last executing test programs:

2m37.822519534s ago: executing program 3 (id=858):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000002280), r1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00'})
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x404240, 0x0)
sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf252d"], 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x20008004)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000005e00)={0xc, 0xf1, "82a0d48cb31f0af600000004"}, 0x80000001)
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x80000000}, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
listen$auto(0x3, 0x81)
sysfs$auto(0x2, 0x23, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/mnt\x00')
setns(r3, 0x0)
fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
socket(0x2, 0x2, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4001af84, 0x0)
ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0)

2m35.714436409s ago: executing program 1 (id=861):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000)
mprotect$auto(0x1000, 0x401000, 0x4)
mmap$auto(0xfffffffffffffff7, 0x0, 0x5, 0x10, r1, 0x2)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000000)="2dc2f4045de01fe67fa93d2c44e76f", 0xf)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x29, 0x2, 0xfffffdb2)
socket(0xa, 0x801, 0x84)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
setfsuid$auto(0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000200)=0x89)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x1, 0x0)
mremap$auto(0x772, 0x6, 0x7, 0x8000, 0x100000000)

2m35.499149265s ago: executing program 3 (id=863):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xb, 0xa, 0x300)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x9, 0x6, 0x1)
r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/remaddr\x00', 0x0, 0x0)
pread64$auto(r2, 0x0, 0xad2, 0x4000fd)
connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
io_uring_setup$auto(0x1, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
sendfile$auto(0x1, r1, 0x0, 0x40000000c07)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}})
r3 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r3, 0x8000)

2m33.977868809s ago: executing program 3 (id=867):
openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_options\x00', 0x60243, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32)
r0 = io_uring_setup$auto(0x6, 0x0) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r1)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, 0x0, 0x800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async)
syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0xa, 0x0) (async, rerun: 32)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) (rerun: 32)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r4 = open(0x0, 0x4242, 0xe1d2b27bdc14aabc)
fallocate$auto(r4, 0x5, 0x7, 0x4cbd5d) (async, rerun: 32)
rename$auto(0x0, 0x0) (async, rerun: 32)
r5 = getpid()
process_vm_readv$auto(r5, 0x0, 0x7ffffffff, &(0x7f0000000280)={&(0x7f00000003c0)="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", 0x1ffffffff}, 0x6, 0xfffffffffffffc01) (async)
sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000f15d3837fb53f371438686e3c06158380117573a086a4c91bb80dd65d741db8d53d12651dd63ed0216c467eac9f5f81dd54ab644d0c51315abea185dae453eb0f5fb6579f95437d3a4d5a8058e29cd9725059", @ANYRES16=r2, @ANYBLOB="020029bd7000fcdbdf251f0000000500060007000000050006002000000008000200010100000500040006000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async)
r6 = socket(0xf, 0x2, 0x0)
socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) (async)
r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0)
ioctl$auto(r7, 0xc0045627, r6)

2m32.782809344s ago: executing program 3 (id=869):
mmap$auto(0x0, 0x2000d, 0x91, 0xebd, 0xffffffffffffffff, 0x20000010008000)
io_uring_setup$auto(0x5, 0x0) (async)
io_uring_setup$auto(0x5, 0x0)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "01e983638bffff4993021400"}, 0x1c)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef)
mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') (async)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e')
open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0xb3)
close_range$auto(0x2, 0xa, 0x0)
acct$auto(&(0x7f00000001c0)='/dev/cuse\x00')

2m31.715306588s ago: executing program 3 (id=872):
r0 = socket(0xa, 0x4, 0x9000300)
sendfile$auto(r0, r0, 0x0, 0x8001)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x55d042, 0x0)
preadv2$auto(r1, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f)
fanotify_init$auto(0xf8, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r2 = gettid()
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r3, 0x65, 0x7, 0x0, 0x4)
r4 = getpid()
rt_tgsigqueueinfo$auto(r4, r2, 0xb, &(0x7f0000000400)={@siginfo_0_0={0x1, 0x6, 0x81, @_sigpoll={0x2}}})
socket(0xa, 0x801, 0x84)
unshare$auto(0x40000080)
ioctl$auto(0xffffffffffffffff, 0x921064a0, 0xffffffffffffffff)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0x20499d, 0x9)

2m31.3759391s ago: executing program 1 (id=873):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xb, 0xa, 0x300)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x9, 0x6, 0x1)
r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/remaddr\x00', 0x0, 0x0)
pread64$auto(r2, 0x0, 0xad2, 0x4000fd)
connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
io_uring_setup$auto(0x1, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
sendfile$auto(0x1, r1, 0x0, 0x40000000c07)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}})
r3 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r3, 0x8000)

2m30.292772076s ago: executing program 1 (id=877):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0)
r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0)
poll$auto(&(0x7f0000000040)={r0, 0x1000, 0x1c9}, 0x2, 0x7)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0)
mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0xaaa41, 0x0)
socket(0x2, 0x1, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x10001)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x20000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
ioctl$auto(r3, 0x92106405, r3)
close_range$auto(0x2, 0xa, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0)
ioctl$auto(r4, 0xc0285629, r4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
madvise$auto(0x110d230000, 0x1, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/teql0/addr_len\x00', 0x101000, 0x0)

2m29.933501993s ago: executing program 3 (id=878):
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000)
madvise$auto(0x8000, 0x87fff, 0xc)
mmap$auto(0x20, 0x400008, 0xdf, 0x9b72, 0x2, 0x2)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x43, 0x0)
fsopen$auto(0x0, 0x1)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, <r1=>0xffffffffffffffff, [], {0x0, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}})
r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
ioctl$auto(0x1, 0x541b, 0x8)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7)
setpgid$auto(0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x400000000001, 0x5, 0x4, 0x15f4da0e, 0xffffffff, 0x4, 0x100000000000000c, 0x8, 0x7ffffffffffffffe, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000)
close_range$auto(r3, r1, 0x383f)
mmap$auto(0x0, 0x202000a, 0x3, 0xeb4, r0, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x200}, @NFSD_A_SERVER_SCOPE={0x17, 0x4, '/dev/snd/controlC0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)
sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

2m29.490528836s ago: executing program 1 (id=881):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r0)
sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1423eaa70d1205d207de120958fccc93c0492bdc1efb3bccde809f2cac6369a2b4071e407d84b6425045955b688483a141336ba49e447eb5905579288d3d8de6fba5857e5cba22cab65d89af4bb4f21d9c5000b49ab7c68d4220", @ANYRES16=r1, @ANYBLOB="010028bd7010ffdbdf25010000"], 0x14}, 0x1, 0x0, 0x0, 0x4048003}, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a})
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
madvise$auto(0x0, 0x200007, 0x19)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyec\x00', 0x20000, 0x0)
write$auto_console_fops_tty_io(r2, &(0x7f0000000800)="00c647c4ed95adcf6649266e0af2dc4be6b337c75f550d903ccd7fe907b705bdc5baf26c5a43a16a80ce51209f1ad02736136ea060ec362800d380d41e977f64343c4d3ea61fc807196b63daf85d0c909bb2fc22db6576718343dc9e1bab28089001d669278c8e66e877aa337fab5a990e3c33a7a68d75b16dacfde32887d36b5027a8660f799fa58a478580", 0x8c)
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x40400, 0x48)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/devices/virtual/block/ram11/events_poll_msecs\x00', 0x20681, 0x0)
r5 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r5, 0x29, 0x42, 0x0, 0x1)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)='-7', 0x2)
pselect6$auto(0x9, &(0x7f0000000000)={[0x400000000000008, 0x94a4, 0xf, 0x6, 0x8001, 0xeb2, 0xfff, 0x9, 0x3, 0xfffffffc, 0x8000000000000001, 0x0, 0x2f, 0x6, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x80000000, 0x100000000, 0x5)
futex_requeue$auto(&(0x7f0000000080)={0xb, 0x20000000000006, 0x7f}, 0x0, 0xf, 0x9)
fchmod$auto(r3, 0x9)
ioctl$auto_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
r6 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r6, &(0x7f0000000440)="1100000007000000000000000000000001", 0x11)
mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio1\x00', 0x10000, 0x0)
ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000580)={<r7=>r6, &(0x7f0000000200)="fdaa645986d71f85fca306a4b43fa4", 0x4, &(0x7f00000002c0)="86bb9584a790cdea6652ebe171eabf30877c9f82f845dc2b407b5759cdc0c8df9278fb86764bc93655f70495c50217d92e625f48b0cb01abd5b4f9b5cd86bf893fd10867fadbd482088739c5a116aaed4b10ecd6756e9541287a90941bf10f089f962dc562079cfdfa3f47d301fecd5aa59136138a066de98917ad9f3bc3aa3d7909019521", 0x6, &(0x7f0000000480)="765ead3b2dfb7af306f1e3dafa288676de53c3b624cf92fcedb59068aa1178d3a89ee0be19db285bc786a285182cfec200dc34123c7a3349fb0748dd1a9ca93453a684603a9d606bd796ab46ad2b8e838052f948102865c843331c052b8f85a7f23e8280cf51c2e3eb32b0606bead73799f8052f338b2e3e4a5ca07770a936ba56a141f91c138c65eb2ee4159d84e06023516f57d9b8eab059af59dd16b5", &(0x7f0000000540)=0x927})
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="28010000", @ANYRES16=r8, @ANYBLOB="00042bbd7000fddbdf25810000000500a2000300000006001a0105000000ca004f004255e27a50c9e6fdd674662bbc08114d63db34c59bef389bf802df8a9d2f38e975510adfb4bed81b47ee2523929ef7ca2f475725b043e0b20c4e8fbe488109ed0ac42f7771a621a463260205262e8d606cd92dce64b58e7128cb55c12660ee5b766e16da88e709c7ff12d607aea3a0b82217ad27dc41a116af1224c18664ecaf6de37ed389952db9cc138deee407ff2b0be4aea2903a10b69fc955354905e3ce42f4cc8c7d4fc449db74e4c3317bbf99033927b773f462fe569622db8db98bc3253c55fb9e0500000800a500000000001e00940034987a9032e0c41c7b618841493bcd06626bf1b93bb49e53e75800000800ef0005000000"], 0x120}, 0x1, 0x0, 0x0, 0xc0}, 0x10)

2m28.439172539s ago: executing program 1 (id=882):
unshare$auto(0x1ffc0) (async)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
getsockopt$auto_SO_BSDCOMPAT(r0, 0xffffffff, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00982a", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x24040080) (async)
mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) (async)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x3}, 0x8, 0xffffffffffffffff, 0x8000000000000, 0x2f) (async)
mkdir$auto(&(0x7f0000000340)='}[,&*}\x00', 0x6) (async)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async)
open$dir(&(0x7f00000002c0)='}[,&*}\x00', 0x2000, 0x71) (async)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x80, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/192, 0xc0) (async)
bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3}, 0x7fffffff) (async)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sg1\x00', 0x26100, 0x0)
ioctl$auto_BLKTRACESTOP2(r4, 0x1275, 0x0)
openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x0, 0x0) (async)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0xa001, 0x0)
write$auto(r5, &(0x7f0000000640)='7\x00\\\xa0\x04|\xfe\xca\x12\xfa\b\x1c\xc7k\xff\xfe\x8e\xaf\xeeu~\a\xc0/(d\n\x05\x13EE\xf0\xad\r\xcb\xd3\xa83\xda}v\xcc\xfb\xcdm\x8f\nd\xca+4i{G\x18\x81J\x92\xf7\xc5,H\x88\xf6KRg\xab\xf2<^\xc7\x8fG# \x06\xc8!\x177GA\x84n\x0e\xa3\xa1\xdb\x8au\xf1\xee\xb25\x04 \x16\xbd\x9d\xa1;>\x99\x8d\x1d\x83>\xf5cE\x06\xe8\xb8\xc1)\x15\xe8\x1a\xef{\xfd\x19\xa6\x84V\x7f\xf5\x9f\xf0\xa4\x1b\xf7\xa5\x91.q\xc21k\n\xca\x91L/{d\xf6#\xb5\xb4\x01\xc2/\xdf\xb4\x89y|\xc7^c,\xf3\x98\x9fo\xaa\xb1\xbf\x92\x9bX\xc8\x8f\x13\x10K+~\xde\x00gib\x8a\xebm\xc1\n\xf4\x8a\x9eQ\xea\xa4\xb4\x16?*$\x1a\b\xa7\x8e\xe7dd[\rWN\xc8<\x8a:\\\x98\xc3yX?\xfd3\x06\xaf\xb10\x11 \x836\xb7\xe1+\xe3|B\xe7\xc6H\fS\xe5Y@\xdfZ\xdf\x9e\xd0\xa6\r\x94\xf6\xe0\xe1\x98v\x8d\x06\xfa\x06$\xf9s\xdb\x9c\xfd\xf5\xa3\xa1\x1a\x96b]}\x86\xc1\x84\xe4\xfc\x17\xe4\xaa\x8dL\x11uO\xd8Y\x17\xc4FK\x8b\x05\xcd\xe2J\xf60oA\x91\xf0]J\xf6m\xf2\xe51\x1b\x89\xe86\xd3\xc9\xc5\xe6\xd9B7P\xbb\xb6\xf4s\x8cl\x03tJ\xfa;&\xa4\xce\xc0\x9b\xc4w)\x9f~\x8d\xc9S\x8e\xf0+\x14\xaf\xd9]*\xe5L\xc5\x0e\xf1\f j\x8c\n\\#\x8dY\f\xa4\x16\x80\xe1K\xacW\xa8\xcaf\xac\xc0\xd8\xc5S*\xe8\xfd\xc1FK\x878\xce\xea2\x11J\x8aMF\x13W\x9ePL\x91\x17fs}\xfb\xa9\xf3\xbdi\xd2\xcaR\xf2\xb29ed/\xe3QA\x17\xf2\xf2,\xc5\f\"}\x9a^\xd8\xc7M~x<\x94^\x18bo\xc1\\\x9a\x1a\xa7A\xcd\x06n]\xca\xdf`J\x99\x97h\xac\xf3J\x1d\xf5;\'@Q\x1d\xeed\x96\xf7\xa6\xd1:\x1fM\xdd(Y>gH\x93\xe5\xdaE\x85\xa0\x85\xb4\b\xad\xfa,\xe1\xd3P\x0f\xd7\x01a\xeb\x94\x0fm\x19\xb4\xab\x02\xe6\x80\xb9\x982\xa0\xa0', 0xffffffffffffffff) (async)
r6 = getpid()
process_vm_readv$auto(r6, 0x0, 0x5, &(0x7f0000000480)={&(0x7f00000003c0)="5d4846965d0b30daa3e6601c064002004ef4e3449da9de6d8e81b8ef5ba7539963c8a299f8bf8f816d2fd597aff09165fb11db610530b5ff686981cc7cb546f1a6192dc51d47abb1d077af445519b9844596b7f246681246ac9d2c851ac3803d504a303643768bea050522be34f77c5e0127fe6b3aeb745f71b0d241ed3a8abec0e46b13b787c00958c3d840b59099cb02f74d9cce7e86f05e60a70ef0a00d046c010000000000000000"}, 0x6, 0x0) (async)
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r7, 0x10f, 0x87, 0x0, 0x14)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
listen$auto(r0, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu7\x00', 0x17870eeaacc1b3d8, 0x0)
dup$auto(0xffffffffffffffff) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x1314c0, 0x0) (async)
r8 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0)
writev$auto(r8, &(0x7f0000000000)={&(0x7f0000000340), 0x101}, 0x2)

2m28.019453236s ago: executing program 1 (id=883):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r0, 0x0, 0xffffffff, 0x4, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
readlink$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='+/)*[[.!.\x00', 0x100)
close_range$auto(0x2, 0x8, 0x0)
r3 = io_uring_setup$auto(0x6075, 0x0)
close_range$auto(0x2, 0x8, 0x0)
clone$auto(0x1000000020003b46, 0x2, 0x0, 0x0, 0x2)
pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r3, 0x7, 0x0, 0x4)
acct$auto(&(0x7f00000002c0)='/dev/rfkill\x00')
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon27\x00', 0x101042, 0x0)
acct$auto(&(0x7f0000000000)='/dev/rfkill\x00')
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r4, &(0x7f0000000440)="1100000000000000000000000000010000", 0x11)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
getsockopt$auto_SO_DEBUG(r4, 0x1, 0x1, &(0x7f0000000100)='},:(.!/\x00', &(0x7f00000001c0))
getpid()

2m20.939841051s ago: executing program 0 (id=913):
r0 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/netdevsim/netdevsim1/ports/0/ethtool/pause/report_stats_rx\x00', 0x22001, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
poll$auto(&(0x7f0000000d40)={0x3, 0xffff, 0xa}, 0x5, 0x400)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffc0000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000)
close_range$auto(0x2, 0x8, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
r4 = epoll_create$auto(0x70c)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0)
bpf$auto(0x5, 0x0, 0x39)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0x100085)
syz_clone3(0x0, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
epoll_ctl$auto(r4, 0x1, 0xffffffffffffffff, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/4/effective_affinity\x00', 0x0, 0x0)
pread64$auto(r6, 0x0, 0x9, 0x9)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
write$auto(0x3, 0x0, 0xffd8)
socket(0x1e, 0x4, 0x2)
open(0x0, 0x161342, 0x100)
ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0)
readv$auto(r0, &(0x7f0000000b80)={0x0, 0x1}, 0x2)

2m20.896494765s ago: executing program 0 (id=914):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0x4, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0xfffffffffffffffe, 0x7, 0x6, 0x7f, 0x400, 0x1, 0xa, 0x4, 0x200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x42, 0xfffffffffffffffe, 0x4, 0x7, 0x0, 0x8, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0x83, 0x1, 0x6, 0x0, 0x0, 0x7, 0x6, 0x3, 0x3]}, 0x1fe, 0xd)
openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0)
socket(0x2, 0x5, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mtd0\x00', 0x8042, 0x0)
ioctl$auto_MEMUNLOCK(r3, 0x40084d06, &(0x7f0000001040)={0x8, 0x3ff})
pread64$auto(r0, 0x0, 0x4, 0x5)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0)
r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec26\x00', 0x40000, 0x0)
ioctl$auto_CEC_ADAP_S_PHYS_ADDR(r5, 0x40026102, 0x0)
preadv2$auto(r2, &(0x7f0000000500)={&(0x7f0000000400)="233e6d056ff7343409d82b29f3fdebf482a4d2ed9c05a02cf5727b811a12ebb776bede17eec1d65080e18abfdd49c79807a0e0f6e90363ec51d66d7afa5ff4202ac02a5df4739c172f3bfd0b83ff3ca1215fb04ec13a65ddfb12fc1e57184cd19aed6c92ea93291e98e1a34cd6416cd2b05517d225d0b651078225e89bb09512653d6c8985196385b0efea053d124b806175ee92271c412caee88b69581114f2b8b55bd54bd34b0d1dcec9f8749f3e169b1e9cbc1b578ca9b86fa834aa4adc775720a6af2af50c62598e3f5042715a34708b3952f239d1d2a5ed431b575a22869bf1405767b7e790b7f809981d", 0xcb}, 0x0, 0x7, 0x10001, 0x43)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0))

2m20.53179752s ago: executing program 0 (id=915):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder0\x00', 0x0, 0x0)
mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000300)={{@raw=0x1, 0xa, 0xf8, 0x4671, "a401d243991a4dc376cc2bd4dbe3040e3cff152230323227f8d6c24be7ceeed84366bbadec197ea40209a468", @raw}, 0x1ea, 0x81, 0x1, @raw=0x8f10, @reserved="b2089ab0bbaab63c40853405fb772ade9448008d0040560232dbb586cf8f11ca82a2ba37174118952b850ad2099d3a3bc1c77e916330e96e2989bebf719430efe8c9a59c9349eac701c2bbb3122607916561a6da1cfdfc5dc83f4cc979d6dbf96bcb58d1f9042592b39ceec6193960c9a37975bc0153c5fce4d94f329d47f6d4", "2bb2d72b107f03a0ef0c6760e2e1fd64b8ae4a5be70b75810dfa4cc7182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"})
openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
pread64$auto(r0, 0x0, 0x1, 0x40100003)

2m20.495643962s ago: executing program 0 (id=916):
setpriority$auto(0x2, 0x8, 0x8)
sendmsg$auto_NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x40000)
read$auto_tracing_pipe_fops_trace(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
ioctl$auto(r0, 0x5522, 0xf15)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000)
r1 = socket(0x10, 0x2, 0xc)
r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = io_uring_setup$auto(0xa, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r4)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x301, 0x70bd27, 0x25cfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044015}, 0x800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r7, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [@typed={0x8, 0x14b, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x4000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r8)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', <r10=>0x0})
sendmsg$auto_NET_SHAPER_CMD_GROUP(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', <r11=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x120, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x4}, @ETHTOOL_A_RSS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x85ad}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x20000}, @ETHTOOL_A_RSS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_RSS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x45e}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x80}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x48001)
sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r2, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)
ioctl$auto(r0, 0x5523, r0)
acct$auto(&(0x7f0000000080)='/dev/bus/usb/015/001\x00')
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/iosched/fifo_batch\x00', 0x20681, 0x0)

2m20.27088092s ago: executing program 0 (id=918):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000340)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f00000002c0)='./file0\x00')
write$auto_trace_options_fops_trace(0xffffffffffffffff, &(0x7f0000000300)="314b9d1ebcf5bb963ecea0e087eafab7a812977fbbfe989b1b86e4e6910ac52dc1a8475b6f", 0x25)
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x200003, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_MON_GET(r4, &(0x7f00000083c0)={0x0, 0xec0, &(0x7f0000008380)={&(0x7f0000003680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="2f032abd7000df251200f0000000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080)
r6 = socket(0xa, 0x1, 0x84)
close_range$auto(r6, 0xfffffffffffff000, 0xfff)
bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x2, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "0000000000860ebd0a2ec8d391ffff00", <r7=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x80010)
bpf$auto(0x1a, &(0x7f0000000380)=@bpf_attr_3={0x9, 0x5bab, 0x3, 0x8, 0x333a, 0xffffffb8, 0x3dd, 0x8000, 0x6, "562d9a944fa2bb9576adbb9c5665bf6d", r7, 0x0, 0xffffffffffffffff, 0x200, 0xffff, 0x8001, 0x7, 0x4, 0x8, 0x80000001, @attach_btf_obj_fd=r6, 0xffffffff, 0xd, 0x8000000000000001, 0x2004, 0x7012496d, r2, r6}, 0x92)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)

2m19.884833394s ago: executing program 0 (id=919):
open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x22) (async)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r1, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x4050040)
r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x440280, 0x0)
lseek$auto(r2, 0x0, 0x2)
unshare$auto(0x40000080)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x8000000, 0x40009, 0xdf, 0x40000000009b7f, 0x7, 0x28000) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socket(0x11, 0x5, 0x100)
socket(0x28, 0x2, 0x3) (async)
write$auto(r3, 0x0, 0xffda) (async)
shmctl$auto_IPC_SET(0x4, 0x1, 0x0) (async)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3, 0x4, 0x0, 0x20007fffff, 0x1) (async)
write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
mkdir$auto(0x0, 0x0) (async)
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x22002, 0x0) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) (async)
select$auto(0x1, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d6, 0x6, 0x1, 0x62, 0x8, 0x7, 0x6d3f, 0x5, 0xa, 0xfffffffffffffffe]}, 0x0)
r5 = io_uring_setup$auto(0x5d, 0x0)
r6 = socket(0x2, 0x1, 0x106)
connect$auto(r6, &(0x7f0000000080)=@in={0x2, 0x4001, @empty}, 0x4c) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
setsockopt$auto_SO_WIFI_STATUS(r5, 0x14, 0x29, &(0x7f0000000040)='+\x00', 0x1)

2m14.583725857s ago: executing program 32 (id=878):
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000)
madvise$auto(0x8000, 0x87fff, 0xc)
mmap$auto(0x20, 0x400008, 0xdf, 0x9b72, 0x2, 0x2)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x43, 0x0)
fsopen$auto(0x0, 0x1)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, <r1=>0xffffffffffffffff, [], {0x0, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}})
r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
ioctl$auto(0x1, 0x541b, 0x8)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7)
setpgid$auto(0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x400000000001, 0x5, 0x4, 0x15f4da0e, 0xffffffff, 0x4, 0x100000000000000c, 0x8, 0x7ffffffffffffffe, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000)
close_range$auto(r3, r1, 0x383f)
mmap$auto(0x0, 0x202000a, 0x3, 0xeb4, r0, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x200}, @NFSD_A_SERVER_SCOPE={0x17, 0x4, '/dev/snd/controlC0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)
sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

