last executing test programs:

7m53.542219039s ago: executing program 2 (id=520):
mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f")
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x80, 0x5)
r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_timedsend$auto(r2, 0x0, 0x7, 0x9, 0x0)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
readv$auto(r3, &(0x7f0000000140)={0x0, 0x22000008}, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socket(0x8, 0x2, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0xc)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x9003, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r4, 0xc2604110, &(0x7f0000000ac0)={0x6, [{[0x2, 0x0, 0x1ff, 0xd, 0x7f, 0x8, 0x4, 0x663d349e]}, {[0x2, 0xa6, 0x5c915993, 0xfffffffd, 0x406, 0xe, 0x80000001, 0x3]}, {[0x2, 0xe, 0x2, 0x579c8fef, 0x9, 0x6, 0x7, 0xa53]}], [{[0x75d, 0x9, 0x6, 0x17f29ee4, 0x400, 0xb, 0xc, 0x42]}, {[0x21, 0x3, 0x4, 0x3, 0x6, 0x5, 0x104, 0x1]}, {[0x7e61, 0x6, 0x7, 0x0, 0x5, 0x5, 0x100, 0x9]}, {[0x4, 0x15, 0x1, 0xfffffff7, 0x5, 0x0, 0xfffffffb, 0x1]}, {[0x3, 0x1000, 0xa0, 0x6, 0x7, 0xe8c, 0xf, 0x6]}], [{0xfffffffa, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x61, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x49c5fc8a, 0x0, 0x0, 0x0, 0x1}, {0x7fc, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x1000006, 0x9, 0x0, 0x1, 0x1}, {0x9, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x801, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xfffffff9, 0x1, 0x1, 0x1}, {0x5, 0x2000006, 0x0, 0x0, 0x1, 0x1}, {0x75, 0x7, 0x1, 0x1, 0x0, 0x1}], [{0xbe, 0x5, 0x0, 0x1, 0x0, 0x1}, {0xc2, 0x7fffffff, 0x1, 0x1, 0x1}, {0xbc, 0xbb5e, 0x1, 0x0, 0x0, 0x1}, {0x8}, {0x800100, 0x12e800, 0x1, 0x1, 0x1, 0x1}, {0x2, 0xf, 0x0, 0x1, 0x1}, {0xffff, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x80000101, 0x6, 0x0, 0x1}], 0x2, 0x5, 0x7, 0x7, 0x5, 0x1, 0x8, "938f570ba48ab1df6ea169301a0f4b75", "16fef137d6f6aa1d93e7fd319170d04be4063eb16bddc7a41e5782dfff02104539cdb5e571a002e14933724526d08013"})
write$auto(0xffffffffffffffff, &(0x7f0000000080)='/dev/audio\x00', 0x80000000)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
execve$auto(0x0, 0x0, 0x0)
execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f00000005c0)="2f34b2626eecd5d362d4f4ce77bca69ad3688b505465bfaf70eab515d26037f246bc757eb69b598f9e3b8ce5561ea5dd5ecb155f037b8bdf05587605acb72a4d69bc65e839af8687af6579daff7aa45e71ad3552d1108e48179c611c01074603283470c0cf725831b934ed9034a04c1c9d15cf99b59a51d609b7e294d6834d2437d866705a6aa63a3b289971a673a9d6c0b315b6dee8df7f7d22d0d4bab624af8a897b7bd03a66e6")
ioctl$auto(0xc8, 0x800454e1, 0x5c8d)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
socket(0xa, 0x801, 0x84)
getsockopt$auto_SO_TIMESTAMPING_NEW(0xffffffffffffffff, 0x8, 0x41, 0x0, &(0x7f0000000100)=0x6)

7m52.592548441s ago: executing program 2 (id=523):
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20100, 0x0) (async)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x20902, 0x0) (async)
madvise$auto(0xffffffffffffffff, 0x0, 0x4) (async)
write$auto_proc_clear_refs_operations_internal(r2, &(0x7f00000002c0)="1db7e6c671ee6384626d63063fa8982c9ada9c241f1bbbd524a167750cab5d58dc8ddf57f1bbd2c7af61c5689db1f4e35e6cc1ad21ca7efb9f24213bec4e4548d0b237b2a4d87c092226e14645606613d712b63329bb144ab6447191490bb748a4e0", 0x62) (async)
socket(0x2, 0x2, 0x0) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x101200, 0x0)
connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0)
io_destroy$auto(0x70f) (async)
ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) (async)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async)
select$auto(0x8, 0x0, 0x0, &(0x7f0000000240)={[0xe9, 0x9, 0x20000003, 0x1, 0x5, 0x721, 0x6, 0x10008, 0x9, 0x7, 0x20000000008, 0x1, 0xfca, 0xef65, 0xfffffffffffffffe, 0x291805dd]}, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="000226bd7000fedbdf251000000004001f00100002002f6465762f75696e707574000600110002000da850c6d2220248ed39a3dd6e910588000005000f000700000008001d000700000042001f0008b683b1e57f86b25a7df5ce041e10eb4c19395e6c10592306752b19079167295f14854bf492c857d106007f18c0000008001e000900000000000000000000100000000000000000ff707f03454c44a6d684b01a"], 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x1}) (async)
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
ioctl$auto_UI_SET_ABSBIT(r0, 0x40045567, 0x0)

7m51.803476356s ago: executing program 2 (id=525):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/drivers\x00', 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
timerfd_create$auto(0x9, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x2ff, 0x4, 0x1}]})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0xa2741, 0x0)
semctl$auto(0x0, 0x9, 0x8, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8)

7m50.913239651s ago: executing program 2 (id=529):
mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)='./file0/file0/file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x70)
mkdir$auto(&(0x7f0000000000)='./file1\x00', 0x4)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/loop9/queue/logical_block_size\x00', 0xbc2, 0x0)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000500)={0x7, 0x0, [{0x40000000, 0x0, 0x6}]})
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0xc0000103, 0x400, 0xfffffffffffffffc}]})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)

7m49.682513424s ago: executing program 2 (id=534):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8002)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r0)
read$auto(r0, &(0x7f0000000040)='nl80211\x00', 0xbe62)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x6, 0x100)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
socket(0x2, 0x3, 0xa)
timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000080)=0x80000)
mmap$auto(0x0, 0x3, 0xdf, 0x19, 0x401, 0x2)
unshare$auto(0x40000080)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x8200, 0x0)
ioctl$auto_SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000100))
write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f)
ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r2 = socket(0x15, 0x5, 0x0)
r3 = pidfd_open$auto(0x1, 0x0)
setns(r3, 0x60020000)
getcwd$auto(0x0, 0xffffffffffffffff)
mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x5}, 0x7ff)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(r2, 0x0, 0x10000, 0xffffffc2, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
io_submit$auto(0x2, 0xfffffffffffff096, &(0x7f0000000040)=0x0)

7m46.836743619s ago: executing program 2 (id=540):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
socket(0x2, 0x1, 0x106)
socket(0xa, 0x3, 0x73)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x86d}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80000001}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_SSID={0x10, 0x34, "04c0cf1444852fc2c81c5808"}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)

7m31.023475064s ago: executing program 32 (id=540):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
socket(0x2, 0x1, 0x106)
socket(0xa, 0x3, 0x73)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x86d}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80000001}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_SSID={0x10, 0x34, "04c0cf1444852fc2c81c5808"}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)

2m44.512195956s ago: executing program 1 (id=1243):
r0 = ioctl$auto_TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000240)=0x2d)
close_range$auto(r0, 0x8, 0x3fc)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0xaf1)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
mq_open$auto(&(0x7f0000000040)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0xffff0000, 0xe2, &(0x7f0000000100)={0x1, 0xfffffffffffffffd, 0x5, 0x9})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x440000, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
mmap$auto(0x1003, 0x3, 0x9, 0x1d, 0xffffffffffffffff, 0xffffffffffff9dc3)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0xa900, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000180)=0x7)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x1, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0xc, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0)
close_range$auto(0x2, 0xa, 0x0)

2m42.536247363s ago: executing program 1 (id=1245):
mmap$auto(0x0, 0x400008, 0x6a1, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc)
mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)

2m42.231344772s ago: executing program 1 (id=1246):
unshare$auto(0x40000080) (async)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async)
socket(0x2, 0x1, 0x106) (async)
io_uring_setup$auto(0x6, 0x0) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0)
socket(0x21, 0x4, 0x1c76) (async)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8001, 0x3, 0xfffffffffffffffd, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x5, 0x2, 0xd8]}, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0)
ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
recvfrom$auto(r1, &(0x7f0000000200), 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) (async)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x174) (async)
lsetxattr$auto(&(0x7f0000000440)='./file0\x00', &(0x7f0000000580)='security.caility\xf6\x06\xa1\xcd\xd3<\n\x00(\xa2\b\x00\x00\x00\x00\x00\x00\x00E\t\x00\x00\x00\xd4\xf2\xdf\x80\x9c\x87N\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7y\xe1\xff\xff\xc4\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf2]\xabq\t\x91\xe69\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe91\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9)\x0f`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xa2\xef\x0e\\\x8a\x15\xcb\xa9\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alo\r\x04\xce\x04$\xaa\x00\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\a\xac\xa0\xc7\xf7\'\x8d\xab\xaeC5\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G\x00'/505, &(0x7f0000001340), 0x2, 0x0)
ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) (async)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) (async)
socket(0xa, 0x1, 0x84) (async)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r4, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bbf, 0x7ff, 0x3, 0xff, 0x10001, 0x1, 0x3, 0x8001, 0xfffffffffffffffe, 0x8000ff00, 0x335b0ef1, 0xffffdfffffffff81, 0x4]}, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)

2m40.431253573s ago: executing program 1 (id=1248):
socket(0x2, 0x2, 0x0)
select$auto(0x69, &(0x7f0000000140)={[0x44e, 0x6, 0x40, 0x8, 0x1, 0x1, 0x40, 0x5, 0x5, 0x0, 0x7000000000000000, 0x3, 0x7, 0x0, 0x18af, 0x6]}, &(0x7f0000000280)={[0x7, 0xcf8a, 0x5, 0x1, 0xd70b, 0xba, 0x9, 0x7f, 0xffff, 0x401, 0x20f, 0x2, 0xfc3, 0xffffffff, 0xffff, 0x8]}, &(0x7f0000000300)={[0x4, 0xed86, 0xffff, 0x7, 0x3, 0x7, 0x9, 0x9, 0x8000000000000001, 0x3eaf, 0x4, 0x7, 0x7, 0x0, 0xae]}, &(0x7f0000000380)={0x1128, 0x7})
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, r0, [0x5], {0xd74c, 0x10000, 0x3ff, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0x2, 0x1, 0x6, 0x7, 0x1, 0x40, 0x176c7, 0x1, 0x100000005}})
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
socket(0x15, 0x5, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x70bd28, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
write$auto(0xffffffffffffffff, 0x0, 0x81)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
mlockall$auto(0x7)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/10t\x00', 0x41e000, 0x0)
fadvise64$auto_POSIX_FADV_NOREUSE(r3, 0x2, 0x7, 0x5)
unshare$auto(0x40000080)
sysfs$auto(0x2, 0x23, 0x0)
close_range$auto(0x2, 0x8, 0x0)

2m36.810395639s ago: executing program 1 (id=1252):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x51c, 0x8000)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r0 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r0, 0x114, 0xa, 0x0, 0x4)
r1 = socket(0xa, 0x2, 0x73)
ioctl$auto(r1, 0x918, 0x38)

2m36.543207514s ago: executing program 1 (id=1253):
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe\x00', 0x400, 0x0)
mmap$auto(0x200, 0x20009, 0x0, 0xeb1, r0, 0x8000)
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000700)="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")
mmap$auto(0xfffffffffffffffe, 0xb, 0xdf, 0x9b7f, 0x2, 0x200)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socket(0x29, 0x2, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4)
timerfd_create$auto(0x0, 0x0)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x6c4600, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000180))
ioctl$auto(0xc8, 0x800454e1, 0x5c8d)
read$auto(0x3, 0x0, 0x8080)
sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, 0x0, 0x4008004)
write$auto_fops_u8_(0xffffffffffffffff, &(0x7f0000000200)="b0ddb52641e211c138b45b4b3fdc570483b34acaacd90f35c9ec62ee8d8e39b1f20fd7f4a3172fa001ad5970f811ad7bf38afc369a12efc12db31ca64d1a49085fed84ef192c4a8846ac0e5c2bc8c88a6d77ae4b631e7b279dccae978de7f51abafe301bf17c203a996239b18e45bd37263fd821c0d725b13c26564ce76663c325f0556060f25c369c5be7b08c1b45bdf71ce852940775be2784cba54c913d4c120580db75a003b3bf6ac861be35753408db0f76ed0858fb52c7d6934e233378000346dc2852255915e0f569b8dadaf723fa97d903c9f4c5", 0xd8)
write$auto(0xffffffffffffffff, 0x0, 0x81)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
syz_clone3(&(0x7f0000001ac0)={0x4000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2m21.26771811s ago: executing program 33 (id=1253):
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe\x00', 0x400, 0x0)
mmap$auto(0x200, 0x20009, 0x0, 0xeb1, r0, 0x8000)
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000700)="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")
mmap$auto(0xfffffffffffffffe, 0xb, 0xdf, 0x9b7f, 0x2, 0x200)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socket(0x29, 0x2, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4)
timerfd_create$auto(0x0, 0x0)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x6c4600, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000180))
ioctl$auto(0xc8, 0x800454e1, 0x5c8d)
read$auto(0x3, 0x0, 0x8080)
sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, 0x0, 0x4008004)
write$auto_fops_u8_(0xffffffffffffffff, &(0x7f0000000200)="b0ddb52641e211c138b45b4b3fdc570483b34acaacd90f35c9ec62ee8d8e39b1f20fd7f4a3172fa001ad5970f811ad7bf38afc369a12efc12db31ca64d1a49085fed84ef192c4a8846ac0e5c2bc8c88a6d77ae4b631e7b279dccae978de7f51abafe301bf17c203a996239b18e45bd37263fd821c0d725b13c26564ce76663c325f0556060f25c369c5be7b08c1b45bdf71ce852940775be2784cba54c913d4c120580db75a003b3bf6ac861be35753408db0f76ed0858fb52c7d6934e233378000346dc2852255915e0f569b8dadaf723fa97d903c9f4c5", 0xd8)
write$auto(0xffffffffffffffff, 0x0, 0x81)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
syz_clone3(&(0x7f0000001ac0)={0x4000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

10.542663398s ago: executing program 3 (id=1486):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x80803, 0x6)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r2=>0x0})
bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
write$auto(0x3, 0x0, 0x81)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x801, 0x106)
r3 = socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
unshare$auto(0x40000080)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r4 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x200, 0x4, 0x7, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, <r5=>0xffffffffffffffff}, 0x10)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r5)
sendmsg$auto_NL80211_CMD_NEW_MPATH(r3, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1b0, r6, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_MAC={0x60, 0x6, "6616bf13248c80ffab5b62f8a1bc6c975ae959bf5107de7ac84bc30f685333bc24026dcdf8dfda4a6e8554895f122d374d6dc9d92fb5cdef843439fc23e993ff769b8ffe9c1282fb26b69fcbaee3b2d385e84c672a737c525107999a"}, @NL80211_ATTR_SAE_PASSWORD={0x59, 0x115, "7f1646b00591ab5bae3e69392838b3ede93e42d9392d3ebc4f7be0098f5a1bf5c5a9ab95953c6f0a9c8b7874d701b7ee059fd4014cebc3c073f6d83454d3cb5b1631c8f3e1e9c8b36d52176bca6615947249645eeb"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e24}, @NL80211_ATTR_MAC_MASK={0xbe, 0xd7, "85b90a4ced8f970936dc723020f6110df919b68d81ed649e7081f0145312f7ac1deff8369d6482205f7d8194a63d190b63cb1376fac5b6ebf152ca3f4ca927dfbfa8b57e1512362877c82e2a9f5f3deaf88a7a5485ef53b3d7f87a7a0abd0d9d03e31f9f24bbec6cdeeae21705f867f7e49029b37f0121b39ea3afa6fc3aad28c80f857768f059271d8b05055737e46d0f471a15a324a01cb715bc25ca67b701676e541d9134fb5601fe14c5d5c493527c8772913c0b4d895b9f"}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "86d39adc537836bca67be99d2c"}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0x2000084)
r7 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), r5)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r4, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c030000", @ANYRES16=r7, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x808}, 0x20004000)
open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6)

9.202792951s ago: executing program 0 (id=1489):
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x5, 0xdf, 0x19, 0xffffffffffffffff, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0)
write$auto(r1, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0)
write$auto(0x3, 0x0, 0x1)
mbind$auto(0x0, 0x7, 0x4, 0x0, 0x6, 0x2)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x29, 0x2c, 0x3, 0x2})
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080))
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0)
msgctl$auto(0x2, 0x1, &(0x7f0000000200)={{0xb3, 0x0, <r2=>0xffffffffffffffff, 0x10000, 0x1, 0x1, 0x6}, &(0x7f0000000180)=0xf5, &(0x7f00000001c0)=0x3, 0x2, 0xe7, 0xa2, 0x6, 0xfffffffffffffff9, 0x0, 0xb69, 0xb, @raw=0x6, @inferred=0xffffffffffffffff})
keyctl$auto(0x1f, 0x1, 0x6, r2, 0x403)
mlockall$auto(0x800000000000005)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto(0xc8, 0x800454d3, 0x5c8d)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0)
read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f00000002c0)=""/190, 0xfffffe39)

8.379547282s ago: executing program 5 (id=1491):
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(r1, 0xae44, r0) (async)
write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\x994y@\xae8\xd4!\xff\x9e\x94\xb4c\r0_\f\xcbGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x15U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z55\xa4m\xffb\x17\xbb\x7f\xea4\xd7lD\x97)}\xbaK\xd7>f\xb8&\x959-\n\xccWw\xe2\x9c\x1aJ\x04#\x05U\xf7hvH\xa7\x15K\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83I\xb8\xb2\xd5\xabGe\xd9\xbb\xc3\xc4\x1e\xed\xbbD\x1c\x1d\xcd*\x7f>GJ3m\x9b\x9f\xe7\xb4\x91@\t;\xcflDP3\xdc\xeeO\xc4S\x9d\xfb\x1b&\f\xf3C\xf0gs\xdcj\xc3\xe66\"~\xc8_~\xbd[\x7f\xe9\x1c\xeb\xc0\x12\xe1\x8d\xa8|\xac\xde\x15zF\x9dp&\xc8;Me\xaf\x9bA\xc2\xd3\xec\x17\xac\xf9\xc7\xbd\xf9\x19\xf5\xe3\xc6\xd9\x8bE\xc2l:r\xde\x1b\xad\xbcA\x8f\xfc\x13f\x00\x00\x00\x00', 0x4) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYBLOB="5e00a761"], 0x1ac}, 0x1, 0x0, 0x0, 0x2e2066725670fba1}, 0x40080)
read$auto(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x2) (async)
bpf$auto(0x1, &(0x7f00000001c0)=@task_fd_query={0x0, 0x4, 0x2, 0x18001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee)
close_range$auto(0x2, 0x8, 0x0) (async)
unshare$auto(0x40000080) (async)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cpu.weight.nice\x00', 0xa001, 0x0)
write$auto(r2, 0x0, 0x1) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
prctl$auto(0x3a, 0x1, 0x0, 0x85d4, 0xffffffffffffffff) (async)
socket(0x5, 0x5, 0xfffffffd) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r3 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/discover\x00', 0x2901, 0x0)
write$auto_aoe_fops_aoechr(r3, 0x0, 0x0) (async)
socket(0x23, 0x6, 0xff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x20004094)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0)
setsockopt$auto_SO_MAX_PACING_RATE(r4, 0x0, 0x2f, 0x0, 0x8) (async)
write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000080)="3e67e4bafb35285a5f0cf6d5be6a08a8eaa890c338c3be6fc08ef0ace7d7fa54de451012d35bd17fe03991ea1c384abed7afb963cfecb210d682c4d4a393e0cc3c10f38bc428e982e0beb7f55be2096f1e", 0x51) (async)
fdatasync$auto(0xffffffffffffffff)
socket(0xa, 0x1, 0x84) (async)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) (async)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)

