[  662.209765][ T6230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  662.220310][ T6230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  662.229325][ T6230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  662.237091][ T6230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  662.244699][ T6230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  663.241622][ T6095] team0 (unregistering): Port device team_slave_1 removed
[  663.389000][ T6095] team0 (unregistering): Port device team_slave_0 removed
[  664.328341][ T6230] Bluetooth: hci4: command tx timeout
[  665.787339][T15821] chnl_net:caif_netlink_parms(): no params data found
[  666.069983][T15821] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.081327][T15821] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.108734][T15821] bridge_slave_0: entered allmulticast mode
[  666.141366][T15821] bridge_slave_0: entered promiscuous mode
[  666.173072][T15821] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.189302][T15821] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.196568][T15821] bridge_slave_1: entered allmulticast mode
[  666.249131][T15821] bridge_slave_1: entered promiscuous mode
[  666.350612][T15821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  666.394362][T15821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  666.411485][ T6230] Bluetooth: hci4: command tx timeout
[  666.506728][T15821] team0: Port device team_slave_0 added
[  666.540308][T15821] team0: Port device team_slave_1 added
[  666.645503][T15821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  666.667838][T15821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.758945][T15821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  666.801490][T15821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  666.827917][T15821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.900365][T15821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.038905][T15821] hsr_slave_0: entered promiscuous mode
[  667.059369][T15821] hsr_slave_1: entered promiscuous mode
[  667.065646][T15821] debugfs: 'hsr0' already exists in 'hsr'
[  667.079519][T15821] Cannot create hsr debugfs directory
[  667.461819][T15821] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  667.489354][T15821] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  667.519584][T15821] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  667.544786][T15821] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  667.715909][T15821] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.761874][T15821] 8021q: adding VLAN 0 to HW filter on device team0
[  667.793720][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.800920][ T7125] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.845799][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.853001][ T7125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.303640][T15821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  668.489395][ T6230] Bluetooth: hci4: command tx timeout
[  668.851207][T15821] veth0_vlan: entered promiscuous mode
[  668.879282][T15821] veth1_vlan: entered promiscuous mode
[  668.950931][T15821] veth0_macvtap: entered promiscuous mode
[  668.973849][T15821] veth1_macvtap: entered promiscuous mode
[  669.020901][T15821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  669.047310][T15821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  669.094446][ T7125] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  669.118578][ T7125] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  669.127351][ T7125] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  669.183422][ T7125] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  669.412900][ T6095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.460381][ T6095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.563448][T14421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.592255][T14421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.426646][ T6235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  670.440187][ T6235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  670.448679][ T6235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  670.456568][ T6235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  670.464673][ T6235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  670.572526][ T6235] Bluetooth: hci4: command tx timeout
[  671.082723][T15852] chnl_net:caif_netlink_parms(): no params data found
[  671.500849][T15852] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.537794][T15852] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.545054][T15852] bridge_slave_0: entered allmulticast mode
[  671.602152][T15852] bridge_slave_0: entered promiscuous mode
[  671.650310][T15852] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.677791][T15852] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.685056][T15852] bridge_slave_1: entered allmulticast mode
[  671.740421][T15852] bridge_slave_1: entered promiscuous mode
[  671.884573][T15852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  671.929798][T15852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  672.080144][T15852] team0: Port device team_slave_0 added
[  672.117217][T15852] team0: Port device team_slave_1 added
[  672.215914][T15852] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.241535][ T6230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  672.252409][ T6230] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  672.261143][ T6230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  672.269076][ T6230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  672.276639][ T6230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  672.298725][T15852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  672.365065][T15852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  672.407036][T15852] batman_adv: batadv0: Adding interface: batadv_slave_1
[  672.434044][T15852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  672.490827][T15852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  672.573740][ T6230] Bluetooth: hci5: command tx timeout
[  672.660393][T15852] hsr_slave_0: entered promiscuous mode
[  672.675657][T15852] hsr_slave_1: entered promiscuous mode
[  672.689118][T15852] debugfs: 'hsr0' already exists in 'hsr'
[  672.703128][T15852] Cannot create hsr debugfs directory
[  673.342884][T15872] chnl_net:caif_netlink_parms(): no params data found
[  673.840832][T15852] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  673.901423][T15852] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  673.926371][T15872] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.947926][T15872] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.955190][T15872] bridge_slave_0: entered allmulticast mode
[  673.980882][T15887] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  673.999151][T15872] bridge_slave_0: entered promiscuous mode
[  674.021672][T15852] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  674.041132][T15872] bridge0: port 2(bridge_slave_1) entered blocking state
[  674.059320][T15872] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.090859][T15872] bridge_slave_1: entered allmulticast mode
[  674.112679][T15872] bridge_slave_1: entered promiscuous mode
[  674.145840][T15852] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  674.181909][T15889] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input57
[  674.264268][T15872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  674.326046][T15872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  674.340644][ T6230] Bluetooth: hci6: command tx timeout
[  674.490962][T15872] team0: Port device team_slave_0 added
[  674.539363][T15872] team0: Port device team_slave_1 added
[  674.648269][ T6230] Bluetooth: hci5: command tx timeout
[  674.668287][T15872] batman_adv: batadv0: Adding interface: batadv_slave_0
[  674.685843][T15872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  674.755908][T15872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  674.808316][T15872] batman_adv: batadv0: Adding interface: batadv_slave_1
[  674.815334][T15872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  674.919125][T15872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  675.171033][T15872] hsr_slave_0: entered promiscuous mode
[  675.210034][T15872] hsr_slave_1: entered promiscuous mode
[  675.239067][T15872] debugfs: 'hsr0' already exists in 'hsr'
[  675.244844][T15872] Cannot create hsr debugfs directory
[  675.325710][T15900] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  675.348042][T15852] 8021q: adding VLAN 0 to HW filter on device bond0
[  675.548857][T15852] 8021q: adding VLAN 0 to HW filter on device team0
[  675.751515][T14418] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.758722][T14418] bridge0: port 1(bridge_slave_0) entered forwarding state
[  676.040758][T14418] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.048021][T14418] bridge0: port 2(bridge_slave_1) entered forwarding state
[  676.170476][ T6235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  676.181460][ T6235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  676.189858][ T6235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  676.208140][ T6235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  676.215787][ T6235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  676.410155][ T6235] Bluetooth: hci6: command tx timeout
[  676.667118][T15872] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  676.719235][T15872] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  676.729055][ T6235] Bluetooth: hci5: command tx timeout
[  676.784817][T15872] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  676.836421][T15872] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  677.395521][T15852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  677.473657][T15902] chnl_net:caif_netlink_parms(): no params data found
[  677.576229][T15872] 8021q: adding VLAN 0 to HW filter on device bond0
[  677.776727][T15872] 8021q: adding VLAN 0 to HW filter on device team0
[  677.865023][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state
[  677.872242][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state
[  677.974968][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state
[  677.982181][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state
[  678.248559][ T6235] Bluetooth: hci7: command tx timeout
[  678.259661][T15902] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.290800][T15902] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.329339][T15902] bridge_slave_0: entered allmulticast mode
[  678.336749][T15902] bridge_slave_0: entered promiscuous mode
[  678.401306][T15902] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.459854][T15902] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.467126][T15902] bridge_slave_1: entered allmulticast mode
[  678.491354][ T6235] Bluetooth: hci6: command tx timeout
[  678.528006][T15902] bridge_slave_1: entered promiscuous mode
[  678.662683][T15902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  678.717248][T15902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  678.810009][ T6235] Bluetooth: hci5: command tx timeout
[  678.887462][T15902] team0: Port device team_slave_0 added
[  678.942212][T15902] team0: Port device team_slave_1 added
[  679.120707][T15902] batman_adv: batadv0: Adding interface: batadv_slave_0
[  679.158820][T15902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  679.277851][T15902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  679.340852][T15902] batman_adv: batadv0: Adding interface: batadv_slave_1
[  679.387441][T15902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  679.532867][T15902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  679.649104][T15852] veth0_vlan: entered promiscuous mode
[  679.811855][T15902] hsr_slave_0: entered promiscuous mode
[  679.836878][T15902] hsr_slave_1: entered promiscuous mode
[  679.880502][T15902] debugfs: 'hsr0' already exists in 'hsr'
[  679.886278][T15902] Cannot create hsr debugfs directory
[  679.940146][T15852] veth1_vlan: entered promiscuous mode
[  680.069838][T15936] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  680.097349][T15936] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  680.128372][T15872] 8021q: adding VLAN 0 to HW filter on device batadv0
[  680.145583][T15936] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  680.216512][T15936] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  680.248920][T15936] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  680.289451][T15936] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  680.328072][ T6235] Bluetooth: hci7: command tx timeout
[  680.349154][T15936] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  680.385150][T15936] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  680.420002][T15936] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  680.448726][T15936] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  680.496740][T15936] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  680.503175][T15852] veth0_macvtap: entered promiscuous mode
[  680.530954][T15936] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  680.589025][T15852] veth1_macvtap: entered promiscuous mode
[  680.599639][T15936] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  680.651858][T15936] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  680.698904][T15936] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  680.761509][T15852] batman_adv: batadv0: Interface activated: batadv_slave_0
[  680.872986][T15852] batman_adv: batadv0: Interface activated: batadv_slave_1
[  681.037358][ T7125] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  681.092421][T14418] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  681.128935][T15902] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  681.167457][T14418] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  681.208401][ T6235] Bluetooth: hci3: command 0x0c1a tx timeout
[  681.229770][T15902] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  681.278203][T15902] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  681.320882][T14418] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  681.382961][T15902] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  681.459849][T15951] could not allocate digest TFM handle 0
[  681.459849][T15951] 
[  681.775844][T14418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  681.812505][T14418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  681.936037][T14421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  681.968128][T15872] veth0_vlan: entered promiscuous mode
[  681.993061][T14421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.249273][ T6235] Bluetooth: hci4: command 0x0c1a tx timeout
[  682.287915][T15872] veth1_vlan: entered promiscuous mode
[  682.408428][ T6235] Bluetooth: hci5: command 0x0c1a tx timeout
[  682.488401][ T6235] Bluetooth: hci6: command 0x0c1a tx timeout
[  682.563727][T15902] 8021q: adding VLAN 0 to HW filter on device bond0
[  682.652559][ T6235] Bluetooth: hci7: command 0x0419 tx timeout
[  682.683123][T15902] 8021q: adding VLAN 0 to HW filter on device team0
[  682.766518][T14421] bridge0: port 1(bridge_slave_0) entered blocking state
[  682.773739][T14421] bridge0: port 1(bridge_slave_0) entered forwarding state
[  682.841632][T15872] veth0_macvtap: entered promiscuous mode
[  682.900656][T14421] bridge0: port 2(bridge_slave_1) entered blocking state
[  682.907931][T14421] bridge0: port 2(bridge_slave_1) entered forwarding state
[  683.001845][T15872] veth1_macvtap: entered promiscuous mode
[  683.222779][T15872] batman_adv: batadv0: Interface activated: batadv_slave_0
[  683.290803][ T6230] Bluetooth: hci3: command 0x0c1a tx timeout
[  683.360731][T15872] batman_adv: batadv0: Interface activated: batadv_slave_1
[  683.458262][ T7125] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  683.546662][ T7125] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  683.678442][ T7125] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  683.687215][ T7125] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  684.329357][ T6235] Bluetooth: hci4: command 0x0c1a tx timeout
[  684.344623][ T6679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  684.396447][ T6679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  684.488525][ T6235] Bluetooth: hci5: command 0x0c1a tx timeout
[  684.567932][ T6230] Bluetooth: hci6: command 0x0c1a tx timeout
[  684.703267][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  684.728513][ T6230] Bluetooth: hci7: command 0x0419 tx timeout
[  684.749742][T15902] 8021q: adding VLAN 0 to HW filter on device batadv0
[  684.768276][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.311918][T15993] netlink: 504 bytes leftover after parsing attributes in process `syz.8.1973'.
[  685.370854][ T6230] Bluetooth: hci3: command 0x0c1a tx timeout
[  685.389988][T15983] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  685.499801][T15983] FAULT_INJECTION: forcing a failure.