2m13.026943928s ago: executing program 33 (id=883):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r0, 0x0, 0xffffffff, 0x4, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
readlink$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='+/)*[[.!.\x00', 0x100)
close_range$auto(0x2, 0x8, 0x0)
r3 = io_uring_setup$auto(0x6075, 0x0)
close_range$auto(0x2, 0x8, 0x0)
clone$auto(0x1000000020003b46, 0x2, 0x0, 0x0, 0x2)
pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r3, 0x7, 0x0, 0x4)
acct$auto(&(0x7f00000002c0)='/dev/rfkill\x00')
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon27\x00', 0x101042, 0x0)
acct$auto(&(0x7f0000000000)='/dev/rfkill\x00')
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r4, &(0x7f0000000440)="1100000000000000000000000000010000", 0x11)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
getsockopt$auto_SO_DEBUG(r4, 0x1, 0x1, &(0x7f0000000100)='},:(.!/\x00', &(0x7f00000001c0))
getpid()

2m4.540609783s ago: executing program 34 (id=919):
open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x22) (async)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r1, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x4050040)
r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x440280, 0x0)
lseek$auto(r2, 0x0, 0x2)
unshare$auto(0x40000080)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x8000000, 0x40009, 0xdf, 0x40000000009b7f, 0x7, 0x28000) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socket(0x11, 0x5, 0x100)
socket(0x28, 0x2, 0x3) (async)
write$auto(r3, 0x0, 0xffda) (async)
shmctl$auto_IPC_SET(0x4, 0x1, 0x0) (async)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3, 0x4, 0x0, 0x20007fffff, 0x1) (async)
write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
mkdir$auto(0x0, 0x0) (async)
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x22002, 0x0) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) (async)
select$auto(0x1, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d6, 0x6, 0x1, 0x62, 0x8, 0x7, 0x6d3f, 0x5, 0xa, 0xfffffffffffffffe]}, 0x0)
r5 = io_uring_setup$auto(0x5d, 0x0)
r6 = socket(0x2, 0x1, 0x106)
connect$auto(r6, &(0x7f0000000080)=@in={0x2, 0x4001, @empty}, 0x4c) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
setsockopt$auto_SO_WIFI_STATUS(r5, 0x14, 0x29, &(0x7f0000000040)='+\x00', 0x1)

49.370818086s ago: executing program 4 (id=1222):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000080)={0xa4})

48.283472046s ago: executing program 4 (id=1226):
unshare$auto(0x40000080)
write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000000), 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x4, 0x70, 0x8000000000000000, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
socket(0x1e, 0x2, 0x144b)
ioctl$auto(0x3, 0x80000541b, 0x38)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
mmap$auto(0x2e1, 0x400008, 0xdf, 0x109b72, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x10000, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2000000006, 0x2)
landlock_restrict_self$auto(r0, 0xb)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x5, 0x3, 0x8000000000000000, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000440)={{@inferred, 0x5, 0xb6, 0x5, "a401d243991a4de376cc2bd4dbe3e10d3cff152230323227f8d6c24be7ceeed84366bbadec1b7ea40209a468", @raw}, 0x1ea, 0x2, 0x1, @raw=0xb, @reserved="31093a6896e8d336b4a26499b522f8aef6a4ebae6f6d52bededfeb8950bab94f6685ea66734e1178527dd8bbd202b5df37a3c11c974e35e0ff7a6b59cb6591361f78ece672334e0dc1fb2b1d8ee9bba33080c74d948d0db867e6c465733ac59121eeb3c4a28379eb65a772bcc519616c0c4b229aa94f941ea515196528518955", "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3a65e4fe3c6e3215b9595bf60cee784decb284ff015aa97d8f86dd61fd4f929"})
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/oss/sndstat\x00', 0x88400, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/209, 0xd1)
madvise$auto(0x0, 0x2003ec, 0x14)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mlockall$auto(0x7)
setresuid$auto(0x8, 0x8, 0x0)
mlock$auto(0xcecc, 0xd325)
madvise$auto(0xb, 0x1, 0x3)

45.859191624s ago: executing program 4 (id=1232):
r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c0283", 0x9f) (async)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c0283", 0x9f)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x200007, 0x19)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) (async)
r5 = clone$auto(0x1, 0x0, 0x0, 0x0, 0x42)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r5], 0x1}, 0x58)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032cb57000fbdbdf250a0000ce427e0017d4071600060001004002000006000100030000000800020048535200f491a2656cb8af588d47f04f3092ff68a9c9c975b91c"], 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) (async)
r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000400)={0x2, 0x80, 0x80, 0x5, &(0x7f00000003c0)="3e70d937cfec70", 0x5, 0x4, 0x80006, @stream_id=0x10000, 0x2004b, 0x2, 0x0, [{0xc4, 0x6dfbd433, 0x2}, {0x14, 0x28000, 0x6}, {0x6, 0x1, 0x800}, {0x0, 0x5, 0x80}, {0x1a, 0x8, 0x100000}, {0x2, 0x101, 0xffff}, {0x401, 0x4, 0x7}, {0x1, 0x7, 0x3}, {0x81, 0xfffffffa, 0x400}]}) (async)
ioctl$auto_USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000400)={0x2, 0x80, 0x80, 0x5, &(0x7f00000003c0)="3e70d937cfec70", 0x5, 0x4, 0x80006, @stream_id=0x10000, 0x2004b, 0x2, 0x0, [{0xc4, 0x6dfbd433, 0x2}, {0x14, 0x28000, 0x6}, {0x6, 0x1, 0x800}, {0x0, 0x5, 0x80}, {0x1a, 0x8, 0x100000}, {0x2, 0x101, 0xffff}, {0x401, 0x4, 0x7}, {0x1, 0x7, 0x3}, {0x81, 0xfffffffa, 0x400}]})
getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd)
fanotify_init$auto(0x65, 0x2)
unshare$auto(0x20000080)

43.642575847s ago: executing program 4 (id=1236):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xb, 0xa, 0x300)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x9, 0x6, 0x1)
r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000)
r2 = socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
pread64$auto(0xffffffffffffffff, 0x0, 0xad2, 0x4000fd)
connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
io_uring_setup$auto(0x1, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
sendfile$auto(0x1, r1, 0x0, 0x40000000c07)
getsockopt$auto(r2, 0x5, 0x81e, 0x0, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}})
r3 = socket(0x2b, 0x1, 0x0)
mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r3, 0x8000)

42.622512397s ago: executing program 4 (id=1241):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async, rerun: 32)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async, rerun: 32)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) (async)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0x2003f2, 0x14) (async)
madvise$auto(0x0, 0x200007, 0x19) (async)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0) (async, rerun: 64)
socket(0x5, 0x1, 0x84) (async, rerun: 64)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 32)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", <r2=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10) (rerun: 32)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) (async, rerun: 32)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0xc}}, 0x54) (async, rerun: 32)
listen$auto(0x3, 0x83) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0xf, 0x3, 0x2) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0) (async)
exit$auto(0x5eb)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)

40.482561916s ago: executing program 4 (id=1244):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000080)={0xed})

25.430364122s ago: executing program 35 (id=1244):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000080)={0xed})

24.290478268s ago: executing program 2 (id=1297):
mmap$auto(0x0, 0x1, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
io_uring_setup$auto(0x2, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0)
r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0)
preadv$auto(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
io_uring_setup$auto(0x1, 0x0)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = socket(0x23, 0x2, 0x0)
shmctl$auto_SHM_INFO(0xfffffff8, 0xe, 0x0)
ioctl$auto(r2, 0x89ef, 0x74)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x3, 0x100)
fremovexattr$auto(r3, &(0x7f0000000700)='system.posix_acl_access\x00e\xd8\v\x1b\x02dG\xb3!\xc46$\xb8\\\xf1\xa6\x1b\x03\x18s8\xfdG \x950\xf0\xe0H!\x86,\xd1{\xf0\xc7gA\xa8\xc6B\xc9f\'_]\xe5.\xc6XN\x86:\xb0,\xab\xfa\xa42,t\xfa\xe0c\xbbtzB\xe7\x0083\xdf\xf7lX\x8f\x8c\xe0|\xccMK^\xaa\x8e\xdex\x18\xd8\xfb(\xae\xb6\xc3\x02;mlG\x14\xdf\x9f\xea\xbf\x93\xae\xa5.\xfd\xe2a\xa8ZA\xb8\xc4\x9f\x93\xff\x86l\x92\a7\xba=LC\xc4\xdc3\xf3%\xef\x7f\x81\x9eB\x9ak\a\xa3\xea?\x11\xd8Lz:q(QuY\x9b\xa8\xe2j\x98\\\xd0\xd72_c\b\xb3\xd1\xa6g,5\b|\x95\x98\xb0c\x90\xfd\x12\x1f\x1c\xfa)(\xae\xfe\xc4\xec\x8f\xa1\x98\te\'\xc8\x97\xda\xe4&)\xe5\xa3\x81\xb9\xbca,~#\x9c\xcaE)@\x13In\x9e0\xe5\xff\xcbv\xd2B\xd5\xaf+\xc8T\xc2\xb1\xd3\xaaf\xfe}\x17\xcd\xeb\xcfD\x00'/289)
setxattr$auto(&(0x7f00000001c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', &(0x7f00000002c0), &(0x7f00000004c0), 0x3, 0x2)
bpf$auto(0x0, 0x0, 0x6f3)
mmap$auto(0x822b, 0xfff, 0x3ff5769a, 0x9b7c, 0x2, 0x8000000000008000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0xfdef)

23.714533828s ago: executing program 2 (id=1299):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x80, 0x0)
close_range$auto(r0, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="301b08ff", @ANYRES16=0x0, @ANYBLOB="00082abd7000fddbdf250800000008002b00ff03000005002d00000000000a000900c38d4a6325140000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000080)={0xc1})

23.490101231s ago: executing program 2 (id=1300):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xb, 0xa, 0x300)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x9, 0x6, 0x1)
r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000)
r2 = socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/remaddr\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0xad2, 0x4000fd)
connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
io_uring_setup$auto(0x1, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
sendfile$auto(0x1, r1, 0x0, 0x40000000c07)
getsockopt$auto(r2, 0x5, 0x81e, 0x0, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}})
r4 = socket(0x2b, 0x1, 0x0)
mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r4, 0x8000)

22.187440854s ago: executing program 2 (id=1305):
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0)
r0 = socket(0x29, 0x801, 0x106)
setresuid$auto(0x2, 0x7, 0x8080)
open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x2, 0x9, "4cbd"}, 0x2)
setsockopt$auto(r0, 0x6, 0x12, 0x0, 0xa1)
r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0)
r2 = open(0x0, 0x22240, 0x55)
ioctl$auto_NVRAM_SETCKS(r2, 0x7041, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP_READ(r2, 0xc0085508, &(0x7f0000000280)={0x800, 0x80, 0x5, "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"})
write$auto(r1, 0x0, 0xfffffdf3)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r0)
openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x10041, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x8201, 0x0)
ioctl$auto_OTPLOCK(r6, 0x800c4d10, 0x0)
r7 = getpgid$auto(0x0)
timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @inferred=r5, 0x4, @_tid=r7}, &(0x7f0000000040)=0x9)
sendmsg$auto_TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040025bd7000fedbdf2518000000100002800c000c007f0000000000000000000480000059005ea300000000000000004480f562ba216668f6be9c2af3d4a26c25110ae82dbeca96ab916df6dd0e4303ff405d9e253f9a066fdb9381f22c957c4e1d5b92606a3d2af91436b3027a16e65914a339e595f9760450da4907e4a031bd0544e60f1ec9c0a86d67018013cea450352d6f799b1a6ccd85fad0c4060baed0a3046e2d15a0bb523a6ee554b14abbdcb9727a32929d7e405eed4065168c564a5f805786964d1f99546bc791c5a063d28dbd2c0ab3b8623d88131bef601230010000007a00", @ANYRES32=r7, @ANYBLOB="0000bb800000679800002000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40005)
pread64$auto(r3, 0x0, 0xffffff3f, 0x8000000000009)
read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0)

22.149716354s ago: executing program 2 (id=1306):
ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
lseek$auto(r0, 0x2, 0x0)
r1 = open$dir(&(0x7f0000000280)='}[,&*}\x00', 0x1, 0x134)
fchmodat2$auto(r1, &(0x7f00000002c0)='}[,&*}/file0\x00', 0x81, 0xedac)
getdents$auto(r0, 0x0, 0x62d4)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='}[,&*}/file0\x00', &(0x7f0000000180)={0x189442, 0x30, 0x7}, 0x18)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0)
fcntl$auto_F_SETPIPE_SZ(r2, 0x407, 0x2)
sendfile$auto(r3, r4, 0x0, 0x1000200)
r5 = socket(0x11, 0x80003, 0x300)
recvmmsg$auto(r5, 0x0, 0x10001, 0x0, 0x0)
mount$auto(0x0, 0x0, 0x0, 0xf, 0x0)
madvise$auto(0x0, 0x2003f2, 0x15)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", <r6=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)

21.160533238s ago: executing program 2 (id=1309):
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) (async, rerun: 64)
openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/pp_hold\x00', 0x204041, 0x0) (async, rerun: 64)
socket(0x10, 0x3, 0x6) (async, rerun: 64)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) (async)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x6a500, 0x0) (async)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20) (async)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x9, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0xa, 0x2, 0x0) (async)
socket(0xa, 0x801, 0x84) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
connect$auto(0x3, 0x0, 0x54) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32)
r2 = socket(0x2, 0xa, 0x1)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r2, 0x10000}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x2, 0x0)

7.456448457s ago: executing program 5 (id=1347):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0)
ioctl$auto_OSS_ALSAEMULVER(r2, 0x40086602, &(0x7f0000000100))
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
statmount$auto(&(0x7f0000000080)={0x7f, @raw=0xfffff8ed, 0x3, 0x9, 0x94b}, &(0x7f0000000400)={0x3, 0x2, 0xfffffffffffeffff, 0x7, 0x200, 0x7, 0x52c5, 0x87, 0x100, 0x1, 0x1, 0x4, 0x4a, 0xff, 0x0, 0x200, 0x2, 0x5, 0x2485, 0x8, 0x3b0, 0x7, 0x7ff, 0x1, 0x5, 0x401, 0x6, 0x6, 0x1, 0x200, 0xf17, [0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x0, 0x7b, 0xb, 0xd20, 0x1, 0x926c, 0x7, 0xfffffffffffffffa, 0x9, 0x4, 0x8, 0x5, 0x8, 0xff, 0x3, 0x6, 0x5, 0x0, 0x7, 0x565, 0x78e0, 0x0, 0x5, 0x4, 0x7, 0x1000, 0x5, 0x1, 0xa716, 0x4, 0xb, 0x8, 0x8000000000000001, 0x33, 0x0, 0x8, 0xd5, 0x5], "2ee66bae0f7bf9de5a6c07507431bb99236c6ad6dba74819f7245514ad1741a24e1efe68546d2128ea0b0438d577d742c125347520b7641f497c0e8929f7fd88e40a75b6714d9ac18a5f33a892516c541d50b02b7f2a64e418210c6ea72f21397f7332b691c91be06e70bb71121dba8f048d8650ab3fdf80b96137fba547ac4df6daf093bb032734b70b72f8f96050090ea93ad76fe68d91f674d6287a7c77711e1d4e1a8bc41c7c"}, 0xcf3, 0x10000)
execveat$auto(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x10000)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)='5', 0x1)
syz_genetlink_get_family_id$auto_nl80211(0x0, r4)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080))
mbind$auto(0xffffffffffffff00, 0xff, 0x9, &(0x7f0000000040)=0x100, 0x3, 0x7)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
r6 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0)
read$auto_proc_pid_smaps_operations_internal(r6, 0x0, 0x0)

6.617052476s ago: executing program 7 (id=1350):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x20, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x80002, 0x73)
r2 = io_uring_setup$auto(0x406, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46)
r3 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x2100, 0x0)
ioctl$auto_FS_IOC_ZERO_RANGE(r0, 0x40305839, 0x1000)
lseek$auto(r3, 0x9, 0x0)
io_uring_enter$auto(r2, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3)
move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2)
io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000010c0), r1)
sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001240)={0xdc, r5, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@OVS_METER_ATTR_STATS={0x14, 0x3, {0x8, 0x6}}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_BANDS={0xaf, 0x4, 0x0, 0x1, [@generic="28b36054481d8a184d137ae20818a4b6b00580c654bd4601bff756edb63da590e3d75c7bbf878fe5d4de47625e9ec26f9017dfbfa8a0d8", @typed={0x5d, 0x102, 0x0, 0x0, @binary="c51f73754e58af1a02d41e5d6a74e9124f5269817f80a99f6f4544482520101d0099733102447927c36b0e5c310bf631dd414b34bff3264a49d171f0980c15843c7fd7840e22277eb13661e57f2f2bb0b2aa0e70cb24866eea"}, @typed={0x14, 0x161, 0x0, 0x0, @ipv6=@private0}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x24001)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000)
sendmmsg$auto(r6, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000140)={0x0, 0xc3}, 0x6, 0x0, 0x0, 0x504}, 0x1}, 0x2, 0x0)
r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0)
read$auto_tomoyo_operations_securityfs_if(r7, &(0x7f0000000040)=""/4099, 0xfd98)
r8 = getegid()
fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, r8)
kexec_load$auto(0x5, 0x1, &(0x7f0000000040)={@kbuf=&(0x7f0000000100), 0x2aaa, 0x6c0000c000, 0xc000}, 0x8)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001200), r6)

6.255853993s ago: executing program 5 (id=1351):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', <r1=>0x0})
bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001e00)='/sys/kernel/debug/tracing/set_event\x00', 0x2000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop10\x00', 0x0, 0x0)
shmat$auto(0x83af, 0x0, 0x51)
openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x2040c0, 0x0)
msgctl$auto_MSG_INFO(0x7, 0xc, &(0x7f0000000100)={{0x7, 0xee00, 0xffffffffffffffff, 0x7, 0x80, 0x2, 0x9}, &(0x7f0000000080)=0xf, &(0x7f00000000c0)=0x1, 0x4d5f, 0x2e5, 0x0, 0xc932, 0x1da, 0x400, 0x88, 0x3, @inferred, @inferred=0xffffffffffffffff})
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129a00, 0x0)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0)
r4 = socket(0x2, 0x2, 0x5)
mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_CREATE_VM(r5, 0x4048aecb, 0x0)
pread64$auto(r2, &(0x7f0000000200)='\x00\x06\xab\x92\xd5\x11%c\xb4>!\xfb\a\xc9hF\xdbXA\x9a\x88\xc1\x14\xa9\xa5\xf5\x1b\x9b\x19\xd1_\x1d\xd1\xc7\x100\xd1\xf6\x01\x84@\x9b\xe8\xa0\x8f8\x8aUw\x108\xcaw4\xa5\xc7\xaa\xda\xfe#\xca\xc9t \x98\x00\xe2Y\xfc\xe9', 0x8, 0x100004000000009)

5.869487831s ago: executing program 36 (id=1309):
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) (async, rerun: 64)
openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/pp_hold\x00', 0x204041, 0x0) (async, rerun: 64)
socket(0x10, 0x3, 0x6) (async, rerun: 64)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) (async)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x6a500, 0x0) (async)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20) (async)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x9, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0xa, 0x2, 0x0) (async)
socket(0xa, 0x801, 0x84) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
connect$auto(0x3, 0x0, 0x54) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32)
r2 = socket(0x2, 0xa, 0x1)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r2, 0x10000}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x2, 0x0)

5.665883748s ago: executing program 5 (id=1354):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000)
pread64$auto(r0, &(0x7f0000000100)='[\xb5(+*}!)\x00', 0x9f, 0x80000001)
madvise$auto(0x0, 0x400053, 0x9)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
r1 = socketcall$auto(0x8000ffa, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ppoll$auto(&(0x7f0000000040)={r0, 0x3, 0x9}, 0x10, &(0x7f0000000080)={0x7, 0x9}, &(0x7f00000000c0)={0xfffffffffffffffc}, 0x8)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x278e18a297a8387c}, 0x24000802)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0x4020ae76, r1)

5.569953083s ago: executing program 7 (id=1355):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
ioctl$auto(r0, 0x4b6a, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffe7c}, 0x1, 0x0, 0x0, 0x20004820}, 0x4)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_fops_x64_ro_(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5)
read$auto(0x3, 0x0, 0x80)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0xae582, 0x0)
mmap$auto(0x0, 0x0, 0x1000000e2, 0xeb1, 0xffffffffffffffff, 0x8000)
mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5<y\xa5\x97\x13\xef\xc4g\xc3\xa4&\x81I6\v\xcc\x00\x00', 0x62, 0xfffc, 0x0)
readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x0, 0xffffeffe, 0x2)
fanotify_init$auto(0x1, 0x8)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00)

5.343367998s ago: executing program 6 (id=1356):
semget$auto(0x0, 0x2e4a, 0x8000)
unshare$auto(0x40000080)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyqf\x00', 0x101e81, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r0 = socket(0x11, 0x5, 0x100)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB="3b750601cd08000100000cdd091a49fdd4d554aaf331eae6d2a400000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80)
close_range$auto(0x2, 0x8, 0x0)
r1 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, <r2=>0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}})
io_uring_register$auto(r1, 0x5, &(0x7f0000000400)="18779de0aea68dfa0d18b259f9d630eb7149b206ce3eed292c4e9c04745bf743abaded9a", 0x1)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x121c40, 0x0)
capset$auto(&(0x7f00000004c0)={0xfffffe1a}, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0)
write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0)
socket(0xf, 0x3, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r4 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r4, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c)
setresuid$auto(0x0, 0x0, 0x0)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(r4, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000001440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="d101000080000000002507000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x2000c000)
r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto_BLKPG2(r5, 0x1269, 0x0)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/loop15\x00', 0x24140, 0x0)
ioctl$auto_BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d})
ioctl$auto_BLKTRACETEARDOWN(r6, 0x1276, 0x0)
close_range$auto(0x0, 0x5, 0x0)
pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r4, 0x0, &(0x7f00000001c0)={@_si_pad}, 0x2)
pipe$auto(&(0x7f0000000040))
bpf$auto(0x0, &(0x7f00000002c0)=@bpf_attr_0={0x1, 0xb8, 0x10, 0x10001, 0xc0000000, 0xffffffffffffffff, 0x7, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0xb, 0xe5, 0x3, 0xffffffffffffffff, r2}, 0x10)

5.10941858s ago: executing program 5 (id=1357):
r0 = pidfd_open$auto(0x1, 0x0)
setns(r0, 0x60020000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0)
write$auto(r1, &(0x7f0000000140)='+\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00u(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1cS\xf2~>\xb1\xc6\xd1\xee\xc8\x06e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}|D\xd0j\xdd\xc6\xbb^\xa92\xa9u/', 0x100000002)
umount2$auto(&(0x7f0000000080)='.\x00\x17\xe7\xcbK\x17\xa2\xa0\x9a\xf6\x81\xee\xbfB\x9d\x8cL\xc9 \f\xd5\x1f\xf5\xd0\xe2\xfb\x1bG[\x0e\v\xbcq\xa1(Gz\xd7\x02Viw@\x8c9 \xee\x8a\x04\xe7\xd6\xc5\xc6_\xb2\ndUsI\xd8o\x00\x00\x00\xff\xe4\xed^0\xed\xc5\tg\x91\x87\xb5\xa9\xcd\xde\xf2L\x10VL$\xb3\xd4\x89\x01Y@%v\xa2\a\x98G\xf1\x0eMg\xe1p5u\xb3E\xfc\x1c\xd2-\xe4\\;nQJ', 0x8)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x4a8102, 0x0)
mmap$auto(0x0, 0x9, 0x4000000000dd, 0xeb1, r2, 0x99)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0)
mmap$auto(0x2000000000000000, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r3, 0x401070c9, 0x5)
io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, <r4=>0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}})
madvise$auto(0x0, 0x2003f0, 0x15)
mlockall$auto(0x7)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r3, 0x8000)
r6 = socket(0x23, 0x80805, 0x0)
listen$auto(r6, 0x4)
poll$auto(&(0x7f0000000000)={r6, 0x1963, 0x81}, 0x5, 0x10001)
ioctl$auto_TUNGETIFF(r4, 0x800454d2, &(0x7f0000000200)=0xa4)
setsockopt$auto(r6, 0x9, 0x9, &(0x7f0000000040)='/dev/kvm\x00', 0xc4)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)