7.386691197s ago: executing program 5 (id=1492):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4ea02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8400)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0)
prctl$auto_PR_SET_SECCOMP(0x16, 0x1, 0xfffffffffffffffb, 0x4, 0x2d8)
write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7fff)
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xfffffffffffffffd)
mmap$auto(0x1, 0x7fffffffffffffff, 0x2000000000000df, 0x97, r1, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20343, 0x0)
write$auto(r3, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0x1)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ipvs(0x0, r2)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
msync$auto(0x0, 0x5, 0x6)
socket(0x2d, 0x2, 0x0)
ioctl$auto(0x3, 0x89e0, 0x91)
io_uring_setup$auto(0x1, 0x0)

6.755033194s ago: executing program 0 (id=1494):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)={0x40, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0xc, 0x0, 0x1, [@nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x100000000000000, 0x0, 0x50}, 0x400c880)

6.396153181s ago: executing program 0 (id=1495):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9972, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x278e18a297a8387c}, 0x24000802)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x5, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mlock2$auto(0x1, 0x8001, 0x0)

6.15783287s ago: executing program 4 (id=1496):
r0 = socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) (async)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40)
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) (async)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
r3 = socket(0x10, 0x2, 0x0)
clock_gettime$auto(0xc, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) (async)
recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0)
sendmmsg$auto(r3, &(0x7f0000000540)={{&(0x7f0000000240)="263b9fe69c945cb66fb1c8445adb3d6f9b5072f5c8449f435b066fff8eef71336db917a7826ed0b79b737cea3ac1572066b45248d7648b562c7463cd14cf042019ef09221147b6e384a18fab0f394f9d88b9d796fece154449ed5cd365801bcae26aec8573fd1329799f205aaae140bc1db50d234c859737f589ee8c07b05f756222904cd4e50a730cd8b0971d4e9f6dd7f2c5e5b72cccac70c6dfa2d1b647dcd7691a988dc36bbb39afd9e68fd5e4d7430285d076271568e662253d24fc2a27b244021e123b98cced2ccc07eb6ce5512bb5553be5", 0x2, &(0x7f0000000400)={&(0x7f0000000340)="fc28dc3edbab117de61336bcfd8e1b715415d99d660bb62d7acd26c130ef8e5cea76adc21a73f72e6d83bd9d39d2b49fe5bf28aa7bfd9830e713bcb81b8f17e64d341d72d24fb7a6a541829fec33fcd47f85ef0495c1a11ccef792f5c40d47b5733d1e4516ba63d9db1f3427d535fa0e518ab8de19740eaf522764a541af5bf9c5e5e33fc1ec01d295ceb2f5af26736248cba22dc1abf36647972c70d79cda11f056290761cac229addac3eb77551fe303", 0xfffffffffffffffb}, 0x0, &(0x7f0000000440)="dee7f29ee11b2aed0af4c51ad003e330558934097300302c46088a7b4d16517812fa73a1eca295f9d336af39d26049b887aa68271a31c813fbf537659a32eabc4a784a10a03d0f97580973a273b587cf8c5ee8f76d71dd4e34a386cf04180b1454ac083a5bbb6781457bf9c49b63e4754a2e8d07c5bc69c0b927736fa7b8e1e9ac77c9b8c74ac78e8826cb9e1485766020685ce9111aa1e090b2feb5b387e56e1a13521b05d9de97946756d4d79b7499959834d531190bac4b4e6d19dc5607951e02340427", 0x0, 0x5}, 0x3}, 0x8001, 0x3)
fallocate$auto(r2, 0x0, 0x7fff, 0x4cbd5d)
ioctl$auto_SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f0000000040)="936c4952060076ffe426b6f0824c158080cbf1c0712783b7a68e220f80f20fd685579692e1b5125f5bf8fa41a6753f48ce271cc59bf1b2b69ef525a985cd28554d85031ee1c40f47401d1a8d3be4173c93855c140b7974c7f5d4ed2ad2042f3ce6be3b2628a0ee2ef19f25c2929190a2b84bcfadb62709fc627a03c7603a816662ffb40551c82ca1cdc4d3f060c719417581be7a2c8e96a811ee3e6d0d2fbb47ecf7ece69d24d7e30427f840c2d15a441d1d109bf8cdfe2c4b6b9c")
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000580), r2)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="17000000", @ANYRES16=r4, @ANYBLOB="010027bd7000001400b223"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="17000000", @ANYRES16=r4, @ANYBLOB="010027bd7000001400b223"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

6.011690891s ago: executing program 3 (id=1497):
r0 = socket(0xa, 0x1, 0x0)
listen$auto(r0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), r0)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r0, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000640)={&(0x7f0000001d80)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00\v\x00', @ANYRES32=0xee00, @ANYBLOB='\b\x00c\x00', @ANYRES32=r0, @ANYBLOB="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"], 0xb80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40051)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_CREATE_VM(r2, 0xc048aeca, 0x0)
modify_ldt$auto(0x11, 0x0, 0x10)
r4 = socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
bind$auto(r4, &(0x7f0000000040)=@generic={0xa, "986d17a55d9b07bcc94c4e3770c4"}, 0x6a)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8900, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
sysfs$auto(0x2, 0x23, 0x0)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200003, 0x19)
ioctl$auto(0x3, 0x4070aea0, 0xffffffffffffffff)

5.547747031s ago: executing program 4 (id=1498):
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x5, 0xdf, 0x19, 0xffffffffffffffff, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0)
write$auto(r1, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0)
write$auto(0x3, 0x0, 0x1)
mbind$auto(0x0, 0x7, 0x4, 0x0, 0x6, 0x2)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x29, 0x2c, 0x3, 0x2})
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080))
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0)
msgctl$auto(0x2, 0x1, &(0x7f0000000200)={{0xb3, 0x0, <r2=>0xffffffffffffffff, 0x10000, 0x1, 0x1, 0x6}, &(0x7f0000000180)=0xf5, &(0x7f00000001c0)=0x3, 0x2, 0xe7, 0xa2, 0x6, 0xfffffffffffffff9, 0x0, 0xb69, 0xb, @raw=0x6, @inferred=0xffffffffffffffff})
keyctl$auto(0x1f, 0x1, 0x6, r2, 0x403)
mlockall$auto(0x800000000000005)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto(0xc8, 0x800454d3, 0x5c8d)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0)
read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f00000002c0)=""/190, 0xfffffe39)

5.416352001s ago: executing program 5 (id=1499):
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0xfffffffffffffffa, 0x10000006, 0xfffffffe, 0x2}, 0x8006, 0x0, 0x6)
rseq$auto(&(0x7f0000000300)={0xd, 0x401, 0x0, 0x20000006, 0xe, 0x5}, 0x8006, 0x1, 0x6)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xf4)
setsockopt$auto(r0, 0x7ff, 0x5, &(0x7f0000000040)='/dev/video7\x00', 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000100), r1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0)
read$auto(r0, 0x0, 0x8)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000180)={0x0, 0x3}, 0x3)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x182b02, 0x0)
sendfile$auto(r4, r4, 0x0, 0x3)
mmap$auto(0x4b5, 0x1, 0x0, 0xeb1, r3, 0x9)
r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="7d934450c2e5fedbdf2503f9ff00d7f1de808347dcae511c284f5422a815d35826492a11a17690cf60ae901f5f3fd25ba389daccfbc5de3cc34a9bd6635b83069bc14f5433cc7dc42c28022cf6c51d35147d7d66d70791a54d0fa1e73fd90906f830185e3428edc35f73d3592599a3847716b894fdd90d6cffd9868705acfe79a298db6dad67743d1ba3caa84cee937cba5c3071017dd32165a108150b6c1ab228dadf9c49e3556fb90155220fe9005eaaa591b9668044567c8e9356f904000000000000001c4f97e7ad0ade5fa5023ed4ab51f69d840418b62fe9632bb3f5d6672c58022ecd53834e26eb0dcd92b7332ad6714fe815565a"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048004)
r6 = prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001)
mmap$auto(0x4, 0x400008, 0xdf, 0x19, r6, 0x9a7)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
shmdt$auto(0x0)
socket(0x15, 0x2, 0x400045)
sendmsg$auto_NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r5], 0x1e4}, 0x1, 0x0, 0x0, 0x84}, 0x440c0)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r1)

4.467739799s ago: executing program 3 (id=1500):
openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async)
syz_genetlink_get_family_id$auto_cifs(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000640)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x40000) (async)
sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(0xffffffffffffffff, 0x0, 0x0) (async)
socket(0xa, 0x3, 0x3a)
unshare$auto(0x40000080) (async)
close_range$auto(0x0, 0x5, 0x0) (async)
io_uring_register$auto(0xffffffffffffffff, 0x10, 0x0, 0x7f)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
io_setup$auto(0x7ffe, 0x0)

4.343061616s ago: executing program 0 (id=1501):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) (async)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) (async)
io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x10001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x8], {0x9, 0x1, 0x4006, 0x0, 0x420, 0x1001, 0x3fdc, 0x3, 0x5}, {0x2, 0x200140, 0x54ed, 0x1ff, 0x101, 0xff, 0x7, 0xa, 0x3}})
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rxrpc/stats\x00', 0x401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x3, 0x4) (async)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0xfffffffffffffff8, 0x4, 0x7fff, 0x800000000801e, 0xffffffffffffffff, 0x9) (async)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r2 = socket(0x1, 0x3, 0x0)
getsockopt$auto(r2, 0x26, 0x7, 0x0, 0x0)
r3 = epoll_create$auto(0xc)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)
syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3)
sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r4, @ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x20044050)
close_range$auto(0x2, 0x8, 0x0)

3.824633583s ago: executing program 5 (id=1502):
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0)
io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x6, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, 0x0, 0x5)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0xfffffff9, 0x10, 0x0)
r0 = gettid()
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0)
socket(0x10, 0x2, 0x4)
io_uring_setup$auto(0xf00, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
socket(0xa, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0xc)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, 0x0, 0x100000a3d9)
socket(0x15, 0x5, 0x0)
r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
write$auto_sg_fops_sg(r3, &(0x7f0000000480)="4a0200070000000000899e3cfd62ced2adc245ecf38f0000000000000000000000000000e80ae6712f1736f1f6f1db5c", 0x30)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0xffff, 0x4, 0xd, 0xe, 0x948b, 0x0, 0xffffffffffffffff, 0x6, 0xd, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0)
ioctl$auto(r1, 0x1ff, 0xffffffffffffffff)
rt_sigtimedwait$auto(&(0x7f0000000080)={0x6}, 0x0, 0x0, 0x8)
kill$auto(r0, 0x14)

3.731513504s ago: executing program 3 (id=1503):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, r0, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
close$auto(0xffffffffffffffff)
io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x2)
syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
r2 = open(0x0, 0x0, 0x408)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r3)
sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0xc0c4}, 0x44)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0)
mmap$auto(0x0, 0x8, 0x4000000000df, 0xc000eb1, r2, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x22a02e9732c91a48, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x44c42, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(r5, 0x4020aeb2, r4)
bpf$auto(0xfffffffd, 0x0, 0x6f4)
readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1)

3.356274702s ago: executing program 4 (id=1504):
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r0 = pidfd_open$auto(0x1, 0x0)
setns(r0, 0x20000)
syz_clone3(&(0x7f0000000300)={0x1341a4480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x57)

3.083057812s ago: executing program 4 (id=1505):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000)
r2 = io_uring_setup$auto(0x6, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x21, 0x9, 0xfffffffd, &(0x7f0000000100)})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, r2, 0x3ffeffffff, 0x3}, 0x6f4)
bpf$auto(0x100000001, 0x0, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/power/pm_qos_no_power_off\x00', 0x41102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x1)
mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
fcntl$auto_F_DUPFD_QUERY(r4, 0x403, r0)
r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
close_range$auto(0x0, 0xffffeffe, 0x2)
mount$auto(0x0, &(0x7f0000000540)='./cgroup/../file0\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3p\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)
r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r6, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0)
r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r7, 0x541c, r8)
r9 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), r0)
sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r9, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x90)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_TIPC_NL_KEY_SET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, r1, 0x200, 0xf0bd25, 0x25dfdbfe}, 0x14}}, 0x3004c004)

2.831509661s ago: executing program 0 (id=1506):
r0 = socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
madvise$auto(0x1000, 0x400050, 0x9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/module/parameters/sig_enforce\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x1, 0x7fffffffffffffff, 0x2000000000000df, 0x97, r0, 0x8000)
socket(0x11, 0x80003, 0x300)
socket(0x11, 0x80003, 0x200300)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
capget$auto(&(0x7f0000000280)={0x3, <r2=>0x0}, 0x0)
capget$auto(&(0x7f0000000300)={0x589, r2}, &(0x7f0000000380)={0x1, 0x1, 0x800})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0)
readv$auto(0x3, 0x0, 0x1)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x2a, 0x2, 0x1)
write$auto(r3, 0x0, 0x10001)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
seccomp$auto(0x1, 0x9, 0x0)
socketpair$auto(0x1, 0x803, 0x3800, 0x0)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0)
pwritev2$auto(r4, &(0x7f0000001040)={&(0x7f0000000080)="28b9a7c7866fcb6a450d0f471318ed33de3ce95e7bd2cd17dd9b060f988dc4860e5b4552cee1722e085d1d111ceb3fc0bfecbadbe01a8c7fe5d01773ba75b7e68c14", 0x1}, 0x8000000000000001, 0x100020001, 0x7, 0x4)
poll$auto(0x0, 0x8, 0x1)

2.565451799s ago: executing program 5 (id=1507):
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
removexattr$auto(&(0x7f0000000500)='./cgroup\x00', &(0x7f0000001f00)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf!\xfbf\xeeMf\xc5\x88&6\xca`\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\x81\xc3\xc7\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\xef\x14!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xd3[\xb9\xf3\x1e\xf0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3.\xa0\xfc\xae\xed6T\x91\xf2,\xba*\xea\xf8\xd5\xfaH\xfe\xcf\xe2\xe2\xfe\x91\xe7X\xe4\xae\x03\xbf8\xa6Rr\x96y\xea\xf0\xde\x8a\xd5\xa2`\x89\xac\n\xa6\xbc\x9a\xe2|\xb1\x04:\x1a\xe4L\x04p&\xba(\x9f\xda\xab<R\xa2\xa69E!j\xc7\xcd\x00*\xe1\x12\x7f\"x\x0fgJc\x84Q1\xfb\v\xdc\xaf\xa0H\xca\xb7\xc2\x83\x86Pg%\xf14\x94i4\x13\xc6\x16\xaa\xa9P\xc8\xa5\xed\x02\xb2\xb4\xbc\xddU\x03p\x9d\x8e\xf1c\b\xf1(t\xc8\b\xa9Ad\x804v\xfb\xe8\x03P\xf0\x1d\xd6\xb3\x14\xb9\xb9\xce\xceM')
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x93f, 0x1fee1, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x1000000000000, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x82)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x84)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0)
select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x8001, 0xd, 0x9, 0x5, 0x8, 0x40000000000000, 0x3, 0x8000000008, 0xfffffffffffffffa, 0xab, 0x2, 0x9]}, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0xcded, 0x8)
close_range$auto(0x2, 0x8, 0x0)
ptrace$auto_PTRACE_GETSIGINFO(0x4202, r0, 0xffffffffffffffff, 0x6)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x340, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_KEY={0x31d, 0x1, 0x0, 0x1, [@generic="b4fa2ee91a92cc461181b006c9debf94ad2772782848bc4727687c234e8fead386d7ce4482092afae35cd11953bab3d852ad6e043c46ed986a969062d542b48420e8fe181384fec2a5c88fa1803c75cde0c191052f0b6392d93463a5a32640293e5031b30b753114a11db2e35c16952b", @nested={0xf2, 0x159, 0x0, 0x1, [@generic="14c03d4a7c5a956951468d1856ef8695a8570b42f36da1e0c2ce0c780f181b2769797f467fe1e49588ca5f6f88666c1c7ee111dfb28a9cd64aabd9a00f586fc8420137c8c22542a3774b43e2708d6f15aa8d63c63761426c5fdd5ca11ba6ac2295b4953d1993648d241ff51702c3914a6011e411b755f656a2616a751d22578d65347d8514eb3f534f4fe79f6257f62b5813b039debd0e716dbf177ae51c3eddfba20edc61d1a570ee0c1b02b1b1df1e8830e61777d28f8b2f5bed0ac6fc99bcd4c8a08d3f3275e83970a55d02b7435c1d8d57fc47567f33464094b0b5444dfb7e2838aecaa7de7078fd", @nested={0x4, 0x12f}]}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0x133, 0x0, 0x0, @u64=0xc8}, @nested={0x14, 0xd5, 0x0, 0x1, [@nested={0x4, 0x64}, @nested={0x4, 0xa5}, @typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @generic="220a90189237c4fbc00ca47d36cc067afc91417a74da0d24e2a26b05cb87ca4718d7bacd7dc8f3922d2b53987a8459d7f61708a2381ad8bfc520cd936164d9ecc5a9263206a335cd79ad2a75f433a5ddf67fcb1bf6aca6d6adb17d0fefa75aff487e86", @typed={0x8, 0x1a, 0x0, 0x0, @pid=r0}, @generic="8e109d135159a93571db86775e9e2bed2eb69a55b0444a24e4d4b39d9a9e3869c16f88d883dd8bfef5bfaf3a568bcc3a0980b7e9bab25169d8675f4b261b8022e75c278b80d6688f7fc4f4141af0816e6f0aa42c3aab", @generic="8e135b64d644bab7a7d19ab6adadfac2841a5983631bf8a870a3117a4bf2b4ca02b032640a1520b6d66eff9fa5ef9609427858576f803ff83384f71a11257fca1f730f74cefddd2a690b6cfe22262f7ef6f50703019ad3a05b95057da17590d738ed2453f955f047e9df8778280f168d5a0c6bcaf268c21526e0183653d27200277201f1b2e200de511959766b0b8294cdcf29a776bf149bc04c1b486d4451a00bd08e4768d1f8f4d4b33e75677dc50aed0dc35f293ea63122497ed3cbd244d2"]}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@local}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x40010}, 0x800)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff)
socket(0x29, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
pipe$auto(0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101000, 0x0)
ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto_FS_IOC_RESVSP64(r3, 0x40087101, 0x6)

2.231027102s ago: executing program 3 (id=1508):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32)
socket(0x2, 0x2, 0x0) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) (async)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) (async)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) (async)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/tty50\x00', 0x0, 0x0)
ioctl$auto_TIOCSTI2(r2, 0x545c, 0x0) (async, rerun: 64)
ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) (async, rerun: 64)
io_uring_setup$auto(0x40005b, &(0x7f0000000080)={0x80000003, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [0x8, 0x4, 0x10], {0xd74c, 0x10000, 0x6, 0xb, 0x100, 0x7, 0x4, 0x406, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x8, 0x400005, 0xa88}}) (async)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) (async)
openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000180), 0x42c2, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async, rerun: 32)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x291805d9]}, 0x0) (rerun: 32)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000)
mmap$auto(0xfffffffffffffffe, 0x400007, 0x10000, 0x100009b72, 0xffffffffffffffff, 0x8)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async, rerun: 32)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x8, 0x200, 0x6, 0x7, 0xffffffffffffffff, 0x7, "2af051dd220d9d20d8dc6b3662034b19", 0x0, 0xffffffffffffffff, 0x9, 0x404, 0x4, 0x40006}, 0x10) (async, rerun: 32)
bpf$auto(0x3, 0x0, 0x8)