[  685.499801][T15983] name failslab, interval 1, probability 0, space 0, times 0
[  685.825980][T15983] CPU: 0 UID: 0 PID: 15983 Comm: syz.6.1985 Not tainted syzkaller #0 PREEMPT(full) 
[  685.826019][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  685.826043][T15983] Call Trace:
[  685.826054][T15983]  <TASK>
[  685.826065][T15983]  dump_stack_lvl+0x16c/0x1f0
[  685.826104][T15983]  should_fail_ex+0x512/0x640
[  685.826135][T15983]  ? __kmalloc_cache_noprof+0x5f/0x770
[  685.826164][T15983]  should_failslab+0xc2/0x120
[  685.826203][T15983]  __kmalloc_cache_noprof+0x72/0x770
[  685.826230][T15983]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  685.826270][T15983]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  685.826302][T15983]  trace_pid_list_alloc+0x1b0/0x3f0
[  685.826340][T15983]  trace_pid_write+0x10c/0x4b0
[  685.826368][T15983]  ? __pfx_trace_pid_write+0x10/0x10
[  685.826390][T15983]  ? __pfx_aa_file_perm+0x10/0x10
[  685.826431][T15983]  ? __lock_acquire+0x433/0x22f0
[  685.826460][T15983]  ? update_last_data+0xb3/0x510
[  685.826500][T15983]  event_pid_write.isra.0+0x1e4/0x7f0
[  685.826540][T15983]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  685.826584][T15983]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  685.826620][T15983]  vfs_write+0x2a0/0x11d0
[  685.826656][T15983]  ? __pfx___mutex_lock+0x10/0x10
[  685.826691][T15983]  ? __pfx_vfs_write+0x10/0x10
[  685.826734][T15983]  ? __fget_files+0x20e/0x3c0
[  685.826787][T15983]  ksys_write+0x12a/0x250
[  685.826822][T15983]  ? __pfx_ksys_write+0x10/0x10
[  685.826867][T15983]  do_syscall_64+0xcd/0xf80
[  685.826901][T15983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.826928][T15983] RIP: 0033:0x7fbed0d8f7c9
[  685.826948][T15983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  685.826973][T15983] RSP: 002b:00007fbed1c89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  685.826996][T15983] RAX: ffffffffffffffda RBX: 00007fbed0fe6090 RCX: 00007fbed0d8f7c9
[  685.827013][T15983] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  685.827028][T15983] RBP: 00007fbed0e13f91 R08: 0000000000000000 R09: 0000000000000000
[  685.827044][T15983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  685.827059][T15983] R13: 00007fbed0fe6128 R14: 00007fbed0fe6090 R15: 00007fff11681128
[  685.827093][T15983]  </TASK>
[  686.482595][ T6230] Bluetooth: hci4: command 0x0c1a tx timeout
[  686.631391][ T6230] Bluetooth: hci5: command 0x0c1a tx timeout
[  686.711871][ T6230] Bluetooth: hci6: command 0x0c1a tx timeout
[  686.835185][ T6230] Bluetooth: hci7: command 0x0419 tx timeout
[  686.878752][T15902] veth0_vlan: entered promiscuous mode
[  686.931051][T15902] veth1_vlan: entered promiscuous mode
[  687.028675][T15902] veth0_macvtap: entered promiscuous mode
[  687.058847][T15902] veth1_macvtap: entered promiscuous mode
[  687.340233][T15902] batman_adv: batadv0: Interface activated: batadv_slave_0
[  687.411303][T15902] batman_adv: batadv0: Interface activated: batadv_slave_1
[  687.506532][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  687.578582][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  687.620801][T16010] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input58
[  687.639695][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  687.683779][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  688.212142][ T6095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  688.277909][ T6095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  688.478558][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  688.543257][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  688.888845][ T6230] Bluetooth: hci7: command 0x0419 tx timeout
[  689.003545][T16024] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1979'.
[  689.274635][T16029] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input59
[  689.654201][T16032] binder: 16026:16032 ioctl 4818620d 3 returned -22
[  690.443871][T16040] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  690.730464][T16037] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  690.901397][T16033] FAULT_INJECTION: forcing a failure.
[  690.901397][T16033] name failslab, interval 1, probability 0, space 0, times 0
[  690.956186][T16045] netlink: 182 bytes leftover after parsing attributes in process `syz.6.1996'.
[  691.053014][T16033] CPU: 0 UID: 0 PID: 16033 Comm: syz.8.1993 Not tainted syzkaller #0 PREEMPT(full) 
[  691.053050][T16033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  691.053066][T16033] Call Trace:
[  691.053075][T16033]  <TASK>
[  691.053086][T16033]  dump_stack_lvl+0x16c/0x1f0
[  691.053128][T16033]  should_fail_ex+0x512/0x640
[  691.053159][T16033]  ? __kmalloc_cache_noprof+0x5f/0x770
[  691.053196][T16033]  should_failslab+0xc2/0x120
[  691.053400][T16033]  __kmalloc_cache_noprof+0x72/0x770
[  691.053431][T16033]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  691.053472][T16033]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  691.053508][T16033]  trace_pid_list_alloc+0x1b0/0x3f0
[  691.053547][T16033]  trace_pid_write+0x10c/0x4b0
[  691.053577][T16033]  ? __pfx_trace_pid_write+0x10/0x10
[  691.053599][T16033]  ? __pfx_aa_file_perm+0x10/0x10
[  691.053644][T16033]  ? __lock_acquire+0x433/0x22f0
[  691.053675][T16033]  ? update_last_data+0xb3/0x510
[  691.053718][T16033]  event_pid_write.isra.0+0x1e4/0x7f0
[  691.053758][T16033]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  691.053804][T16033]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  691.053843][T16033]  vfs_write+0x2a0/0x11d0
[  691.053880][T16033]  ? __pfx___mutex_lock+0x10/0x10
[  691.053917][T16033]  ? __pfx_vfs_write+0x10/0x10
[  691.053960][T16033]  ? __fget_files+0x20e/0x3c0
[  691.054006][T16033]  ksys_write+0x12a/0x250
[  691.054047][T16033]  ? __pfx_ksys_write+0x10/0x10
[  691.054092][T16033]  do_syscall_64+0xcd/0xf80
[  691.054128][T16033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.054156][T16033] RIP: 0033:0x7fa53fd8f7c9
[  691.054178][T16033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  691.054204][T16033] RSP: 002b:00007fa540b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  691.054235][T16033] RAX: ffffffffffffffda RBX: 00007fa53ffe6090 RCX: 00007fa53fd8f7c9
[  691.054253][T16033] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  691.054268][T16033] RBP: 00007fa53fe13f91 R08: 0000000000000000 R09: 0000000000000000
[  691.054284][T16033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  691.054300][T16033] R13: 00007fa53ffe6128 R14: 00007fa53ffe6090 R15: 00007ffc3483c848
[  691.054335][T16033]  </TASK>
[  691.985474][T16057] binder: 16056:16057 ioctl c0306201 0 returned -14
[  692.065306][T16058] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  694.669232][T16069] binder: 16068:16069 ioctl 8008563f 38 returned -22
[  696.101112][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  696.113708][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  696.866745][   T30] audit: type=1800 audit(4294967551.849:16): pid=16102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2008" name="dbroot" dev="configfs" ino=74975 res=0 errno=0
[  697.579918][T16104] netlink: zone id is out of range
[  697.679008][T16104] netlink: del zone limit has 4 unknown bytes
[  697.699197][T16109] ERROR: Out of memory at tomoyo_memory_ok.
[  699.125186][T16121] zswap: compressor  not available
[  700.361803][   T30] audit: type=1800 audit(4294967555.349:17): pid=16144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2015" name="dbroot" dev="configfs" ino=75106 res=0 errno=0
[  701.158975][T16145] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input60
[  702.577897][T16158] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  705.147449][T16189] netlink: 346 bytes leftover after parsing attributes in process `syz.9.2024'.
[  705.465375][T16195] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  705.977064][T16204] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  706.741305][T16215] FAULT_INJECTION: forcing a failure.
[  706.741305][T16215] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  706.853028][T16215] CPU: 0 UID: 0 PID: 16215 Comm: syz.8.2030 Not tainted syzkaller #0 PREEMPT(full) 
[  706.853062][T16215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  706.853076][T16215] Call Trace:
[  706.853085][T16215]  <TASK>
[  706.853094][T16215]  dump_stack_lvl+0x16c/0x1f0
[  706.853128][T16215]  should_fail_ex+0x512/0x640
[  706.853161][T16215]  _copy_to_iter+0x29f/0x1710
[  706.853198][T16215]  ? __pfx__copy_to_iter+0x10/0x10
[  706.853226][T16215]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  706.853262][T16215]  ? find_held_lock+0x2b/0x80
[  706.853300][T16215]  ? rcu_is_watching+0x12/0xc0
[  706.853340][T16215]  ? eventfd_read+0x346/0x610
[  706.853368][T16215]  eventfd_read+0x491/0x610
[  706.853399][T16215]  ? __pfx_eventfd_read+0x10/0x10
[  706.853430][T16215]  ? common_file_perm+0x1b1/0x500
[  706.853462][T16215]  ? __pfx_autoremove_wake_function+0x10/0x10
[  706.853503][T16215]  ? bpf_lsm_file_permission+0x9/0x10
[  706.853527][T16215]  ? security_file_permission+0x71/0x210
[  706.853565][T16215]  ? rw_verify_area+0xcf/0x6c0
[  706.853597][T16215]  vfs_read+0x8bf/0xcf0
[  706.853638][T16215]  ? __pfx_vfs_read+0x10/0x10
[  706.853805][T16215]  ? find_held_lock+0x2b/0x80
[  706.853864][T16215]  ksys_read+0x12a/0x250
[  706.853897][T16215]  ? __pfx_ksys_read+0x10/0x10
[  706.853938][T16215]  do_syscall_64+0xcd/0xf80
[  706.853973][T16215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.853998][T16215] RIP: 0033:0x7fa53fd8f7c9
[  706.854021][T16215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  706.854046][T16215] RSP: 002b:00007fa540b99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  706.854074][T16215] RAX: ffffffffffffffda RBX: 00007fa53ffe5fa0 RCX: 00007fa53fd8f7c9
[  706.854091][T16215] RDX: 000000000000cc9c RSI: 0000000000000000 RDI: 0000000000000004
[  706.854107][T16215] RBP: 00007fa540b99090 R08: 0000000000000000 R09: 0000000000000000
[  706.854122][T16215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  706.854137][T16215] R13: 00007fa53ffe6038 R14: 00007fa53ffe5fa0 R15: 00007ffc3483c848
[  706.854170][T16215]  </TASK>
[  709.136445][T16237] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input61
[  710.326147][ T6230] Bluetooth: hci4: unexpected event 0x0f length: 440 > 4
[  710.327194][ T6230] Bluetooth: hci4: unexpected event for opcode 0x0010
[  710.999885][T16267] binder: 16265:16267 ioctl c0306201 0 returned -14
[  711.080681][T16269] binder: 16268:16269 ioctl c0306201 0 returned -14
[  711.358505][T16242] netlink: 3484 bytes leftover after parsing attributes in process `syz.9.2034'.
[  714.328245][ T6230] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  714.339104][ T6230] Bluetooth: hci4: Injecting HCI hardware error event
[  714.347821][ T6235] Bluetooth: hci4: hardware error 0x00
[  714.546830][T16289] block nbd10: not configured, cannot reconfigure
[  715.432445][ T6230] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18
[  716.408059][ T6235] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  717.196805][T16331] binder: 16330:16331 ioctl c0306201 0 returned -14
[  717.530642][ T6235] Bluetooth: hci6: command 0x0c1a tx timeout
[  718.439545][T16311] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  718.537592][T16311] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  718.750015][T16311] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  718.869367][T16311] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  719.030849][T16311] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  719.378664][ T6235] Bluetooth: hci3: command 0x0c1a tx timeout
[  720.140734][T16359] binder: 16358:16359 ioctl c0306201 0 returned -14
[  720.567863][T14441] Bluetooth: hci5: command 0x0c1a tx timeout
[  720.574009][ T6235] Bluetooth: hci6: command 0x0c1a tx timeout
[  721.050152][ T6235] Bluetooth: hci7: command 0x0419 tx timeout
[  722.653513][ T6235] Bluetooth: hci6: command 0x0c1a tx timeout
[  723.387090][T16383] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2062'.
[  725.300840][T16408] netlink: 504 bytes leftover after parsing attributes in process `syz.8.2065'.
[  725.343320][T16391] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  725.407178][T16391] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  725.489953][T16391] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  725.576001][T16391] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  726.057767][T16412] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  726.210392][T16419] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  726.873149][T16425] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  727.047838][ T6235] Bluetooth: hci3: command 0x0c1a tx timeout
[  727.100432][T16425] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input62
[  727.448448][ T6235] Bluetooth: hci5: command 0x0c1a tx timeout
[  727.527733][ T6235] Bluetooth: hci6: command 0x0c1a tx timeout
[  727.608147][ T6235] Bluetooth: hci7: command 0x0419 tx timeout
[  727.644059][T16432] tipc: Started in network mode
[  727.663677][T16432] tipc: Node identity ee00, cluster identity 4711
[  727.707058][T16432] tipc: Node number set to 60928
[  727.848925][T16430] FAULT_INJECTION: forcing a failure.