4.576307354s ago: executing program 7 (id=1358):
connect$auto(0xffffffffffffffff, 0x0, 0x54)
mmap$auto(0x0, 0x140009, 0x7, 0x9b72, 0x7, 0xf33f)
mknod$auto(0x0, 0x1001, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0x10, 0xfffffffffffffffa, 0x8000)
futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x1000000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x10008000)
r0 = userfaultfd$auto(0x1)
ioctl$auto(0x3, 0xc018aa3f, 0xf0b)
sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf250100000008000500fd00000014e9010074766d72703000000000030000000000060006004e23000004000300"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x240080c0)
socket(0x2, 0x1, 0x106)
r1 = io_uring_setup$auto(0x6, 0x0)
ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f00000006c0)={r1, &(0x7f0000000440)="f8d96ce900bb084268701dd1e11d255f414bbe75dd4296b7c8db46336278db0881ea1f4e38139db29cae16082fc5d1939eaa9a302318c21979091b5cef37cf8afb5bcf5faca7f1bb9ce37faf77fe9d51d6b917a4bad6145c729671a81af8fc", 0x80, &(0x7f00000004c0)="1075ec9ba09513cfe97d4299ed8688efc190f6faeab8ac2d96e72a88d4e7c9d4983298fc377c8c44c181e4e57919d5714a32c5326782dd956e7bda5f500a95ae52b545e8e784696b942d7fea7deb02fa3f1f77e2b283234539b3241995f1cb2587c005cbe6f570865d7a2e026c69816b0e9b16d8145dd0ee29f2477803965c4cadfbd006214c70016d92", 0x2, &(0x7f0000000580)="af7b06ac858b3acb4ddafb631b2b8f07a95288fe5675207de0fd7d956318cb359a944815361e789ac53e9d20e72552d32da74fa3586f0b71dbe4c632a35b96966062cc2109271b2c3736db5ecfbb4c2aed810407fe44927bd5b4ff4e1a70b93a112645c5b972bca2f154e6beaa60304efa0f0334c76e9ff68b8386323452d244783f1a5fd0dda5abc24fde0dcfba5270696ed27d63bf3a81324a81bc42006c3c5def85d338cd79f97558ee9cb0485244b18eb368fe6a0339b1a3f03c06243eb21b21b93ea1011c22368947", &(0x7f0000000680)=0x3})
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x10003, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto(0xffffffffffffffff, 0x800064ba, 0x1e6)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
read$auto(r3, &(0x7f0000000040)='/dev/snd/seq\x00', 0x7)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x2d, 0xffffffff, 0x1, 0x2091, 0x83ad, 0x9, 0x400000000006, 0x6, 0x81, 0x4, 0x1cd7, 0x8, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffa, 0x0, 0x0, 0x2, 0xfe, [0x0, 0x3, 0x8003, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa05, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x3, 0x1, 0x9, 0x0, 0x8, 0x0, 0x40000000, 0x0, 0x7, 0x0, 0xf97e, 0x7ff, 0x0, 0x0, 0x3, 0x40000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, 0x3c3, 0x0, 0x2, 0x0, 0x20000000]}, 0x1fe, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4048051)
r4 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x2020009, 0x3, 0xebd, 0xfffffffffffffffa, 0x9)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_transactions_fops_(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, &(0x7f0000000100), 0x3, 0x2}, 0x10000}, 0xffffffff, 0x4008)

4.30604701s ago: executing program 7 (id=1359):
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, <r0=>0xffffffffffffffff, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB=' \b\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf25180000000800070004000000a5070280040082000800db00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="220044002f7379732f6b65726e656c2f74726163696e672f7365745f6576656e74000000100080800400f280080094000a010100640546809ea392f3c689ed25ebb9e7bb0c34f7939187e8395053a91756393ca9ee42a2cdc1e79014000400ff0100000000000000000000000000018500f6805937c5385d8669eabfce2bf75736b2dc8124dbac78dbbb17b4cca2b37c1827b5fa4bdb9a4b4c01202e8a09d2211b18332053da41f6c2048c19e9b5255433e61960c93420457cbdfd0aeb80f8cf737e5cf36339abf1aa41ef7988cdc660ef227cde56f6777217f5d597c9b34bcdbae66d2fad6ebfb55ba7198208000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020064766d72703000000c00000000000000140002006361696630000000000000000000000008000100", @ANYRES32=r0, @ANYBLOB="08000300e44c0000050006000100000008000700080000000500050000000000"], 0x820}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x169a02, 0x0)
write$auto_nsim_psample_enable_fops_psample(r1, &(0x7f00000005c0)='Y', 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x0)
r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
r3 = io_uring_setup$auto(0x59, 0x0)
r4 = getpid()
unshare$auto(0x40000080)
r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = prctl$auto(0x1000000003b, 0x4, r4, 0x2, 0x10000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, r6)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRESDEC=r2, @ANYBLOB="00000a00004e8f0bc0c6e581f300"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)
madvise$auto(0x1000, 0x200007, 0x19)
getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0xf)
syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
r7 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r7, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001)

4.297644212s ago: executing program 6 (id=1360):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x80, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockname$auto(r1, &(0x7f0000000040)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, &(0x7f0000000080)=0x400)
close_range$auto(r1, r1, 0x1000)
setsockopt$auto_SO_WIFI_STATUS(r0, 0x1, 0x29, &(0x7f0000000040)='*:(\x00', 0x4b)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xae30, 0x8, 0xfff, 0xffffffffffffffff, 0x2e, 0x7ff}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0)
socket(0x10, 0x2, 0xc)
bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_1={0x3, 0x8ca99, @value=0x7, 0xa}, 0xc)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x4, 0x0, 0x3}, 0x1)

4.027372645s ago: executing program 5 (id=1361):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xb, 0xa, 0x300)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x9, 0x6, 0x1)
r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000)
r2 = socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/remaddr\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0xad2, 0x4000fd)
connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
io_uring_setup$auto(0x1, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
sendfile$auto(0x1, r1, 0x0, 0x40000000c07)
getsockopt$auto(r2, 0x5, 0x81e, 0x0, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}})
r4 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r4, 0x8000)

4.009529245s ago: executing program 6 (id=1362):
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0xffff, 0xb3bb, 0x8000000000000000, 0x2000000001a, 0x401, 0x7ff6) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
close_range$auto(0x0, 0xffffffffffffffff, 0x1)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') (async)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/neigh/team_slave_1/unres_qlen\x00', 0x446a02, 0x0)
sendfile$auto(r2, r2, 0x0, 0x1) (async)
socket(0x2, 0x1, 0x106)
setfsuid$auto(0xee00) (async)
mmap$auto(0xfff, 0x5, 0xffffffffffffffc0, 0x100000000000017, 0x7, 0x28000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=r4, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES32=r1, @ANYRES32=r6, @ANYRESOCT], 0x68}, 0x1, 0x0, 0x0, 0x4040045}, 0x40) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x3, 0x100) (async)
socket(0x1f, 0x2, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="13"], 0x1ac}}, 0x4004) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r7 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$auto_LOOP_CTL_ADD(r7, 0x4c80, 0xfffffffffffffffd) (async)
semctl$auto_SETALL(0x0, 0xc, 0x11, 0x81) (async)
unshare$auto(0x40000080) (async)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen_full\x00', 0x200402, 0x0)

3.457153444s ago: executing program 5 (id=1363):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x80, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000080)={0xa4})

2.569340354s ago: executing program 7 (id=1364):
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x400, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000740)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fbdbdf2502000000540001800800030004000000140002006261746164", @ANYBLOB="0800030001000000080003007245ffff08000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2000018008000300040000001400020069705f7674693000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYBLOB='\b\x00', @ANYBLOB="1400020076657468305f746f5f6261746164760008000300000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="54000180140002006772653000", @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB], 0x23c}, 0x1, 0x0, 0x0, 0x4c011}, 0x90)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram1\x00', 0x6e642, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
unshare$auto(0x40000080)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00982a", @ANYRES16=r2, @ANYBLOB="000227bd7000ffdbdf2504000000080001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x24040080)
mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0xffff)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
open$dir(&(0x7f00000002c0)='}[,&*}\x00', 0x2000, 0x71)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x80, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/192, 0xc0)
bind$auto(0x3, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x1)
openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x200, 0x0)
r4 = getpid()
process_vm_readv$auto(r4, 0x0, 0x5, &(0x7f0000000380)={&(0x7f00000003c0)="5d4846965d0b30daa3e6601c064002004ef4e3449da9de6d8e81b8ef5ba7539963c8a299f8bf8f816d2fd597aff09165fb11db610530b5ff686981cc7cb546f1a6192dc51d47abb1d077af445519b9844596b7f246681246ac9d2c851ac3803d504a303643768bea050522be34f77c5e0127fe6b3aeb745f71b0d241ed3a8abec0e46b13b787c00958c3d840b59099cb02f74d9cce7e86f05e60a70ef0a00d046c010000000000000000"}, 0x6, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14)
r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
listen$auto(r0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0)
dup$auto(r6)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0)

2.34165156s ago: executing program 6 (id=1365):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x5, 0x0)
sendto$auto(0x3, 0x0, 0x79, 0x2, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x20)
recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r0 = socket(0xa, 0x3, 0x3a)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/lo/accept_redirects\x00', 0x200180, 0x0)
sendfile$auto(r1, r1, 0x0, 0x7fffe000)
getsockopt$auto(r0, 0x29, 0x1, 0x0, 0x0)
r2 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0)
read$auto(r2, 0x0, 0x1f42)
futex_wait$auto(0x0, 0x2000000002, 0x7, 0x8, &(0x7f0000000000)={0x1, 0x7ffd}, 0x4)
bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000080)=@bpf_attr_7={@link_id=0xa, 0x0, 0x3, r2}, 0x3)

2.142605473s ago: executing program 6 (id=1366):
unshare$auto(0x40000080)
unshare$auto(0x5)
unshare$auto(0x40000080)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
write$auto(0x3, 0x0, 0x1)
setsockopt$auto_SO_WIFI_STATUS(r0, 0x2, 0x29, 0x0, 0x7c6d)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x3, 0x948a, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0)
read$auto(r1, 0x0, 0xb4d3)
shutdown$auto(0x200000003, 0x2)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
select$auto(0x3, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x2, 0xd, 0xfffffffffffffffb, 0x100000004, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd5c, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
socket(0x2c, 0x3, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2)
close_range$auto(0x2, 0x8, 0x0)

1.807700058s ago: executing program 7 (id=1367):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 32)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (rerun: 32)
r0 = socket(0x29, 0xa, 0x8)
lseek$auto(r0, 0x7ff, 0x3) (async, rerun: 32)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.5/usb6/power/connected_duration\x00', 0x0, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
io_uring_setup$auto(0xa, 0x0) (async, rerun: 32)
close_range$auto(0x2, 0xa, 0x0) (async, rerun: 32)
open(0x0, 0x161342, 0x100) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/kcm\x00', 0x80, 0x0) (async)
socket(0x29, 0x2, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto_IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000000)={0x2, 0x10000003, 0x5, 0xa34}) (async, rerun: 32)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (rerun: 32)
r4 = socket(0x2, 0x2, 0x1)
r5 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r4, 0x10000, <r6=>0xffffffffffffffff}, 0x10)
bpf$auto(0x4, &(0x7f0000000240)=@bpf_attr_5={@target_fd=r5, 0xffffffffffffffff, 0xc000, 0x9, 0xffffffffffffffff, @relative_fd=r6, 0x40}, 0x5)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4044000) (async)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/217, 0x115) (async, rerun: 64)
rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) (async, rerun: 64)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
write$auto(0x3, 0x0, 0xfdef) (async, rerun: 64)
ioctl$auto_SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000040)="aeae02d36971b9091982db41d5a4b7d19858915219d82def0b30578d98b26b00418a1c71284f474387e1aa5718623780c1f6f6c45a2fdc7f14a0d3f60f6b194b8aa1c90d0b46cf978d5ba4e5b68f6624986621df9d94033d0e5b") (rerun: 64)

0s ago: executing program 6 (id=1368):
mmap$auto(0xffffffffffffffff, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f00000002c0)='\x00\xfe\xdd\xff\xff', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x190)
mremap$auto(0x5, 0x200000000000003, 0x3fda, 0xa, 0x7fffffffb000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/234, 0xea)
prctl$auto(0x3e, 0x1, 0x0, 0x3, 0x0)
mmap$auto(0x8, 0x2020009, 0x3, 0x13, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7)
madvise$auto(0x0, 0x200007, 0x19)
keyctl$auto_KEYCTL_GET_KEYRING_ID(0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb0, 0xfffffffffffffffa, 0x7ffc)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x40, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/queues/tx-6/xps_rxqs\x00', 0xb0040, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
ioctl$auto_SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)='P')

kernel console output (not intermixed with test programs):

