last executing test programs:

2m24.208829816s ago: executing program 32 (id=1287):
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x43, 0xeb1, 0xfffffffffffffffa, 0x8000)
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x6}, 0xa, 0x0)
readv$auto(r0, 0x0, 0x2)
ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0)
socket(0x11, 0x80003, 0x300)
r2 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$auto(r2, 0x0, 0x8)
pidfd_open$auto(0x1, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x4, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x7ffffffb, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}})
io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0xc200, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0)
write$auto_full_fops_mem(0xffffffffffffffff, 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x3, 0x6, 0x3, 0x3, 0x3, 0x8003, 0x6, 0x2, 0x6d3c, 0x1, 0x2, 0x44a03baf]}, 0x0)
clock_gettime$auto(0x80000020, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
pread64$auto(r4, &(0x7f0000000340)='t\xa7\x81\xce2)\x8c>A\x8e\x1f\xdc\x96F=Pp\x04\xa6<\xd6\xe3\xf4\xa8\x91\xb8\x8f>\xc9\xe4\a\xcacg\x10\xa0\xd6\xad1\x17{c\x14=\xc1\x10\xa1\x19\xe6\x80\xa8b[\x83E]>\xea\'~\xd4b\xb7\xd2c\xb3\xcf\x16g(-\x89\x9b\xe9W\v\xec\x1f\xc2\xda/\xc5\x89w;.%\b\x05\x9b\xd1\x01\xe0\xdb\x06&\xc5\x8elFJ\x178m\xb9\xceQ\x8f\xa4K.RK5:;T\xad\xa9m\x02#?\xe9\xd6\xc9\xbc\xfd\x98\x86\xa9\x85K\xb9\xddF\x00\xe1\xa5\x96\xda\xfd\xab\xfcq\xcb\x81\x02EuR-\r\xab\x8c\x91D\xd7$\x9d\xc4\xeb\xa8A[\x01\x04\xcb\xd0\x1f\xeb\xc5\xb0\xa4\xc2=\x9f\x9d\xa9\'+\xc3\x92', 0x1, 0x40000000002)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:13/path\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x3)
socket(0x2, 0x2, 0x1)
io_uring_setup$auto(0x6, 0x0)

2m22.311965593s ago: executing program 33 (id=1296):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) (async)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r2 = prctl$auto(0x16, 0x1, 0x0, 0xfffffffffffffffe, 0x4) (async)
pread64$auto(r1, 0x0, 0x81, 0x200) (async, rerun: 32)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) (rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14002000", @ANYRES16=r4, @ANYBLOB="00032abd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) (async)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, 0x0, 0x20004000)
unshare$auto(0x40000080)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
pread64$auto(r5, 0x0, 0x0, 0x9) (async, rerun: 64)
read$auto_mon_fops_text_t_mon_text(r5, 0x0, 0x0) (async, rerun: 64)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) (async, rerun: 64)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async, rerun: 64)
r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) (async)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x646502, 0x0) (async)
openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) (async)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) (async)
r7 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r7, 0x40095505, 0x0) (async)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0)
fcntl$auto(r0, 0x400, 0x1) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)

2m19.594158715s ago: executing program 34 (id=1316):
openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x149002, 0x0) (async)
write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa)
unshare$auto(0x40000080) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0) (async)
listen$auto(0x3, 0x81) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x7) (async)
setsockopt$auto(0x3, 0x6b, 0x1, 0xffffffffffffffff, 0x211)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0x2003f2, 0x15) (async)
r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) (async, rerun: 32)
madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 32)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}})

2m7.229544464s ago: executing program 35 (id=1345):
prctl$auto(0x3e, 0x8000000023540a53, 0x0, 0x514d, 0xd014)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x240, 0x0)
ftruncate$auto(0x3, 0x700)
mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
bpf$auto(0x0, 0x0, 0xa3)
syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
pidfd_open$auto(0x1, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/1/pp_hold\x00', 0x101001, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8e, r0)
write$auto(0x6, 0x0, 0x100000001)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)

1m41.994644726s ago: executing program 4 (id=1521):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getpid()
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffd, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x800000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x1fe, 0x81)
r0 = setfsuid$auto(0xee00)
r1 = setfsuid$auto(0xee01)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto(0x3, 0xae41, 0xffffffffffffffff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptywf\x00', 0x1, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
socket(0x2, 0x1, 0x106)
shutdown$auto(0x200000003, 0x2)
poll$auto(0x0, 0x5, 0x400)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x3, 0x9)
ioctl$auto_AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0)
openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/kvm/preemption_reported\x00', 0x105641, 0x0)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0)
fadvise64$auto(0xffffffffffffffff, 0x0, 0xffffffff80000001, 0x8)
futex_waitv$auto(&(0x7f0000000000)={0xb, 0x7ffffffff000, 0x6}, 0x1, 0x0, 0x0, 0x623d)
msgget$auto(0x0, 0x5)
msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4)
msgctl$auto(0x0, 0x0, 0x0)
setresuid$auto(r0, r1, r0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)

1m40.934829874s ago: executing program 4 (id=1523):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103a42, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ram11\x00', 0x40, 0x0)
sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x4044)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer2\x00', 0x200, 0x0)
ioctl$auto_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000440)="ca327b0526eb3e8387c290cb9c1b47d05dfb2606f27bf0b354a4791568579d0859291a6420ca01ba6ab7f012d85068e91b5419e70523e0fdbe742c4ebfb28c917503878238b48d1a1c91d482c93013cc6893ac")
futex_waitv$auto(&(0x7f0000000140)={0x1, 0x6, 0x5}, 0x3, 0x0, &(0x7f0000000500)={0x9, 0x9}, 0xfff)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r2 = inotify_init1$auto(0x3000000000000)
process_vm_readv$auto(0x0, &(0x7f00000004c0)={&(0x7f00000001c0)="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", 0x10000004}, 0x5, &(0x7f0000000180)={&(0x7f0000000100)="5a7d13da84ebb930fc87d68075d057582cc3aaecf34446e49f0ad8331b89fb6e74172ed800e9505530df2605", 0x3}, 0x8000000000000002, 0x5)
ioctl$auto_XFS_IOC_ALLOCSP(r2, 0x4030580a, &(0x7f0000000340)={0x0, 0x89, 0x8000000000000000, 0xbe, 0x9, <r3=>0x0})
kcmp$auto_KCMP_EPOLL_TFD(0x0, r3, 0x7, r0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x4, 0x400008, 0xdf, 0xf1, r0, 0x208000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x50, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x20, 0x3, 0x0, 0x1, [@nested={0x1c, 0xb, 0x0, 0x1, [@nested={0x4, 0x3}, @typed={0x14, 0xa1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000050}, 0xc800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r6 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r6, 0x3b82, 0x38)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
fstat$auto(0x2, 0x0)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0)
sendfile$auto(r8, r8, 0x0, 0x9)
ioctl$auto(r7, 0x4b49, 0x9)

1m40.257754832s ago: executing program 4 (id=1526):
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3914)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:480/min_ratio_fine\x00', 0x2062, 0x0)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r0)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010031bd7000f9dbdf25010000000600020001000000051d396d84af34334b670666bfcb0a1517", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$auto_BLKRAGET(0xffffffffffffffff, 0x1263, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd1\x00', 0x14f602, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x20008800)
mbind$auto(0x0, 0x2091d2, 0x1, 0x0, 0x7, 0x2)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
fstat$auto(0xffffffffffffffff, 0x0)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
socket(0x2, 0xa, 0x1)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0)
ioctl$auto(0x1, 0x890b, 0x8)

1m39.296801462s ago: executing program 4 (id=1531):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14fe82, 0x0) (async)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
keyctl$auto_KEYCTL_CAPABILITIES(0x1f, 0x8000, 0xfffffffffffffffa, 0x9, 0x10)

1m38.78363098s ago: executing program 4 (id=1533):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/xmit_hash_policy\x00', 0x10b062, 0x0)
r1 = socket(0x10, 0x3, 0x6)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0)
write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x9)

1m38.483704799s ago: executing program 4 (id=1535):
mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) (async)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) (async)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) (async)
ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd03, &(0x7f00000001c0)) (async)
connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8)
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) (async)
syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r2)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000440)=""/82, 0x52)
ioctl$auto_TIOCSWINSZ2(r3, 0x5414, &(0x7f00000001c0)) (async)
ioctl$auto(0xffffffffffffffff, 0x80a86f3d, 0x38) (async)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) (async)
r4 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0)
writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0x6) (async)
close_range$auto(r4, r2, 0x8) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socket(0x10, 0x2, 0x14) (async)
unshare$auto(0x40000080)

1m27.244430344s ago: executing program 7 (id=1574):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xffffffffffffffff, 0x8000)
ioctl$auto(0x3, 0x50434901, 0x1)
socket(0x21, 0x2, 0x2000c)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000001600)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/rc_rateidx_mask_2ghz\x00', 0x0, 0x0)
read$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0)
r2 = io_uring_setup$auto(0x401, 0x0)
read$auto(0x3, 0x0, 0x20)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
getpriority$auto_PRIO_PROCESS(0x0, 0xffffffffffffffff)
newfstatat$auto(r2, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x0, 0x3, 0x6, 0x80000000, 0xee01, <r3=>0x0, 0x0, 0x3, 0xff, 0x7, 0x3, 0x9c8, 0x4, 0x7, 0x800, 0x1, 0x7}, 0x7)
fsconfig$auto_FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000010c0)=']]j)!,$-,(\x00', &(0x7f0000001100)="488df82f0ca7b7a4703aae8a67a0839675c8c979834ba880a0dc792cc94b0698dc46acc69b385f0321ee0f3e683fe1eedbe4359f20b3e8d21ed85795c2b27eaa3010889a39365f3c1af700dc9e2779e4b8395ffd17ff1c529be9eb40d2a16f184f51ee1ae3934c1dc7207f83b3b3318611b9834dca0f4af706b8fb76fece8c5d26520411aa39fc8ce3c2db79ca02861e7c54b5865b805e75ab5660e8b00238217b873a366f7d34ba53499c8113f878b38282f45e86a3096262b969f54a90ef256844ca59c3851f56950ae379", r3)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(r2, r0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0)
r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0)
read$auto(r4, 0x0, 0xb4d3)
write$auto(0x3, 0x0, 0x70)
write$auto(0x3, 0x0, 0x5c8)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001080)='/dev/ptyu3\x00', 0x40002, 0x0)
openat$auto_ima_htable_violations_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000001040), 0x511382, 0x0)
r5 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r5, &(0x7f0000000040)=""/4096, 0xfffffe82)

1m26.120616596s ago: executing program 7 (id=1580):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, 0x0, 0x80000000)
rt_tgsigqueueinfo$auto_SIGCONT(0xffffffffffffffff, 0xffffffffffffffff, 0x12, &(0x7f00000003c0)={@_si_pad})
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804})
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x581402, 0x0)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad19978559dbc978c89a4fb1f552151699faea53575d94e9e2f930abeb4f1cd2fa58efd12b9315baeca5f900c19f32e51de1ba99fb4f82871232b3", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0x9, 0xb871, 0x6, 0x9ffd, 0x81, 0x0, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x11, 0x80003, 0x300)
socket(0x29, 0x5, 0x0)
bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)=@raw_tracepoint={0xfffffffffffffffb, r3, 0x0, 0x1}, 0x8)
open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
close_range$auto(0x2, 0x8, 0x0)

1m24.790367282s ago: executing program 7 (id=1585):
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x20041, 0x9}, 0x18)
socket(0x2, 0x1, 0x106)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/au\x03io1\x00', 0x100000a3d9)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket(0x12ec559368660cc, 0x4, 0xe1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x401, 0x0)
syz_clone(0x40940c11, 0x0, 0x0, 0x0, 0x0, 0x0)
faccessat$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2f)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000)
close_range$auto(0x0, 0x5, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
inotify_init1$auto(0x3000000000000)
socket(0x15, 0x5, 0x0)
getsockopt$auto(0x2, 0x114, 0x2721, 0xfffffffffffffffc, 0x0)
mprotect$auto(0x0, 0x806121, 0x8)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="010200f787a64e595ed43300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0x7b2}, 0x2, &(0x7f0000000100)="85c7150bec20721d90c3a310a6c1fec0d3b6143a003d3d88", 0x7, 0xa505}, 0x800}, 0x7, 0x8)
socket(0x11, 0x3, 0x9)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/tags\x00', 0x80000, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000080)=""/63, 0x3f)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0xc, 0x1044c})
r3 = getpgid$auto(0x0)
writev$auto(r1, &(0x7f0000000140)={&(0x7f00000002c0)="e8554c815be9e10ccc036b4dc86431c175e8d28779e1ae786797f939bce5be3971f664d4522ed9081b7fb5b097617f00e31c23b3a313a3f832b3fb338b0f78bc6cc2d662b236a494f8e0a4f737e84742e09f7c0d5170efd47867158bfa4a7a93bbba84abca8a4b2645bfdd6eab676e5757e7904017d5de85ca60e777b78e3fdd40e570170e0c8bbbed2635b164b8c96d06154ba7de49", 0x8}, 0xfffffffffffffffa)
getpgrp(r3)
prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x4, 0x0, r3, 0x6f8, 0x0)

1m23.789000047s ago: executing program 7 (id=1588):
mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) (async)
r1 = prctl$auto(0x1000000003b, 0x100001, 0x4, 0x80a, 0x6)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r2)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x2ec, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x2cc, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x2c8, 0x5, 0x0, 0x1, [{0x2c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x12c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8}, @NL80211_PMSR_RESP_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_LCI={0x6, 0x13, '{\\'}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x598}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xb}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x78be}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}]}]}, @NL80211_PMSR_RESP_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x2c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0xc6}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x9}, @HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0xd}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x4c}, @HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0xfe}]}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x9, 0x13, '(**){'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x7}]}]}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x6}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x9}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x34, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x10}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0xb76c}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x81}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x3b, 0x1, "85b9858f7a1e543fd18a7508203d92600af905e4f3c1bf15b23fb4d92be95cdcea698a3451723440fad4d1b46990f2714fcce8d0a2583e"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xbe, 0x1, "0917fa8a9cf539ce76112b2b07f50377f3ca2de161b75d9a3209f4761615064e3e27418061c8c042efca1a223392323e8795f026abaed913d5c7ca5ecc963f9ea4bc0b5f2009e2c702a8b7c677ee74e90b080d200e005ae605a8fbaddad337fb6cacbf14a655ad83a3d2e9e1cf29c09e463fa96d91a84b16cb832ad54a9fcf50b22578c52257588b88d8dee0426380e421f4689c2616d07dae3d051b92da1cb6fe5e2ef4fc3f918e85fb9fde051aa7ed59a8747ee6d5caa67cc8"}, @NL80211_PMSR_PEER_ATTR_RESP={0x1c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x9}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x5}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0x36, 0x1, "3e0453a5a7396d1cb15173a8b62f5afbf416a80ef310f0f51583fe7fc45f58931511fd43857f11a75657be986216e2a019eb"}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}]}]}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async)
ioctl$auto_UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0x130, 0x8, 0x10001}) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff)
r6 = ioctl$auto_NS_GET_PID_IN_PIDNS(r1, 0x8004b708, &(0x7f00000000c0)=0x7)
ioctl$auto_FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000280)="8514ea4e13c6358808d9cf0b6bb6954ec035e3f52a6726fd6fbfb9ba815c2b0be02df13b10648abfa080e82083f34de1570fa2c6d1e5b636353cd61802abef") (async)
sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' 6\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf250300000004000180083601"], 0x3620}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) (async)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) (async)
write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1", 0x6d) (async)
r7 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r7, &(0x7f0000000340)=""/179, 0xb3)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) (async)
acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') (async)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/power/level\x00', 0x129882, 0x0)
sendfile$auto(r8, r8, 0x0, 0x7) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c001300fcdbbc2353f74fa9256563b979e41af25e403ec2c853d4662dc2477fb8ce947bdc0f5c0513ff03a03e2f969bf97ff8acf360d119aec1eb971d4cc78fc8e0d10db928bac2c986c79fec"], 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0)

1m23.455991208s ago: executing program 36 (id=1535):
mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) (async)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) (async)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) (async)
ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd03, &(0x7f00000001c0)) (async)
connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8)
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) (async)
syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r2)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000440)=""/82, 0x52)
ioctl$auto_TIOCSWINSZ2(r3, 0x5414, &(0x7f00000001c0)) (async)
ioctl$auto(0xffffffffffffffff, 0x80a86f3d, 0x38) (async)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) (async)
r4 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0)
writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0x6) (async)
close_range$auto(r4, r2, 0x8) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socket(0x10, 0x2, 0x14) (async)
unshare$auto(0x40000080)

1m23.251889104s ago: executing program 7 (id=1592):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, 0x0, 0x80000000)
rt_tgsigqueueinfo$auto_SIGCONT(0xffffffffffffffff, 0xffffffffffffffff, 0x12, &(0x7f00000003c0)={@_si_pad})
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804})
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x581402, 0x0)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad19978559dbc978c89a4fb1f552151699faea53575d94e9e2f930abeb4f1cd2fa58efd12b9315baeca5f900c19f32e51de1ba99fb4f82871232b3", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0x9, 0xb871, 0x6, 0x9ffd, 0x81, 0x0, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x11, 0x80003, 0x300)
socket(0x29, 0x5, 0x0)
bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)=@raw_tracepoint={0xfffffffffffffffb, r3, 0x0, 0x1}, 0x8)
open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
close_range$auto(0x2, 0x8, 0x0)

1m21.692151275s ago: executing program 7 (id=1596):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0x240007, 0x19)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
userfaultfd$auto(0x1)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rt_acct\x00', 0xc0d40, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/138, 0x8a)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/ksm/max_page_sharing\x00', 0x400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)=""/112, 0x70)
ioctl$auto(0x3, 0xae41, r2)
socket(0x1, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

1m10.910866212s ago: executing program 5 (id=1632):
r0 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/encoder-0/bridges\x00', 0x40100, 0x0)
pread64$auto(r0, 0x0, 0x201, 0x569)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video4\x00', 0xa200, 0x0)
r2 = bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, <r3=>0xffffffffffffffff, 0x2, 0x8}, 0x100000cf)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_OVS_DP_CMD_NEW(r3, 0x0, 0x80)
sendmmsg$auto(r1, 0x0, 0x4, 0x4008)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100, 0x84)
setsockopt$auto_SO_BUSY_POLL_BUDGET(r4, 0xfffff506, 0x46, &(0x7f0000000480)='/sys/kernel/debug/dri/vkms/encoder-0/bridges\x00', 0x101)
r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r3)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000640), r3)
sendmsg$auto_NL802154_CMD_ASSOCIATE(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x120, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x101, 0x2b, 0x0, 0x1, [@generic="0294e0af9fdda8f3571504e44ec586e911143dd1e1ac1bae04f3194afe1b5b105ffa923a0411a25d7ea94e4b920fd36c70301d6b2d0711c64fadc71938ff83ebd003a532c6de4585bd5cfd71891360fd6aad28124373355d41d9e536f1f5f698a034175b8e86806ad27c8708d18e1ec1bc1d99575a338089d313d9d39b04f537377a029d27eec62174835d05125059c21bb79310d6bb2bd0e66ef5913f369c5c1ec49c0dda787c195de4b9137f6549114625c046e8e223a5ee2eea5283ba8e21526e0310338f6694f3e9254fc55c24ba57401068a7eb210ce6", @typed={0x8, 0x11d, 0x0, 0x0, @u32}, @typed={0x8, 0x27, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x97, 0x0, 0x0, @ipv6=@local}]}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x6}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x804)
ioctl$auto_XFS_IOC_ALLOCSP64(r3, 0x40305824, &(0x7f0000000600)={0x11d8, 0xc, 0x2, 0x1, 0x52, <r6=>0x0})
prctl$auto(0x7, 0x80, r6, 0x0, 0x8)
r7 = socket(0x29, 0x2, 0x0)
r8 = socket(0x11, 0x6, 0x0)
r9 = setfsgid$auto(0xee01)
setresgid$auto(r9, 0x0, 0x0)
fsconfig$auto(r0, 0x9, &(0x7f00000004c0)='/sys/kernel/debug/dri/vkms/encoder-0/bridges\x00', &(0x7f0000000500)="d318c7d8c34a40dc68c8aa6baaa97e80d3425494b8025dda234601d263c36e93d96295ebe5f34543d16618cc2778e89a179cc283a687e2ca2a307686c4b398d021d94c31defd86747e3eff7672dc2b3caa0031b56ed321162bb4e5b014bb2f0380db973e186d5c20b3317d9a0af8b8b03ac6fb3c38e600765a5f8ae15c7fb36540d4cb2ee8e52a55f9c20481e23547bc5f7c13cd1c0a760075baf4b57d3c2bc9abc36d80fca09f79a64fe8f325247ff21f94ab35694158e63c56cdbf33c76360617556265dae4a0a5589c84c", r9)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000)
recvmmsg$auto(r8, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000400)='/dev/radio17\x00', 0x4c02, 0x0)
r10 = setfsuid$auto(0xee00)
r11 = setfsuid$auto(0xee01)
setresuid$auto(r10, r11, r10)
ioctl$auto(r7, 0x89f2, 0x24)

1m10.562622644s ago: executing program 5 (id=1635):
r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x48801)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008890}, 0x20)
r3 = prctl$auto_PR_SET_MM_BRK(0x7, 0x7, 0xffffffffffffffff, 0x5, 0x9)
ioctl$auto_RNDZAPENTCNT(r3, 0x5204, 0x0)
pidfd_send_signal$auto_SIGCONT(r3, 0x12, &(0x7f0000000280)={@_si_pad}, 0x9)
process_vm_readv$auto(0x0, &(0x7f0000000400)={&(0x7f0000000300)="eb01a5fcd58292b68c43ed9a9dd7517f1accf4569c913175190b3d833ef7e72451cb34f7a0ee430b7e5910cd62d0effc743d57539675ea0ccd7c58cf1221ab9345aeb37946fde0ef7f1d922a2fb1271a8a21257fdfcc68fb2ff3d6ef648facae321323696cfc33cf70dac2613a2bae59980c3fa63e187299d96dcafb959ce50b5e2990179ffcb319998b5b5bfe996e299bc861d9fd67947b4fb838a5363c532478cd41dceb8a8d7c5be4d254c203330c63c5e4afb4b0790c42a6bd7e934f1864f30ba8", 0x1}, 0x2, &(0x7f0000000480)={&(0x7f0000000440)="5589fdc71d4e6a17baa1734e671ca77ea8fdfc80ef7c106df1", 0x9}, 0x10, 0x3)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f00000004c0), r1)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000500), r3)
r4 = eventfd2$auto(0x6, 0x2)
readv$auto(r3, &(0x7f0000000600)={&(0x7f0000000540)="f75e256d30fd8fc35f9534736d1e67014020931bfe0264eab5c574073019ba4dc1b3b245f44dd560c5d13e94e7d7b746ba5198ecf9134bcae20e253e87f67d141f164103a0e4cb94f764e9bb1ad2b7e16b858c5c28e22e95593e267ca81b701b1a7be2288e8a671459b5c0165efe2ee6e33accd7b3dfca814db327e142119c5ab47cce1a919b68618e7a439867db4e91406c2e701bdea1da965a451ac5621f9a28836b0dc8fbcc13e07b1b8ed9100ad58500", 0xffffffffffffff01}, 0x4)
bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)=@enable_stats={0x8001}, 0x4)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000840), r4)
sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x20000000)
r6 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r6, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x404c081)
unshare$auto(0xd7f)
r7 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000a80)="6de7062a54b29f2dbf104f2eb00f5f851325")
ioctl$auto_PPPIOCSMRU(r7, 0x40047452, &(0x7f0000000ac0)=0x3)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/sequencer\x00', 0x480, 0x0)
getsockopt$auto_SO_REUSEPORT(r3, 0x89, 0xf, &(0x7f0000000b40)='802.15.4 MAC\x00', &(0x7f0000000b80)=0x1)
ioctl$auto(r4, 0x6, r1)
socket(0x5, 0x6, 0x8000)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000c00), r4)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x25000c2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xc4, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_QOS_MAP={0xaa, 0xc7, "bdf7500ee7762eef9ef26fb5a3cb526e3274529ea0dcdc5c8aa13440291d234afb0fdb4f6487618b6281c7f945e7c85995307d8e1f1e0d16577fb9773f565917c39ea1311127f2e802950364bd74b2c0d37170a62c67ea07bb797d9a5e3b4e4a1d784c6c552c41264fd58945de9bcce826b5f8dab29aaa0f407c6da42b75a5e9ef660ace0bf66d4d89c8a34da68b6fd74b6c4adcea121a4c22178a0b7c2aacfcf99742bd40cf"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x10004005)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_KSMBD_EVENT_STARTING_UP(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r5, 0x704, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}}, 0x20000010)