1.74656199s ago: executing program 5 (id=1509):
unshare$auto(0x40000080) (async)
r0 = socket(0x10, 0x2, 0x0)
bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000000c0)=@link_update={r0, @new_prog_fd=r0, 0x5, @old_prog_fd=r0}, 0xd66f) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x3) (async)
unshare$auto(0x8000000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x1, 0x84)
ioprio_get$auto(0x1, 0x4) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
r1 = pidfd_open$auto(0x1, 0x0)
setns(r1, 0x60020000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f0000000300)={0x153326100, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0xa7)
socket(0x10, 0x3, 0x6) (async)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
statmount$auto(0x0, 0x0, 0x800, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
write$auto(r2, &(0x7f0000000340)=',,2.15.4 ]\x98\x0f7V\xd4l\xf2AC\x04\xecQ=\xa2\xce\nO}\x1d\xd7\xb5\x92\xf7\xb2\xc2\xddm\xfbR\xfb\x92x\xd8\xb2\x8a&\xda\\\xa1}&^\x03\x02\xf28\xfd|\xed~\a\xaf\x14\xb5.\x92\"-6.\xb2$\x88\xeb\xdc\x0f\xba$?c\x8b\xcb\xf4q\r\xf5<B5\x86\x94a90v\x8a\v\xb9\xd4\xe6\x94\x01e0u_4F\x87\x16>>}4\x99(\xb8D\x15\xb8\xc9U\x14\xd6r\xc9\x81\xbbI\xc9+^\x00\xf6\xb5\xd9\x1e\x89G?/\xc5\x86\xd0\xab\xb3\xfd\xc9?\xa7B\x1b\xdc\xff\xab\xb6~\x96\xd6\x9f\x1d\xfb\xa1dg\x9d\x8d]\xdek\x9c0\xea\xb3\nV\x1d\x10g\xaa\xf9\xf0\xc9\n\x8c\xf25G\x9c\x19\xe5\xd8\xa3\xee\x11\x12f\xd5o\x00\xeaY\n\xe0\x9f\r\xd4\x8e9G\x01\x04\xb2j\xbfYX\x9a)OQ\xedk\xb9\x85\x03c\xf3\x80\x10eG(\x94m81PL\x8d\xa47\x1a\x16\x11\xcd\xcdf\x15\r\x19\xc3\x90\xbe\x12\x85V\xeb\x8d\x97\xf0\x9c!\x86:\xe8\x8b\xa7@l', 0x3) (async)
r3 = socket(0x8, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8955, 0x0)
r4 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TCP_METRICS_CMD_GET(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r4, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.310637621s ago: executing program 4 (id=1510):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r0 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r0, 0x84, 0x10, 0x0, &(0x7f0000000000)=0x7ffe)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f0000000780)='7\x00\\\xa0\x04|\xfe\xca\x12\xfa\b\x1c\xc7k\xff\xfe\x8e\xaf\xeeu~\a\xc0/(d\n\x05\x13EE\xf0\xad\r\xcb\xd3\xa83\xda}v\xcc\xfb\xcdm\x8f\nd\xca+4i{G\x18\x81J\x92\xf7\xc5,H\x88\xf6KRg\xab\xf2<^\xc7\x8fG# \x06\xc8!\x177GA\x84n\x0e\xa3\xa1\xdb\x8au\xf1\xee\xb25\x04 \x16\xbd\x9d\xa1;>\x99\x8d\x1d\x83>\xf5cE\x06\xe8\xb8\xc1)\x15\xe8\x1a\xef{\xfd\x19\xa6\x84V\x7f\xf5\x9f\xf0\xa4\x1b\xf7\xa5\x91.q\xc21k\n\xca\x91L/{d\xf6#\xb5\xb4\x01\xc2/\xdf\xb4\x89y|\xc7^c,\xf3\x98\x9fo\xaa\xb1\xbf\x92\x9bX\xc8\x8f\x13\x10K+~\xde\x00gib\x8a\xebm\xc1\n\xf4\x8a\x9eQ\xea\xa4\xb4\x16?*$\x1a\b\xa7\x8e\xe7dd[\rWN\xc8<\x8a:\\\x98\xc3yX?\xfd3\x06\xaf\xb10\x11 \x836\xb7\xe1+\xe3|B\xe7\xc6H\fS\xe5Y@\xdfZ\xdf\x9e\xd0\xa6\r\x94\xf6\xe0\xe1\x98v\x8d\x06\xfa\x06$\xf9s\xdb\x9c\xfd\xf5\xa3\xa1\x1a\x96b]}\x86\xc1\x84\xe4\xfc\x17\xe4\xaa\x8dL\x11uO\xd8Y\x17\xc4FK\x8b\x05\xcd\xe2J\xf60oA\x91\xf0\xe6\xd9B7P\xbb\xb6\xf4s\x8cl\x03tJ\xfa;&\xa4\xce\xc0\x9b\xc4w)\x9f~\x8d\xc9S\x8e\xf0+\x14\xaf\xd9]*\xe5L\xc5\x0e\xf1\f j\x8c\n\\#\x8dY\f\xa4\x16\x80\xe1K\xacW\xa8\xcaf\xac\xc0\xd8\xc5S*\xe8\xfd\xc1FK\x878\xce\xea2\x11J\x8aMF\x13W\x9ePL\x91\x17fs}\xfb\xa9\xf3\xbdi\xd27\x9a\xd4\xd6\xb1qu\xf0`\xd5\xcd\x9e\xbb\x8f', 0x1)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000000)=@batch={0x2, 0x7, 0x3e54fe25, 0x8, 0x5, 0xffffffffffffffff, 0x1}, 0xfffffff9)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0x6}})
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
preadv2$auto(r3, 0x0, 0x7, 0x5, 0x7, 0x800)
mmap$auto(0x0, 0x810004, 0xffb, 0x16, 0x3, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x6, 0x4000000000005b, 0x0, 0x2000000006, 0xed600)
select$auto(0x8, 0x0, 0x0, 0x0, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0)

1.170390381s ago: executing program 0 (id=1511):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000)
r0 = io_uring_setup$auto(0x6, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x48040, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r2 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0)
read$auto_transactions_fops_(r2, &(0x7f0000000080)=""/18, 0x12)
r3 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(r3, 0xae44, r1)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
io_uring_setup$auto(0x5, 0x0)
mknod$auto(&(0x7f0000000580)='./file0\x00', 0x1081, 0x9)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e')
open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0xb3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(r4, 0xa, 0x3)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0x4, 0x3511, r1, 0x8000)
r6 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
preadv$auto(r6, &(0x7f0000000100)={&(0x7f0000000040), 0x7fffffff}, 0x1, 0x8, 0x6)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

975.73995ms ago: executing program 3 (id=1512):
close_range$auto(0xffffffffffffffff, 0x8, 0x400)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/min_partial\x00', 0x1c2b02, 0x0)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0xaf1)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
mq_open$auto(&(0x7f0000000040)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0xffff0000, 0xe2, &(0x7f0000000100)={0x1, 0xfffffffffffffffd, 0x5, 0x9})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x440000, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
select$auto(0x8000000e, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x8, 0xfffffffffffffffb, 0x47ac5677, 0x6, 0x3, 0x3, 0x3, 0x2, 0x2000000008003, 0x80000000003fffff, 0x3, 0x0, 0x8000000002, 0x5, 0x5]}, 0x0)
mmap$auto(0x1003, 0x9d7, 0x9, 0x1d, 0xffffffffffffffff, 0x40000000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x4, 0xe983, 0x7fff, 0xeb3, 0x401, 0x10000003)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0xa900, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101082, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000180)=0x7)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x1, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0xc, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0)
close_range$auto(0x2, 0xa, 0x0)

0s ago: executing program 4 (id=1513):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x2000000000000003, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x28, 0x1, 0x0)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8085}, 0x8000)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x29, 0xa, 0xb)
bpf$auto(0x5, &(0x7f0000000040)=@bpf_attr_7={@map_id=0x1, 0x9, 0x6}, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$auto_RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0xfffffffe, 0x3, 0x8001, 0x5, 0x80, 0x9, 0x5, 0xe})
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x414f, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x1fe, 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0080004f8f50135d1ec7c4a8534ad8080a2a3d7d3dadccd1ba1115797be7e93ae8592ea246ca1edcbe5a6e9677000000000000609d4c42b91854e59ceffe41ed3e90805eb01d400b697e5c15f2eebf59dedb4790ca9c6f0208df1ff94eec7ca391460401c25ec05134e3aa240525ba39079cc6aeda", @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
connect$auto(0x3, 0x0, 0x54)
socket(0xa, 0x3, 0x3a)
sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x10)

kernel console output (not intermixed with test programs):