 T8933] RIP: 0033:0x7f45b059ce59
[  252.774270][ T8933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.774292][ T8933] RSP: 002b:00007f45b138d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  252.774316][ T8933] RAX: ffffffffffffffda RBX: 00007f45b0816090 RCX: 00007f45b059ce59
[  252.774333][ T8933] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004
[  252.774348][ T8933] RBP: 00007f45b138d090 R08: 0000000000000000 R09: 0000000000000000
[  252.774363][ T8933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  252.774385][ T8933] R13: 00007f45b0816128 R14: 00007f45b0816090 R15: 00007ffd074f8748
[  252.774422][ T8933]  </TASK>
[  255.816133][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  255.825141][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  259.677036][ T9108] futex_wake_op: syz.1.614 tries to shift op by -2048; fix this program
[  259.692375][ T9108] futex_wake_op: syz.1.614 tries to shift op by -2048; fix this program
[  262.188916][ T9162] FAULT_INJECTION: forcing a failure.
[  262.188916][ T9162] name failslab, interval 1, probability 0, space 0, times 0
[  262.221090][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: syz.3.625 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  262.221132][ T9162] Tainted: [L]=SOFTLOCKUP
[  262.221140][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  262.221155][ T9162] Call Trace:
[  262.221163][ T9162]  <TASK>
[  262.221172][ T9162]  dump_stack_lvl+0x100/0x190
[  262.221218][ T9162]  should_fail_ex.cold+0x5/0xa
[  262.221250][ T9162]  ? tomoyo_realpath_from_path+0xb6/0x690
[  262.221285][ T9162]  should_failslab+0xc2/0x120
[  262.221315][ T9162]  __kmalloc_noprof+0xe0/0x850
[  262.221354][ T9162]  ? kfree+0x1dd/0x6c0
[  262.221393][ T9162]  tomoyo_realpath_from_path+0xb6/0x690
[  262.221431][ T9162]  tomoyo_path_number_perm+0x23c/0x580
[  262.221460][ T9162]  ? tomoyo_path_number_perm+0x22e/0x580
[  262.221492][ T9162]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  262.221560][ T9162]  ? find_held_lock+0x2b/0x80
[  262.221590][ T9162]  ? __fget_files+0x215/0x3d0
[  262.221618][ T9162]  ? hook_file_ioctl_common+0x149/0x410
[  262.221647][ T9162]  ? __fget_files+0x215/0x3d0
[  262.221682][ T9162]  ? __fget_files+0x21f/0x3d0
[  262.221717][ T9162]  security_file_ioctl+0xd3/0x230
[  262.221749][ T9162]  __x64_sys_ioctl+0xb7/0x210
[  262.221778][ T9162]  do_syscall_64+0x115/0x840
[  262.221811][ T9162]  ? clear_bhb_loop+0x40/0x90
[  262.221843][ T9162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.221869][ T9162] RIP: 0033:0x7f1731f9ce59
[  262.221890][ T9162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.221915][ T9162] RSP: 002b:00007f1732de0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  262.221940][ T9162] RAX: ffffffffffffffda RBX: 00007f1732216090 RCX: 00007f1731f9ce59
[  262.221958][ T9162] RDX: 0000200000000180 RSI: 00000000c05c6104 RDI: 0000000000000004
[  262.221974][ T9162] RBP: 00007f1732de0090 R08: 0000000000000000 R09: 0000000000000000
[  262.221996][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  262.222012][ T9162] R13: 00007f1732216128 R14: 00007f1732216090 R15: 00007ffd6677dee8
[  262.222044][ T9162]  </TASK>
[  262.305762][ T9165] FAULT_INJECTION: forcing a failure.
[  262.305762][ T9165] name failslab, interval 1, probability 0, space 0, times 0
[  262.439582][ T9162] ERROR: Out of memory at tomoyo_realpath_from_path.
[  262.481550][ T9165] CPU: 1 UID: 0 PID: 9165 Comm: syz.2.626 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  262.481600][ T9165] Tainted: [L]=SOFTLOCKUP
[  262.481611][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  262.481628][ T9165] Call Trace:
[  262.481637][ T9165]  <TASK>
[  262.481648][ T9165]  dump_stack_lvl+0x100/0x190
[  262.481701][ T9165]  should_fail_ex.cold+0x5/0xa
[  262.481736][ T9165]  ? lsm_blob_alloc+0x68/0x90
[  262.481774][ T9165]  should_failslab+0xc2/0x120
[  262.481808][ T9165]  __kmalloc_noprof+0xe0/0x850
[  262.481850][ T9165]  ? trace_kmem_cache_alloc+0xd5/0x100
[  262.481889][ T9165]  lsm_blob_alloc+0x68/0x90
[  262.481928][ T9165]  security_sk_alloc+0x2d/0x290
[  262.481960][ T9165]  sk_prot_alloc+0x1d1/0x2a0
[  262.481999][ T9165]  sk_alloc+0x36/0xe80
[  262.482044][ T9165]  __vsock_create.constprop.0+0x3c/0xba0
[  262.482077][ T9165]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  262.482113][ T9165]  vsock_create+0x126/0x510
[  262.482149][ T9165]  __sock_create+0x339/0x860
[  262.482192][ T9165]  __sys_socket+0x14d/0x260
[  262.482229][ T9165]  ? __pfx___sys_socket+0x10/0x10
[  262.482264][ T9165]  ? ksys_write+0x1ac/0x250
[  262.482304][ T9165]  __x64_sys_socket+0x72/0xb0
[  262.482338][ T9165]  ? lockdep_hardirqs_on+0x78/0x100
[  262.482371][ T9165]  do_syscall_64+0x115/0x840
[  262.482402][ T9165]  ? clear_bhb_loop+0x40/0x90
[  262.482433][ T9165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.482459][ T9165] RIP: 0033:0x7f0490b9ce59
[  262.482490][ T9165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.482518][ T9165] RSP: 002b:00007f0491a17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  262.482544][ T9165] RAX: ffffffffffffffda RBX: 00007f0490e15fa0 RCX: 00007f0490b9ce59
[  262.482563][ T9165] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028
[  262.482579][ T9165] RBP: 00007f0490c32d6f R08: 0000000000000000 R09: 0000000000000000
[  262.482596][ T9165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.482612][ T9165] R13: 00007f0490e16038 R14: 00007f0490e15fa0 R15: 00007fff269d5098
[  262.482646][ T9165]  </TASK>
[  263.005995][ T9172] syz.3.628 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  263.068462][ T9172] hugetlbfs: syz.3.628 (9172): Using mlock ulimits for SHM_HUGETLB is obsolete
[  264.338121][ T9209] FAULT_INJECTION: forcing a failure.
[  264.338121][ T9209] name failslab, interval 1, probability 0, space 0, times 0
[  264.395096][ T9209] CPU: 1 UID: 0 PID: 9209 Comm: syz.1.636 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  264.395121][ T9209] Tainted: [L]=SOFTLOCKUP
[  264.395126][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  264.395135][ T9209] Call Trace:
[  264.395140][ T9209]  <TASK>
[  264.395147][ T9209]  dump_stack_lvl+0x100/0x190
[  264.395175][ T9209]  should_fail_ex.cold+0x5/0xa
[  264.395193][ T9209]  ? tomoyo_encode2+0xfb/0x3c0
[  264.395218][ T9209]  should_failslab+0xc2/0x120
[  264.395246][ T9209]  __kmalloc_noprof+0xe0/0x850
[  264.395267][ T9209]  ? d_absolute_path+0x136/0x1b0
[  264.395285][ T9209]  tomoyo_encode2+0xfb/0x3c0
[  264.395306][ T9209]  tomoyo_encode+0x29/0x50
[  264.395324][ T9209]  tomoyo_realpath_from_path+0x18c/0x690
[  264.395347][ T9209]  tomoyo_path_number_perm+0x23c/0x580
[  264.395364][ T9209]  ? tomoyo_path_number_perm+0x22e/0x580
[  264.395382][ T9209]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  264.395420][ T9209]  ? find_held_lock+0x2b/0x80
[  264.395437][ T9209]  ? __fget_files+0x215/0x3d0
[  264.395452][ T9209]  ? hook_file_ioctl_common+0x149/0x410
[  264.395468][ T9209]  ? __fget_files+0x215/0x3d0
[  264.395487][ T9209]  ? __fget_files+0x21f/0x3d0
[  264.395505][ T9209]  security_file_ioctl+0xd3/0x230
[  264.395523][ T9209]  __x64_sys_ioctl+0xb7/0x210
[  264.395539][ T9209]  do_syscall_64+0x115/0x840
[  264.395558][ T9209]  ? clear_bhb_loop+0x40/0x90
[  264.395575][ T9209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.395590][ T9209] RIP: 0033:0x7f45b059ce59
[  264.395602][ T9209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.395615][ T9209] RSP: 002b:00007f45b138d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  264.395629][ T9209] RAX: ffffffffffffffda RBX: 00007f45b0816090 RCX: 00007f45b059ce59
[  264.395638][ T9209] RDX: 0000200000000180 RSI: 00000000c05c6104 RDI: 0000000000000004
[  264.395649][ T9209] RBP: 00007f45b138d090 R08: 0000000000000000 R09: 0000000000000000
[  264.395657][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.395665][ T9209] R13: 00007f45b0816128 R14: 00007f45b0816090 R15: 00007ffd074f8748
[  264.395684][ T9209]  </TASK>
[  264.395719][ T9209] ERROR: Out of memory at tomoyo_realpath_from_path.
[  271.485720][ T9342] FAULT_INJECTION: forcing a failure.
[  271.485720][ T9342] name failslab, interval 1, probability 0, space 0, times 0
[  271.575910][ T9342] CPU: 1 UID: 0 PID: 9342 Comm: syz.0.662 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  271.575959][ T9342] Tainted: [L]=SOFTLOCKUP
[  271.575969][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  271.575986][ T9342] Call Trace:
[  271.575996][ T9342]  <TASK>
[  271.576007][ T9342]  dump_stack_lvl+0x100/0x190
[  271.576061][ T9342]  should_fail_ex.cold+0x5/0xa
[  271.576098][ T9342]  ? tomoyo_encode2+0xfb/0x3c0
[  271.576135][ T9342]  should_failslab+0xc2/0x120
[  271.576170][ T9342]  __kmalloc_noprof+0xe0/0x850
[  271.576213][ T9342]  ? rcu_is_watching+0x12/0xc0
[  271.576251][ T9342]  tomoyo_encode2+0xfb/0x3c0
[  271.576295][ T9342]  tomoyo_encode+0x29/0x50
[  271.576331][ T9342]  tomoyo_realpath_from_path+0x18c/0x690
[  271.576381][ T9342]  tomoyo_check_open_permission+0x2af/0x3c0
[  271.576418][ T9342]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  271.576468][ T9342]  ? hook_file_open+0x24e/0x7a0
[  271.576535][ T9342]  ? path_get+0x61/0x80
[  271.576578][ T9342]  tomoyo_file_open+0x6b/0x90
[  271.576607][ T9342]  security_file_open+0xb5/0x1e0
[  271.576653][ T9342]  do_dentry_open+0x588/0x14d0
[  271.576699][ T9342]  vfs_open+0x82/0x3f0
[  271.576742][ T9342]  path_openat+0x208c/0x31a0
[  271.576788][ T9342]  ? __pfx_path_openat+0x10/0x10
[  271.576838][ T9342]  do_file_open+0x20e/0x430
[  271.576880][ T9342]  ? __pfx_do_file_open+0x10/0x10
[  271.576946][ T9342]  ? alloc_fd+0x476/0x790
[  271.576991][ T9342]  ? do_getname+0x191/0x390
[  271.577035][ T9342]  do_sys_openat2+0x10d/0x1e0
[  271.577077][ T9342]  ? __pfx_do_sys_openat2+0x10/0x10
[  271.577132][ T9342]  __x64_sys_openat+0x12d/0x210
[  271.577175][ T9342]  ? __pfx___x64_sys_openat+0x10/0x10
[  271.577215][ T9342]  ? ksys_write+0x1ac/0x250
[  271.577253][ T9342]  ? rcu_is_watching+0x12/0xc0
[  271.577290][ T9342]  do_syscall_64+0x115/0x840
[  271.577328][ T9342]  ? clear_bhb_loop+0x40/0x90
[  271.577363][ T9342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.577392][ T9342] RIP: 0033:0x7fa3ca99ce59
[  271.577417][ T9342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  271.577445][ T9342] RSP: 002b:00007fa3cb8c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  271.577473][ T9342] RAX: ffffffffffffffda RBX: 00007fa3cac16180 RCX: 00007fa3ca99ce59
[  271.577493][ T9342] RDX: 0000000000080200 RSI: 00002000000029c0 RDI: ffffffffffffff9c
[  271.577512][ T9342] RBP: 00007fa3caa32d6f R08: 0000000000000000 R09: 0000000000000000
[  271.577530][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.577546][ T9342] R13: 00007fa3cac16218 R14: 00007fa3cac16180 R15: 00007ffd6e266098
[  271.577587][ T9342]  </TASK>
[  272.008849][ T9342] ERROR: Out of memory at tomoyo_realpath_from_path.
[  273.139520][ T9362] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in;
[  273.139520][ T9362]    program syz.1.668 not setting count and/or reply_len properly
[  275.663780][ T9387] Process accounting paused
[  276.080660][ T9386] Process accounting paused
[  277.335930][ T5642] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  277.553965][ T9446] can: request_module (can-proto-3) failed.
[  279.423255][ T5642] Bluetooth: hci2: command 0x2016 tx timeout
[  280.478529][ T9497] [U] 0�="�/�
[  280.489316][ T9497] [U] 
[  280.497093][ T9497] [U] E�e�Q��@�
[  280.518229][ T9497] [U] 
[  280.980728][ T9510] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.262144.67108862), cmd(12)
[  281.491766][ T5633] Bluetooth: hci2: command 0x2016 tx timeout
[  283.116930][ T9546] ima: policy update failed
[  283.130010][   T30] audit: type=1802 audit(2147483662.440:6): pid=9546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.698" res=0 errno=0
[  284.284810][ T9587] hub 1-0:1.0: USB hub found
[  284.321970][ T9587] hub 1-0:1.0: 1 port detected
[  285.580389][ T9603] FAULT_INJECTION: forcing a failure.
[  285.580389][ T9603] name failslab, interval 1, probability 0, space 0, times 0
[  285.609671][ T9603] CPU: 0 UID: 0 PID: 9603 Comm: syz.0.709 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  285.609715][ T9603] Tainted: [L]=SOFTLOCKUP
[  285.609724][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  285.609738][ T9603] Call Trace:
[  285.609747][ T9603]  <TASK>
[  285.609757][ T9603]  dump_stack_lvl+0x100/0x190
[  285.609808][ T9603]  should_fail_ex.cold+0x5/0xa
[  285.609842][ T9603]  should_failslab+0xc2/0x120
[  285.609875][ T9603]  __kmalloc_cache_noprof+0x7a/0x6f0
[  285.609911][ T9603]  ? fsnotify_alloc_group+0x92/0x330
[  285.609969][ T9603]  fsnotify_alloc_group+0x92/0x330
[  285.610010][ T9603]  __do_sys_fanotify_init+0x2bb/0xe80
[  285.610049][ T9603]  do_syscall_64+0x115/0x840
[  285.610085][ T9603]  ? clear_bhb_loop+0x40/0x90
[  285.610121][ T9603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.610151][ T9603] RIP: 0033:0x7fa3ca99ce59
[  285.610175][ T9603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.610203][ T9603] RSP: 002b:00007fa3cb904028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c
[  285.610231][ T9603] RAX: ffffffffffffffda RBX: 00007fa3cac15fa0 RCX: 00007fa3ca99ce59
[  285.610250][ T9603] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1
[  285.610267][ T9603] RBP: 00007fa3caa32d6f R08: 0000000000000000 R09: 0000000000000000
[  285.610284][ T9603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  285.610301][ T9603] R13: 00007fa3cac16038 R14: 00007fa3cac15fa0 R15: 00007ffd6e266098
[  285.610339][ T9603]  </TASK>
[  289.787872][ T9696] FAULT_INJECTION: forcing a failure.
[  289.787872][ T9696] name failslab, interval 1, probability 0, space 0, times 0
[  289.838126][ T9696] CPU: 1 UID: 0 PID: 9696 Comm: syz.1.728 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  289.838172][ T9696] Tainted: [L]=SOFTLOCKUP
[  289.838182][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  289.838200][ T9696] Call Trace:
[  289.838210][ T9696]  <TASK>
[  289.838221][ T9696]  dump_stack_lvl+0x100/0x190
[  289.838273][ T9696]  should_fail_ex.cold+0x5/0xa
[  289.838309][ T9696]  ? snd_seq_oss_readq_new+0x9b/0x290
[  289.838352][ T9696]  should_failslab+0xc2/0x120
[  289.838386][ T9696]  __kmalloc_noprof+0xe0/0x850
[  289.838445][ T9696]  snd_seq_oss_readq_new+0x9b/0x290
[  289.838493][ T9696]  snd_seq_oss_open+0x476/0xa10
[  289.838536][ T9696]  odev_open+0x6f/0x90
[  289.838565][ T9696]  ? __pfx_odev_open+0x10/0x10
[  289.838596][ T9696]  soundcore_open+0x2e3/0x5a0
[  289.838634][ T9696]  ? __pfx_soundcore_open+0x10/0x10
[  289.838668][ T9696]  chrdev_open+0x234/0x6a0
[  289.838701][ T9696]  ? __pfx_apparmor_file_open+0x10/0x10
[  289.838732][ T9696]  ? __pfx_chrdev_open+0x10/0x10
[  289.838770][ T9696]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  289.838812][ T9696]  do_dentry_open+0x6ab/0x14d0
[  289.838841][ T9696]  ? __pfx_chrdev_open+0x10/0x10
[  289.838881][ T9696]  vfs_open+0x82/0x3f0
[  289.838921][ T9696]  path_openat+0x208c/0x31a0
[  289.838963][ T9696]  ? __pfx_path_openat+0x10/0x10
[  289.839010][ T9696]  do_file_open+0x20e/0x430
[  289.839043][ T9696]  ? __pfx_do_file_open+0x10/0x10
[  289.839101][ T9696]  ? alloc_fd+0x476/0x790
[  289.839137][ T9696]  ? do_getname+0x191/0x390
[  289.839175][ T9696]  do_sys_openat2+0x10d/0x1e0
[  289.839216][ T9696]  ? __pfx_do_sys_openat2+0x10/0x10
[  289.839267][ T9696]  __x64_sys_openat+0x12d/0x210
[  289.839307][ T9696]  ? __pfx___x64_sys_openat+0x10/0x10
[  289.839350][ T9696]  ? rcu_is_watching+0x12/0xc0
[  289.839384][ T9696]  do_syscall_64+0x115/0x840
[  289.839431][ T9696]  ? clear_bhb_loop+0x40/0x90
[  289.839465][ T9696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.839494][ T9696] RIP: 0033:0x7f45b059ce59
[  289.839515][ T9696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.839541][ T9696] RSP: 002b:00007f45b13ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  289.839565][ T9696] RAX: ffffffffffffffda RBX: 00007f45b0815fa0 RCX: 00007f45b059ce59
[  289.839585][ T9696] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  289.839601][ T9696] RBP: 00007f45b0632d6f R08: 0000000000000000 R09: 0000000000000000
[  289.839617][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.839633][ T9696] R13: 00007f45b0816038 R14: 00007f45b0815fa0 R15: 00007ffd074f8748
[  289.839670][ T9696]  </TASK>
[  290.608277][ T9713] device-mapper: ioctl: name not supplied when creating device
[  291.661923][ T9751] FAULT_INJECTION: forcing a failure.
[  291.661923][ T9751] name failslab, interval 1, probability 0, space 0, times 0
[  291.697691][ T9751] CPU: 0 UID: 0 PID: 9751 Comm: syz.3.734 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  291.697739][ T9751] Tainted: [L]=SOFTLOCKUP
[  291.697749][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  291.697767][ T9751] Call Trace:
[  291.697776][ T9751]  <TASK>
[  291.697788][ T9751]  dump_stack_lvl+0x100/0x190
[  291.697842][ T9751]  should_fail_ex.cold+0x5/0xa
[  291.697879][ T9751]  should_failslab+0xc2/0x120
[  291.697914][ T9751]  __kmalloc_cache_noprof+0x7a/0x6f0
[  291.697954][ T9751]  ? do_epoll_create+0x62/0x4b0
[  291.697997][ T9751]  do_epoll_create+0x62/0x4b0
[  291.698034][ T9751]  __x64_sys_epoll_create+0x45/0x70
[  291.698070][ T9751]  do_syscall_64+0x115/0x840
[  291.698108][ T9751]  ? clear_bhb_loop+0x40/0x90
[  291.698142][ T9751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.698172][ T9751] RIP: 0033:0x7f1731f9ce59
[  291.698197][ T9751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.698225][ T9751] RSP: 002b:00007f1732d7d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5
[  291.698252][ T9751] RAX: ffffffffffffffda RBX: 00007f1732216360 RCX: 00007f1731f9ce59
[  291.698271][ T9751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a
[  291.698288][ T9751] RBP: 00007f1732032d6f R08: 0000000000000000 R09: 0000000000000000
[  291.698305][ T9751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.698330][ T9751] R13: 00007f17322163f8 R14: 00007f1732216360 R15: 00007ffd6677dee8
[  291.698369][ T9751]  </TASK>
[  292.637887][ T9758] device-mapper: ioctl: Unable to rename non-existent device,  to �
[  292.813496][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'.
[  293.114834][ T9780] device-mapper: ioctl: name not supplied when creating device
[  293.266409][ T9783] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  293.275341][ T9783] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  293.300001][ T9784] random: crng reseeded on system resumption
[  293.361141][ T9783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.741'.
[  293.404995][ T9783] hsr_slave_0: left promiscuous mode
[  293.418970][ T9783] hsr_slave_1: left promiscuous mode
[  294.434902][ T9815] 
[  295.549391][ T9841] FAULT_INJECTION: forcing a failure.
[  295.549391][ T9841] name failslab, interval 1, probability 0, space 0, times 0
[  295.576005][ T9841] CPU: 0 UID: 0 PID: 9841 Comm: syz.3.753 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.576054][ T9841] Tainted: [L]=SOFTLOCKUP
[  295.576063][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  295.576077][ T9841] Call Trace:
[  295.576083][ T9841]  <TASK>
[  295.576089][ T9841]  dump_stack_lvl+0x100/0x190
[  295.576120][ T9841]  should_fail_ex.cold+0x5/0xa
[  295.576139][ T9841]  should_failslab+0xc2/0x120
[  295.576158][ T9841]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  295.576175][ T9841]  ? vidtv_psi_short_event_desc_init+0x312/0x5f0
[  295.576199][ T9841]  kstrdup+0x51/0xe0
[  295.576216][ T9841]  vidtv_psi_short_event_desc_init+0x312/0x5f0
[  295.576239][ T9841]  vidtv_channel_s302m_init+0x4fd/0x9b0
[  295.576261][ T9841]  ? trace_kmalloc+0xe3/0x110
[  295.576277][ T9841]  ? __pfx_vidtv_channel_s302m_init+0x10/0x10
[  295.576303][ T9841]  ? __asan_memcpy+0x3c/0x60
[  295.576326][ T9841]  vidtv_channels_init+0x4c/0xb0
[  295.576346][ T9841]  vidtv_mux_init+0x9df/0xbf0
[  295.576370][ T9841]  vidtv_start_feed+0x34e/0x500
[  295.576387][ T9841]  ? __pfx_vidtv_start_feed+0x10/0x10
[  295.576403][ T9841]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  295.576437][ T9841]  dmx_section_feed_start_filtering+0x3a8/0x660
[  295.576469][ T9841]  dvb_dmxdev_filter_start+0x767/0xdd0
[  295.576492][ T9841]  dvb_demux_do_ioctl+0xe64/0x1200
[  295.576514][ T9841]  dvb_usercopy+0x167/0x340
[  295.576538][ T9841]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  295.576556][ T9841]  ? __pfx_dvb_usercopy+0x10/0x10
[  295.576586][ T9841]  ? __fget_files+0x21f/0x3d0
[  295.576608][ T9841]  dvb_demux_ioctl+0x29/0x40
[  295.576621][ T9841]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  295.576635][ T9841]  __x64_sys_ioctl+0x18e/0x210
[  295.576652][ T9841]  do_syscall_64+0x115/0x840
[  295.576672][ T9841]  ? clear_bhb_loop+0x40/0x90
[  295.576691][ T9841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.576707][ T9841] RIP: 0033:0x7f1731f9ce59
[  295.576721][ T9841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.576736][ T9841] RSP: 002b:00007f1732de0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  295.576752][ T9841] RAX: ffffffffffffffda RBX: 00007f1732216090 RCX: 00007f1731f9ce59
[  295.576762][ T9841] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005
[  295.576772][ T9841] RBP: 00007f1732032d6f R08: 0000000000000000 R09: 0000000000000000
[  295.576781][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.576790][ T9841] R13: 00007f1732216128 R14: 00007f1732216090 R15: 00007ffd6677dee8
[  295.576810][ T9841]  </TASK>
[  297.109829][ T9858] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0]
[  298.326474][ T7240] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.748300][ T9911] vhci_hcd vhci_hcd.1: invalid port number 16
[  299.765306][ T9911] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  300.519209][ T9921] nbd: must specify a size in bytes for the device
[  305.668585][T10002] device-mapper: ioctl: name not supplied when creating device
[  305.670192][T10000] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5958] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10000]
[  305.792624][T10000] device-mapper: ioctl: name not supplied when creating device
[  306.037208][T10011] nbd: must specify at least one socket
[  306.066264][ T9931] Process accounting resumed
[  306.618465][T10022] vhci_hcd vhci_hcd.0: invalid port number 69
[  306.632964][T10022] vhci_hcd vhci_hcd.0: default hub control req: a0d9 vb138 i0045 l0
[  306.702229][   T30] audit: type=1800 audit(2147483651.450:7): pid=10022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.797" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  307.004768][T10005] Process accounting resumed
[  307.312051][   T30] audit: type=1800 audit(2147483652.030:8): pid=10040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.799" name="dbroot" dev="configfs" ino=30736 res=0 errno=0
[  307.425338][T10040] db_root: cannot open: /dev/audio1
[  307.479274][T10040] db_root: not a directory: /dev/audio1
[  309.037185][T10080] nbd: must specify at least one socket
[  313.326264][T10164] zswap: compressor � not available
[  313.389646][T10165] block2mtd: illegal erase size
[  313.507450][T10180] netlink: 330 bytes leftover after parsing attributes in process `syz.3.819'.
[  313.952895][T10186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.820'.
[  314.001508][T10187] FAULT_INJECTION: forcing a failure.
[  314.001508][T10187] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  314.046827][T10187] CPU: 0 UID: 0 PID: 10187 Comm: syz.0.821 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  314.046866][T10187] Tainted: [L]=SOFTLOCKUP
[  314.046873][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  314.046890][T10187] Call Trace:
[  314.046898][T10187]  <TASK>
[  314.046906][T10187]  dump_stack_lvl+0x100/0x190
[  314.046948][T10187]  should_fail_ex.cold+0x5/0xa
[  314.046978][T10187]  _copy_to_iter+0x1f3/0x1720
[  314.047012][T10187]  ? show_trace_dev_match+0x1d1/0x2e0
[  314.047039][T10187]  ? __pfx__copy_to_iter+0x10/0x10
[  314.047067][T10187]  ? kernfs_seq_stop+0xcd/0x120
[  314.047102][T10187]  ? kernfs_put_active+0x93/0xe0
[  314.047132][T10187]  seq_read_iter+0xdab/0x1270
[  314.047172][T10187]  kernfs_fop_read_iter+0x46c/0x610
[  314.047202][T10187]  ? rw_verify_area+0xce/0x6d0
[  314.047224][T10187]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[  314.047256][T10187]  vfs_read+0x825/0xb30
[  314.047286][T10187]  ? __pfx_vfs_read+0x10/0x10
[  314.047332][T10187]  ksys_read+0x12a/0x250
[  314.047356][T10187]  ? __pfx_ksys_read+0x10/0x10
[  314.047383][T10187]  ? rcu_is_watching+0x12/0xc0
[  314.047412][T10187]  do_syscall_64+0x115/0x840
[  314.047440][T10187]  ? clear_bhb_loop+0x40/0x90
[  314.047467][T10187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.047489][T10187] RIP: 0033:0x7fa3ca99ce59
[  314.047509][T10187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.047530][T10187] RSP: 002b:00007fa3cb904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  314.047558][T10187] RAX: ffffffffffffffda RBX: 00007fa3cac15fa0 RCX: 00007fa3ca99ce59
[  314.047572][T10187] RDX: 00000000000000af RSI: 0000200000000280 RDI: 0000000000000006
[  314.047585][T10187] RBP: 00007fa3cb904090 R08: 0000000000000000 R09: 0000000000000000
[  314.047598][T10187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.047611][T10187] R13: 00007fa3cac16038 R14: 00007fa3cac15fa0 R15: 00007ffd6e266098
[  314.047643][T10187]  </TASK>
[  315.104240][T10211] zswap: compressor  not available
[  317.282345][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  317.290244][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  318.308247][T10253] futex_wake_op: syz.3.833 tries to shift op by -2048; fix this program
[  318.326687][T10253] 0x000000000001-0x000000020000 : ""
[  318.395537][T10253] ftl_cs: FTL header corrupt!
[  320.217205][ T5633] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  320.533263][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'.
[  320.786282][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'.
[  324.668906][T10372] device-mapper: ioctl: name not supplied when creating device
[  325.494079][T10389] random: crng reseeded on system resumption
[  325.677145][T10395] hub 1-0:1.0: USB hub found
[  325.703577][T10395] hub 1-0:1.0: 1 port detected
[  329.024312][T10426] ubi: mtd0 is already attached to ubi31
[  330.516579][T10484] FAULT_INJECTION: forcing a failure.
[  330.516579][T10484] name failslab, interval 1, probability 0, space 0, times 0
[  330.592648][T10484] CPU: 0 UID: 0 PID: 10484 Comm: syz.0.868 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  330.592693][T10484] Tainted: [L]=SOFTLOCKUP
[  330.592702][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  330.592719][T10484] Call Trace:
[  330.592728][T10484]  <TASK>