[  727.848925][T16430] name failslab, interval 1, probability 0, space 0, times 0
[  727.974098][T16430] CPU: 0 UID: 0 PID: 16430 Comm: syz.6.2069 Not tainted syzkaller #0 PREEMPT(full) 
[  727.974132][T16430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  727.974148][T16430] Call Trace:
[  727.974156][T16430]  <TASK>
[  727.974166][T16430]  dump_stack_lvl+0x16c/0x1f0
[  727.974201][T16430]  should_fail_ex+0x512/0x640
[  727.974229][T16430]  ? __kmalloc_cache_noprof+0x5f/0x770
[  727.974258][T16430]  should_failslab+0xc2/0x120
[  727.974295][T16430]  __kmalloc_cache_noprof+0x72/0x770
[  727.974321][T16430]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  727.974360][T16430]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  727.974393][T16430]  trace_pid_list_alloc+0x1b0/0x3f0
[  727.974430][T16430]  trace_pid_write+0x10c/0x4b0
[  727.974458][T16430]  ? __pfx_trace_pid_write+0x10/0x10
[  727.974480][T16430]  ? __pfx_aa_file_perm+0x10/0x10
[  727.974520][T16430]  ? __lock_acquire+0x433/0x22f0
[  727.974547][T16430]  ? update_last_data+0xb3/0x510
[  727.974587][T16430]  event_pid_write.isra.0+0x1e4/0x7f0
[  727.974632][T16430]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  727.974676][T16430]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  727.974712][T16430]  vfs_write+0x2a0/0x11d0
[  727.974749][T16430]  ? __pfx___mutex_lock+0x10/0x10
[  727.974784][T16430]  ? __pfx_vfs_write+0x10/0x10
[  727.974835][T16430]  ? __fget_files+0x20e/0x3c0
[  727.974878][T16430]  ksys_write+0x12a/0x250
[  727.974912][T16430]  ? __pfx_ksys_write+0x10/0x10
[  727.974954][T16430]  do_syscall_64+0xcd/0xf80
[  727.974988][T16430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.975013][T16430] RIP: 0033:0x7fbed0d8f7c9
[  727.975033][T16430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  727.975058][T16430] RSP: 002b:00007fbed1c68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  727.975081][T16430] RAX: ffffffffffffffda RBX: 00007fbed0fe6180 RCX: 00007fbed0d8f7c9
[  727.975097][T16430] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  727.975113][T16430] RBP: 00007fbed0e13f91 R08: 0000000000000000 R09: 0000000000000000
[  727.975128][T16430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  727.975144][T16430] R13: 00007fbed0fe6218 R14: 00007fbed0fe6180 R15: 00007fff11681128
[  727.975176][T16430]  </TASK>
[  728.641941][T16441] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  729.900336][T16456] FAULT_INJECTION: forcing a failure.
[  729.900336][T16456] name failslab, interval 1, probability 0, space 0, times 0
[  730.034484][T16456] CPU: 0 UID: 0 PID: 16456 Comm: syz.7.2077 Not tainted syzkaller #0 PREEMPT(full) 
[  730.034519][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  730.034534][T16456] Call Trace:
[  730.034542][T16456]  <TASK>
[  730.034554][T16456]  dump_stack_lvl+0x16c/0x1f0
[  730.034589][T16456]  should_fail_ex+0x512/0x640
[  730.034623][T16456]  ? __kmalloc_node_track_caller_noprof+0xcb/0x890
[  730.034661][T16456]  should_failslab+0xc2/0x120
[  730.034699][T16456]  __kmalloc_node_track_caller_noprof+0xde/0x890
[  730.034734][T16456]  ? snd_timer_instance_new+0x65/0x2e0
[  730.034776][T16456]  ? kstrdup+0x53/0x100
[  730.034799][T16456]  kstrdup+0x53/0x100
[  730.034825][T16456]  snd_timer_instance_new+0x65/0x2e0
[  730.034862][T16456]  __snd_timer_user_ioctl.isra.0+0x170b/0x27b0
[  730.034888][T16456]  ? lock_acquire+0x179/0x330
[  730.034917][T16456]  ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10
[  730.034960][T16456]  ? __pfx___might_resched+0x10/0x10
[  730.035004][T16456]  ? rcu_is_watching+0x12/0xc0
[  730.035052][T16456]  ? do_vfs_ioctl+0x128/0x14f0
[  730.035079][T16456]  ? snd_timer_user_ioctl+0x4a/0xd0
[  730.035102][T16456]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  730.035132][T16456]  ? __pfx___mutex_lock+0x10/0x10
[  730.035169][T16456]  ? find_held_lock+0x2b/0x80
[  730.035219][T16456]  snd_timer_user_ioctl+0x76/0xd0
[  730.035240][T16456]  ? __pfx_snd_timer_user_ioctl+0x10/0x10
[  730.035265][T16456]  __x64_sys_ioctl+0x18e/0x210
[  730.035296][T16456]  do_syscall_64+0xcd/0xf80
[  730.035328][T16456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  730.035354][T16456] RIP: 0033:0x7f6d43f8f7c9
[  730.035374][T16456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  730.035399][T16456] RSP: 002b:00007f6d44e54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  730.035422][T16456] RAX: ffffffffffffffda RBX: 00007f6d441e5fa0 RCX: 00007f6d43f8f7c9
[  730.035439][T16456] RDX: 0000200000000080 RSI: 0000000040345410 RDI: 0000000000000003
[  730.035455][T16456] RBP: 00007f6d44013f91 R08: 0000000000000000 R09: 0000000000000000
[  730.035471][T16456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  730.035486][T16456] R13: 00007f6d441e6038 R14: 00007f6d441e5fa0 R15: 00007ffc5e09f108
[  730.035519][T16456]  </TASK>
[  730.905309][T16460] FAULT_INJECTION: forcing a failure.
[  730.905309][T16460] name failslab, interval 1, probability 0, space 0, times 0
[  731.140680][T16464] hub 1-0:1.0: USB hub found
[  731.178587][T16464] hub 1-0:1.0: 1 port detected
[  731.187945][T16460] CPU: 0 UID: 0 PID: 16460 Comm: syz.6.2074 Not tainted syzkaller #0 PREEMPT(full) 
[  731.187977][T16460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  731.187992][T16460] Call Trace:
[  731.188000][T16460]  <TASK>
[  731.188010][T16460]  dump_stack_lvl+0x16c/0x1f0
[  731.188044][T16460]  should_fail_ex+0x512/0x640
[  731.188073][T16460]  ? __kmalloc_cache_noprof+0x5f/0x770
[  731.188102][T16460]  should_failslab+0xc2/0x120
[  731.188139][T16460]  __kmalloc_cache_noprof+0x72/0x770
[  731.188165][T16460]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  731.188203][T16460]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  731.188236][T16460]  trace_pid_list_alloc+0x1b0/0x3f0
[  731.188274][T16460]  trace_pid_write+0x10c/0x4b0
[  731.188301][T16460]  ? __pfx_trace_pid_write+0x10/0x10
[  731.188323][T16460]  ? __pfx_aa_file_perm+0x10/0x10
[  731.188363][T16460]  ? __lock_acquire+0x433/0x22f0
[  731.188390][T16460]  ? update_last_data+0xb3/0x510
[  731.188431][T16460]  event_pid_write.isra.0+0x1e4/0x7f0
[  731.188469][T16460]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  731.188529][T16460]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  731.188565][T16460]  vfs_write+0x2a0/0x11d0
[  731.188602][T16460]  ? __pfx___mutex_lock+0x10/0x10
[  731.188637][T16460]  ? __pfx_vfs_write+0x10/0x10
[  731.188678][T16460]  ? __fget_files+0x20e/0x3c0
[  731.188721][T16460]  ksys_write+0x12a/0x250
[  731.188754][T16460]  ? __pfx_ksys_write+0x10/0x10
[  731.188797][T16460]  do_syscall_64+0xcd/0xf80
[  731.188829][T16460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  731.188854][T16460] RIP: 0033:0x7fbed0d8f7c9
[  731.188874][T16460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  731.188899][T16460] RSP: 002b:00007fbed1c47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  731.188923][T16460] RAX: ffffffffffffffda RBX: 00007fbed0fe6270 RCX: 00007fbed0d8f7c9
[  731.188940][T16460] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  731.188955][T16460] RBP: 00007fbed0e13f91 R08: 0000000000000000 R09: 0000000000000000
[  731.188971][T16460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  731.188986][T16460] R13: 00007fbed0fe6308 R14: 00007fbed0fe6270 R15: 00007fff11681128
[  731.189019][T16460]  </TASK>
[  733.732100][T16493] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2084'.
[  734.548213][T16507] binder: 16506:16507 ioctl c0306201 0 returned -14
[  737.377845][T16524] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  737.420755][T16545] binder: 16544:16545 ioctl c0306201 0 returned -14
[  737.518876][T16524] FAULT_INJECTION: forcing a failure.
[  737.518876][T16524] name failslab, interval 1, probability 0, space 0, times 0
[  737.825167][T16524] CPU: 0 UID: 0 PID: 16524 Comm: syz.9.2089 Not tainted syzkaller #0 PREEMPT(full) 
[  737.825205][T16524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  737.825220][T16524] Call Trace:
[  737.825228][T16524]  <TASK>
[  737.825238][T16524]  dump_stack_lvl+0x16c/0x1f0
[  737.825273][T16524]  should_fail_ex+0x512/0x640
[  737.825302][T16524]  ? __kmalloc_cache_noprof+0x5f/0x770
[  737.825331][T16524]  should_failslab+0xc2/0x120
[  737.825368][T16524]  __kmalloc_cache_noprof+0x72/0x770
[  737.825394][T16524]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  737.825433][T16524]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  737.825465][T16524]  trace_pid_list_alloc+0x1b0/0x3f0
[  737.825503][T16524]  trace_pid_write+0x10c/0x4b0
[  737.825530][T16524]  ? __pfx_trace_pid_write+0x10/0x10
[  737.825552][T16524]  ? __pfx_aa_file_perm+0x10/0x10
[  737.825593][T16524]  ? __lock_acquire+0x433/0x22f0
[  737.825620][T16524]  ? update_last_data+0xb3/0x510
[  737.825661][T16524]  event_pid_write.isra.0+0x1e4/0x7f0
[  737.825699][T16524]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  737.825742][T16524]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  737.825778][T16524]  vfs_write+0x2a0/0x11d0
[  737.825813][T16524]  ? __pfx___mutex_lock+0x10/0x10
[  737.825848][T16524]  ? __pfx_vfs_write+0x10/0x10
[  737.825916][T16524]  ? __fget_files+0x20e/0x3c0
[  737.825959][T16524]  ksys_write+0x12a/0x250
[  737.825993][T16524]  ? __pfx_ksys_write+0x10/0x10
[  737.826036][T16524]  do_syscall_64+0xcd/0xf80
[  737.826069][T16524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.826095][T16524] RIP: 0033:0x7f4e35b8f7c9
[  737.826115][T16524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  737.826139][T16524] RSP: 002b:00007f4e33df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  737.826162][T16524] RAX: ffffffffffffffda RBX: 00007f4e35de6090 RCX: 00007f4e35b8f7c9
[  737.826179][T16524] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  737.826194][T16524] RBP: 00007f4e35c13f91 R08: 0000000000000000 R09: 0000000000000000
[  737.826210][T16524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  737.826225][T16524] R13: 00007f4e35de6128 R14: 00007f4e35de6090 R15: 00007ffe57ce5ee8
[  737.826258][T16524]  </TASK>
[  738.347224][T16538] FAULT_INJECTION: forcing a failure.
[  738.347224][T16538] name failslab, interval 1, probability 0, space 0, times 0
[  738.415681][T16538] CPU: 0 UID: 0 PID: 16538 Comm: syz.6.2090 Not tainted syzkaller #0 PREEMPT(full) 
[  738.415716][T16538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  738.415732][T16538] Call Trace:
[  738.415740][T16538]  <TASK>
[  738.415750][T16538]  dump_stack_lvl+0x16c/0x1f0
[  738.415786][T16538]  should_fail_ex+0x512/0x640
[  738.415815][T16538]  ? __kmalloc_cache_noprof+0x5f/0x770
[  738.415844][T16538]  should_failslab+0xc2/0x120
[  738.415881][T16538]  __kmalloc_cache_noprof+0x72/0x770
[  738.415907][T16538]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  738.415947][T16538]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  738.415979][T16538]  trace_pid_list_alloc+0x1b0/0x3f0
[  738.416018][T16538]  trace_pid_write+0x10c/0x4b0
[  738.416045][T16538]  ? __pfx_trace_pid_write+0x10/0x10
[  738.416067][T16538]  ? __pfx_aa_file_perm+0x10/0x10
[  738.416108][T16538]  ? __lock_acquire+0x433/0x22f0
[  738.416135][T16538]  ? update_last_data+0xb3/0x510
[  738.416182][T16538]  event_pid_write.isra.0+0x1e4/0x7f0
[  738.416222][T16538]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  738.416266][T16538]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  738.416302][T16538]  vfs_write+0x2a0/0x11d0
[  738.416338][T16538]  ? __pfx___mutex_lock+0x10/0x10
[  738.416373][T16538]  ? __pfx_vfs_write+0x10/0x10
[  738.416415][T16538]  ? __fget_files+0x20e/0x3c0
[  738.416462][T16538]  ksys_write+0x12a/0x250
[  738.416496][T16538]  ? __pfx_ksys_write+0x10/0x10
[  738.416538][T16538]  do_syscall_64+0xcd/0xf80
[  738.416570][T16538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.416595][T16538] RIP: 0033:0x7fbed0d8f7c9
[  738.416615][T16538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  738.416639][T16538] RSP: 002b:00007fbed1c68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  738.416662][T16538] RAX: ffffffffffffffda RBX: 00007fbed0fe6180 RCX: 00007fbed0d8f7c9
[  738.416679][T16538] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  738.416694][T16538] RBP: 00007fbed0e13f91 R08: 0000000000000000 R09: 0000000000000000
[  738.416709][T16538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  738.416724][T16538] R13: 00007fbed0fe6218 R14: 00007fbed0fe6180 R15: 00007fff11681128
[  738.416756][T16538]  </TASK>
[  739.588171][T16553] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input63
[  740.462529][T16562] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input64
[  741.559737][   T30] audit: type=1800 audit(4294967596.549:18): pid=16574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=78085 res=0 errno=0
[  742.088028][T16574] could not allocate digest TFM handle 
[  742.098317][T16576] zswap: compressor  not available
[  742.228852][T16570] FAULT_INJECTION: forcing a failure.