0 port 6081 - 0
[  544.503137][T12454] FAULT_INJECTION: forcing a failure.
[  544.503137][T12454] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  544.527861][T12457] netlink: Unknown nat attribute (0)
[  544.578043][ T8905] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.704952][T12454] CPU: 0 UID: 0 PID: 12454 Comm: syz.0.1150 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  544.704996][T12454] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  544.705006][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  544.705023][T12454] Call Trace:
[  544.705033][T12454]  <TASK>
[  544.705042][T12454]  dump_stack_lvl+0x100/0x190
[  544.705075][T12454]  should_fail_ex.cold+0x5/0xa
[  544.705100][T12454]  ? fs_reclaim_acquire+0x70/0x100
[  544.705136][T12454]  should_fail_alloc_page+0xeb/0x140
[  544.705172][T12454]  prepare_alloc_pages+0x1f0/0x5f0
[  544.705211][T12454]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  544.705245][T12454]  ? clockevents_program_event+0x1ef/0x820
[  544.705281][T12454]  ? __pfx_clockevents_program_event+0x10/0x10
[  544.705310][T12454]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  544.705348][T12454]  ? irqentry_exit+0x24d/0xa00
[  544.705387][T12454]  ? lockdep_hardirqs_on+0x78/0x100
[  544.705438][T12454]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  544.705475][T12454]  ? policy_nodemask+0xed/0x4f0
[  544.705524][T12454]  alloc_pages_mpol+0x1fb/0x540
[  544.705559][T12454]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  544.705602][T12454]  alloc_pages_noprof+0x1a/0x160
[  544.705640][T12454]  relay_open_buf.part.0+0x261/0xb70
[  544.705679][T12454]  relay_open+0x7b9/0xa00
[  544.705711][T12454]  blk_trace_setup_prepare+0x35c/0x6c0
[  544.705743][T12454]  blk_trace_setup+0x217/0x440
[  544.705776][T12454]  ? __pfx_blk_trace_setup+0x10/0x10
[  544.705804][T12454]  ? lockdep_hardirqs_on+0x16/0x100
[  544.705849][T12454]  ? __pfx_vsnprintf+0x10/0x10
[  544.705976][T12454]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  544.706012][T12454]  ? do_vfs_ioctl+0x226/0x13e0
[  544.706048][T12454]  blk_trace_ioctl+0x245/0x320
[  544.706080][T12454]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  544.706115][T12454]  ? find_held_lock+0x2b/0x80
[  544.706144][T12454]  ? __fget_files+0x215/0x3d0
[  544.706180][T12454]  ? hook_file_ioctl_common+0x140/0x440
[  544.706214][T12454]  blkdev_ioctl+0x17c/0x6f0
[  544.706308][T12454]  ? __pfx_blkdev_ioctl+0x10/0x10
[  544.706353][T12454]  ? __pfx_blkdev_ioctl+0x10/0x10
[  544.706393][T12454]  __x64_sys_ioctl+0x18e/0x210
[  544.706429][T12454]  do_syscall_64+0x115/0x840
[  544.706468][T12454]  ? clear_bhb_loop+0x40/0x90
[  544.706506][T12454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.706533][T12454] RIP: 0033:0x7f50b079de59
[  544.706555][T12454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.706581][T12454] RSP: 002b:00007f50b1667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  544.706606][T12454] RAX: ffffffffffffffda RBX: 00007f50b0a26090 RCX: 00007f50b079de59
[  544.706623][T12454] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000009
[  544.706640][T12454] RBP: 00007f50b0833e6f R08: 0000000000000000 R09: 0000000000000000
[  544.706656][T12454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  544.706672][T12454] R13: 00007f50b0a26128 R14: 00007f50b0a26090 R15: 00007ffc1924de38
[  544.706704][T12454]  </TASK>
[  545.529118][ T7966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  545.560474][ T7966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  545.597346][ T7966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  545.812210][ T7966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  545.913897][ T7966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  545.978436][ T8905] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.171754][ T8905] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.459143][ T8905] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.512233][T12492] misc userio: The device must be registered before sending interrupts
[  547.596648][T12492] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6)
[  547.707209][ T8905] bridge_slave_1: left allmulticast mode
[  547.758416][ T8905] bridge_slave_1: left promiscuous mode
[  547.796322][ T8905] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.875241][ T8905] bridge_slave_0: left allmulticast mode
[  547.902772][ T8905] bridge_slave_0: left promiscuous mode
[  547.938533][ T8905] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.099428][ T7966] Bluetooth: hci0: command tx timeout
[  548.831994][ T8905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  548.859825][T12513] misc userio: The device must be registered before sending interrupts
[  548.888802][ T8905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  548.930977][ T8905] bond0 (unregistering): Released all slaves
[  548.952512][T12513] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6)
[  549.630450][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5
[  550.022717][ T8905] hsr_slave_0: left promiscuous mode
[  550.060768][ T8905] hsr_slave_1: left promiscuous mode
[  550.082631][ T8905] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.124583][ T8905] batman_adv: batadv0: Removing interface: batadv_slave_0
[  550.164989][ T8905] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  550.172737][ T7966] Bluetooth: hci0: command tx timeout
[  550.220459][ T8905] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.298694][ T8905] veth1_macvtap: left promiscuous mode
[  550.327384][ T8905] veth0_macvtap: left promiscuous mode
[  550.441822][T12530] random: crng reseeded on system resumption
[  551.263274][ T8905] team0 (unregistering): Port device team_slave_1 removed
[  551.438081][ T8905] team0 (unregistering): Port device team_slave_0 removed
[  552.110912][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6
[  552.239720][ T7966] Bluetooth: hci0: command tx timeout
[  553.584798][T12570] futex_wake_op: syz.1.1166 tries to shift op by -2048; fix this program
[  553.629658][T12570] futex_wake_op: syz.1.1166 tries to shift op by -2048; fix this program
[  553.673890][T12577] 0x000000000001-0x000000020000 : ""
[  553.718434][T12460] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.732014][T12577] ftl_cs: FTL header corrupt!
[  553.768433][T12460] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.822604][T12460] bridge_slave_0: entered allmulticast mode
[  553.877617][T12460] bridge_slave_0: entered promiscuous mode
[  554.010710][T12460] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.058926][T12460] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.111044][T12460] bridge_slave_1: entered allmulticast mode
[  554.166686][T12460] bridge_slave_1: entered promiscuous mode
[  554.306509][ T7966] Bluetooth: hci0: command tx timeout
[  554.319461][T12585] FAULT_INJECTION: forcing a failure.
[  554.319461][T12585] name failslab, interval 1, probability 0, space 0, times 0
[  554.444703][T12585] CPU: 0 UID: 0 PID: 12585 Comm: syz.4.1167 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  554.444744][T12585] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  554.444754][T12585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  554.444769][T12585] Call Trace:
[  554.444777][T12585]  <TASK>
[  554.444786][T12585]  dump_stack_lvl+0x100/0x190
[  554.444817][T12585]  should_fail_ex.cold+0x5/0xa
[  554.444844][T12585]  should_failslab+0xc2/0x120
[  554.444875][T12585]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  554.444904][T12585]  ? __d_alloc+0x35/0xa50
[  554.444932][T12585]  __d_alloc+0x35/0xa50
[  554.444958][T12585]  d_alloc_pseudo+0x1c/0xc0
[  554.444988][T12585]  alloc_file_pseudo+0x118/0x290
[  554.445018][T12585]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  554.445047][T12585]  ? alloc_fd+0x471/0x7a0
[  554.445115][T12585]  sock_alloc_file+0x50/0x210
[  554.445146][T12585]  __sys_socket+0x1c0/0x260
[  554.445182][T12585]  ? __pfx___sys_socket+0x10/0x10
[  554.445226][T12585]  __x64_sys_socket+0x72/0xb0
[  554.445261][T12585]  ? lockdep_hardirqs_on+0x78/0x100
[  554.445299][T12585]  do_syscall_64+0x115/0x840
[  554.445337][T12585]  ? clear_bhb_loop+0x40/0x90
[  554.445367][T12585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.445392][T12585] RIP: 0033:0x7f259839de59
[  554.445412][T12585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.445436][T12585] RSP: 002b:00007f259928e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  554.445459][T12585] RAX: ffffffffffffffda RBX: 00007f2598625fa0 RCX: 00007f259839de59
[  554.445475][T12585] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010
[  554.445490][T12585] RBP: 00007f2598433e6f R08: 0000000000000000 R09: 0000000000000000
[  554.445505][T12585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  554.445519][T12585] R13: 00007f2598626038 R14: 00007f2598625fa0 R15: 00007ffd8a0d2918
[  554.445549][T12585]  </TASK>
[  554.651771][T12460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.663524][T12460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  554.694477][T12460] team0: Port device team_slave_0 added
[  554.702411][T12460] team0: Port device team_slave_1 added
[  554.728613][T12460] batman_adv: batadv0: Adding interface: batadv_slave_0
[  554.735682][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.762645][T12460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  554.774900][T12460] batman_adv: batadv0: Adding interface: batadv_slave_1
[  554.781863][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.808078][T12460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  554.873905][T12460] hsr_slave_0: entered promiscuous mode
[  554.889310][T12460] hsr_slave_1: entered promiscuous mode
[  554.895654][T12460] debugfs: 'hsr0' already exists in 'hsr'
[  554.901448][T12460] Cannot create hsr debugfs directory
[  555.119691][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7
[  555.138371][ T7966] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  555.720722][T12603] random: crng reseeded on system resumption
[  558.271959][T11239] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.901039][T11239] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.960655][ T8738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  558.976816][ T8738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  558.985914][ T8738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  558.994923][ T8738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  559.007008][ T8738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  559.386503][T11239] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.533747][T12460] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  559.597477][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  559.617566][T12460] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  559.643937][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  559.687857][T12460] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  559.737768][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  559.773912][T12460] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  559.834087][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  559.909551][T11239] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.317162][T12669] FAULT_INJECTION: forcing a failure.
[  560.317162][T12669] name failslab, interval 1, probability 0, space 0, times 0
[  560.390089][T12669] CPU: 0 UID: 0 PID: 12669 Comm: syz.0.1179 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  560.390129][T12669] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  560.390139][T12669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  560.390154][T12669] Call Trace:
[  560.390162][T12669]  <TASK>
[  560.390171][T12669]  dump_stack_lvl+0x100/0x190
[  560.390209][T12669]  should_fail_ex.cold+0x5/0xa
[  560.390236][T12669]  should_failslab+0xc2/0x120
[  560.390268][T12669]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  560.390297][T12669]  ? ovs_flow_alloc+0x10e/0x210
[  560.390421][T12669]  ovs_flow_alloc+0x10e/0x210
[  560.390451][T12669]  ovs_packet_cmd_execute+0x5d2/0x1640
[  560.390509][T12669]  ? __pfx_ovs_packet_cmd_execute+0x10/0x10
[  560.390548][T12669]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  560.390592][T12669]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  560.390640][T12669]  genl_family_rcv_msg_doit+0x214/0x300
[  560.390683][T12669]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  560.390723][T12669]  ? genl_get_cmd+0x3e7/0x760
[  560.390766][T12669]  ? bpf_lsm_capable+0x9/0x10
[  560.390790][T12669]  ? security_capable+0x80/0x260
[  560.390829][T12669]  ? ns_capable+0xd2/0xf0
[  560.390882][T12669]  genl_rcv_msg+0x560/0x800
[  560.390930][T12669]  ? __pfx_genl_rcv_msg+0x10/0x10
[  560.390956][T12669]  ? __pfx_ovs_packet_cmd_execute+0x10/0x10
[  560.391000][T12669]  netlink_rcv_skb+0x159/0x420
[  560.391035][T12669]  ? __pfx_genl_rcv_msg+0x10/0x10
[  560.391059][T12669]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  560.391104][T12669]  ? netlink_deliver_tap+0x1ae/0xcc0
[  560.391141][T12669]  genl_rcv+0x28/0x40
[  560.391180][T12669]  netlink_unicast+0x585/0x850
[  560.391219][T12669]  ? __pfx_netlink_unicast+0x10/0x10
[  560.391261][T12669]  netlink_sendmsg+0x8b0/0xda0
[  560.391321][T12669]  ? __pfx_netlink_sendmsg+0x10/0x10
[  560.391361][T12669]  ? apparmor_socket_sendmsg+0x15b/0x270
[  560.391419][T12669]  ____sys_sendmsg+0xa4d/0xbe0
[  560.391472][T12669]  ? __pfx_netlink_sendmsg+0x10/0x10
[  560.391509][T12669]  ? __pfx_____sys_sendmsg+0x10/0x10
[  560.391554][T12669]  ___sys_sendmsg+0x190/0x1e0
[  560.391590][T12669]  ? __pfx____sys_sendmsg+0x10/0x10
[  560.391623][T12669]  ? __lock_acquire+0x49f/0x1a40
[  560.391658][T12669]  ? get_pid_task+0x106/0x250
[  560.391715][T12669]  __sys_sendmsg+0x160/0x210
[  560.391743][T12669]  ? __pfx___sys_sendmsg+0x10/0x10
[  560.391784][T12669]  do_syscall_64+0x115/0x840
[  560.391820][T12669]  ? clear_bhb_loop+0x40/0x90
[  560.391848][T12669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.391873][T12669] RIP: 0033:0x7f50b079de59
[  560.391893][T12669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  560.391916][T12669] RSP: 002b:00007f50b1688028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  560.391939][T12669] RAX: ffffffffffffffda RBX: 00007f50b0a25fa0 RCX: 00007f50b079de59
[  560.391955][T12669] RDX: 000000000400c880 RSI: 0000200000000000 RDI: 0000000000000003
[  560.391970][T12669] RBP: 00007f50b1688090 R08: 0000000000000000 R09: 0000000000000000
[  560.391984][T12669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  560.391998][T12669] R13: 00007f50b0a26038 R14: 00007f50b0a25fa0 R15: 00007ffc1924de38
[  560.392027][T12669]  </TASK>
[  560.957357][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1178'.
[  561.124459][ T8738] Bluetooth: hci1: command tx timeout
[  561.216825][T11239] bridge_slave_1: left allmulticast mode
[  561.224126][T11239] bridge_slave_1: left promiscuous mode
[  561.260213][T11239] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.331989][T11239] bridge_slave_0: left allmulticast mode
[  561.349679][T11239] bridge_slave_0: left promiscuous mode
[  561.369378][T11239] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.502302][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'.
[  561.594298][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'.
[  561.730097][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'.
[  562.134533][T11239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  562.162532][T11239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  562.184131][T11239] bond0 (unregistering): Released all slaves
[  562.282415][T12460] 8021q: adding VLAN 0 to HW filter on device bond0
[  562.406683][T11239] HfR: left promiscuous mode
[  562.433287][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  562.444885][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  562.726742][T12460] 8021q: adding VLAN 0 to HW filter on device team0
[  562.960601][ T7970] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.967871][ T7970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  563.109140][ T7970] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.116379][ T7970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  563.141109][ T8738] Bluetooth: hci1: command tx timeout
[  563.865546][T12728] can: request_module (can-proto-0) failed.
[  564.221976][T11239] hsr_slave_0: left promiscuous mode
[  564.267015][T11239] hsr_slave_1: left promiscuous mode
[  564.308582][T11239] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  564.365347][T11239] batman_adv: batadv0: Removing interface: batadv_slave_0
[  564.429518][T11239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.466920][T11239] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.571683][T11239] veth0_macvtap: left promiscuous mode
[  564.596726][T11239] veth1_vlan: left promiscuous mode
[  564.620865][T11239] veth0_vlan: left promiscuous mode
[  565.210707][ T8738] Bluetooth: hci1: command tx timeout
[  565.742429][T11239] team0 (unregistering): Port device team_slave_1 removed
[  565.844298][T11239] team0 (unregistering): Port device team_slave_0 removed
[  567.258686][T12640] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.279607][ T8738] Bluetooth: hci1: command tx timeout
[  567.324529][T12640] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.385100][T12640] bridge_slave_0: entered allmulticast mode
[  567.455489][T12640] bridge_slave_0: entered promiscuous mode
[  567.492634][T12640] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.556523][T12640] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.607069][T12640] bridge_slave_1: entered allmulticast mode
[  567.658209][T12640] bridge_slave_1: entered promiscuous mode
[  567.882051][T12640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.972769][T12640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.196691][T12640] team0: Port device team_slave_0 added
[  568.241266][T12640] team0: Port device team_slave_1 added
[  568.320312][T12786] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬	Up†µÌ¢{´¼V]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhî
é”'
[  568.417360][T12640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  568.464470][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.607097][T12640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  568.662681][T12640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.695943][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.800660][T12640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  568.847685][T12460] 8021q: adding VLAN 0 to HW filter on device batadv0
[  568.964140][T12814] nvme_fabrics: missing parameter 'transport=%s'
[  569.018309][T12814] nvme_fabrics: missing parameter 'nqn=%s'
[  569.203025][T12640] hsr_slave_0: entered promiscuous mode
[  569.233421][T12640] hsr_slave_1: entered promiscuous mode
[  569.260590][T12640] debugfs: 'hsr0' already exists in 'hsr'
[  569.291327][T12640] Cannot create hsr debugfs directory
[  569.795662][T12826] blktrace: Concurrent blktraces are not allowed on nbd5
[  569.893963][T12460] veth0_vlan: entered promiscuous mode
[  570.030142][T12460] veth1_vlan: entered promiscuous mode
[  570.413654][T12460] veth0_macvtap: entered promiscuous mode
[  570.475223][T12460] veth1_macvtap: entered promiscuous mode
[  570.942926][T12460] batman_adv: batadv0: Interface activated: batadv_slave_0
[  571.067695][T12460] batman_adv: batadv0: Interface activated: batadv_slave_1
[  571.271038][ T8904] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  571.306516][ T8904] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  571.357328][ T8904] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  571.402050][ T8904] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  571.699057][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'.
[  571.978591][ T7970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.019655][ T7970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.383373][T11247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.405000][T12640] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  572.444488][T11247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.482913][T12640] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  572.534594][T12640] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  572.601154][T12640] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  572.642799][T12640] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  572.729109][T12640] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  572.789553][T12640] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  572.844694][T12640] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  573.042569][   T30] audit: type=1800 audit(1843104561.218:22): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1204" name="version" dev="configfs" ino=49987 res=0 errno=0
[  573.353487][T12884] can: request_module (can-proto-0) failed.
[  573.801253][T12640] 8021q: adding VLAN 0 to HW filter on device bond0
[  574.324835][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1205'.
[  574.368774][T12640] 8021q: adding VLAN 0 to HW filter on device team0
[  574.579429][ T8904] bridge0: port 1(bridge_slave_0) entered blocking state
[  574.586884][ T8904] bridge0: port 1(bridge_slave_0) entered forwarding state
[  574.968721][T11247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.125647][T12925] random: crng reseeded on system resumption
[  575.206417][ T8904] bridge0: port 2(bridge_slave_1) entered blocking state
[  575.213733][ T8904] bridge0: port 2(bridge_slave_1) entered forwarding state
[  575.323849][T11247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.487254][ T7966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  575.507436][ T7966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  575.517238][ T7966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  575.526997][ T7966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  575.536673][ T7966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  575.596946][T11247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.868469][T11247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.996061][T11247] bridge_slave_1: left allmulticast mode
[  577.028224][T11247] bridge_slave_1: left promiscuous mode
[  577.064750][T11247] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.143376][T11247] bridge_slave_0: left allmulticast mode
[  577.176342][T11247] bridge_slave_0: left promiscuous mode
[  577.213249][T11247] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.470393][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'.
[  577.629888][ T7966] Bluetooth: hci3: command tx timeout
[  577.961210][T11247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  577.997642][T11247] bond0 (unregistering): Released all slaves
[  578.234596][T12956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  578.782099][T11247] hsr_slave_0: left promiscuous mode
[  578.806826][T11247] hsr_slave_1: left promiscuous mode
[  578.823887][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  578.851735][T11247] batman_adv: batadv0: Removing interface: batadv_slave_0
[  578.876600][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  578.896766][T11247] batman_adv: batadv0: Removing interface: batadv_slave_1
[  578.930737][T11247] veth1_macvtap: left promiscuous mode
[  578.938890][T11247] veth0_macvtap: left promiscuous mode
[  578.954632][T11247] veth1_vlan: left promiscuous mode
[  578.964673][T11247] veth0_vlan: left promiscuous mode
[  579.663823][T11247] team0 (unregistering): Port device team_slave_1 removed
[  579.694768][ T7966] Bluetooth: hci3: command tx timeout
[  579.715614][T11247] team0 (unregistering): Port device team_slave_0 removed
[  579.980789][T12993] netlink: Unknown nat attribute (0)
[  580.009634][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5
[  581.064697][T12640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  581.576096][T12929] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.600186][T12929] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.624143][T12929] bridge_slave_0: entered allmulticast mode
[  581.654589][T12929] bridge_slave_0: entered promiscuous mode
[  581.683957][T12640] veth0_vlan: entered promiscuous mode
[  581.701919][T12929] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.722981][T12929] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.752159][T12929] bridge_slave_1: entered allmulticast mode
[  581.763883][ T7966] Bluetooth: hci3: command tx timeout
[  581.778040][T13018] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  581.804406][T13018] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  581.810921][T12929] bridge_slave_1: entered promiscuous mode