1m10.382272291s ago: executing program 5 (id=1637):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0)
r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x100242, 0x0)
r1 = socket(0x11, 0x2, 0x40000e)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
bind$auto(r0, &(0x7f0000000000)=@phonet={0x23, 0x5d, 0xf6, 0x4}, 0x1)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, 0x0, 0x80)
connect$auto(0x3, 0x0, 0x50)
mmap$auto(0x0, 0x4000000400008, 0x5725, 0x12, 0x2, 0x8000)
mmap$auto(0xfffffffffffffffd, 0x729, 0x9, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="10110000", @ANYRES16=r4, @ANYBLOB="03042dbd7000f9dbdb2502000000fc101c80f8100580f410008004100100a9647cf083276d21f547d6ec29a362089095aa9ace17528e7af6c18a70e5a73575e29f9d908102abda0a9d7f45f3852da6a8fc0db86bf180c5208c888eee8dafdb5d423b386bfd17b6bcfd0e03ca7aa6c1d3b648740d64df0826ac5b8c6e696cc4149b702229eca3e126bd9025f1dd3b319c8870dfaabb526a5b6ded0297a14ddeb83df653a7ddaf3963c3eb41ab33aff7d0a005b46e2f9fe80b74e4ef61d1651acd5d626909c2e92baac86e93de85d993350d972e1ae945d65cebc4c3cbd3b0c113f56a530fe67bf8afd076c96032c7d0daebd78fd54ce97d5619fd85a71991bf0a5734beefab3f95f02cd43e23da1d5b9b8e4ec5f8c5469818866656818c16a4fee1742c3d0d1e21040cda8b1e2d64e6cd322a9f05e73d2a89b657810421e3a6f52cb4a09b818aed784b865e775e16d13c4af0a549a743e772bfbd7e7b18bc5181f2d891cf7aa7017e1b1a471e409b2a0f1f0345e58b7a83db238b1243035ef798d161c831f0a3207b0e5b50b7ef4c7e36fe198534435c534794850b964623df7c1302fae2479c38f224af1f997de33b03ff6279c0524b22e3e1d9cdcce48b6013532a40f92888162b47fe57a3fe63129e244eb3332e27de689a61818de10638bae6acf494fe6dd9df55cf56c262d09176d9fe7f8603d92010b4e849b00e7b067664ffb3de944d7f24fc27e6234fc1770df9437b99a6b7256d3aaa6de33e5dcafd94aed373768dea45929b13ab431cb8b004a50a3af281996da9323f48a79ccaf94b2830fb3fda9c332df22eaf139f97c414df926bb2919a7255780a9ed697d33bdafb4b87a61118815232302c1fb09923043e837d854cbe93df4f2dfef3ea00a6ffa32bb30681c259c74c2e754c93f3a2339f781bc06a99e2067e40f8ed652e1dd48f9b88e01e67f1c6da7990c4edccdc89cb6dec630cbcc57ab39eac4858407e3e37ce77d8080720f2e4a44773a65f165bc737a4d830afc286d46cc00fc277ad0f47779fd6104d9bf9bf525fc913a2c12ac657afe669c847cd5867f7104189ce6c2da65d363c3ce4fcf5937c5f054ba77b186ee37e7d58f309eb88b8886a8fd46f634c3d82d261eddbcd88f3bdd292d895c2c8bcb84cead50a5567e65b052fae1b58b5f0b6eb306ae4739271107776b5d0dafd7de5bd30b630b29a4741d3aaeff8d2cf3dab4781c746939be4bb32336189a0f310ce3f2a9fe7a9b4bd42c3ae7a97317c909ca650cb6e6b6d5b62dab732d19fa813f0310b79b048505059f2891f56d33bfaa6ade2e56964f59f0fbfa1790e7ad842ccc79027ae4556924d156ebfb41b9be793648bd7e0c2d1de4873686081841d59f25be32bab0428a7a66a3f307723f92748f9acbd1dd78c5c0d8ef976c7957bbafb2a57e22104569883a890b6c325a89f4c1f5bedf6edf1e4db4b458831e6eef8a858201ebdc9c27808bf199fd1bc12966b94a8a0f2608e861b9b09b32323967b64603bfc4e5d5b6af9f68c78858a56c72a922c3fa56118c9b7ec7b09ad9adeb9cad6fce4532d23a1ed16eddbb583b992ca64e12ddd16d6e908b9e0a432736b76f5d0b5bc71b477da428630c8105d14699eb885bc3afa54f7d9fb74b220a26c6f113614fafdadb314f72cd3025a029ae8ed8d64386bdef864f0f0b69dffe93eed8b4020375d7303cc37e2fb7c7459027f54e448e259df717542e73872fe3799203452f86a270dc0c5c848196803ad3723dbb4b4ab78da79743b9a0d72d0f03fb991e2dcb23b5ecf79c13baccd05621d5bd9631b1ebd9b951b865084198131110bac08e5d6a095993a3d1cca83c0ff5dc601b07912026111351e67d574660961ebc61a572f745e219e48934818fa9ac26c8bb2fc34bba1bd247e9bb7b73fdd3a3d30f2d9fa980c59290b40bbe83653f714f506baf8dae6aa82a738bd68f32466370f2358ea1965cf5f54978e50087eb0ed4856bd9189faa735add45fc58ad91accb6888e9011a1e0affc09aa900ad592225a42a1f86d901fc38c6ee2a4dd577f7fa51e4395eb06263a379adfaf70cf26ea350d0767cbf958bffe6b44851d6869d0bf7e832f8b0d9db438f061cfa37ac735c7851d66d69569229f807aea07abc02855e72e65f3c82ad267c4ba64450ceae56774c8451731fedf3962b5ba48dea5e922698ac963132de330f40f39351c19a47037e0c6987273e2ada67c4b08dd595021e5db24172b09b7a05d984c986031a9e572d7750600bb2e2c410a0fad7655be97e2951e39123a41cd0e517bdce77c865d8cdfcfe789f1347550c9ecce254ca06d162578c19c5eb241c0d88f2406bad2ccb7c44a4ba8eceafa5d4bb1739ef9154e84530cefe565a02c394de550e1a0445ee2c833f12a6b989c7812572ae98e5df95627f42690320cda7949982797ea4ae4864c21acc1f02ff3173f1122db461bbaebc9791b43d39a462f3354e231d10889443bbd2adf0577afada3827110e9d96cdb7f1b138aaa604f7283d5eda294aeb6b91f9a44ec2d1ac31d62ba4d84fa762687ac26b91bfe35c234df29134a5efacd6b4be4a9d58870ca69660d70ce3d4df768a208d459373c2ac70e7ff93f003405d69053fe919f4551add0683cd71ac28bc12513d4d67a7c69d90f1071cad22e21b20052b9ce2dc0915128d3acedf3288f4363806581c42f503fd489eb2ceb4d50e72927dad2d17d1916353f9885f181ec23e738a96c47357e4275464b350b84c84ab80eadac0ae33ce3f18cc28a1fd13737dc60404a5376d9576049ab22fe8463b34e01dad013d94598e13dbc8ecef96e3c7166877b2044c781674790d3c98f72787c5373c379816fa5f5be2efdfd879017d44c5f0a8f0280593dae570432441c0dd3ecab334d36ce3216602c6c2239cdfa4f0aa06b2664b5a2ccd28a746f2f832eee781f12dafda006b9fc917d1a1d78509ad7f24689c0612c390a88380404d214ce789d3d7bd6bda5b2162bb968561b333b841c296407090c11157427bc813754073d44d2b5b4df1f9357ee17b4f497ac7c6465e7b25eb4a08b5defc592635f6f09fcf2d86371d5cd8a63cd9fca2fd6f3c399ed39649b7477885123bda1f3a2675d69f121e8edd7f28e5fcd743e107d5e1707c4e9317ec8c7a2442f6ef8c26c9b882c0f9e3982549a1d27064377609ab13286bd0f73661aa11332dbe68ae91713c5856b38d964a5bbbc8b45a0cf425c6a584bc577caa32c7a93b16897e6612b9a4401fa7ddd3f28af18ca3ef717b706c01a1bfbcc909b1a7cf5b4efadd08f2a1b4ca70abbf3ac202cd35b9c2e6385a361b40ec5b7f7bd396e04aeaa1a721270df522fe202479dcb49407a9fb8bf681e0f3bcd8070494427246bc65f9a6f9de308e37ac158430778e8be48a6a24d11815fe390253aed577cc71baefc2b2c1289cb0277de552a158d39e44d841c677981e2c37e0ad1f229db1fab1aa0a4b98cbb9819d66dc4b4e0054d8698c3ee8fcf145568b023c04fa87f291a620bba67679fc1c1976c45ad60cf079b2b2f5b59451253c4b006e26fb79c6bcf5cc08c34f84dbe986b2f2a57a9e45d175a7e10f10fb162cbd4331842bca189ac494dcfbfa0799347b88b0fca417c83dadd5d8a956bc5dfe946dcca90b784c0915587cdc61025423280a277edd5629be43d44c2775f02a297a01bcd35741cc62191899a2ceb15bb36016dd047f93e93abb206af4cb72f7eb33fdb15507d6cfd60a1a70cdbf936185f466deb97adfac9f13d50d3099e2111f75b99d33240a87ea2bbda24bc6a8ad2fabb826cc4aeb8a9002537342f31e59e9a7a151bd101d233ebfa783e84bd95b41e489a3335f932e830c18fc7613bc40fa0561b3f7a68c024e0de87dba28467c0d1cd150a72ad5c1fb47851d04dcac70fcbbe8a45a81f359c92789274d866793e5e0403ea6ce1924dce9dfc8abc0beb105886a594c5cb206caf3a171f0394760fcbbdf61b061aaf2fe879bd8cdf3dfe909b0ba2bc8e93081fc8094b554d02064e0bf9e4164ce552a2e89898fe2e61c158c9ef8f16dd087676cebf23ceac8e72c82803d9f431da2fd851663258dc88556e06fc7837737373d145134aed117852737fadbcb855782d84c89e98bec3e1b950335a12fe86b12aef7de1eb206334ba6eb801178d7f536c7cd93fea3ea960cc3ee1bf737a29fd1cbd57ab40aa47a01037cd7d7d5cb99c4a12ad8bb338a6a2cdd0829eb8e4775d1e9eae905bfe654543a88961af5e47f2517f6d8780d4ec24e44b51f7070362ee7477ceb0a37ee3d696c987a913b45b365919e91694faed59493dbc68d6f61348003e686e42b51777a405e7c54a5975cb19a7057328a7ef18e9dfbfee7d45c38543ca91f33424f47ffec0280850501d5d9ba44bf865a59b6055caff12db54cde95022fea924cdf67b205ac3f91ae6bfc1658dd04dd014dd5ef13e9c5b1c1bb1d264db229f36f1f9561c9c26910b4379f0f74eaea29ee058d7573bb95c784d70da39beda506c5fcee924ebd0d6d100d4e94d0e2cc2a4638066d6520ed4cf4d029c1a8d0e63da1629bf1c023f4e8fba736791c8705e5b8d61771ec476a893ceda259aaab355978e32dcbb2c16f08a4f91712610dcff63659d86563a032334e29fef70f33b47ab3d3f76f6df07d363ccb11b98759d05e5d3afc87431449cc5e5b52d694414625418b8820e6785579c0cf0463031fff836a3f0dc87445c0305c4c135effa858c4eca2b57d9baacd5f9eff220a5f842e3c481efbb8ec97fb24df86f52fa2e1cdd6c3d0c149eb4cf03fd473560361ebffa34e1d9e28c78e0698ddfb2df2e14c8e86dd4a9546dbcfb9276233660024c55df2b162ff8e7b8a7c84e9ad7820fbf58faf8ece25f2563349e72c533c37c2156724e9ac09041eddb60edae084a5f1bce4f9050f1f22eff55e7c8002731746bf440bcb69f7e2d22ffb886032ee739d6dcba4b6c05b3ea9e723361e94707aa63494c135b70eb2def8729ef1000bc61a4f1c81fc79958f40f3c1bb1b4350b6c4a332585559e0bb5d79f7a4e8ccaced8ef20ddaf2d74c0ff42aec2f97e82004017d0c89bfbbb855390063d3b13690fe4dfc15bf79ce8348411a60b624cb713b55c8106603aee0fa22bb2b4d85cde679773a9e562a757858515729267a82fc86ce344b0d75a9655515b1da6f9108f359e9f8d01b04b597ee7733d2bc202abcc873387f08f5cec92332dab78d73aa87a2a9440890320952db90fc0f8186bf872265ab7bda0934c372a247510f23fae83e57aca7b404515e1eb05e6f547ad706ed830689e646eaee230cb5a720379d38c0d960b2a32b50dbb1a54b40afbfff32536e8787b9aa4435deea4faea80d2c380c584b3b5ace24494d7fec55929c3fa4dca8e67962b9f2d70aa03e30b69b3504f987aae0d3bae15ba0ef4262e34c1f45b96484e7b6a11a4928575eb4290d3a41caaf46c6756cdd876b26981918dcd85901fc1de25c195223f6f8835daed013c2707f0a42d44a0b1e5eea9ff1581897776dc35798eb9126fccb7cab238781dd6990d814699c990dda5bdd6b3b9b2e957c0669e98c4a5a128e0c2437742f084389ac60cc0d5bbbbb4c64de002a568ca5a4e726c78040af3db24f738c20ef088bdf2a0433824faaca8ebecfa28725827a0e5a2a475fe5c1a28a259cc6e73d5fa8d9f83a119d6720dc31c9f2c5dd19539dad6d86376374061adf473c21d02a5d28202e58ee370677c0369c023426cb0b3953fa11cf7024f6d738681b35fb308320e596998def8e61c925b7000eaab0c91e5c5bb8dba280004800c000300000000000100000004000500080002000700000008000200050000000400050008000480040005002900010082e2ab66bd8d244da24b585066fc1229bb2dd36f0f668cabb6fa1d17b0de49e1948415303600000090000100608ed6acf1694fda8fa797edf747132110a9ca57f2ff95db014631f2c21b52daab6278613a6acb29b720512ad5e5f4107e9002f94609a02183e85d3f8430a6264ab698101597f7317680c614d30b91a8325fa0f6494aa4350b3eb3046b18ec7a57d58f660433ba366d9d45a85d9d4b8404b4b42d8e363434ac5e377aba6c983848654e5e8b67a9a66079a0e700"/4362], 0x1110}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
mmap$auto(0xd8, 0x5, 0x2, 0x1000000000ebd, 0xffffffffffffffff, 0x8000)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x2, 0x2, 0x8000000000000000, 0x0)
r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
getsockopt$auto_SO_BUSY_POLL(0xffffffffffffffff, 0x9, 0x2e, &(0x7f0000000140)='[%\\$,\t\x00', 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x1, 0x10001, 0x3, 0x5e, 0x0, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0xad3, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0xffd, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x80000001, 0x6]}, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/key\x00', 0x80000, 0x0)

1m9.262566414s ago: executing program 5 (id=1639):
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
r0 = socket(0x10, 0x3, 0x6)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="e9c8e095", @ANYRES16, @ANYBLOB="040025bd7000199fb180fedbdf25020000000500110030000000ffff27000200000064bfd8a3dbd2f36a209bdf7df8c82bbc"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, r2, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
mmap$auto(0x0, 0x8, 0x5, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0)
read$auto(0x3, 0x0, 0x80)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NFSD_A_POOL_MODE_MODE={0x5, 0x1, '\x00'}, @NFSD_A_POOL_MODE_MODE={0xc, 0x1, 'ethtool\x00'}, @NFSD_A_POOL_MODE_MODE={0x6, 0x1, '(\x00'}, @NFSD_A_POOL_MODE_MODE={0x5, 0x1, '\x00'}]}, 0x38}}, 0x10040005)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1m9.056005681s ago: executing program 5 (id=1642):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
rt_tgsigqueueinfo$auto_SIGCONT(0xffffffffffffffff, 0xffffffffffffffff, 0x12, &(0x7f00000003c0)={@_si_pad})
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
adjtimex$auto(0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x581402, 0x0)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad19978559dbc978c89a4fb1f552151699faea53575d94e9e2f930abeb4f1cd2fa58efd12b9315baeca5f900c19f32e51de1ba99fb4f82871232b3", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0x9, 0xb871, 0x6, 0x9ffd, 0x81, 0x0, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x11, 0x80003, 0x300)
socket(0x29, 0x5, 0x0)
bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)=@raw_tracepoint={0xfffffffffffffffb, r3, 0x0, 0x1}, 0x8)
open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
close_range$auto(0x2, 0x8, 0x0)

1m7.721338271s ago: executing program 5 (id=1645):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) (async)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x1) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64)
mmap$auto(0x7, 0xfffffffffffffffe, 0x4000000000df, 0x7ff, r0, 0x8004) (async, rerun: 64)
unshare$auto(0x40000080) (async, rerun: 32)
unshare$auto(0x40000080) (async, rerun: 32)
process_vm_writev$auto(0x0, 0x0, 0x46, 0x0, 0x8, 0x3) (async)
io_uring_setup$auto(0xc, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64)
socket(0xa, 0x3, 0x3a) (async, rerun: 64)
clone3$auto(&(0x7f00000000c0)={0x7, 0x1, 0xec7, 0x4, 0x10000, 0xef, 0x10000, 0x6, 0x0, 0xfffffffffffffffe, 0x7}, 0x2) (async)
ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, &(0x7f0000000140)={"fd6f25515db8b832452cb4b1452c4923e3628384a5be5287e5f02457b0f058d4", 0xb, 0x23, 0xf, 0x800, 0x3679a40f, <r2=>0xffffffffffffffff}) (async)
r3 = clone3$auto(&(0x7f0000000380)={0x2dbf, 0x9, 0x2, 0x80000101, 0x464, 0x100000001, 0xfffffffffffffffe, 0xe5ad, 0x7, 0xffffffff, 0x1}, 0x18)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000240)={{@raw=0x10001, 0x7, 0x81, 0xb88, "1bef014c383c3e135f5a35b71a847d19a790cf2933fffad3afdc839474172d9b9b2895cb42fc759fb0b78638", @inferred=r2}, 0x1, 0x4, 0x400b5d87, @inferred=r3, @enumerated={0x4, 0x80, "05ab48fe169267626172f0b4fbc4179988f6d827b48feb58ea3041701ba6c9767a893a310906d2510fa4a415d45e41aa6259547481bf59ccd547e77788d72c09", 0x7f, 0x9}, "a5abfe7db9f848b44572b7fcad744256b0c646cd0345bf18bc82bd57c8fe051d78e43864c793265e9045ccf79b6f3bf9b2b42faa726e01d30828f83e07bdfbb9"}) (async, rerun: 64)
setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) (rerun: 64)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) (async)
close_range$auto(0x2, 0xa, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
socketpair$auto(0x3, 0x5, 0x6, 0x0) (async)
setsockopt$auto(r4, 0x3ff, 0xf, 0x0, 0xfffffffb) (async)
bind$auto(0x3, 0x0, 0x6b) (async)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0)
sendfile$auto(r4, r5, 0x0, 0x1000200)

1m6.469817436s ago: executing program 37 (id=1596):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0x240007, 0x19)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
userfaultfd$auto(0x1)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rt_acct\x00', 0xc0d40, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/138, 0x8a)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/ksm/max_page_sharing\x00', 0x400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)=""/112, 0x70)
ioctl$auto(0x3, 0xae41, r2)
socket(0x1, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

1m6.065974309s ago: executing program 6 (id=1651):
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0)
write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async)
mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r1, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r1, 0x4, 0x6, 0x101, 0x1, r1}, 0x6f3) (async, rerun: 64)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (async)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) (async)
poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6)
mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) (async)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd10/hctx0/active\x00', 0x101480, 0x0)
lseek$auto(0x3, 0x0, 0x2c) (async)
pread64$auto(0xffffffffffffffff, 0x0, 0x1fffe001, 0xb)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, 0x0) (async)
r4 = socket(0x10, 0x2, 0x4) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (rerun: 64)
socket(0x2, 0x2, 0x88)
r5 = socket(0x10, 0x2, 0xc) (async)
r6 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r6, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef)
write$auto(r2, &(0x7f0000000040)='\x04>\x01\x03\x00\x00\x00\x00\x00\x00\x00\x94\xf2\xa2\x00\x00', 0x2dc)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
fanotify_init$auto(0x5, 0x2000000000002) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x26, 0x80805, 0x0) (async)
clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2)

1m5.109018389s ago: executing program 6 (id=1652):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0)
r1 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r1, 0x0, 0x53, 0x0, 0x0)

1m3.911134567s ago: executing program 6 (id=1653):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
rt_tgsigqueueinfo$auto_SIGCONT(0xffffffffffffffff, 0xffffffffffffffff, 0x12, &(0x7f00000003c0)={@_si_pad})
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
adjtimex$auto(0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x581402, 0x0)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad19978559dbc978c89a4fb1f552151699faea53575d94e9e2f930abeb4f1cd2fa58efd12b9315baeca5f900c19f32e51de1ba99fb4f82871232b3", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0x9, 0xb871, 0x6, 0x9ffd, 0x81, 0x0, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x11, 0x80003, 0x300)
socket(0x29, 0x5, 0x0)
bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)=@raw_tracepoint={0xfffffffffffffffb, r3, 0x0, 0x1}, 0x8)
open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
close_range$auto(0x2, 0x8, 0x0)

1m2.744625959s ago: executing program 6 (id=1654):
r0 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x2e8202, 0x0) (async, rerun: 64)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (rerun: 64)
ioctl$auto_XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000080)={<r2=>r1, 0x0, 0x2, 0x1, 0x3, 0x4, [0x1, 0x6, 0x3ff29fba, 0x1, 0x8, 0x6]})
write$auto(r0, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x1b) (async)
read$auto_msr_fops_msr(r2, &(0x7f0000000140)=""/176, 0xb0) (async)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), r2)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x3}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x6d}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40) (async, rerun: 32)
ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000004c0)={<r4=>r2, &(0x7f0000000340)="c84992f4e104a311554ac416a61a60ac94cffb645e3c6ef467ea", 0x5, &(0x7f0000000380)="1e3fece0bed6e3b176fe7ed801ec249bb8beab12b0354fd6ae535f14c7fa0dd9c16437bf8e633c13c47b542205b10c4d316acc631a70d4f744c6219b4d5d6fbbec79a62c5ec17ac61cc3a034409b0dd568d2b01bc35be7b427a1b9c4e69119fb6b84159a312135edb2cbff3f91f80068378ae35473b2629f93bab8b84ccd5deb4e3da6b5d59d67e13dcd5e0ba49fecfeda25637232379ed9fa858f9b436ca427ee903cd53fa653d7fc6d9c9ad79288fb510ba15d", 0x3, &(0x7f0000000440), &(0x7f0000000480)}) (rerun: 32)
read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r4, &(0x7f0000000500)=""/39, 0x27) (async)
kexec_load$auto(0x101, 0x8fc, &(0x7f0000000580)={@buf=&(0x7f0000000540)="db117c7c5fb4af1749d08e9f5ae1a6b2fdb38e8a0a25d19e931f983f04d41704b3debc5452f6ce3224a1d87e902f4549c157fdf80ab52466ee5a7975", 0x4a, 0x1, 0x7fff}, 0x8) (async)
io_uring_register$auto(r1, 0x81, &(0x7f00000005c0)="6d09816c5167faf46cba9811de59f3f5cb603da1d9d614cb4e6f044ffbdc8874eb997487bfc09ec95bff242909158ffec197bfb139aa1d6fa279e6f68bc2a145e329336d30c035cb32946087ee2b0f57a7c88cbafb8695ca39c7", 0x10001)
r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), r4) (async)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000006c0), r2)
sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r2, &(0x7f0000001780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001740)={&(0x7f0000000700)={0x1034, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x1}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x7}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x1004, 0xbb, "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"}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3218}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x1034}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r8 = gettid() (rerun: 32)
sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, 0x0, 0x850dc668ee706cb1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x96}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3ed000}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48030}, 0x24014)
read$auto_drm_debugfs_entry_fops_drm_debugfs(r2, &(0x7f0000001900), 0x0) (async)
r9 = ioctl$auto_TUNGETVNETHDRSZ2(r4, 0x800454d7, &(0x7f0000001940)=0x9)
fcntl$auto_F_OFD_SETLKW(r9, 0x26, 0x6) (async)
ioctl$auto_MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000001980)={0x1ff, 0x6}) (async, rerun: 32)
getsockopt$auto_SO_ACCEPTCONN(r1, 0x2, 0x1e, &(0x7f00000019c0)='\x00', &(0x7f0000001a00)=0x3) (async, rerun: 32)
ptrace$auto_ARCH_GET_FS(0x100000001, r8, 0x6, 0x1003)
setsockopt$auto(r1, 0x7, 0x34b, &(0x7f0000001a40)='\x00', 0x10) (async, rerun: 32)
io_uring_register$auto(r7, 0x1, &(0x7f0000001a80)="a4a3", 0x2) (rerun: 32)
r10 = open(&(0x7f0000001ac0)='./file0\x00', 0x141000, 0x3a)
sendmsg$auto_L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x48, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20001000) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001c80), r10)
sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r11, &(0x7f0000001e00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x64, r12, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000011}, 0x20004000)

1m2.403367126s ago: executing program 6 (id=1655):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x5, 0x1f, 0x9, 0x62, 0x0, 0x0, 0x0, 0xffc, 0x2, 0x80000000400000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0x11, 0x1, 0x6})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x44003, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
ioctl$auto_BLKPG(r3, 0x1269, 0x300)
read$auto(r0, &(0x7f0000000080)='\x00', 0xff09)
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000)
r4 = set_tid_address$auto(0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
r5 = syz_open_procfs$namespace(r4, &(0x7f0000000080))
getdents64$auto(r5, 0x0, 0x18)

1m1.728864017s ago: executing program 6 (id=1658):
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/psaux\x00', 0x40000, 0x0)
mmap$auto(0x0, 0x4020009, 0x2, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x191703, 0x0)
ioctl$auto_EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x7)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/tty/ptyp4/dev\x00', 0x8fa982, 0x0)
r1 = pipe2$auto(0x0, 0x4800)
splice$auto(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0xc)
read$auto(0xca, 0x0, 0x6)
socket(0x1d, 0x1, 0x7fff)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r2, 0x110, 0x1, 0x0, 0x8)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto(r3, 0xc0045520, r1)
r4 = socket(0x10, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$auto_SO_SNDTIMEO_OLD(r5, 0x1, 0x15, &(0x7f0000000180)='IPVS\x00', &(0x7f00000001c0)=0x4)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
mmap$auto(0x6, 0x7, 0x7ff, 0x19, r4, 0xffff)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x5, 0x7, 0x7, 0xeb1, 0x401, 0x8000)
r6 = socket(0x9, 0x5, 0x3fd)
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x500000000000)
sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmsg$auto_IEEE802154_LIST_IFACE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="c4ea1a93227efec73c000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf251f00000006000b00020000000500360007000000050027000300000006000800008000000500350007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0xc084)
recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="7e8956cea400f39304"], 0x1ac}, 0x1, 0x0, 0x0, 0xa00}, 0x40000)

1m1.585900354s ago: executing program 9 (id=1647):
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3914)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:480/min_ratio_fine\x00', 0x2062, 0x0)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r0)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010031bd7000f9dbdf25010000000600020001000000051d396d84af34334b670666bfcb0a1517", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$auto_BLKRAGET(0xffffffffffffffff, 0x1263, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd1\x00', 0x14f602, 0x0)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000e1", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf25120000000800090001000000cc2bef02d9547cfc6289457c9b380c00018008008100", @ANYRES16, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000880}, 0x20008800)
mbind$auto(0x0, 0x2091d2, 0x1, 0x0, 0x7, 0x2)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
fstat$auto(0xffffffffffffffff, 0x0)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
socket(0x2, 0xa, 0x1)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0)
ioctl$auto(0x1, 0x890b, 0x8)

1m1.299044462s ago: executing program 9 (id=1659):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x6)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
ioctl$auto_BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f00000001c0)={&(0x7f0000000180)={0x0, 0x12000}, 0x0, 0x3ff, 0x3, 0x7, 0x400, 0x4, 0x80, 0x1, "821a3a97733fed7f473f5a5233f7b0847cd59e02a03b7816268efe0b2767955b93486a90a75195c2b0ed21c42ef1ce2556998d8da5ad4b2a266ad9bfe08bfee7"})
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000)
mmap$auto(0x0, 0x2020009, 0x3, 0x732, r0, 0x8080)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xc834, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x8000000000000000, 0x15)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
prctl$auto_PR_SET_VMA(0x53564d41, 0xfffffffffffffffe, 0x1000000000000, 0x8, 0x80)
shutdown$auto(r1, 0x10000)
pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000)
fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_MPP(r2, 0x0, 0x880)
sendmsg$auto_NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x18, 0x13, "cfa6b4b11703f5a58227dafd0a12f7fd27122586"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c844}, 0x916040f623309a62)
ioctl$auto(0x3, 0x80108907, 0x38)
prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40)
write$auto(0x3, 0x0, 0xfffffdef)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), r0)

52.495553068s ago: executing program 38 (id=1645):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) (async)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x1) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64)
mmap$auto(0x7, 0xfffffffffffffffe, 0x4000000000df, 0x7ff, r0, 0x8004) (async, rerun: 64)
unshare$auto(0x40000080) (async, rerun: 32)
unshare$auto(0x40000080) (async, rerun: 32)
process_vm_writev$auto(0x0, 0x0, 0x46, 0x0, 0x8, 0x3) (async)
io_uring_setup$auto(0xc, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64)
socket(0xa, 0x3, 0x3a) (async, rerun: 64)
clone3$auto(&(0x7f00000000c0)={0x7, 0x1, 0xec7, 0x4, 0x10000, 0xef, 0x10000, 0x6, 0x0, 0xfffffffffffffffe, 0x7}, 0x2) (async)
ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, &(0x7f0000000140)={"fd6f25515db8b832452cb4b1452c4923e3628384a5be5287e5f02457b0f058d4", 0xb, 0x23, 0xf, 0x800, 0x3679a40f, <r2=>0xffffffffffffffff}) (async)
r3 = clone3$auto(&(0x7f0000000380)={0x2dbf, 0x9, 0x2, 0x80000101, 0x464, 0x100000001, 0xfffffffffffffffe, 0xe5ad, 0x7, 0xffffffff, 0x1}, 0x18)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000240)={{@raw=0x10001, 0x7, 0x81, 0xb88, "1bef014c383c3e135f5a35b71a847d19a790cf2933fffad3afdc839474172d9b9b2895cb42fc759fb0b78638", @inferred=r2}, 0x1, 0x4, 0x400b5d87, @inferred=r3, @enumerated={0x4, 0x80, "05ab48fe169267626172f0b4fbc4179988f6d827b48feb58ea3041701ba6c9767a893a310906d2510fa4a415d45e41aa6259547481bf59ccd547e77788d72c09", 0x7f, 0x9}, "a5abfe7db9f848b44572b7fcad744256b0c646cd0345bf18bc82bd57c8fe051d78e43864c793265e9045ccf79b6f3bf9b2b42faa726e01d30828f83e07bdfbb9"}) (async, rerun: 64)
setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) (rerun: 64)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) (async)
close_range$auto(0x2, 0xa, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
socketpair$auto(0x3, 0x5, 0x6, 0x0) (async)
setsockopt$auto(r4, 0x3ff, 0xf, 0x0, 0xfffffffb) (async)
bind$auto(0x3, 0x0, 0x6b) (async)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0)
sendfile$auto(r4, r5, 0x0, 0x1000200)

46.541997461s ago: executing program 39 (id=1658):
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/psaux\x00', 0x40000, 0x0)
mmap$auto(0x0, 0x4020009, 0x2, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x191703, 0x0)
ioctl$auto_EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x7)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/tty/ptyp4/dev\x00', 0x8fa982, 0x0)
r1 = pipe2$auto(0x0, 0x4800)
splice$auto(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0xc)
read$auto(0xca, 0x0, 0x6)
socket(0x1d, 0x1, 0x7fff)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r2, 0x110, 0x1, 0x0, 0x8)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto(r3, 0xc0045520, r1)
r4 = socket(0x10, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$auto_SO_SNDTIMEO_OLD(r5, 0x1, 0x15, &(0x7f0000000180)='IPVS\x00', &(0x7f00000001c0)=0x4)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
mmap$auto(0x6, 0x7, 0x7ff, 0x19, r4, 0xffff)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x5, 0x7, 0x7, 0xeb1, 0x401, 0x8000)
r6 = socket(0x9, 0x5, 0x3fd)
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x500000000000)
sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmsg$auto_IEEE802154_LIST_IFACE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="c4ea1a93227efec73c000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf251f00000006000b00020000000500360007000000050027000300000006000800008000000500350007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0xc084)
recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="7e8956cea400f39304"], 0x1ac}, 0x1, 0x0, 0x0, 0xa00}, 0x40000)

46.263608188s ago: executing program 40 (id=1659):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x6)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
ioctl$auto_BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f00000001c0)={&(0x7f0000000180)={0x0, 0x12000}, 0x0, 0x3ff, 0x3, 0x7, 0x400, 0x4, 0x80, 0x1, "821a3a97733fed7f473f5a5233f7b0847cd59e02a03b7816268efe0b2767955b93486a90a75195c2b0ed21c42ef1ce2556998d8da5ad4b2a266ad9bfe08bfee7"})
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000)
mmap$auto(0x0, 0x2020009, 0x3, 0x732, r0, 0x8080)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xc834, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x8000000000000000, 0x15)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
prctl$auto_PR_SET_VMA(0x53564d41, 0xfffffffffffffffe, 0x1000000000000, 0x8, 0x80)
shutdown$auto(r1, 0x10000)
pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000)
fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_MPP(r2, 0x0, 0x880)
sendmsg$auto_NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x18, 0x13, "cfa6b4b11703f5a58227dafd0a12f7fd27122586"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c844}, 0x916040f623309a62)
ioctl$auto(0x3, 0x80108907, 0x38)
prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40)
write$auto(0x3, 0x0, 0xfffffdef)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), r0)