[  742.228852][T16570] name failslab, interval 1, probability 0, space 0, times 0
[  742.440225][T16570] CPU: 0 UID: 0 PID: 16570 Comm: syz.6.2099 Not tainted syzkaller #0 PREEMPT(full) 
[  742.440259][T16570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  742.440274][T16570] Call Trace:
[  742.440283][T16570]  <TASK>
[  742.440293][T16570]  dump_stack_lvl+0x16c/0x1f0
[  742.440327][T16570]  should_fail_ex+0x512/0x640
[  742.440357][T16570]  ? __kmalloc_cache_noprof+0x5f/0x770
[  742.440386][T16570]  should_failslab+0xc2/0x120
[  742.440423][T16570]  __kmalloc_cache_noprof+0x72/0x770
[  742.440449][T16570]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  742.440499][T16570]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  742.440532][T16570]  trace_pid_list_alloc+0x1b0/0x3f0
[  742.440570][T16570]  trace_pid_write+0x10c/0x4b0
[  742.440598][T16570]  ? __pfx_trace_pid_write+0x10/0x10
[  742.440620][T16570]  ? __pfx_aa_file_perm+0x10/0x10
[  742.440660][T16570]  ? __lock_acquire+0x433/0x22f0
[  742.440688][T16570]  ? update_last_data+0xb3/0x510
[  742.440729][T16570]  event_pid_write.isra.0+0x1e4/0x7f0
[  742.440768][T16570]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  742.440812][T16570]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  742.440847][T16570]  vfs_write+0x2a0/0x11d0
[  742.440883][T16570]  ? __pfx___mutex_lock+0x10/0x10
[  742.440919][T16570]  ? __pfx_vfs_write+0x10/0x10
[  742.440961][T16570]  ? __fget_files+0x20e/0x3c0
[  742.441003][T16570]  ksys_write+0x12a/0x250
[  742.441037][T16570]  ? __pfx_ksys_write+0x10/0x10
[  742.441079][T16570]  do_syscall_64+0xcd/0xf80
[  742.441112][T16570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.441137][T16570] RIP: 0033:0x7fbed0d8f7c9
[  742.441157][T16570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  742.441180][T16570] RSP: 002b:00007fbed1c89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  742.441203][T16570] RAX: ffffffffffffffda RBX: 00007fbed0fe6090 RCX: 00007fbed0d8f7c9
[  742.441219][T16570] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  742.441234][T16570] RBP: 00007fbed0e13f91 R08: 0000000000000000 R09: 0000000000000000
[  742.441250][T16570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  742.441265][T16570] R13: 00007fbed0fe6128 R14: 00007fbed0fe6090 R15: 00007fff11681128
[  742.441298][T16570]  </TASK>
[  745.292771][T16603] FAULT_INJECTION: forcing a failure.
[  745.292771][T16603] name failslab, interval 1, probability 0, space 0, times 0
[  745.330118][T16606] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  745.534657][T16603] CPU: 0 UID: 0 PID: 16603 Comm: syz.6.2103 Not tainted syzkaller #0 PREEMPT(full) 
[  745.534692][T16603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  745.534709][T16603] Call Trace:
[  745.534717][T16603]  <TASK>
[  745.534727][T16603]  dump_stack_lvl+0x16c/0x1f0
[  745.534761][T16603]  should_fail_ex+0x512/0x640
[  745.534790][T16603]  ? __kmalloc_cache_noprof+0x5f/0x770
[  745.534818][T16603]  should_failslab+0xc2/0x120
[  745.534854][T16603]  __kmalloc_cache_noprof+0x72/0x770
[  745.534879][T16603]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  745.534917][T16603]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  745.534948][T16603]  trace_pid_list_alloc+0x1b0/0x3f0
[  745.534985][T16603]  trace_pid_write+0x10c/0x4b0
[  745.535012][T16603]  ? __pfx_trace_pid_write+0x10/0x10
[  745.535033][T16603]  ? __pfx_aa_file_perm+0x10/0x10
[  745.535072][T16603]  ? __lock_acquire+0x433/0x22f0
[  745.535098][T16603]  ? update_last_data+0xb3/0x510
[  745.535138][T16603]  event_pid_write.isra.0+0x1e4/0x7f0
[  745.535175][T16603]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  745.535217][T16603]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  745.535340][T16603]  vfs_write+0x2a0/0x11d0
[  745.535383][T16603]  ? __pfx___mutex_lock+0x10/0x10
[  745.535419][T16603]  ? __pfx_vfs_write+0x10/0x10
[  745.535463][T16603]  ? __fget_files+0x20e/0x3c0
[  745.535507][T16603]  ksys_write+0x12a/0x250
[  745.535549][T16603]  ? __pfx_ksys_write+0x10/0x10
[  745.535689][T16603]  do_syscall_64+0xcd/0xf80
[  745.535726][T16603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  745.535755][T16603] RIP: 0033:0x7fbed0d8f7c9
[  745.535776][T16603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  745.535801][T16603] RSP: 002b:00007fbed1c47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  745.535824][T16603] RAX: ffffffffffffffda RBX: 00007fbed0fe6270 RCX: 00007fbed0d8f7c9
[  745.535840][T16603] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  745.535859][T16603] RBP: 00007fbed0e13f91 R08: 0000000000000000 R09: 0000000000000000
[  745.535875][T16603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  745.535891][T16603] R13: 00007fbed0fe6308 R14: 00007fbed0fe6270 R15: 00007fff11681128
[  745.535925][T16603]  </TASK>
[  746.198516][T16611] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input65
[  747.149936][T16615] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  748.472385][T16632] binder: 16631:16632 ioctl c0306201 0 returned -14
[  748.927954][   T30] audit: type=1800 audit(4294967603.889:19): pid=16636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=78500 res=0 errno=0
[  749.323548][T16636] could not allocate digest TFM handle 
[  749.838485][T16648] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  750.290535][T16654] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input66
[  750.804986][T16659] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input67
[  751.795832][T14441] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  751.822180][T14441] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  751.831101][T14441] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  751.841915][T14441] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  751.852409][T14441] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  752.047489][T16668] tipc: Started in network mode
[  752.054115][T16668] tipc: Node identity ee00, cluster identity 4711
[  752.095498][T16668] tipc: Node number set to 60928
[  753.091939][T16665] chnl_net:caif_netlink_parms(): no params data found
[  753.118921][T16679] FAULT_INJECTION: forcing a failure.
[  753.118921][T16679] name failslab, interval 1, probability 0, space 0, times 0
[  753.425667][T16679] CPU: 0 UID: 0 PID: 16679 Comm: syz.6.2120 Not tainted syzkaller #0 PREEMPT(full) 
[  753.425700][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  753.425714][T16679] Call Trace:
[  753.425723][T16679]  <TASK>
[  753.425732][T16679]  dump_stack_lvl+0x16c/0x1f0
[  753.425766][T16679]  should_fail_ex+0x512/0x640
[  753.425795][T16679]  ? __kmalloc_cache_noprof+0x5f/0x770
[  753.425823][T16679]  should_failslab+0xc2/0x120
[  753.425859][T16679]  __kmalloc_cache_noprof+0x72/0x770
[  753.425883][T16679]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  753.425921][T16679]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  753.425952][T16679]  trace_pid_list_alloc+0x1b0/0x3f0
[  753.425989][T16679]  trace_pid_write+0x10c/0x4b0
[  753.426016][T16679]  ? __pfx_trace_pid_write+0x10/0x10
[  753.426037][T16679]  ? __pfx_aa_file_perm+0x10/0x10
[  753.426078][T16679]  ? __lock_acquire+0x433/0x22f0
[  753.426107][T16679]  ? update_last_data+0xb3/0x510
[  753.426146][T16679]  event_pid_write.isra.0+0x1e4/0x7f0
[  753.426184][T16679]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  753.426226][T16679]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  753.426261][T16679]  vfs_write+0x2a0/0x11d0
[  753.426294][T16679]  ? __pfx___mutex_lock+0x10/0x10
[  753.426328][T16679]  ? __pfx_vfs_write+0x10/0x10
[  753.426366][T16679]  ? __fget_files+0x20e/0x3c0
[  753.426408][T16679]  ksys_write+0x12a/0x250
[  753.426441][T16679]  ? __pfx_ksys_write+0x10/0x10
[  753.426482][T16679]  do_syscall_64+0xcd/0xf80
[  753.426520][T16679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.426543][T16679] RIP: 0033:0x7fbed0d8f7c9
[  753.426561][T16679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  753.426584][T16679] RSP: 002b:00007fbed1c89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  753.426605][T16679] RAX: ffffffffffffffda RBX: 00007fbed0fe6090 RCX: 00007fbed0d8f7c9
[  753.426621][T16679] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  753.426634][T16679] RBP: 00007fbed0e13f91 R08: 0000000000000000 R09: 0000000000000000
[  753.426648][T16679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  753.426662][T16679] R13: 00007fbed0fe6128 R14: 00007fbed0fe6090 R15: 00007fff11681128
[  753.426693][T16679]  </TASK>
[  753.965122][T14441] Bluetooth: hci8: command tx timeout
[  754.213573][T16665] bridge0: port 1(bridge_slave_0) entered blocking state
[  754.227757][T16665] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.245552][T16665] bridge_slave_0: entered allmulticast mode
[  754.337432][T16665] bridge_slave_0: entered promiscuous mode
[  754.424568][T16665] bridge0: port 2(bridge_slave_1) entered blocking state
[  754.448970][T16665] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.477859][T16665] bridge_slave_1: entered allmulticast mode
[  754.507981][T16665] bridge_slave_1: entered promiscuous mode
[  754.631878][T16665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  754.683491][T16665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  754.774745][T16679] FAULT_INJECTION: forcing a failure.
[  754.774745][T16679] name failslab, interval 1, probability 0, space 0, times 0
[  754.805997][T16665] team0: Port device team_slave_0 added
[  754.888805][T16665] team0: Port device team_slave_1 added
[  755.051997][T16665] batman_adv: batadv0: Adding interface: batadv_slave_0
[  755.073673][T16679] CPU: 0 UID: 0 PID: 16679 Comm: syz.6.2120 Not tainted syzkaller #0 PREEMPT(full) 
[  755.073707][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  755.073722][T16679] Call Trace:
[  755.073730][T16679]  <TASK>
[  755.073740][T16679]  dump_stack_lvl+0x16c/0x1f0
[  755.073774][T16679]  should_fail_ex+0x512/0x640
[  755.073802][T16679]  ? fs_reclaim_acquire+0xae/0x150
[  755.073839][T16679]  should_failslab+0xc2/0x120
[  755.073881][T16679]  __kmalloc_noprof+0xdd/0x870
[  755.073905][T16679]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  755.073948][T16679]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  755.073985][T16679]  tomoyo_realpath_from_path+0xc2/0x6e0
[  755.074025][T16679]  ? tomoyo_profile+0x47/0x60
[  755.074056][T16679]  tomoyo_path_number_perm+0x245/0x580
[  755.074088][T16679]  ? tomoyo_path_number_perm+0x237/0x580
[  755.074123][T16679]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  755.074157][T16679]  ? find_held_lock+0x2b/0x80
[  755.074217][T16679]  ? find_held_lock+0x2b/0x80
[  755.074250][T16679]  ? hook_file_ioctl_common+0x145/0x410
[  755.074291][T16679]  ? __fget_files+0x20e/0x3c0
[  755.074328][T16679]  security_file_ioctl+0x9b/0x240
[  755.074364][T16679]  __x64_sys_ioctl+0xb7/0x210
[  755.074394][T16679]  do_syscall_64+0xcd/0xf80
[  755.074426][T16679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.074449][T16679] RIP: 0033:0x7fbed0d8f7c9
[  755.074469][T16679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  755.074493][T16679] RSP: 002b:00007fbed1c89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  755.074515][T16679] RAX: ffffffffffffffda RBX: 00007fbed0fe6090 RCX: 00007fbed0d8f7c9
[  755.074532][T16679] RDX: 00002000000000c0 RSI: 000000004008af00 RDI: 0000000000000007
[  755.074547][T16679] RBP: 00007fbed1c89090 R08: 0000000000000000 R09: 0000000000000000
[  755.074562][T16679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  755.074576][T16679] R13: 00007fbed0fe6128 R14: 00007fbed0fe6090 R15: 00007fff11681128
[  755.074615][T16679]  </TASK>
[  755.074624][T16679] ERROR: Out of memory at tomoyo_realpath_from_path.