[  330.592739][T10484]  dump_stack_lvl+0x100/0x190
[  330.592789][T10484]  should_fail_ex.cold+0x5/0xa
[  330.592822][T10484]  ? x509_fabricate_name.isra.0+0x5ea/0xa10
[  330.592860][T10484]  should_failslab+0xc2/0x120
[  330.592892][T10484]  __kmalloc_noprof+0xe0/0x850
[  330.592932][T10484]  ? __asan_memcpy+0x3c/0x60
[  330.592975][T10484]  x509_fabricate_name.isra.0+0x5ea/0xa10
[  330.593026][T10484]  asn1_ber_decoder+0xd0c/0x2170
[  330.593069][T10484]  ? __pfx_asn1_ber_decoder+0x10/0x10
[  330.593123][T10484]  x509_cert_parse+0x1c9/0x910
[  330.593156][T10484]  ? kasan_save_stack+0x3f/0x50
[  330.593178][T10484]  ? kasan_save_stack+0x30/0x50
[  330.593197][T10484]  ? kasan_save_track+0x14/0x30
[  330.593221][T10484]  pkcs7_extract_cert+0xa4/0x380
[  330.593265][T10484]  asn1_ber_decoder+0x12b3/0x2170
[  330.593308][T10484]  ? __pfx_asn1_ber_decoder+0x10/0x10
[  330.593360][T10484]  pkcs7_parse_message+0x289/0x870
[  330.593408][T10484]  verify_pkcs7_signature+0x30/0xa0
[  330.593443][T10484]  valid_regdb+0x211/0x590
[  330.593477][T10484]  ? __pfx_valid_regdb+0x10/0x10
[  330.593516][T10484]  reg_reload_regdb+0x11a/0x460
[  330.593554][T10484]  ? __pfx_reg_reload_regdb+0x10/0x10
[  330.593592][T10484]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  330.593640][T10484]  ? nl80211_pre_doit+0x19a/0xae0
[  330.593688][T10484]  genl_family_rcv_msg_doit+0x214/0x300
[  330.593736][T10484]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  330.593777][T10484]  ? genl_get_cmd+0x3e7/0x760
[  330.593827][T10484]  ? bpf_lsm_capable+0x9/0x10
[  330.593856][T10484]  ? security_capable+0x80/0x260
[  330.593893][T10484]  genl_rcv_msg+0x560/0x800
[  330.593938][T10484]  ? __pfx_genl_rcv_msg+0x10/0x10
[  330.593978][T10484]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  330.594018][T10484]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[  330.594050][T10484]  ? __pfx_nl80211_post_doit+0x10/0x10
[  330.594105][T10484]  netlink_rcv_skb+0x159/0x420
[  330.594140][T10484]  ? __pfx_genl_rcv_msg+0x10/0x10
[  330.594183][T10484]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  330.594235][T10484]  ? netlink_deliver_tap+0x1ae/0xcc0
[  330.594276][T10484]  genl_rcv+0x28/0x40
[  330.594311][T10484]  netlink_unicast+0x585/0x850
[  330.594353][T10484]  ? __pfx_netlink_unicast+0x10/0x10
[  330.594398][T10484]  netlink_sendmsg+0x8b0/0xda0
[  330.594437][T10484]  ? __pfx_netlink_sendmsg+0x10/0x10
[  330.594470][T10484]  ? __import_iovec+0x1d2/0x640
[  330.594510][T10484]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  330.594544][T10484]  ____sys_sendmsg+0x9e1/0xb70
[  330.594576][T10484]  ? __pfx_netlink_sendmsg+0x10/0x10
[  330.594613][T10484]  ? __pfx_____sys_sendmsg+0x10/0x10
[  330.594664][T10484]  ? __pfx_futex_wake_mark+0x10/0x10
[  330.594705][T10484]  ___sys_sendmsg+0x190/0x1e0
[  330.594746][T10484]  ? __pfx____sys_sendmsg+0x10/0x10
[  330.594828][T10484]  __sys_sendmsg+0x170/0x220
[  330.594858][T10484]  ? __pfx___sys_sendmsg+0x10/0x10
[  330.594887][T10484]  ? __x64_sys_futex+0x34f/0x4d0
[  330.594929][T10484]  ? rcu_is_watching+0x12/0xc0
[  330.594964][T10484]  do_syscall_64+0x115/0x840
[  330.594998][T10484]  ? clear_bhb_loop+0x40/0x90
[  330.595028][T10484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.595057][T10484] RIP: 0033:0x7fa3ca99ce59
[  330.595082][T10484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  330.595109][T10484] RSP: 002b:00007fa3cb8e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  330.595137][T10484] RAX: ffffffffffffffda RBX: 00007fa3cac16090 RCX: 00007fa3ca99ce59
[  330.595157][T10484] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006
[  330.595174][T10484] RBP: 00007fa3caa32d6f R08: 0000000000000000 R09: 0000000000000000
[  330.595190][T10484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  330.595208][T10484] R13: 00007fa3cac16128 R14: 00007fa3cac16090 R15: 00007ffd6e266098
[  330.595248][T10484]  </TASK>
[  331.199196][T10487] hub 1-0:1.0: USB hub found
[  331.237710][T10487] hub 1-0:1.0: 1 port detected
[  331.507814][T10490] Process accounting resumed
[  333.207669][T10534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.876'.
[  336.998253][T10597] netlink: 186 bytes leftover after parsing attributes in process `syz.0.889'.
[  337.058188][T10597] device-mapper: ioctl: name not supplied when creating device
[  337.166428][T10597] Process accounting paused
[  339.877988][   T30] audit: type=1800 audit(2147483671.790:9): pid=10649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.897" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  340.476053][T10659] zero sized request
[  341.234613][T10683] netlink: 'syz.0.907': attribute type 1 has an invalid length.
[  342.404307][T10713] FAULT_INJECTION: forcing a failure.
[  342.404307][T10713] name failslab, interval 1, probability 0, space 0, times 0
[  342.417220][T10713] CPU: 1 UID: 0 PID: 10713 Comm: syz.0.914 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  342.417256][T10713] Tainted: [L]=SOFTLOCKUP
[  342.417262][T10713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  342.417273][T10713] Call Trace:
[  342.417280][T10713]  <TASK>
[  342.417287][T10713]  dump_stack_lvl+0x100/0x190
[  342.417318][T10713]  should_fail_ex.cold+0x5/0xa
[  342.417339][T10713]  ? tomoyo_realpath_from_path+0xb6/0x690
[  342.417361][T10713]  should_failslab+0xc2/0x120
[  342.417380][T10713]  __kmalloc_noprof+0xe0/0x850
[  342.417407][T10713]  ? kfree+0x1dd/0x6c0
[  342.417429][T10713]  tomoyo_realpath_from_path+0xb6/0x690
[  342.417454][T10713]  tomoyo_check_open_permission+0x2af/0x3c0
[  342.417474][T10713]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  342.417499][T10713]  ? hook_file_open+0x24e/0x7a0
[  342.417530][T10713]  ? path_get+0x61/0x80
[  342.417552][T10713]  tomoyo_file_open+0x6b/0x90
[  342.417567][T10713]  security_file_open+0xb5/0x1e0
[  342.417587][T10713]  do_dentry_open+0x588/0x14d0
[  342.417612][T10713]  vfs_open+0x82/0x3f0
[  342.417635][T10713]  path_openat+0x208c/0x31a0
[  342.417657][T10713]  ? trace_sched_exit_tp+0x11c/0x160
[  342.417680][T10713]  ? __pfx_path_openat+0x10/0x10
[  342.417704][T10713]  do_file_open+0x20e/0x430
[  342.417724][T10713]  ? __pfx_do_file_open+0x10/0x10
[  342.417741][T10713]  ? __pfx___schedule+0x10/0x10
[  342.417773][T10713]  ? alloc_fd+0x476/0x790
[  342.417792][T10713]  ? do_getname+0x191/0x390
[  342.417816][T10713]  do_sys_openat2+0x10d/0x1e0
[  342.417839][T10713]  ? __pfx_do_sys_openat2+0x10/0x10
[  342.417869][T10713]  __x64_sys_openat+0x12d/0x210
[  342.417891][T10713]  ? __pfx___x64_sys_openat+0x10/0x10
[  342.417912][T10713]  ? ksys_write+0x1ac/0x250
[  342.417931][T10713]  ? rcu_is_watching+0x12/0xc0
[  342.417950][T10713]  do_syscall_64+0x115/0x840
[  342.417970][T10713]  ? clear_bhb_loop+0x40/0x90
[  342.417987][T10713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.418003][T10713] RIP: 0033:0x7fa3ca99ce59
[  342.418016][T10713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  342.418031][T10713] RSP: 002b:00007fa3cb904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  342.418046][T10713] RAX: ffffffffffffffda RBX: 00007fa3cac15fa0 RCX: 00007fa3ca99ce59
[  342.418057][T10713] RDX: 0000000000008042 RSI: 0000200000001000 RDI: ffffffffffffff9c
[  342.418066][T10713] RBP: 00007fa3caa32d6f R08: 0000000000000000 R09: 0000000000000000
[  342.418076][T10713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  342.418086][T10713] R13: 00007fa3cac16038 R14: 00007fa3cac15fa0 R15: 00007ffd6e266098
[  342.418116][T10713]  </TASK>
[  342.418124][T10713] ERROR: Out of memory at tomoyo_realpath_from_path.
[  342.717833][T10713] device-mapper: ioctl: name not supplied when creating device
[  343.800171][T10730] syz.2.920 (10730): drop_caches: 0
[  347.731701][T10763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.928'.
[  347.745239][T10763] mac80211_hwsim hwsim10 wlan2: entered promiscuous mode
[  347.753586][T10763] mac80211_hwsim hwsim10 wlan2: entered allmulticast mode
[  348.857239][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  348.871723][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  348.885290][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  348.893719][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  348.903385][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  350.117094][T10771] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.127684][T10771] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.144246][T10771] bridge_slave_0: entered allmulticast mode
[  350.161636][T10771] bridge_slave_0: entered promiscuous mode
[  350.178145][T10771] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.187142][T10771] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.194498][T10771] bridge_slave_1: entered allmulticast mode
[  350.202509][T10771] bridge_slave_1: entered promiscuous mode
[  350.450434][T10771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.487911][T10771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  350.554401][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  350.565748][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  350.581452][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  350.593250][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  350.600989][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  350.726970][T10771] team0: Port device team_slave_0 added
[  350.751842][T10771] team0: Port device team_slave_1 added
[  350.849143][T10771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  350.856407][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  350.884947][T10771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  350.936881][T10771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  350.954710][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  350.981569][T10771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.012291][ T5642] Bluetooth: hci4: command tx timeout
[  351.122561][T10771] hsr_slave_0: entered promiscuous mode
[  351.129376][T10771] hsr_slave_1: entered promiscuous mode
[  351.136417][T10771] debugfs: 'hsr0' already exists in 'hsr'
[  351.142519][T10771] Cannot create hsr debugfs directory
[  351.738111][T10771] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  351.750310][T10771] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  351.758850][T10771] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  351.771031][T10771] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  351.779999][T10771] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  351.799278][T10771] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  351.824421][T10771] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  351.853405][T10771] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  352.006150][T10827] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.013894][T10827] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.021150][T10827] bridge_slave_0: entered allmulticast mode
[  352.028511][T10827] bridge_slave_0: entered promiscuous mode
[  352.044525][T10827] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.055464][T10827] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.063091][T10827] bridge_slave_1: entered allmulticast mode
[  352.070173][T10827] bridge_slave_1: entered promiscuous mode
[  352.129194][T10827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.142194][T10827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.198487][T10827] team0: Port device team_slave_0 added
[  352.217895][T10827] team0: Port device team_slave_1 added
[  352.259093][T10827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.266128][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.293644][T10827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.328013][T10827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.341560][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.375358][T10827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.436944][T10827] hsr_slave_0: entered promiscuous mode
[  352.446657][T10827] hsr_slave_1: entered promiscuous mode
[  352.453531][T10827] debugfs: 'hsr0' already exists in 'hsr'
[  352.459369][T10827] Cannot create hsr debugfs directory
[  352.620757][T10873] Scaler: =================  START STATUS  =================
[  352.634574][T10873] Scaler: ==================  END STATUS  ==================
[  352.696571][ T5642] Bluetooth: hci5: command tx timeout
[  352.793070][T10771] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.835428][T10771] 8021q: adding VLAN 0 to HW filter on device team0
[  352.925361][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.932500][ T7240] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.953534][  T202] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.960666][  T202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.057826][T10827] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  353.070001][T10827] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  353.090072][T10827] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  353.096986][ T5642] Bluetooth: hci4: command tx timeout
[  353.120014][T10827] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  353.133608][T10827] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  353.146584][T10827] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  353.257047][T10827] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  353.268325][T10827] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  353.478901][T10827] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.535117][T10827] 8021q: adding VLAN 0 to HW filter on device team0
[  353.569581][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.576845][ T7236] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.611929][ T7241] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.619105][ T7241] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.063129][T10771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.329276][T10827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.483279][T10771] veth0_vlan: entered promiscuous mode
[  354.510864][T10771] veth1_vlan: entered promiscuous mode
[  354.594092][T10771] veth0_macvtap: entered promiscuous mode
[  354.625815][T10771] veth1_macvtap: entered promiscuous mode
[  354.672971][T10771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.698193][T10771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.737131][  T202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.760198][  T202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.774994][ T5642] Bluetooth: hci5: command tx timeout
[  354.793615][  T202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.805205][  T202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.049287][ T7240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.057438][T10827] veth0_vlan: entered promiscuous mode
[  355.075238][ T7240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.108856][T10932] FAULT_INJECTION: forcing a failure.
[  355.108856][T10932] name fail_futex, interval 1, probability 0, space 0, times 0
[  355.125615][T10932] CPU: 0 UID: 0 PID: 10932 Comm: syz.2.943 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  355.125664][T10932] Tainted: [L]=SOFTLOCKUP
[  355.125675][T10932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  355.125692][T10932] Call Trace:
[  355.125702][T10932]  <TASK>
[  355.125713][T10932]  dump_stack_lvl+0x100/0x190
[  355.125849][T10932]  should_fail_ex.cold+0x5/0xa
[  355.125907][T10932]  get_futex_key+0x1d2/0x1510
[  355.125981][T10932]  ? __pfx_get_futex_key+0x10/0x10
[  355.126031][T10932]  ? find_held_lock+0x2b/0x80
[  355.126085][T10932]  ? __fget_files+0x215/0x3d0
[  355.126135][T10932]  ? __fget_files+0x215/0x3d0
[  355.126174][T10932]  futex_wake+0xea/0x530
[  355.126214][T10932]  ? __pfx_futex_wake+0x10/0x10
[  355.126253][T10932]  ? irqentry_exit+0x24d/0x970
[  355.126406][T10932]  ? lockdep_hardirqs_on+0x78/0x100
[  355.126448][T10932]  do_futex+0x32b/0x350
[  355.126477][T10932]  ? __pfx_do_futex+0x10/0x10
[  355.126514][T10932]  __x64_sys_futex+0x34f/0x4d0
[  355.126548][T10932]  ? __pfx___x64_sys_futex+0x10/0x10
[  355.126579][T10932]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  355.126638][T10932]  ? rcu_is_watching+0x12/0xc0
[  355.126677][T10932]  do_syscall_64+0x115/0x840
[  355.126747][T10932]  ? clear_bhb_loop+0x40/0x90
[  355.126794][T10932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.126824][T10932] RIP: 0033:0x7f0490b9ce59
[  355.126850][T10932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  355.126879][T10932] RSP: 002b:00007f04919f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  355.126909][T10932] RAX: ffffffffffffffda RBX: 00007f0490e16098 RCX: 00007f0490b9ce59
[  355.126928][T10932] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0490e1609c
[  355.126947][T10932] RBP: 00007f0490e16090 R08: 0000000000000001 R09: 0000000000000000
[  355.126964][T10932] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  355.126979][T10932] R13: 00007f0490e16128 R14: 00007fff269d4fb0 R15: 00007fff269d5098
[  355.127021][T10932]  </TASK>
[  355.350064][T10827] veth1_vlan: entered promiscuous mode
[  355.373035][T10827] veth0_macvtap: entered promiscuous mode
[  355.381580][ T5642] Bluetooth: hci4: command tx timeout
[  355.384510][T10827] veth1_macvtap: entered promiscuous mode
[  355.408843][T10827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.421174][T10827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.465634][  T202] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.483590][  T202] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.505066][ T7240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.513255][  T202] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.531558][  T202] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.540398][ T7240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.738838][T10936] random: crng reseeded on system resumption
[  355.766769][  T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.795806][  T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.874109][  T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.897547][  T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.851632][ T5642] Bluetooth: hci5: command tx timeout
[  357.008031][T10965] device-mapper: ioctl: name not supplied when creating device
[  357.232065][T10968] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  357.407131][T10972] ima: policy update failed
[  357.411714][ T5642] Bluetooth: hci4: command tx timeout
[  357.418259][   T30] audit: type=1802 audit(2147483689.330:10): pid=10972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.950" res=0 errno=0
[  357.819287][T10960] random: crng reseeded on system resumption
[  358.652163][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'.
[  358.931588][ T5642] Bluetooth: hci5: command tx timeout
[  359.053931][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  359.069120][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  359.080505][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  359.089628][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  359.097997][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  359.754797][T11014] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  361.171984][ T5642] Bluetooth: hci6: command tx timeout
[  361.361293][T10995] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.369042][T10995] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.378823][T10995] bridge_slave_0: entered allmulticast mode
[  361.401179][T10995] bridge_slave_0: entered promiscuous mode
[  361.449175][T10995] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.472236][T10995] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.493607][T10995] bridge_slave_1: entered allmulticast mode
[  361.514590][T11046] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  361.529681][T10995] bridge_slave_1: entered promiscuous mode
[  361.713844][T10995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.771286][T10995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.887877][T10995] team0: Port device team_slave_0 added
[  361.939945][T10995] team0: Port device team_slave_1 added
[  362.071089][T11058] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  362.218636][T10995] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.229531][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  362.276257][T10995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.341258][T10995] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.350134][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  362.379804][T10995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.559104][T10995] hsr_slave_0: entered promiscuous mode
[  362.573381][T10995] hsr_slave_1: entered promiscuous mode
[  362.587562][T10995] debugfs: 'hsr0' already exists in 'hsr'
[  362.601493][T10995] Cannot create hsr debugfs directory
[  362.703026][T11069] netlink: 350 bytes leftover after parsing attributes in process `syz.2.967'.
[  363.254709][ T5642] Bluetooth: hci6: command tx timeout
[  363.516182][T11076] netlink: 'syz.4.969': attribute type 1 has an invalid length.
[  363.532793][T11076] netlink: 33 bytes leftover after parsing attributes in process `syz.4.969'.
[  363.709420][T10995] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  363.752445][T10995] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  363.775273][T10995] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  363.811091][T10995] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  363.829580][T10995] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  363.869846][T10995] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  363.895784][T10995] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  363.923527][T10995] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  364.100130][T10995] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.128489][T10995] 8021q: adding VLAN 0 to HW filter on device team0
[  364.154523][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.161819][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.180221][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.187444][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.804081][T11114] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  365.228755][T10995] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.332458][ T5642] Bluetooth: hci6: command tx timeout
[  366.031809][T10995] veth0_vlan: entered promiscuous mode
[  366.085486][T10995] veth1_vlan: entered promiscuous mode
[  366.136904][T10995] veth0_macvtap: entered promiscuous mode
[  366.159916][T10995] veth1_macvtap: entered promiscuous mode
[  366.195950][T10995] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.223256][T10995] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.247153][ T1338] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.266358][ T1338] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.277229][ T1338] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.290540][ T1338] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.483374][ T7240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.501879][ T7240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.589506][ T7240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.610993][ T7240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.834715][T11159] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  367.411988][ T5642] Bluetooth: hci6: command tx timeout
[  368.563778][T11210] FAULT_INJECTION: forcing a failure.
[  368.563778][T11210] name failslab, interval 1, probability 0, space 0, times 0
[  368.585532][T11210] CPU: 1 UID: 0 PID: 11210 Comm: syz.2.989 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  368.585583][T11210] Tainted: [L]=SOFTLOCKUP
[  368.585594][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  368.585610][T11210] Call Trace:
[  368.585619][T11210]  <TASK>
[  368.585630][T11210]  dump_stack_lvl+0x100/0x190
[  368.585690][T11210]  should_fail_ex.cold+0x5/0xa
[  368.585727][T11210]  should_failslab+0xc2/0x120
[  368.585799][T11210]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  368.585836][T11210]  ? vidtv_psi_service_desc_init+0x27c/0x4c0
[  368.586008][T11210]  kstrdup+0x51/0xe0
[  368.586051][T11210]  vidtv_psi_service_desc_init+0x27c/0x4c0
[  368.586094][T11210]  vidtv_psi_desc_clone+0x496/0x5d0
[  368.586133][T11210]  vidtv_channel_si_init+0x4b7/0x18f0
[  368.586197][T11210]  vidtv_mux_init+0x526/0xbf0
[  368.586244][T11210]  vidtv_start_feed+0x34e/0x500
[  368.586278][T11210]  ? __pfx_vidtv_start_feed+0x10/0x10
[  368.586313][T11210]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  368.586366][T11210]  dmx_section_feed_start_filtering+0x3a8/0x660
[  368.586493][T11210]  dvb_dmxdev_filter_start+0x767/0xdd0
[  368.586538][T11210]  dvb_demux_do_ioctl+0xe64/0x1200
[  368.586581][T11210]  dvb_usercopy+0x167/0x340
[  368.586649][T11210]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  368.586681][T11210]  ? __pfx_dvb_usercopy+0x10/0x10
[  368.586740][T11210]  ? __fget_files+0x21f/0x3d0
[  368.586781][T11210]  dvb_demux_ioctl+0x29/0x40
[  368.586807][T11210]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  368.586835][T11210]  __x64_sys_ioctl+0x18e/0x210
[  368.586867][T11210]  do_syscall_64+0x115/0x840
[  368.586905][T11210]  ? clear_bhb_loop+0x40/0x90
[  368.586942][T11210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.586972][T11210] RIP: 0033:0x7f0490b9ce59
[  368.586997][T11210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  368.587024][T11210] RSP: 002b:00007f04919f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  368.587053][T11210] RAX: ffffffffffffffda RBX: 00007f0490e16090 RCX: 00007f0490b9ce59
[  368.587073][T11210] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005
[  368.587090][T11210] RBP: 00007f0490c32d6f R08: 0000000000000000 R09: 0000000000000000
[  368.587106][T11210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.587122][T11210] R13: 00007f0490e16128 R14: 00007f0490e16090 R15: 00007fff269d5098
[  368.587168][T11210]  </TASK>
[  372.169055][T11278] FAULT_INJECTION: forcing a failure.
[  372.169055][T11278] name failslab, interval 1, probability 0, space 0, times 0
[  372.239769][T11278] CPU: 0 UID: 0 PID: 11278 Comm: syz.5.997 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  372.239806][T11278] Tainted: [L]=SOFTLOCKUP
[  372.239812][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  372.239822][T11278] Call Trace:
[  372.239827][T11278]  <TASK>
[  372.239834][T11278]  dump_stack_lvl+0x100/0x190
[  372.239866][T11278]  should_fail_ex.cold+0x5/0xa
[  372.239888][T11278]  should_failslab+0xc2/0x120
[  372.239909][T11278]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  372.239931][T11278]  ? anon_vma_fork+0x8d/0x6b0
[  372.239963][T11278]  anon_vma_fork+0x8d/0x6b0