36.931623018s ago: executing program 2 (id=1719):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async)
getcwd$auto(0x0, 0xffffffffffffffff) (async, rerun: 32)
unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) (async, rerun: 32)
pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf251f0000000800cb0000000000"], 0x1c}}, 0x81) (rerun: 64)
io_uring_setup$auto(0x1d48, &(0x7f0000000480)={0x7fffffff, 0xd, 0x8000, 0xe, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x5, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10052, 0x5, 0xfffffffc, 0x8, 0x876c5, 0xc9, 0xcc}})

36.607869912s ago: executing program 2 (id=1721):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x406a1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000895}, 0x20008890)
ioctl$auto(0xffffffffffffffff, 0x921064a6, 0x20000000020000a)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x18c00, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fb, 0x20000000007, 0x1, 0xbc3, 0x0, 0x3, 0x8, 0xc, 0x400000000003, 0x1, 0x3f00000000000000, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0)
pwrite64$auto(r1, 0x0, 0x8, 0x400000000000000)
socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)

35.610493296s ago: executing program 2 (id=1722):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8340, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/raid5wq/nice\x00', 0x80001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0)
read$auto(r0, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003680)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0)
recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0)
ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
open(0x0, 0x22240, 0x155)
r3 = socket(0x2, 0x80802, 0x0)
setsockopt$auto(r3, 0x11, 0x67, 0x0, 0x8)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
getsockopt$auto_SO_DONTROUTE(r3, 0x9, 0x5, &(0x7f0000000000)='/dev/sequencer2\x00', &(0x7f00000000c0)=0x3ff)
connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

34.631557867s ago: executing program 2 (id=1727):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/ip_vs\x00', 0x500, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x10028000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x3)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x7c3142, 0x0)
socketpair$auto(0x1a, 0x1, 0x8000000000000000, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyv4\x00', 0x4a1040, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
ioctl$auto(r2, 0x400455c8, r1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r0, 0x7)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x74c)
mmap$auto(0x0, 0x40000a, 0x200000e4, 0x9b72, 0x2, 0x400)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
bpf$auto(0x9, &(0x7f0000000180)=@link_detach, 0x80400001)

34.217951008s ago: executing program 2 (id=1730):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0)
r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x100242, 0x0)
r1 = socket(0x11, 0x2, 0x40000e)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
bind$auto(r0, &(0x7f0000000000)=@phonet={0x23, 0x5d, 0xf6, 0x4}, 0x1)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, 0x0, 0x80)
connect$auto(0x3, 0x0, 0x50)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0xfffffffffffffffd, 0x729, 0x9, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
mmap$auto(0xd8, 0x5, 0x2, 0x1000000000ebd, 0xffffffffffffffff, 0x8000)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x2, 0x2, 0x8000000000000000, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
getsockopt$auto_SO_BUSY_POLL(0xffffffffffffffff, 0x9, 0x2e, &(0x7f0000000140)='[%\\$,\t\x00', 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x1, 0x10001, 0x3, 0x5e, 0x0, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0xad3, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0xffd, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x80000001, 0x6]}, 0x0)
memfd_secret$auto(0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)

32.756665052s ago: executing program 2 (id=1733):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x1d, 0x2, 0x6) (async)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async)
setitimer$auto(0x2, &(0x7f00000005c0)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) (async)
write$auto(0x3, 0x0, 0xfdef) (async)
unshare$auto(0x40000080) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async)
ioctl$auto_SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, 0x0) (async)
r1 = gettid()
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
kill$auto(r1, 0x11) (async)
syz_clone3(&(0x7f0000000380)={0x4081080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58)
close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async)
socket(0x2, 0x1, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0p/oss\x00', 0x101000, 0x0) (async)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0x4070aea0, 0x38) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
ioctl$auto(0xffffffffffffffff, 0x4b72, 0xffffffffffffffff)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38) (async)
madvise$auto(0x34, 0xff, 0x18)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x50902, 0x0)
write$auto(r3, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x4a)

26.247759601s ago: executing program 1 (id=1758):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
rt_tgsigqueueinfo$auto_SIGCONT(0xffffffffffffffff, 0xffffffffffffffff, 0x12, &(0x7f00000003c0)={@_si_pad})
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804})
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x581402, 0x0)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0), 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0x9, 0xb871, 0x6, 0x9ffd, 0x81, 0x0, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x11, 0x80003, 0x300)
socket(0x29, 0x5, 0x0)
bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)=@raw_tracepoint={0xfffffffffffffffb, r3, 0x0, 0x1}, 0x8)
open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
close_range$auto(0x2, 0x8, 0x0)

25.05001667s ago: executing program 1 (id=1760):
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0)
socket(0x10, 0x2, 0xff)
mmap$auto(0x0, 0x400006, 0xdf, 0x90, 0x2, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r2, 0x0, 0x20)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3)
socket(0xa, 0x1, 0x100)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a8, 0x230)
ioctl$auto_TCFLSH2(r0, 0x545c, 0x0)
r5 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x103700, 0x0)
socket(0x10, 0x2, 0xc)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
read$auto(r5, 0x0, 0x4000000081)

23.830108435s ago: executing program 1 (id=1764):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000080)="d786d318e2f67356a6bd48591c932386d5e8cdb0c7c62c479631cf644777a36a05e2dbcffb909b66cb918c2a30703fa6e9ecceedf37c4a2294f4ec72bb492753ad3494ea98ed13be78e35813c1d49158f6f059a098c54e1c2f064862bed9371fa0a566db5b99c57c5a53f9efbb1dabcba33455268e4ba9be49d6dd8ff5434f8f9b83624ab2fd47caad8170c89448ea0af7")
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000100)={0x1ff, 0xfff, 0x1000})
bpf$auto(0x5, &(0x7f00000000c0)=@bpf_attr_0={0x5, 0x1000000e, 0x100, 0x80000001, 0x6fca, 0xffffffffffffffff, 0x5, "31b63adcc97aa60ffd8c28b17c06a708", 0x0, 0xffffffffffffffff, 0x61, 0x5, 0x4, 0x8}, 0x9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x11, 0x800, 0x800000d)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/admmidi2\x00', 0x450481, 0x0)
write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x5b020f7d7a84fe6e)
unshare$auto(0x40000080)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r0)
ioprio_set$auto(0x3, 0x0, 0x4b34)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2)
mmap$auto(0x0, 0x400009, 0x200, 0x9b72, 0x2, 0x6)
sendmsg$auto_SMC_NETLINK_GET_SYS_INFO(r3, 0x0, 0x18)
pread64$auto(r2, 0x0, 0x201, 0xc000)
mmap$auto(0x2e, 0x2020009, 0x3, 0xfffffffffffffffd, r3, 0x8000)
madvise$auto(0x1b, 0xffffffffffff0005, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)

23.207839727s ago: executing program 1 (id=1768):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80e42, 0x0)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0xffffffffffffffff, 0x100000000008000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/lo/mcast_solicit\x00', 0x2, 0x0)
sysfs$auto(0x3, 0x3f, 0x7)
fsopen$auto(0x0, 0x1)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x800, 0x1000106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40000, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0)
r3 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto(r3, 0x84, 0x7, 0x0, 0x0)
ioctl$auto(r2, 0xc040563d, r1)
mmap$auto(0x0, 0x8, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x2, 0x1, 0x0)
shmctl$auto_IPC_SET(0x10000, 0x1, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x63102, 0x0)
sendfile$auto(r5, r0, 0x0, 0x5)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/oss\x00', 0x60c80, 0x0)
pread64$auto(r7, 0x0, 0x20000000003f, 0x8)
sendfile$auto(r6, r6, 0x0, 0x2)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183841, 0x0)
pwrite64$auto(r8, 0x0, 0x4080000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x1, 0x7, 0x3, 0xeb1, r4, 0x9)

22.398847691s ago: executing program 1 (id=1771):
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x0, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2}, 0x1fe, 0x81)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='*', @ANYRES16, @ANYBLOB="010029bd"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xfffffffe)

21.966553166s ago: executing program 1 (id=1773):
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x7, 0x3, 0xffffffff7ffffffe, 0x12, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bpq4/statistics/rx_packets\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
mmap$auto(0xfffffffffffffff6, 0xe97f, 0x9, 0x400000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x5, 0xa, 0xe) (async, rerun: 32)
socket(0x2, 0x3, 0xa) (async, rerun: 32)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
unshare$auto(0x40000080) (async, rerun: 32)
r1 = pidfd_open$auto(0x1, 0xdd4) (rerun: 32)
setns(r1, 0x60020000) (async)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async, rerun: 64)
pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') (async, rerun: 64)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e20, @empty}, 0x854)
recvfrom$auto(0xffffffffffffffff, 0xfffffffffffffffc, 0x5, 0x99, 0x0, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
ioctl$auto(0x3, 0x541b, 0x7f) (async)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/4/effective_affinity\x00', 0x50100, 0x0) (async)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0xa, 0x80002, 0x73) (async, rerun: 64)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram13\x00', 0x70642, 0x0) (async, rerun: 64)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x3, 0x8, 0xe)
lseek$auto(0x3, 0x0, 0x1) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)

17.719478869s ago: executing program 41 (id=1733):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x1d, 0x2, 0x6) (async)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async)
setitimer$auto(0x2, &(0x7f00000005c0)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) (async)
write$auto(0x3, 0x0, 0xfdef) (async)
unshare$auto(0x40000080) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async)
ioctl$auto_SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, 0x0) (async)
r1 = gettid()
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
kill$auto(r1, 0x11) (async)
syz_clone3(&(0x7f0000000380)={0x4081080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58)
close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async)
socket(0x2, 0x1, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0p/oss\x00', 0x101000, 0x0) (async)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0x4070aea0, 0x38) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
ioctl$auto(0xffffffffffffffff, 0x4b72, 0xffffffffffffffff)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38) (async)
madvise$auto(0x34, 0xff, 0x18)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x50902, 0x0)
write$auto(r3, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x4a)

7.784327642s ago: executing program 3 (id=1814):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
r1 = timerfd_create$auto(0x6, 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
fallocate$auto(r0, 0x1, 0x820, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e29b11e2c41b25e95a0d677941ec8136ec921976149c1d14b")
mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000)
r2 = socket(0x2, 0x3, 0x2)
r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x6a)
socket(0xa, 0x2, 0x88)
setsockopt$auto(r2, 0x1, 0x6, 0x0, 0xc089)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x5)
connect$auto(r3, &(0x7f0000000040)=@hci={0x1f, 0x2, 0x1}, 0x100)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
memfd_secret$auto(0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'})
sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01009b64c23ef155546b0104000008000900", @ANYBLOB="080005000600000008000200", @ANYRES32=0x0, @ANYBLOB="0c0001006970366772653000"], 0x8d}, 0x1, 0x0, 0x0, 0x10}, 0x2000000)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)

6.942209757s ago: executing program 42 (id=1773):
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x7, 0x3, 0xffffffff7ffffffe, 0x12, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bpq4/statistics/rx_packets\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
mmap$auto(0xfffffffffffffff6, 0xe97f, 0x9, 0x400000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x5, 0xa, 0xe) (async, rerun: 32)
socket(0x2, 0x3, 0xa) (async, rerun: 32)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
unshare$auto(0x40000080) (async, rerun: 32)
r1 = pidfd_open$auto(0x1, 0xdd4) (rerun: 32)
setns(r1, 0x60020000) (async)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async, rerun: 64)
pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') (async, rerun: 64)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e20, @empty}, 0x854)
recvfrom$auto(0xffffffffffffffff, 0xfffffffffffffffc, 0x5, 0x99, 0x0, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
ioctl$auto(0x3, 0x541b, 0x7f) (async)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/4/effective_affinity\x00', 0x50100, 0x0) (async)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0xa, 0x80002, 0x73) (async, rerun: 64)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram13\x00', 0x70642, 0x0) (async, rerun: 64)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x3, 0x8, 0xe)
lseek$auto(0x3, 0x0, 0x1) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)

5.350006801s ago: executing program 0 (id=1824):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VF\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xa2\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fffffffffffffff)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f00000002c0)="49e521cbb02ff8b42fabc71ed383c99fec0800000000000000a7bc4ea922415bd2c09903c301a6d4e2b6c159a22d0223bf0249cdeeb438df6716857483a2dca058cc6093acbdc2a94d7c15692c19bb5ff8b03e143e20b669e462d0863b770aa0258071f28e15e447d0d54499bb320c6c2fb6978e49ac9330479fc703e2a535be4e2b223e247023d762844ee0548ebd2fecc2372c988981f6222c572d085eceba84d3c5ce30064ec72bf1360f239edd926dcf4812694023a977cd4f2a77cb8316a93feb9b3e66bc0cc1")
mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0xfffffffffffffffe, 0x240007, 0x17)
prctl$auto(0x800003b, 0x1, 0x0, 0x5, 0x100000000008007)
mmap$auto(0x0, 0x8000000020008, 0x6d, 0x16, 0x8000000000000024, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0000, 0x0)
openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0)
mprotect$auto(0x200000000000, 0x806121, 0x4)
r2 = socket(0x2, 0x1, 0x106)
bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
mmap$auto(0x9ae, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
keyctl$auto(0xb, 0xffffffffffffffff, 0x6, 0x4, 0x7a)
unshare$auto(0x40000080)

4.713434926s ago: executing program 8 (id=1825):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80e42, 0x0)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0xffffffffffffffff, 0x100000000008000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/lo/mcast_solicit\x00', 0x2, 0x0) (async)
sysfs$auto(0x3, 0x3f, 0x7) (async)
fsopen$auto(0x0, 0x1)
socket(0x2, 0x80002, 0x73) (async, rerun: 32)
socket(0x2, 0x800, 0x1000106) (rerun: 32)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40000, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) (async)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0)
ioctl$auto(r2, 0xc040563d, r1) (async)
mmap$auto(0x0, 0x8, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x2, 0x1, 0x0) (async)
shmctl$auto_IPC_SET(0x10000, 0x1, 0x0) (async)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x63102, 0x0)
sendfile$auto(r3, r0, 0x0, 0x5) (async, rerun: 32)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) (async, rerun: 32)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/oss\x00', 0x60c80, 0x0)
pread64$auto(r5, 0x0, 0x20000000003f, 0x8) (async)
sendfile$auto(r4, r4, 0x0, 0x2) (async)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183841, 0x0)
pwrite64$auto(r6, 0x0, 0x4080000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x8, 0x1000000004, 0x209b72, 0x2, 0x8000) (async, rerun: 64)
mseal$auto(0x0, 0x4000007dda, 0xffffffffffffffff) (rerun: 64)
madvise$auto(0x0, 0x8001, 0x9)

4.544321758s ago: executing program 3 (id=1826):
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0)
r1 = socket(0xa, 0x3, 0x3c)
bpf$auto(0x6, &(0x7f0000000200)=@link_create={@prog_fd, @target_fd=r1, 0x80000001, 0xbca, @kprobe_multi={0x5, 0x6, 0x4, 0x8, 0xc66}}, 0x101) (async)
bpf$auto(0x6, &(0x7f0000000200)=@link_create={@prog_fd, @target_fd=r1, 0x80000001, 0xbca, @kprobe_multi={0x5, 0x6, 0x4, 0x8, 0xc66}}, 0x101)
write$auto(r1, &(0x7f0000000080)='+&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f)
socket$nl_generic(0x10, 0x3, 0x10)
setresuid$auto(0x8, 0x0, 0x4)
setpriority$auto(0x2, 0x8, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/memory/memory8/phys_device\x00', 0x800, 0x0)
read$auto(r2, 0x0, 0x20) (async)
read$auto(r2, 0x0, 0x20)
r3 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r3, 0x29, 0x2f, 0x0, 0x22) (async)
setsockopt$auto(r3, 0x29, 0x2f, 0x0, 0x22)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x200, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_SCAN_SSIDS={0x1d7, 0x2d, 0x0, 0x1, [@typed={0x8, 0x143, 0x0, 0x0, @u32=0x9}, @generic="27addf54e8094ed8e26cd28107a0331d084da030cf60347f2dadfabf13b2ab0de4a0367018472947f55eeadb1c5a2776b50622b4ca916539590b267588229ae4d179d74820aa1258f8f9c2b6886d301ff34ba308191d694c8a2d44ea5c8bd70e86bc5e1bbcc7f7ce2a7e2ef19263cadaf46066d9320cd91171af0e2fe2ade7f753efaa275a569170538daa954ffc68606b9ff5b0961be05ecc0f35f78e305636193f8337a3d7898d8dcb27aa47113f", @nested={0x8, 0xcf, 0x0, 0x1, [@typed={0x4, 0x34}]}, @generic="c262e93ffe4aede922f44e852880259bcc78d1ec601797a00d95b40c924edfc6c3f377706a88369bee32214fb75fab6bd59b5b199c5aca1961b8cdd18e0babee67e7e6e245fb4693518ebeed2c698c5e6c391ee44a7ca20764fdee65cae6dcbf8ecc8f7af3f97862041a1101bc94885160011e93bab2", @generic="665e3014a31e95d1f51f7421679459a822ebe0cb26495684eb6da16255a07428b0457c458806114dd4d9c8ea4009d7cccbfa9adc8d00a7aa6710847cf59e438a402ec4fb6e981c53b1f319d994f50c50d2fc288cc209a4d085cabe33f1217e40b4421263dbece44fefdca722e3d699f7d5eb6213d642b0f06963c2f3d3eeccdf6fee30ec15031e51115c156f96dd8c0c7df2", @typed={0x8, 0x130, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x7b}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x81}]}, 0x200}, 0x1, 0x0, 0x0, 0x4c090}, 0x4000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x200, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_SCAN_SSIDS={0x1d7, 0x2d, 0x0, 0x1, [@typed={0x8, 0x143, 0x0, 0x0, @u32=0x9}, @generic="27addf54e8094ed8e26cd28107a0331d084da030cf60347f2dadfabf13b2ab0de4a0367018472947f55eeadb1c5a2776b50622b4ca916539590b267588229ae4d179d74820aa1258f8f9c2b6886d301ff34ba308191d694c8a2d44ea5c8bd70e86bc5e1bbcc7f7ce2a7e2ef19263cadaf46066d9320cd91171af0e2fe2ade7f753efaa275a569170538daa954ffc68606b9ff5b0961be05ecc0f35f78e305636193f8337a3d7898d8dcb27aa47113f", @nested={0x8, 0xcf, 0x0, 0x1, [@typed={0x4, 0x34}]}, @generic="c262e93ffe4aede922f44e852880259bcc78d1ec601797a00d95b40c924edfc6c3f377706a88369bee32214fb75fab6bd59b5b199c5aca1961b8cdd18e0babee67e7e6e245fb4693518ebeed2c698c5e6c391ee44a7ca20764fdee65cae6dcbf8ecc8f7af3f97862041a1101bc94885160011e93bab2", @generic="665e3014a31e95d1f51f7421679459a822ebe0cb26495684eb6da16255a07428b0457c458806114dd4d9c8ea4009d7cccbfa9adc8d00a7aa6710847cf59e438a402ec4fb6e981c53b1f319d994f50c50d2fc288cc209a4d085cabe33f1217e40b4421263dbece44fefdca722e3d699f7d5eb6213d642b0f06963c2f3d3eeccdf6fee30ec15031e51115c156f96dd8c0c7df2", @typed={0x8, 0x130, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x7b}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x81}]}, 0x200}, 0x1, 0x0, 0x0, 0x4c090}, 0x4000)
read$auto(r0, 0x0, 0x7)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) (async)
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0)

3.784466871s ago: executing program 8 (id=1827):
mmap$auto(0x0, 0x202000b, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x0, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r1 = epoll_create$auto(0x3e) (async)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108)
epoll_ctl$auto(r1, 0x1, r0, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) (async)
ioctl$auto_PPPIOCGFLAGS(r2, 0x8004745a, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) (async)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) (async)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)

3.529039698s ago: executing program 0 (id=1828):
r0 = socket(0x2a, 0x2, 0x1)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
read$auto(r2, 0x0, 0x20)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/module/ib_srp/parameters/fast_io_fail_tmo\x00', 0xa8282, 0x0)
read$auto(r3, 0x0, 0x1d)
write$auto(r1, 0x0, 0xe)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
io_uring_setup$auto(0x9, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x890b, 0xffffffffffffffff)
fcntl$auto(r0, 0x2007b564, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010b0bbd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000084)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/loop14/queue/stable_writes\x00', 0x182b02, 0x0)

2.838687403s ago: executing program 8 (id=1829):
mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0xbe3728801e6fabe7, 0x0)
poll$auto(&(0x7f00000001c0)={r0, 0x6, 0x9}, 0x7fffffff, 0x1a200000)
r1 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5<y\xa5\x97\x13\xef\xc4g\xc3\xa4&\x81I6\v\xcc\x00\x00', 0x62, 0xfffc, 0x0)
setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6})
mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5<y\xa5\x97\x13\xef\xc4g\xc3\xa4&\x81I6\v\xcc\x00\x00\x11\x86\x02\xf8\x8a\x05=u\xfa\xea\x87\xd0\xf9[\xfcu\x94\x90n\xdd0;N\xc3\x9bh\x05\xcah\x80!*0o\x94\x1eF\x90\xd6\x85\xcd\x00\x00\x00\x00A\xe2\xe8[\xac\xd4F\xeb\xd5]\xa9c\x05+Y\xcdB\xa7\xc2\xec\v$q\x1f\xf5~\xf0\x14k\xcb\x88E\xae\xb6~\xe1t\x06\xba\x8fE\x99\xb8\xbf\x94\xe1\x9cY>srQ', 0xa7c, 0xc, 0x0)
r2 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x82, 0x0)
fcntl$auto_F_SETOWN_EX(r3, 0xf, 0x200)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r4 = eventfd$auto(0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0)
r5 = open_tree_attr$auto(r4, &(0x7f0000000200)='./file0\x00', 0xf1, &(0x7f0000000240)={0x0, 0x4, 0xffff, @raw=0x9}, 0x4d884800)
sendto$auto(0xffffffffffffffff, &(0x7f0000000640)="bce0f94a4a5be5dd7a4e7794d77a81ab06fb21434b6c81246954000f53679331ad08e7116a4cc676265fcad66a330295cf64f637b17bc8b9bb81961a6f3c36ddfc6f0f43d0e5e0e4cb8a22db403da19d65672cb332f1f96c551d02cfe83d5a1b5bee998dcb6d734e91b11a215f0fde6e3867d3a162188bd18402066b00beaeae7d655f28b05cefad3f13d1785ec1015b97c49dda44a1add9fc2dd4c20ff5dfe8", 0x7442, 0x46c, &(0x7f0000000380)=@rc, 0x10000)
epoll_ctl$auto_EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000280)={0x5, 0x6a6a})
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8)
getsockopt$auto(r2, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe)
r6 = socket(0x1e, 0x805, 0x0)
r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="37bf3a07b3ccc7a68818ac00dfb188e1367113a8f857d477218f2c997dd5e05154fd4d96cf91ad8096cf4b25e798e9e62423e60a1c4d6e9be3be76468960f9ff6b21ce191886ad2fcceadbd41313e6d1ef7d7b7feb0dd1304d171bd739577f14e6cd3c17", @ANYRES16=r7, @ANYRESHEX=0x0, @ANYRESOCT=r6], 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x0)
mq_timedsend$auto(r1, 0x0, 0x80, 0x9, 0x0)
mq_timedreceive$auto(r1, 0x0, 0x4dcd, 0x0, 0x0)

2.744482703s ago: executing program 3 (id=1830):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) (async)
getsockopt$auto_SO_MAX_PACING_RATE(r0, 0x82b, 0x2f, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0x4831)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) (async)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x581402, 0x0)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x11, 0x80003, 0x300) (async)
socket(0x29, 0x5, 0x0) (async)
open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) (async)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)

2.57862427s ago: executing program 0 (id=1831):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'veth0_macvtap\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'macvlan1\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'ip6gretap0\x00', <r4=>0x0})
r5 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000001340)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x80800, 0x0)
ioctl$auto_BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001380)={0x5, "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", 0x0, 0x5, 0x9, 0x800, "367695c769ad04284684b25fbb3e2eaa", "ca089f0a285caa75e808df2b8b2bc4e3", "7a3f50fe0dbeb57b88ab06e7b21bd4bc", 0x4, 0x4a, 0xdfc7, 0x3, {0x1, 0xf7}, {0x5, 0x8}, {0x34296cf4, 0xc49}, {0x400, 0xc83}, [0x4, 0x8000000000000001, 0x7fff, 0x4902800000000, 0xffffffff80000001, 0x2d78000, 0x1, 0x7]})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'macsec0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'caif0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'bond0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'bond0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'syzkaller1\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'dvmrp0\x00', <r11=>0x0})
sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="44020000", @ANYRES16=r1, @ANYBLOB="000404000000fedbdf250f000000180001801400020076657468315f6d6163767461700000000c00018008000300060000005400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000300fbffffff08000100", @ANYRES32=r4, @ANYBLOB="1400020076657468305f746f5f687372000000001400020069703665727370616e3000000000000008000300040000001800018014000200697036677265746170300000000000006000018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300ba000000140002007465616d5f736c6176655f31000000001400020067656e657665300000000000000000001400020076657468315f746f5f626174616476000800010000af6474197707b343ff34378fdcc563c1b88f21fb55e99834d85426d523966aaf7e86ae151170b78eede76189f8e58c573e8b30eea37cde672a42b4b1ca39d95ba68b41e3787d7ed0d27ed40ce732ed470605b2a879c7e282d43d9a3b730916be00f66eb73f7711972bc93619d272a8dd67dfc3ddcc9c084bde83ce5472f0551571ad9a636c06ae64169cd638c00bbab3d1bc460120e0ba00cbf081a5", @ANYRES32=r7, @ANYBLOB="2000018014000200697036746e6c30000000000000000000080003005cc80000540001800800030001000000080003000400000014000200766574683100000000000000000000000800030009000000080003000300000014000200766c616e30000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="3000018008000300a30a0000080003000104000008000100", @ANYRES32=r9, @ANYBLOB="140002006e6963766630000000000000000000002800018008000100", @ANYRES32=r10, @ANYBLOB="1400020070696d7265673100000000000000000008000300470900007400018014000200776c616e31000000000000000000000014000200697036677265300000000000000000001400020074756e6c30000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="0800030047000000140002007465616d5f736c6176655f310000000008000300050000000800030000000000"], 0x244}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000801)
r12 = socket(0x25, 0x5, 0x3)
setsockopt$auto(r12, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0x10004)
ioperm$auto(0xaf, 0xe, 0x991b)
memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r13 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpu0/topology/physical_package_id\x00', 0x8c00, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r13, &(0x7f0000000100)=""/4096, 0x1000)
socket(0x10, 0x2, 0x15)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000afd003a5394e965231da1bd312e7af6d67d09340d0a4bd7805e18ac78f35cb77d1029c69e7270148078c13a91f6dff64055ad11608f0fb", @ANYBLOB="906a185dc6ea09b7b9ae1d4f8d0937ac30b808"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x10000805)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xa}, 0x8}, 0x3, 0x0)

2.427274981s ago: executing program 3 (id=1832):
connect$auto(0x3, 0x0, 0x5b) (async)
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, 0x0, 0x58) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x1) (rerun: 32)
syz_genetlink_get_family_id$auto_nl802154(0x0, r0) (async, rerun: 64)
pread64$auto(0xffffffffffffffff, 0x0, 0x440, 0xf25) (rerun: 64)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
io_uring_setup$auto(0x748, 0x0)
r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r1, r1, 0x0) (async)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) (async, rerun: 64)
splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xb, 0x1) (async, rerun: 64)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210004, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x206, 0x8, 0x3, 0xa, 0x7, 0x0, 0x0, 0x10000005, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, [0x3, 0x0, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x80000000000000, 0x0, 0x0, 0x0, 0xe8, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x80000000000000, 0x200000000000000, 0x1d6, 0x200, 0x0, 0x4, 0x7fff]}, 0x1fe, 0x81)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x3, 0x100) (async, rerun: 64)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfdf1) (async, rerun: 64)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x10048080)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2.173794025s ago: executing program 8 (id=1833):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x323340, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
timer_create$auto(0x9, 0x0, 0x0) (async)
read$auto(0x3, 0x0, 0x8080) (async)
socket(0xa, 0x1, 0x100) (async)
write$auto(0x3, 0x0, 0xffd8) (async)
unshare$auto(0x40000080) (async)
process_mrelease$auto(0xffffffffffffffff, 0xa) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
io_uring_register$auto_IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000080)="7cd6b4d637a83e41abe2ef21a3964dce0db65eab8368c05efdb6998e0211acba8eb3bb325b7ca2aec278fd88c596dcf07308200126", 0x3) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
connect$auto(0xffffffffffffffff, 0x0, 0x54) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) (async)
r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x5)
ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x2, 0x800005, 0x400007})
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)