[  581.832292][T13018] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  581.867511][T13018] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  581.907230][T13018] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  581.938404][T13018] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  581.976339][T13018] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  581.985396][T12929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  582.021207][T13018] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  582.045499][T13018] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  582.053556][T12929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  582.111284][T13018] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  582.208612][T12640] veth1_vlan: entered promiscuous mode
[  582.253597][T12929] team0: Port device team_slave_0 added
[  582.305821][T12929] team0: Port device team_slave_1 added
[  582.460411][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6
[  582.472155][T13036] misc userio: The device must be registered before sending interrupts
[  582.496830][T12929] batman_adv: batadv0: Adding interface: batadv_slave_0
[  582.529324][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  582.618578][T12929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  582.629638][T13038] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(27.0.1), cmd(6)
[  582.683754][T12929] batman_adv: batadv0: Adding interface: batadv_slave_1
[  582.721922][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  582.877615][T12929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  583.218100][T12929] hsr_slave_0: entered promiscuous mode
[  583.257665][T12929] hsr_slave_1: entered promiscuous mode
[  583.276089][ T7966] Bluetooth: hci2: command 0x0406 tx timeout
[  583.306091][T12929] debugfs: 'hsr0' already exists in 'hsr'
[  583.347126][T12929] Cannot create hsr debugfs directory
[  583.521669][T12640] veth0_macvtap: entered promiscuous mode
[  583.756044][T12640] veth1_macvtap: entered promiscuous mode
[  583.823849][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.833916][ T7966] Bluetooth: hci0: command 0x0c1a tx timeout
[  583.894486][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.912979][ T7966] Bluetooth: hci1: command 0x0c1a tx timeout
[  583.956783][   T30] audit: type=1800 audit(1843104572.185:23): pid=13048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1222" name="dbroot" dev="configfs" ino=51066 res=0 errno=0
[  584.076801][ T7966] Bluetooth: hci3: command 0x0c1a tx timeout
[  584.114829][T12640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  584.323495][T12640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  584.549879][ T8904] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  584.597797][ T8904] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  584.715505][ T8904] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  585.026226][ T8904] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  585.599048][ T7970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.633986][ T7970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.902628][ T7966] Bluetooth: hci0: command 0x0c1a tx timeout
[  585.979298][ T7970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.989286][ T7966] Bluetooth: hci1: command 0x0c1a tx timeout
[  586.031286][ T7970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  586.141125][ T7966] Bluetooth: hci3: command 0x0c1a tx timeout
[  586.452602][T13079] random: crng reseeded on system resumption
[  587.758556][T12929] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  587.816891][T12929] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  587.884050][T12929] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  587.968230][T12929] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  587.975548][ T7966] Bluetooth: hci0: command 0x0c1a tx timeout
[  588.017911][T12929] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  588.051221][ T7966] Bluetooth: hci1: command 0x0c1a tx timeout
[  588.103090][T12929] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  588.149033][T12929] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  588.210743][ T7966] Bluetooth: hci3: command 0x0c1a tx timeout
[  588.228052][T12929] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  588.785476][T12929] 8021q: adding VLAN 0 to HW filter on device bond0
[  588.932000][T12929] 8021q: adding VLAN 0 to HW filter on device team0
[  589.020789][ T8904] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.028038][ T8904] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.079836][ T7966] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  589.179577][ T8904] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.186838][ T8904] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.157418][ T8738] Bluetooth: hci0: command 0x0c1a tx timeout
[  592.775538][T11247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.173246][ T8738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  593.191077][ T8738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  593.210794][ T8738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  593.220371][ T8738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  593.228642][ T8738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  593.472537][T11247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.614298][T12929] 8021q: adding VLAN 0 to HW filter on device batadv0
[  593.882482][T11247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.197252][T11247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.293742][ T8738] Bluetooth: hci0: command tx timeout
[  595.442335][T11247] bridge_slave_1: left allmulticast mode
[  595.470559][T11247] bridge_slave_1: left promiscuous mode
[  595.498460][T11247] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.564473][T11247] bridge_slave_0: left allmulticast mode
[  595.607540][T11247] bridge_slave_0: left promiscuous mode
[  595.635280][T11247] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.583979][T11247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  596.623853][T11247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  596.664071][T11247] bond0 (unregistering): Released all slaves
[  596.794820][T13241] FAULT_INJECTION: forcing a failure.
[  596.794820][T13241] name failslab, interval 1, probability 0, space 0, times 0
[  596.891108][T12929] veth0_vlan: entered promiscuous mode
[  596.920523][T13241] CPU: 0 UID: 0 PID: 13241 Comm: syz.1.1240 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  596.920567][T13241] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  596.920578][T13241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  596.920594][T13241] Call Trace:
[  596.920602][T13241]  <TASK>
[  596.920612][T13241]  dump_stack_lvl+0x100/0x190
[  596.920648][T13241]  should_fail_ex.cold+0x5/0xa
[  596.920678][T13241]  should_failslab+0xc2/0x120
[  596.920713][T13241]  __kmalloc_noprof+0xfc/0x820
[  596.920742][T13241]  ? __register_sysctl_table+0xac/0x1650
[  596.920790][T13241]  __register_sysctl_table+0xac/0x1650
[  596.920831][T13241]  ? is_module_address+0x5f/0xf0
[  596.920878][T13241]  ? __pfx___register_sysctl_table+0x10/0x10
[  596.920918][T13241]  ? is_module_address+0x69/0xf0
[  596.920957][T13241]  ? register_net_sysctl_sz+0x222/0x430
[  596.920990][T13241]  ? __asan_memcpy+0x3c/0x60
[  596.921016][T13241]  sysctl_core_net_init+0xe6/0x290
[  596.921059][T13241]  ? __pfx_sysctl_core_net_init+0x10/0x10
[  596.921098][T13241]  ops_init+0x1e2/0x5f0
[  596.921130][T13241]  setup_net+0x118/0x3a0
[  596.921161][T13241]  ? __pfx_setup_net+0x10/0x10
[  596.921191][T13241]  ? mutex_init_lockdep+0xf1/0x120
[  596.921240][T13241]  copy_net_ns+0x46f/0x7c0
[  596.921275][T13241]  create_new_namespaces+0x3ea/0xac0
[  596.921325][T13241]  unshare_nsproxy_namespaces+0xf2/0x220
[  596.921370][T13241]  ksys_unshare+0x438/0xab0
[  596.921402][T13241]  ? __pfx_ksys_unshare+0x10/0x10
[  596.921450][T13241]  __x64_sys_unshare+0x31/0x40
[  596.921481][T13241]  do_syscall_64+0x115/0x840
[  596.921521][T13241]  ? clear_bhb_loop+0x40/0x90
[  596.921553][T13241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.921579][T13241] RIP: 0033:0x7fb66f99de59
[  596.921601][T13241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.921627][T13241] RSP: 002b:00007fb670890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  596.921652][T13241] RAX: ffffffffffffffda RBX: 00007fb66fc26090 RCX: 00007fb66f99de59
[  596.921670][T13241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  596.921686][T13241] RBP: 00007fb66fa33e6f R08: 0000000000000000 R09: 0000000000000000
[  596.921702][T13241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  596.921718][T13241] R13: 00007fb66fc26128 R14: 00007fb66fc26090 R15: 00007ffd5bab7658
[  596.921750][T13241]  </TASK>
[  597.472986][ T8738] Bluetooth: hci0: command tx timeout
[  597.965542][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5
[  598.112550][T12929] veth1_vlan: entered promiscuous mode
[  598.315467][T11247] hsr_slave_0: left promiscuous mode
[  598.334685][T11247] hsr_slave_1: left promiscuous mode
[  598.350315][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  598.378756][T11247] batman_adv: batadv0: Removing interface: batadv_slave_0
[  598.412481][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  598.435658][T11247] batman_adv: batadv0: Removing interface: batadv_slave_1
[  598.481074][T11247] veth1_macvtap: left promiscuous mode
[  598.502411][T11247] veth0_macvtap: left promiscuous mode
[  598.521905][T11247] veth1_vlan: left promiscuous mode
[  598.542570][T11247] veth0_vlan: left promiscuous mode
[  599.325696][T11247] team0 (unregistering): Port device team_slave_1 removed
[  599.381623][T11247] team0 (unregistering): Port device team_slave_0 removed
[  599.512467][ T8738] Bluetooth: hci0: command tx timeout
[  599.729996][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6
[  599.997062][T13278] random: crng reseeded on system resumption
[  600.285339][T12929] veth0_macvtap: entered promiscuous mode
[  600.388135][T12929] veth1_macvtap: entered promiscuous mode
[  600.940796][T12929] batman_adv: batadv0: Interface activated: batadv_slave_0
[  601.150970][T12929] batman_adv: batadv0: Interface activated: batadv_slave_1
[  601.406642][T11247] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  601.452795][T13188] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.477742][T13188] bridge0: port 1(bridge_slave_0) entered disabled state
[  601.503295][T13188] bridge_slave_0: entered allmulticast mode
[  601.528363][T13188] bridge_slave_0: entered promiscuous mode
[  601.560158][T11247] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  601.581329][ T8738] Bluetooth: hci0: command tx timeout
[  601.601425][T13188] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.639269][T13188] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.667969][T13188] bridge_slave_1: entered allmulticast mode
[  601.686458][T13188] bridge_slave_1: entered promiscuous mode
[  601.702874][T11247] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  601.725118][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7
[  601.775930][T11247] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  601.882936][T13188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  601.946771][T13188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  602.163568][T13188] team0: Port device team_slave_0 added
[  602.212542][T13188] team0: Port device team_slave_1 added
[  602.513070][T13188] batman_adv: batadv0: Adding interface: batadv_slave_0
[  602.559201][T13188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  602.688683][T13188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  602.745209][T12703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.782127][T12703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.812540][T13188] batman_adv: batadv0: Adding interface: batadv_slave_1
[  602.848450][T13188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  602.977015][T13188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.447240][T11247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.484034][T13188] hsr_slave_0: entered promiscuous mode
[  603.494282][T11247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.513250][T13188] hsr_slave_1: entered promiscuous mode
[  603.546430][T13188] debugfs: 'hsr0' already exists in 'hsr'
[  603.567323][T13188] Cannot create hsr debugfs directory
[  603.987273][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8
[  604.270836][T13335] i2c i2c-0: new_device: Missing parameters
[  606.667851][T13365] netlink: 354 bytes leftover after parsing attributes in process `syz.4.1250'.
[  607.761688][T13188] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  607.839391][T13188] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  607.888546][T13188] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  607.968504][T13188] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  608.011274][T13188] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  608.018311][T13385] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  608.102283][T13188] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  608.160749][T13188] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  608.221259][T13188] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  608.676105][T13188] 8021q: adding VLAN 0 to HW filter on device bond0
[  608.815153][T13188] 8021q: adding VLAN 0 to HW filter on device team0
[  608.881040][ T8905] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.888260][ T8905] bridge0: port 1(bridge_slave_0) entered forwarding state
[  609.070646][T11247] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.077837][T11247] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.273528][T13188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.575289][T13188] veth0_vlan: entered promiscuous mode
[  611.651026][T13188] veth1_vlan: entered promiscuous mode
[  611.886477][T13188] veth0_macvtap: entered promiscuous mode
[  612.008407][T13188] veth1_macvtap: entered promiscuous mode
[  612.140272][T13188] batman_adv: batadv0: Interface activated: batadv_slave_0
[  612.239947][T13188] batman_adv: batadv0: Interface activated: batadv_slave_1
[  612.338551][T11247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  612.387497][T11247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  612.450826][T11247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  612.498234][T11247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  612.972695][ T7970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.029774][ T7970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.176729][T12703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.241153][T12703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.667622][T13473] random: crng reseeded on system resumption
[  613.948521][T13479] FAULT_INJECTION: forcing a failure.
[  613.948521][T13479] name failslab, interval 1, probability 0, space 0, times 0
[  614.064610][T13479] CPU: 0 UID: 0 PID: 13479 Comm: syz.4.1261 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  614.064655][T13479] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  614.064665][T13479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  614.064682][T13479] Call Trace:
[  614.064691][T13479]  <TASK>
[  614.064700][T13479]  dump_stack_lvl+0x100/0x190
[  614.064733][T13479]  should_fail_ex.cold+0x5/0xa
[  614.064762][T13479]  should_failslab+0xc2/0x120
[  614.064795][T13479]  __kmalloc_cache_noprof+0x91/0x6c0
[  614.064838][T13479]  ? snd_seq_pool_new+0x44/0x230
[  614.064976][T13479]  ? __pfx_snd_seq_open+0x10/0x10
[  614.065014][T13479]  snd_seq_pool_new+0x44/0x230
[  614.065053][T13479]  seq_create_client1+0x66/0x5e0
[  614.065086][T13479]  ? __pfx_snd_seq_open+0x10/0x10
[  614.065117][T13479]  snd_seq_open+0x59/0x540
[  614.065148][T13479]  ? __pfx_snd_seq_open+0x10/0x10
[  614.065177][T13479]  snd_open+0x201/0x450
[  614.065247][T13479]  ? __pfx_snd_open+0x10/0x10
[  614.065282][T13479]  chrdev_open+0x234/0x6a0
[  614.065323][T13479]  ? __pfx_apparmor_file_open+0x10/0x10
[  614.065425][T13479]  ? __pfx_chrdev_open+0x10/0x10
[  614.065467][T13479]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  614.065523][T13479]  do_dentry_open+0x6ab/0x14d0
[  614.065562][T13479]  ? __pfx_chrdev_open+0x10/0x10
[  614.065609][T13479]  vfs_open+0x82/0x3f0
[  614.065642][T13479]  path_openat+0x2873/0x4280
[  614.065695][T13479]  ? __pfx_path_openat+0x10/0x10
[  614.065744][T13479]  do_file_open+0x20e/0x430
[  614.065786][T13479]  ? __pfx_do_file_open+0x10/0x10
[  614.065848][T13479]  ? alloc_fd+0x471/0x7a0
[  614.065889][T13479]  ? do_getname+0x191/0x390
[  614.065930][T13479]  do_sys_openat2+0x10f/0x1e0
[  614.065961][T13479]  ? __pfx_do_sys_openat2+0x10/0x10
[  614.066004][T13479]  __x64_sys_openat+0x12d/0x210
[  614.066035][T13479]  ? __pfx___x64_sys_openat+0x10/0x10
[  614.066078][T13479]  do_syscall_64+0x115/0x840
[  614.066118][T13479]  ? clear_bhb_loop+0x40/0x90
[  614.066149][T13479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.066176][T13479] RIP: 0033:0x7f2db959de59
[  614.066198][T13479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.066223][T13479] RSP: 002b:00007f2dba507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  614.066248][T13479] RAX: ffffffffffffffda RBX: 00007f2db9826180 RCX: 00007f2db959de59
[  614.066265][T13479] RDX: 0000000000020000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  614.066282][T13479] RBP: 00007f2db9633e6f R08: 0000000000000000 R09: 0000000000000000
[  614.066298][T13479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  614.066313][T13479] R13: 00007f2db9826218 R14: 00007f2db9826180 R15: 00007ffc7bad50a8
[  614.066345][T13479]  </TASK>
[  616.213952][T13506] random: crng reseeded on system resumption
[  616.230730][ T8738] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  616.991646][T13517] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  617.851939][T13528] input: f¬
 as /devices/virtual/input/input26
[  618.294886][ T8738] Bluetooth: hci2: command 0x0406 tx timeout
[  619.359411][T13551] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  619.522614][T13551] hub 1-0:1.0: USB hub found
[  619.567506][T13551] hub 1-0:1.0: 1 port detected
[  620.425947][T13562] sd 0:0:1:0: PR command failed: 1026
[  620.450722][T13562] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  620.508483][T13562] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  621.314178][T11245] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.734959][T11245] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.000284][T11245] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.067652][ T8738] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  622.199378][ T7972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  622.214463][ T7972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  622.226350][ T7972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  622.235386][ T7972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  622.242969][ T7972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  623.435633][T11245] bridge_slave_1: left allmulticast mode
[  623.482510][T11245] bridge_slave_1: left promiscuous mode
[  623.536062][T11245] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.549800][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  623.556245][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  623.619524][T11245] bridge_slave_0: left allmulticast mode
[  623.662337][T11245] bridge_slave_0: left promiscuous mode
[  623.699874][T11245] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.807442][ T8738] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  623.827046][ T8738] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  623.843609][ T8738] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  623.860854][ T8738] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  623.870055][ T8738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  624.105701][ T7966] Bluetooth: hci0: command 0x2016 tx timeout
[  624.342451][ T8738] Bluetooth: hci2: command tx timeout
[  624.749800][T11245] bond0 (unregistering): Released all slaves
[  625.873675][T11245] hsr_slave_0: left promiscuous mode
[  625.904578][T11245] hsr_slave_1: left promiscuous mode
[  625.935459][ T8738] Bluetooth: hci4: command tx timeout
[  625.958095][T11245] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  626.006559][T11245] batman_adv: batadv0: Removing interface: batadv_slave_0
[  626.065296][T11245] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  626.105483][T11245] batman_adv: batadv0: Removing interface: batadv_slave_1
[  626.150661][T11245] veth1_macvtap: left promiscuous mode
[  626.167723][T11245] veth0_macvtap: left promiscuous mode
[  626.414036][ T7966] Bluetooth: hci2: command tx timeout
[  626.801779][T11245] team0 (unregistering): Port device team_slave_1 removed
[  626.874960][T11245] team0 (unregistering): Port device team_slave_0 removed
[  627.252980][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5
[  628.004362][ T7966] Bluetooth: hci4: command tx timeout
[  628.481357][ T7966] Bluetooth: hci2: command tx timeout
[  629.045240][T11245] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.221182][ T8738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  629.236898][ T8738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  629.249063][ T8738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  629.259915][ T8738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  629.268902][ T8738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  629.887372][T11245] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.073787][ T8738] Bluetooth: hci4: command tx timeout
[  630.328904][T11245] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.459114][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6
[  630.551764][ T8738] Bluetooth: hci2: command tx timeout
[  630.787512][T11245] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.004210][T13584] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.044474][T13584] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.088142][T13584] bridge_slave_0: entered allmulticast mode
[  631.106417][T13584] bridge_slave_0: entered promiscuous mode
[  631.169064][T13584] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.208642][T13584] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.243716][T13584] bridge_slave_1: entered allmulticast mode
[  631.283074][T13584] bridge_slave_1: entered promiscuous mode
[  631.350242][ T8738] Bluetooth: hci0: command tx timeout
[  631.641784][T13601] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.691610][T13601] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.734391][T13601] bridge_slave_0: entered allmulticast mode
[  631.786323][T13601] bridge_slave_0: entered promiscuous mode
[  631.880181][T13584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  631.936834][T13584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  631.978414][T13601] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.005033][T13601] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.038672][T13601] bridge_slave_1: entered allmulticast mode
[  632.086292][T13601] bridge_slave_1: entered promiscuous mode
[  632.142650][ T8738] Bluetooth: hci4: command tx timeout
[  632.587034][T13601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  632.905973][T13584] team0: Port device team_slave_0 added
[  632.961209][T13601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  633.134450][T13584] team0: Port device team_slave_1 added
[  633.394049][T13601] team0: Port device team_slave_0 added
[  633.415707][ T8738] Bluetooth: hci0: command tx timeout
[  633.436331][T13601] team0: Port device team_slave_1 added
[  633.525328][T11245] bridge_slave_1: left allmulticast mode
[  633.536449][T11245] bridge_slave_1: left promiscuous mode
[  633.554166][T11245] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.576249][T11245] bridge_slave_0: left allmulticast mode
[  633.585125][T11245] bridge_slave_0: left promiscuous mode
[  633.603223][T11245] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.961759][T11245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  633.986856][T11245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  634.011729][T11245] bond0 (unregistering): Released all slaves
[  634.038450][T13584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.075758][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.137049][T13584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.194977][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7
[  634.224217][T13584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.258559][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.341845][T13584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  634.377561][T13601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.396294][T13601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.456288][T13601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.575601][T13601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.593756][T13601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.653744][T13601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  634.956680][T13601] hsr_slave_0: entered promiscuous mode