[  755.307436][T16665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  755.401597][T16665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  755.692129][T16665] batman_adv: batadv0: Adding interface: batadv_slave_1
[  755.752551][T16665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  755.917647][T16665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  756.057712][T14441] Bluetooth: hci8: command tx timeout
[  756.256012][T16665] hsr_slave_0: entered promiscuous mode
[  756.288738][T16665] hsr_slave_1: entered promiscuous mode
[  756.318142][T16665] debugfs: 'hsr0' already exists in 'hsr'
[  756.323969][T16665] Cannot create hsr debugfs directory
[  757.538153][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  757.544617][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  758.039696][T16716] binder: 16715:16716 ioctl c0306201 0 returned -14
[  758.089758][T14441] Bluetooth: hci8: command tx timeout
[  759.022929][T16665] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  759.136673][T16665] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  759.418048][T16665] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  759.500522][T16665] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  759.951507][T16665] 8021q: adding VLAN 0 to HW filter on device bond0
[  760.102715][T16665] 8021q: adding VLAN 0 to HW filter on device team0
[  760.173696][T14441] Bluetooth: hci8: command tx timeout
[  760.199538][T16739] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  760.267211][ T2981] bridge0: port 1(bridge_slave_0) entered blocking state
[  760.274483][ T2981] bridge0: port 1(bridge_slave_0) entered forwarding state
[  760.434635][ T2981] bridge0: port 2(bridge_slave_1) entered blocking state
[  760.441879][ T2981] bridge0: port 2(bridge_slave_1) entered forwarding state
[  760.462381][T16741] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input68
[  761.513215][T16748] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  761.550229][T16751] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  761.763256][T16665] 8021q: adding VLAN 0 to HW filter on device batadv0
[  761.817355][T16757] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input69
[  761.971876][T16759] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input70
[  762.060105][T16665] veth0_vlan: entered promiscuous mode
[  762.160741][T16665] veth1_vlan: entered promiscuous mode
[  762.372260][T16665] veth0_macvtap: entered promiscuous mode
[  762.432875][T16665] veth1_macvtap: entered promiscuous mode
[  762.559969][T16665] batman_adv: batadv0: Interface activated: batadv_slave_0
[  762.669268][T16665] batman_adv: batadv0: Interface activated: batadv_slave_1
[  762.712990][   T30] audit: type=1800 audit(4294967617.699:20): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2135" name="dbroot" dev="configfs" ino=79495 res=0 errno=0
[  762.831075][T11039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  762.889652][   T30] audit: type=1800 audit(4294967617.759:21): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2135" name="dbroot" dev="configfs" ino=79495 res=0 errno=0
[  762.927099][T11039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  762.989327][T16767] Format for deleting device is "id" (uint).
[  763.019039][   T30] audit: type=1800 audit(4294967617.759:22): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2135" name="dbroot" dev="configfs" ino=79495 res=0 errno=0
[  763.063397][T11039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  763.143412][T11039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  763.218053][   T30] audit: type=1800 audit(4294967617.759:23): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2135" name="dbroot" dev="configfs" ino=79495 res=0 errno=0
[  763.393322][   T30] audit: type=1800 audit(4294967617.759:24): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2135" name="dbroot" dev="configfs" ino=79495 res=0 errno=0
[  763.438217][T11039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  763.503101][T11039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  763.557781][   T30] audit: type=1800 audit(4294967617.759:25): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2135" name="dbroot" dev="configfs" ino=79495 res=0 errno=0
[  763.678864][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  763.727935][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  763.737977][   T30] audit: type=1800 audit(4294967617.759:26): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2135" name="dbroot" dev="configfs" ino=79495 res=0 errno=0
[  763.901226][   T30] audit: type=1800 audit(4294967617.759:27): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2135" name="dbroot" dev="configfs" ino=79495 res=0 errno=0
[  764.042348][   T30] audit: type=1800 audit(4294967617.759:28): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2135" name="dbroot" dev="configfs" ino=79495 res=0 errno=0
[  764.208082][   T30] audit: type=1800 audit(4294967617.759:29): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2135" name="dbroot" dev="configfs" ino=79495 res=0 errno=0
[  764.977565][T16792] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  765.238555][T16795] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input71
[  766.977048][T16815] FAULT_INJECTION: forcing a failure.
[  766.977048][T16815] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  767.083348][T16815] CPU: 0 UID: 0 PID: 16815 Comm: syz.9.2149 Not tainted syzkaller #0 PREEMPT(full) 
[  767.083381][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  767.083396][T16815] Call Trace:
[  767.083404][T16815]  <TASK>
[  767.083414][T16815]  dump_stack_lvl+0x16c/0x1f0
[  767.083448][T16815]  should_fail_ex+0x512/0x640
[  767.083480][T16815]  _copy_from_iter+0x43b/0x16c0
[  767.083518][T16815]  ? __pfx__copy_from_iter+0x10/0x10
[  767.083554][T16815]  ? __pfx___might_resched+0x10/0x10
[  767.083593][T16815]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  767.083626][T16815]  file_tty_write.constprop.0+0x487/0x9b0
[  767.083671][T16815]  do_iter_readv_writev+0x662/0x9e0
[  767.083705][T16815]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  767.083735][T16815]  ? common_file_perm+0x1b1/0x500
[  767.083771][T16815]  ? bpf_lsm_file_permission+0x9/0x10
[  767.083796][T16815]  ? security_file_permission+0x71/0x210
[  767.083833][T16815]  ? rw_verify_area+0xcf/0x6c0
[  767.083865][T16815]  vfs_writev+0x35f/0xde0
[  767.083895][T16815]  ? proc_fail_nth_write+0x9f/0x220
[  767.083922][T16815]  ? __pfx_vfs_writev+0x10/0x10
[  767.083971][T16815]  ? __fget_files+0x20e/0x3c0
[  767.084000][T16815]  ? __fget_files+0x1d0/0x3c0
[  767.084036][T16815]  ? do_writev+0x132/0x340
[  767.084063][T16815]  do_writev+0x132/0x340
[  767.084091][T16815]  ? __pfx_do_writev+0x10/0x10
[  767.084128][T16815]  do_syscall_64+0xcd/0xf80
[  767.084158][T16815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.084181][T16815] RIP: 0033:0x7f4e35b8f7c9
[  767.084200][T16815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  767.084224][T16815] RSP: 002b:00007f4e36940038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  767.084247][T16815] RAX: ffffffffffffffda RBX: 00007f4e35de5fa0 RCX: 00007f4e35b8f7c9
[  767.084264][T16815] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[  767.084284][T16815] RBP: 00007f4e36940090 R08: 0000000000000000 R09: 0000000000000000
[  767.084300][T16815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  767.084315][T16815] R13: 00007f4e35de6038 R14: 00007f4e35de5fa0 R15: 00007ffe57ce5ee8
[  767.084347][T16815]  </TASK>
[  768.318315][T16826] ubi31: attaching mtd0
[  768.901058][T16830] binder: BINDER_SET_CONTEXT_MGR already set
[  769.000033][T16830] binder: 16827:16830 ioctl 4018620d 9 returned -16
[  769.980135][T16850] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  770.607090][T16859] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  770.945078][T16862] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input72
[  771.398578][T16872] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  771.702389][T16876] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input73
[  772.205273][T16879] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  772.570628][T16883] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input74
[  774.400489][T16912] FAULT_INJECTION: forcing a failure.
[  774.400489][T16912] name fail_futex, interval 1, probability 0, space 0, times 0
[  774.528619][T16921] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub.
[  774.610930][T16912] CPU: 0 UID: 0 PID: 16912 Comm: syz.9.2166 Not tainted syzkaller #0 PREEMPT(full) 
[  774.610964][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  774.610978][T16912] Call Trace:
[  774.610986][T16912]  <TASK>
[  774.610996][T16912]  dump_stack_lvl+0x16c/0x1f0
[  774.611031][T16912]  should_fail_ex+0x512/0x640
[  774.611061][T16912]  ? __schedule+0x114c/0x6150
[  774.611090][T16912]  get_futex_key+0x1d0/0x15f0
[  774.611123][T16912]  ? __pfx_get_futex_key+0x10/0x10
[  774.611160][T16912]  futex_wait_setup+0x9d/0x570
[  774.611205][T16912]  __futex_wait+0x193/0x2f0
[  774.611242][T16912]  ? __pfx___futex_wait+0x10/0x10
[  774.611276][T16912]  ? __lock_acquire+0x433/0x22f0
[  774.611307][T16912]  ? __pfx_futex_wake_mark+0x10/0x10
[  774.611347][T16912]  ? futex_hash+0x2c5/0x380
[  774.611377][T16912]  ? futex_private_hash_put+0x160/0x1b0
[  774.611407][T16912]  futex_wait+0xe8/0x380
[  774.611442][T16912]  ? __pfx_futex_wait+0x10/0x10
[  774.611486][T16912]  ? __lock_acquire+0x433/0x22f0
[  774.611518][T16912]  do_futex+0x229/0x350
[  774.611548][T16912]  ? __pfx_do_futex+0x10/0x10
[  774.611586][T16912]  ? find_held_lock+0x2b/0x80
[  774.611625][T16912]  __x64_sys_futex+0x1e0/0x4c0
[  774.611658][T16912]  ? __fget_files+0x20e/0x3c0
[  774.611692][T16912]  ? __pfx___x64_sys_futex+0x10/0x10
[  774.611727][T16912]  ? fdget+0x187/0x210
[  774.611764][T16912]  do_syscall_64+0xcd/0xf80
[  774.611796][T16912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.611821][T16912] RIP: 0033:0x7f4e35b8f7c9
[  774.611841][T16912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  774.611866][T16912] RSP: 002b:00007f4e33df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  774.611890][T16912] RAX: ffffffffffffffda RBX: 00007f4e35de6098 RCX: 00007f4e35b8f7c9
[  774.611906][T16912] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4e35de6098
[  774.611921][T16912] RBP: 00007f4e35de6090 R08: 0000000000000000 R09: 0000000000000000
[  774.611936][T16912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  774.611951][T16912] R13: 00007f4e35de6128 R14: 00007ffe57ce5e00 R15: 00007ffe57ce5ee8
[  774.611988][T16912]  </TASK>
[  775.458926][T16930] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  775.679683][T16933] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input75
[  776.020654][T16939] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  777.524834][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2180'.
[  777.600420][T16965] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2180'.
[  777.676545][T16961] netlink: zone id is out of range
[  777.722485][T16961] netlink: del zone limit has 4 unknown bytes
[  777.875133][T16961] HfR: entered promiscuous mode
[  778.529856][T16974] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  778.758783][T16978] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input76
[  778.768273][T16976] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  779.925484][T16991] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input77
[  780.151463][T16996] __vm_enough_memory: pid: 16996, comm: syz.8.2187, bytes: 4398046511104 not enough memory for the allocation
[  780.445564][T16994] FAULT_INJECTION: forcing a failure.
[  780.445564][T16994] name failslab, interval 1, probability 0, space 0, times 0
[  780.566390][T16994] CPU: 0 UID: 0 PID: 16994 Comm: syz.1.2186 Not tainted syzkaller #0 PREEMPT(full) 
[  780.566425][T16994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  780.566440][T16994] Call Trace:
[  780.566449][T16994]  <TASK>
[  780.566458][T16994]  dump_stack_lvl+0x16c/0x1f0
[  780.566492][T16994]  should_fail_ex+0x512/0x640
[  780.566521][T16994]  ? kmem_cache_alloc_lru_noprof+0x66/0x720
[  780.566553][T16994]  should_failslab+0xc2/0x120
[  780.566590][T16994]  kmem_cache_alloc_lru_noprof+0x79/0x720
[  780.566620][T16994]  ? alloc_inode+0xc3/0x240
[  780.566651][T16994]  ? alloc_inode+0xc3/0x240
[  780.566675][T16994]  alloc_inode+0xc3/0x240
[  780.566701][T16994]  new_inode+0x22/0x1c0
[  780.566729][T16994]  configfs_new_inode+0x24/0x4a0
[  780.566763][T16994]  configfs_create+0xd9/0x3a0
[  780.566797][T16994]  configfs_lookup+0x38f/0x780
[  780.566835][T16994]  ? __pfx_configfs_lookup+0x10/0x10
[  780.566870][T16994]  lookup_open.isra.0+0x4e2/0x1780
[  780.566908][T16994]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  780.566956][T16994]  ? mnt_get_write_access+0x1e9/0x2f0
[  780.566987][T16994]  path_openat+0x12bb/0x3140
[  780.567039][T16994]  ? __pfx_path_openat+0x10/0x10
[  780.567087][T16994]  do_filp_open+0x20b/0x470
[  780.567124][T16994]  ? __pfx_do_filp_open+0x10/0x10
[  780.567183][T16994]  ? alloc_fd+0x471/0x7d0
[  780.567225][T16994]  do_sys_openat2+0x11f/0x280
[  780.567251][T16994]  ? __pfx_do_sys_openat2+0x10/0x10
[  780.567278][T16994]  ? find_held_lock+0x2b/0x80
[  780.567323][T16994]  __x64_sys_openat+0x174/0x210
[  780.567350][T16994]  ? __pfx___x64_sys_openat+0x10/0x10
[  780.567389][T16994]  do_syscall_64+0xcd/0xf80
[  780.567421][T16994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.567446][T16994] RIP: 0033:0x7f2a6eb8f7c9
[  780.567466][T16994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  780.567494][T16994] RSP: 002b:00007f2a6fa51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  780.567517][T16994] RAX: ffffffffffffffda RBX: 00007f2a6ede6090 RCX: 00007f2a6eb8f7c9
[  780.567533][T16994] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  780.567549][T16994] RBP: 00007f2a6ec13f91 R08: 0000000000000000 R09: 0000000000000000
[  780.567565][T16994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  780.567580][T16994] R13: 00007f2a6ede6128 R14: 00007f2a6ede6090 R15: 00007ffcf674d678
[  780.567613][T16994]  </TASK>
[  781.356657][T17003] FAULT_INJECTION: forcing a failure.