1.589029905s ago: executing program 0 (id=1834):
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x700, 0x0)
lsm_get_self_attr$auto(0x8, &(0x7f0000002700)={0x0, 0x8000, 0x1000}, &(0x7f0000002840)=0x13e, 0x1)
fcntl$auto(0x3, 0x4, 0xa553)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x80000, 0x0)
r1 = io_uring_setup$auto(0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'})
ioctl$auto_RTC_PIE_ON(r1, 0x7005, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x315, 0x1, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x7ff, 0x3, 0x2, 0x9, 0xfffffffe, 0x4000006, 0x4, 0xb6, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1]}, 0x1fe, 0xd)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd12/sched/dispatch2\x00', 0x121000, 0x0)
pread64$auto(r2, 0x0, 0x68, 0xfc)
read$auto(r0, 0x0, 0x9)

1.400417193s ago: executing program 3 (id=1835):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x5, 0x1) (async)
openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000004, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0x1, 0xa9, 0x0, 0x9]}, &(0x7f0000000040))
connect$auto(0x3, &(0x7f0000000000)=@generic={0x10, "0040e100001600"}, 0x5c)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) (async)
r0 = io_uring_setup$auto(0x6, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x93f, 0x1fee1, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x1000000000000, 0xfffffffffffffffc, 0xcde, 0x7fffffffffff, 0x9, 0x3, 0x0, 0x10, 0x0, 0x0, 0x401, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x82) (async)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x400, 0x8000) (async)
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r1 = socket(0x2, 0x80802, 0x0)
setsockopt$auto(r1, 0x11, 0x68, 0x0, 0x8) (async)
io_uring_setup$auto(0x1, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f0000000300)={0x12a004080, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
socket(0x2, 0x5, 0x0) (async)
mmap$auto(0x0, 0x20009, 0xde, 0xeb1, r0, 0x8000) (async)
socketpair$auto(0x4001, 0x2, 0xfffffffa, 0x0) (async)
select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) (async)
setsockopt$auto(0x3, 0x10000000084, 0x6, 0x0, 0x84)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)

1.270333015s ago: executing program 0 (id=1836):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x400000, 0x0)
ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, &(0x7f0000000040)="3da3aea807a68c4e9fa4f37d4ecba0961cfca306f4033260ad21364f8ef2b9cca9e46e7a6a43770fee1c9a9d0552f76a974946815cc59f90f7e601aae7340dabf3502f6fcb171efd5cb36fc2e4d34297cbbae4b438b49efe9fa3b9f6d7c6bdbb9c12a663b1224ef7775bd77135ca67f3a0cf57ecd07d0afb6e0b63aae8bbaea0b43e3e015cedeb131708a79404f16fe13c16a1cf0866986df758a967167f30381c5a281fd4a6c7424099f42979b19c2cdedb08225711bc6af5b22771a15addc2c6d7")
getsockopt$auto_SO_TXREHASH(r0, 0x7, 0x4a, &(0x7f0000000140)='\'\x00', &(0x7f0000000180)=0xb)
fsconfig$auto_SHMEM_HUGE_ALWAYS(r0, 0x5, &(0x7f00000001c0)='*-*\x00', &(0x7f0000000200)="715d8792ad572d1ecd7f0ffab0cb963511964e9f3890e5224ac9692d7c4cc599787b498c67530d2c5635f381276a5a60a5b744f004777e306561b1a06a011f0ae85d4cfde547545ef38e", 0x1)
fcntl$auto_F_OFD_GETLK(r0, 0x24, 0x3)
timerfd_settime$auto(r0, 0x7fff, &(0x7f0000000280)={{0xb, 0x5}, {0x8000000000000000, 0x1a4470fd}}, &(0x7f00000002c0)={{0x3, 0xca3b}, {0x2, 0x100000000}})
fsconfig$auto_FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000300)='{]\\.\x81\x00', &(0x7f0000000340)="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", 0x9)
r1 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001340)={@_si_pad}, 0x2, &(0x7f00000013c0)={{0xfffffffffffffff9, 0x4}, {0x7, 0x401}, 0xd, 0x1, 0x2, 0x10, 0x4, 0x1000, 0x6, 0x2, 0x6, 0x7, 0xf, 0x7, 0x5, 0xcd})
r2 = prctl$auto_PR_SET_MM_END_CODE(0x3, 0x2, r1, 0xf, 0x5)
getsockopt$auto_SO_MAX_PACING_RATE(r0, 0xc, 0x2f, &(0x7f0000001480)=':\x03\x00', &(0x7f00000014c0))
r3 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000001500), 0x111c0, 0x0)
r4 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000001540)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x0, 0x0)
ioctl$auto(r3, 0x6, r4)
ioctl$auto_FIGETBSZ(r3, 0x2, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000001580), 0x10100, 0x0)
select$auto(0xe20, &(0x7f00000015c0)={[0x800, 0x1, 0x72, 0xffff, 0x9, 0x0, 0x0, 0x2, 0x5, 0x8000000000000000, 0x0, 0x7, 0x5, 0x5, 0x1, 0x7f]}, &(0x7f0000001640)={[0x5, 0x7, 0x4, 0x10001, 0x7, 0xda78, 0x9d, 0x4, 0xcdd, 0x7fffffffffffffff, 0x7, 0x8000, 0x0, 0x101, 0x3, 0x1000000000000]}, &(0x7f00000016c0)={[0x3, 0x7, 0x6, 0x9, 0x2, 0x1, 0x66c, 0x1ff, 0x3ff, 0x6, 0x2, 0x7, 0x7ff, 0x9]}, &(0x7f0000001740)={0x7, 0x8})
r6 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000001780), 0x4600, 0x0)
ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r6, 0x7b9, 0x0)
r7 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000001800), r5)
sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_REQUEST(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4c010)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001940), r5)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x34, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xfffffffa}, @NL802154_ATTR_WPAN_PHY_NAME={0xe, 0x2, '/dev/dsp1\x00'}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c000}, 0x84)
write$auto(r2, &(0x7f0000001a40)='{]\\.\x81\x00', 0x100000000)
getsockopt$auto_SO_NOFCS(r0, 0x3, 0x2b, &(0x7f0000001a80)='${}\x00', &(0x7f0000001ac0)=0x40)
r9 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001b40), r5)
sendmsg$auto_GTP_CMD_NEWPDP(r5, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x30, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r10 = syz_clone(0x1202500, &(0x7f0000001c40)="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", 0x1000, &(0x7f0000002c40), &(0x7f0000002c80), &(0x7f0000002cc0)="924ec34d402ddfc65e413d4722a285db85952a4b3e442aa7de88a55385399010d252595db5329172d359b6b17121607fd29af543bb5ce6f5cc96bed7059b5cbb172e08474139da20301a077f0ee1a419a4dffc477a0ffb531971ba4fb6d657e144dc993a0a7b35f81f102a0bcd9779903e00fdfe75290f69276933324dc52bfcdbf894e6ab4074c0de4cff53")
sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c04}, 0x2000c054)
kcmp$auto_KCMP_EPOLL_TFD(0x0, r10, 0x7, r4, 0x5)

913.040967ms ago: executing program 8 (id=1837):
openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/output_bpc\x00', 0x208042, 0x0) (async)
r0 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/output_bpc\x00', 0x208042, 0x0)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x2, 0xffffffffffffffff, 0x6, 0x2e)
socket(0x29, 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/kernel/tainted\x00', 0xc2381, 0x0) (async)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/kernel/tainted\x00', 0xc2381, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) (async)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0)
sendfile$auto(r1, r2, 0x0, 0x1000200) (async)
sendfile$auto(r1, r2, 0x0, 0x1000200)
r3 = socket(0x11, 0x3, 0x9)
socket(0x10, 0x3, 0xb) (async)
socket(0x10, 0x3, 0xb)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x60d02, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mknod$auto(&(0x7f0000000900)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x4, 0x407)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
socket(0xa, 0x1, 0x84) (async)
r5 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r5, 0x84, 0x81, 0x0, &(0x7f0000000000)=0x9b)
lstat$auto(&(0x7f0000000540)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
ioctl$auto(0x3, 0x5420, 0x38) (async)
ioctl$auto(0x3, 0x5420, 0x38)
r6 = socket(0x29, 0x2, 0x0)
setsockopt$auto(r6, 0x119, 0xfffffffe, 0x0, 0x8)
read$auto(r4, 0x0, 0x73)
close_range$auto(0x2, 0x8, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0xc8c, 0x6, 0x48}) (async)
capset$auto(0x0, &(0x7f0000000000)={0xc8c, 0x6, 0x48})
sendmmsg$auto(r3, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba831b53", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) (async)
sendmmsg$auto(r3, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba831b53", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$auto(0x1, 0x0, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)

788.426858ms ago: executing program 3 (id=1838):
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
lseek$auto(r0, 0x9, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x628181, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, 0x0, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
kill$auto(0xffffffffffffffff, 0x6)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/arch_status\x00', 0x0, 0x0)
mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x7d, 0x9, 0x0)
r3 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0xa, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0)
prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
futex$auto(0x0, 0x85, 0x401, 0x0, 0x0, 0x1000)
sendmmsg$auto(r3, 0x0, 0x7, 0x8)
getdents$auto(r0, &(0x7f00000004c0)={0x100, 0xa, 0x4}, 0x62d4)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
ioctl$NS_GET_PARENT(r4, 0xb701, 0x0)

58.188741ms ago: executing program 8 (id=1839):
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff)
prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0)
mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrlimit$auto(0x8, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0)
sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0800070000000000df70967b138f"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020)
read$auto(0xffffffffffffffff, 0x0, 0x7f)
mprotect$auto(0x8000, 0x8, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x14c583, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
close_range$auto(r4, 0x8, 0x0)
read$auto(r0, 0x0, 0x3)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r3, 0x0, r7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=1840):
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0)
socket(0x10, 0x2, 0xff)
mmap$auto(0x0, 0x400006, 0xdf, 0x90, 0x2, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r2, 0x0, 0x20)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3)
socket(0xa, 0x1, 0x100)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a8, 0x230)
ioctl$auto_TCFLSH2(r0, 0x545c, 0x0)
r5 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x103700, 0x0)
socket(0x10, 0x2, 0xc)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
read$auto(r5, 0x0, 0x4000000081)
select$auto(0x2, &(0x7f00000000c0)={[0x400, 0x800, 0x3, 0x9, 0x6, 0x8, 0x4, 0x3, 0x2, 0x99d, 0xe6c, 0x100000001, 0x6, 0x6, 0x1, 0x3]}, &(0x7f0000000180)={[0x6, 0x100, 0x7, 0x7fffffff, 0x24c, 0x0, 0x0, 0x6351, 0x0, 0x0, 0x7647a800, 0x3, 0x5, 0x8000, 0x1ff, 0x101]}, &(0x7f0000000300)={[0x4, 0x10001, 0x1, 0x5, 0x8, 0xd0, 0x8000000000000001, 0x6, 0x2fa9, 0xfffffffffffffffc, 0xfffffffffffffff9, 0x4894c55f, 0x1000, 0xf9a, 0xfff, 0x100000000]}, &(0x7f0000000280)={0x0, 0x1})

kernel console output (not intermixed with test programs):

sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  422.944729][T13166] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  422.960337][T13166] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  422.978003][T13166] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  423.003242][T13157] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  423.013530][T13152] FAULT_INJECTION: forcing a failure.
[  423.013530][T13152] name fail_futex, interval 1, probability 0, space 0, times 0
[  423.050698][T13174] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  423.066674][T13174] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  423.080655][T13174] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  423.102680][T13174] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  423.104238][T13152] CPU: 1 UID: 0 PID: 13152 Comm: syz.6.1487 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  423.104281][T13152] Tainted: [L]=SOFTLOCKUP
[  423.104291][T13152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  423.104307][T13152] Call Trace:
[  423.104316][T13152]  <TASK>
[  423.104326][T13152]  dump_stack_lvl+0x16c/0x1f0
[  423.104372][T13152]  should_fail_ex+0x512/0x640
[  423.104416][T13152]  get_futex_key+0x1d0/0x15f0
[  423.104449][T13152]  ? __pfx_get_futex_key+0x10/0x10
[  423.104482][T13152]  ? __pfx_netlink_sendmsg+0x10/0x10
[  423.104526][T13152]  futex_wait_setup+0x9d/0x570
[  423.104572][T13152]  __futex_wait+0x193/0x2f0
[  423.104607][T13152]  ? __pfx___futex_wait+0x10/0x10
[  423.104640][T13152]  ? rcu_is_watching+0x12/0xc0
[  423.104680][T13152]  ? __pfx_futex_wake_mark+0x10/0x10
[  423.104719][T13152]  ? futex_hash+0x2c5/0x380
[  423.104749][T13152]  ? futex_private_hash_put+0x160/0x1b0
[  423.104781][T13152]  futex_wait+0xe8/0x380
[  423.104818][T13152]  ? __pfx_futex_wait+0x10/0x10
[  423.104871][T13152]  do_futex+0x229/0x350
[  423.104900][T13152]  ? __pfx_do_futex+0x10/0x10
[  423.104929][T13152]  ? fput+0x70/0xf0
[  423.104954][T13152]  ? __sys_sendmsg+0x18c/0x220
[  423.104991][T13152]  __x64_sys_futex+0x1e0/0x4c0
[  423.105024][T13152]  ? __pfx___x64_sys_futex+0x10/0x10
[  423.105055][T13152]  ? xfd_validate_state+0x61/0x180
[  423.105090][T13152]  do_syscall_64+0xcd/0xf80
[  423.105116][T13152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.105141][T13152] RIP: 0033:0x7f8e2d18f7c9
[  423.105163][T13152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  423.105188][T13152] RSP: 002b:00007f8e2e10d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  423.105214][T13152] RAX: ffffffffffffffda RBX: 00007f8e2d3e5fa8 RCX: 00007f8e2d18f7c9
[  423.105232][T13152] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8e2d3e5fa8
[  423.105248][T13152] RBP: 00007f8e2d3e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  423.105265][T13152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  423.105281][T13152] R13: 00007f8e2d3e6038 R14: 00007ffe255b6310 R15: 00007ffe255b63f8
[  423.105317][T13152]  </TASK>
[  423.438996][T13178] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  423.459537][T13178] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  423.480575][T13178] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  423.555611][T13178] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  427.187452][T13268] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  427.362721][T13270] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  428.018296][T13279] cifs: Unknown parameter './file0'
[  428.041117][T13279] CIFS mount error: No usable UNC path provided in device string!
[  428.041117][T13279] 
[  428.056660][T13279] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  428.528289][T13287] zswap: compressor  not available
[  429.700579][T13307] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  429.785658][T13307] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  429.827242][T13307] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  429.833290][T13307] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  429.868969][T13307] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  429.903770][T13307] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  429.935858][T13307] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  429.995077][T13307] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  430.021303][T13307] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  430.068828][T13307] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  430.115112][T13307] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  430.207151][T13307] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  430.239175][T13307] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  430.254656][T13307] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  430.290996][T13307] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  431.087403][T13346] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  431.267055][T13355] Invalid ELF header magic: != ELF
[  431.507126][T13356] zswap: compressor  not available
[  431.706436][T11968] Bluetooth: hci1: command 0x0c1a tx timeout
[  431.729681][T13370] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  431.848513][T11968] Bluetooth: hci3: command 0x0c1a tx timeout
[  431.854810][T11954] Bluetooth: hci4: command 0x0c1a tx timeout
[  431.861347][T11968] Bluetooth: hci2: command 0x0c1a tx timeout
[  432.004626][T12360] Bluetooth: hci5: command 0x0c1a tx timeout
[  432.084105][T12360] Bluetooth: hci6: command 0x0c1a tx timeout
[  432.242778][T13377] mkiss: ax0: crc mode is auto.
[  432.254184][T12360] Bluetooth: hci7: command 0x0c1a tx timeout
[  433.360149][T13402] device-mapper: ioctl: device name cannot be "control", ".", or ".."
[  433.629495][T13408] FAULT_INJECTION: forcing a failure.
[  433.629495][T13408] name failslab, interval 1, probability 0, space 0, times 0
[  433.653205][T13408] CPU: 0 UID: 0 PID: 13408 Comm: syz.7.1540 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  433.653251][T13408] Tainted: [L]=SOFTLOCKUP
[  433.653260][T13408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  433.653276][T13408] Call Trace:
[  433.653285][T13408]  <TASK>
[  433.653295][T13408]  dump_stack_lvl+0x16c/0x1f0
[  433.653340][T13408]  should_fail_ex+0x512/0x640
[  433.653365][T13408]  ? __kmalloc_noprof+0xca/0x910
[  433.653394][T13408]  should_failslab+0xc2/0x120
[  433.653427][T13408]  __kmalloc_noprof+0xeb/0x910
[  433.653448][T13408]  ? lsm_blob_alloc+0x68/0x90
[  433.653486][T13408]  ? lsm_blob_alloc+0x68/0x90
[  433.653529][T13408]  lsm_blob_alloc+0x68/0x90
[  433.653567][T13408]  security_sk_alloc+0x2f/0x270
[  433.653597][T13408]  sk_prot_alloc+0xfb/0x2a0
[  433.653639][T13408]  sk_alloc+0x36/0xe30
[  433.653670][T13408]  inet6_create+0x381/0x12b0
[  433.653709][T13408]  ? inet6_create+0x7f/0x12b0
[  433.653747][T13408]  __sock_create+0x339/0x8a0
[  433.653777][T13408]  smc_create_clcsk+0x37/0xd0
[  433.653810][T13408]  ? __pfx_smc_inet_init_sock+0x10/0x10
[  433.653836][T13408]  inet6_create+0xb30/0x12b0
[  433.653870][T13408]  ? inet6_create+0x7f/0x12b0
[  433.653911][T13408]  __sock_create+0x339/0x8a0
[  433.653940][T13408]  __sys_socket+0x14d/0x260
[  433.653966][T13408]  ? __pfx___sys_socket+0x10/0x10
[  433.653992][T13408]  ? __pfx_do_writev+0x10/0x10
[  433.654026][T13408]  __x64_sys_socket+0x72/0xb0
[  433.654048][T13408]  ? lockdep_hardirqs_on+0x7c/0x110
[  433.654082][T13408]  do_syscall_64+0xcd/0xf80
[  433.654106][T13408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.654131][T13408] RIP: 0033:0x7f2d2f98f7c9
[  433.654152][T13408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  433.654176][T13408] RSP: 002b:00007f2d3085e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  433.654198][T13408] RAX: ffffffffffffffda RBX: 00007f2d2fbe5fa0 RCX: 00007f2d2f98f7c9
[  433.654214][T13408] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a
[  433.654229][T13408] RBP: 00007f2d2fa13f91 R08: 0000000000000000 R09: 0000000000000000
[  433.654247][T13408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  433.654262][T13408] R13: 00007f2d2fbe6038 R14: 00007f2d2fbe5fa0 R15: 00007ffd63444d08
[  433.654294][T13408]  </TASK>
[  433.793614][T13411] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  433.968173][T12360] Bluetooth: hci4: command 0x0c1a tx timeout
[  434.083449][T12360] Bluetooth: hci5: command 0x0c1a tx timeout
[  434.109962][T13411] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  434.128789][T13411] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  434.153395][T13411] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  434.173987][T12360] Bluetooth: hci6: command 0x0c1a tx timeout
[  434.324283][T12360] Bluetooth: hci7: command 0x0c1a tx timeout
[  434.331485][T13418] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  434.356176][T13418] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  434.371709][T13418] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  434.499988][T13418] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  434.584189][T13426] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  434.622708][T13426] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  434.655518][T13428] FAULT_INJECTION: forcing a failure.
[  434.655518][T13428] name failslab, interval 1, probability 0, space 0, times 0
[  434.668761][T13426] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  434.709277][T13426] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  434.723174][T13428] CPU: 1 UID: 0 PID: 13428 Comm: syz.6.1542 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  434.723216][T13428] Tainted: [L]=SOFTLOCKUP
[  434.723225][T13428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  434.723246][T13428] Call Trace:
[  434.723254][T13428]  <TASK>
[  434.723264][T13428]  dump_stack_lvl+0x16c/0x1f0
[  434.723306][T13428]  should_fail_ex+0x512/0x640
[  434.723330][T13428]  ? __kmalloc_cache_noprof+0x5f/0x800
[  434.723361][T13428]  should_failslab+0xc2/0x120
[  434.723396][T13428]  __kmalloc_cache_noprof+0x80/0x800
[  434.723423][T13428]  ? do_mq_timedreceive+0x9ce/0xca0
[  434.723452][T13428]  ? do_mq_timedreceive+0x9ce/0xca0
[  434.723475][T13428]  do_mq_timedreceive+0x9ce/0xca0
[  434.723503][T13428]  ? __pfx_do_mq_timedreceive+0x10/0x10
[  434.723523][T13428]  ? __mutex_unlock_slowpath+0x161/0x790
[  434.723546][T13428]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  434.723569][T13428]  ? __fget_files+0x20e/0x3c0
[  434.723605][T13428]  __x64_sys_mq_timedreceive+0x1cd/0x260
[  434.723630][T13428]  ? ksys_write+0x1ac/0x250
[  434.723661][T13428]  ? __pfx___x64_sys_mq_timedreceive+0x10/0x10
[  434.723694][T13428]  do_syscall_64+0xcd/0xf80
[  434.723718][T13428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.723742][T13428] RIP: 0033:0x7f8e2d18f7c9
[  434.723762][T13428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  434.723786][T13428] RSP: 002b:00007f8e2e10d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3
[  434.723810][T13428] RAX: ffffffffffffffda RBX: 00007f8e2d3e5fa0 RCX: 00007f8e2d18f7c9
[  434.723827][T13428] RDX: 0000000000004dcd RSI: 0000000000000000 RDI: 0000000000000003
[  434.723840][T13428] RBP: 00007f8e2e10d090 R08: 0000000000000000 R09: 0000000000000000
[  434.723855][T13428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.723869][T13428] R13: 00007f8e2d3e6038 R14: 00007f8e2d3e5fa0 R15: 00007ffe255b63f8
[  434.723899][T13428]  </TASK>
[  436.002385][T12360] Bluetooth: hci4: command 0x0c1a tx timeout
[  436.162281][T12360] Bluetooth: hci5: command 0x0c1a tx timeout
[  436.242849][T12360] Bluetooth: hci6: command 0x0c1a tx timeout
[  436.422936][T12360] Bluetooth: hci7: command 0x0c1a tx timeout
[  437.811509][T13473] FAULT_INJECTION: forcing a failure.
[  437.811509][T13473] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  437.825594][T13473] CPU: 1 UID: 0 PID: 13473 Comm: syz.7.1555 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  437.825634][T13473] Tainted: [L]=SOFTLOCKUP
[  437.825642][T13473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  437.825657][T13473] Call Trace:
[  437.825665][T13473]  <TASK>
[  437.825675][T13473]  dump_stack_lvl+0x16c/0x1f0
[  437.825718][T13473]  should_fail_ex+0x512/0x640
[  437.825755][T13473]  _copy_from_user+0x2e/0xd0
[  437.825785][T13473]  core_sys_select+0x35b/0xc20
[  437.825828][T13473]  ? __pfx_core_sys_select+0x10/0x10
[  437.825868][T13473]  ? proc_fail_nth_write+0x9f/0x220
[  437.825922][T13473]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  437.825956][T13473]  kern_select+0x15d/0x1e0
[  437.825990][T13473]  ? __pfx_kern_select+0x10/0x10
[  437.826029][T13473]  ? __pfx_ksys_write+0x10/0x10
[  437.826069][T13473]  __x64_sys_select+0xbd/0x160
[  437.826101][T13473]  ? do_syscall_64+0x91/0xf80
[  437.826124][T13473]  ? lockdep_hardirqs_on+0x7c/0x110
[  437.826161][T13473]  do_syscall_64+0xcd/0xf80
[  437.826186][T13473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.826214][T13473] RIP: 0033:0x7f2d2f98f7c9
[  437.826228][T13473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  437.826242][T13473] RSP: 002b:00007f2d3081c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  437.826256][T13473] RAX: ffffffffffffffda RBX: 00007f2d2fbe6180 RCX: 00007f2d2f98f7c9
[  437.826265][T13473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  437.826274][T13473] RBP: 00007f2d3081c090 R08: 0000000000000000 R09: 0000000000000000
[  437.826283][T13473] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  437.826291][T13473] R13: 00007f2d2fbe6218 R14: 00007f2d2fbe6180 R15: 00007ffd63444d08
[  437.826310][T13473]  </TASK>
[  438.360323][T13476] nvme_fcloop: unknown parameter or missing value '7'
[  438.661014][T13479] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1557'.
[  439.288897][   T49] Process accounting resumed
[  439.303610][T13432] Process accounting resumed
[  439.313615][T13432] Process accounting resumed
[  439.332465][T13432] Process accounting resumed
[  439.343207][T13432] Process accounting resumed
[  439.352216][T13432] Process accounting resumed
[  439.429148][T13432] Process accounting resumed
[  439.439502][T13432] Process accounting resumed
[  439.490366][T13432] Process accounting resumed
[  439.496415][T13432] Process accounting resumed
[  439.504026][T13432] Process accounting resumed
[  439.532233][ T5838] Process accounting resumed
[  439.548765][ T5838] Process accounting resumed
[  439.585522][ T5944] Process accounting resumed
[  439.603432][ T5944] Process accounting resumed
[  439.613127][ T5944] Process accounting resumed
[  439.628529][ T5944] Process accounting resumed
[  439.649622][ T5944] Process accounting resumed
[  439.705514][ T5944] Process accounting resumed
[  439.729127][   T49] Process accounting resumed
[  439.763299][   T49] Process accounting resumed
[  439.816539][   T49] Process accounting resumed
[  439.950601][ T5838] Process accounting resumed
[  439.972661][ T5838] Process accounting resumed
[  440.015158][ T5838] Process accounting resumed
[  440.039677][ T5838] Process accounting resumed
[  440.175468][T13493] Process accounting resumed
[  440.267800][T13508] FAULT_INJECTION: forcing a failure.
[  440.267800][T13508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  440.317405][T13508] CPU: 1 UID: 0 PID: 13508 Comm: syz.6.1562 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  440.317452][T13508] Tainted: [L]=SOFTLOCKUP
[  440.317460][T13508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  440.317484][T13508] Call Trace:
[  440.317492][T13508]  <TASK>
[  440.317502][T13508]  dump_stack_lvl+0x16c/0x1f0
[  440.317555][T13508]  should_fail_ex+0x512/0x640
[  440.317588][T13508]  _copy_to_user+0x32/0xd0
[  440.317615][T13508]  simple_read_from_buffer+0xcb/0x170
[  440.317651][T13508]  proc_fail_nth_read+0x197/0x240
[  440.317691][T13508]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  440.317729][T13508]  ? rw_verify_area+0xcf/0x6c0
[  440.317756][T13508]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  440.317794][T13508]  vfs_read+0x1e4/0xcf0
[  440.317828][T13508]  ? __pfx___mutex_lock+0x10/0x10
[  440.317856][T13508]  ? __pfx_vfs_read+0x10/0x10
[  440.317899][T13508]  ? __fget_files+0x20e/0x3c0
[  440.317943][T13508]  ksys_read+0x12a/0x250
[  440.317983][T13508]  ? __pfx_ksys_read+0x10/0x10
[  440.318023][T13508]  do_syscall_64+0xcd/0xf80
[  440.318047][T13508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.318073][T13508] RIP: 0033:0x7f8e2d18e1dc
[  440.318101][T13508] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  440.318125][T13508] RSP: 002b:00007f8e2e10d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  440.318146][T13508] RAX: ffffffffffffffda RBX: 00007f8e2d3e5fa0 RCX: 00007f8e2d18e1dc
[  440.318162][T13508] RDX: 000000000000000f RSI: 00007f8e2e10d0a0 RDI: 0000000000000004
[  440.318177][T13508] RBP: 00007f8e2e10d090 R08: 0000000000000000 R09: 0000000000000000
[  440.318193][T13508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.318207][T13508] R13: 00007f8e2d3e6038 R14: 00007f8e2d3e5fa0 R15: 00007ffe255b63f8
[  440.318244][T13508]  </TASK>
[  440.521612][T13510] FAULT_INJECTION: forcing a failure.
[  440.521612][T13510] name failslab, interval 1, probability 0, space 0, times 0
[  440.534812][T13510] CPU: 1 UID: 0 PID: 13510 Comm: syz.7.1563 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  440.534858][T13510] Tainted: [L]=SOFTLOCKUP
[  440.534868][T13510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  440.534885][T13510] Call Trace:
[  440.534895][T13510]  <TASK>
[  440.534906][T13510]  dump_stack_lvl+0x16c/0x1f0
[  440.534953][T13510]  should_fail_ex+0x512/0x640
[  440.534983][T13510]  ? fs_reclaim_acquire+0xae/0x150
[  440.535036][T13510]  should_failslab+0xc2/0x120
[  440.535076][T13510]  kmem_cache_alloc_noprof+0x83/0x770
[  440.535106][T13510]  ? __pfx_map_id_range_down+0x10/0x10
[  440.535143][T13510]  ? security_inode_alloc+0x3b/0x2b0
[  440.535180][T13510]  ? security_inode_alloc+0x3b/0x2b0
[  440.535206][T13510]  security_inode_alloc+0x3b/0x2b0
[  440.535238][T13510]  inode_init_always_gfp+0xced/0x1040
[  440.535282][T13510]  alloc_inode+0x86/0x240
[  440.535313][T13510]  new_inode+0x22/0x1c0
[  440.535346][T13510]  shmem_get_inode+0x19a/0xfb0
[  440.535386][T13510]  ? __vm_enough_memory+0x184/0x3f0
[  440.535425][T13510]  __shmem_file_setup+0x290/0x350
[  440.535468][T13510]  shmem_zero_setup+0x93/0x1b0
[  440.535502][T13510]  __mmap_region+0x2271/0x2a00
[  440.535539][T13510]  ? __pfx___mmap_region+0x10/0x10
[  440.535579][T13510]  ? kvm_sched_clock_read+0x11/0x20
[  440.535616][T13510]  ? sched_clock+0x38/0x60
[  440.535667][T13510]  ? rcu_is_watching+0x12/0xc0
[  440.535769][T13510]  ? rcu_is_watching+0x12/0xc0
[  440.535814][T13510]  mmap_region+0x1ab/0x3f0
[  440.535845][T13510]  ? __get_unmapped_area+0x267/0x3f0
[  440.535886][T13510]  do_mmap+0xa3e/0x1210
[  440.535929][T13510]  ? __pfx_do_mmap+0x10/0x10
[  440.535967][T13510]  ? __pfx_down_write_killable+0x10/0x10
[  440.536011][T13510]  vm_mmap_pgoff+0x29e/0x470
[  440.536054][T13510]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  440.536101][T13510]  ? __x64_sys_futex+0x1e0/0x4c0
[  440.536131][T13510]  ? __x64_sys_futex+0x1e9/0x4c0
[  440.536172][T13510]  ksys_mmap_pgoff+0x7d/0x5c0
[  440.536207][T13510]  ? xfd_validate_state+0x61/0x180
[  440.536231][T13510]  ? __pfx_do_writev+0x10/0x10
[  440.536269][T13510]  __x64_sys_mmap+0x125/0x190
[  440.536301][T13510]  do_syscall_64+0xcd/0xf80
[  440.536328][T13510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.536355][T13510] RIP: 0033:0x7f2d2f98f7c9
[  440.536378][T13510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  440.536405][T13510] RSP: 002b:00007f2d3085e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  440.536431][T13510] RAX: ffffffffffffffda RBX: 00007f2d2fbe5fa0 RCX: 00007f2d2f98f7c9
[  440.536451][T13510] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000
[  440.536468][T13510] RBP: 00007f2d2fa13f91 R08: fffffffffffffffa R09: 0000000000008000
[  440.536486][T13510] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  440.536504][T13510] R13: 00007f2d2fbe6038 R14: 00007f2d2fbe5fa0 R15: 00007ffd63444d08
[  440.536542][T13510]  </TASK>
[  441.431029][T13526] FAULT_INJECTION: forcing a failure.
[  441.431029][T13526] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  441.447103][T13526] CPU: 1 UID: 0 PID: 13526 Comm: syz.7.1566 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  441.447144][T13526] Tainted: [L]=SOFTLOCKUP
[  441.447153][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  441.447167][T13526] Call Trace:
[  441.447176][T13526]  <TASK>
[  441.447186][T13526]  dump_stack_lvl+0x16c/0x1f0
[  441.447228][T13526]  should_fail_ex+0x512/0x640
[  441.447261][T13526]  should_fail_alloc_page+0xe7/0x130
[  441.447301][T13526]  prepare_alloc_pages+0x401/0x670
[  441.447344][T13526]  __alloc_frozen_pages_noprof+0x18b/0x2430
[  441.447376][T13526]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  441.447414][T13526]  ? is_bpf_text_address+0x94/0x1a0
[  441.447447][T13526]  ? kernel_text_address+0x8d/0x100
[  441.447475][T13526]  ? __kernel_text_address+0xd/0x40
[  441.447502][T13526]  ? unwind_get_return_address+0x59/0xa0
[  441.447539][T13526]  ? __lock_acquire+0x436/0x2890
[  441.447563][T13526]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  441.447597][T13526]  ? __lock_acquire+0x436/0x2890
[  441.447629][T13526]  ? __lock_acquire+0x436/0x2890
[  441.447664][T13526]  ? __lock_acquire+0x436/0x2890
[  441.447686][T13526]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  441.447725][T13526]  ? policy_nodemask+0xea/0x4e0
[  441.447764][T13526]  alloc_pages_mpol+0x1fb/0x550
[  441.447802][T13526]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  441.447838][T13526]  ? find_held_lock+0x2b/0x80
[  441.447874][T13526]  ? __pfx___pollwait+0x10/0x10
[  441.447904][T13526]  alloc_pages_noprof+0x131/0x390
[  441.447941][T13526]  get_free_pages_noprof+0x10/0xb0
[  441.447975][T13526]  __pollwait+0x295/0x460
[  441.448013][T13526]  ? __pfx___pollwait+0x10/0x10
[  441.448043][T13526]  unix_dgram_poll+0x82/0x780
[  441.448074][T13526]  ? __pfx_unix_dgram_poll+0x10/0x10
[  441.448100][T13526]  sock_poll+0x160/0x510
[  441.448140][T13526]  ? __pfx_sock_poll+0x10/0x10
[  441.448176][T13526]  do_select+0xd3d/0x17e0
[  441.448234][T13526]  ? __pfx_do_select+0x10/0x10
[  441.448270][T13526]  ? __pfx___pollwait+0x10/0x10
[  441.448306][T13526]  ? __pfx_pollwake+0x10/0x10
[  441.448341][T13526]  ? __pfx_pollwake+0x10/0x10
[  441.448376][T13526]  ? __pfx_pollwake+0x10/0x10
[  441.448410][T13526]  ? __pfx_pollwake+0x10/0x10
[  441.448445][T13526]  ? __pfx_pollwake+0x10/0x10
[  441.448479][T13526]  ? __pfx_pollwake+0x10/0x10
[  441.448514][T13526]  ? __pfx_pollwake+0x10/0x10
[  441.448548][T13526]  ? __pfx_pollwake+0x10/0x10
[  441.448583][T13526]  ? __pfx_pollwake+0x10/0x10
[  441.448616][T13526]  ? find_held_lock+0x2b/0x80
[  441.448653][T13526]  ? __might_fault+0xe3/0x190
[  441.448681][T13526]  ? __might_fault+0xe3/0x190
[  441.448707][T13526]  ? __might_fault+0x13b/0x190
[  441.448747][T13526]  ? core_sys_select+0x453/0xc20
[  441.448778][T13526]  core_sys_select+0x453/0xc20
[  441.448819][T13526]  ? __pfx_core_sys_select+0x10/0x10
[  441.448860][T13526]  ? proc_fail_nth_write+0x9f/0x220
[  441.448912][T13526]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  441.448947][T13526]  kern_select+0x15d/0x1e0
[  441.448980][T13526]  ? __pfx_kern_select+0x10/0x10
[  441.449019][T13526]  ? __pfx_ksys_write+0x10/0x10
[  441.449059][T13526]  __x64_sys_select+0xbd/0x160
[  441.449092][T13526]  ? do_syscall_64+0x91/0xf80
[  441.449114][T13526]  ? lockdep_hardirqs_on+0x7c/0x110
[  441.449150][T13526]  do_syscall_64+0xcd/0xf80
[  441.449175][T13526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.449199][T13526] RIP: 0033:0x7f2d2f98f7c9
[  441.449217][T13526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  441.449239][T13526] RSP: 002b:00007f2d3081c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  441.449262][T13526] RAX: ffffffffffffffda RBX: 00007f2d2fbe6180 RCX: 00007f2d2f98f7c9
[  441.449277][T13526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  441.449292][T13526] RBP: 00007f2d3081c090 R08: 0000000000000000 R09: 0000000000000000
[  441.449307][T13526] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  441.449322][T13526] R13: 00007f2d2fbe6218 R14: 00007f2d2fbe6180 R15: 00007ffd63444d08
[  441.449356][T13526]  </TASK>
[  443.494101][T13557] binder: BINDER_SET_CONTEXT_MGR already set
[  443.518886][T13557] binder: 13556:13557 ioctl 4018620d 9 returned -16
[  443.650668][T13557] debugfs: '!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211'
[  445.280798][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  445.287128][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  446.445838][T13617] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  447.035409][T13629] netlink: 'syz.7.1588': attribute type 11 has an invalid length.
[  447.043952][T13629] netlink: 'syz.7.1588': attribute type 11 has an invalid length.
[  447.491505][T13372] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  447.507411][T13372] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  447.520375][T13372] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  447.535780][T13372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  447.547768][T13372] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  448.197997][T13641] chnl_net:caif_netlink_parms(): no params data found
[  448.490029][T13641] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.524032][T13641] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.557946][T13641] bridge_slave_0: entered allmulticast mode
[  448.589072][T13641] bridge_slave_0: entered promiscuous mode
[  448.626838][T13641] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.646674][T13641] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.671191][T13641] bridge_slave_1: entered allmulticast mode
[  448.687037][T13641] bridge_slave_1: entered promiscuous mode
[  448.747573][T13641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.777045][T13641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.889205][T13641] team0: Port device team_slave_0 added
[  448.922131][T13666] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  448.942238][T13641] team0: Port device team_slave_1 added
[  448.974299][T13666] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  448.997565][T13666] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  449.068791][T13666] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  449.082361][T13641] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.094800][T13641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.213981][T13641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.276276][T13641] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.299000][T13641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.395435][T13641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.566358][T13679] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  449.582305][T13679] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  449.596268][T13679] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  449.625134][T13679] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  449.675328][T13372] Bluetooth: hci0: command tx timeout
[  449.696012][T13641] hsr_slave_0: entered promiscuous mode
[  449.761223][T13641] hsr_slave_1: entered promiscuous mode
[  449.805433][T13641] debugfs: 'hsr0' already exists in 'hsr'
[  449.807349][T13683] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  449.850048][T13641] Cannot create hsr debugfs directory
[  449.865954][T13683] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  449.924425][T13683] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  450.038949][T13683] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  450.146134][T13690] Device name cannot be null; rc = [-22]
[  450.165800][T13685] zswap: compressor  not available
[  450.170463][T13689] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  450.228535][T13689] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  450.315637][T13689] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  450.404809][T13689] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  451.012364][T13699] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  451.053439][T13699] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  451.094894][T13699] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  451.140028][T13641] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  451.164624][T13699] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  451.234932][T13641] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  451.266387][T13641] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  451.291406][T13641] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  451.509624][T13641] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.548898][T13641] 8021q: adding VLAN 0 to HW filter on device team0
[  451.572387][T12501] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.579709][T12501] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.633372][T12501] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.640599][T12501] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.755347][T13372] Bluetooth: hci0: command tx timeout
[  451.775822][T13712] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  451.799146][T13712] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  451.815071][T13712] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  451.825351][T13712] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  451.832003][T13712] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  451.864877][T13712] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  451.885988][T13712] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  451.903061][T13712] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  451.914709][T13712] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  451.924520][T13712] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  451.981320][T13641] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.458772][T13641] veth0_vlan: entered promiscuous mode
[  452.496767][T13641] veth1_vlan: entered promiscuous mode
[  452.591541][T13641] veth0_macvtap: entered promiscuous mode
[  452.617992][T13641] veth1_macvtap: entered promiscuous mode
[  452.707662][T13641] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.780052][T13641] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.798501][T12534] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.815885][T12534] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.826596][T12534] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.854394][T12534] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.875035][T13738] __vm_enough_memory: pid: 13738, comm: syz.6.1606, bytes: 4398046511104 not enough memory for the allocation
[  452.909213][T13738] FAULT_INJECTION: forcing a failure.
[  452.909213][T13738] name failslab, interval 1, probability 0, space 0, times 0
[  452.926244][T13738] CPU: 1 UID: 0 PID: 13738 Comm: syz.6.1606 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  452.926287][T13738] Tainted: [L]=SOFTLOCKUP
[  452.926297][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  452.926313][T13738] Call Trace:
[  452.926321][T13738]  <TASK>
[  452.926331][T13738]  dump_stack_lvl+0x16c/0x1f0
[  452.926378][T13738]  should_fail_ex+0x512/0x640
[  452.926407][T13738]  ? fs_reclaim_acquire+0xae/0x150
[  452.926449][T13738]  should_failslab+0xc2/0x120
[  452.926488][T13738]  kmem_cache_alloc_noprof+0x83/0x770
[  452.926517][T13738]  ? __pfx_map_id_range_down+0x10/0x10
[  452.926552][T13738]  ? security_inode_alloc+0x3b/0x2b0
[  452.926584][T13738]  ? security_inode_alloc+0x3b/0x2b0
[  452.926610][T13738]  security_inode_alloc+0x3b/0x2b0
[  452.926639][T13738]  inode_init_always_gfp+0xced/0x1040
[  452.926680][T13738]  alloc_inode+0x86/0x240
[  452.926717][T13738]  new_inode+0x22/0x1c0
[  452.926750][T13738]  nfsd_fill_super+0x13d/0x5a0
[  452.926780][T13738]  ? __pfx_nfsd_fill_super+0x10/0x10
[  452.926806][T13738]  get_tree_keyed+0x10e/0x1d0
[  452.926844][T13738]  vfs_get_tree+0x8e/0x330
[  452.926874][T13738]  path_mount+0x7bf/0x23a0
[  452.926899][T13738]  ? rcu_is_watching+0x12/0xc0
[  452.926938][T13738]  ? __pfx_path_mount+0x10/0x10
[  452.926964][T13738]  ? kmem_cache_free+0x2d8/0x770
[  452.926992][T13738]  ? putname+0xf5/0x1a0
[  452.927014][T13738]  ? putname+0xf5/0x1a0
[  452.927031][T13738]  ? putname+0xf5/0x1a0
[  452.927050][T13738]  ? __x64_sys_mount+0x293/0x310
[  452.927070][T13738]  __x64_sys_mount+0x293/0x310
[  452.927096][T13738]  ? __pfx___x64_sys_mount+0x10/0x10
[  452.927129][T13738]  do_syscall_64+0xcd/0xf80
[  452.927156][T13738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.927184][T13738] RIP: 0033:0x7f8e2d18f7c9
[  452.927204][T13738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  452.927227][T13738] RSP: 002b:00007f8e2e10d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  452.927251][T13738] RAX: ffffffffffffffda RBX: 00007f8e2d3e5fa0 RCX: 00007f8e2d18f7c9
[  452.927269][T13738] RDX: 0000200000000580 RSI: 00002000000000c0 RDI: 0000000000000000
[  452.927283][T13738] RBP: 00007f8e2d213f91 R08: 0000000000000000 R09: 0000000000000000
[  452.927298][T13738] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[  452.927313][T13738] R13: 00007f8e2d3e6038 R14: 00007f8e2d3e5fa0 R15: 00007ffe255b63f8
[  452.927349][T13738]  </TASK>
[  453.337301][T12847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.359486][T12847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.411496][T12501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.423266][T12501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.584039][T13749] netlink: 'syz.8.1591': attribute type 1 has an invalid length.
[  453.834968][T11968] Bluetooth: hci3: command 0x0c1a tx timeout
[  453.841639][T11968] Bluetooth: hci2: command 0x0c1a tx timeout
[  453.848042][T13754] Bluetooth: hci1: command 0x0c1a tx timeout
[  453.860679][T12360] Bluetooth: hci4: command 0x0c1a tx timeout
[  453.870948][T13372] Bluetooth: hci5: command 0x0c1a tx timeout
[  453.923847][T13754] Bluetooth: hci6: command 0x0c1a tx timeout
[  453.932154][T13372] Bluetooth: hci0: command 0x0419 tx timeout
[  453.938281][T12360] Bluetooth: hci7: command 0x0c1a tx timeout
[  454.095687][T13761] FAULT_INJECTION: forcing a failure.
[  454.095687][T13761] name failslab, interval 1, probability 0, space 0, times 0
[  454.120735][T13761] CPU: 0 UID: 0 PID: 13761 Comm: syz.8.1610 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  454.120773][T13761] Tainted: [L]=SOFTLOCKUP
[  454.120779][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  454.120788][T13761] Call Trace:
[  454.120794][T13761]  <TASK>
[  454.120800][T13761]  dump_stack_lvl+0x16c/0x1f0
[  454.120829][T13761]  should_fail_ex+0x512/0x640
[  454.120846][T13761]  ? kmem_cache_alloc_noprof+0x62/0x770
[  454.120875][T13761]  should_failslab+0xc2/0x120
[  454.120899][T13761]  kmem_cache_alloc_noprof+0x83/0x770
[  454.120918][T13761]  ? __kernfs_new_node+0xd2/0x9b0
[  454.120939][T13761]  ? __kernfs_new_node+0xd2/0x9b0
[  454.120955][T13761]  __kernfs_new_node+0xd2/0x9b0
[  454.120974][T13761]  ? __pfx___kernfs_new_node+0x10/0x10
[  454.120997][T13761]  ? find_held_lock+0x2b/0x80
[  454.121017][T13761]  ? kernfs_root+0xee/0x2a0
[  454.121038][T13761]  kernfs_new_node+0x13c/0x1e0
[  454.121061][T13761]  __kernfs_create_file+0x53/0x350
[  454.121087][T13761]  sysfs_add_file_mode_ns+0x207/0x3c0
[  454.121108][T13761]  sysfs_merge_group+0x1aa/0x340
[  454.121127][T13761]  ? __pfx_sysfs_merge_group+0x10/0x10
[  454.121148][T13761]  ? __pfx_dev_add_physical_location+0x10/0x10
[  454.121170][T13761]  ? bus_to_subsys+0x131/0x160
[  454.121185][T13761]  dpm_sysfs_add+0x237/0x280
[  454.121206][T13761]  device_add+0x9cc/0x1980
[  454.121230][T13761]  ? __pfx_device_add+0x10/0x10
[  454.121258][T13761]  nfc_register_device+0x41/0x410
[  454.121283][T13761]  nci_register_device+0x7f1/0xb80
[  454.121303][T13761]  ? __pfx_nci_register_device+0x10/0x10
[  454.121324][T13761]  ? lockdep_init_map_type+0x5c/0x270
[  454.121346][T13761]  virtual_ncidev_open+0x141/0x220
[  454.121361][T13761]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  454.121376][T13761]  misc_open+0x26d/0x450
[  454.121394][T13761]  ? __pfx_misc_open+0x10/0x10
[  454.121411][T13761]  chrdev_open+0x234/0x6a0
[  454.121435][T13761]  ? __pfx_apparmor_file_open+0x10/0x10
[  454.121451][T13761]  ? __pfx_chrdev_open+0x10/0x10
[  454.121474][T13761]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  454.121501][T13761]  do_dentry_open+0x748/0x1590
[  454.121522][T13761]  ? __pfx_chrdev_open+0x10/0x10
[  454.121550][T13761]  vfs_open+0x82/0x3f0
[  454.121568][T13761]  path_openat+0x2078/0x3140
[  454.121597][T13761]  ? __pfx_path_openat+0x10/0x10
[  454.121655][T13761]  do_filp_open+0x20b/0x470
[  454.121690][T13761]  ? __pfx_do_filp_open+0x10/0x10
[  454.121749][T13761]  ? alloc_fd+0x471/0x7d0
[  454.121796][T13761]  do_sys_openat2+0x121/0x290
[  454.121824][T13761]  ? __pfx_do_sys_openat2+0x10/0x10
[  454.121863][T13761]  ? find_held_lock+0x2b/0x80
[  454.121902][T13761]  __x64_sys_openat+0x174/0x210
[  454.121928][T13761]  ? __pfx___x64_sys_openat+0x10/0x10
[  454.121972][T13761]  do_syscall_64+0xcd/0xf80
[  454.121998][T13761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.122023][T13761] RIP: 0033:0x7ff76578f7c9
[  454.122043][T13761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  454.122067][T13761] RSP: 002b:00007ff76663b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  454.122093][T13761] RAX: ffffffffffffffda RBX: 00007ff7659e5fa0 RCX: 00007ff76578f7c9
[  454.122110][T13761] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  454.122127][T13761] RBP: 00007ff765813f91 R08: 0000000000000000 R09: 0000000000000000
[  454.122143][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  454.122160][T13761] R13: 00007ff7659e6038 R14: 00007ff7659e5fa0 R15: 00007fff09816ed8
[  454.122199][T13761]  </TASK>
[  454.133273][T13765] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n]	ò|
[  454.133273][T13765] MÅ' is too long
[  454.669410][T13765] scsi_strcpy_devinfo: model string '’Dd5‚ÕK€2bÛ
[  454.669410][T13765] ††½W�Ïõ›ú «ú' is too long
[  455.992365][T12360] Bluetooth: hci0: command 0x0419 tx timeout
[  457.747095][T13814] netlink: 'syz.8.1622': attribute type 21 has an invalid length.
[  457.771195][T13814] netlink: 334 bytes leftover after parsing attributes in process `syz.8.1622'.
[  457.906773][T13814] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1622'.
[  457.945722][T13814] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.955272][T13814] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.965582][T13814] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.993638][T13814] batman_adv: batadv0: Removing interface: batadv_slave_1
[  458.076741][T12360] Bluetooth: hci0: command 0x0419 tx timeout
[  458.599319][T13821] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1625'.
[  460.150548][T12360] Bluetooth: hci0: command 0x0419 tx timeout
[  460.300710][T13863] vivid-007: =================  START STATUS  =================
[  460.308401][T13863] vivid-007: Generate PTS: true
[  460.340299][T13863] vivid-007: Generate SCR: true
[  460.345236][T13863] tpg source WxH: 320x240 (Y'CbCr)
[  460.490603][T13867] netlink: 'syz.5.1637': attribute type 11 has an invalid length.
[  460.506608][T13867] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1637'.
[  460.522896][T13863] tpg field: 1
[  460.530739][T13863] tpg crop: (0,0)/320x240
[  460.535120][T13863] tpg compose: (0,0)/320x240
[  460.586672][T13863] tpg colorspace: 8
[  460.646848][T13863] tpg transfer function: 0/0
[  460.660555][T13863] tpg Y'CbCr encoding: 0/0
[  460.666866][T13863] tpg quantization: 0/0
[  460.678398][T13863] tpg RGB range: 0/2
[  460.688043][T13863] vivid-007: ==================  END STATUS  ==================
[  460.802965][T13877] FAULT_INJECTION: forcing a failure.
[  460.802965][T13877] name failslab, interval 1, probability 0, space 0, times 0
[  460.878969][T13877] CPU: 0 UID: 0 PID: 13877 Comm: syz.8.1638 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  460.879012][T13877] Tainted: [L]=SOFTLOCKUP
[  460.879020][T13877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  460.879034][T13877] Call Trace:
[  460.879043][T13877]  <TASK>
[  460.879053][T13877]  dump_stack_lvl+0x16c/0x1f0
[  460.879096][T13877]  should_fail_ex+0x512/0x640
[  460.879124][T13877]  ? fs_reclaim_acquire+0xae/0x150
[  460.879169][T13877]  should_failslab+0xc2/0x120
[  460.879207][T13877]  __kmalloc_noprof+0xeb/0x910
[  460.879236][T13877]  ? tomoyo_encode2+0x100/0x3e0
[  460.879275][T13877]  ? tomoyo_encode2+0x100/0x3e0
[  460.879307][T13877]  tomoyo_encode2+0x100/0x3e0
[  460.879346][T13877]  tomoyo_encode+0x29/0x50
[  460.879378][T13877]  tomoyo_path_perm+0x3a5/0x460