[  634.986693][T13601] hsr_slave_1: entered promiscuous mode
[  635.110505][T13584] hsr_slave_0: entered promiscuous mode
[  635.145708][T13584] hsr_slave_1: entered promiscuous mode
[  635.172084][T13584] debugfs: 'hsr0' already exists in 'hsr'
[  635.212393][T13584] Cannot create hsr debugfs directory
[  635.248982][T11245] hsr_slave_0: left promiscuous mode
[  635.281485][T11245] hsr_slave_1: left promiscuous mode
[  635.303207][T11245] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  635.344236][T11245] batman_adv: batadv0: Removing interface: batadv_slave_0
[  635.386711][T11245] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  635.427416][T11245] batman_adv: batadv0: Removing interface: batadv_slave_1
[  635.470449][T13721] FAULT_INJECTION: forcing a failure.
[  635.470449][T13721] name failslab, interval 1, probability 0, space 0, times 0
[  635.486353][ T8738] Bluetooth: hci0: command tx timeout
[  635.506813][T11245] veth1_macvtap: left promiscuous mode
[  635.537311][T11245] veth0_macvtap: left promiscuous mode
[  635.542965][T13721] CPU: 0 UID: 0 PID: 13721 Comm: syz.4.1288 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  635.543008][T13721] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  635.543019][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  635.543035][T13721] Call Trace:
[  635.543043][T13721]  <TASK>
[  635.543054][T13721]  dump_stack_lvl+0x100/0x190
[  635.543087][T13721]  should_fail_ex.cold+0x5/0xa
[  635.543115][T13721]  should_failslab+0xc2/0x120
[  635.543153][T13721]  __kmalloc_noprof+0xfc/0x820
[  635.543179][T13721]  ? __lock_acquire+0x49f/0x1a40
[  635.543217][T13721]  ? sk_prot_alloc+0x10b/0x2a0
[  635.543258][T13721]  sk_prot_alloc+0x10b/0x2a0
[  635.543294][T13721]  sk_alloc+0x36/0xe80
[  635.543321][T13721]  pppol2tp_create+0x32/0x250
[  635.543438][T13721]  pppox_create+0x15c/0x2c0
[  635.543517][T13721]  __sock_create+0x339/0x860
[  635.543560][T13721]  __sys_socket+0x14d/0x260
[  635.543599][T13721]  ? __pfx___sys_socket+0x10/0x10
[  635.543646][T13721]  __x64_sys_socket+0x72/0xb0
[  635.543690][T13721]  ? lockdep_hardirqs_on+0x78/0x100
[  635.543730][T13721]  do_syscall_64+0x115/0x840
[  635.543769][T13721]  ? clear_bhb_loop+0x40/0x90
[  635.543801][T13721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.543828][T13721] RIP: 0033:0x7f2db959de59
[  635.543849][T13721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.543875][T13721] RSP: 002b:00007f2dba549028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  635.543900][T13721] RAX: ffffffffffffffda RBX: 00007f2db9825fa0 RCX: 00007f2db959de59
[  635.543917][T13721] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000018
[  635.543933][T13721] RBP: 00007f2db9633e6f R08: 0000000000000000 R09: 0000000000000000
[  635.543949][T13721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  635.543965][T13721] R13: 00007f2db9826038 R14: 00007f2db9825fa0 R15: 00007ffc7bad50a8
[  635.543997][T13721]  </TASK>
[  635.769518][T11245] veth1_vlan: left promiscuous mode
[  635.774900][T11245] veth0_vlan: left promiscuous mode
[  636.829538][T11245] team0 (unregistering): Port device team_slave_1 removed
[  636.894284][T11245] team0 (unregistering): Port device team_slave_0 removed
[  637.363094][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8
[  637.564032][ T8738] Bluetooth: hci0: command tx timeout
[  638.605946][T13666] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.641970][T13666] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.674920][T13666] bridge_slave_0: entered allmulticast mode
[  638.712098][T13666] bridge_slave_0: entered promiscuous mode
[  639.102173][T13666] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.136755][T13666] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.162967][T13666] bridge_slave_1: entered allmulticast mode
[  639.191566][T13666] bridge_slave_1: entered promiscuous mode
[  639.492769][T13666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  639.706663][T13666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  639.717524][T13765] netlink: 286 bytes leftover after parsing attributes in process `syz.4.1292'.
[  640.129988][T13666] team0: Port device team_slave_0 added
[  640.169229][T13666] team0: Port device team_slave_1 added
[  640.189219][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9
[  640.285085][T13666] batman_adv: batadv0: Adding interface: batadv_slave_0
[  640.343678][T13666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  640.457396][T13666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  640.504270][T13666] batman_adv: batadv0: Adding interface: batadv_slave_1
[  640.529692][T13666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  640.622646][T13666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  641.077986][T13666] hsr_slave_0: entered promiscuous mode
[  641.107774][T13666] hsr_slave_1: entered promiscuous mode
[  641.145735][T13666] debugfs: 'hsr0' already exists in 'hsr'
[  641.162435][T13666] Cannot create hsr debugfs directory
[  641.752875][T13584] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  641.806930][T13584] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  641.918971][T13584] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  641.963017][T13584] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  641.995310][T13584] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  642.047843][T13584] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  642.122265][T13584] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  642.168403][T13584] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  642.718976][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10
[  643.008107][T13601] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  643.064649][T13806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1298'.
[  643.080016][T13601] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  643.109847][T13601] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  643.143180][T13601] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  643.184959][T13601] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  643.223357][T13601] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  643.248472][T13601] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  643.281801][T13601] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  644.801649][T13584] 8021q: adding VLAN 0 to HW filter on device bond0
[  645.295534][T13584] 8021q: adding VLAN 0 to HW filter on device team0
[  645.400299][T11245] bridge0: port 1(bridge_slave_0) entered blocking state
[  645.407520][T11245] bridge0: port 1(bridge_slave_0) entered forwarding state
[  645.526610][T11247] bridge0: port 2(bridge_slave_1) entered blocking state
[  645.533832][T11247] bridge0: port 2(bridge_slave_1) entered forwarding state
[  646.098126][T13601] 8021q: adding VLAN 0 to HW filter on device bond0
[  646.353171][T13601] 8021q: adding VLAN 0 to HW filter on device team0
[  646.429551][T13666] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  646.481322][T13666] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  646.533278][ T7970] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.540597][ T7970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  646.606761][T13666] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  646.663242][T13666] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  646.702189][T13666] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  646.748325][T13666] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  646.814433][T13666] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  646.873043][T13838] FAULT_INJECTION: forcing a failure.
[  646.873043][T13838] name failslab, interval 1, probability 0, space 0, times 0
[  646.887186][T13666] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  646.933880][T11239] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.941108][T11239] bridge0: port 2(bridge_slave_1) entered forwarding state
[  647.114350][T13838] CPU: 0 UID: 0 PID: 13838 Comm: syz.4.1299 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  647.114395][T13838] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  647.114406][T13838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  647.114422][T13838] Call Trace:
[  647.114430][T13838]  <TASK>
[  647.114441][T13838]  dump_stack_lvl+0x100/0x190
[  647.114473][T13838]  should_fail_ex.cold+0x5/0xa
[  647.114502][T13838]  should_failslab+0xc2/0x120
[  647.114535][T13838]  __kmalloc_noprof+0xfc/0x820
[  647.114564][T13838]  ? security_inode_init_security+0x113/0x370
[  647.114612][T13838]  security_inode_init_security+0x113/0x370
[  647.114651][T13838]  ? __pfx_shmem_initxattrs+0x10/0x10
[  647.114686][T13838]  ? __pfx_security_inode_init_security+0x10/0x10
[  647.114729][T13838]  ? make_vfsgid+0xf1/0x140
[  647.114765][T13838]  shmem_mknod+0x2ce/0x480
[  647.114802][T13838]  ? __pfx_shmem_mknod+0x10/0x10
[  647.114844][T13838]  vfs_create+0x301/0x6c0
[  647.114880][T13838]  filename_mknodat+0x2de/0x7f0
[  647.114926][T13838]  ? __pfx_filename_mknodat+0x10/0x10
[  647.114968][T13838]  ? strncpy_from_user+0x19d/0x2d0
[  647.115005][T13838]  ? do_getname+0x191/0x390
[  647.115037][T13838]  __x64_sys_mknod+0x8f/0xc0
[  647.115062][T13838]  do_syscall_64+0x115/0x840
[  647.115101][T13838]  ? clear_bhb_loop+0x40/0x90
[  647.115133][T13838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.115160][T13838] RIP: 0033:0x7f2db959de59
[  647.115180][T13838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  647.115206][T13838] RSP: 002b:00007f2dba507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  647.115231][T13838] RAX: ffffffffffffffda RBX: 00007f2db9826180 RCX: 00007f2db959de59
[  647.115248][T13838] RDX: 0000000000000009 RSI: 0000000000000002 RDI: 0000000000000000
[  647.115263][T13838] RBP: 00007f2db9633e6f R08: 0000000000000000 R09: 0000000000000000
[  647.115279][T13838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  647.115295][T13838] R13: 00007f2db9826218 R14: 00007f2db9826180 R15: 00007ffc7bad50a8
[  647.115333][T13838]  </TASK>
[  647.390949][T13666] 8021q: adding VLAN 0 to HW filter on device bond0
[  647.408235][T13666] 8021q: adding VLAN 0 to HW filter on device team0
[  647.443591][T13666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  647.454958][T13666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  647.609733][ T7970] bridge0: port 1(bridge_slave_0) entered blocking state
[  647.616945][ T7970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  647.656121][ T7970] bridge0: port 2(bridge_slave_1) entered blocking state
[  647.663321][ T7970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  647.826812][T13601] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  647.877654][T13601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  650.300935][T13666] 8021q: adding VLAN 0 to HW filter on device batadv0
[  650.355313][T13601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  650.394750][T13584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  650.733587][T13584] veth0_vlan: entered promiscuous mode
[  650.824479][T13666] veth0_vlan: entered promiscuous mode
[  650.879365][T13584] veth1_vlan: entered promiscuous mode
[  650.943555][T13666] veth1_vlan: entered promiscuous mode
[  651.167377][T13584] veth0_macvtap: entered promiscuous mode
[  651.244700][T13584] veth1_macvtap: entered promiscuous mode
[  651.296845][T13666] veth0_macvtap: entered promiscuous mode
[  651.372447][T13666] veth1_macvtap: entered promiscuous mode
[  651.461696][T13584] batman_adv: batadv0: Interface activated: batadv_slave_0
[  651.557789][T13584] batman_adv: batadv0: Interface activated: batadv_slave_1
[  651.682814][ T8904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  651.727997][ T8904] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  651.782403][T13666] batman_adv: batadv0: Interface activated: batadv_slave_0
[  651.827801][ T8904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  651.891703][ T8904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  652.004795][T13666] batman_adv: batadv0: Interface activated: batadv_slave_1
[  652.152694][ T8904] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  652.206777][ T8904] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  652.270011][ T8904] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  652.424465][ T8904] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  653.059337][ T8904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.166130][ T8904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.397878][T13601] veth0_vlan: entered promiscuous mode
[  653.607986][ T7970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.621809][T13601] veth1_vlan: entered promiscuous mode
[  653.655560][ T7970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.793422][ T8904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.868088][ T8904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.059117][T13601] veth0_macvtap: entered promiscuous mode
[  654.144740][ T8904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.166214][T13601] veth1_macvtap: entered promiscuous mode
[  654.215897][ T8904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.342236][T13601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  654.405257][T13950] misc userio: The device must be registered before sending interrupts
[  654.461639][T13601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  654.564076][ T8904] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  654.598910][T13950] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(27.0.1), cmd(6)
[  654.642050][ T8904] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  654.715488][T13958] netlink: Unknown NAT attribute (type=1536, max=9)
[  654.735951][T13956] misc userio: The device must be registered before sending interrupts
[  654.757846][ T8904] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  654.819307][ T8904] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  654.921823][T13956] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(27.0.1), cmd(6)
[  655.369623][ T8905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  655.450347][ T8905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  655.680174][T11247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  655.735679][T11247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  659.548452][T14013] Console: switching to colour VGA+ 80x25
[  668.324645][T14124] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  668.391759][T14118] vivid-007: =================  START STATUS  =================
[  668.520505][T14118] vivid-007: Generate PTS: true
[  668.557351][T14118] vivid-007: Generate SCR: true
[  668.566093][T14129] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1323: iget: checksum invalid
[  668.618401][T14118] tpg source WxH: 320x240 (Y'CbCr)
[  668.694118][T14118] tpg field: 1
[  668.738806][T14129] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  668.765472][T14118] tpg crop: (0,0)/320x240
[  668.803650][T14118] tpg compose: (0,0)/320x240
[  668.895333][T14118] tpg colorspace: 8
[  668.987613][T14118] tpg transfer function: 0/0
[  669.008602][T14129] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1323: iget: checksum invalid
[  669.055921][T14118] tpg Y'CbCr encoding: 0/0
[  669.131880][T14118] tpg quantization: 0/0
[  669.210443][T14118] tpg RGB range: 0/2
[  669.278628][T14118] vivid-007: ==================  END STATUS  ==================
[  669.294837][T14129] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  669.423803][T14129] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1323: iget: checksum invalid
[  669.605527][T14129] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  669.723886][T14129] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1323: iget: checksum invalid
[  669.842876][T14129] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  669.952566][T14129] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  670.051743][T14129] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  671.550421][ T7966] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18
[  672.896702][ T8738] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  673.606711][ T8738] Bluetooth: hci4: command 0x2016 tx timeout
[  674.868879][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'.
[  677.129969][ T7970] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.504770][T14221] misc userio: The device must be registered before sending interrupts
[  677.661468][T14221] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(27.0.1), cmd(6)
[  677.791211][ T7970] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.978723][ T8738] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  677.994239][ T8738] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  678.013329][ T8738] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  678.024562][ T8738] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  678.034599][ T8738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  678.375827][ T7970] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.509558][T14234] futex_wake_op: syz.3.1340 tries to shift op by -2048; fix this program
[  678.557179][T14234] futex_wake_op: syz.3.1340 tries to shift op by -2048; fix this program
[  678.612447][T14234] 0x000000000001-0x000000020000 : ""
[  678.701311][T14234] ftl_cs: FTL header corrupt!
[  678.945741][ T7970] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.994143][T14212] kexec: Could not allocate control_code_buffer
[  679.174556][T14236] ubi0: attaching mtd0
[  679.294973][T14236] ubi0: scanning is finished
[  679.351181][T14236] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  679.567270][T14236] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  679.707392][T14243] futex_wake_op: syz.4.1341 tries to shift op by -2048; fix this program
[  679.780979][T14243] futex_wake_op: syz.4.1341 tries to shift op by -2048; fix this program
[  680.134797][ T8738] Bluetooth: hci4: command tx timeout
[  680.782883][ T7970] bridge_slave_1: left allmulticast mode
[  680.818883][ T7970] bridge_slave_1: left promiscuous mode
[  680.844192][ T7970] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.917765][ T7970] bridge_slave_0: left allmulticast mode
[  680.943737][T14269] vivid-007: =================  START STATUS  =================
[  680.958596][ T7970] bridge_slave_0: left promiscuous mode
[  680.998114][T14269] vivid-007: Enable Output Cropping: true grabbed
[  681.009939][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.035696][T14269] vivid-007: Enable Output Composing: true grabbed
[  681.116866][T14269] vivid-007: Enable Output Scaler: true grabbed
[  681.214877][T14269] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  681.315386][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'.
[  681.334888][T14269] vivid-007: Transmit Mode: HDMI grabbed
[  681.403791][T14269] vivid-007: Hotplug Present: 0x00000000
[  681.497366][T14269] vivid-007: RxSense Present: 0x00000000
[  681.553815][T14269] vivid-007: EDID Present: 0x00000000
[  681.636461][T14269] vivid-007: ==================  END STATUS  ==================
[  681.949511][T14269] syz.3.1345(14269): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  682.013292][ T7970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  682.051055][ T7970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  682.094393][ T7970] bond0 (unregistering): Released all slaves
[  682.202050][ T8738] Bluetooth: hci4: command tx timeout
[  683.147923][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5
[  683.456322][ T7970] hsr_slave_0: left promiscuous mode
[  683.478210][ T7970] hsr_slave_1: left promiscuous mode
[  683.495869][ T7970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  683.521894][ T7970] batman_adv: batadv0: Removing interface: batadv_slave_0
[  683.548661][ T7970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  683.572327][ T7970] batman_adv: batadv0: Removing interface: batadv_slave_1
[  683.620912][ T7970] veth1_macvtap: left promiscuous mode
[  683.639091][ T7970] veth0_macvtap: left promiscuous mode
[  683.658200][ T7970] veth1_vlan: left promiscuous mode
[  683.673234][ T7970] veth0_vlan: left promiscuous mode
[  684.271296][ T8738] Bluetooth: hci4: command tx timeout
[  684.360541][ T7970] team0 (unregistering): Port device team_slave_1 removed
[  684.401400][ T7970] team0 (unregistering): Port device team_slave_0 removed
[  684.674373][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  684.680888][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  686.340462][ T8738] Bluetooth: hci4: command tx timeout
[  686.861934][T14227] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.921361][T14227] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.978854][T14227] bridge_slave_0: entered allmulticast mode
[  687.032854][T14227] bridge_slave_0: entered promiscuous mode
[  687.089913][T14227] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.147831][T14227] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.202909][T14227] bridge_slave_1: entered allmulticast mode
[  687.212977][T14335] FAULT_INJECTION: forcing a failure.
[  687.212977][T14335] name fail_futex, interval 1, probability 0, space 0, times 0
[  687.260176][T14227] bridge_slave_1: entered promiscuous mode
[  687.285222][T14335] CPU: 0 UID: 0 PID: 14335 Comm: syz.4.1352 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  687.285261][T14335] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  687.285270][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  687.285286][T14335] Call Trace:
[  687.285294][T14335]  <TASK>
[  687.285303][T14335]  dump_stack_lvl+0x100/0x190
[  687.285333][T14335]  should_fail_ex.cold+0x5/0xa
[  687.285359][T14335]  get_futex_key+0x295/0x14f0
[  687.285399][T14335]  ? __pfx_get_futex_key+0x10/0x10
[  687.285435][T14335]  ? lock_acquire+0x1b9/0x370
[  687.285476][T14335]  futex_wake+0xf4/0x5e0
[  687.285506][T14335]  ? __pfx_futex_wake+0x10/0x10
[  687.285534][T14335]  ? find_held_lock+0x2b/0x80
[  687.285560][T14335]  ? exit_mm_release+0x19/0x30
[  687.285593][T14335]  do_futex+0x2b2/0x440
[  687.285616][T14335]  ? __pfx_do_futex+0x10/0x10
[  687.285636][T14335]  ? __might_fault+0xc5/0x140
[  687.285680][T14335]  mm_release+0x24a/0x2f0
[  687.285718][T14335]  do_exit+0x707/0x2ae0
[  687.285752][T14335]  ? __pfx_do_exit+0x10/0x10
[  687.285781][T14335]  ? do_raw_spin_lock+0x128/0x260
[  687.285803][T14335]  ? find_held_lock+0x2b/0x80
[  687.285828][T14335]  ? get_signal+0x7e0/0x21e0
[  687.285854][T14335]  do_group_exit+0xd5/0x2a0
[  687.285886][T14335]  get_signal+0x1ec7/0x21e0
[  687.285918][T14335]  ? __pfx_get_signal+0x10/0x10
[  687.285943][T14335]  ? do_futex+0x190/0x440
[  687.285974][T14335]  arch_do_signal_or_restart+0x91/0x7a0
[  687.286037][T14335]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  687.286081][T14335]  ? __sys_socket+0xac/0x260
[  687.286125][T14335]  exit_to_user_mode_loop+0x139/0x6f0
[  687.286163][T14335]  ? rcu_is_watching+0x12/0xc0
[  687.286191][T14335]  do_syscall_64+0x652/0x840
[  687.286231][T14335]  ? clear_bhb_loop+0x40/0x90
[  687.286261][T14335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.286285][T14335] RIP: 0033:0x7f2db959de59
[  687.286305][T14335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  687.286328][T14335] RSP: 002b:00007f2dba5490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  687.286354][T14335] RAX: fffffffffffffe00 RBX: 00007f2db9825fa8 RCX: 00007f2db959de59
[  687.286370][T14335] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2db9825fa8
[  687.286385][T14335] RBP: 00007f2db9825fa0 R08: 0000000000000000 R09: 0000000000000000
[  687.286400][T14335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  687.286415][T14335] R13: 00007f2db9826038 R14: 00007ffc7bad4fc0 R15: 00007ffc7bad50a8
[  687.286445][T14335]  </TASK>
[  687.923073][T14227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  687.961350][T14227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  688.512288][T14227] team0: Port device team_slave_0 added
[  688.540361][T14227] team0: Port device team_slave_1 added
[  688.562743][T14358] FAULT_INJECTION: forcing a failure.
[  688.562743][T14358] name failslab, interval 1, probability 0, space 0, times 0
[  688.618774][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6
[  688.625743][T14358] CPU: 0 UID: 0 PID: 14358 Comm: syz.0.1357 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  688.625785][T14358] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  688.625795][T14358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  688.625811][T14358] Call Trace:
[  688.625820][T14358]  <TASK>
[  688.625830][T14358]  dump_stack_lvl+0x100/0x190
[  688.625864][T14358]  should_fail_ex.cold+0x5/0xa