[  372.240000][T11278]  ? vm_area_dup+0x59d/0x8e0
[  372.240023][T11278]  dup_mmap+0x143e/0x21b0
[  372.240049][T11278]  ? __pfx_dup_mmap+0x10/0x10
[  372.240067][T11278]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  372.240197][T11278]  ? __lock_acquire+0x4a5/0x2630
[  372.240222][T11278]  ? find_held_lock+0x2b/0x80
[  372.240240][T11278]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  372.240358][T11278]  copy_process+0x6c78/0x7ed0
[  372.240386][T11278]  ? __futex_wait+0x256/0x300
[  372.240416][T11278]  ? __pfx_copy_process+0x10/0x10
[  372.240436][T11278]  ? find_held_lock+0x2b/0x80
[  372.240461][T11278]  kernel_clone+0x176/0x9e0
[  372.240479][T11278]  ? __pfx_futex_wait+0x10/0x10
[  372.240498][T11278]  ? __pfx_kernel_clone+0x10/0x10
[  372.240527][T11278]  __do_sys_clone+0xd9/0x120
[  372.240546][T11278]  ? __pfx___do_sys_clone+0x10/0x10
[  372.240565][T11278]  ? fd_install+0x24f/0x580
[  372.240593][T11278]  ? rcu_is_watching+0x12/0xc0
[  372.240612][T11278]  do_syscall_64+0x115/0x840
[  372.240632][T11278]  ? clear_bhb_loop+0x40/0x90
[  372.240650][T11278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.240665][T11278] RIP: 0033:0x7fe9aef9ce59
[  372.240680][T11278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  372.240695][T11278] RSP: 002b:00007fe9acdd2fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  372.240709][T11278] RAX: ffffffffffffffda RBX: 00007fe9af216270 RCX: 00007fe9aef9ce59
[  372.240720][T11278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  372.240729][T11278] RBP: 00007fe9af032d6f R08: 0000000000000000 R09: 0000000000000000
[  372.240738][T11278] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  372.240748][T11278] R13: 00007fe9af216308 R14: 00007fe9af216270 R15: 00007ffc9644fad8
[  372.240770][T11278]  </TASK>
[  374.110010][T11299] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  374.231298][T11301] FAULT_INJECTION: forcing a failure.
[  374.231298][T11301] name failslab, interval 1, probability 0, space 0, times 0
[  374.265130][T11301] CPU: 0 UID: 0 PID: 11301 Comm: syz.6.1003 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  374.265179][T11301] Tainted: [L]=SOFTLOCKUP
[  374.265190][T11301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  374.265208][T11301] Call Trace:
[  374.265219][T11301]  <TASK>
[  374.265230][T11301]  dump_stack_lvl+0x100/0x190
[  374.265285][T11301]  should_fail_ex.cold+0x5/0xa
[  374.265322][T11301]  should_failslab+0xc2/0x120
[  374.265357][T11301]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  374.265389][T11301]  ? xfrm4_net_init+0x9e/0x1c0
[  374.265557][T11301]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  374.265604][T11301]  kmemdup_noprof+0x29/0x60
[  374.265635][T11301]  xfrm4_net_init+0x9e/0x1c0
[  374.265674][T11301]  ? __pfx_xfrm4_net_init+0x10/0x10
[  374.265713][T11301]  ops_init+0x1e2/0x5f0
[  374.265803][T11301]  setup_net+0x118/0x3a0
[  374.265835][T11301]  ? __pfx_setup_net+0x10/0x10
[  374.265865][T11301]  ? mutex_init_lockdep+0xf1/0x120
[  374.265896][T11301]  copy_net_ns+0x46f/0x7c0
[  374.265931][T11301]  create_new_namespaces+0x3ea/0xac0
[  374.265980][T11301]  unshare_nsproxy_namespaces+0xf2/0x220
[  374.266019][T11301]  ksys_unshare+0x438/0xab0
[  374.266059][T11301]  ? __pfx_ksys_unshare+0x10/0x10
[  374.266091][T11301]  ? xfd_validate_state+0x129/0x190
[  374.266146][T11301]  __x64_sys_unshare+0x31/0x40
[  374.266184][T11301]  do_syscall_64+0x115/0x840
[  374.266221][T11301]  ? clear_bhb_loop+0x40/0x90
[  374.266255][T11301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.266283][T11301] RIP: 0033:0x7f4f60f9ce59
[  374.266306][T11301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  374.266333][T11301] RSP: 002b:00007f4f61d95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  374.266361][T11301] RAX: ffffffffffffffda RBX: 00007f4f61215fa0 RCX: 00007f4f60f9ce59
[  374.266380][T11301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  374.266396][T11301] RBP: 00007f4f61032d6f R08: 0000000000000000 R09: 0000000000000000
[  374.266412][T11301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  374.266428][T11301] R13: 00007f4f61216038 R14: 00007f4f61215fa0 R15: 00007ffddf097cf8
[  374.266466][T11301]  </TASK>
[  375.453289][T11326] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1006'.
[  375.636238][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'.
[  375.883355][T11337] FAULT_INJECTION: forcing a failure.
[  375.883355][T11337] name failslab, interval 1, probability 0, space 0, times 0
[  375.918343][T11339] FAULT_INJECTION: forcing a failure.
[  375.918343][T11339] name failslab, interval 1, probability 0, space 0, times 0
[  375.943133][T11339] CPU: 0 UID: 0 PID: 11339 Comm: syz.5.1010 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  375.943179][T11339] Tainted: [L]=SOFTLOCKUP
[  375.943190][T11339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  375.943206][T11339] Call Trace:
[  375.943216][T11339]  <TASK>
[  375.943226][T11339]  dump_stack_lvl+0x100/0x190
[  375.943278][T11339]  should_fail_ex.cold+0x5/0xa
[  375.943313][T11339]  ? blk_rq_map_user_iov+0x2a5/0x14c0
[  375.943457][T11339]  should_failslab+0xc2/0x120
[  375.943493][T11339]  __kmalloc_noprof+0xe0/0x850
[  375.943541][T11339]  blk_rq_map_user_iov+0x2a5/0x14c0
[  375.943588][T11339]  ? __pfx_blk_rq_map_user_iov+0x10/0x10
[  375.943631][T11339]  ? policy_nodemask+0xed/0x4f0
[  375.943673][T11339]  ? find_held_lock+0x2b/0x80
[  375.943705][T11339]  ? sg_common_write.isra.0+0xe26/0x1b90
[  375.943812][T11339]  ? sg_common_write.isra.0+0xe26/0x1b90
[  375.943850][T11339]  ? import_ubuf+0x1b6/0x220
[  375.943963][T11339]  blk_rq_map_user_io+0x1ff/0x230
[  375.944007][T11339]  ? __pfx_blk_rq_map_user_io+0x10/0x10
[  375.944046][T11339]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  375.944110][T11339]  sg_common_write.isra.0+0xf74/0x1b90
[  375.944165][T11339]  ? __pfx_sg_common_write.isra.0+0x10/0x10
[  375.944218][T11339]  sg_write+0x7eb/0xdb0
[  375.944260][T11339]  ? __pfx_sg_write+0x10/0x10
[  375.944332][T11339]  ? apparmor_file_permission+0x13f/0x1c0
[  375.944453][T11339]  ? bpf_lsm_file_permission+0x9/0x10
[  375.944491][T11339]  ? security_file_permission+0x76/0x210
[  375.944561][T11339]  ? rw_verify_area+0xce/0x6d0
[  375.944601][T11339]  vfs_write+0x2aa/0x1070
[  375.944633][T11339]  ? __pfx_sg_write+0x10/0x10
[  375.944674][T11339]  ? __pfx_vfs_write+0x10/0x10
[  375.944703][T11339]  ? find_held_lock+0x2b/0x80
[  375.944737][T11339]  ? __fget_files+0x215/0x3d0
[  375.944768][T11339]  ? __fget_files+0x215/0x3d0
[  375.944805][T11339]  ? __fget_files+0x21f/0x3d0
[  375.944847][T11339]  ksys_write+0x12a/0x250
[  375.944878][T11339]  ? __pfx_ksys_write+0x10/0x10
[  375.944912][T11339]  ? rcu_is_watching+0x12/0xc0
[  375.944949][T11339]  do_syscall_64+0x115/0x840
[  375.944986][T11339]  ? clear_bhb_loop+0x40/0x90
[  375.945020][T11339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.945048][T11339] RIP: 0033:0x7fe9aef9ce59
[  375.945072][T11339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.945100][T11339] RSP: 002b:00007fe9afda0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  375.945126][T11339] RAX: ffffffffffffffda RBX: 00007fe9af215fa0 RCX: 00007fe9aef9ce59
[  375.945146][T11339] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003
[  375.945162][T11339] RBP: 00007fe9af032d6f R08: 0000000000000000 R09: 0000000000000000
[  375.945179][T11339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  375.945195][T11339] R13: 00007fe9af216038 R14: 00007fe9af215fa0 R15: 00007ffc9644fad8
[  375.945232][T11339]  </TASK>
[  376.241479][T11337] CPU: 1 UID: 0 PID: 11337 Comm: syz.2.1009 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  376.241520][T11337] Tainted: [L]=SOFTLOCKUP
[  376.241529][T11337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  376.241545][T11337] Call Trace:
[  376.241554][T11337]  <TASK>
[  376.241565][T11337]  dump_stack_lvl+0x100/0x190
[  376.241619][T11337]  should_fail_ex.cold+0x5/0xa
[  376.241655][T11337]  should_failslab+0xc2/0x120
[  376.241691][T11337]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  376.241734][T11337]  ? __d_alloc+0x34/0xa40
[  376.241770][T11337]  ? lockdep_init_map_type+0x5c/0x250
[  376.241821][T11337]  __d_alloc+0x34/0xa40
[  376.241872][T11337]  d_alloc_pseudo+0x1c/0xc0
[  376.241898][T11337]  alloc_file_pseudo+0xcf/0x230
[  376.241942][T11337]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  376.241983][T11337]  ? alloc_fd+0x476/0x790
[  376.242022][T11337]  sock_alloc_file+0x50/0x210
[  376.242157][T11337]  __sys_socket+0x1c0/0x260
[  376.242197][T11337]  ? __pfx___sys_socket+0x10/0x10
[  376.242231][T11337]  ? ksys_write+0x1ac/0x250
[  376.242272][T11337]  __x64_sys_socket+0x72/0xb0
[  376.242308][T11337]  ? lockdep_hardirqs_on+0x78/0x100
[  376.242346][T11337]  do_syscall_64+0x115/0x840
[  376.242383][T11337]  ? clear_bhb_loop+0x40/0x90
[  376.242417][T11337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.242446][T11337] RIP: 0033:0x7f0490b9ce59
[  376.242470][T11337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  376.242498][T11337] RSP: 002b:00007f04919f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  376.242524][T11337] RAX: ffffffffffffffda RBX: 00007f0490e16090 RCX: 00007f0490b9ce59
[  376.242541][T11337] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  376.242560][T11337] RBP: 00007f0490c32d6f R08: 0000000000000000 R09: 0000000000000000
[  376.242577][T11337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.242594][T11337] R13: 00007f0490e16128 R14: 00007f0490e16090 R15: 00007fff269d5098
[  376.242630][T11337]  </TASK>
[  376.282364][T11314] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  377.100380][T11347] FAULT_INJECTION: forcing a failure.
[  377.100380][T11347] name failslab, interval 1, probability 0, space 0, times 0
[  377.150649][T11347] CPU: 0 UID: 0 PID: 11347 Comm: syz.4.1012 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  377.150697][T11347] Tainted: [L]=SOFTLOCKUP
[  377.150708][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  377.150726][T11347] Call Trace:
[  377.150736][T11347]  <TASK>
[  377.150748][T11347]  dump_stack_lvl+0x100/0x190
[  377.150804][T11347]  should_fail_ex.cold+0x5/0xa
[  377.150841][T11347]  should_failslab+0xc2/0x120
[  377.150876][T11347]  __kmalloc_cache_noprof+0x7a/0x6f0
[  377.150916][T11347]  ? vidtv_psi_sdt_service_init+0x52/0x200
[  377.150964][T11347]  vidtv_psi_sdt_service_init+0x52/0x200
[  377.151006][T11347]  vidtv_channel_si_init+0x5d4/0x18f0
[  377.151063][T11347]  vidtv_mux_init+0x526/0xbf0
[  377.151109][T11347]  vidtv_start_feed+0x34e/0x500
[  377.151142][T11347]  ? __pfx_vidtv_start_feed+0x10/0x10
[  377.151175][T11347]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  377.151229][T11347]  dmx_section_feed_start_filtering+0x3a8/0x660
[  377.151278][T11347]  dvb_dmxdev_filter_start+0x767/0xdd0
[  377.151321][T11347]  dvb_demux_do_ioctl+0xe64/0x1200
[  377.151365][T11347]  dvb_usercopy+0x167/0x340
[  377.151404][T11347]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  377.151433][T11347]  ? __pfx_dvb_usercopy+0x10/0x10
[  377.151493][T11347]  ? __fget_files+0x21f/0x3d0
[  377.151529][T11347]  dvb_demux_ioctl+0x29/0x40
[  377.151552][T11347]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  377.151576][T11347]  __x64_sys_ioctl+0x18e/0x210
[  377.151606][T11347]  do_syscall_64+0x115/0x840
[  377.151645][T11347]  ? clear_bhb_loop+0x40/0x90
[  377.151680][T11347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.151708][T11347] RIP: 0033:0x7f17f8f9ce59
[  377.151731][T11347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.151759][T11347] RSP: 002b:00007f17f9eb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  377.151789][T11347] RAX: ffffffffffffffda RBX: 00007f17f9216090 RCX: 00007f17f8f9ce59
[  377.151808][T11347] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005
[  377.151825][T11347] RBP: 00007f17f9032d6f R08: 0000000000000000 R09: 0000000000000000
[  377.151842][T11347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.151858][T11347] R13: 00007f17f9216128 R14: 00007f17f9216090 R15: 00007ffdb3676f98
[  377.151898][T11347]  </TASK>
[  378.243537][T11359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1015'.
[  378.694952][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  378.706101][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  382.378094][T11431] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  382.623643][T11424] FAULT_INJECTION: forcing a failure.
[  382.623643][T11424] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  382.750191][T11424] CPU: 1 UID: 0 PID: 11424 Comm: syz.4.1028 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  382.750233][T11424] Tainted: [L]=SOFTLOCKUP
[  382.750241][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  382.750256][T11424] Call Trace:
[  382.750265][T11424]  <TASK>
[  382.750274][T11424]  dump_stack_lvl+0x100/0x190
[  382.750322][T11424]  should_fail_ex.cold+0x5/0xa
[  382.750355][T11424]  _copy_from_iter+0x1f4/0x1690
[  382.750395][T11424]  ? __asan_memset+0x23/0x50
[  382.750433][T11424]  ? __pfx__copy_from_iter+0x10/0x10
[  382.750466][T11424]  ? __pfx___alloc_skb+0x10/0x10
[  382.750594][T11424]  netlink_sendmsg+0x808/0xda0
[  382.750684][T11424]  ? __pfx_netlink_sendmsg+0x10/0x10
[  382.750719][T11424]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  382.750749][T11424]  sock_write_iter+0x524/0x5a0
[  382.750788][T11424]  ? __pfx_netlink_sendmsg+0x10/0x10
[  382.750820][T11424]  ? __pfx_sock_write_iter+0x10/0x10
[  382.750864][T11424]  ? bpf_lsm_file_permission+0x9/0x10
[  382.750889][T11424]  ? security_file_permission+0x76/0x210
[  382.750923][T11424]  ? rw_verify_area+0xce/0x6d0
[  382.750952][T11424]  vfs_write+0x6ac/0x1070
[  382.750985][T11424]  ? __pfx_sock_write_iter+0x10/0x10
[  382.751020][T11424]  ? __pfx_vfs_write+0x10/0x10
[  382.751046][T11424]  ? find_held_lock+0x2b/0x80
[  382.751099][T11424]  ksys_write+0x1f8/0x250
[  382.751127][T11424]  ? __pfx_ksys_write+0x10/0x10
[  382.751159][T11424]  ? rcu_is_watching+0x12/0xc0
[  382.751192][T11424]  do_syscall_64+0x115/0x840
[  382.751226][T11424]  ? clear_bhb_loop+0x40/0x90
[  382.751257][T11424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.751283][T11424] RIP: 0033:0x7f17f8f9ce59
[  382.751306][T11424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  382.751331][T11424] RSP: 002b:00007f17f9eb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  382.751356][T11424] RAX: ffffffffffffffda RBX: 00007f17f9216090 RCX: 00007f17f8f9ce59
[  382.751374][T11424] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000009
[  382.751388][T11424] RBP: 00007f17f9eb4090 R08: 0000000000000000 R09: 0000000000000000
[  382.751402][T11424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.751415][T11424] R13: 00007f17f9216128 R14: 00007f17f9216090 R15: 00007ffdb3676f98
[  382.751451][T11424]  </TASK>
[  383.079466][ T5642] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18
[  383.313912][T11440] random: crng reseeded on system resumption
[  383.848723][T11451] FAULT_INJECTION: forcing a failure.
[  383.848723][T11451] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  383.921917][T11451] CPU: 0 UID: 0 PID: 11451 Comm: syz.2.1033 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  383.921956][T11451] Tainted: [L]=SOFTLOCKUP
[  383.921965][T11451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  383.921978][T11451] Call Trace:
[  383.921986][T11451]  <TASK>
[  383.921995][T11451]  dump_stack_lvl+0x100/0x190
[  383.922043][T11451]  should_fail_ex.cold+0x5/0xa
[  383.922069][T11451]  ? prepare_alloc_pages+0x16d/0x5f0
[  383.922105][T11451]  should_fail_alloc_page+0xeb/0x140
[  383.922138][T11451]  prepare_alloc_pages+0x1f0/0x5f0
[  383.922175][T11451]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  383.922217][T11451]  ? is_bpf_text_address+0x8a/0x1a0
[  383.922290][T11451]  ? bpf_ksym_find+0x124/0x1c0
[  383.922323][T11451]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  383.922363][T11451]  ? is_bpf_text_address+0x94/0x1a0
[  383.922396][T11451]  ? kernel_text_address+0x8d/0x100
[  383.922421][T11451]  ? stack_trace_save+0x8e/0xc0
[  383.922456][T11451]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  383.922503][T11451]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  383.922550][T11451]  ? mas_wr_store_entry+0xa1/0x1e80
[  383.922667][T11451]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  383.922704][T11451]  ? policy_nodemask+0xed/0x4f0
[  383.922737][T11451]  alloc_pages_mpol+0x1fb/0x540
[  383.922768][T11451]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  383.922808][T11451]  folio_alloc_mpol_noprof+0x36/0x260
[  383.922842][T11451]  shmem_alloc_folio+0x135/0x160
[  383.922886][T11451]  shmem_alloc_and_add_folio+0x371/0xd40
[  383.922933][T11451]  ? mtree_alloc_cyclic+0x14f/0x1f0
[  383.922989][T11451]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  383.923032][T11451]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  383.923068][T11451]  shmem_get_folio_gfp+0x6ab/0x1900
[  383.923101][T11451]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  383.923124][T11451]  ? __pfx_simple_offset_add+0x10/0x10
[  383.923165][T11451]  ? __pfx_make_vfsuid+0x10/0x10
[  383.923195][T11451]  shmem_symlink+0x5f2/0xa00
[  383.923229][T11451]  ? __pfx_shmem_symlink+0x10/0x10
[  383.923253][T11451]  ? security_inode_permission+0xbf/0x250
[  383.923286][T11451]  ? inode_permission+0x374/0x620
[  383.923320][T11451]  ? tomoyo_path_symlink+0x97/0xe0
[  383.923425][T11451]  vfs_symlink+0x178/0x4d0
[  383.923469][T11451]  filename_symlinkat+0x2a6/0x560
[  383.923508][T11451]  ? __pfx_filename_symlinkat+0x10/0x10
[  383.923542][T11451]  ? strncpy_from_user+0x19d/0x2d0
[  383.923583][T11451]  ? do_getname+0x191/0x390
[  383.923622][T11451]  __x64_sys_symlink+0x79/0xb0
[  383.923656][T11451]  do_syscall_64+0x115/0x840
[  383.923690][T11451]  ? clear_bhb_loop+0x40/0x90
[  383.923721][T11451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.923748][T11451] RIP: 0033:0x7f0490b9ce59
[  383.923769][T11451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  383.923794][T11451] RSP: 002b:00007f0491a17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  383.923819][T11451] RAX: ffffffffffffffda RBX: 00007f0490e15fa0 RCX: 00007f0490b9ce59
[  383.923837][T11451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
[  383.923858][T11451] RBP: 00007f0490c32d6f R08: 0000000000000000 R09: 0000000000000000
[  383.923874][T11451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  383.923889][T11451] R13: 00007f0490e16038 R14: 00007f0490e15fa0 R15: 00007fff269d5098
[  383.923927][T11451]  </TASK>
[  385.171598][ T5633] Bluetooth: hci5: command 0x2016 tx timeout
[  386.527375][ T5633] Bluetooth: hci5: unexpected event for opcode 0x7c89
[  386.839271][T11504] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1043'.
[  389.685926][T11538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.874181][T11556] FAULT_INJECTION: forcing a failure.
[  389.874181][T11556] name failslab, interval 1, probability 0, space 0, times 0
[  389.904590][T11556] CPU: 0 UID: 0 PID: 11556 Comm: syz.6.1054 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  389.904635][T11556] Tainted: [L]=SOFTLOCKUP
[  389.904645][T11556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  389.904661][T11556] Call Trace:
[  389.904671][T11556]  <TASK>
[  389.904683][T11556]  dump_stack_lvl+0x100/0x190
[  389.904747][T11556]  should_fail_ex.cold+0x5/0xa
[  389.904784][T11556]  should_failslab+0xc2/0x120
[  389.904819][T11556]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  389.904864][T11556]  ? __alloc_skb+0x140/0x710
[  389.904898][T11556]  __alloc_skb+0x140/0x710
[  389.904921][T11556]  ? __alloc_skb+0x5b7/0x710
[  389.904947][T11556]  ? __pfx___alloc_skb+0x10/0x10
[  389.904973][T11556]  ? ip6_dst_lookup_tail.constprop.0+0x7bc/0x2110
[  389.905146][T11556]  __ip6_append_data+0x34f1/0x4bf0
[  389.905196][T11556]  ? __pfx_raw6_getfrag+0x10/0x10
[  389.905270][T11556]  ? __pfx___ip6_append_data+0x10/0x10
[  389.905312][T11556]  ? __pfx_ip6_mtu+0x10/0x10
[  389.905371][T11556]  ? ip6_setup_cork+0x5be/0x14c0
[  389.905417][T11556]  ip6_append_data+0x10b/0x410
[  389.905456][T11556]  ? __pfx_raw6_getfrag+0x10/0x10
[  389.905492][T11556]  rawv6_sendmsg+0x169c/0x4420
[  389.905535][T11556]  ? aa_profile_af_perm+0x2e0/0x3a0
[  389.905610][T11556]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  389.905643][T11556]  ? register_lock_class+0x270/0x560
[  389.905760][T11556]  ? __import_iovec+0x1d2/0x640
[  389.905803][T11556]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  389.905841][T11556]  ? inet_sendmsg+0x11c/0x140
[  389.905933][T11556]  inet_sendmsg+0x11c/0x140
[  389.905977][T11556]  ____sys_sendmsg+0x98d/0xb70
[  389.906012][T11556]  ? __pfx_inet_sendmsg+0x10/0x10
[  389.906056][T11556]  ? __pfx_____sys_sendmsg+0x10/0x10
[  389.906097][T11556]  ? rcu_is_watching+0x12/0xc0
[  389.906127][T11556]  ? ___sys_sendmsg+0x19d/0x1e0
[  389.906161][T11556]  ? kfree+0x1dd/0x6c0
[  389.906203][T11556]  ___sys_sendmsg+0x190/0x1e0
[  389.906242][T11556]  ? __pfx____sys_sendmsg+0x10/0x10
[  389.906310][T11556]  ? __pfx___might_resched+0x10/0x10
[  389.906358][T11556]  __sys_sendmmsg+0x205/0x430
[  389.906426][T11556]  ? __pfx___sys_sendmmsg+0x10/0x10
[  389.906464][T11556]  ? __pfx_do_futex+0x10/0x10
[  389.906509][T11556]  ? xfd_validate_state+0x129/0x190
[  389.906538][T11556]  ? ksys_write+0x1ac/0x250
[  389.906579][T11556]  __x64_sys_sendmmsg+0x9c/0x100
[  389.906609][T11556]  ? lockdep_hardirqs_on+0x78/0x100
[  389.906649][T11556]  do_syscall_64+0x115/0x840
[  389.906685][T11556]  ? clear_bhb_loop+0x40/0x90
[  389.906728][T11556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.906758][T11556] RIP: 0033:0x7f4f60f9ce59
[  389.906781][T11556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.906808][T11556] RSP: 002b:00007f4f61d74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  389.906837][T11556] RAX: ffffffffffffffda RBX: 00007f4f61216090 RCX: 00007f4f60f9ce59
[  389.906858][T11556] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003
[  389.906875][T11556] RBP: 00007f4f61032d6f R08: 0000000000000000 R09: 0000000000000000
[  389.906892][T11556] R10: 0000000000001f00 R11: 0000000000000246 R12: 0000000000000000
[  389.906909][T11556] R13: 00007f4f61216128 R14: 00007f4f61216090 R15: 00007ffddf097cf8
[  389.906946][T11556]  </TASK>
[  391.377019][T11572] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1058'.
[  391.809465][T11579] random: crng reseeded on system resumption
[  392.721175][T11590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1062'.
[  392.777219][T11590] veth1_macvtap: left promiscuous mode
[  394.010220][T11642] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  394.587955][T11661] vivid-007: =================  START STATUS  =================
[  394.595946][T11661] vivid-007: Enable Output Cropping: true grabbed
[  394.629367][T11661] vivid-007: Enable Output Composing: true grabbed
[  394.636437][T11661] vivid-007: Enable Output Scaler: true grabbed
[  394.644517][T11661] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  394.659605][T11661] vivid-007: Transmit Mode: HDMI grabbed
[  394.693855][T11661] vivid-007: Hotplug Present: 0x00000000
[  394.731565][T11661] vivid-007: RxSense Present: 0x00000000
[  394.805650][T11661] vivid-007: EDID Present: 0x00000000
[  394.947024][T11661] vivid-007: ==================  END STATUS  ==================
[  396.861923][T11694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1077'.
[  396.893225][T11694] nbd: must specify at least one socket
[  397.746192][T11704] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1081'.
[  399.483827][T11746] FAULT_INJECTION: forcing a failure.
[  399.483827][T11746] name failslab, interval 1, probability 0, space 0, times 0
[  399.511328][T11746] CPU: 1 UID: 0 PID: 11746 Comm: syz.4.1089 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  399.511376][T11746] Tainted: [L]=SOFTLOCKUP
[  399.511390][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  399.511404][T11746] Call Trace:
[  399.511413][T11746]  <TASK>
[  399.511423][T11746]  dump_stack_lvl+0x100/0x190
[  399.511476][T11746]  should_fail_ex.cold+0x5/0xa
[  399.511513][T11746]  should_failslab+0xc2/0x120
[  399.511545][T11746]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  399.511589][T11746]  ? security_inode_alloc+0x3b/0x2c0
[  399.511621][T11746]  ? lockdep_init_map_type+0x5c/0x250
[  399.511671][T11746]  security_inode_alloc+0x3b/0x2c0
[  399.511703][T11746]  inode_init_always_gfp+0xc77/0xfb0
[  399.511743][T11746]  alloc_inode+0x8e/0x250
[  399.511786][T11746]  new_inode+0x22/0x1c0
[  399.511828][T11746]  __debugfs_create_file+0x105/0x4f0
[  399.511983][T11746]  debugfs_create_file_full+0x41/0x60
[  399.512016][T11746]  drm_debugfs_clients_add+0xd9/0x210
[  399.512106][T11746]  drm_file_alloc+0x5c6/0xb40
[  399.512199][T11746]  drm_open_helper+0x1fc/0x540
[  399.512251][T11746]  drm_open+0x1a0/0x3e0
[  399.512286][T11746]  ? __pfx_drm_open+0x10/0x10
[  399.512319][T11746]  drm_stub_open+0x20f/0x380
[  399.512384][T11746]  ? __pfx_drm_stub_open+0x10/0x10
[  399.512420][T11746]  chrdev_open+0x234/0x6a0
[  399.512453][T11746]  ? __pfx_apparmor_file_open+0x10/0x10
[  399.512485][T11746]  ? __pfx_chrdev_open+0x10/0x10
[  399.512522][T11746]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  399.512568][T11746]  do_dentry_open+0x6ab/0x14d0
[  399.512601][T11746]  ? __pfx_chrdev_open+0x10/0x10
[  399.512643][T11746]  vfs_open+0x82/0x3f0
[  399.512687][T11746]  path_openat+0x208c/0x31a0
[  399.512733][T11746]  ? __pfx_path_openat+0x10/0x10
[  399.512781][T11746]  do_file_open+0x20e/0x430
[  399.512819][T11746]  ? __pfx_do_file_open+0x10/0x10
[  399.512880][T11746]  ? alloc_fd+0x476/0x790
[  399.512917][T11746]  ? do_getname+0x191/0x390
[  399.512960][T11746]  do_sys_openat2+0x10d/0x1e0
[  399.513001][T11746]  ? __pfx_do_sys_openat2+0x10/0x10
[  399.513056][T11746]  __x64_sys_openat+0x12d/0x210
[  399.513098][T11746]  ? __pfx___x64_sys_openat+0x10/0x10
[  399.513137][T11746]  ? ksys_write+0x1ac/0x250
[  399.513174][T11746]  ? rcu_is_watching+0x12/0xc0
[  399.513232][T11746]  do_syscall_64+0x115/0x840
[  399.513273][T11746]  ? clear_bhb_loop+0x40/0x90
[  399.513307][T11746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.513336][T11746] RIP: 0033:0x7f17f8f9ce59
[  399.513360][T11746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  399.513388][T11746] RSP: 002b:00007f17f9ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  399.513414][T11746] RAX: ffffffffffffffda RBX: 00007f17f9215fa0 RCX: 00007f17f8f9ce59
[  399.513434][T11746] RDX: 00000000001a9840 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  399.513452][T11746] RBP: 00007f17f9032d6f R08: 0000000000000000 R09: 0000000000000000