[  460.879412][T13877]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  460.879455][T13877]  ? find_held_lock+0x2b/0x80
[  460.879495][T13877]  ? do_raw_spin_unlock+0x172/0x230
[  460.879541][T13877]  ? __pfx_current_check_access_path+0x10/0x10
[  460.879576][T13877]  ? simple_lookup+0x105/0x1d0
[  460.879613][T13877]  ? lookup_one_qstr_excl+0xb3/0x250
[  460.879646][T13877]  tomoyo_path_symlink+0x97/0xe0
[  460.879684][T13877]  ? __pfx_tomoyo_path_symlink+0x10/0x10
[  460.879733][T13877]  security_path_symlink+0x152/0x2e0
[  460.879764][T13877]  do_symlinkat+0x126/0x4b0
[  460.879792][T13877]  ? __pfx_do_symlinkat+0x10/0x10
[  460.879822][T13877]  ? getname_flags.part.0+0x1c5/0x550
[  460.879859][T13877]  __x64_sys_symlink+0x75/0x90
[  460.879886][T13877]  do_syscall_64+0xcd/0xf80
[  460.879914][T13877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.879942][T13877] RIP: 0033:0x7ff76578f7c9
[  460.879963][T13877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  460.879989][T13877] RSP: 002b:00007ff76663b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  460.880016][T13877] RAX: ffffffffffffffda RBX: 00007ff7659e5fa0 RCX: 00007ff76578f7c9
[  460.880034][T13877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  460.880050][T13877] RBP: 00007ff765813f91 R08: 0000000000000000 R09: 0000000000000000
[  460.880066][T13877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.880081][T13877] R13: 00007ff7659e6038 R14: 00007ff7659e5fa0 R15: 00007fff09816ed8
[  460.880120][T13877]  </TASK>
[  461.524130][T13881] netlink: 504 bytes leftover after parsing attributes in process `syz.5.1639'.
[  461.856593][T13885] FAULT_INJECTION: forcing a failure.
[  461.856593][T13885] name failslab, interval 1, probability 0, space 0, times 0
[  461.931644][T13885] CPU: 0 UID: 0 PID: 13885 Comm: syz.6.1641 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  461.931689][T13885] Tainted: [L]=SOFTLOCKUP
[  461.931699][T13885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  461.931716][T13885] Call Trace:
[  461.931725][T13885]  <TASK>
[  461.931739][T13885]  dump_stack_lvl+0x16c/0x1f0
[  461.931784][T13885]  should_fail_ex+0x512/0x640
[  461.931816][T13885]  ? kmem_cache_alloc_noprof+0x62/0x770
[  461.931852][T13885]  should_failslab+0xc2/0x120
[  461.931891][T13885]  kmem_cache_alloc_noprof+0x83/0x770
[  461.931922][T13885]  ? __proc_create+0x2c8/0x8d0
[  461.931963][T13885]  ? __proc_create+0x2c8/0x8d0
[  461.931995][T13885]  __proc_create+0x2c8/0x8d0
[  461.932029][T13885]  ? __pfx___proc_create+0x10/0x10
[  461.932078][T13885]  proc_mkdir+0x81/0x170
[  461.932112][T13885]  ? __pfx_proc_mkdir+0x10/0x10
[  461.932147][T13885]  ? cache_register_net+0x137/0x5e0
[  461.932180][T13885]  cache_register_net+0x18f/0x5e0
[  461.932210][T13885]  gss_svc_init_net+0x98/0x660
[  461.932244][T13885]  ? __pfx_canbcm_pernet_init+0x10/0x10
[  461.932280][T13885]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[  461.932319][T13885]  ops_init+0x1e2/0x5f0
[  461.932359][T13885]  setup_net+0x11d/0x3a0
[  461.932395][T13885]  ? __pfx_setup_net+0x10/0x10
[  461.932428][T13885]  ? lockdep_init_map_type+0x5c/0x270
[  461.932457][T13885]  ? mutex_init_lockep+0x110/0x150
[  461.932490][T13885]  copy_net_ns+0x351/0x7c0
[  461.932532][T13885]  create_new_namespaces+0x3ea/0xab0
[  461.932576][T13885]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  461.932614][T13885]  ksys_unshare+0x45b/0xa40
[  461.932655][T13885]  ? __pfx_ksys_unshare+0x10/0x10
[  461.932695][T13885]  ? xfd_validate_state+0x61/0x180
[  461.932730][T13885]  __x64_sys_unshare+0x31/0x40
[  461.932754][T13885]  do_syscall_64+0xcd/0xf80
[  461.932781][T13885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.932808][T13885] RIP: 0033:0x7f8e2d18f7c9
[  461.932829][T13885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  461.932855][T13885] RSP: 002b:00007f8e2e10d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  461.932880][T13885] RAX: ffffffffffffffda RBX: 00007f8e2d3e5fa0 RCX: 00007f8e2d18f7c9
[  461.932898][T13885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  461.932914][T13885] RBP: 00007f8e2d213f91 R08: 0000000000000000 R09: 0000000000000000
[  461.932930][T13885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  461.932946][T13885] R13: 00007f8e2d3e6038 R14: 00007f8e2d3e5fa0 R15: 00007ffe255b63f8
[  461.932984][T13885]  </TASK>
[  462.741931][T13894] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1643'.
[  463.140283][T13900] zswap: compressor  not available
[  464.495347][T13754] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  464.505731][T13754] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  464.517345][T13754] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  464.526974][T13754] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  464.536244][T13754] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  464.548395][T13929] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  464.638808][T13932] FAULT_INJECTION: forcing a failure.
[  464.638808][T13932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  464.727932][T13932] CPU: 1 UID: 0 PID: 13932 Comm: syz.6.1651 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  464.727973][T13932] Tainted: [L]=SOFTLOCKUP
[  464.727981][T13932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  464.727996][T13932] Call Trace:
[  464.728004][T13932]  <TASK>
[  464.728014][T13932]  dump_stack_lvl+0x16c/0x1f0
[  464.728063][T13932]  should_fail_ex+0x512/0x640
[  464.728098][T13932]  _copy_from_user+0x2e/0xd0
[  464.728127][T13932]  __sys_bpf+0x248/0x4980
[  464.728151][T13932]  ? futex_private_hash_put+0x160/0x1b0
[  464.728182][T13932]  ? __pfx___sys_bpf+0x10/0x10
[  464.728205][T13932]  ? __pfx_futex_wait+0x10/0x10
[  464.728256][T13932]  ? do_futex+0x122/0x350
[  464.728301][T13932]  ? fput+0x70/0xf0
[  464.728327][T13932]  ? xfd_validate_state+0x61/0x180
[  464.728350][T13932]  ? __pfx_ksys_write+0x10/0x10
[  464.728390][T13932]  __x64_sys_bpf+0x78/0xc0
[  464.728414][T13932]  ? lockdep_hardirqs_on+0x7c/0x110
[  464.728451][T13932]  do_syscall_64+0xcd/0xf80
[  464.728477][T13932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.728502][T13932] RIP: 0033:0x7f8e2d18f7c9
[  464.728523][T13932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.728547][T13932] RSP: 002b:00007f8e2e10d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  464.728571][T13932] RAX: ffffffffffffffda RBX: 00007f8e2d3e5fa0 RCX: 00007f8e2d18f7c9
[  464.728589][T13932] RDX: 00000000000006f3 RSI: 00002000000001c0 RDI: 0000000000000000
[  464.728605][T13932] RBP: 00007f8e2d213f91 R08: 0000000000000000 R09: 0000000000000000
[  464.728621][T13932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  464.728636][T13932] R13: 00007f8e2d3e6038 R14: 00007f8e2d3e5fa0 R15: 00007ffe255b63f8
[  464.728671][T13932]  </TASK>
[  464.951801][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1651'.
[  465.194355][T13924] chnl_net:caif_netlink_parms(): no params data found
[  465.530384][T13924] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.537854][T13924] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.545197][T13924] bridge_slave_0: entered allmulticast mode
[  465.579463][T13924] bridge_slave_0: entered promiscuous mode
[  465.618907][T13924] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.626087][T13924] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.657514][T13924] bridge_slave_1: entered allmulticast mode
[  465.665505][T13924] bridge_slave_1: entered promiscuous mode
[  465.762184][T13924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.775643][T13924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.874996][T13924] team0: Port device team_slave_0 added
[  465.900041][T13924] team0: Port device team_slave_1 added
[  465.977475][T13924] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.984805][T13924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  466.037114][T13924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  466.050204][T13924] batman_adv: batadv0: Adding interface: batadv_slave_1
[  466.066222][T13924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  466.122525][T13924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  466.277702][T13924] hsr_slave_0: entered promiscuous mode
[  466.285746][T13924] hsr_slave_1: entered promiscuous mode
[  466.302687][T13924] debugfs: 'hsr0' already exists in 'hsr'
[  466.317089][T13924] Cannot create hsr debugfs directory
[  466.626795][T12360] Bluetooth: hci8: command tx timeout
[  466.770761][T13924] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  466.802652][T13924] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  466.840096][T13924] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  466.871094][T13924] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  467.079544][T13924] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.190071][T13924] 8021q: adding VLAN 0 to HW filter on device team0
[  467.212666][T12476] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.219920][T12476] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.245102][T11967] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.252278][T11967] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.934416][T13924] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.356881][T13971] bridge_slave_1: left allmulticast mode
[  468.376543][T13971] bridge_slave_1: left promiscuous mode
[  468.382383][T13971] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.437214][T13924] veth0_vlan: entered promiscuous mode
[  468.451805][T13924] veth1_vlan: entered promiscuous mode
[  468.507896][T13924] veth0_macvtap: entered promiscuous mode
[  468.538602][T13924] veth1_macvtap: entered promiscuous mode
[  468.602847][T13924] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.693297][T13924] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.705880][T12360] Bluetooth: hci8: command tx timeout
[  468.723688][T11967] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.739790][T11967] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.756509][T11967] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.779435][T11967] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.901064][T12080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.922146][T12080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.955139][T11972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.003555][T11972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.914447][T13993] FAULT_INJECTION: forcing a failure.
[  469.914447][T13993] name failslab, interval 1, probability 0, space 0, times 0
[  469.928618][T13993] CPU: 0 UID: 0 PID: 13993 Comm: syz.8.1661 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  469.928644][T13993] Tainted: [L]=SOFTLOCKUP
[  469.928650][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  469.928659][T13993] Call Trace:
[  469.928664][T13993]  <TASK>
[  469.928671][T13993]  dump_stack_lvl+0x16c/0x1f0
[  469.928700][T13993]  should_fail_ex+0x512/0x640
[  469.928724][T13993]  ? kmem_cache_alloc_noprof+0x62/0x770
[  469.928758][T13993]  should_failslab+0xc2/0x120
[  469.928795][T13993]  kmem_cache_alloc_noprof+0x83/0x770
[  469.928813][T13993]  ? ptlock_alloc+0x1f/0x70
[  469.928832][T13993]  ? ptlock_alloc+0x1f/0x70
[  469.928845][T13993]  ptlock_alloc+0x1f/0x70
[  469.928860][T13993]  pte_alloc_one+0x84/0x3d0
[  469.928881][T13993]  __do_fault+0x320/0x490
[  469.928901][T13993]  do_fault+0x302/0x1ad0
[  469.928921][T13993]  ? __pfx_filemap_map_pages+0x10/0x10
[  469.928938][T13993]  ? __pmd_alloc+0x6aa/0x9c0
[  469.928962][T13993]  __handle_mm_fault+0x1919/0x2bb0
[  469.928982][T13993]  ? __pfx___handle_mm_fault+0x10/0x10
[  469.929008][T13993]  ? find_vma+0xbf/0x140
[  469.929027][T13993]  ? __pfx_find_vma+0x10/0x10
[  469.929050][T13993]  handle_mm_fault+0x3fe/0xad0
[  469.929068][T13993]  do_user_addr_fault+0x7a6/0x1370
[  469.929087][T13993]  ? rcu_is_watching+0x12/0xc0
[  469.929111][T13993]  exc_page_fault+0x64/0xc0
[  469.929134][T13993]  asm_exc_page_fault+0x26/0x30
[  469.929149][T13993] RIP: 0010:rep_movs_alternative+0x33/0x90
[  469.929168][T13993] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[  469.929184][T13993] RSP: 0018:ffffc90003327d90 EFLAGS: 00050246
[  469.929197][T13993] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008
[  469.929207][T13993] RDX: fffff52000664fc5 RSI: ffffc90003327e20 RDI: 000000000000556d
[  469.929216][T13993] RBP: 000000000000556d R08: 0000000000000000 R09: fffff52000664fc4
[  469.929226][T13993] R10: ffffc90003327e27 R11: ffff88804311e6b0 R12: ffffc90003327e20
[  469.929235][T13993] R13: 0000000000005575 R14: 00007ffffffff000 R15: 0000000000000000
[  469.929255][T13993]  _copy_to_user+0xbb/0xd0
[  469.929274][T13993]  do_fcntl+0x13f4/0x1660
[  469.929291][T13993]  ? __pfx_do_fcntl+0x10/0x10
[  469.929313][T13993]  ? tomoyo_file_fcntl+0x6c/0xc0
[  469.929339][T13993]  __x64_sys_fcntl+0x163/0x200
[  469.929357][T13993]  do_syscall_64+0xcd/0xf80
[  469.929380][T13993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.929394][T13993] RIP: 0033:0x7ff76578f7c9
[  469.929407][T13993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.929421][T13993] RSP: 002b:00007ff76663b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  469.929434][T13993] RAX: ffffffffffffffda RBX: 00007ff7659e5fa0 RCX: 00007ff76578f7c9
[  469.929443][T13993] RDX: 000000000000556d RSI: 000000000000040b RDI: 0000000000000007
[  469.929452][T13993] RBP: 00007ff765813f91 R08: 0000000000000000 R09: 0000000000000000
[  469.929460][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  469.929469][T13993] R13: 00007ff7659e6038 R14: 00007ff7659e5fa0 R15: 00007fff09816ed8
[  469.929489][T13993]  </TASK>
[  470.786594][T12360] Bluetooth: hci8: command tx timeout
[  472.864223][T12360] Bluetooth: hci8: command tx timeout
[  476.795644][T14061] FAULT_INJECTION: forcing a failure.
[  476.795644][T14061] name failslab, interval 1, probability 0, space 0, times 0
[  476.816689][T14061] CPU: 1 UID: 0 PID: 14061 Comm: syz.8.1679 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  476.816733][T14061] Tainted: [L]=SOFTLOCKUP
[  476.816740][T14061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  476.816749][T14061] Call Trace:
[  476.816755][T14061]  <TASK>
[  476.816762][T14061]  dump_stack_lvl+0x16c/0x1f0
[  476.816791][T14061]  should_fail_ex+0x512/0x640
[  476.816809][T14061]  ? kmem_cache_alloc_noprof+0x62/0x770
[  476.816831][T14061]  should_failslab+0xc2/0x120
[  476.816854][T14061]  kmem_cache_alloc_noprof+0x83/0x770
[  476.816872][T14061]  ? __proc_create+0x2c8/0x8d0
[  476.816896][T14061]  ? __proc_create+0x2c8/0x8d0
[  476.816914][T14061]  __proc_create+0x2c8/0x8d0
[  476.816934][T14061]  ? __pfx___proc_create+0x10/0x10
[  476.816956][T14061]  ? __pfx___netlink_kernel_create+0x10/0x10
[  476.816982][T14061]  proc_create_reg+0x7d/0x180
[  476.817005][T14061]  proc_create_seq_private+0x8e/0x180
[  476.817027][T14061]  ? __pfx_proc_create_seq_private+0x10/0x10
[  476.817048][T14061]  ? __pfx_nl_fib_input+0x10/0x10
[  476.817067][T14061]  ? __pfx_ip_rt_do_proc_init+0x10/0x10
[  476.817083][T14061]  ip_rt_do_proc_init+0x57/0x1b0
[  476.817098][T14061]  ops_init+0x1e2/0x5f0
[  476.817122][T14061]  setup_net+0x11d/0x3a0
[  476.817143][T14061]  ? __pfx_setup_net+0x10/0x10
[  476.817169][T14061]  ? lockdep_init_map_type+0x5c/0x270
[  476.817187][T14061]  ? mutex_init_lockep+0x110/0x150
[  476.817206][T14061]  copy_net_ns+0x351/0x7c0
[  476.817230][T14061]  create_new_namespaces+0x3ea/0xab0
[  476.817256][T14061]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  476.817278][T14061]  ksys_unshare+0x45b/0xa40
[  476.817302][T14061]  ? __pfx_ksys_unshare+0x10/0x10
[  476.817325][T14061]  ? xfd_validate_state+0x61/0x180
[  476.817344][T14061]  __x64_sys_unshare+0x31/0x40
[  476.817357][T14061]  do_syscall_64+0xcd/0xf80
[  476.817372][T14061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.817387][T14061] RIP: 0033:0x7ff76578f7c9
[  476.817401][T14061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  476.817416][T14061] RSP: 002b:00007ff76663b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  476.817430][T14061] RAX: ffffffffffffffda RBX: 00007ff7659e5fa0 RCX: 00007ff76578f7c9
[  476.817440][T14061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  476.817449][T14061] RBP: 00007ff765813f91 R08: 0000000000000000 R09: 0000000000000000
[  476.817458][T14061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  476.817467][T14061] R13: 00007ff7659e6038 R14: 00007ff7659e5fa0 R15: 00007fff09816ed8
[  476.817488][T14061]  </TASK>
[  478.221573][T14070] bridge0: port 3(syz_tun) entered blocking state
[  478.228119][T14070] bridge0: port 3(syz_tun) entered disabled state
[  478.251315][T14070] syz_tun: entered allmulticast mode
[  478.257793][T14070] syz_tun: entered promiscuous mode
[  478.271493][T14070] bridge0: port 3(syz_tun) entered blocking state
[  478.278091][T14070] bridge0: port 3(syz_tun) entered forwarding state
[  478.383965][T13754] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  478.397303][T13754] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  478.405629][T13754] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  478.416485][T13754] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  478.425228][T13754] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  478.733757][T14072] chnl_net:caif_netlink_parms(): no params data found
[  478.885538][T14072] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.898942][T14072] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.914374][T14072] bridge_slave_0: entered allmulticast mode
[  478.932214][T14072] bridge_slave_0: entered promiscuous mode
[  478.946725][T14072] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.958221][T14072] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.971933][T14072] bridge_slave_1: entered allmulticast mode
[  478.984262][T14072] bridge_slave_1: entered promiscuous mode
[  479.039988][T14072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  479.055335][T14072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  479.104658][T14072] team0: Port device team_slave_0 added
[  479.114269][T14072] team0: Port device team_slave_1 added
[  479.150688][T14072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  479.157841][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  479.187091][T14072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  479.202196][T14072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  479.209346][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  479.236783][T14072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  479.296948][T14072] hsr_slave_0: entered promiscuous mode
[  479.305016][T14072] hsr_slave_1: entered promiscuous mode
[  479.313338][T14072] debugfs: 'hsr0' already exists in 'hsr'
[  479.320637][T14072] Cannot create hsr debugfs directory
[  479.637788][T14072] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.729255][T14072] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.808606][T14072] bridge0: port 3(netdevsim1) entered disabled state
[  479.847415][T14072] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode
[  479.865798][T14072] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode
[  479.885177][T14072] bridge0: port 3(netdevsim1) entered disabled state
[  479.906309][T14072] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.974654][T14072] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.234852][T14072] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  480.249210][T14072] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  480.281036][T14072] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  480.302890][T14072] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  480.436808][T14072] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.463284][T13754] Bluetooth: hci9: command tx timeout
[  480.478878][T14072] 8021q: adding VLAN 0 to HW filter on device team0
[  480.500358][T12080] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.507458][T12080] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.538349][T12080] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.545546][T12080] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.837412][T14072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  481.008593][T14072] veth0_vlan: entered promiscuous mode
[  481.031997][T14072] veth1_vlan: entered promiscuous mode
[  481.109185][T14072] veth0_macvtap: entered promiscuous mode
[  481.142080][T14072] veth1_macvtap: entered promiscuous mode
[  481.162025][T14105] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  481.177857][T14072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  481.202767][T14072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.232216][T12534] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.277897][T12691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.292846][T12691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.304956][T12691] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.460956][T12534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.477260][T12534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.506350][T12534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.516699][T12534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.538869][T13754] Bluetooth: hci9: command tx timeout
[  482.828995][T14121] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request
[  482.855261][T14114] kexec: Could not allocate control_code_buffer
[  483.073362][T14125] [U] 
[  483.076097][T14125] [U] 
[  483.078783][T14125] [U] 
[  483.081488][T14125] [U] 
[  483.130171][T14125] [U] 
[  483.132920][T14125] [U] 
[  483.135704][T14125] [U] 
[  483.138393][T14125] [U] 
[  483.195576][T14125] [U] 
[  483.198339][T14125] [U] 
[  483.201054][T14125] [U] 
[  483.203770][T14125] [U] 
[  483.223083][T14125] [U] 
[  483.225828][T14125] [U] 
[  483.228520][T14125] [U] 
[  483.231208][T14125] [U] 
[  483.243833][T14125] [U] 
[  483.246544][T14125] [U] 
[  483.249220][T14125] [U] 
[  483.251898][T14125] [U] 
[  483.255884][T14125] [U] 
[  483.258574][T14125] [U] 
[  483.261246][T14125] [U] 
[  483.263917][T14125] [U] 
[  483.273830][T14125] [U] 
[  483.276580][T14125] [U] 
[  483.279287][T14125] [U] 
[  483.282013][T14125] [U] 
[  483.287531][T14125] [U] 
[  483.290254][T14125] [U] 
[  483.292932][T14125] [U] 
[  483.295633][T14125] [U] 
[  483.305840][T14125] [U] 
[  483.308568][T14125] [U] 
[  483.311281][T14125] [U] 
[  483.313990][T14125] [U] 
[  483.325418][T14125] [U] 
[  483.328125][T14125] [U] 
[  483.330801][T14125] [U] 
[  483.333471][T14125] [U] 
[  483.340069][T14125] [U] 
[  483.342811][T14125] [U] 
[  483.345518][T14125] [U] 
[  483.348223][T14125] [U] 
[  483.351269][T14125] [U] 
[  483.353952][T14125] [U] 
[  483.356622][T14125] [U] 
[  483.359314][T14125] [U] 
[  483.363384][T14125] [U] 
[  483.366075][T14125] [U] 
[  483.368749][T14125] [U] 
[  483.371421][T14125] [U] 
[  483.376481][T14125] [U] 
[  483.379192][T14125] [U] 
[  483.381897][T14125] [U] 
[  483.384601][T14125] [U] 
[  483.392179][T14125] [U] 
[  483.394874][T14125] [U] 
[  483.397545][T14125] [U] 
[  483.400219][T14125] [U] 
[  483.408977][T14125] [U] 
[  483.411706][T14125] [U] 
[  483.414411][T14125] [U] 
[  483.417118][T14125] [U] 
[  483.423209][T14125] [U] 
[  483.425910][T14125] [U] 
[  483.428596][T14125] [U] 
[  483.431293][T14125] [U] 
[  483.437693][T14125] [U] 
[  483.440417][T14125] [U] 
[  483.443092][T14125] [U] 
[  483.445760][T14125] [U] 
[  483.449603][T14125] [U] 
[  483.452297][T14125] [U] 
[  483.454965][T14125] [U] 
[  483.457645][T14125] [U] 
[  483.461302][T14125] [U] 
[  483.463998][T14125] [U] 
[  483.466669][T14125] [U] 
[  483.469343][T14125] [U] 
[  483.473018][T14125] [U] 
[  483.475703][T14125] [U] 
[  483.478377][T14125] [U] 
[  483.481052][T14125] [U] 
[  483.485207][T14125] [U] 
[  483.487905][T14125] [U] 
[  483.490607][T14125] [U] 
[  483.493300][T14125] [U] 
[  483.497320][T14125] [U] 
[  483.500009][T14125] [U] 
[  483.502682][T14125] [U] 
[  483.505354][T14125] [U] 
[  483.516399][T14125] [U] 
[  483.519103][T14125] [U] 
[  483.521777][T14125] [U] 
[  483.524446][T14125] [U] 
[  483.530467][T14125] [U] 
[  483.533166][T14125] [U] 
[  483.535841][T14125] [U] 
[  483.538516][T14125] [U] 
[  483.544140][T14125] [U] 
[  483.546834][T14125] [U] 
[  483.549522][T14125] [U] 
[  483.552225][T14125] [U] 
[  483.555963][T14125] [U] 
[  483.558654][T14125] [U] 
[  483.561333][T14125] [U] 
[  483.564003][T14125] [U] 
[  483.567658][T14125] [U] 
[  483.570366][T14125] [U] 
[  483.573075][T14125] [U] 
[  483.575782][T14125] [U] 
[  483.580330][T14125] [U] 
[  483.583024][T14125] [U] 
[  483.585697][T14125] [U] 
[  483.588371][T14125] [U] 
[  483.592864][T14125] [U] 
[  483.595557][T14125] [U] 
[  483.598233][T14125] [U] 
[  483.600905][T14125] [U] 
[  483.606667][T14125] [U] 
[  483.609364][T14125] [U] 
[  483.612043][T14125] [U] 
[  483.614716][T14125] [U] 
[  483.623598][T14125] [U] 
[  483.626304][T14125] [U] 
[  483.628976][T14125] [U] 
[  483.631644][T14125] [U] 
[  483.634313][T14125] [U] 
[  483.658644][T14125] [U] 
[  483.661388][T14125] [U] 
[  483.664095][T14125] [U] 
[  483.666783][T14125] [U] 
[  483.678349][T14125] [U] 
[  483.681061][T14125] [U] 
[  483.683732][T14125] [U] 
[  483.686401][T14125] [U] 
[  483.696691][T14125] [U] 
[  483.699405][T14125] [U] 
[  483.702081][T14125] [U] 
[  483.704761][T14125] [U] 
[  483.718732][T14125] [U] 
[  483.721441][T14125] [U] 
[  483.724216][T14125] [U] 
[  483.726908][T14125] [U] 
[  483.755293][T14125] [U] 
[  483.758044][T14125] [U] 
[  483.760739][T14125] [U] 
[  483.763444][T14125] [U] 
[  483.786667][T14126] [U] 
[  484.052767][   T30] audit: type=1800 audit(4294967356.718:86): pid=14137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1692" name="lu_gp_id" dev="configfs" ino=57069 res=0 errno=0
[  484.282722][T12360] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  484.292366][T12360] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  484.302623][T12360] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  484.314295][T12360] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  484.324319][T12360] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  484.629093][T12360] Bluetooth: hci9: command tx timeout
[  484.760774][T13754] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  484.776498][T13754] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  484.786992][T13754] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  484.795375][T13754] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  484.802950][T13754] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  484.899256][T14145] chnl_net:caif_netlink_parms(): no params data found
[  485.118450][T14157] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1696'.
[  485.181945][T13754] Bluetooth: hci0: unexpected event 0x23 length: 127 > 13
[  485.245260][T14157] bond0: (slave bond_slave_1): Releasing backup interface
[  485.309322][T14165] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1696'.
[  485.327107][T14165] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1696'.
[  485.338532][T14165] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1696'.
[  485.389109][T14145] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.396295][T14145] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.404390][T14145] bridge_slave_0: entered allmulticast mode
[  485.420471][T14145] bridge_slave_0: entered promiscuous mode
[  485.450417][T14145] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.467561][T14145] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.475238][T14145] bridge_slave_1: entered allmulticast mode
[  485.486667][T14145] bridge_slave_1: entered promiscuous mode
[  485.643500][T14157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.696841][T14145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.722162][T14145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.745681][T14154] chnl_net:caif_netlink_parms(): no params data found
[  485.835862][T14157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.974653][T14145] team0: Port device team_slave_0 added
[  486.005594][T14157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.023658][T14145] team0: Port device team_slave_1 added
[  486.085249][T14145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.092381][T14145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.133952][T14145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  486.157260][T14145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  486.180020][T14145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.209530][T14145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.249236][T14157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.306261][T14154] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.317626][T14154] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.331557][T14176] netlink: 'syz.2.1698': attribute type 1 has an invalid length.
[  486.377278][T13754] Bluetooth: hci10: command tx timeout
[  486.389029][T14154] bridge_slave_0: entered allmulticast mode
[  486.396318][T14154] bridge_slave_0: entered promiscuous mode
[  486.413045][T14154] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.426649][T14154] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.434427][T14154] bridge_slave_1: entered allmulticast mode
[  486.442638][T14154] bridge_slave_1: entered promiscuous mode
[  486.550028][T14145] hsr_slave_0: entered promiscuous mode
[  486.563781][T14145] hsr_slave_1: entered promiscuous mode
[  486.582133][T14145] debugfs: 'hsr0' already exists in 'hsr'
[  486.591594][T14145] Cannot create hsr debugfs directory
[  486.611777][T14154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  486.683441][T14154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  486.697628][T13754] Bluetooth: hci9: command tx timeout
[  486.843985][T14154] team0: Port device team_slave_0 added
[  486.857496][T13754] Bluetooth: hci11: command tx timeout
[  486.872170][T14154] team0: Port device team_slave_1 added
[  486.932881][T14154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.941637][T14154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.970188][T14154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.003483][T14154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.010842][T14154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  487.056126][T14154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  487.181130][T14154] hsr_slave_0: entered promiscuous mode
[  487.193016][T14154] hsr_slave_1: entered promiscuous mode
[  487.203514][T14154] debugfs: 'hsr0' already exists in 'hsr'
[  487.212313][T14154] Cannot create hsr debugfs directory
[  487.404980][T14145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.581118][T14145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.660973][T14145] bridge0: port 3(netdevsim1) entered disabled state
[  487.691264][T14145] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode
[  487.701409][T14145] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode
[  487.713945][T14145] bridge0: port 3(netdevsim1) entered disabled state
[  487.730681][T14145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.862357][T14145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.050402][T14154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.163342][T14154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.291896][T14154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.410702][T14154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.456059][T13754] Bluetooth: hci10: command tx timeout
[  488.595513][T14145] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  488.624740][T14145] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  488.683391][T14145] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  488.757090][T14145] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  488.846149][T14154] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  488.880226][T14154] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  488.919302][T14154] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  488.937768][T13754] Bluetooth: hci11: command tx timeout
[  488.963567][T14154] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  489.253829][T14154] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.294300][T14145] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.524653][T14154] 8021q: adding VLAN 0 to HW filter on device team0
[  489.550913][T12534] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.558059][T12534] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.587848][T14145] 8021q: adding VLAN 0 to HW filter on device team0
[  489.601835][T12534] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.608986][T12534] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.656902][T12534] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.664073][T12534] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.681555][T12534] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.688729][T12534] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.177534][T14232] futex_wake_op: syz.8.1708 tries to shift op by -2048; fix this program
[  490.237628][T14232] futex_wake_op: syz.8.1708 tries to shift op by -2048; fix this program
[  490.293445][T14231] 0x000000000001-0x000000020000 : ""
[  490.326116][T14231] ftl_cs: FTL header corrupt!
[  490.535168][T13754] Bluetooth: hci10: command tx timeout
[  490.537644][T14154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.647994][T14145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.969308][T14145] veth0_vlan: entered promiscuous mode
[  490.993641][T14154] veth0_vlan: entered promiscuous mode
[  491.026353][T14145] veth1_vlan: entered promiscuous mode
[  491.029059][T13754] Bluetooth: hci11: command tx timeout
[  491.056625][T14154] veth1_vlan: entered promiscuous mode
[  491.202432][T14154] veth0_macvtap: entered promiscuous mode
[  491.238514][T14154] veth1_macvtap: entered promiscuous mode
[  491.367655][T14145] veth0_macvtap: entered promiscuous mode
[  491.381738][T14154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  491.431260][T14154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.450379][T14145] veth1_macvtap: entered promiscuous mode
[  491.511544][T13100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.540003][T13100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.563017][T13100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.600540][T13100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.677839][T14145] batman_adv: batadv0: Interface activated: batadv_slave_0
[  491.753360][T14145] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.781812][T12501] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.797289][T12501] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.834780][T12501] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.852859][T12501] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  492.165828][T12691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.183383][T12691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.222178][T11979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.257249][T11979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.339985][T12501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.397980][T12501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.451419][T12501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.464995][T12501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.558383][T14260] FAULT_INJECTION: forcing a failure.
[  492.558383][T14260] name failslab, interval 1, probability 0, space 0, times 0
[  492.599701][T14260] CPU: 1 UID: 0 PID: 14260 Comm: syz.2.1713 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  492.599745][T14260] Tainted: [L]=SOFTLOCKUP
[  492.599755][T14260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  492.599772][T14260] Call Trace:
[  492.599782][T14260]  <TASK>
[  492.599794][T14260]  dump_stack_lvl+0x16c/0x1f0
[  492.599848][T14260]  should_fail_ex+0x512/0x640
[  492.599878][T14260]  ? __kmalloc_node_track_caller_noprof+0xcb/0x930
[  492.599920][T14260]  should_failslab+0xc2/0x120
[  492.599961][T14260]  __kmalloc_node_track_caller_noprof+0xec/0x930
[  492.600000][T14260]  ? kstrdup_const+0x63/0x80
[  492.600037][T14260]  ? kstrdup+0x53/0x100
[  492.600062][T14260]  kstrdup+0x53/0x100
[  492.600093][T14260]  kstrdup_const+0x63/0x80
[  492.600123][T14260]  alloc_vfsmnt+0xea/0x6b0
[  492.600149][T14260]  ? getname_flags.part.0+0x1c5/0x550
[  492.600178][T14260]  mnt_clone_internal+0x81/0x250
[  492.600217][T14260]  acct_on+0xfb/0xa00
[  492.600252][T14260]  ? __pfx_acct_on+0x10/0x10
[  492.600285][T14260]  ? bpf_lsm_capable+0x9/0x10
[  492.600324][T14260]  __x64_sys_acct+0x81/0x1e0
[  492.600355][T14260]  ? lockdep_hardirqs_on+0x7c/0x110
[  492.600390][T14260]  do_syscall_64+0xcd/0xf80
[  492.600410][T14260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.600430][T14260] RIP: 0033:0x7fbff498f7c9
[  492.600448][T14260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  492.600467][T14260] RSP: 002b:00007fbff57d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[  492.600488][T14260] RAX: ffffffffffffffda RBX: 00007fbff4be5fa0 RCX: 00007fbff498f7c9
[  492.600502][T14260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[  492.600515][T14260] RBP: 00007fbff4a13f91 R08: 0000000000000000 R09: 0000000000000000
[  492.600528][T14260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  492.600541][T14260] R13: 00007fbff4be6038 R14: 00007fbff4be5fa0 R15: 00007ffde0d28f08
[  492.600572][T14260]  </TASK>
[  492.665128][T13754] Bluetooth: hci10: command tx timeout
[  492.884593][T14267] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  492.890749][T14267] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  492.962383][T14267] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  493.001665][T14267] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  493.039596][T14267] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  493.081321][T14267] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  493.092915][T14267] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  493.100603][T14267] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  493.104056][T13754] Bluetooth: hci11: command tx timeout
[  493.106878][T14267] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  493.126696][T14267] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  493.187988][T14267] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  493.218973][T14267] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  493.252660][T14267] Bluetooth: hci9: Opcode 0x0406 failed: -4
[  493.299468][T14267] Bluetooth: hci9: Opcode 0x0406 failed: -4
[  493.319614][T14279] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  493.344740][T14267] Bluetooth: hci10: Opcode 0x0c1a failed: -4
[  493.369598][T14267] Bluetooth: hci10: Opcode 0x0406 failed: -4
[  493.421403][T14267] Bluetooth: hci10: Opcode 0x0406 failed: -4
[  493.444414][T14267] Bluetooth: hci11: Opcode 0x0c1a failed: -4
[  493.463629][T14267] Bluetooth: hci11: Opcode 0x0406 failed: -4
[  493.528525][T14267] Bluetooth: hci11: Opcode 0x0406 failed: -4
[  494.949860][T12360] Bluetooth: hci1: command 0x0c1a tx timeout
[  494.955976][T13754] Bluetooth: hci2: command 0x0c1a tx timeout
[  495.023661][T12360] Bluetooth: hci3: command 0x0c1a tx timeout
[  495.029822][T13754] Bluetooth: hci4: command 0x0c1a tx timeout
[  495.103585][T13372] Bluetooth: hci5: command 0x0c1a tx timeout
[  495.109625][T12360] Bluetooth: hci6: command 0x0c1a tx timeout
[  495.117214][T13754] Bluetooth: hci7: command 0x0c1a tx timeout
[  495.180277][T12360] Bluetooth: hci0: command 0x0419 tx timeout
[  495.186355][T13754] Bluetooth: hci8: command 0x0c1a tx timeout
[  495.268739][T13754] Bluetooth: hci9: command 0x0c1a tx timeout
[  495.288029][T14314] binder: 14309:14314 ioctl c0306201 0 returned -14
[  495.412342][T13754] Bluetooth: hci10: command 0x0c1a tx timeout
[  495.499209][T13754] Bluetooth: hci11: command 0x0c1a tx timeout
[  496.394568][T14341] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request
[  497.222129][T13754] Bluetooth: hci0: unexpected event 0x23 length: 127 > 13
[  497.264915][T13754] Bluetooth: hci8: command 0x0c1a tx timeout
[  497.349665][T13754] Bluetooth: hci9: command 0x0c1a tx timeout
[  497.491559][T13754] Bluetooth: hci10: command 0x0c1a tx timeout
[  497.605474][T13754] Bluetooth: hci11: command 0x0c1a tx timeout
[  499.112317][T14362] kexec: Could not allocate control_code_buffer
[  499.333127][T13754] Bluetooth: hci8: command 0x0c1a tx timeout
[  499.410980][T13754] Bluetooth: hci9: command 0x0c1a tx timeout
[  499.620502][T13754] Bluetooth: hci10: command 0x0c1a tx timeout
[  499.654514][T13754] Bluetooth: hci11: command 0x0c1a tx timeout
[  500.377664][T14403] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  500.572696][T14399] netlink: 86 bytes leftover after parsing attributes in process `syz.1.1741'.