[  781.356657][T17003] name failslab, interval 1, probability 0, space 0, times 0
[  781.413263][T17003] CPU: 0 UID: 0 PID: 17003 Comm: syz.6.2190 Not tainted syzkaller #0 PREEMPT(full) 
[  781.413298][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  781.413314][T17003] Call Trace:
[  781.413322][T17003]  <TASK>
[  781.413333][T17003]  dump_stack_lvl+0x16c/0x1f0
[  781.413367][T17003]  should_fail_ex+0x512/0x640
[  781.413396][T17003]  ? __kmalloc_cache_noprof+0x5f/0x770
[  781.413425][T17003]  should_failslab+0xc2/0x120
[  781.413462][T17003]  __kmalloc_cache_noprof+0x72/0x770
[  781.413487][T17003]  ? __pfx_snd_pcm_hw_rule_add+0x10/0x10
[  781.413521][T17003]  ? __pfx_snd_pcm_hw_rule_add+0x10/0x10
[  781.413554][T17003]  ? loopback_open+0x145/0x13f0
[  781.413588][T17003]  ? loopback_open+0x145/0x13f0
[  781.413616][T17003]  loopback_open+0x145/0x13f0
[  781.413653][T17003]  snd_pcm_open_substream+0xa60/0x17f0
[  781.413683][T17003]  ? __pfx_snd_pcm_open_substream+0x10/0x10
[  781.413719][T17003]  snd_pcm_open+0x29e/0x730
[  781.413749][T17003]  ? __pfx_snd_pcm_open+0x10/0x10
[  781.413779][T17003]  ? __pfx_default_wake_function+0x10/0x10
[  781.413825][T17003]  ? __pfx_snd_pcm_playback_open+0x10/0x10
[  781.413853][T17003]  snd_pcm_playback_open+0x86/0xe0
[  781.413881][T17003]  snd_open+0x22d/0x4c0
[  781.413915][T17003]  ? __pfx_snd_open+0x10/0x10
[  781.413949][T17003]  chrdev_open+0x234/0x6a0
[  781.413995][T17003]  ? __pfx_apparmor_file_open+0x10/0x10
[  781.414026][T17003]  ? __pfx_chrdev_open+0x10/0x10
[  781.414064][T17003]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  781.414109][T17003]  do_dentry_open+0x748/0x1590
[  781.414143][T17003]  ? __pfx_chrdev_open+0x10/0x10
[  781.414188][T17003]  vfs_open+0x82/0x3f0
[  781.414217][T17003]  path_openat+0x2078/0x3140
[  781.414262][T17003]  ? __pfx_path_openat+0x10/0x10
[  781.414310][T17003]  do_filp_open+0x20b/0x470
[  781.414346][T17003]  ? __pfx_do_filp_open+0x10/0x10
[  781.414405][T17003]  ? alloc_fd+0x471/0x7d0
[  781.414448][T17003]  do_sys_openat2+0x11f/0x280
[  781.414474][T17003]  ? __pfx_do_sys_openat2+0x10/0x10
[  781.414511][T17003]  __x64_sys_openat+0x174/0x210
[  781.414538][T17003]  ? __pfx___x64_sys_openat+0x10/0x10
[  781.414577][T17003]  do_syscall_64+0xcd/0xf80
[  781.414610][T17003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.414635][T17003] RIP: 0033:0x7fbed0d8f7c9
[  781.414655][T17003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  781.414679][T17003] RSP: 002b:00007fbed1c89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  781.414703][T17003] RAX: ffffffffffffffda RBX: 00007fbed0fe6090 RCX: 00007fbed0d8f7c9
[  781.414720][T17003] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c
[  781.414736][T17003] RBP: 00007fbed0e13f91 R08: 0000000000000000 R09: 0000000000000000
[  781.414751][T17003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  781.414766][T17003] R13: 00007fbed0fe6128 R14: 00007fbed0fe6090 R15: 00007fff11681128
[  781.414799][T17003]  </TASK>
[  782.284258][T17011] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  782.489840][T17014] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input78
[  783.068435][T17020] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  787.740656][T17049] binder: 17048:17049 ioctl 8008563f 38 returned -22
[  789.881138][T17096] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(26.0.2), cmd(4)
[  790.297852][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  790.297873][   T30] audit: type=1800 audit(4294967645.259:53): pid=17102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2216" name="dbroot" dev="configfs" ino=81535 res=0 errno=0
[  790.371147][T17097] sctp: [Deprecated]: syz.9.2213 (pid 17097) Use of struct sctp_assoc_value in delayed_ack socket option.
[  790.371147][T17097] Use struct sctp_sack_info instead
[  791.955985][T17119] binder: 17116:17119 ioctl 400c620e 0 returned -22
[  792.472983][T17125] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.6.2219: bg 2: bad block bitmap checksum
[  792.577369][T17125] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 897 with max blocks 26 with error 74
[  792.642404][T17125] EXT4-fs (sda1): This should not happen!! Data will be lost
[  792.642404][T17125] 
[  793.078689][T14441] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18
[  793.244967][T17134] netlink: zone id is out of range
[  793.563635][T17136] HfR: entered promiscuous mode
[  793.626058][T17134] netlink: del zone limit has 4 unknown bytes
[  794.762234][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'.
[  795.007201][T17158] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  795.133470][T14441] Bluetooth: hci7: command 0x0419 tx timeout
[  795.451869][T17164] block nbd7: not configured, cannot reconfigure

syzkaller
syzkaller login: [  796.757567][T17172] FAULT_INJECTION: forcing a failure.
[  796.757567][T17172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  796.870214][T17172] CPU: 0 UID: 0 PID: 17172 Comm: syz.6.2229 Not tainted syzkaller #0 PREEMPT(full) 
[  796.870249][T17172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  796.870263][T17172] Call Trace:
[  796.870271][T17172]  <TASK>
[  796.870282][T17172]  dump_stack_lvl+0x16c/0x1f0
[  796.870317][T17172]  should_fail_ex+0x512/0x640
[  796.870349][T17172]  _copy_from_iter+0x43b/0x16c0
[  796.870387][T17172]  ? __pfx__copy_from_iter+0x10/0x10
[  796.870420][T17172]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  796.870448][T17172]  ? __pfx___might_resched+0x10/0x10
[  796.870485][T17172]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  796.870518][T17172]  file_tty_write.constprop.0+0x487/0x9b0
[  796.870561][T17172]  do_iter_readv_writev+0x662/0x9e0
[  796.870596][T17172]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  796.870626][T17172]  ? common_file_perm+0x1b1/0x500
[  796.870661][T17172]  ? bpf_lsm_file_permission+0x9/0x10
[  796.870686][T17172]  ? security_file_permission+0x71/0x210
[  796.870723][T17172]  ? rw_verify_area+0xcf/0x6c0
[  796.870754][T17172]  vfs_writev+0x35f/0xde0
[  796.870784][T17172]  ? proc_fail_nth_write+0x9f/0x220
[  796.870811][T17172]  ? __pfx_vfs_writev+0x10/0x10
[  796.870861][T17172]  ? __fget_files+0x20e/0x3c0
[  796.870897][T17172]  ? __fget_files+0x1d0/0x3c0
[  796.870936][T17172]  ? do_writev+0x132/0x340
[  796.870963][T17172]  do_writev+0x132/0x340
[  796.870993][T17172]  ? __pfx_do_writev+0x10/0x10
[  796.871032][T17172]  do_syscall_64+0xcd/0xf80
[  796.871063][T17172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.871087][T17172] RIP: 0033:0x7fbed0d8f7c9
[  796.871106][T17172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  796.871130][T17172] RSP: 002b:00007fbed1caa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  796.871153][T17172] RAX: ffffffffffffffda RBX: 00007fbed0fe5fa0 RCX: 00007fbed0d8f7c9
[  796.871169][T17172] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[  796.871183][T17172] RBP: 00007fbed1caa090 R08: 0000000000000000 R09: 0000000000000000
[  796.871198][T17172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  796.871213][T17172] R13: 00007fbed0fe6038 R14: 00007fbed0fe5fa0 R15: 00007fff11681128
[  796.871248][T17172]  </TASK>
[  799.438073][ T6235] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  799.449343][ T6235] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  799.460817][ T6235] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  799.468752][ T6235] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  799.476229][ T6235] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  800.442603][T17198] chnl_net:caif_netlink_parms(): no params data found
[  800.735523][T17201] FAULT_INJECTION: forcing a failure.
[  800.735523][T17201] name failslab, interval 1, probability 0, space 0, times 0
[  801.057213][T17201] CPU: 0 UID: 0 PID: 17201 Comm: syz.6.2236 Not tainted syzkaller #0 PREEMPT(full) 
[  801.057247][T17201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  801.057263][T17201] Call Trace:
[  801.057271][T17201]  <TASK>
[  801.057282][T17201]  dump_stack_lvl+0x16c/0x1f0
[  801.057318][T17201]  should_fail_ex+0x512/0x640
[  801.057346][T17201]  ? __kmalloc_cache_noprof+0x5f/0x770
[  801.057375][T17201]  should_failslab+0xc2/0x120
[  801.057412][T17201]  __kmalloc_cache_noprof+0x72/0x770
[  801.057438][T17201]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  801.057482][T17201]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  801.057515][T17201]  trace_pid_list_alloc+0x1b0/0x3f0
[  801.057552][T17201]  trace_pid_write+0x10c/0x4b0
[  801.057580][T17201]  ? __pfx_trace_pid_write+0x10/0x10
[  801.057601][T17201]  ? __pfx_aa_file_perm+0x10/0x10
[  801.057642][T17201]  ? __lock_acquire+0x433/0x22f0
[  801.057669][T17201]  ? update_last_data+0xb3/0x510
[  801.057709][T17201]  event_pid_write.isra.0+0x1e4/0x7f0
[  801.057747][T17201]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  801.057792][T17201]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  801.057827][T17201]  vfs_write+0x2a0/0x11d0
[  801.057870][T17201]  ? __pfx___mutex_lock+0x10/0x10
[  801.057906][T17201]  ? __pfx_vfs_write+0x10/0x10
[  801.057948][T17201]  ? __fget_files+0x20e/0x3c0
[  801.057992][T17201]  ksys_write+0x12a/0x250
[  801.058025][T17201]  ? __pfx_ksys_write+0x10/0x10
[  801.058068][T17201]  do_syscall_64+0xcd/0xf80
[  801.058101][T17201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  801.058126][T17201] RIP: 0033:0x7fbed0d8f7c9
[  801.058146][T17201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  801.058170][T17201] RSP: 002b:00007fbed1c68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  801.058200][T17201] RAX: ffffffffffffffda RBX: 00007fbed0fe6180 RCX: 00007fbed0d8f7c9
[  801.058217][T17201] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  801.058233][T17201] RBP: 00007fbed0e13f91 R08: 0000000000000000 R09: 0000000000000000
[  801.058249][T17201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  801.058265][T17201] R13: 00007fbed0fe6218 R14: 00007fbed0fe6180 R15: 00007fff11681128
[  801.058298][T17201]  </TASK>
[  801.322552][T17212] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  801.647589][ T6235] Bluetooth: hci9: command tx timeout
[  801.870439][T17217] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input79
[  802.624691][T17198] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.696809][T17198] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.749972][T17198] bridge_slave_0: entered allmulticast mode
[  802.802258][T17198] bridge_slave_0: entered promiscuous mode
[  802.863535][T17198] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.917959][T17198] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.959962][T17198] bridge_slave_1: entered allmulticast mode
[  803.017717][T17198] bridge_slave_1: entered promiscuous mode
[  803.221312][T17198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  803.304986][T17198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  803.428867][T17227] hub 1-0:1.0: USB hub found
[  803.540485][T17227] hub 1-0:1.0: 1 port detected
[  803.588163][T17198] team0: Port device team_slave_0 added
[  803.639433][T17198] team0: Port device team_slave_1 added
[  803.688887][ T6235] Bluetooth: hci9: command tx timeout
[  803.853417][T17198] batman_adv: batadv0: Adding interface: batadv_slave_0
[  803.901819][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  804.083396][T17198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  804.175500][T17198] batman_adv: batadv0: Adding interface: batadv_slave_1
[  804.211239][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  804.389110][T17198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  804.621031][T17238] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  804.682289][T17198] hsr_slave_0: entered promiscuous mode
[  804.718744][T17198] hsr_slave_1: entered promiscuous mode
[  804.725722][T17237] FAULT_INJECTION: forcing a failure.