[  688.625893][T14358]  should_failslab+0xc2/0x120
[  688.625926][T14358]  __kmalloc_noprof+0xfc/0x820
[  688.625959][T14358]  ? constrain_params_by_rules+0x175/0xd20
[  688.626058][T14358]  constrain_params_by_rules+0x175/0xd20
[  688.626095][T14358]  ? stack_depot_save_flags+0x27/0x9d0
[  688.626138][T14358]  ? kasan_save_stack+0x3f/0x50
[  688.626167][T14358]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  688.626207][T14358]  ? snd_pcm_oss_change_params_locked+0x247/0x39f0
[  688.626265][T14358]  ? __pfx_constrain_params_by_rules+0x10/0x10
[  688.626302][T14358]  ? do_select+0xd54/0x1850
[  688.626337][T14358]  ? core_sys_select+0x55b/0xbb0
[  688.626372][T14358]  ? kern_select+0x1d0/0x280
[  688.626409][T14358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.626458][T14358]  ? rcu_is_watching+0x12/0xc0
[  688.626487][T14358]  ? snd_interval_refine+0x2d0/0x580
[  688.626539][T14358]  snd_pcm_hw_refine+0x82a/0xb40
[  688.626582][T14358]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  688.626626][T14358]  ? __kasan_kmalloc+0xaa/0xb0
[  688.626658][T14358]  ? __asan_memset+0x23/0x50
[  688.626681][T14358]  ? _snd_pcm_hw_param_min+0x1ea/0x670
[  688.626722][T14358]  snd_pcm_oss_change_params_locked+0x2594/0x39f0
[  688.626763][T14358]  ? trace_contention_end+0x126/0x160
[  688.626810][T14358]  ? rcu_is_watching+0x12/0xc0
[  688.626838][T14358]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  688.626877][T14358]  ? __pfx___mutex_lock+0x10/0x10
[  688.626917][T14358]  ? __mutex_lock+0x26d/0x1bd0
[  688.626959][T14358]  ? find_held_lock+0x2b/0x80
[  688.626996][T14358]  ? __mutex_unlock_slowpath+0x35d/0x930
[  688.627043][T14358]  snd_pcm_oss_make_ready+0xeb/0x1b0
[  688.627083][T14358]  snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0
[  688.627128][T14358]  snd_pcm_oss_poll+0x404/0xae0
[  688.627176][T14358]  ? __pfx___pollwait+0x10/0x10
[  688.627231][T14358]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  688.627267][T14358]  ? __fget_files+0x21f/0x3d0
[  688.627309][T14358]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  688.627348][T14358]  do_select+0xd54/0x1850
[  688.627382][T14358]  ? do_raw_spin_lock+0x128/0x260
[  688.627434][T14358]  ? __pfx_do_select+0x10/0x10
[  688.627474][T14358]  ? __pfx___pollwait+0x10/0x10
[  688.627513][T14358]  ? __pfx_pollwake+0x10/0x10
[  688.627551][T14358]  ? __pfx_pollwake+0x10/0x10
[  688.627626][T14358]  ? find_held_lock+0x2b/0x80
[  688.627654][T14358]  ? __might_fault+0xc5/0x140
[  688.627696][T14358]  ? __might_fault+0xc5/0x140
[  688.627747][T14358]  ? core_sys_select+0x55b/0xbb0
[  688.627783][T14358]  core_sys_select+0x55b/0xbb0
[  688.627827][T14358]  ? __pfx_core_sys_select+0x10/0x10
[  688.627864][T14358]  ? get_pid_task+0xfc/0x250
[  688.627921][T14358]  ? do_futex+0x190/0x440
[  688.627947][T14358]  ? __pfx_do_futex+0x10/0x10
[  688.627976][T14358]  kern_select+0x1d0/0x280
[  688.628016][T14358]  ? __pfx_kern_select+0x10/0x10
[  688.628064][T14358]  __x64_sys_select+0xbd/0x160
[  688.628101][T14358]  ? do_syscall_64+0x90/0x840
[  688.628139][T14358]  ? lockdep_hardirqs_on+0x78/0x100
[  688.628178][T14358]  do_syscall_64+0x115/0x840
[  688.628216][T14358]  ? clear_bhb_loop+0x40/0x90
[  688.628247][T14358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.628274][T14358] RIP: 0033:0x7ffa0519de59
[  688.628296][T14358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.628322][T14358] RSP: 002b:00007ffa06078028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  688.628346][T14358] RAX: ffffffffffffffda RBX: 00007ffa05426090 RCX: 00007ffa0519de59
[  688.628364][T14358] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000007
[  688.628380][T14358] RBP: 00007ffa05233e6f R08: 0000000000000000 R09: 0000000000000000
[  688.628397][T14358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  688.628420][T14358] R13: 00007ffa05426128 R14: 00007ffa05426090 R15: 00007ffda01aae58
[  688.628452][T14358]  </TASK>
[  689.639132][T14227] batman_adv: batadv0: Adding interface: batadv_slave_0
[  689.665161][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  689.777644][T14227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  689.846792][T14362] FAULT_INJECTION: forcing a failure.
[  689.846792][T14362] name failslab, interval 1, probability 0, space 0, times 0
[  689.901379][T14362] CPU: 0 UID: 0 PID: 14362 Comm: syz.4.1358 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  689.901423][T14362] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  689.901433][T14362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  689.901449][T14362] Call Trace:
[  689.901458][T14362]  <TASK>
[  689.901467][T14362]  dump_stack_lvl+0x100/0x190
[  689.901499][T14362]  should_fail_ex.cold+0x5/0xa
[  689.901529][T14362]  should_failslab+0xc2/0x120
[  689.901562][T14362]  __kmalloc_noprof+0xfc/0x820
[  689.901592][T14362]  ? __memcg_list_lru_alloc+0x418/0x680
[  689.901640][T14362]  __memcg_list_lru_alloc+0x418/0x680
[  689.901681][T14362]  ? xa_load+0x149/0x2c0
[  689.901714][T14362]  ? __pfx___memcg_list_lru_alloc+0x10/0x10
[  689.901761][T14362]  ? rcu_read_unlock+0x17/0x60
[  689.901803][T14362]  memcg_list_lru_alloc+0xd3/0x100
[  689.901831][T14362]  __memcg_slab_post_alloc_hook+0x28b/0x1160
[  689.901880][T14362]  ? kasan_save_track+0x14/0x30
[  689.901920][T14362]  kmem_cache_alloc_lru_noprof+0x583/0x6a0
[  689.901950][T14362]  ? inode_set_ctime_current+0x283/0x850
[  689.901993][T14362]  ? find_held_lock+0x2b/0x80
[  689.902022][T14362]  ? __d_alloc+0x35/0xa50
[  689.902050][T14362]  __d_alloc+0x35/0xa50
[  689.902072][T14362]  ? _raw_spin_unlock+0x28/0x50
[  689.902109][T14362]  d_make_root+0x3e/0x90
[  689.902135][T14362]  simple_fill_super+0x278/0x680
[  689.902161][T14362]  ? __pfx_nfsd_fill_super+0x10/0x10
[  689.902302][T14362]  ? __pfx_nfsd_fill_super+0x10/0x10
[  689.902337][T14362]  nfsd_fill_super+0x98/0x560
[  689.902373][T14362]  ? __pfx_nfsd_fill_super+0x10/0x10
[  689.902408][T14362]  get_tree_keyed+0x10e/0x1d0
[  689.902446][T14362]  vfs_get_tree+0x92/0x320
[  689.902478][T14362]  path_mount+0x7d0/0x23d0
[  689.902510][T14362]  ? __pfx_path_mount+0x10/0x10
[  689.902537][T14362]  ? lockdep_hardirqs_on+0x78/0x100
[  689.902580][T14362]  ? putname+0xb1/0x110
[  689.902602][T14362]  ? kmem_cache_free+0x127/0x6b0
[  689.902652][T14362]  ? __x64_sys_mount+0x293/0x310
[  689.902689][T14362]  __x64_sys_mount+0x293/0x310
[  689.902716][T14362]  ? __pfx___x64_sys_mount+0x10/0x10
[  689.902751][T14362]  do_syscall_64+0x115/0x840
[  689.902788][T14362]  ? clear_bhb_loop+0x40/0x90
[  689.902818][T14362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.902843][T14362] RIP: 0033:0x7f2db959de59
[  689.902864][T14362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  689.902895][T14362] RSP: 002b:00007f2dba528028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  689.902919][T14362] RAX: ffffffffffffffda RBX: 00007f2db9826090 RCX: 00007f2db959de59
[  689.902937][T14362] RDX: 0000200000000140 RSI: 0000200000000280 RDI: 0000000000000000
[  689.902953][T14362] RBP: 00007f2db9633e6f R08: 0000000000000000 R09: 0000000000000000
[  689.902969][T14362] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000
[  689.902984][T14362] R13: 00007f2db9826128 R14: 00007f2db9826090 R15: 00007ffc7bad50a8
[  689.903015][T14362]  </TASK>
[  690.261772][T14339] FAULT_INJECTION: forcing a failure.
[  690.261772][T14339] name fail_futex, interval 1, probability 0, space 0, times 0
[  690.274762][T14339] CPU: 0 UID: 0 PID: 14339 Comm: syz.3.1353 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  690.274805][T14339] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  690.274816][T14339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  690.274832][T14339] Call Trace:
[  690.274841][T14339]  <TASK>
[  690.274851][T14339]  dump_stack_lvl+0x100/0x190
[  690.274886][T14339]  should_fail_ex.cold+0x5/0xa
[  690.274921][T14339]  get_futex_key+0x1d2/0x14f0
[  690.274966][T14339]  ? __pfx_get_futex_key+0x10/0x10
[  690.275007][T14339]  ? wakeup_preempt_fair+0x640/0x1060
[  690.275057][T14339]  futex_wait_setup+0x91/0x540
[  690.275097][T14339]  __futex_wait+0x19f/0x300
[  690.275130][T14339]  ? __pfx___futex_wait+0x10/0x10
[  690.275162][T14339]  ? __pfx_try_to_wake_up+0x10/0x10
[  690.275185][T14339]  ? futex_hash+0x311/0x400
[  690.275226][T14339]  ? __pfx_futex_wake_mark+0x10/0x10
[  690.275262][T14339]  ? find_held_lock+0x2b/0x80
[  690.275290][T14339]  ? futex_wake+0x4ea/0x5e0
[  690.275326][T14339]  futex_wait+0xe6/0x370
[  690.275357][T14339]  ? __pfx_futex_wait+0x10/0x10
[  690.275395][T14339]  ? find_held_lock+0x2b/0x80
[  690.275422][T14339]  ? __fget_files+0x215/0x3d0
[  690.275460][T14339]  ? __fget_files+0x215/0x3d0
[  690.275501][T14339]  do_futex+0x265/0x440
[  690.275527][T14339]  ? __pfx_do_futex+0x10/0x10
[  690.275554][T14339]  ? fdget+0x18b/0x210
[  690.275593][T14339]  __x64_sys_futex+0x34f/0x4d0
[  690.275622][T14339]  ? __pfx___x64_sys_futex+0x10/0x10
[  690.275659][T14339]  do_syscall_64+0x115/0x840
[  690.275699][T14339]  ? clear_bhb_loop+0x40/0x90
[  690.275730][T14339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.275757][T14339] RIP: 0033:0x7fd36639de59
[  690.275778][T14339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  690.275804][T14339] RSP: 002b:00007fd36727f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  690.275828][T14339] RAX: ffffffffffffffda RBX: 00007fd366625fa8 RCX: 00007fd36639de59
[  690.275845][T14339] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd366625fa8
[  690.275861][T14339] RBP: 00007fd366625fa0 R08: 0000000000000000 R09: 0000000000000000
[  690.275877][T14339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  690.275893][T14339] R13: 00007fd366626038 R14: 00007fffc5ddc530 R15: 00007fffc5ddc618
[  690.275931][T14339]  </TASK>
[  690.903472][T14227] batman_adv: batadv0: Adding interface: batadv_slave_1
[  690.933826][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  691.052287][T14227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  691.332078][T14227] hsr_slave_0: entered promiscuous mode
[  691.369313][T14227] hsr_slave_1: entered promiscuous mode
[  691.530444][T14367] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1359'.
[  694.887536][T14405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1362'.
[  694.981755][T14405] veth0_macvtap: left promiscuous mode
[  695.036593][T14405] macvtap0: entered promiscuous mode
[  695.059285][T14405] macvtap0: entered allmulticast mode
[  695.494322][ T8738] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  696.696676][T14227] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  696.777202][T14227] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  696.854211][T14227] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  696.917438][T14227] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  696.978407][T14227] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  697.067772][T14227] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  697.138765][T14227] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  697.224766][T14227] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  697.660332][T14454] ubi0: attaching mtd0
[  697.725249][T14454] ubi0: scanning is finished
[  697.776716][T14454] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  698.008947][T14454] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  698.625819][T14467] FAULT_INJECTION: forcing a failure.
[  698.625819][T14467] name fail_futex, interval 1, probability 0, space 0, times 0
[  698.699426][T14227] 8021q: adding VLAN 0 to HW filter on device bond0
[  698.820179][T14467] CPU: 0 UID: 0 PID: 14467 Comm: syz.3.1367 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  698.820228][T14467] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  698.820239][T14467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  698.820255][T14467] Call Trace:
[  698.820263][T14467]  <TASK>
[  698.820273][T14467]  dump_stack_lvl+0x100/0x190
[  698.820307][T14467]  should_fail_ex.cold+0x5/0xa
[  698.820335][T14467]  get_futex_key+0x1d2/0x14f0
[  698.820379][T14467]  ? __pfx_get_futex_key+0x10/0x10
[  698.820419][T14467]  ? __destroy_inode+0x2cd/0x710
[  698.820446][T14467]  ? __pfx_sock_free_inode+0x10/0x10
[  698.820483][T14467]  ? destroy_inode+0x139/0x1c0
[  698.820514][T14467]  futex_wake+0xf4/0x5e0
[  698.820548][T14467]  ? __pfx_futex_wake+0x10/0x10
[  698.820578][T14467]  ? iput.part.0+0x981/0x1050
[  698.820616][T14467]  do_futex+0x2b2/0x440
[  698.820642][T14467]  ? __pfx_do_futex+0x10/0x10
[  698.820665][T14467]  ? iput+0x3a/0x40
[  698.820689][T14467]  ? __sock_release+0x184/0x260
[  698.820725][T14467]  __x64_sys_futex+0x34f/0x4d0
[  698.820752][T14467]  ? __sys_socket+0xac/0x260
[  698.820792][T14467]  ? __pfx___x64_sys_futex+0x10/0x10
[  698.820828][T14467]  do_syscall_64+0x115/0x840
[  698.820867][T14467]  ? clear_bhb_loop+0x40/0x90
[  698.820899][T14467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.820925][T14467] RIP: 0033:0x7fd36639de59
[  698.820946][T14467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  698.820971][T14467] RSP: 002b:00007fd36725e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  698.820995][T14467] RAX: ffffffffffffffda RBX: 00007fd366626098 RCX: 00007fd36639de59
[  698.821012][T14467] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd36662609c
[  698.821028][T14467] RBP: 00007fd366626090 R08: 0000000000000001 R09: 0000000000000000
[  698.821044][T14467] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  698.821059][T14467] R13: 00007fd366626128 R14: 00007fffc5ddc530 R15: 00007fffc5ddc618
[  698.821091][T14467]  </TASK>
[  700.335508][T14227] 8021q: adding VLAN 0 to HW filter on device team0
[  700.509668][T11239] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.516904][T11239] bridge0: port 1(bridge_slave_0) entered forwarding state
[  700.793080][T11239] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.800318][T11239] bridge0: port 2(bridge_slave_1) entered forwarding state
[  700.847878][ T8738] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11
[  701.591520][T14499] vivid-007: =================  START STATUS  =================
[  701.793502][T14499] vivid-007: Enable Output Cropping: true grabbed
[  701.995912][T14499] vivid-007: Enable Output Composing: true grabbed
[  702.164022][T14499] vivid-007: Enable Output Scaler: true grabbed
[  702.319626][T14499] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  702.472949][T14499] vivid-007: Transmit Mode: HDMI grabbed
[  702.578477][T14499] vivid-007: Hotplug Present: 0x00000000
[  702.659532][T14499] vivid-007: RxSense Present: 0x00000000
[  702.713864][T14499] vivid-007: EDID Present: 0x00000000
[  702.761112][T14499] vivid-007: ==================  END STATUS  ==================
[  703.602281][T14535] random: crng reseeded on system resumption
[  704.025070][T14532] hub 1-0:1.0: USB hub found
[  704.067216][T14532] hub 1-0:1.0: 1 port detected
[  704.258186][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1374'.
[  704.279423][T14227] 8021q: adding VLAN 0 to HW filter on device batadv0
[  705.279628][T14560] openvswitch: netlink: IP tunnel dst address not specified
[  705.659047][T14566] random: crng reseeded on system resumption
[  705.951899][T14227] veth0_vlan: entered promiscuous mode
[  706.036411][T14227] veth1_vlan: entered promiscuous mode
[  706.877541][T14227] veth0_macvtap: entered promiscuous mode
[  706.962124][T14227] veth1_macvtap: entered promiscuous mode
[  707.101676][T14227] batman_adv: batadv0: Interface activated: batadv_slave_0
[  707.175750][T14227] batman_adv: batadv0: Interface activated: batadv_slave_1
[  707.278016][ T8904] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  707.339311][ T8904] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  707.414874][ T8904] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  707.473836][ T8904] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  707.880758][T14596] FAULT_INJECTION: forcing a failure.
[  707.880758][T14596] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  707.926478][T11239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.976964][T14596] CPU: 0 UID: 0 PID: 14596 Comm: syz.4.1385 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  707.977006][T14596] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  707.977016][T14596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  707.977030][T14596] Call Trace:
[  707.977039][T14596]  <TASK>
[  707.977049][T14596]  dump_stack_lvl+0x100/0x190
[  707.977081][T14596]  should_fail_ex.cold+0x5/0xa
[  707.977108][T14596]  _copy_from_user+0x2e/0xd0
[  707.977240][T14596]  copy_msghdr_from_user+0x9f/0x4c0
[  707.977294][T14596]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  707.977341][T14596]  ___sys_sendmsg+0x106/0x1e0
[  707.977376][T14596]  ? __pfx____sys_sendmsg+0x10/0x10
[  707.977408][T14596]  ? __lock_acquire+0x49f/0x1a40
[  707.977443][T14596]  ? get_pid_task+0x106/0x250
[  707.977499][T14596]  __sys_sendmsg+0x160/0x210
[  707.977525][T14596]  ? __pfx___sys_sendmsg+0x10/0x10
[  707.977565][T14596]  do_syscall_64+0x115/0x840
[  707.977600][T14596]  ? clear_bhb_loop+0x40/0x90
[  707.977629][T14596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.977653][T14596] RIP: 0033:0x7f2db959de59
[  707.977673][T14596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.977696][T14596] RSP: 002b:00007f2dba549028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  707.977718][T14596] RAX: ffffffffffffffda RBX: 00007f2db9825fa0 RCX: 00007f2db959de59
[  707.977734][T14596] RDX: 0000000000004010 RSI: 00002000000014c0 RDI: 0000000000000003
[  707.977749][T14596] RBP: 00007f2dba549090 R08: 0000000000000000 R09: 0000000000000000
[  707.977763][T14596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  707.977777][T14596] R13: 00007f2db9826038 R14: 00007f2db9825fa0 R15: 00007ffc7bad50a8
[  707.977806][T14596]  </TASK>
[  708.157451][T11239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  708.633697][T11245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  708.683021][T11245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.337288][T14600] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  710.318763][ T8738] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  710.629031][T14641] netlink: Unknown nat attribute (0)
[  711.643881][T14653] random: crng reseeded on system resumption
[  711.664584][T14648] nbd: couldn't find device at index 158
[  712.013579][T14661] nbd: couldn't find device at index 158
[  712.211467][T14668] FAULT_INJECTION: forcing a failure.
[  712.211467][T14668] name failslab, interval 1, probability 0, space 0, times 0
[  712.292822][T14668] CPU: 0 UID: 0 PID: 14668 Comm: syz.4.1398 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  712.292863][T14668] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  712.292873][T14668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  712.292888][T14668] Call Trace:
[  712.292896][T14668]  <TASK>
[  712.292905][T14668]  dump_stack_lvl+0x100/0x190
[  712.292936][T14668]  should_fail_ex.cold+0x5/0xa
[  712.292963][T14668]  should_failslab+0xc2/0x120
[  712.292995][T14668]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  712.293024][T14668]  ? __alloc_skb+0x5b7/0x710
[  712.293048][T14668]  ? __alloc_skb+0x140/0x710
[  712.293083][T14668]  __alloc_skb+0x140/0x710
[  712.293106][T14668]  ? __alloc_skb+0x5b7/0x710
[  712.293129][T14668]  ? __pfx___alloc_skb+0x10/0x10
[  712.293161][T14668]  netlink_alloc_large_skb+0x69/0x150
[  712.293201][T14668]  netlink_sendmsg+0x680/0xda0
[  712.293242][T14668]  ? __pfx_netlink_sendmsg+0x10/0x10
[  712.293282][T14668]  ? apparmor_socket_sendmsg+0x15b/0x270
[  712.293326][T14668]  ____sys_sendmsg+0xa4d/0xbe0
[  712.293358][T14668]  ? __pfx_netlink_sendmsg+0x10/0x10
[  712.293396][T14668]  ? __pfx_____sys_sendmsg+0x10/0x10
[  712.293443][T14668]  ___sys_sendmsg+0x190/0x1e0
[  712.293480][T14668]  ? __pfx____sys_sendmsg+0x10/0x10
[  712.293514][T14668]  ? __lock_acquire+0x49f/0x1a40
[  712.293550][T14668]  ? get_pid_task+0x106/0x250
[  712.293608][T14668]  __sys_sendmsg+0x160/0x210
[  712.293636][T14668]  ? __pfx___sys_sendmsg+0x10/0x10
[  712.293678][T14668]  do_syscall_64+0x115/0x840
[  712.293715][T14668]  ? clear_bhb_loop+0x40/0x90
[  712.293744][T14668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.293770][T14668] RIP: 0033:0x7f2db959de59
[  712.293790][T14668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.293813][T14668] RSP: 002b:00007f2dba549028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  712.293839][T14668] RAX: ffffffffffffffda RBX: 00007f2db9825fa0 RCX: 00007f2db959de59
[  712.293856][T14668] RDX: 0000000000004010 RSI: 00002000000014c0 RDI: 0000000000000003
[  712.293872][T14668] RBP: 00007f2dba549090 R08: 0000000000000000 R09: 0000000000000000
[  712.293887][T14668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  712.293901][T14668] R13: 00007f2db9826038 R14: 00007f2db9825fa0 R15: 00007ffc7bad50a8
[  712.293935][T14668]  </TASK>
[  713.473532][T14682] Invalid input. Must be >= 4608
[  714.289003][T12703] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.667445][T12703] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.035033][T12703] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.320884][ T8738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  715.344745][ T8738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  715.355638][ T8738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  715.369998][ T8738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  715.377638][ T8738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  715.771975][T12703] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.976918][T14720] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1408'.
[  717.293686][T12703] bridge_slave_1: left allmulticast mode
[  717.330240][T12703] bridge_slave_1: left promiscuous mode
[  717.360172][T12703] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.417475][T12703] bridge_slave_0: left allmulticast mode
[  717.454008][T12703] bridge_slave_0: left promiscuous mode
[  717.459899][ T8738] Bluetooth: hci2: command tx timeout
[  717.492775][T12703] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.258170][T12703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  718.327121][T12703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  718.376006][T12703] bond0 (unregistering): Released all slaves
[  719.503722][T12703] hsr_slave_0: left promiscuous mode
[  719.528272][ T8738] Bluetooth: hci2: command tx timeout
[  719.556803][T12703] hsr_slave_1: left promiscuous mode
[  719.600004][T12703] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  719.661648][T12703] batman_adv: batadv0: Removing interface: batadv_slave_0
[  719.714153][T12703] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  719.758004][T12703] batman_adv: batadv0: Removing interface: batadv_slave_1
[  719.834357][T12703] veth1_macvtap: left promiscuous mode
[  719.870214][T12703] veth1_vlan: left promiscuous mode
[  719.912165][T12703] veth0_vlan: left promiscuous mode
[  721.194395][T12703] team0 (unregistering): Port device team_slave_1 removed
[  721.333403][T12703] team0 (unregistering): Port device team_slave_0 removed
[  721.598585][ T7966] Bluetooth: hci2: command tx timeout
[  721.857512][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5
[  723.121856][T14779] FAULT_INJECTION: forcing a failure.
[  723.121856][T14779] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  723.207148][T14779] CPU: 0 UID: 0 PID: 14779 Comm: syz.3.1418 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  723.207189][T14779] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  723.207199][T14779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  723.207214][T14779] Call Trace:
[  723.207222][T14779]  <TASK>
[  723.207231][T14779]  dump_stack_lvl+0x100/0x190
[  723.207263][T14779]  should_fail_ex.cold+0x5/0xa
[  723.207290][T14779]  _copy_from_iter+0x1f4/0x1690
[  723.207328][T14779]  ? __asan_memset+0x23/0x50
[  723.207352][T14779]  ? __pfx__copy_from_iter+0x10/0x10
[  723.207385][T14779]  ? __pfx___alloc_skb+0x10/0x10
[  723.207422][T14779]  netlink_sendmsg+0x808/0xda0
[  723.207465][T14779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  723.207505][T14779]  ? apparmor_socket_sendmsg+0x15b/0x270
[  723.207550][T14779]  ____sys_sendmsg+0xa4d/0xbe0
[  723.207584][T14779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  723.207622][T14779]  ? __pfx_____sys_sendmsg+0x10/0x10
[  723.207668][T14779]  ___sys_sendmsg+0x190/0x1e0
[  723.207706][T14779]  ? __pfx____sys_sendmsg+0x10/0x10
[  723.207740][T14779]  ? __lock_acquire+0x49f/0x1a40
[  723.207776][T14779]  ? get_pid_task+0x106/0x250
[  723.207834][T14779]  __sys_sendmsg+0x160/0x210
[  723.207862][T14779]  ? __pfx___sys_sendmsg+0x10/0x10
[  723.207904][T14779]  do_syscall_64+0x115/0x840
[  723.207941][T14779]  ? clear_bhb_loop+0x40/0x90