getty: ttyS0: read error: Resource temporarily unavailable
[  501.306082][T14416] EXT4-fs warning: 2 callbacks suppressed
[  501.306101][T14416] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  501.404404][T14416] EXT4-fs error: 2 callbacks suppressed
[  501.404423][T14416] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  501.461318][T14416] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  501.499331][T14416] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  501.661705][T14421] zswap: compressor  not available
[  501.673054][T14429] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  501.699912][T14429] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  501.737866][T14429] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  501.761465][T14429] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  502.018856][T14427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1747'.
[  502.036413][T14431] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  502.059912][T14431] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  502.080345][T14431] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  502.107575][T14431] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  502.276316][T14433] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  502.350703][T14433] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  502.412070][T14433] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  502.450153][T14433] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  503.154774][T14441] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  503.588799][T14460] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1755'.
[  503.599798][T14460] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1755'.
[  505.653757][T14492] FAULT_INJECTION: forcing a failure.
[  505.653757][T14492] name failslab, interval 1, probability 0, space 0, times 0
[  505.666970][T14492] CPU: 0 UID: 0 PID: 14492 Comm: syz.1.1760 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  505.666997][T14492] Tainted: [L]=SOFTLOCKUP
[  505.667003][T14492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  505.667012][T14492] Call Trace:
[  505.667018][T14492]  <TASK>
[  505.667023][T14492]  dump_stack_lvl+0x16c/0x1f0
[  505.667053][T14492]  should_fail_ex+0x512/0x640
[  505.667082][T14492]  ? __kmalloc_noprof+0xca/0x910
[  505.667113][T14492]  should_failslab+0xc2/0x120
[  505.667148][T14492]  __kmalloc_noprof+0xeb/0x910
[  505.667174][T14492]  ? lsm_blob_alloc+0x68/0x90
[  505.667214][T14492]  ? lsm_blob_alloc+0x68/0x90
[  505.667249][T14492]  lsm_blob_alloc+0x68/0x90
[  505.667286][T14492]  security_sk_alloc+0x2f/0x270
[  505.667314][T14492]  sk_prot_alloc+0xfb/0x2a0
[  505.667356][T14492]  sk_alloc+0x36/0xe30
[  505.667388][T14492]  inet6_create+0x381/0x12b0
[  505.667413][T14492]  ? inet6_create+0x7f/0x12b0
[  505.667437][T14492]  __sock_create+0x339/0x8a0
[  505.667455][T14492]  smc_create_clcsk+0x37/0xd0
[  505.667476][T14492]  ? __pfx_smc_inet_init_sock+0x10/0x10
[  505.667492][T14492]  inet6_create+0xb30/0x12b0
[  505.667516][T14492]  ? inet6_create+0x7f/0x12b0
[  505.667543][T14492]  __sock_create+0x339/0x8a0
[  505.667561][T14492]  __sys_socket+0x14d/0x260
[  505.667576][T14492]  ? __pfx___sys_socket+0x10/0x10
[  505.667591][T14492]  ? xfd_validate_state+0x61/0x180
[  505.667604][T14492]  ? __pfx_do_writev+0x10/0x10
[  505.667627][T14492]  __x64_sys_socket+0x72/0xb0
[  505.667641][T14492]  ? lockdep_hardirqs_on+0x7c/0x110
[  505.667664][T14492]  do_syscall_64+0xcd/0xf80
[  505.667678][T14492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.667693][T14492] RIP: 0033:0x7f73f8b8f7c9
[  505.667706][T14492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  505.667722][T14492] RSP: 002b:00007f73f9a4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  505.667736][T14492] RAX: ffffffffffffffda RBX: 00007f73f8de5fa0 RCX: 00007f73f8b8f7c9
[  505.667746][T14492] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a
[  505.667755][T14492] RBP: 00007f73f8c13f91 R08: 0000000000000000 R09: 0000000000000000
[  505.667764][T14492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  505.667772][T14492] R13: 00007f73f8de6038 R14: 00007f73f8de5fa0 R15: 00007ffca55bb2a8
[  505.667799][T14492]  </TASK>
[  506.695101][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  506.701628][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
Àÿÿÿÿÿÿˆ¢ÿÿÿ
À[  506.791106][T14496] mkiss: ax0: crc mode is auto.
[  507.391231][T14509] warning: `syz.1.1764' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  507.507566][T14525] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  507.948548][T14525] hub 1-0:1.0: USB hub found
[  508.022503][T14525] hub 1-0:1.0: 1 port detected
[  508.386193][T14537] FAULT_INJECTION: forcing a failure.
[  508.386193][T14537] name failslab, interval 1, probability 0, space 0, times 0
[  508.412140][T14537] CPU: 0 UID: 0 PID: 14537 Comm: syz.3.1772 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  508.412186][T14537] Tainted: [L]=SOFTLOCKUP
[  508.412196][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  508.412212][T14537] Call Trace:
[  508.412221][T14537]  <TASK>
[  508.412232][T14537]  dump_stack_lvl+0x16c/0x1f0
[  508.412279][T14537]  should_fail_ex+0x512/0x640
[  508.412319][T14537]  ? __kmalloc_noprof+0xca/0x910
[  508.412353][T14537]  should_failslab+0xc2/0x120
[  508.412394][T14537]  __kmalloc_noprof+0xeb/0x910
[  508.412424][T14537]  ? lsm_blob_alloc+0x68/0x90
[  508.412466][T14537]  ? lsm_blob_alloc+0x68/0x90
[  508.412500][T14537]  lsm_blob_alloc+0x68/0x90
[  508.412537][T14537]  security_sk_alloc+0x2f/0x270
[  508.412565][T14537]  sk_prot_alloc+0xfb/0x2a0
[  508.412607][T14537]  sk_alloc+0x36/0xe30
[  508.412640][T14537]  inet6_create+0x381/0x12b0
[  508.412681][T14537]  ? inet6_create+0x7f/0x12b0
[  508.412722][T14537]  __sock_create+0x339/0x8a0
[  508.412755][T14537]  smc_create_clcsk+0x37/0xd0
[  508.412788][T14537]  ? __pfx_smc_inet_init_sock+0x10/0x10
[  508.412817][T14537]  inet6_create+0xb30/0x12b0
[  508.412856][T14537]  ? inet6_create+0x7f/0x12b0
[  508.412898][T14537]  __sock_create+0x339/0x8a0
[  508.412931][T14537]  __sys_socket+0x14d/0x260
[  508.412959][T14537]  ? __pfx___sys_socket+0x10/0x10
[  508.412986][T14537]  ? xfd_validate_state+0x61/0x180
[  508.413010][T14537]  ? __pfx_do_writev+0x10/0x10
[  508.413051][T14537]  __x64_sys_socket+0x72/0xb0
[  508.413077][T14537]  ? lockdep_hardirqs_on+0x7c/0x110
[  508.413115][T14537]  do_syscall_64+0xcd/0xf80
[  508.413141][T14537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.413167][T14537] RIP: 0033:0x7fae4698f7c9
[  508.413190][T14537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.413216][T14537] RSP: 002b:00007fae478cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  508.413241][T14537] RAX: ffffffffffffffda RBX: 00007fae46be5fa0 RCX: 00007fae4698f7c9
[  508.413259][T14537] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a
[  508.413276][T14537] RBP: 00007fae46a13f91 R08: 0000000000000000 R09: 0000000000000000
[  508.413293][T14537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.413316][T14537] R13: 00007fae46be6038 R14: 00007fae46be5fa0 R15: 00007ffe7859f6d8
[  508.413354][T14537]  </TASK>
[  508.415176][T14540] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  509.629333][T14568] FAULT_INJECTION: forcing a failure.
[  509.629333][T14568] name failslab, interval 1, probability 0, space 0, times 0
[  509.642430][T14568] CPU: 1 UID: 0 PID: 14568 Comm: syz.3.1774 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  509.642457][T14568] Tainted: [L]=SOFTLOCKUP
[  509.642463][T14568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  509.642480][T14568] Call Trace:
[  509.642487][T14568]  <TASK>
[  509.642493][T14568]  dump_stack_lvl+0x16c/0x1f0
[  509.642521][T14568]  should_fail_ex+0x512/0x640
[  509.642540][T14568]  ? kmem_cache_alloc_noprof+0x62/0x770
[  509.642560][T14568]  should_failslab+0xc2/0x120
[  509.642583][T14568]  kmem_cache_alloc_noprof+0x83/0x770
[  509.642601][T14568]  ? alloc_empty_file+0x55/0x1e0
[  509.642620][T14568]  ? alloc_empty_file+0x55/0x1e0
[  509.642635][T14568]  alloc_empty_file+0x55/0x1e0
[  509.642651][T14568]  alloc_file_pseudo+0x13a/0x230
[  509.642668][T14568]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  509.642686][T14568]  ? do_raw_spin_unlock+0x172/0x230
[  509.642705][T14568]  __anon_inode_getfile+0xe8/0x280
[  509.642723][T14568]  anon_inode_getfile_fmode+0x37/0xa0
[  509.642740][T14568]  __do_sys_fanotify_init+0xa53/0xed0
[  509.642762][T14568]  do_syscall_64+0xcd/0xf80
[  509.642777][T14568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.642792][T14568] RIP: 0033:0x7fae4698f7c9
[  509.642805][T14568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.642820][T14568] RSP: 002b:00007fae478cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c
[  509.642835][T14568] RAX: ffffffffffffffda RBX: 00007fae46be5fa0 RCX: 00007fae4698f7c9
[  509.642844][T14568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  509.642853][T14568] RBP: 00007fae46a13f91 R08: 0000000000000000 R09: 0000000000000000
[  509.642862][T14568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  509.642871][T14568] R13: 00007fae46be6038 R14: 00007fae46be5fa0 R15: 00007ffe7859f6d8
[  509.642890][T14568]  </TASK>
[  511.292902][T14591] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  511.309012][T14591] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  511.323753][T14591] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  511.345220][T14591] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  511.393964][T14592] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  511.438426][T14592] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  511.502051][T14592] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  511.556257][T14592] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  511.628608][T14598] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  511.648597][T14598] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  511.672369][T14598] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  511.685138][T14597] sctp: [Deprecated]: syz.8.1781 (pid 14597) Use of struct sctp_assoc_value in delayed_ack socket option.
[  511.685138][T14597] Use struct sctp_sack_info instead
[  511.699575][T14598] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  511.837738][T14599] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  511.857938][T14599] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  511.896546][T14599] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  511.912944][T14599] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  512.033689][T14604] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  512.069443][T14604] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  512.084964][T14604] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  512.107544][T14604] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  512.130863][T14611] Invalid ELF header magic: != ELF
[  512.151075][T14607] delete_channel: no stack
[  512.909063][T14623] hub 1-0:1.0: USB hub found
[  512.932951][T14623] hub 1-0:1.0: 1 port detected
[  513.072792][T14620] hub 1-0:1.0: USB hub found
[  513.094085][T14620] hub 1-0:1.0: 1 port detected
[  513.339075][T12360] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  513.364334][T12360] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  513.374288][T12360] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  513.387105][T12360] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  513.398328][T12360] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  513.559006][T14631] zswap: compressor  not available
[  513.927006][T14634] chnl_net:caif_netlink_parms(): no params data found