[  399.513466][T11746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  399.513480][T11746] R13: 00007f17f9216038 R14: 00007f17f9215fa0 R15: 00007ffdb3676f98
[  399.513516][T11746]  </TASK>
[  399.836056][T11746] debugfs: out of free dentries, can not create file 'proc_info'
[  402.061876][T11778] FAULT_INJECTION: forcing a failure.
[  402.061876][T11778] name failslab, interval 1, probability 0, space 0, times 0
[  402.102143][T11778] CPU: 1 UID: 0 PID: 11778 Comm: syz.2.1095 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  402.102189][T11778] Tainted: [L]=SOFTLOCKUP
[  402.102199][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  402.102217][T11778] Call Trace:
[  402.102227][T11778]  <TASK>
[  402.102238][T11778]  dump_stack_lvl+0x100/0x190
[  402.102292][T11778]  should_fail_ex.cold+0x5/0xa
[  402.102328][T11778]  should_failslab+0xc2/0x120
[  402.102363][T11778]  __kmalloc_cache_noprof+0x7a/0x6f0
[  402.102402][T11778]  ? vidtv_psi_sdt_table_init+0x47/0x2a0
[  402.102450][T11778]  vidtv_psi_sdt_table_init+0x47/0x2a0
[  402.102489][T11778]  vidtv_channel_si_init+0x130/0x18f0
[  402.102533][T11778]  ? __asan_memcpy+0x3c/0x60
[  402.102579][T11778]  vidtv_mux_init+0x526/0xbf0
[  402.102624][T11778]  vidtv_start_feed+0x34e/0x500
[  402.102657][T11778]  ? __pfx_vidtv_start_feed+0x10/0x10
[  402.102690][T11778]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  402.102743][T11778]  dmx_section_feed_start_filtering+0x3a8/0x660
[  402.102791][T11778]  dvb_dmxdev_filter_start+0x767/0xdd0
[  402.102833][T11778]  dvb_demux_do_ioctl+0xe64/0x1200
[  402.102876][T11778]  dvb_usercopy+0x167/0x340
[  402.102919][T11778]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  402.102953][T11778]  ? __pfx_dvb_usercopy+0x10/0x10
[  402.103010][T11778]  ? __fget_files+0x21f/0x3d0
[  402.103048][T11778]  dvb_demux_ioctl+0x29/0x40
[  402.103071][T11778]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  402.103106][T11778]  __x64_sys_ioctl+0x18e/0x210
[  402.103138][T11778]  do_syscall_64+0x115/0x840
[  402.103182][T11778]  ? clear_bhb_loop+0x40/0x90
[  402.103219][T11778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.103248][T11778] RIP: 0033:0x7f0490b9ce59
[  402.103273][T11778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.103300][T11778] RSP: 002b:00007f04919f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  402.103327][T11778] RAX: ffffffffffffffda RBX: 00007f0490e16090 RCX: 00007f0490b9ce59
[  402.103347][T11778] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005
[  402.103364][T11778] RBP: 00007f0490c32d6f R08: 0000000000000000 R09: 0000000000000000
[  402.103382][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.103399][T11778] R13: 00007f0490e16128 R14: 00007f0490e16090 R15: 00007fff269d5098
[  402.103439][T11778]  </TASK>
[  403.605724][T11801] warning: `syz.6.1100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  403.748142][T11810] FAULT_INJECTION: forcing a failure.
[  403.748142][T11810] name failslab, interval 1, probability 0, space 0, times 0
[  403.838681][T11810] CPU: 1 UID: 0 PID: 11810 Comm: syz.6.1100 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  403.838708][T11810] Tainted: [L]=SOFTLOCKUP
[  403.838714][T11810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  403.838723][T11810] Call Trace:
[  403.838729][T11810]  <TASK>
[  403.838735][T11810]  dump_stack_lvl+0x100/0x190
[  403.838767][T11810]  should_fail_ex.cold+0x5/0xa
[  403.838787][T11810]  should_failslab+0xc2/0x120
[  403.838805][T11810]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  403.838828][T11810]  ? __d_alloc+0x34/0xa40
[  403.838850][T11810]  __d_alloc+0x34/0xa40
[  403.838880][T11810]  d_alloc+0x4a/0x1e0
[  403.838900][T11810]  lookup_one_qstr_excl+0x171/0x250
[  403.838926][T11810]  start_dirop+0x59/0xb0
[  403.838944][T11810]  simple_start_creating+0xf9/0x110
[  403.838963][T11810]  ? __pfx_simple_start_creating+0x10/0x10
[  403.838981][T11810]  ? mntput+0x70/0xa0
[  403.838996][T11810]  ? simple_pin_fs+0xa3/0x190
[  403.839012][T11810]  debugfs_start_creating.part.0+0x82/0x170
[  403.839030][T11810]  __debugfs_create_file+0xb3/0x4f0
[  403.839048][T11810]  debugfs_create_file_full+0x41/0x60
[  403.839065][T11810]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  403.839166][T11810]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  403.839198][T11810]  ? lockdep_init_map_type+0x5c/0x250
[  403.839226][T11810]  preinit_net.part.0+0x43b/0x920
[  403.839245][T11810]  copy_net_ns+0x339/0x7c0
[  403.839264][T11810]  create_new_namespaces+0x3ea/0xac0
[  403.839289][T11810]  unshare_nsproxy_namespaces+0xf2/0x220
[  403.839309][T11810]  ksys_unshare+0x438/0xab0
[  403.839331][T11810]  ? __pfx_ksys_unshare+0x10/0x10
[  403.839350][T11810]  ? xfd_validate_state+0x129/0x190
[  403.839364][T11810]  ? ksys_write+0x1ac/0x250
[  403.839390][T11810]  __x64_sys_unshare+0x31/0x40
[  403.839410][T11810]  do_syscall_64+0x115/0x840
[  403.839430][T11810]  ? clear_bhb_loop+0x40/0x90
[  403.839449][T11810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.839465][T11810] RIP: 0033:0x7f4f60f9ce59
[  403.839479][T11810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.839496][T11810] RSP: 002b:00007f4f5edd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  403.839513][T11810] RAX: ffffffffffffffda RBX: 00007f4f61216270 RCX: 00007f4f60f9ce59
[  403.839523][T11810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  403.839532][T11810] RBP: 00007f4f61032d6f R08: 0000000000000000 R09: 0000000000000000
[  403.839541][T11810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  403.839549][T11810] R13: 00007f4f61216308 R14: 00007f4f61216270 R15: 00007ffddf097cf8
[  403.839570][T11810]  </TASK>
[  404.142007][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  406.602843][T11841] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[10827] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[11841]
[  407.530086][T11864] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1115'.
[  407.976683][T11868] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1117'.
[  408.604728][T11882] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1119'.
[  411.486975][T11947] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1134'.
[  411.544694][T11947] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1134'.
[  411.869959][ T5642] Bluetooth: hci6: unexpected subevent 0x12 length: 123 > 5
[  417.127217][T12069] cifs: Unknown parameter '�����)�	Up��̢{��V]7�62']�Ψ��!�g�ʮ�7�9��fM�<*y�sE�h�
�'
[  419.277389][T12110] FAULT_INJECTION: forcing a failure.
[  419.277389][T12110] name failslab, interval 1, probability 0, space 0, times 0
[  419.309959][T12110] CPU: 1 UID: 8 PID: 12110 Comm: syz.2.1161 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  419.310000][T12110] Tainted: [L]=SOFTLOCKUP
[  419.310009][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  419.310025][T12110] Call Trace:
[  419.310033][T12110]  <TASK>
[  419.310044][T12110]  dump_stack_lvl+0x100/0x190
[  419.310091][T12110]  should_fail_ex.cold+0x5/0xa
[  419.310125][T12110]  should_failslab+0xc2/0x120
[  419.310156][T12110]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  419.310194][T12110]  ? cred_alloc_blank+0x1c/0xa0
[  419.310229][T12110]  cred_alloc_blank+0x1c/0xa0
[  419.310255][T12110]  keyctl_session_to_parent+0x55/0xae0
[  419.310374][T12110]  __do_sys_keyctl+0x2b1/0x5a0
[  419.310405][T12110]  do_syscall_64+0x115/0x840
[  419.310438][T12110]  ? clear_bhb_loop+0x40/0x90
[  419.310469][T12110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.310501][T12110] RIP: 0033:0x7f0490b9ce59
[  419.310523][T12110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.310548][T12110] RSP: 002b:00007f0491a17028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  419.310574][T12110] RAX: ffffffffffffffda RBX: 00007f0490e15fa0 RCX: 00007f0490b9ce59
[  419.310591][T12110] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012
[  419.310608][T12110] RBP: 00007f0490c32d6f R08: 0000000000000001 R09: 0000000000000000
[  419.310624][T12110] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000
[  419.310640][T12110] R13: 00007f0490e16038 R14: 00007f0490e15fa0 R15: 00007fff269d5098
[  419.310676][T12110]  </TASK>
[  421.790320][T12174] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  423.449861][T12212] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input10
[  423.629657][T12208] sctp: [Deprecated]: syz.5.1179 (pid 12208) Use of int in maxseg socket option.
[  423.629657][T12208] Use struct sctp_assoc_value instead
[  423.936836][T12226] binder: 12225:12226 ioctl 9 3 returned -22
[  423.949688][T12226] binder: 12225:12226 ioctl 7 ffffffffffffffff returned -22
[  423.969271][T12226] binder: 12225:12226 ioctl c0306201 2000000000c0 returned -14
[  425.806661][T12261] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1189'.
[  425.969313][T12276] FAULT_INJECTION: forcing a failure.
[  425.969313][T12276] name failslab, interval 1, probability 0, space 0, times 0
[  425.982708][T12276] CPU: 0 UID: 0 PID: 12276 Comm: syz.2.1191 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  425.982759][T12276] Tainted: [L]=SOFTLOCKUP
[  425.982770][T12276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  425.982788][T12276] Call Trace:
[  425.982797][T12276]  <TASK>
[  425.982808][T12276]  dump_stack_lvl+0x100/0x190
[  425.982862][T12276]  should_fail_ex.cold+0x5/0xa
[  425.982909][T12276]  should_failslab+0xc2/0x120
[  425.982944][T12276]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  425.982990][T12276]  ? alloc_inode+0x68/0x250
[  425.983032][T12276]  ? simple_start_creating+0xb0/0x110
[  425.983066][T12276]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  425.983203][T12276]  alloc_inode+0x68/0x250
[  425.983246][T12276]  new_inode+0x22/0x1c0
[  425.983292][T12276]  __debugfs_create_file+0x105/0x4f0
[  425.983327][T12276]  debugfs_create_file_full+0x41/0x60
[  425.983361][T12276]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  425.983390][T12276]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  425.983417][T12276]  ? ida_alloc_range+0x70d/0x830
[  425.983535][T12276]  ? lockdep_init_map_type+0x5c/0x250
[  425.983586][T12276]  preinit_net.part.0+0x252/0x920
[  425.983621][T12276]  copy_net_ns+0x339/0x7c0
[  425.983658][T12276]  create_new_namespaces+0x3ea/0xac0
[  425.983702][T12276]  unshare_nsproxy_namespaces+0xf2/0x220
[  425.983740][T12276]  ksys_unshare+0x438/0xab0
[  425.983782][T12276]  ? __pfx_ksys_unshare+0x10/0x10
[  425.983818][T12276]  ? xfd_validate_state+0x129/0x190
[  425.983846][T12276]  ? ksys_write+0x1ac/0x250
[  425.983897][T12276]  __x64_sys_unshare+0x31/0x40
[  425.983936][T12276]  do_syscall_64+0x115/0x840
[  425.983975][T12276]  ? clear_bhb_loop+0x40/0x90
[  425.984008][T12276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.984035][T12276] RIP: 0033:0x7f0490b9ce59
[  425.984064][T12276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.984092][T12276] RSP: 002b:00007f0491a17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  425.984119][T12276] RAX: ffffffffffffffda RBX: 00007f0490e15fa0 RCX: 00007f0490b9ce59
[  425.984138][T12276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  425.984155][T12276] RBP: 00007f0490c32d6f R08: 0000000000000000 R09: 0000000000000000
[  425.984172][T12276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  425.984187][T12276] R13: 00007f0490e16038 R14: 00007f0490e15fa0 R15: 00007fff269d5098
[  425.984222][T12276]  </TASK>
[  425.984261][T12276] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888059952940'
[  426.424135][T12285] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1193'.
[  428.912445][T12326] FAULT_INJECTION: forcing a failure.
[  428.912445][T12326] name failslab, interval 1, probability 0, space 0, times 0
[  429.027779][T12326] CPU: 1 UID: 0 PID: 12326 Comm: syz.5.1204 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  429.027826][T12326] Tainted: [L]=SOFTLOCKUP
[  429.027837][T12326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  429.027855][T12326] Call Trace:
[  429.027865][T12326]  <TASK>
[  429.027875][T12326]  dump_stack_lvl+0x100/0x190
[  429.027929][T12326]  should_fail_ex.cold+0x5/0xa
[  429.027967][T12326]  should_failslab+0xc2/0x120
[  429.028001][T12326]  __kmalloc_cache_noprof+0x7a/0x6f0
[  429.028049][T12326]  ? vidtv_psi_pat_program_init+0x4d/0x1f0
[  429.028097][T12326]  vidtv_psi_pat_program_init+0x4d/0x1f0
[  429.028136][T12326]  vidtv_channel_si_init+0x3e0/0x18f0
[  429.028190][T12326]  vidtv_mux_init+0x526/0xbf0
[  429.028236][T12326]  vidtv_start_feed+0x34e/0x500
[  429.028268][T12326]  ? __pfx_vidtv_start_feed+0x10/0x10
[  429.028301][T12326]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  429.028353][T12326]  dmx_section_feed_start_filtering+0x3a8/0x660
[  429.028403][T12326]  dvb_dmxdev_filter_start+0x767/0xdd0
[  429.028450][T12326]  dvb_demux_do_ioctl+0xe64/0x1200
[  429.028492][T12326]  dvb_usercopy+0x167/0x340
[  429.028533][T12326]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  429.028566][T12326]  ? __pfx_dvb_usercopy+0x10/0x10
[  429.028624][T12326]  ? __fget_files+0x21f/0x3d0
[  429.028665][T12326]  dvb_demux_ioctl+0x29/0x40
[  429.028690][T12326]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  429.028717][T12326]  __x64_sys_ioctl+0x18e/0x210
[  429.028750][T12326]  do_syscall_64+0x115/0x840
[  429.028788][T12326]  ? clear_bhb_loop+0x40/0x90
[  429.028823][T12326]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.028853][T12326] RIP: 0033:0x7fe9aef9ce59
[  429.028876][T12326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  429.028903][T12326] RSP: 002b:00007fe9afd7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  429.028932][T12326] RAX: ffffffffffffffda RBX: 00007fe9af216090 RCX: 00007fe9aef9ce59
[  429.028951][T12326] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005
[  429.028968][T12326] RBP: 00007fe9af032d6f R08: 0000000000000000 R09: 0000000000000000
[  429.028986][T12326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  429.029002][T12326] R13: 00007fe9af216128 R14: 00007fe9af216090 R15: 00007ffc9644fad8
[  429.029050][T12326]  </TASK>
[  429.483678][T12316] kexec: Could not allocate control_code_buffer
[  431.424158][T12363] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1212'.
[  437.499358][T12474] FAULT_INJECTION: forcing a failure.
[  437.499358][T12474] name failslab, interval 1, probability 0, space 0, times 0
[  437.723679][T12474] CPU: 1 UID: 0 PID: 12474 Comm: syz.6.1230 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  437.723709][T12474] Tainted: [L]=SOFTLOCKUP
[  437.723715][T12474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  437.723725][T12474] Call Trace:
[  437.723730][T12474]  <TASK>
[  437.723737][T12474]  dump_stack_lvl+0x100/0x190
[  437.723773][T12474]  should_fail_ex.cold+0x5/0xa
[  437.723793][T12474]  should_failslab+0xc2/0x120
[  437.723812][T12474]  __kmalloc_cache_noprof+0x7a/0x6f0
[  437.723835][T12474]  ? vidtv_psi_sdt_table_init+0x47/0x2a0
[  437.723860][T12474]  vidtv_psi_sdt_table_init+0x47/0x2a0
[  437.723880][T12474]  vidtv_channel_si_init+0x130/0x18f0
[  437.723904][T12474]  ? __asan_memcpy+0x3c/0x60
[  437.723929][T12474]  vidtv_mux_init+0x526/0xbf0
[  437.723952][T12474]  vidtv_start_feed+0x34e/0x500
[  437.723970][T12474]  ? __pfx_vidtv_start_feed+0x10/0x10
[  437.723987][T12474]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  437.724013][T12474]  dmx_section_feed_start_filtering+0x3a8/0x660
[  437.724039][T12474]  dvb_dmxdev_filter_start+0x767/0xdd0
[  437.724064][T12474]  dvb_demux_do_ioctl+0xe64/0x1200
[  437.724085][T12474]  dvb_usercopy+0x167/0x340
[  437.724107][T12474]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  437.724124][T12474]  ? __pfx_dvb_usercopy+0x10/0x10
[  437.724153][T12474]  ? __fget_files+0x21f/0x3d0
[  437.724175][T12474]  dvb_demux_ioctl+0x29/0x40
[  437.724188][T12474]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  437.724211][T12474]  __x64_sys_ioctl+0x18e/0x210
[  437.724229][T12474]  do_syscall_64+0x115/0x840
[  437.724250][T12474]  ? clear_bhb_loop+0x40/0x90
[  437.724269][T12474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.724285][T12474] RIP: 0033:0x7f4f60f9ce59
[  437.724299][T12474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.724318][T12474] RSP: 002b:00007f4f61d74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  437.724346][T12474] RAX: ffffffffffffffda RBX: 00007f4f61216090 RCX: 00007f4f60f9ce59
[  437.724363][T12474] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005
[  437.724373][T12474] RBP: 00007f4f61032d6f R08: 0000000000000000 R09: 0000000000000000
[  437.724382][T12474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  437.724391][T12474] R13: 00007f4f61216128 R14: 00007f4f61216090 R15: 00007ffddf097cf8
[  437.724413][T12474]  </TASK>
[  438.382356][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1232'.
[  438.743779][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1232'.
[  439.012363][T12493] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1232'.
[  440.139367][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  440.145754][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  440.694781][T12526] can: request_module (can-proto-5) failed.
[  443.746824][   T30] audit: type=1800 audit(2147483651.770:11): pid=12571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1246" name="lu_gp_id" dev="configfs" ino=44935 res=0 errno=0
[  448.419923][T12655] FAULT_INJECTION: forcing a failure.
[  448.419923][T12655] name failslab, interval 1, probability 0, space 0, times 0
[  448.520122][T12655] CPU: 0 UID: 0 PID: 12655 Comm: syz.6.1259 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  448.520159][T12655] Tainted: [L]=SOFTLOCKUP
[  448.520165][T12655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  448.520174][T12655] Call Trace:
[  448.520180][T12655]  <TASK>
[  448.520185][T12655]  dump_stack_lvl+0x100/0x190
[  448.520218][T12655]  should_fail_ex.cold+0x5/0xa
[  448.520238][T12655]  should_failslab+0xc2/0x120
[  448.520256][T12655]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  448.520278][T12655]  ? security_file_alloc+0x34/0x2c0
[  448.520297][T12655]  ? trace_kmem_cache_alloc+0xd5/0x100
[  448.520317][T12655]  security_file_alloc+0x34/0x2c0
[  448.520337][T12655]  init_file+0x95/0x480
[  448.520358][T12655]  alloc_empty_file+0x79/0x1c0
[  448.520380][T12655]  alloc_file_clone+0x5f/0x110
[  448.520402][T12655]  create_pipe_files+0x40e/0x970
[  448.520423][T12655]  do_pipe2+0xbd/0x1e0
[  448.520440][T12655]  ? __pfx_do_pipe2+0x10/0x10
[  448.520458][T12655]  ? exit_to_user_mode_loop+0xf3/0x670
[  448.520486][T12655]  __x64_sys_pipe2+0x54/0x80
[  448.520504][T12655]  do_syscall_64+0x115/0x840
[  448.520526][T12655]  ? clear_bhb_loop+0x40/0x90
[  448.520544][T12655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.520560][T12655] RIP: 0033:0x7f4f60f9ce59
[  448.520573][T12655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  448.520587][T12655] RSP: 002b:00007f4f5f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  448.520604][T12655] RAX: ffffffffffffffda RBX: 00007f4f61216180 RCX: 00007f4f60f9ce59
[  448.520613][T12655] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000
[  448.520622][T12655] RBP: 00007f4f61032d6f R08: 0000000000000000 R09: 0000000000000000
[  448.520631][T12655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  448.520639][T12655] R13: 00007f4f61216218 R14: 00007f4f61216180 R15: 00007ffddf097cf8
[  448.520667][T12655]  </TASK>
[  449.826987][T12678] FAULT_INJECTION: forcing a failure.
[  449.826987][T12678] name failslab, interval 1, probability 0, space 0, times 0
[  449.866982][T12678] CPU: 1 UID: 0 PID: 12678 Comm: syz.6.1266 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  449.867010][T12678] Tainted: [L]=SOFTLOCKUP
[  449.867015][T12678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  449.867025][T12678] Call Trace:
[  449.867031][T12678]  <TASK>
[  449.867037][T12678]  dump_stack_lvl+0x100/0x190
[  449.867076][T12678]  should_fail_ex.cold+0x5/0xa
[  449.867096][T12678]  should_failslab+0xc2/0x120
[  449.867114][T12678]  __kmalloc_cache_noprof+0x7a/0x6f0
[  449.867136][T12678]  ? vidtv_psi_pat_program_init+0x4d/0x1f0
[  449.867161][T12678]  vidtv_psi_pat_program_init+0x4d/0x1f0
[  449.867181][T12678]  vidtv_channel_si_init+0x2ca/0x18f0
[  449.867210][T12678]  vidtv_mux_init+0x526/0xbf0
[  449.867233][T12678]  vidtv_start_feed+0x34e/0x500
[  449.867251][T12678]  ? __pfx_vidtv_start_feed+0x10/0x10
[  449.867268][T12678]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  449.867294][T12678]  dmx_section_feed_start_filtering+0x3a8/0x660
[  449.867320][T12678]  dvb_dmxdev_filter_start+0x767/0xdd0
[  449.867342][T12678]  dvb_demux_do_ioctl+0xe64/0x1200
[  449.867363][T12678]  dvb_usercopy+0x167/0x340
[  449.867385][T12678]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  449.867402][T12678]  ? __pfx_dvb_usercopy+0x10/0x10
[  449.867431][T12678]  ? __fget_files+0x21f/0x3d0
[  449.867452][T12678]  dvb_demux_ioctl+0x29/0x40
[  449.867465][T12678]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  449.867479][T12678]  __x64_sys_ioctl+0x18e/0x210
[  449.867497][T12678]  do_syscall_64+0x115/0x840
[  449.867517][T12678]  ? clear_bhb_loop+0x40/0x90
[  449.867535][T12678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.867550][T12678] RIP: 0033:0x7f4f60f9ce59
[  449.867567][T12678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.867581][T12678] RSP: 002b:00007f4f61d74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  449.867596][T12678] RAX: ffffffffffffffda RBX: 00007f4f61216090 RCX: 00007f4f60f9ce59
[  449.867606][T12678] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005
[  449.867616][T12678] RBP: 00007f4f61032d6f R08: 0000000000000000 R09: 0000000000000000
[  449.867625][T12678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  449.867634][T12678] R13: 00007f4f61216128 R14: 00007f4f61216090 R15: 00007ffddf097cf8
[  449.867655][T12678]  </TASK>
[  454.684388][T12780] kAFS: unparsable volume name
[  454.720583][T12778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1282'.
[  454.737844][T12778] veth0_vlan: entered allmulticast mode
[  455.270911][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1284'.
[  457.737536][T12812] ima: policy update failed
[  457.746542][   T30] audit: type=1802 audit(2147483665.770:12): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1290" res=0 errno=0
[  458.107472][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  458.118403][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  458.128993][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  458.148006][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  458.163062][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  458.284134][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1294'.
[  459.119012][T12852] FAULT_INJECTION: forcing a failure.
[  459.119012][T12852] name failslab, interval 1, probability 0, space 0, times 0
[  459.161547][T12852] CPU: 1 UID: 0 PID: 12852 Comm: syz.5.1296 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  459.161591][T12852] Tainted: [L]=SOFTLOCKUP
[  459.161599][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  459.161613][T12852] Call Trace:
[  459.161621][T12852]  <TASK>
[  459.161630][T12852]  dump_stack_lvl+0x100/0x190
[  459.161678][T12852]  should_fail_ex.cold+0x5/0xa
[  459.161710][T12852]  should_failslab+0xc2/0x120
[  459.161740][T12852]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  459.161787][T12852]  ? copy_process+0x69a/0x7ed0
[  459.161825][T12852]  copy_process+0x69a/0x7ed0
[  459.161857][T12852]  ? page_table_check_set+0x486/0x920
[  459.161899][T12852]  ? __pfx_copy_process+0x10/0x10
[  459.161939][T12852]  ? _copy_from_user+0x59/0xd0
[  459.162059][T12852]  kernel_clone+0x176/0x9e0
[  459.162094][T12852]  ? __pfx_kernel_clone+0x10/0x10
[  459.162140][T12852]  ? __lock_acquire+0x4a5/0x2630
[  459.162182][T12852]  __do_sys_clone3+0x214/0x290
[  459.162215][T12852]  ? __pfx___do_sys_clone3+0x10/0x10
[  459.162265][T12852]  ? _copy_to_user+0xaf/0xd0
[  459.162315][T12852]  ? rcu_is_watching+0x12/0xc0
[  459.162349][T12852]  do_syscall_64+0x115/0x840
[  459.162382][T12852]  ? clear_bhb_loop+0x40/0x90
[  459.162414][T12852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.162440][T12852] RIP: 0033:0x7fe9aef9dc49
[  459.162463][T12852] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00
[  459.162487][T12852] RSP: 002b:00007ffc9644f998 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[  459.162513][T12852] RAX: ffffffffffffffda RBX: 00007fe9aef591e0 RCX: 00007fe9aef9dc49
[  459.162531][T12852] RDX: 00007fe9aef591e0 RSI: 0000000000000058 RDI: 00007ffc9644f9f0
[  459.162547][T12852] RBP: 00007fe9afd7f6c0 R08: 00007fe9afd7f6c0 R09: 00007ffc9644fad7
[  459.162563][T12852] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8
[  459.162580][T12852] R13: 000000000000006e R14: 00007ffc9644f9f0 R15: 00007ffc9644fad8
[  459.162615][T12852]  </TASK>
[  459.249269][T12853] zram: Added device: zram1
[  460.090308][T12832] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.098392][T12832] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.106534][T12832] bridge_slave_0: entered allmulticast mode
[  460.114640][T12832] bridge_slave_0: entered promiscuous mode
[  460.125695][T12832] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.133771][T12832] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.146448][T12832] bridge_slave_1: entered allmulticast mode
[  460.162342][T12832] bridge_slave_1: entered promiscuous mode
[  460.211682][ T5633] Bluetooth: hci7: command tx timeout
[  460.228956][T12832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  460.249322][T12832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  460.355106][T12832] team0: Port device team_slave_0 added
[  460.413217][T12832] team0: Port device team_slave_1 added
[  460.651565][T12832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.667786][T12832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.729835][T12832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.824328][T12832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.847125][T12832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.890981][T12832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  461.157284][T12832] hsr_slave_0: entered promiscuous mode
[  461.166926][T12832] hsr_slave_1: entered promiscuous mode
[  461.180826][T12832] debugfs: 'hsr0' already exists in 'hsr'
[  461.194935][T12832] Cannot create hsr debugfs directory