[  723.207971][T14779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  723.207996][T14779] RIP: 0033:0x7fd36639de59
[  723.208016][T14779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  723.208040][T14779] RSP: 002b:00007fd36727f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  723.208063][T14779] RAX: ffffffffffffffda RBX: 00007fd366625fa0 RCX: 00007fd36639de59
[  723.208079][T14779] RDX: 0000000000004010 RSI: 00002000000014c0 RDI: 0000000000000003
[  723.208095][T14779] RBP: 00007fd36727f090 R08: 0000000000000000 R09: 0000000000000000
[  723.208133][T14779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  723.208147][T14779] R13: 00007fd366626038 R14: 00007fd366625fa0 R15: 00007fffc5ddc618
[  723.208177][T14779]  </TASK>
[  723.429612][T14784] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  723.772187][ T8738] Bluetooth: hci2: command tx timeout
[  723.783276][T14701] bridge0: port 1(bridge_slave_0) entered blocking state
[  723.833042][T14701] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.874873][T14701] bridge_slave_0: entered allmulticast mode
[  724.024879][T14701] bridge_slave_0: entered promiscuous mode
[  724.060931][T14701] bridge0: port 2(bridge_slave_1) entered blocking state
[  724.091307][T14701] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.162002][T14701] bridge_slave_1: entered allmulticast mode
[  724.221076][T14701] bridge_slave_1: entered promiscuous mode
[  724.526482][T14701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  724.596438][T14701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  724.962678][T14701] team0: Port device team_slave_0 added
[  725.045221][T14701] team0: Port device team_slave_1 added
[  725.780038][T14701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  725.819329][T14701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  725.924686][T14701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  725.982323][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6
[  726.112021][T14701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  726.132649][T14701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  726.221691][T14701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  727.145647][T14701] hsr_slave_0: entered promiscuous mode
[  727.173432][T14701] hsr_slave_1: entered promiscuous mode
[  727.193800][T14701] debugfs: 'hsr0' already exists in 'hsr'
[  727.221467][T14701] Cannot create hsr debugfs directory
[  728.025958][T14848] random: crng reseeded on system resumption
[  728.290913][T14848] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1427'.
[  728.967337][T14848] bridge0: entered promiscuous mode
[  728.991921][T14848] bridge0: entered allmulticast mode
[  729.072511][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7
[  730.112859][ T8738] Bluetooth: hci4: unexpected subevent 0x18 length: 123 > 19
[  730.120327][ T8738] Bluetooth: hci4: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  732.565341][T14701] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  732.628061][T14701] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  732.684602][T14701] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  732.769301][T14701] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  732.836873][T14701] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  732.922176][T14701] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  732.990782][T14701] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  733.082348][T14701] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  733.143673][T14923] zswap: compressor û not available
[  733.959225][T14952] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(27.0.1), cmd(6)
[  734.497823][T14701] 8021q: adding VLAN 0 to HW filter on device bond0
[  735.109366][T14701] 8021q: adding VLAN 0 to HW filter on device team0
[  735.201742][T11241] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.208996][T11241] bridge0: port 1(bridge_slave_0) entered forwarding state
[  735.373726][T11241] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.380932][T11241] bridge0: port 2(bridge_slave_1) entered forwarding state
[  736.493765][T14989] random: crng reseeded on system resumption
[  739.628272][T14701] 8021q: adding VLAN 0 to HW filter on device batadv0
[  739.964396][T15039] Falling back ldisc for ttyS2.
[  740.789357][T14701] veth0_vlan: entered promiscuous mode
[  740.799542][T15053] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(27.0.1), cmd(6)
[  740.875879][T14701] veth1_vlan: entered promiscuous mode
[  741.130703][T14701] veth0_macvtap: entered promiscuous mode
[  741.228548][T14701] veth1_macvtap: entered promiscuous mode
[  741.607234][T14701] batman_adv: batadv0: Interface activated: batadv_slave_0
[  741.889371][T14701] batman_adv: batadv0: Interface activated: batadv_slave_1
[  742.236348][T15067] can: request_module (can-proto-0) failed.
[  742.366212][T11745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  742.427554][T11745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  742.637373][T11745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  742.706090][T11745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  743.162874][   T30] audit: type=1804 audit(2147483781.546:24): pid=15085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1454" name="/newroot/46/file0" dev="tmpfs" ino=261 res=1 errno=0
[  743.268869][T11745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  743.347963][T11745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  743.390468][   T30] audit: type=1804 audit(2147483781.606:25): pid=15087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1454" name="/newroot/46/file0" dev="tmpfs" ino=261 res=1 errno=0
[  743.520037][T11241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  743.575373][T11241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  745.065670][T15118] FAULT_INJECTION: forcing a failure.
[  745.065670][T15118] name failslab, interval 1, probability 0, space 0, times 0
[  745.146844][T15118] CPU: 0 UID: 0 PID: 15118 Comm: syz.3.1460 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  745.146888][T15118] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  745.146906][T15118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  745.146922][T15118] Call Trace:
[  745.146930][T15118]  <TASK>
[  745.146940][T15118]  dump_stack_lvl+0x100/0x190
[  745.146972][T15118]  should_fail_ex.cold+0x5/0xa
[  745.147001][T15118]  should_failslab+0xc2/0x120
[  745.147034][T15118]  __kmalloc_noprof+0xfc/0x820
[  745.147059][T15118]  ? __lock_acquire+0x49f/0x1a40
[  745.147099][T15118]  ? sk_prot_alloc+0x10b/0x2a0
[  745.147142][T15118]  sk_prot_alloc+0x10b/0x2a0
[  745.147179][T15118]  sk_alloc+0x36/0xe80
[  745.147206][T15118]  pppoe_create+0x32/0x360
[  745.147243][T15118]  pppox_create+0x15c/0x2c0
[  745.147280][T15118]  __sock_create+0x339/0x860
[  745.147322][T15118]  __sys_socket+0x14d/0x260
[  745.147361][T15118]  ? __pfx___sys_socket+0x10/0x10
[  745.147408][T15118]  __x64_sys_socket+0x72/0xb0
[  745.147446][T15118]  ? lockdep_hardirqs_on+0x78/0x100
[  745.147486][T15118]  do_syscall_64+0x115/0x840
[  745.147524][T15118]  ? clear_bhb_loop+0x40/0x90
[  745.147555][T15118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  745.147582][T15118] RIP: 0033:0x7fd36639de59
[  745.147603][T15118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  745.147628][T15118] RSP: 002b:00007fd36727f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  745.147653][T15118] RAX: ffffffffffffffda RBX: 00007fd366625fa0 RCX: 00007fd36639de59
[  745.147670][T15118] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000018
[  745.147686][T15118] RBP: 00007fd366433e6f R08: 0000000000000000 R09: 0000000000000000
[  745.147702][T15118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  745.147717][T15118] R13: 00007fd366626038 R14: 00007fd366625fa0 R15: 00007fffc5ddc618
[  745.147749][T15118]  </TASK>
[  745.887084][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  745.895943][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  746.309118][T15127] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1462'.
[  746.426329][T15127] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  747.446091][T15146] netlink: Unknown nat attribute (0)
[  748.052085][T15152] FAULT_INJECTION: forcing a failure.
[  748.052085][T15152] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  748.172216][T15152] CPU: 0 UID: 0 PID: 15152 Comm: syz.3.1468 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  748.172261][T15152] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  748.172271][T15152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  748.172287][T15152] Call Trace:
[  748.172296][T15152]  <TASK>
[  748.172306][T15152]  dump_stack_lvl+0x100/0x190
[  748.172339][T15152]  should_fail_ex.cold+0x5/0xa
[  748.172364][T15152]  ? fs_reclaim_acquire+0x70/0x100
[  748.172400][T15152]  should_fail_alloc_page+0xeb/0x140
[  748.172435][T15152]  prepare_alloc_pages+0x1f0/0x5f0
[  748.172474][T15152]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  748.172501][T15152]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  748.172528][T15152]  ? __pfx_stack_trace_save+0x10/0x10
[  748.172562][T15152]  ? stack_depot_save_flags+0x27/0x9d0
[  748.172605][T15152]  ? kasan_save_stack+0x3f/0x50
[  748.172631][T15152]  ? kasan_save_stack+0x30/0x50
[  748.172658][T15152]  ? kasan_save_track+0x14/0x30
[  748.172685][T15152]  ? __kasan_kmalloc+0xaa/0xb0
[  748.172720][T15152]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  748.172762][T15152]  ? relay_open_buf.part.0+0x91/0xb70
[  748.172794][T15152]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  748.172822][T15152]  ? __lock_acquire+0x49f/0x1a40
[  748.172874][T15152]  ? find_held_lock+0x2b/0x80
[  748.172901][T15152]  ? rcu_read_unlock+0x17/0x60
[  748.172937][T15152]  ? rcu_read_unlock+0x17/0x60
[  748.172976][T15152]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  748.173012][T15152]  ? policy_nodemask+0xed/0x4f0
[  748.173048][T15152]  alloc_pages_mpol+0x1fb/0x540
[  748.173083][T15152]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  748.173125][T15152]  alloc_pages_noprof+0x1a/0x160
[  748.173164][T15152]  relay_open_buf.part.0+0x261/0xb70
[  748.173204][T15152]  relay_open+0x7b9/0xa00
[  748.173237][T15152]  blk_trace_setup_prepare+0x35c/0x6c0
[  748.173270][T15152]  blk_trace_setup+0x217/0x440
[  748.173302][T15152]  ? __pfx_blk_trace_setup+0x10/0x10
[  748.173330][T15152]  ? lockdep_hardirqs_on+0x16/0x100
[  748.173377][T15152]  ? __pfx_vsnprintf+0x10/0x10
[  748.173432][T15152]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  748.173468][T15152]  ? do_vfs_ioctl+0x226/0x13e0
[  748.173504][T15152]  blk_trace_ioctl+0x245/0x320
[  748.173535][T15152]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  748.173571][T15152]  ? find_held_lock+0x2b/0x80
[  748.173598][T15152]  ? __fget_files+0x215/0x3d0
[  748.173635][T15152]  ? hook_file_ioctl_common+0x140/0x440
[  748.173668][T15152]  blkdev_ioctl+0x17c/0x6f0
[  748.173712][T15152]  ? __pfx_blkdev_ioctl+0x10/0x10
[  748.173755][T15152]  ? __pfx_blkdev_ioctl+0x10/0x10
[  748.173795][T15152]  __x64_sys_ioctl+0x18e/0x210
[  748.173830][T15152]  do_syscall_64+0x115/0x840
[  748.173870][T15152]  ? clear_bhb_loop+0x40/0x90
[  748.173901][T15152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.173928][T15152] RIP: 0033:0x7fd36639de59
[  748.173950][T15152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  748.173975][T15152] RSP: 002b:00007fd36725e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  748.174000][T15152] RAX: ffffffffffffffda RBX: 00007fd366626090 RCX: 00007fd36639de59
[  748.174017][T15152] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007
[  748.174033][T15152] RBP: 00007fd366433e6f R08: 0000000000000000 R09: 0000000000000000
[  748.174049][T15152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  748.174064][T15152] R13: 00007fd366626128 R14: 00007fd366626090 R15: 00007fffc5ddc618
[  748.174097][T15152]  </TASK>
[  752.542451][T15206] FAULT_INJECTION: forcing a failure.
[  752.542451][T15206] name failslab, interval 1, probability 0, space 0, times 0
[  752.638650][T15206] CPU: 0 UID: 0 PID: 15206 Comm: syz.0.1480 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  752.638694][T15206] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  752.638704][T15206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  752.638720][T15206] Call Trace:
[  752.638729][T15206]  <TASK>
[  752.638739][T15206]  dump_stack_lvl+0x100/0x190
[  752.638772][T15206]  should_fail_ex.cold+0x5/0xa
[  752.638808][T15206]  should_failslab+0xc2/0x120
[  752.638841][T15206]  kmem_cache_alloc_noprof+0x91/0x6a0
[  752.638869][T15206]  ? __proc_create+0xc1/0x8f0
[  752.638910][T15206]  ? __proc_create+0xc1/0x8f0
[  752.638949][T15206]  ? __proc_create+0x247/0x8f0
[  752.638994][T15206]  __proc_create+0x247/0x8f0
[  752.639036][T15206]  ? __pfx___proc_create+0x10/0x10
[  752.639075][T15206]  ? lockdep_hardirqs_on+0x78/0x100
[  752.639115][T15206]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  752.639161][T15206]  proc_create_reg+0x75/0x170
[  752.639188][T15206]  proc_create_net_data+0x8e/0x1c0
[  752.639231][T15206]  ? __pfx_proc_create_net_data+0x10/0x10
[  752.639273][T15206]  ? lockdep_init_map_type+0x5c/0x250
[  752.639315][T15206]  ? timer_init_key+0x150/0x310
[  752.639355][T15206]  ip_vs_conn_net_init+0x326/0x4e0
[  752.639472][T15206]  __ip_vs_init+0x27d/0x520
[  752.639505][T15206]  ? __pfx___ip_vs_init+0x10/0x10
[  752.639536][T15206]  ops_init+0x1e2/0x5f0
[  752.639570][T15206]  setup_net+0x118/0x3a0
[  752.639601][T15206]  ? __pfx_setup_net+0x10/0x10
[  752.639631][T15206]  ? mutex_init_lockdep+0xf1/0x120
[  752.639679][T15206]  copy_net_ns+0x46f/0x7c0
[  752.639715][T15206]  create_new_namespaces+0x3ea/0xac0
[  752.639765][T15206]  unshare_nsproxy_namespaces+0xf2/0x220
[  752.639817][T15206]  ksys_unshare+0x438/0xab0
[  752.639850][T15206]  ? __pfx_ksys_unshare+0x10/0x10
[  752.639891][T15206]  __x64_sys_unshare+0x31/0x40
[  752.639921][T15206]  do_syscall_64+0x115/0x840
[  752.639961][T15206]  ? clear_bhb_loop+0x40/0x90
[  752.639993][T15206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.640019][T15206] RIP: 0033:0x7f996ef9de59
[  752.640041][T15206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  752.640067][T15206] RSP: 002b:00007f996fe0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  752.640091][T15206] RAX: ffffffffffffffda RBX: 00007f996f225fa0 RCX: 00007f996ef9de59
[  752.640108][T15206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  752.640124][T15206] RBP: 00007f996f033e6f R08: 0000000000000000 R09: 0000000000000000
[  752.640140][T15206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  752.640155][T15206] R13: 00007f996f226038 R14: 00007f996f225fa0 R15: 00007ffcebbf4008
[  752.640188][T15206]  </TASK>
[  753.264798][ T8738] Bluetooth: hci0: command 0x0406 tx timeout
[  754.262899][T15221] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  757.229629][   T30] audit: type=1326 audit(2147483795.679:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.5.1492" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6ef79de59 code=0x0
[  757.583739][T15287] ceph: Failed to parse sending metrics switch value 'P^'
[  757.662965][T15287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1493'.
[  757.796421][T15290] netlink: Unknown nat attribute (0)
[  758.695853][T15301] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma?
[  762.410648][T15350] netlink: 808 bytes leftover after parsing attributes in process `syz.5.1507'.
[  762.410690][T15350] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  763.328504][T15372] random: crng reseeded on system resumption
[  765.530028][   T31] INFO: task syz.1.1253:13387 blocked for more than 143 seconds.
[  765.538607][   T31]       Tainted: G     U       L      syzkaller #0
[  765.554889][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  765.598480][   T31] task:syz.1.1253      state:D stack:27144 pid:13387 tgid:13384 ppid:12640  task_flags:0x400140 flags:0x00080002
[  765.642653][   T31] Call Trace:
[  765.654354][   T31]  <TASK>
[  765.664922][   T31]  __schedule+0x125c/0x6730
[  765.682385][   T31]  ? do_raw_spin_lock+0x128/0x260
[  765.700736][   T31]  ? __pfx___schedule+0x10/0x10
[  765.722260][   T31]  ? find_held_lock+0x2b/0x80
[  765.738638][   T31]  ? schedule+0x225/0x2c0
[  765.753872][   T31]  schedule+0xdd/0x2c0
[  765.772452][   T31]  schedule_preempt_disabled+0x13/0x30
[  765.793896][   T31]  __mutex_lock+0xccc/0x1bd0
[  765.810578][   T31]  ? fdget_pos+0x2aa/0x380
[  765.830824][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  765.855881][   T31]  ? __fget_files+0x215/0x3d0
[  765.872618][   T31]  ? __fget_files+0x21f/0x3d0
[  765.891018][   T31]  ? fdget_pos+0x2aa/0x380
[  765.910140][   T31]  fdget_pos+0x2aa/0x380
[  765.930944][   T31]  ksys_read+0x71/0x250
[  765.946697][   T31]  ? __pfx_ksys_read+0x10/0x10
[  765.963422][   T31]  do_syscall_64+0x115/0x840
[  765.981821][   T31]  ? clear_bhb_loop+0x40/0x90
[  766.000248][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.026052][   T31] RIP: 0033:0x7fb66f99de59
[  766.045667][   T31] RSP: 002b:00007fb670890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  766.073406][   T31] RAX: ffffffffffffffda RBX: 00007fb66fc26090 RCX: 00007fb66f99de59
[  766.101491][   T31] RDX: 0000000000008080 RSI: 0000000000000000 RDI: 0000000000000003
[  766.134404][   T31] RBP: 00007fb66fa33e6f R08: 0000000000000000 R09: 0000000000000000
[  766.163569][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  766.205509][   T31] R13: 00007fb66fc26128 R14: 00007fb66fc26090 R15: 00007ffd5bab7658
[  766.251982][   T31]  </TASK>
[  766.276194][   T31] INFO: task syz.1.1253:13402 blocked for more than 144 seconds.
[  766.331585][   T31]       Tainted: G     U       L      syzkaller #0
[  766.368847][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  766.410625][   T31] task:syz.1.1253      state:D stack:28856 pid:13402 tgid:13384 ppid:12640  task_flags:0x400040 flags:0x00080002
[  766.475431][   T31] Call Trace:
[  766.491436][   T31]  <TASK>
[  766.505893][   T31]  __schedule+0x125c/0x6730
[  766.528187][   T31]  ? do_raw_spin_lock+0x128/0x260
[  766.562216][   T31]  ? __pfx___schedule+0x10/0x10
[  766.580300][   T31]  ? find_held_lock+0x2b/0x80
[  766.596663][   T31]  ? schedule+0x225/0x2c0
[  766.610740][   T31]  schedule+0xdd/0x2c0
[  766.624349][   T31]  schedule_preempt_disabled+0x13/0x30
[  766.644962][   T31]  __mutex_lock+0xccc/0x1bd0
[  766.670923][   T31]  ? fdget_pos+0x2aa/0x380
[  766.677852][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  766.695987][   T31]  ? __fget_files+0x215/0x3d0
[  766.710709][   T31]  ? __fget_files+0x21f/0x3d0
[  766.725229][   T31]  ? fdget_pos+0x2aa/0x380
[  766.743423][   T31]  fdget_pos+0x2aa/0x380
[  766.757806][   T31]  do_writev+0x77/0x340
[  766.772609][   T31]  ? __pfx_do_writev+0x10/0x10
[  766.787881][   T31]  do_syscall_64+0x115/0x840
[  766.807090][   T31]  ? clear_bhb_loop+0x40/0x90
[  766.825336][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.846170][   T31] RIP: 0033:0x7fb66f99de59
[  766.862266][   T31] RSP: 002b:00007fb67086f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  766.895913][   T31] RAX: ffffffffffffffda RBX: 00007fb66fc26180 RCX: 00007fb66f99de59
[  766.924292][   T31] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[  766.954987][   T31] RBP: 00007fb66fa33e6f R08: 0000000000000000 R09: 0000000000000000
[  766.987804][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  767.018095][   T31] R13: 00007fb66fc26218 R14: 00007fb66fc26180 R15: 00007ffd5bab7658
[  767.046738][   T31]  </TASK>
[  767.068781][   T31] 
[  767.068781][   T31] Showing all locks held in the system:
[  767.119160][   T31] 2 locks held by kworker/0:1/11:
[  767.152842][   T31] 1 lock held by khungtaskd/31:
[  767.175542][   T31]  #0: ffffffff8ebe5f00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  767.207680][   T31] 2 locks held by getty/5382:
[  767.221130][   T31]  #0: ffff8880295210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  767.242537][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  767.269029][   T31] 2 locks held by syz.1.1253/13385:
[  767.281285][   T31] 1 lock held by syz.1.1253/13387:
[  767.291929][   T31]  #0: ffff88806738e9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  767.313500][   T31] 1 lock held by syz.1.1253/13402:
[  767.325790][   T31]  #0: ffff88806738e9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  767.347952][   T31] 3 locks held by syz.5.1509/15368:
[  767.358877][   T31]  #0: ffffffff90a85268 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  767.379400][   T31]  #1: ffffffff90a9de80 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0
[  767.398390][   T31]  #2: ffffffff8ebf19a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[  767.420967][   T31] 2 locks held by syz.3.1512/15377:
[  767.432677][   T31]  #0: ffffffff90a85268 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  767.458861][   T31]  #1: ffffffff90a9de80 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x120
[  767.479877][   T31] 2 locks held by syz.3.1512/15382:
[  767.490630][   T31]  #0: ffffffff90a85268 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  767.510876][   T31]  #1: ffffffff90a9de80 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0
[  767.532383][   T31] 2 locks held by syz.4.1513/15393:
[  767.544550][   T31]  #0: ffffffff90a85268 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  767.569587][   T31]  #1: ffffffff90a9de80 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780
[  767.606186][   T31] 
[  767.614443][   T31] =============================================
[  767.614443][   T31] 
[  767.645291][   T31] NMI backtrace for cpu 0
[  767.645313][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  767.645349][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  767.645359][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  767.645373][   T31] Call Trace:
[  767.645382][   T31]  <TASK>
[  767.645391][   T31]  dump_stack_lvl+0x100/0x190
[  767.645422][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  767.645452][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  767.645481][   T31]  nmi_trigger_cpumask_backtrace+0x21c/0x2a0
[  767.645518][   T31]  sys_info+0x141/0x190
[  767.645543][   T31]  watchdog+0xcb1/0x1030
[  767.645582][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  767.645617][   T31]  ? __pfx_watchdog+0x10/0x10
[  767.645650][   T31]  ? __kthread_parkme+0x18c/0x230
[  767.645678][   T31]  ? kthread+0x13a/0x450
[  767.645705][   T31]  ? __pfx_watchdog+0x10/0x10
[  767.645735][   T31]  kthread+0x370/0x450
[  767.645763][   T31]  ? __pfx_kthread+0x10/0x10
[  767.645793][   T31]  ret_from_fork+0x72b/0xd50
[  767.645820][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  767.645848][   T31]  ? __switch_to+0x800/0x10f0
[  767.645882][   T31]  ? __switch_to_asm+0x39/0x70
[  767.645913][   T31]  ? __pfx_kthread+0x10/0x10
[  767.645944][   T31]  ret_from_fork_asm+0x1a/0x30
[  767.645989][   T31]  </TASK>
[  768.212773][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  768.219684][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  768.230407][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  768.235613][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  768.245683][   T31] Call Trace:
[  768.248994][   T31]  <TASK>
[  768.251938][   T31]  dump_stack_lvl+0x100/0x190
[  768.256641][   T31]  vpanic+0x552/0x970
[  768.260641][   T31]  ? __pfx_vpanic+0x10/0x10
[  768.265160][   T31]  ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0
[  768.271342][   T31]  panic+0xd1/0xe0
[  768.275082][   T31]  ? __pfx_panic+0x10/0x10
[  768.279540][   T31]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0
[  768.285720][   T31]  ? nmi_trigger_cpumask_backtrace+0x260/0x2a0
[  768.291916][   T31]  ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0
[  768.298104][   T31]  ? watchdog.cold+0x1ec/0x234
[  768.302887][   T31]  ? watchdog+0xcc1/0x1030
[  768.307328][   T31]  watchdog.cold+0x1fd/0x234
[  768.311956][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  768.317787][   T31]  ? __pfx_watchdog+0x10/0x10
[  768.322487][   T31]  ? __kthread_parkme+0x18c/0x230
[  768.327535][   T31]  ? kthread+0x13a/0x450
[  768.331820][   T31]  ? __pfx_watchdog+0x10/0x10
[  768.336518][   T31]  kthread+0x370/0x450
[  768.340609][   T31]  ? __pfx_kthread+0x10/0x10
[  768.345241][   T31]  ret_from_fork+0x72b/0xd50
[  768.349850][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  768.355009][   T31]  ? __switch_to+0x800/0x10f0
[  768.359730][   T31]  ? __switch_to_asm+0x39/0x70
[  768.364527][   T31]  ? __pfx_kthread+0x10/0x10
[  768.369158][   T31]  ret_from_fork_asm+0x1a/0x30
[  768.373967][   T31]  </TASK>
[  768.377076][   T31] Kernel Offset: disabled
[  768.381428][   T31] Rebooting in 86400 seconds..