syzkaller
syzkaller login: [  514.272062][T14634] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.293649][T14634] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.313183][T14634] bridge_slave_0: entered allmulticast mode
[  514.322045][T14634] bridge_slave_0: entered promiscuous mode
[  514.335394][T14634] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.342619][T14634] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.358552][T14634] bridge_slave_1: entered allmulticast mode
[  514.370451][T14634] bridge_slave_1: entered promiscuous mode
[  514.469420][T14634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  514.507426][T14634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  514.598691][T14634] team0: Port device team_slave_0 added
[  514.616644][T14634] team0: Port device team_slave_1 added
[  514.683410][T14634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.700719][T14634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.756067][T14634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.784367][T14634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.802600][T14634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.834219][T14634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.906383][T14634] hsr_slave_0: entered promiscuous mode
[  514.915322][T14634] hsr_slave_1: entered promiscuous mode
[  514.938157][T14634] debugfs: 'hsr0' already exists in 'hsr'
[  514.945068][T14634] Cannot create hsr debugfs directory
[  515.257528][T14634] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.419312][T14634] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.483099][T12360] Bluetooth: hci12: command tx timeout
[  515.652370][T14634] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.754039][T14665] loop6: detected capacity change from 0 to 8192
[  515.814676][T14634] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.886885][T14665] FAULT_INJECTION: forcing a failure.
[  515.886885][T14665] name failslab, interval 1, probability 0, space 0, times 0
[  515.900330][T14665] CPU: 1 UID: 0 PID: 14665 Comm: syz.8.1794 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  515.900376][T14665] Tainted: [L]=SOFTLOCKUP
[  515.900386][T14665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  515.900402][T14665] Call Trace:
[  515.900411][T14665]  <TASK>
[  515.900422][T14665]  dump_stack_lvl+0x16c/0x1f0
[  515.900470][T14665]  should_fail_ex+0x512/0x640
[  515.900500][T14665]  ? __kmalloc_noprof+0xca/0x910
[  515.900533][T14665]  should_failslab+0xc2/0x120
[  515.900570][T14665]  __kmalloc_noprof+0xeb/0x910
[  515.900598][T14665]  ? kobject_get_path+0xd2/0x2d0
[  515.900628][T14665]  ? kobject_get_path+0xd2/0x2d0
[  515.900650][T14665]  kobject_get_path+0xd2/0x2d0
[  515.900682][T14665]  kobject_uevent_env+0x289/0x1920
[  515.900727][T14665]  net_rx_queue_update_kobjects+0x1e4/0x770
[  515.900776][T14665]  ? kset_register+0x1bb/0x2b0
[  515.900807][T14665]  netdev_register_kobject+0x290/0x3d0
[  515.900838][T14665]  register_netdevice+0x13ac/0x21d0
[  515.900883][T14665]  ? __pfx_register_netdevice+0x10/0x10
[  515.900932][T14665]  __ip_tunnel_create+0x540/0x6b0
[  515.900962][T14665]  ? __pfx___ip_tunnel_create+0x10/0x10
[  515.901010][T14665]  ip_tunnel_init_net+0x22f/0x7d0
[  515.901044][T14665]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  515.901083][T14665]  ? ops_init+0x77/0x5f0
[  515.901122][T14665]  ? __pfx_erspan_init_net+0x10/0x10
[  515.901160][T14665]  ops_init+0x1e2/0x5f0
[  515.901199][T14665]  setup_net+0x11d/0x3a0
[  515.901236][T14665]  ? __pfx_setup_net+0x10/0x10
[  515.901270][T14665]  ? lockdep_init_map_type+0x5c/0x270
[  515.901298][T14665]  ? mutex_init_lockep+0x110/0x150
[  515.901332][T14665]  copy_net_ns+0x351/0x7c0
[  515.901378][T14665]  create_new_namespaces+0x3ea/0xab0
[  515.901424][T14665]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  515.901463][T14665]  ksys_unshare+0x45b/0xa40
[  515.901503][T14665]  ? __pfx_ksys_unshare+0x10/0x10
[  515.901543][T14665]  ? xfd_validate_state+0x61/0x180
[  515.901579][T14665]  __x64_sys_unshare+0x31/0x40
[  515.901603][T14665]  do_syscall_64+0xcd/0xf80
[  515.901631][T14665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.901658][T14665] RIP: 0033:0x7ff76578f7c9
[  515.901680][T14665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  515.901704][T14665] RSP: 002b:00007ff76663b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  515.901727][T14665] RAX: ffffffffffffffda RBX: 00007ff7659e5fa0 RCX: 00007ff76578f7c9
[  515.901744][T14665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  515.901760][T14665] RBP: 00007ff765813f91 R08: 0000000000000000 R09: 0000000000000000
[  515.901775][T14665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  515.901790][T14665] R13: 00007ff7659e6038 R14: 00007ff7659e5fa0 R15: 00007fff09816ed8
[  515.901826][T14665]  </TASK>
[  516.562069][T14634] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  516.584530][T14634] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  516.597563][T14634] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  516.615948][T14634] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  516.637797][T14674] netlink: 50 bytes leftover after parsing attributes in process `syz.8.1797'.
[  516.757331][T14678] ptrace attach of "./syz-executor exec"[14154] was attempted by ""[14678]
[  516.862417][T14634] 8021q: adding VLAN 0 to HW filter on device bond0
[  516.907466][T14634] 8021q: adding VLAN 0 to HW filter on device team0
[  516.983357][T13100] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.990468][T13100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  517.095436][T13100] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.095525][T13100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  517.584972][T12360] Bluetooth: hci12: command tx timeout
[  517.759251][T14634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.017511][T14634] veth0_vlan: entered promiscuous mode
[  518.073933][T14634] veth1_vlan: entered promiscuous mode
[  518.242074][T14634] veth0_macvtap: entered promiscuous mode
[  518.276172][T14634] veth1_macvtap: entered promiscuous mode
[  518.359654][T14634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  518.376950][T14634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.412852][T13946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  518.439146][T13946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.458645][T13946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.506683][T13946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  518.755578][T12765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.770671][T12767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.788033][T12765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.812091][T12767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.640702][T12360] Bluetooth: hci12: command tx timeout
[  520.180216][T14730] netlink: 330 bytes leftover after parsing attributes in process `syz.8.1807'.
[  521.739149][T12360] Bluetooth: hci12: command tx timeout
[  522.294345][T14753] zswap: compressor  not available
[  523.334459][T14774] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  524.010558][T13754] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  524.023085][T13754] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  524.034907][T13754] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  524.064065][T13754] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  524.080390][T13754] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  524.430642][T14791] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1820'.
[  524.727949][T14787] chnl_net:caif_netlink_parms(): no params data found
[  525.042750][T14787] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.100537][T14787] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.118075][T14787] bridge_slave_0: entered allmulticast mode
[  525.126172][T14787] bridge_slave_0: entered promiscuous mode
[  525.162338][T14787] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.172373][T14787] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.180683][T14787] bridge_slave_1: entered allmulticast mode
[  525.189509][T14787] bridge_slave_1: entered promiscuous mode
[  525.202245][T14807] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  525.277174][T14787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  525.292878][T14787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  525.358743][T14787] team0: Port device team_slave_0 added
[  525.388128][T14787] team0: Port device team_slave_1 added
[  525.504344][T14787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  525.535129][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  525.635562][T14787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  525.670302][T14787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  525.690757][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  525.777226][T14787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.059139][T14816] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  526.121562][T13754] Bluetooth: hci13: command tx timeout
[  526.299460][T14816] hub 1-0:1.0: USB hub found
[  526.395713][T14816] hub 1-0:1.0: 1 port detected
[  526.396111][T14787] hsr_slave_0: entered promiscuous mode
[  526.409231][T14787] hsr_slave_1: entered promiscuous mode
[  526.415961][T14787] debugfs: 'hsr0' already exists in 'hsr'
[  526.424071][T14787] Cannot create hsr debugfs directory
[  527.263118][T14787] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  527.283557][T14832] FAULT_INJECTION: forcing a failure.
[  527.283557][T14832] name failslab, interval 1, probability 0, space 0, times 0
[  527.307761][T14787] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  527.330513][T14832] CPU: 1 UID: 0 PID: 14832 Comm: syz.3.1826 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  527.330552][T14832] Tainted: [L]=SOFTLOCKUP
[  527.330562][T14832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  527.330576][T14832] Call Trace:
[  527.330585][T14832]  <TASK>
[  527.330595][T14832]  dump_stack_lvl+0x16c/0x1f0
[  527.330639][T14832]  should_fail_ex+0x512/0x640
[  527.330669][T14832]  ? kmem_cache_alloc_noprof+0x62/0x770
[  527.330703][T14832]  should_failslab+0xc2/0x120
[  527.330742][T14832]  kmem_cache_alloc_noprof+0x83/0x770
[  527.330770][T14832]  ? __proc_create+0x2c8/0x8d0
[  527.330809][T14832]  ? __proc_create+0x2c8/0x8d0
[  527.330838][T14832]  __proc_create+0x2c8/0x8d0
[  527.330869][T14832]  ? __pfx___proc_create+0x10/0x10
[  527.330898][T14832]  ? proc_register+0x554/0x8b0
[  527.330935][T14832]  ? _raw_write_unlock+0x28/0x50
[  527.330973][T14832]  proc_create_reg+0x7d/0x180
[  527.331008][T14832]  proc_create_data+0x86/0x110
[  527.331042][T14832]  ? __pfx_proc_create_data+0x10/0x10
[  527.331085][T14832]  ? cache_register_net+0x137/0x5e0
[  527.331117][T14832]  cache_register_net+0x1e0/0x5e0
[  527.331144][T14832]  nfsd_export_init+0xb6/0x250
[  527.331182][T14832]  ? __pfx_nfsd_net_init+0x10/0x10
[  527.331218][T14832]  nfsd_net_init+0x33/0x3d0
[  527.331255][T14832]  ? __pfx_nfsd_net_init+0x10/0x10
[  527.331291][T14832]  ops_init+0x1e2/0x5f0
[  527.331331][T14832]  setup_net+0x11d/0x3a0
[  527.331367][T14832]  ? __pfx_setup_net+0x10/0x10
[  527.331399][T14832]  ? lockdep_init_map_type+0x5c/0x270
[  527.331427][T14832]  ? mutex_init_lockep+0x110/0x150
[  527.331457][T14832]  copy_net_ns+0x351/0x7c0
[  527.331501][T14832]  create_new_namespaces+0x3ea/0xab0
[  527.331544][T14832]  copy_namespaces+0x468/0x570
[  527.331580][T14832]  copy_process+0x2a70/0x7430
[  527.331634][T14832]  ? __pfx_copy_process+0x10/0x10
[  527.331678][T14832]  ? futex_private_hash_put+0x160/0x1b0
[  527.331714][T14832]  kernel_clone+0xfc/0x910
[  527.331752][T14832]  ? __pfx_kernel_clone+0x10/0x10
[  527.331808][T14832]  __do_sys_clone+0xce/0x120
[  527.331844][T14832]  ? __pfx___do_sys_clone+0x10/0x10
[  527.331880][T14832]  ? find_held_lock+0x2b/0x80
[  527.331926][T14832]  ? xfd_validate_state+0x61/0x180
[  527.331964][T14832]  do_syscall_64+0xcd/0xf80
[  527.331990][T14832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.332017][T14832] RIP: 0033:0x7fae4698f7c9
[  527.332038][T14832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  527.332062][T14832] RSP: 002b:00007fae478cafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  527.332094][T14832] RAX: ffffffffffffffda RBX: 00007fae46be5fa0 RCX: 00007fae4698f7c9
[  527.332112][T14832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211
[  527.332128][T14832] RBP: 00007fae46a13f91 R08: 0000000000000000 R09: 0000000000000000
[  527.332145][T14832] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  527.332161][T14832] R13: 00007fae46be6038 R14: 00007fae46be5fa0 R15: 00007ffe7859f6d8
[  527.332197][T14832]  </TASK>
[  527.335341][T14787] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  527.684101][T14787] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  528.096514][T14787] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.196460][T13754] Bluetooth: hci13: command tx timeout
[  528.199289][T14787] 8021q: adding VLAN 0 to HW filter on device team0
[  528.290777][T13995] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.297961][T13995] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.325162][T12501] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.332484][T12501] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.622883][T14871] netlink: 'syz.3.1832': attribute type 33 has an invalid length.
[  528.970460][T14787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.228365][T14889] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1834'.
[  529.709059][T14787] veth0_vlan: entered promiscuous mode
[  529.814384][T14787] veth1_vlan: entered promiscuous mode
[  529.968960][T14787] veth0_macvtap: entered promiscuous mode
[  530.010842][T14787] veth1_macvtap: entered promiscuous mode
[  530.229938][T14787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  530.275336][T13754] Bluetooth: hci13: command tx timeout
[  530.396909][T14787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  530.542580][T14268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  530.773854][T14922] FAULT_INJECTION: forcing a failure.
[  530.773854][T14922] name failslab, interval 1, probability 0, space 0, times 0
[  530.787460][T14922] CPU: 0 UID: 0 PID: 14922 Comm: syz.0.1840 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  530.787496][T14922] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  530.787505][T14922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  530.787515][T14922] Call Trace:
[  530.787521][T14922]  <TASK>
[  530.787527][T14922]  dump_stack_lvl+0x16c/0x1f0
[  530.787556][T14922]  should_fail_ex+0x512/0x640
[  530.787574][T14922]  ? __kmalloc_noprof+0xca/0x910
[  530.787592][T14922]  should_failslab+0xc2/0x120
[  530.787615][T14922]  __kmalloc_noprof+0xeb/0x910
[  530.787632][T14922]  ? lsm_blob_alloc+0x68/0x90
[  530.787657][T14922]  ? lsm_blob_alloc+0x68/0x90
[  530.787678][T14922]  lsm_blob_alloc+0x68/0x90
[  530.787699][T14922]  security_sk_alloc+0x2f/0x270
[  530.787716][T14922]  sk_prot_alloc+0xfb/0x2a0
[  530.787742][T14922]  sk_alloc+0x36/0xe30
[  530.787760][T14922]  inet6_create+0x381/0x12b0
[  530.787785][T14922]  ? inet6_create+0x7f/0x12b0
[  530.787810][T14922]  __sock_create+0x339/0x8a0
[  530.787828][T14922]  smc_create_clcsk+0x37/0xd0
[  530.787855][T14922]  ? __pfx_smc_inet_init_sock+0x10/0x10
[  530.787872][T14922]  inet6_create+0xb30/0x12b0
[  530.787897][T14922]  ? inet6_create+0x7f/0x12b0
[  530.787923][T14922]  __sock_create+0x339/0x8a0
[  530.787941][T14922]  __sys_socket+0x14d/0x260
[  530.787958][T14922]  ? __pfx___sys_socket+0x10/0x10
[  530.787974][T14922]  ? xfd_validate_state+0x61/0x180
[  530.787988][T14922]  ? __pfx_do_writev+0x10/0x10
[  530.788012][T14922]  __x64_sys_socket+0x72/0xb0
[  530.788027][T14922]  ? lockdep_hardirqs_on+0x7c/0x110
[  530.788050][T14922]  do_syscall_64+0xcd/0xf80
[  530.788065][T14922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.788081][T14922] RIP: 0033:0x7fb359f8f7c9
[  530.788094][T14922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  530.788110][T14922] RSP: 002b:00007fb35ae2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  530.788125][T14922] RAX: ffffffffffffffda RBX: 00007fb35a1e5fa0 RCX: 00007fb359f8f7c9
[  530.788135][T14922] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a
[  530.788144][T14922] RBP: 00007fb35a013f91 R08: 0000000000000000 R09: 0000000000000000
[  530.788153][T14922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  530.788162][T14922] R13: 00007fb35a1e6038 R14: 00007fb35a1e5fa0 R15: 00007ffc283ef428
[  530.788181][T14922]  </TASK>
[  531.179201][T14268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.254343][T14268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.287201][T14268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  531.360494][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1839'.
[  531.483015][T14268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.491612][T14268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.640628][   T31] INFO: task kworker/u8:7:1164 blocked for more than 143 seconds.
[  531.674167][   T31]       Tainted: G     U  W    L XTNJ syzkaller #0
[  531.680720][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  531.737238][   T31] task:kworker/u8:7    state:D stack:25480 pid:1164  tgid:1164  ppid:2      task_flags:0x4208060 flags:0x00080000
[  531.804405][   T31] Workqueue: netns cleanup_net
[  531.809253][   T31] Call Trace:
[  531.812556][   T31]  <TASK>
[  531.848420][T14787] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht'
[  531.856807][   T31]  ? __schedule+0x10b9/0x6150
[  531.861538][   T31]  __schedule+0x1139/0x6150
[  531.884068][   T31]  ? __lock_acquire+0x436/0x2890
[  531.889107][   T31]  ? __pfx___schedule+0x10/0x10
[  531.924325][   T31]  ? find_held_lock+0x2b/0x80
[  531.929157][   T31]  ? schedule+0x2d7/0x3a0
[  531.944010][   T31]  schedule+0xe7/0x3a0
[  531.948146][   T31]  schedule_timeout+0x257/0x290
[  531.994094][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  531.999561][   T31]  ? mark_held_locks+0x49/0x80
[  532.043948][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  532.049231][   T31]  __wait_for_common+0x2fc/0x4e0
[  532.074343][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  532.079789][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  532.111554][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  532.133946][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  532.139839][   T31]  __flush_workqueue+0x3e2/0x1230
[  532.149499][T11979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.162930][T11979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.180786][   T31]  ? __pfx___might_resched+0x10/0x10
[  532.203908][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  532.209451][   T31]  ? __pfx_var_wake_function+0x10/0x10
[  532.243942][   T31]  rxrpc_destroy_all_locals+0x40/0x180
[  532.249481][   T31]  rxrpc_exit_net+0x8b/0xc0
[  532.274663][   T31]  ? __pfx_rxrpc_exit_net+0x10/0x10
[  532.279928][   T31]  ops_undo_list+0x2ee/0xab0
[  532.333898][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  532.339186][   T31]  ? cleanup_net+0x347/0x830
[  532.344323][   T31]  ? idr_destroy+0x62/0x2e0
[  532.348872][   T31]  cleanup_net+0x41b/0x830
[  532.354506][T13754] Bluetooth: hci13: command tx timeout
[  532.373500][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  532.423825][   T31]  ? rcu_is_watching+0x12/0xc0
[  532.443780][   T31]  process_one_work+0x9ba/0x1b20
[  532.448757][   T31]  ? __pfx_process_one_work+0x10/0x10
[  532.485254][   T31]  ? assign_work+0x1a0/0x250
[  532.489912][   T31]  worker_thread+0x6c8/0xf10
[  532.524908][   T31]  ? __pfx_worker_thread+0x10/0x10
[  532.530084][   T31]  kthread+0x3c5/0x780
[  532.553736][   T31]  ? __pfx_kthread+0x10/0x10
[  532.558412][   T31]  ? rcu_is_watching+0x12/0xc0
[  532.563215][   T31]  ? __pfx_kthread+0x10/0x10
[  532.603783][   T31]  ret_from_fork+0x983/0xb10
[  532.608451][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  532.633756][   T31]  ? __switch_to+0x7af/0x10d0
[  532.639482][   T31]  ? __pfx_kthread+0x10/0x10
[  532.649237][   T31]  ret_from_fork_asm+0x1a/0x30
[  532.663783][   T31]  </TASK>
[  532.674093][   T31] INFO: task syz.2.1287:12068 blocked for more than 144 seconds.
[  532.722068][   T31]       Tainted: G     U  W    L XTNJ syzkaller #0
[  532.743329][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  532.762642][   T31] task:syz.2.1287      state:D stack:27080 pid:12068 tgid:12050 ppid:5833   task_flags:0x400140 flags:0x00080002
[  532.774741][   T31] Call Trace:
[  532.778034][   T31]  <TASK>
[  532.780976][   T31]  ? __schedule+0x10b9/0x6150
[  532.785847][   T31]  __schedule+0x1139/0x6150
[  532.790423][   T31]  ? __lock_acquire+0x436/0x2890
[  532.795549][   T31]  ? __pfx___schedule+0x10/0x10
[  532.800426][   T31]  ? find_held_lock+0x2b/0x80
[  532.805509][   T31]  ? schedule+0x2d7/0x3a0
[  532.809879][   T31]  schedule+0xe7/0x3a0
[  532.814534][   T31]  schedule_timeout+0x257/0x290
[  532.819426][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  532.826146][   T31]  ? mark_held_locks+0x49/0x80
[  532.830947][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  532.846120][   T31]  __wait_for_common+0x2fc/0x4e0
[  532.851145][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  532.857020][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  532.862524][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  532.869338][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  532.875708][   T31]  __flush_workqueue+0x3e2/0x1230
[  532.880788][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  532.886743][   T31]  ? rxrpc_discard_prealloc+0xb6/0x9c0
[  532.892229][   T31]  ? rxrpc_release_calls_on_socket+0x237/0x4e0
[  532.898933][   T31]  rxrpc_release+0x2a7/0x6a0
[  532.903948][   T31]  sock_release+0x91/0x1d0
[  532.908421][   T31]  afs_open_socket+0x334/0x400
[  532.913213][   T31]  ? __pfx_afs_open_socket+0x10/0x10
[  532.919886][   T31]  ? proc_create_net_single_write+0x149/0x1b0
[  532.926359][   T31]  ? __pfx_proc_create_net_single_write+0x10/0x10
[  532.933235][   T31]  afs_net_init+0x825/0xb00
[  532.938650][   T31]  ? __pfx_afs_net_init+0x10/0x10
[  532.944573][   T31]  ops_init+0x1e2/0x5f0
[  532.948777][   T31]  setup_net+0x11d/0x3a0
[  532.953055][   T31]  ? __pfx_setup_net+0x10/0x10
[  532.959107][   T31]  ? lockdep_init_map_type+0x5c/0x270
[  532.964880][   T31]  ? mutex_init_lockep+0x110/0x150
[  532.970027][   T31]  copy_net_ns+0x351/0x7c0
[  532.974936][   T31]  create_new_namespaces+0x3ea/0xab0
[  532.980271][   T31]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  532.986455][   T31]  ksys_unshare+0x45b/0xa40
[  532.991007][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  532.997028][   T31]  ? do_user_addr_fault+0x843/0x1370
[  533.002363][   T31]  __x64_sys_unshare+0x31/0x40
[  533.007543][   T31]  do_syscall_64+0xcd/0xf80
[  533.012076][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.018451][   T31] RIP: 0033:0x7f0176d8f7c9
[  533.022885][   T31] RSP: 002b:00007f0177bf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  533.032183][   T31] RAX: ffffffffffffffda RBX: 00007f0176fe6270 RCX: 00007f0176d8f7c9
[  533.041352][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  533.050315][   T31] RBP: 00007f0176e13f91 R08: 0000000000000000 R09: 0000000000000000
[  533.066879][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  533.075387][   T31] R13: 00007f0176fe6308 R14: 00007f0176fe6270 R15: 00007ffdeffc4be8
[  533.083544][   T31]  </TASK>
[  533.103451][   T31] INFO: task syz.1.1296:12102 blocked for more than 144 seconds.
[  533.111213][   T31]       Tainted: G     U  W    L XTNJ syzkaller #0
[  533.143479][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  533.152787][   T31] task:syz.1.1296      state:D stack:27080 pid:12102 tgid:12099 ppid:5835   task_flags:0x400140 flags:0x00080002
[  533.183419][   T31] Call Trace:
[  533.186754][   T31]  <TASK>
[  533.189706][   T31]  ? __schedule+0x10b9/0x6150
[  533.213416][   T31]  __schedule+0x1139/0x6150
[  533.217996][   T31]  ? __lock_acquire+0x436/0x2890
[  533.222978][   T31]  ? __pfx___schedule+0x10/0x10
[  533.243380][   T31]  ? find_held_lock+0x2b/0x80
[  533.248126][   T31]  ? schedule+0x2d7/0x3a0
[  533.253081][   T31]  schedule+0xe7/0x3a0
[  533.263430][   T31]  schedule_timeout+0x257/0x290
[  533.268348][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  533.293425][   T31]  ? mark_held_locks+0x49/0x80
[  533.298255][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  533.322177][   T31]  __wait_for_common+0x2fc/0x4e0
[  533.333562][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  533.339392][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  533.373322][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  533.378560][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  533.393788][   T31]  __flush_workqueue+0x3e2/0x1230
[  533.398892][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  533.423369][   T31]  ? rxrpc_discard_prealloc+0xb6/0x9c0
[  533.428906][   T31]  ? rxrpc_release_calls_on_socket+0x237/0x4e0
[  533.443280][   T31]  rxrpc_release+0x2a7/0x6a0
[  533.447952][   T31]  sock_release+0x91/0x1d0
[  533.452404][   T31]  afs_open_socket+0x334/0x400
[  533.473333][   T31]  ? __pfx_afs_open_socket+0x10/0x10
[  533.480012][   T31]  ? proc_create_net_single_write+0x149/0x1b0
[  533.486293][   T31]  ? __pfx_proc_create_net_single_write+0x10/0x10
[  533.492754][   T31]  afs_net_init+0x825/0xb00
[  533.497430][   T31]  ? __pfx_afs_net_init+0x10/0x10
[  533.502486][   T31]  ops_init+0x1e2/0x5f0
[  533.507163][   T31]  setup_net+0x11d/0x3a0
[  533.511414][   T31]  ? __pfx_setup_net+0x10/0x10
[  533.516248][   T31]  ? lockdep_init_map_type+0x5c/0x270
[  533.521635][   T31]  ? mutex_init_lockep+0x110/0x150
[  533.526924][   T31]  copy_net_ns+0x351/0x7c0
[  533.531421][   T31]  create_new_namespaces+0x3ea/0xab0
[  533.536828][   T31]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  533.542897][   T31]  ksys_unshare+0x45b/0xa40
[  533.547536][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  533.552597][   T31]  ? xfd_validate_state+0x61/0x180
[  533.558679][   T31]  __x64_sys_unshare+0x31/0x40
[  533.563563][   T31]  do_syscall_64+0xcd/0xf80
[  533.568258][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.574245][   T31] RIP: 0033:0x7f5a6538f7c9
[  533.578680][   T31] RSP: 002b:00007f5a635f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  533.588622][   T31] RAX: ffffffffffffffda RBX: 00007f5a655e6180 RCX: 00007f5a6538f7c9
[  533.596918][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  533.604972][   T31] RBP: 00007f5a65413f91 R08: 0000000000000000 R09: 0000000000000000
[  533.612954][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  533.621314][   T31] R13: 00007f5a655e6218 R14: 00007f5a655e6180 R15: 00007ffe8f8742b8
[  533.629500][   T31]  </TASK>
[  533.649018][   T31] INFO: task syz.3.1316:12174 blocked for more than 145 seconds.
[  533.657956][   T31]       Tainted: G     U  W    L XTNJ syzkaller #0
[  533.666509][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  533.675339][   T31] task:syz.3.1316      state:D stack:26344 pid:12174 tgid:12173 ppid:5832   task_flags:0x400140 flags:0x00080002
[  533.687418][   T31] Call Trace:
[  533.690713][   T31]  <TASK>
[  533.693737][   T31]  ? __schedule+0x10b9/0x6150
[  533.698439][   T31]  __schedule+0x1139/0x6150
[  533.702951][   T31]  ? __pfx___schedule+0x10/0x10
[  533.707946][   T31]  ? find_held_lock+0x2b/0x80
[  533.712646][   T31]  ? schedule+0x2d7/0x3a0
[  533.717108][   T31]  schedule+0xe7/0x3a0
[  533.721204][   T31]  schedule_timeout+0x257/0x290
[  533.726375][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  533.731756][   T31]  ? mark_held_locks+0x49/0x80
[  533.736674][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  533.741902][   T31]  __wait_for_common+0x2fc/0x4e0
[  533.747226][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  533.752640][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  533.758246][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  533.764194][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  533.770046][   T31]  __flush_workqueue+0x3e2/0x1230
[  533.775177][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  533.780682][   T31]  ? rxrpc_discard_prealloc+0xb6/0x9c0
[  533.786204][   T31]  ? rxrpc_release_calls_on_socket+0x237/0x4e0
[  533.792400][   T31]  rxrpc_release+0x2a7/0x6a0
[  533.797478][   T31]  sock_release+0x91/0x1d0
[  533.801919][   T31]  afs_open_socket+0x334/0x400
[  533.806782][   T31]  ? __pfx_afs_open_socket+0x10/0x10
[  533.812089][   T31]  ? proc_create_net_single_write+0x149/0x1b0
[  533.818249][   T31]  ? __pfx_proc_create_net_single_write+0x10/0x10
[  533.824826][   T31]  afs_net_init+0x825/0xb00
[  533.829337][   T31]  ? __pfx_afs_net_init+0x10/0x10
[  533.834717][   T31]  ops_init+0x1e2/0x5f0
[  533.838903][   T31]  setup_net+0x11d/0x3a0
[  533.843234][   T31]  ? __pfx_setup_net+0x10/0x10
[  533.848025][   T31]  ? lockdep_init_map_type+0x5c/0x270
[  533.853834][   T31]  ? mutex_init_lockep+0x110/0x150
[  533.858978][   T31]  copy_net_ns+0x351/0x7c0
[  533.863493][   T31]  create_new_namespaces+0x3ea/0xab0
[  533.869234][   T31]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  533.883116][   T31]  ksys_unshare+0x45b/0xa40
[  533.887700][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  533.892769][   T31]  ? xfd_validate_state+0x61/0x180
[  533.897961][   T31]  __x64_sys_unshare+0x31/0x40
[  533.902737][   T31]  do_syscall_64+0xcd/0xf80
[  533.907349][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.913363][   T31] RIP: 0033:0x7f58a4b8f7c9
[  533.917773][   T31] RSP: 002b:00007f58a5ac9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  533.926242][   T31] RAX: ffffffffffffffda RBX: 00007f58a4de5fa0 RCX: 00007f58a4b8f7c9
[  533.934279][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  533.942241][   T31] RBP: 00007f58a4c13f91 R08: 0000000000000000 R09: 0000000000000000
[  533.950695][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  533.960208][   T31] R13: 00007f58a4de6038 R14: 00007f58a4de5fa0 R15: 00007fff890e6148
[  533.968904][   T31]  </TASK>
[  533.987248][   T31] 
[  533.987248][   T31] Showing all locks held in the system:
[  534.007330][   T31] 1 lock held by pool_workqueue_/3:
[  534.015757][   T31]  #0: ffffffff8e3d4c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  534.026439][   T31] 1 lock held by khungtaskd/31:
[  534.031307][   T31]  #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  534.041954][   T31] 3 locks held by kworker/u8:7/1164:
[  534.047352][   T31]  #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[  534.057920][   T31]  #1: ffffc900042b7c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[  534.071322][   T31]  #2: ffffffff9012f010 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830
[  534.080719][   T31] 1 lock held by klogd/5192:
[  534.085723][   T31]  #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  534.100999][   T31] 1 lock held by syz.2.1287/12068:
[  534.109688][   T31]  #0: ffffffff9012f010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[  534.120147][   T31] 1 lock held by syz.1.1296/12102:
[  534.125307][   T31]  #0: ffffffff9012f010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[  534.134836][   T31] 1 lock held by syz.3.1316/12174:
[  534.139949][   T31]  #0: ffffffff9012f010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[  534.149386][   T31] 1 lock held by syz.0.1345/12380:
[  534.154519][   T31]  #0: ffff888058a1d848 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270
[  534.167473][   T31] 3 locks held by kworker/u10:15/12691:
[  534.174452][   T31]  #0: ffff88813ff69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[  534.186242][   T31]  #1: ffffc900030a7c90 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[  534.201532][   T31]  #2: ffffffff901457e8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[  534.212633][   T31] 1 lock held by syz.4.1535/13380:
[  534.221217][   T31]  #0: ffffffff9012f010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[  534.231571][   T31] 1 lock held by syz.7.1596/13670:
[  534.236727][   T31]  #0: ffffffff9012f010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[  534.246248][   T31] 1 lock held by syz.5.1645/13899:
[  534.251385][   T31]  #0: ffffffff9012f010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[  534.261032][   T31] 1 lock held by syz.6.1658/13979:
[  534.268229][   T31]  #0: ffff8880994a1348 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270
[  534.280958][   T31] 1 lock held by syz.9.1659/13986:
[  534.286119][   T31]  #0: ffff8880994a7508 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270
[  534.297077][   T31] 1 lock held by syz.2.1733/14361:
[  534.305768][   T31]  #0: ffffffff9012f010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[  534.316944][   T31] 3 locks held by kworker/u10:33/14501:
[  534.322483][   T31]  #0: ffff88814ccd6948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[  534.337674][   T31]  #1: ffffc900169efc90 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[  534.349909][   T31]  #2: ffffffff901457e8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14f0
[  534.359710][   T31] 1 lock held by syz.1.1773/14544:
[  534.365034][   T31]  #0: ffffffff9012f010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[  534.378182][   T31] 1 lock held by syz-executor/14634:
[  534.383521][   T31]  #0: ffffffff901457e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  534.392968][   T31] 2 locks held by getty/14644:
[  534.397724][   T31]  #0: ffff88803149b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  534.411229][   T31]  #1: ffffc9001ac632f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510
[  534.421387][   T31] 5 locks held by syz-executor/14787:
[  534.428452][   T31]  #0: ffff888047708ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xc0
[  534.439009][   T31]  #1: ffff8880477080c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3af/0x1260
[  534.452749][   T31]  #2: ffffffff903c2ac8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x290
[  534.463093][   T31]  #3: ffff888043bd5338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760
[  534.474544][   T31]  #4: ffffffff8e3d4c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  534.485977][   T31] 1 lock held by syz.3.1826/14848:
[  534.491083][   T31]  #0: ffffffff901457e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  534.500807][   T31] 1 lock held by syz.8.1839/14932:
[  534.509573][   T31]  #0: ffffffff901457e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  534.519504][   T31] 
[  534.521883][   T31] =============================================
[  534.521883][   T31] 
[  534.530377][   T31] NMI backtrace for cpu 0
[  534.530400][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  534.530446][   T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  534.530457][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  534.530471][   T31] Call Trace:
[  534.530479][   T31]  <TASK>
[  534.530490][   T31]  dump_stack_lvl+0x116/0x1f0
[  534.530530][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  534.530562][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  534.530589][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  534.530623][   T31]  sys_info+0x133/0x180
[  534.530648][   T31]  watchdog+0xe66/0x1180
[  534.530691][   T31]  ? rcu_is_watching+0x12/0xc0
[  534.530726][   T31]  ? __pfx_watchdog+0x10/0x10
[  534.530759][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  534.530800][   T31]  ? __kthread_parkme+0x19e/0x250
[  534.530836][   T31]  ? __pfx_watchdog+0x10/0x10
[  534.530870][   T31]  kthread+0x3c5/0x780
[  534.530896][   T31]  ? __pfx_kthread+0x10/0x10
[  534.530923][   T31]  ? rcu_is_watching+0x12/0xc0
[  534.530955][   T31]  ? __pfx_kthread+0x10/0x10
[  534.530979][   T31]  ret_from_fork+0x983/0xb10
[  534.531004][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  534.531032][   T31]  ? __switch_to+0x7af/0x10d0
[  534.531064][   T31]  ? __pfx_kthread+0x10/0x10
[  534.531091][   T31]  ret_from_fork_asm+0x1a/0x30
[  534.531140][   T31]  </TASK>
[  534.531149][   T31] Sending NMI from CPU 0 to CPUs 1:
[  534.683492][    C1] NMI backtrace for cpu 1
[  534.683517][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  534.683572][    C1] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  534.683588][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  534.683605][    C1] RIP: 0010:stack_trace_consume_entry+0xe6/0x170
[  534.683656][    C1] Code: 8b 03 48 8d 2c e8 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 75 64 48 89 75 00 8b 43 08 39 43 10 0f 92 c0 <48> 83 c4 08 5b 5d e9 3f d8 cf 09 83 e8 01 89 43 0c 48 83 c4 08 b8
[  534.683685][    C1] RSP: 0018:ffffc90000a087f0 EFLAGS: 00000283
[  534.683707][    C1] RAX: 0000000000000001 RBX: ffffc90000a088d0 RCX: ffffc90000a08764
[  534.683726][    C1] RDX: 1ffff92000141135 RSI: ffffffff81aa596d RDI: ffffc90000a088dc
[  534.683745][    C1] RBP: ffffc90000a089a8 R08: 0000000000000001 R09: 000000000ac0d5af
[  534.683764][    C1] R10: 0000000000000002 R11: 000000000000aa4d R12: ffffffff81a8ea70
[  534.683782][    C1] R13: ffffc90000a088d0 R14: 0000000000000000 R15: ffff88801da85b80
[  534.683800][    C1] FS:  0000000000000000(0000) GS:ffff8881249fa000(0000) knlGS:0000000000000000
[  534.683826][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  534.683844][    C1] CR2: 00005629f6abb000 CR3: 00000000319e4000 CR4: 00000000003526f0
[  534.683862][    C1] Call Trace:
[  534.683870][    C1]  <IRQ>
[  534.683880][    C1]  ? unwind_get_return_address+0x59/0xa0
[  534.683918][    C1]  arch_stack_walk+0x88/0x100
[  534.683954][    C1]  ? hrtimer_run_softirq+0x17d/0x350
[  534.683993][    C1]  stack_trace_save+0x8e/0xc0
[  534.684033][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  534.684076][    C1]  ? __lock_acquire+0x436/0x2890
[  534.684102][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  534.684133][    C1]  ? mac80211_hwsim_beacon+0x105/0x1b0
[  534.684176][    C1]  kasan_save_stack+0x33/0x60
[  534.684213][    C1]  ? kasan_save_stack+0x33/0x60
[  534.684247][    C1]  ? kasan_save_track+0x14/0x30
[  534.684283][    C1]  ? kasan_save_free_info+0x3b/0x60
[  534.684318][    C1]  ? __kasan_slab_free+0x5f/0x80
[  534.684354][    C1]  ? kmem_cache_free+0x2d8/0x770
[  534.684388][    C1]  ? kfree_skbmem+0x1a4/0x1f0
[  534.684413][    C1]  ? consume_skb+0xcc/0x100
[  534.684450][    C1]  ? mac80211_hwsim_tx_frame+0x1f9/0x2a0
[  534.684481][    C1]  ? mac80211_hwsim_beacon_tx+0x595/0xa40
[  534.684512][    C1]  ? __iterate_interfaces+0x2e5/0x650
[  534.684554][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  534.684583][    C1]  ? mac80211_hwsim_beacon+0x105/0x1b0
[  534.684624][    C1]  ? __hrtimer_run_queues+0x202/0xc40
[  534.684658][    C1]  ? hrtimer_run_softirq+0x17d/0x350
[  534.684715][    C1]  kasan_save_track+0x14/0x30
[  534.684751][    C1]  kasan_save_free_info+0x3b/0x60
[  534.684781][    C1]  __kasan_slab_free+0x5f/0x80
[  534.684818][    C1]  kmem_cache_free+0x2d8/0x770
[  534.684852][    C1]  ? kfree_skbmem+0x1a4/0x1f0
[  534.684880][    C1]  ? kfree_skbmem+0x1a4/0x1f0
[  534.684905][    C1]  kfree_skbmem+0x1a4/0x1f0
[  534.684931][    C1]  consume_skb+0xcc/0x100
[  534.684969][    C1]  mac80211_hwsim_tx_frame+0x1f9/0x2a0
[  534.685003][    C1]  mac80211_hwsim_beacon_tx+0x595/0xa40
[  534.685041][    C1]  __iterate_interfaces+0x2e5/0x650
[  534.685083][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  534.685118][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  534.685151][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  534.685192][    C1]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  534.685225][    C1]  mac80211_hwsim_beacon+0x105/0x1b0
[  534.685267][    C1]  __hrtimer_run_queues+0x202/0xc40
[  534.685307][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  534.685347][    C1]  ? read_tsc+0x9/0x20
[  534.685388][    C1]  hrtimer_run_softirq+0x17d/0x350
[  534.685425][    C1]  handle_softirqs+0x219/0x950
[  534.685465][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  534.685506][    C1]  __irq_exit_rcu+0x109/0x170
[  534.685542][    C1]  irq_exit_rcu+0x9/0x30
[  534.685577][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  534.685619][    C1]  </IRQ>
[  534.685628][    C1]  <TASK>
[  534.685638][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  534.685669][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  534.685710][    C1] Code: c6 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 b7 14 00 fb f4 <e9> cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  534.685737][    C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6
[  534.685757][    C1] RAX: 00000000003c5f9b RBX: 0000000000000001 RCX: ffffffff8b75a6d9
[  534.685774][    C1] RDX: 0000000000000000 RSI: ffffffff8dacb106 RDI: ffffffff8bf2b600
[  534.685792][    C1] RBP: ffffed1003b50b70 R08: 0000000000000001 R09: ffffed10170a673d
[  534.685810][    C1] R10: ffff8880b85339eb R11: ffff88801da866b0 R12: 0000000000000001
[  534.685828][    C1] R13: ffff88801da85b80 R14: ffffffff9088f1d0 R15: 0000000000000000
[  534.685851][    C1]  ? ct_kernel_exit+0x139/0x190
[  534.685880][    C1]  default_idle+0x13/0x20
[  534.685906][    C1]  default_idle_call+0x6c/0xb0
[  534.685935][    C1]  do_idle+0x38d/0x510
[  534.685970][    C1]  ? __pfx_do_idle+0x10/0x10
[  534.686008][    C1]  cpu_startup_entry+0x4f/0x60
[  534.686043][    C1]  start_secondary+0x21d/0x2d0
[  534.686068][    C1]  ? __pfx_start_secondary+0x10/0x10
[  534.686096][    C1]  common_startup_64+0x13e/0x148
[  534.686138][    C1]  </TASK>
[  535.266500][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  535.273425][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  535.284139][   T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  535.294188][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  535.304254][   T31] Call Trace:
[  535.307520][   T31]  <TASK>
[  535.310434][   T31]  dump_stack_lvl+0x3d/0x1f0
[  535.315023][   T31]  vpanic+0x640/0x6f0
[  535.318999][   T31]  panic+0xca/0xd0
[  535.322706][   T31]  ? __pfx_panic+0x10/0x10
[  535.327123][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  535.333213][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[  535.339366][   T31]  ? nmi_trigger_cpumask_backtrace+0x2be/0x300
[  535.345513][   T31]  ? watchdog+0xe83/0x1180
[  535.349922][   T31]  ? watchdog+0xe76/0x1180
[  535.354355][   T31]  watchdog+0xe94/0x1180
[  535.358594][   T31]  ? rcu_is_watching+0x12/0xc0
[  535.363361][   T31]  ? __pfx_watchdog+0x10/0x10
[  535.368037][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  535.373239][   T31]  ? __kthread_parkme+0x19e/0x250
[  535.378293][   T31]  ? __pfx_watchdog+0x10/0x10
[  535.382992][   T31]  kthread+0x3c5/0x780
[  535.387052][   T31]  ? __pfx_kthread+0x10/0x10
[  535.391639][   T31]  ? rcu_is_watching+0x12/0xc0
[  535.396424][   T31]  ? __pfx_kthread+0x10/0x10
[  535.401012][   T31]  ret_from_fork+0x983/0xb10
[  535.405613][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  535.410712][   T31]  ? __switch_to+0x7af/0x10d0
[  535.415388][   T31]  ? __pfx_kthread+0x10/0x10
[  535.419973][   T31]  ret_from_fork_asm+0x1a/0x30
[  535.424839][   T31]  </TASK>
[  535.431732][   T31] Kernel Offset: disabled
[  535.436058][   T31] Rebooting in 86400 seconds..