[  462.073881][T12832] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  462.114854][T12832] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  462.127947][T12832] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  462.147979][T12832] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  462.156831][T12832] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  462.168357][T12832] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  462.177162][T12832] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  462.195069][T12832] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  462.230174][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1308'.
[  462.292074][ T5633] Bluetooth: hci7: command tx timeout
[  462.367107][T12832] 8021q: adding VLAN 0 to HW filter on device bond0
[  462.417153][T12832] 8021q: adding VLAN 0 to HW filter on device team0
[  462.521789][T12560] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.529107][T12560] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.622790][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.630065][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.936050][T12832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.382514][ T5633] Bluetooth: hci7: command tx timeout
[  464.528196][T12832] veth0_vlan: entered promiscuous mode
[  464.566134][T12832] veth1_vlan: entered promiscuous mode
[  464.620413][T12832] veth0_macvtap: entered promiscuous mode
[  464.636650][T12832] veth1_macvtap: entered promiscuous mode
[  464.667702][T12832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.707037][T12832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  464.729332][   T47] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.756533][   T47] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.796531][   T47] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.837570][   T47] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.068052][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.104880][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.203716][  T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.227738][  T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.746218][T12980] FAULT_INJECTION: forcing a failure.
[  465.746218][T12980] name failslab, interval 1, probability 0, space 0, times 0
[  465.772257][T12980] CPU: 0 UID: 0 PID: 12980 Comm: syz.7.1292 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  465.772306][T12980] Tainted: [L]=SOFTLOCKUP
[  465.772316][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  465.772333][T12980] Call Trace:
[  465.772343][T12980]  <TASK>
[  465.772353][T12980]  dump_stack_lvl+0x100/0x190
[  465.772404][T12980]  should_fail_ex.cold+0x5/0xa
[  465.772441][T12980]  should_failslab+0xc2/0x120
[  465.772477][T12980]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  465.772508][T12980]  ? vidtv_psi_short_event_desc_init+0x429/0x5f0
[  465.772552][T12980]  kstrdup+0x51/0xe0
[  465.772580][T12980]  vidtv_psi_short_event_desc_init+0x429/0x5f0
[  465.772623][T12980]  vidtv_channel_s302m_init+0x4fd/0x9b0
[  465.772663][T12980]  ? trace_kmalloc+0xe3/0x110
[  465.772695][T12980]  ? __pfx_vidtv_channel_s302m_init+0x10/0x10
[  465.772746][T12980]  ? __asan_memcpy+0x3c/0x60
[  465.772789][T12980]  vidtv_channels_init+0x4c/0xb0
[  465.772828][T12980]  vidtv_mux_init+0x9df/0xbf0
[  465.772873][T12980]  vidtv_start_feed+0x34e/0x500
[  465.772906][T12980]  ? __pfx_vidtv_start_feed+0x10/0x10
[  465.772938][T12980]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  465.772991][T12980]  dmx_section_feed_start_filtering+0x3a8/0x660
[  465.773040][T12980]  dvb_dmxdev_filter_start+0x767/0xdd0
[  465.773092][T12980]  dvb_demux_do_ioctl+0xe64/0x1200
[  465.773135][T12980]  dvb_usercopy+0x167/0x340
[  465.773178][T12980]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  465.773211][T12980]  ? __pfx_dvb_usercopy+0x10/0x10
[  465.773269][T12980]  ? __fget_files+0x21f/0x3d0
[  465.773310][T12980]  dvb_demux_ioctl+0x29/0x40
[  465.773335][T12980]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  465.773362][T12980]  __x64_sys_ioctl+0x18e/0x210
[  465.773394][T12980]  do_syscall_64+0x115/0x840
[  465.773431][T12980]  ? clear_bhb_loop+0x40/0x90
[  465.773468][T12980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.773498][T12980] RIP: 0033:0x7f6e38f9ce59
[  465.773521][T12980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.773549][T12980] RSP: 002b:00007f6e39e75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  465.773576][T12980] RAX: ffffffffffffffda RBX: 00007f6e39216090 RCX: 00007f6e38f9ce59
[  465.773595][T12980] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005
[  465.773612][T12980] RBP: 00007f6e39032d6f R08: 0000000000000000 R09: 0000000000000000
[  465.773631][T12980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  465.773648][T12980] R13: 00007f6e39216128 R14: 00007f6e39216090 R15: 00007ffe7c96c288
[  465.773688][T12980]  </TASK>
[  466.451926][ T5633] Bluetooth: hci7: command tx timeout
[  466.526061][   T30] audit: type=1800 audit(2147483674.550:13): pid=12988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1313" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  467.408481][T13000] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2608.0.0), cmd(5)
[  469.048564][T13020] serio: Serial port pty173
[  470.167887][T13045] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  472.177869][T13095] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1329'.
[  472.940034][T13064] Bluetooth: hci5: command 0x2016 tx timeout
[  472.946140][T13064] Bluetooth: hci4: command 0x0406 tx timeout
[  473.183383][T13114] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1333'.
[  473.965650][T13136] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1337'.
[  477.240013][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1350'.
[  477.816209][T13109] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  477.832650][T13109] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  477.844714][T13109] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  477.856859][T13109] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  477.867600][T13109] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  478.790533][T13262] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1358'.
[  479.891774][T13109] Bluetooth: hci8: command tx timeout
[  480.317229][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  480.337597][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  480.350496][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  480.360901][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  480.376888][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  480.381337][   T47] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.660476][   T47] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.767289][T13231] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.775940][T13231] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.784786][T13231] bridge_slave_0: entered allmulticast mode
[  480.793407][T13231] bridge_slave_0: entered promiscuous mode
[  480.841000][   T47] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.905606][T13231] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.916867][T13231] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.938476][T13231] bridge_slave_1: entered allmulticast mode
[  480.950218][T13231] bridge_slave_1: entered promiscuous mode
[  481.153691][   T47] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.198374][T13231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.211142][T13231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  481.276049][T13231] team0: Port device team_slave_0 added
[  481.326514][T13231] team0: Port device team_slave_1 added
[  481.542039][T13231] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.549051][T13231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.576799][T13231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  481.664641][T13231] batman_adv: batadv0: Adding interface: batadv_slave_1
[  481.671726][T13231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.698302][T13231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.945552][   T47] bridge_slave_1: left allmulticast mode
[  481.962628][   T47] bridge_slave_1: left promiscuous mode
[  481.981710][ T5633] Bluetooth: hci8: command tx timeout
[  481.987589][   T47] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.009300][   T47] bridge_slave_0: left allmulticast mode
[  482.024687][   T47] bridge_slave_0: left promiscuous mode
[  482.045250][   T47] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.452202][ T5633] Bluetooth: hci5: command tx timeout
[  482.480955][   T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  482.493144][   T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  482.503837][   T47] bond0 (unregistering): Released all slaves
[  482.688436][T13231] hsr_slave_0: entered promiscuous mode
[  482.695425][T13231] hsr_slave_1: entered promiscuous mode
[  482.701922][T13231] debugfs: 'hsr0' already exists in 'hsr'
[  482.707665][T13231] Cannot create hsr debugfs directory
[  482.716662][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1
[  483.060413][   T47] hsr_slave_0: left promiscuous mode
[  483.075580][   T47] hsr_slave_1: left promiscuous mode
[  483.094166][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  483.113442][   T47] batman_adv: batadv0: Removing interface: batadv_slave_0
[  483.139876][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  483.166992][   T47] batman_adv: batadv0: Removing interface: batadv_slave_1
[  483.181886][ T5633] Bluetooth: hci6: command 0x0406 tx timeout
[  483.250582][   T47] veth1_macvtap: left promiscuous mode
[  483.282324][   T47] veth0_macvtap: left promiscuous mode
[  483.305192][   T47] veth1_vlan: left promiscuous mode
[  483.325335][   T47] veth0_vlan: left promiscuous mode
[  483.654848][   T31] INFO: task syz-executor:5958 blocked for more than 143 seconds.
[  483.671519][   T31]       Tainted: G             L      syzkaller #0
[  483.685977][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  483.702099][   T31] task:syz-executor    state:D stack:22920 pid:5958  tgid:5958  ppid:1      task_flags:0x400140 flags:0x00080002
[  483.715510][   T31] Call Trace:
[  483.718935][   T31]  <TASK>
[  483.722392][   T31]  __schedule+0x1295/0x67a0
[  483.727062][   T31]  ? __pfx___schedule+0x10/0x10
[  483.732493][   T31]  ? find_held_lock+0x2b/0x80
[  483.738625][   T31]  ? schedule+0x2bf/0x390
[  483.748516][   T31]  schedule+0xdd/0x390
[  483.757588][   T31]  schedule_preempt_disabled+0x13/0x30
[  483.769167][   T31]  __mutex_lock+0xced/0x1b10
[  483.779224][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  483.793199][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  483.803297][   T31]  ? net_generic+0xea/0x2a0
[  483.813258][   T31]  ? net_generic+0xea/0x2a0
[  483.822833][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  483.834220][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  483.839809][   T31]  nfsd_umount+0x3b/0x60
[  483.844643][   T31]  deactivate_locked_super+0xc1/0x1b0
[  483.853933][   T31]  deactivate_super+0xe7/0x110
[  483.864025][   T31]  cleanup_mnt+0x21f/0x450
[  483.873432][   T31]  task_work_run+0x150/0x240
[  483.883785][   T31]  ? __pfx_task_work_run+0x10/0x10
[  483.895503][   T31]  ? rcu_is_watching+0x12/0xc0
[  483.906752][   T31]  exit_to_user_mode_loop+0x157/0x670
[  483.921826][   T31]  ? rcu_is_watching+0x12/0xc0
[  483.926715][   T31]  do_syscall_64+0x652/0x840
[  483.931354][   T31]  ? clear_bhb_loop+0x40/0x90
[  483.945312][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.961483][   T31] RIP: 0033:0x7f45b059e097
[  483.966002][   T31] RSP: 002b:00007ffd074f79b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  483.981441][   T31] RAX: 0000000000000000 RBX: 00007f45b06321ca RCX: 00007f45b059e097
[  484.001473][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd074f7a70
[  484.021996][   T31] RBP: 00007ffd074f7a70 R08: 00007ffd074f8a70 R09: 00000000ffffffff
[  484.041479][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd074f8b00
[  484.051257][   T31] R13: 00007f45b06321ca R14: 0000000000051cbd R15: 00007ffd074f8b40
[  484.059934][   T31]  </TASK>
[  484.061616][T13109] Bluetooth: hci8: command tx timeout
[  484.066460][   T31] INFO: task syz.3.878:10551 blocked for more than 143 seconds.
[  484.095557][   T31]       Tainted: G             L      syzkaller #0
[  484.111470][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  484.122737][   T31] task:syz.3.878       state:D stack:26168 pid:10551 tgid:10537 ppid:5640   task_flags:0x400140 flags:0x00080002
[  484.135142][   T31] Call Trace:
[  484.138467][   T31]  <TASK>
[  484.143252][   T31]  __schedule+0x1295/0x67a0
[  484.147819][   T31]  ? __pfx___schedule+0x10/0x10
[  484.152760][   T31]  ? find_held_lock+0x2b/0x80
[  484.157462][   T31]  ? schedule+0x2bf/0x390
[  484.162606][   T31]  schedule+0xdd/0x390
[  484.166748][   T31]  schedule_preempt_disabled+0x13/0x30
[  484.172308][   T31]  __mutex_lock+0xced/0x1b10
[  484.176936][   T31]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[  484.182820][   T31]  ? __nla_validate_parse+0x1e7/0x28b0
[  484.188308][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  484.193411][   T31]  ? net_generic+0xea/0x2a0
[  484.197942][   T31]  ? net_generic+0xea/0x2a0
[  484.205094][   T31]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[  484.210963][   T31]  nfsd_nl_threads_set_doit+0x8c8/0x1100
[  484.216688][   T31]  genl_family_rcv_msg_doit+0x214/0x300
[  484.222886][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  484.229199][   T31]  ? genl_get_cmd+0x3e7/0x760
[  484.234063][   T31]  ? bpf_lsm_capable+0x9/0x10
[  484.238774][   T31]  ? security_capable+0x80/0x260
[  484.243786][   T31]  genl_rcv_msg+0x560/0x800
[  484.248430][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  484.253937][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  484.260066][   T31]  netlink_rcv_skb+0x159/0x420
[  484.264883][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  484.269932][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  484.275326][   T31]  ? netlink_deliver_tap+0x1ae/0xcc0
[  484.280692][   T31]  genl_rcv+0x28/0x40
[  484.284729][   T31]  netlink_unicast+0x585/0x850
[  484.289522][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  484.295094][   T31]  netlink_sendmsg+0x8b0/0xda0
[  484.299931][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  484.307149][   T31]  ? __import_iovec+0x1d2/0x640
[  484.312133][   T31]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  484.317792][   T31]  ____sys_sendmsg+0x9e1/0xb70
[  484.322984][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  484.328321][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  484.333692][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[  484.339007][   T31]  ___sys_sendmsg+0x190/0x1e0
[  484.343781][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  484.349208][   T31]  __sys_sendmsg+0x170/0x220
[  484.353961][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  484.359101][   T31]  ? __x64_sys_futex+0x34f/0x4d0
[  484.364457][   T31]  ? rcu_is_watching+0x12/0xc0
[  484.369254][   T31]  do_syscall_64+0x115/0x840
[  484.373900][   T31]  ? clear_bhb_loop+0x40/0x90
[  484.378599][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.384539][   T31] RIP: 0033:0x7f1731f9ce59
[  484.388964][   T31] RSP: 002b:00007f1732d7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  484.397424][   T31] RAX: ffffffffffffffda RBX: 00007f1732216360 RCX: 00007f1731f9ce59
[  484.407371][   T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000009
[  484.415449][   T31] RBP: 00007f1732032d6f R08: 0000000000000000 R09: 0000000000000000
[  484.424279][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  484.432385][   T31] R13: 00007f17322163f8 R14: 00007f1732216360 R15: 00007ffd6677dee8
[  484.440390][   T31]  </TASK>
[  484.444585][   T31] 
[  484.444585][   T31] Showing all locks held in the system:
[  484.483583][   T31] 1 lock held by khungtaskd/31:
[  484.492141][   T31]  #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  484.513144][   T31] 6 locks held by kworker/u8:3/47:
[  484.518311][   T31]  #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[  484.529060][   T31]  #1: ffffc90000b77d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[  484.539202][   T31]  #2: ffffffff905ede48 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[  484.542091][T13109] Bluetooth: hci5: command tx timeout
[  484.548672][   T31]  #3: ffffffff90606ba0 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x90/0xc10
[  484.548868][   T31]  #4: ffff88802a100780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x94e/0x1120
[  484.548974][   T31]  #5: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[  484.549062][   T31] 1 lock held by dhcpcd/5293:
[  484.549073][   T31]  #0: ffffffff90606ba0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x1bd/0x1f10
[  484.549128][   T31] 2 locks held by getty/5386:
[  484.549139][   T31]  #0: ffff8880339d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  484.549251][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0
[  484.549312][   T31] 2 locks held by syz-executor/5634:
[  484.549324][   T31]  #0: ffff8880327000d8 (&type->s_umount_key#56){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  484.549378][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  484.549434][   T31] 2 locks held by syz-executor/5635:
[  484.549446][   T31]  #0: ffff88802ca160d8 (&type->s_umount_key#56){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  484.549499][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  484.549559][   T31] 2 locks held by syz-executor/5958:
[  484.549571][   T31]  #0: ffff88807db0c0d8 (&type->s_umount_key#56){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  484.549624][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  484.549682][   T31] 2 locks held by syz.3.878/10548:
[  484.549694][   T31]  #0: ffffffff906b50a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  484.549749][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  484.549809][   T31] 2 locks held by syz.3.878/10551:
[  484.549821][   T31]  #0: ffffffff906b50a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  484.549876][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  484.549925][   T31] 2 locks held by syz-executor/10771:
[  484.549937][   T31]  #0: ffff888077a700d8 (&type->s_umount_key#56){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  484.549993][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  484.550058][   T31] 3 locks held by kworker/u8:22/12560:
[  484.550072][   T31]  #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[  484.550129][   T31]  #1: ffffc90003bd7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[  484.550175][   T31]  #2: ffffffff90606ba0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[  484.550302][   T31] 2 locks held by syz-executor/12832:
[  484.550315][   T31]  #0: ffff88807a2620d8 (&type->s_umount_key#56){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  484.550373][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  484.550436][   T31] 4 locks held by kworker/u9:3/13109:
[  484.550452][   T31] 2 locks held by syz-executor/13231:
[  484.550467][   T31]  #0: ffffffff90d78a28 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0
[  484.863241][   T31]  #1: ffffffff90606ba0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380
[  484.872392][   T31] 1 lock held by syz-executor/13282:
[  484.877675][   T31]  #0: ffffffff90606ba0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380
[  484.886845][   T31] 2 locks held by syz.6.1368/13337:
[  484.892112][   T31]  #0: ffffffff905ede48 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  484.901661][   T31]  #1: ffffffff90606ba0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0
[  484.912556][   T31] 
[  484.925699][   T31] =============================================
[  484.925699][   T31] 
[  484.941505][   T31] NMI backtrace for cpu 0
[  484.941528][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  484.941562][   T31] Tainted: [L]=SOFTLOCKUP
[  484.941570][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  484.941584][   T31] Call Trace:
[  484.941592][   T31]  <TASK>
[  484.941602][   T31]  dump_stack_lvl+0x100/0x190
[  484.941649][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  484.941678][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  484.941704][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  484.941736][   T31]  sys_info+0x141/0x190
[  484.941770][   T31]  watchdog+0xcb1/0x1030
[  484.941807][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  484.941835][   T31]  ? __pfx_watchdog+0x10/0x10
[  484.941865][   T31]  ? __kthread_parkme+0x18c/0x230
[  484.941896][   T31]  ? kthread+0x13a/0x450
[  484.941928][   T31]  ? __pfx_watchdog+0x10/0x10
[  484.941957][   T31]  kthread+0x370/0x450
[  484.941991][   T31]  ? __pfx_kthread+0x10/0x10
[  484.942028][   T31]  ret_from_fork+0x72b/0xd50
[  484.942057][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  484.942085][   T31]  ? __switch_to+0x800/0x1100
[  484.942138][   T31]  ? __switch_to_asm+0x39/0x70
[  484.942168][   T31]  ? __pfx_kthread+0x10/0x10
[  484.942205][   T31]  ret_from_fork_asm+0x1a/0x30
[  484.942253][   T31]  </TASK>
[  484.942262][   T31] Sending NMI from CPU 0 to CPUs 1:
[  485.081177][    C1] NMI backtrace for cpu 1
[  485.081207][    C1] CPU: 1 UID: 0 PID: 47 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  485.081240][    C1] Tainted: [L]=SOFTLOCKUP
[  485.081248][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  485.081268][    C1] Workqueue: netns cleanup_net
[  485.081301][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x70
[  485.081336][    C1] Code: 01 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 d1 20 82 09 8b 82 ec 16 00 00 85 c0 74 f1 8b 82 c8 16 00 00 <83> f8 02 75 e6 48 8b 8a d0 16 00 00 8b 92 cc 16 00 00 48 8b 01 48
[  485.081359][    C1] RSP: 0018:ffffc90000b775a8 EFLAGS: 00000246
[  485.081376][    C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff82b7a828
[  485.081392][    C1] RDX: ffff888022699f00 RSI: ffffffff82b7aff4 RDI: ffff888022699f00
[  485.081405][    C1] RBP: ffffc90000b77618 R08: 0000000000000005 R09: 0000000000000000
[  485.081417][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801c6a5238
[  485.081430][    C1] R13: ffffffff8cf47580 R14: 0000000000000000 R15: ffff88807a921b40
[  485.081444][    C1] FS:  0000000000000000(0000) GS:ffff88812448e000(0000) knlGS:0000000000000000
[  485.081466][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  485.081479][    C1] CR2: 0000001b340f1ff8 CR3: 000000007b738000 CR4: 00000000003526f0
[  485.081492][    C1] Call Trace:
[  485.081499][    C1]  <TASK>
[  485.081506][    C1]  __kernfs_remove+0x834/0xb80
[  485.081565][    C1]  ? kernfs_find_ns+0x33e/0x600
[  485.081593][    C1]  kernfs_remove_by_name_ns+0x7c/0x120
[  485.081625][    C1]  remove_files+0x96/0x1c0
[  485.081650][    C1]  sysfs_remove_group+0x8b/0x1b0
[  485.081675][    C1]  sysfs_remove_groups+0x60/0xb0
[  485.081702][    C1]  device_remove_attrs+0x203/0x290
[  485.081839][    C1]  ? __pfx_device_remove_attrs+0x10/0x10
[  485.081875][    C1]  device_del+0x36e/0x9b0
[  485.081908][    C1]  ? __pfx_device_del+0x10/0x10
[  485.081948][    C1]  ? netdev_unregister_kobject+0x2da/0x540
[  485.082024][    C1]  unregister_netdevice_many_notify+0x179e/0x24f0
[  485.082058][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  485.082086][    C1]  ? unregister_netdevice_queue+0x22e/0x3c0
[  485.082111][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  485.082138][    C1]  ? batadv_meshif_destroy_vlan+0xdf/0x160
[  485.082247][    C1]  default_device_exit_batch+0x926/0xc10
[  485.082276][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  485.082305][    C1]  ? __pfx___might_resched+0x10/0x10
[  485.082329][    C1]  ? __pfx_cfg802154_pernet_exit+0x10/0x10
[  485.082431][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  485.082458][    C1]  ops_undo_list+0x363/0xab0
[  485.082486][    C1]  ? __pfx_ops_undo_list+0x10/0x10
[  485.082508][    C1]  ? cleanup_net+0x332/0x920
[  485.082534][    C1]  ? idr_destroy+0x62/0x2e0
[  485.082560][    C1]  cleanup_net+0x499/0x920
[  485.082586][    C1]  ? __pfx_cleanup_net+0x10/0x10
[  485.082614][    C1]  ? rcu_is_watching+0x12/0xc0
[  485.082643][    C1]  process_one_work+0xa0e/0x1980
[  485.082671][    C1]  ? __pfx_process_one_work+0x10/0x10
[  485.082697][    C1]  ? __pfx_cleanup_net+0x10/0x10
[  485.082724][    C1]  worker_thread+0x5ef/0xe50
[  485.082751][    C1]  ? kthread+0x13a/0x450
[  485.082781][    C1]  ? __pfx_worker_thread+0x10/0x10
[  485.082802][    C1]  kthread+0x370/0x450
[  485.082832][    C1]  ? __pfx_kthread+0x10/0x10
[  485.082864][    C1]  ret_from_fork+0x72b/0xd50
[  485.082888][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  485.082911][    C1]  ? __switch_to+0x800/0x1100
[  485.082946][    C1]  ? __switch_to_asm+0x39/0x70
[  485.082973][    C1]  ? __pfx_kthread+0x10/0x10
[  485.083006][    C1]  ret_from_fork_asm+0x1a/0x30
[  485.083042][    C1]  </TASK>
[  485.083470][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  485.083494][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  485.083531][   T31] Tainted: [L]=SOFTLOCKUP
[  485.083540][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  485.083556][   T31] Call Trace:
[  485.083564][   T31]  <TASK>
[  485.083574][   T31]  dump_stack_lvl+0x100/0x190
[  485.083618][   T31]  vpanic+0x552/0x970
[  485.083643][   T31]  ? __pfx_vpanic+0x10/0x10
[  485.083668][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  485.083697][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  485.083730][   T31]  panic+0xd1/0xe0
[  485.083754][   T31]  ? __pfx_panic+0x10/0x10
[  485.083782][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  485.083809][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  485.083837][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  485.083864][   T31]  ? watchdog.cold+0x1ec/0x234
[  485.083891][   T31]  ? watchdog+0xcc1/0x1030
[  485.083925][   T31]  watchdog.cold+0x1fd/0x234
[  485.083960][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  485.083993][   T31]  ? __pfx_watchdog+0x10/0x10
[  485.084027][   T31]  ? __kthread_parkme+0x18c/0x230
[  485.084068][   T31]  ? kthread+0x13a/0x450
[  485.084100][   T31]  ? __pfx_watchdog+0x10/0x10
[  485.084132][   T31]  kthread+0x370/0x450
[  485.084166][   T31]  ? __pfx_kthread+0x10/0x10
[  485.084203][   T31]  ret_from_fork+0x72b/0xd50
[  485.084231][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  485.084259][   T31]  ? __switch_to+0x800/0x1100
[  485.084290][   T31]  ? __switch_to_asm+0x39/0x70
[  485.084320][   T31]  ? __pfx_kthread+0x10/0x10
[  485.084357][   T31]  ret_from_fork_asm+0x1a/0x30
[  485.084404][   T31]  </TASK>
[  485.602235][   T31] Kernel Offset: disabled
[  485.606556][   T31] Rebooting in 86400 seconds..