[  804.725722][T17237] name failslab, interval 1, probability 0, space 0, times 0
[  804.776579][T17198] debugfs: 'hsr0' already exists in 'hsr'
[  804.798711][T17198] Cannot create hsr debugfs directory
[  804.921106][T17237] CPU: 0 UID: 0 PID: 17237 Comm: syz.1.2244 Not tainted syzkaller #0 PREEMPT(full) 
[  804.921141][T17237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  804.921156][T17237] Call Trace:
[  804.921165][T17237]  <TASK>
[  804.921174][T17237]  dump_stack_lvl+0x16c/0x1f0
[  804.921209][T17237]  should_fail_ex+0x512/0x640
[  804.921238][T17237]  ? __kmalloc_cache_noprof+0x5f/0x770
[  804.921266][T17237]  should_failslab+0xc2/0x120
[  804.921305][T17237]  __kmalloc_cache_noprof+0x72/0x770
[  804.921330][T17237]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  804.921368][T17237]  ? trace_pid_list_alloc+0x1b0/0x3f0
[  804.921400][T17237]  trace_pid_list_alloc+0x1b0/0x3f0
[  804.921438][T17237]  trace_pid_write+0x10c/0x4b0
[  804.921466][T17237]  ? __pfx_trace_pid_write+0x10/0x10
[  804.921487][T17237]  ? __pfx_aa_file_perm+0x10/0x10
[  804.921527][T17237]  ? __lock_acquire+0x433/0x22f0
[  804.921555][T17237]  ? update_last_data+0xb3/0x510
[  804.921595][T17237]  event_pid_write.isra.0+0x1e4/0x7f0
[  804.921633][T17237]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  804.921677][T17237]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  804.921713][T17237]  vfs_write+0x2a0/0x11d0
[  804.921748][T17237]  ? __pfx___mutex_lock+0x10/0x10
[  804.921784][T17237]  ? __pfx_vfs_write+0x10/0x10
[  804.921828][T17237]  ? __fget_files+0x20e/0x3c0
[  804.921871][T17237]  ksys_write+0x12a/0x250
[  804.921904][T17237]  ? __pfx_ksys_write+0x10/0x10
[  804.921947][T17237]  do_syscall_64+0xcd/0xf80
[  804.921979][T17237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.922005][T17237] RIP: 0033:0x7f2a6eb8f7c9
[  804.922024][T17237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  804.922048][T17237] RSP: 002b:00007f2a6fa72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  804.922078][T17237] RAX: ffffffffffffffda RBX: 00007f2a6ede5fa0 RCX: 00007f2a6eb8f7c9
[  804.922095][T17237] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  804.922111][T17237] RBP: 00007f2a6ec13f91 R08: 0000000000000000 R09: 0000000000000000
[  804.922127][T17237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  804.922143][T17237] R13: 00007f2a6ede6038 R14: 00007f2a6ede5fa0 R15: 00007ffcf674d678
[  804.922175][T17237]  </TASK>
[  805.535877][T17244] binder: 17243:17244 ioctl c0306201 0 returned -14
[  805.837775][ T6235] Bluetooth: hci9: command tx timeout
[  806.435994][T17247] device-mapper: ioctl: Invalid ioctl structure: name �������d, dev 3000000000
[  806.975100][T17198] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  807.003917][T17257] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  807.065963][T17198] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  807.102824][T17198] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  807.142132][T17198] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  807.352587][T17266] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input80
[  807.840282][T17198] 8021q: adding VLAN 0 to HW filter on device bond0
[  807.848238][ T6235] Bluetooth: hci9: command tx timeout
[  807.943719][T17198] 8021q: adding VLAN 0 to HW filter on device team0
[  808.004784][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state
[  808.012036][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  808.156939][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state
[  808.164210][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  808.233710][T17272] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  808.272803][T17277] binder: 17275:17277 ioctl c0306201 0 returned -14
[  809.258573][T17283] FAULT_INJECTION: forcing a failure.
[  809.258573][T17283] name failslab, interval 1, probability 0, space 0, times 0
[  809.370638][T17283] CPU: 0 UID: 0 PID: 17283 Comm: syz.6.2252 Not tainted syzkaller #0 PREEMPT(full) 
[  809.370678][T17283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  809.370693][T17283] Call Trace:
[  809.370701][T17283]  <TASK>
[  809.370711][T17283]  dump_stack_lvl+0x16c/0x1f0
[  809.370745][T17283]  should_fail_ex+0x512/0x640
[  809.370774][T17283]  ? kmem_cache_alloc_noprof+0x62/0x720
[  809.370805][T17283]  should_failslab+0xc2/0x120
[  809.370843][T17283]  kmem_cache_alloc_noprof+0x75/0x720
[  809.370869][T17283]  ? __kernfs_new_node+0xd2/0x8d0
[  809.370903][T17283]  ? __kernfs_new_node+0xd2/0x8d0
[  809.370929][T17283]  __kernfs_new_node+0xd2/0x8d0
[  809.370962][T17283]  ? __pfx___kernfs_new_node+0x10/0x10
[  809.370998][T17283]  ? find_held_lock+0x2b/0x80
[  809.371036][T17283]  ? kernfs_root+0xee/0x2a0
[  809.371070][T17283]  kernfs_new_node+0x13c/0x1e0
[  809.371108][T17283]  __kernfs_create_file+0x53/0x350
[  809.371151][T17283]  cgroup_addrm_files+0x546/0xc20
[  809.371198][T17283]  ? __xa_store+0x1dc/0x2e0
[  809.371231][T17283]  ? __pfx_cgroup_addrm_files+0x10/0x10
[  809.371267][T17283]  ? __pfx___xa_store+0x10/0x10
[  809.371310][T17283]  ? do_raw_spin_unlock+0x172/0x230
[  809.371350][T17283]  css_populate_dir+0x169/0x570
[  809.371385][T17283]  cgroup_apply_control_enable+0x3f3/0xbb0
[  809.371432][T17283]  cgroup_mkdir+0x5e0/0x12e0
[  809.371486][T17283]  ? __pfx_cgroup_mkdir+0x10/0x10
[  809.371525][T17283]  kernfs_iop_mkdir+0x111/0x190
[  809.371556][T17283]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  809.371597][T17283]  vfs_mkdir+0x731/0xb60
[  809.371630][T17283]  do_mkdirat+0x442/0x5e0
[  809.371670][T17283]  ? __pfx_do_mkdirat+0x10/0x10
[  809.371706][T17283]  ? strncpy_from_user+0x203/0x2e0
[  809.371736][T17283]  ? getname_flags.part.0+0x1c5/0x550
[  809.371765][T17283]  __x64_sys_mkdir+0xef/0x140
[  809.371803][T17283]  do_syscall_64+0xcd/0xf80
[  809.371836][T17283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  809.371862][T17283] RIP: 0033:0x7fbed0d8f7c9
[  809.371881][T17283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  809.371905][T17283] RSP: 002b:00007fbed1caa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  809.371927][T17283] RAX: ffffffffffffffda RBX: 00007fbed0fe5fa0 RCX: 00007fbed0d8f7c9
[  809.371943][T17283] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000
[  809.371958][T17283] RBP: 00007fbed0e13f91 R08: 0000000000000000 R09: 0000000000000000
[  809.371973][T17283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  809.371988][T17283] R13: 00007fbed0fe6038 R14: 00007fbed0fe5fa0 R15: 00007fff11681128
[  809.372021][T17283]  </TASK>
[  809.372049][T17283] cgroup: cgroup_addrm_files: failed to add pressure_level, err=-12
[  810.443377][T17198] 8021q: adding VLAN 0 to HW filter on device batadv0
[  810.506597][T17294] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2253'.
[  810.719329][T17294] program syz.1.2253 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  811.138810][T17300] FAULT_INJECTION: forcing a failure.
[  811.138810][T17300] name failslab, interval 1, probability 0, space 0, times 0
[  811.251074][T17300] CPU: 0 UID: 0 PID: 17300 Comm: syz.9.2254 Not tainted syzkaller #0 PREEMPT(full) 
[  811.251110][T17300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  811.251126][T17300] Call Trace:
[  811.251134][T17300]  <TASK>
[  811.251144][T17300]  dump_stack_lvl+0x16c/0x1f0
[  811.251177][T17300]  should_fail_ex+0x512/0x640
[  811.251206][T17300]  ? kmem_cache_alloc_noprof+0x62/0x720
[  811.251237][T17300]  should_failslab+0xc2/0x120
[  811.251283][T17300]  kmem_cache_alloc_noprof+0x75/0x720
[  811.251310][T17300]  ? getname_flags.part.0+0x4c/0x550
[  811.251342][T17300]  ? getname_flags.part.0+0x4c/0x550
[  811.251367][T17300]  getname_flags.part.0+0x4c/0x550
[  811.251396][T17300]  getname_flags+0x93/0xf0
[  811.251428][T17300]  do_sys_openat2+0xb8/0x280
[  811.251454][T17300]  ? __pfx_do_sys_openat2+0x10/0x10
[  811.251482][T17300]  ? putname+0xf5/0x1a0
[  811.251526][T17300]  __x64_sys_openat+0x174/0x210
[  811.251553][T17300]  ? __pfx___x64_sys_openat+0x10/0x10
[  811.251592][T17300]  do_syscall_64+0xcd/0xf80
[  811.251625][T17300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.251651][T17300] RIP: 0033:0x7f4e35b8f7c9
[  811.251670][T17300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  811.251695][T17300] RSP: 002b:00007f4e36940038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  811.251718][T17300] RAX: ffffffffffffffda RBX: 00007f4e35de5fa0 RCX: 00007f4e35b8f7c9
[  811.251735][T17300] RDX: 0000000000000200 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  811.251752][T17300] RBP: 00007f4e35c13f91 R08: 0000000000000000 R09: 0000000000000000
[  811.251767][T17300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  811.251782][T17300] R13: 00007f4e35de6038 R14: 00007f4e35de5fa0 R15: 00007ffe57ce5ee8
[  811.251813][T17300]  </TASK>
[  811.439401][    C0] vkms_vblank_simulate: vblank timer overrun
[  811.477553][T17302] netlink: 330 bytes leftover after parsing attributes in process `syz.9.2254'.
[  811.486745][T17302] mac80211_hwsim hwsim27 �: renamed from wlan0 (while UP)
[  811.932744][T17309] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  812.234214][T17198] veth0_vlan: entered promiscuous mode
[  812.319590][T17198] veth1_vlan: entered promiscuous mode
[  812.461271][T17198] veth0_macvtap: entered promiscuous mode
[  812.521842][T17198] veth1_macvtap: entered promiscuous mode
[  812.546449][T17313] netlink: 17 bytes leftover after parsing attributes in process `syz.9.2257'.
[  812.638317][T17198] batman_adv: batadv0: Interface activated: batadv_slave_0
[  812.711406][T17198] batman_adv: batadv0: Interface activated: batadv_slave_1
[  812.799678][T14422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  812.862531][T14422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  812.943119][T14422] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  812.989548][T14422] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  813.265338][T11037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  813.313637][T11037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  813.428611][T17320] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input81
[  813.442564][T11037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  813.479400][T11037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  813.866352][   T31] INFO: task syz.0.1962:15790 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  813.908963][   T31]       Not tainted syzkaller #0
[  813.973345][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  814.046441][   T31] task:syz.0.1962      state:D stack:27544 pid:15790 tgid:15789 ppid:5842   task_flags:0x400140 flags:0x00080002
[  814.209191][   T31] Call Trace:
[  814.212538][   T31]  <TASK>
[  814.215603][   T31]  ? __schedule+0x10b9/0x6150
[  814.291221][   T31]  __schedule+0x1139/0x6150
[  814.320017][   T31]  ? __pfx___schedule+0x10/0x10
[  814.390965][   T31]  ? find_held_lock+0x2b/0x80
[  814.455293][   T31]  ? schedule+0x2d7/0x3a0
[  814.497984][   T31]  schedule+0xe7/0x3a0
[  814.567804][   T31]  schedule_preempt_disabled+0x13/0x30
[  814.573340][   T31]  __mutex_lock+0xcf8/0x1b10
[  814.662475][   T31]  ? nfsd_nl_threads_set_doit+0x687/0xbc0
[  814.712222][   T31]  ? __lock_acquire+0x433/0x22f0
[  814.717281][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  814.768657][   T31]  ? net_generic+0xea/0x2a0
[  814.773245][   T31]  ? nfsd_nl_threads_set_doit+0x687/0xbc0
[  814.803895][   T31]  nfsd_nl_threads_set_doit+0x687/0xbc0
[  814.814868][   T31]  genl_family_rcv_msg_doit+0x209/0x2f0
[  814.847888][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  814.854043][   T31]  ? __dev_queue_xmit+0xaf1/0x4330
[  814.897650][   T31]  ? genl_get_cmd+0x194/0x580
[  814.902414][   T31]  ? bpf_lsm_capable+0x9/0x10
[  814.907118][   T31]  ? security_capable+0x7e/0x260
[  814.937759][   T31]  genl_rcv_msg+0x55c/0x800
[  814.942349][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  814.947412][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  814.997671][   T31]  netlink_rcv_skb+0x158/0x420
[  815.002685][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  815.027552][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  815.032947][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  815.050646][   T31]  genl_rcv+0x28/0x40
[  815.054785][   T31]  netlink_unicast+0x5aa/0x870
[  815.067826][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  815.087615][   T31]  netlink_sendmsg+0x8c8/0xdd0
[  815.092456][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  815.117865][   T31]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  815.124023][   T31]  ____sys_sendmsg+0xa5d/0xc30
[  815.137668][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  815.143221][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  815.167589][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[  815.172958][   T31]  ___sys_sendmsg+0x134/0x1d0
[  815.197651][   T31]  ? find_held_lock+0x2b/0x80
[  815.202512][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  815.227572][   T31]  ? __lock_acquire+0x433/0x22f0
[  815.232618][   T31]  __sys_sendmsg+0x16d/0x220
[  815.237236][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  815.257816][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[  815.262841][   T31]  do_syscall_64+0xcd/0xf80
[  815.267371][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.295309][   T31] RIP: 0033:0x7fee54b8f7c9
[  815.307937][   T31] RSP: 002b:00007fee559cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  815.316526][   T31] RAX: ffffffffffffffda RBX: 00007fee54de5fa0 RCX: 00007fee54b8f7c9
[  815.347589][   T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003
[  815.355626][   T31] RBP: 00007fee54c13f91 R08: 0000000000000000 R09: 0000000000000000
[  815.377842][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  815.402301][   T31] R13: 00007fee54de6038 R14: 00007fee54de5fa0 R15: 00007ffc0dd9c668
[  815.417603][   T31]  </TASK>
[  815.440267][   T31] INFO: task syz.5.1967:15805 blocked for more than 144 seconds.
[  815.590377][   T31]       Not tainted syzkaller #0
[  815.595373][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  815.638310][   T31] task:syz.5.1967      state:D stack:27544 pid:15805 tgid:15804 ppid:15600  task_flags:0x400140 flags:0x00080002
[  815.694888][   T31] Call Trace:
[  815.717606][   T31]  <TASK>
[  815.720614][   T31]  ? __schedule+0x10b9/0x6150
[  815.725406][   T31]  __schedule+0x1139/0x6150
[  815.748312][   T31]  ? __lock_acquire+0x433/0x22f0
[  815.753331][   T31]  ? __pfx___schedule+0x10/0x10
[  815.788955][   T31]  ? find_held_lock+0x2b/0x80
[  815.817618][   T31]  ? schedule+0x2d7/0x3a0
[  815.822023][   T31]  schedule+0xe7/0x3a0
[  815.826115][   T31]  schedule_preempt_disabled+0x13/0x30
[  815.870141][   T31]  __mutex_lock+0xcf8/0x1b10
[  815.874822][   T31]  ? nfsd_nl_threads_set_doit+0x687/0xbc0
[  815.933510][   T31]  ? __lock_acquire+0x433/0x22f0
[  815.957558][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  815.962674][   T31]  ? net_generic+0xea/0x2a0
[  815.967211][   T31]  ? nfsd_nl_threads_set_doit+0x687/0xbc0
[  816.014766][   T31]  nfsd_nl_threads_set_doit+0x687/0xbc0
[  816.037550][   T31]  genl_family_rcv_msg_doit+0x209/0x2f0
[  816.043189][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  816.077560][   T31]  ? __dev_queue_xmit+0xaf1/0x4330
[  816.082754][   T31]  ? genl_get_cmd+0x194/0x580
[  816.087473][   T31]  ? bpf_lsm_capable+0x9/0x10
[  816.133690][   T31]  ? security_capable+0x7e/0x260
[  816.156578][   T31]  genl_rcv_msg+0x55c/0x800
[  816.171080][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  816.176176][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  816.197574][   T31]  netlink_rcv_skb+0x158/0x420
[  816.211107][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  816.216203][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  816.239008][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  816.244367][   T31]  genl_rcv+0x28/0x40
[  816.267676][   T31]  netlink_unicast+0x5aa/0x870
[  816.272624][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  816.287906][   T31]  netlink_sendmsg+0x8c8/0xdd0
[  816.292742][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  816.317632][   T31]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  816.323869][   T31]  ____sys_sendmsg+0xa5d/0xc30
[  816.340111][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  816.345652][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  816.368542][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[  816.373920][   T31]  ___sys_sendmsg+0x134/0x1d0
[  816.387624][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  816.392916][   T31]  ? __lock_acquire+0x433/0x22f0
[  816.413598][   T31]  __sys_sendmsg+0x16d/0x220
[  816.427766][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  816.432946][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[  816.449700][   T31]  do_syscall_64+0xcd/0xf80
[  816.454278][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  816.478672][   T31] RIP: 0033:0x7ffb62b8f7c9
[  816.483165][   T31] RSP: 002b:00007ffb639a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  816.505462][   T31] RAX: ffffffffffffffda RBX: 00007ffb62de5fa0 RCX: 00007ffb62b8f7c9
[  816.527587][   T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003
[  816.549719][   T31] RBP: 00007ffb62c13f91 R08: 0000000000000000 R09: 0000000000000000
[  816.567634][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  816.575681][   T31] R13: 00007ffb62de6038 R14: 00007ffb62de5fa0 R15: 00007ffe79189f08
[  816.607838][   T31]  </TASK>
[  816.724114][   T31] INFO: task syz.3.1969:15817 blocked for more than 146 seconds.
[  816.757618][   T31]       Not tainted syzkaller #0
[  816.763496][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  816.809968][   T31] task:syz.3.1969      state:D stack:27544 pid:15817 tgid:15816 ppid:5840   task_flags:0x400140 flags:0x00080002
[  816.901211][   T31] Call Trace:
[  816.904548][   T31]  <TASK>
[  816.947617][   T31]  ? __schedule+0x10b9/0x6150
[  816.952394][   T31]  __schedule+0x1139/0x6150
[  816.956928][   T31]  ? __lock_acquire+0x433/0x22f0
[  817.014074][   T31]  ? __pfx___schedule+0x10/0x10
[  817.067654][   T31]  ? find_held_lock+0x2b/0x80
[  817.072428][   T31]  ? schedule+0x2d7/0x3a0
[  817.076792][   T31]  schedule+0xe7/0x3a0
[  817.117610][   T31]  schedule_preempt_disabled+0x13/0x30
[  817.168935][   T31]  __mutex_lock+0xcf8/0x1b10
[  817.173617][   T31]  ? nfsd_nl_threads_set_doit+0x687/0xbc0
[  817.210448][   T31]  ? __lock_acquire+0x433/0x22f0
[  817.215464][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  817.267610][   T31]  ? net_generic+0xea/0x2a0
[  817.272196][   T31]  ? nfsd_nl_threads_set_doit+0x687/0xbc0
[  817.337791][   T31]  nfsd_nl_threads_set_doit+0x687/0xbc0
[  817.343435][   T31]  genl_family_rcv_msg_doit+0x209/0x2f0
[  817.377627][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  817.383795][   T31]  ? __dev_queue_xmit+0xaf1/0x4330
[  817.437635][   T31]  ? genl_get_cmd+0x194/0x580
[  817.442423][   T31]  ? bpf_lsm_capable+0x9/0x10
[  817.447146][   T31]  ? security_capable+0x7e/0x260
[  817.469701][   T31]  genl_rcv_msg+0x55c/0x800
[  817.474287][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  817.497728][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  817.503877][   T31]  netlink_rcv_skb+0x158/0x420
[  817.521668][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  817.526777][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  817.547579][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  817.552953][   T31]  genl_rcv+0x28/0x40
[  817.556997][   T31]  netlink_unicast+0x5aa/0x870
[  817.579843][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  817.585238][   T31]  netlink_sendmsg+0x8c8/0xdd0
[  817.608231][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  817.613601][   T31]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  817.632181][   T31]  ____sys_sendmsg+0xa5d/0xc30
[  817.647588][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  817.653122][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  817.677568][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  817.683028][   T31]  ? try_to_wake_up+0xa67/0x1860
[  817.697563][   T31]  ___sys_sendmsg+0x134/0x1d0
[  817.702312][   T31]  ? find_held_lock+0x2b/0x80
[  817.707019][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  817.729199][   T31]  ? __lock_acquire+0x433/0x22f0
[  817.734235][   T31]  __sys_sendmsg+0x16d/0x220
[  817.768052][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  817.773251][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[  817.787560][   T31]  do_syscall_64+0xcd/0xf80
[  817.792142][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.807867][   T31] RIP: 0033:0x7faebcb8f7c9
[  817.812338][   T31] RSP: 002b:00007faebda78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  817.844423][   T31] RAX: ffffffffffffffda RBX: 00007faebcde5fa0 RCX: 00007faebcb8f7c9
[  817.857079][   T31] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000003
[  817.877775][   T31] RBP: 00007faebcc13f91 R08: 0000000000000000 R09: 0000000000000000
[  817.885796][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  817.909937][   T31] R13: 00007faebcde6038 R14: 00007faebcde5fa0 R15: 00007ffe58551ae8
[  817.930012][   T31]  </TASK>
[  818.016137][   T31] 
[  818.016137][   T31] Showing all locks held in the system:
[  818.053095][   T31] 1 lock held by khungtaskd/31:
[  818.069100][   T31]  #0: ffffffff8e1c95a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  818.093892][   T31] 2 locks held by kworker/u8:8/1169:
[  818.107640][   T31]  #0: ffff888146ecb948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[  818.138048][   T31]  #1: ffffc90004397c90 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[  818.179675][   T31] 3 locks held by kworker/u8:19/7125:
[  818.185102][   T31]  #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[  818.217606][   T31]  #1: ffffc9000b7dfc90 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[  818.255456][   T31]  #2: ffffffff8ff18148 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[  818.277573][   T31] 2 locks held by syz.2.1949/15719:
[  818.282821][   T31]  #0: ffffffff8ffbdcd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  818.307743][   T31]  #1: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  818.335072][   T31] 2 locks held by syz.0.1962/15790:
[  818.354961][   T31]  #0: ffffffff8ffbdcd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  818.377568][   T31]  #1: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  818.397574][   T31] 2 locks held by syz.5.1967/15805:
[  818.402823][   T31]  #0: ffffffff8ffbdcd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  818.427806][   T31]  #1: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  818.462489][   T31] 2 locks held by syz.3.1969/15817:
[  818.477598][   T31]  #0: ffffffff8ffbdcd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  818.485872][   T31]  #1: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  818.517610][   T31] 2 locks held by syz-executor/15821:
[  818.523030][   T31]  #0: ffffffff8ff18148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  818.547756][   T31]  #1: ffffffff8e1d4bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  818.577849][   T31] 2 locks held by syz-executor/15872:
[  818.583267][   T31]  #0: ffff8880269a00e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  818.617620][   T31]  #1: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  818.627286][   T31] 2 locks held by syz.7.2088/16515:
[  818.647636][   T31]  #0: ffffffff8ffbdcd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  818.655933][   T31]  #1: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  818.697574][   T31] 2 locks held by getty/17170:
[  818.702399][   T31]  #0: ffff88814d2cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  818.729136][   T31]  #1: ffffc90002ec22f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  818.747597][   T31] 1 lock held by syz.1.2256/17306:
[  818.752750][   T31]  #0: ffff88802a683b38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  818.789922][   T31] 3 locks held by syz.1.2256/17307:
[  818.795174][   T31]  #0: ffff88802a683b38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  818.817584][   T31]  #1: ffff888057ce6420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x132/0x340
[  818.826561][   T31]  #2: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x20/0x90
[  818.857612][   T31] 1 lock held by syz.9.2258/17330:
[  818.877577][   T31]  #0: ffffffff8ff18148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  818.886632][   T31] 3 locks held by syz.4.2228/17323:
[  818.917594][   T31]  #0: ffff88807bf20dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90
[  818.927338][   T31]  #1: ffff88807bf200b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0
[  818.957702][   T31]  #2: ffffffff8e1d4bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  818.996401][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  819.003288][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  819.046485][   T31] 
[  819.152352][   T31] =============================================
[  819.152352][   T31] 
[  819.197636][   T31] NMI backtrace for cpu 0
[  819.197657][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  819.197685][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  819.197701][   T31] Call Trace:
[  819.197708][   T31]  <TASK>
[  819.197718][   T31]  dump_stack_lvl+0x116/0x1f0
[  819.197752][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  819.197791][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  819.197837][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  819.197877][   T31]  watchdog+0xf14/0x1140
[  819.197917][   T31]  ? rcu_is_watching+0x12/0xc0
[  819.197954][   T31]  ? __pfx_watchdog+0x10/0x10
[  819.197987][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  819.198019][   T31]  ? __kthread_parkme+0x19e/0x250
[  819.198057][   T31]  ? __pfx_watchdog+0x10/0x10
[  819.198092][   T31]  kthread+0x3c5/0x780
[  819.198118][   T31]  ? __pfx_kthread+0x10/0x10
[  819.198144][   T31]  ? rcu_is_watching+0x12/0xc0
[  819.198179][   T31]  ? __pfx_kthread+0x10/0x10
[  819.198205][   T31]  ret_from_fork+0x983/0xb10
[  819.198228][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  819.198253][   T31]  ? __switch_to+0x7af/0x10d0
[  819.198281][   T31]  ? __pfx_kthread+0x10/0x10
[  819.198307][   T31]  ret_from_fork_asm+0x1a/0x30
[  819.198354][   T31]  </TASK>
[  819.536037][T14417] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.649380][T14417] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.729940][T14417] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.805770][T14417] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.986721][T14417] bridge_slave_1: left allmulticast mode
[  820.008807][T14417] bridge_slave_1: left promiscuous mode
[  820.014608][T14417] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.050669][T14417] bridge_slave_0: left allmulticast mode
[  820.056355][T14417] bridge_slave_0: left promiscuous mode
[  820.077821][T14417] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.229155][ T3423] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1365 with max blocks 7 with error 117
[  820.277831][ T3423] EXT4-fs (sda1): This should not happen!! Data will be lost
[  820.277831][ T3423] 
[  820.780103][T14417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  820.822770][T14417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  820.849260][T14417] bond0 (unregistering): Released all slaves
[  820.937116][T14417] tipc: Left network mode
[  821.151987][T14417] hsr_slave_0: left promiscuous mode
[  821.168187][T14417] hsr_slave_1: left promiscuous mode
[  821.174152][T14417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  821.197847][T14417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  821.215875][T14417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  821.239579][T14417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  821.295694][T14417] veth1_macvtap: left promiscuous mode
[  821.318361][T14417] veth0_macvtap: left promiscuous mode
[  821.339076][T14417] veth1_vlan: left promiscuous mode
[  821.344419][T14417] veth0_vlan: left promiscuous mode
[  822.569947][T14417] team0 (unregistering): Port device team_slave_1 removed
[  822.668884][T14417] team0 (unregistering): Port device team_slave_0 removed