last executing test programs:

2m17.484257509s ago: executing program 32 (id=467):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800)
timer_create$auto(0x9, 0x0, 0x0)
read$auto(0x3, 0x0, 0x8080) (async)
read$auto(0x3, 0x0, 0x8080)
socket(0xa, 0x1, 0x100) (async)
socket(0xa, 0x1, 0x100)
write$auto(0x3, 0x0, 0xffd8) (async)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, <r1=>0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e066bb0a054c9e474be535fd29da", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"})
fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r1)
process_mrelease$auto(0xffffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0x52, 0x13, 0x2, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000380)="53f6910d69366286fecaf9caa4f815f5be29e6e27ec402d862b80976847964a73c3ec45b22c8d1a5e5bd5114a3dee110ca987e33eb5676f6e978114f80a2a54247f7724ff0c75482ab8fab73d6b0a995b90e9ec31da9ae98a8c8c30b53d61bba73054c125cdec75e759033edd1367b534d4c33fad717cc5fe64c6060edb4a8dda7e3d96843df1e541e1a3b71f1895a5ecf74197a8a9bb1643004df48a701452e51674c5238fe4b691d", 0x7, 0x0, 0x8, 0x0, 0x1f, 0xc0000000}, 0x80000a}, 0x80000005, 0x20000001) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000380)="53f6910d69366286fecaf9caa4f815f5be29e6e27ec402d862b80976847964a73c3ec45b22c8d1a5e5bd5114a3dee110ca987e33eb5676f6e978114f80a2a54247f7724ff0c75482ab8fab73d6b0a995b90e9ec31da9ae98a8c8c30b53d61bba73054c125cdec75e759033edd1367b534d4c33fad717cc5fe64c6060edb4a8dda7e3d96843df1e541e1a3b71f1895a5ecf74197a8a9bb1643004df48a701452e51674c5238fe4b691d", 0x7, 0x0, 0x8, 0x0, 0x1f, 0xc0000000}, 0x80000a}, 0x80000005, 0x20000001)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x100000, 0x0)
read$auto(0x3, 0x0, 0x0)
write$auto(0x3, 0x0, 0xfdf3)
read$auto(0xffffffffffffffff, 0x0, 0x2)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0xd365, &(0x7f0000000000)={0x0, 0x10002, 0x7d, 0x5, 0x6, 0x5, r2, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x0, 0x7, 0x5, 0x80000000}, {0x6, 0xd, 0x6e68, 0x8, 0x833, 0x9, 0x0, 0xfffffffa, 0xb1}})
prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x4, 0xa5, 0x3, 0x9) (async)
prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x4, 0xa5, 0x3, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x2000c, 0xe2, 0xeb1, 0x405, 0x8000) (async)
mmap$auto(0x0, 0x2000c, 0xe2, 0xeb1, 0x405, 0x8000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x20)
socket(0xa, 0x801, 0x84)

2m17.424604671s ago: executing program 1 (id=540):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
socket(0x2, 0x1, 0x106) (async)
migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) (async)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) (async)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async)
write$auto(0x3, 0x0, 0x100082) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x60002, 0x0)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) (async)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async)
io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1) (async)
select$auto(0x10000011, 0x0, 0x0, &(0x7f00000000c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) (async)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x2)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0xa, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x1000006d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff)
sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r2, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r4, 0x311, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
mmap$auto(0xfffffffffffffffd, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
close_range$auto(0x2, 0x8, 0x0) (async)
r5 = getpid()
process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

2m17.271422864s ago: executing program 1 (id=541):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x2, 0x0)
socket(0x2, 0x1, 0x0)
sysfs$auto(0x2, 0x7, 0x2)
r0 = epoll_create$auto(0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r1, 0x0)
epoll_wait$auto(r0, 0x0, 0xe007, 0xe8a4e409)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0xc)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
mprotect$auto(0x200000000000, 0x806121, 0x6)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x0, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4000000)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef)

2m16.285000759s ago: executing program 1 (id=546):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b)
mmap$auto(0x1ff, 0xe983, 0xdf, 0xffff, 0x401, 0x1)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080))
setgroups$auto(0x8, &(0x7f00000004c0)=0x4)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000005c0)="4e927e8db04902dbd88fa5af99b934c0ba5636498fe144a7e5cd6b0a6663563ce318c4e05e6403592487572cf06a97849361dc3bf536deb0de4f9b200007b709eb458a958f04c1f78972d05ba65d55282edc8dc56f8bef560b5ca0f393612316319da4cb4af9e157579b6ae300f48cc1756a60949377c1f9d3850210bd0d22c2062e04a651123cf5956f4f82eb18846f4fe2b6ee047bc20796d53a230d0e7d0b", 0x7, 0x1}, 0x4}, 0xa, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80040}, 0x44000)
write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91)
syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff)
r5 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r5, &(0x7f0000000340)=""/179, 0xb3)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0)
read$auto(r6, 0x0, 0x7)
acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90')
r7 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x7, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x1000000006, 0x4, 0xb2, 0x7, 0x7, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2, 0x200, 0x0, 0x81, 0x100, 0x7, 0xb5, 0x0, 0x0, [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9]}, 0x202, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c001300fcdbbc2353f74fa9256563b979e41af25e403ec2c853d4662dc2477fb8ce947bdc0f5c0513ff03a03e2f969bf97ff8acf360d119aec1eb971d4cc78fc8e0d10db928bac2c986c79fec", @ANYRESHEX=r7], 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000)

2m15.450775977s ago: executing program 1 (id=551):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
fchmod$auto(r1, 0xb)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r3, 0x0, 0x20)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x3}, 0x3)
bind$auto(0x3, 0x0, 0x9)
close_range$auto(0x2, 0xa, 0x0)

2m15.106979626s ago: executing program 1 (id=552):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r2 = socket(0x2, 0x2, 0x0)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsconfig$auto_FSCONFIG_SET_PATH(r3, 0x3, 0x0, 0x0, 0x0)
select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x700, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401})
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r1)
sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)={0x898, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_TAIL={0x83c, 0xf, "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"}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x4}, @NL80211_ATTR_MAC_HINT={0x3d, 0xc8, "0d0f3a4d63a5848ceeeed03493c8965e4d93b0ff7550247984b59e5bf3dda1fed4eb4b01ebe88baf535d05510062c04825673edeb7fc81655b"}]}, 0x898}, 0x1, 0x0, 0x0, 0x1}, 0x11)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
socket(0x10, 0x2, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
preadv$auto(r0, &(0x7f0000000200)={&(0x7f00000000c0)="20cb792e130682ab3269e21ea0c08258a53f03a437692fa6c2bf7751ffef7eed767996f4ee3fd398d8478326c8", 0x4}, 0x0, 0x0, 0x1)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)

2m13.865059321s ago: executing program 1 (id=560):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x101041, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745500, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0xcc9749e2a29edf4, 0x0)
r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x52000, 0x0)
r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x7, 0x5, 0x6, 0x7, 0x400b, <r3=>r1, [], {0x6, 0x6, 0x7, 0x29a, 0x8, 0x80, 0x104, 0x6, 0x4}, {0x100, 0xfffffffd, 0x40101, 0x85, 0x2, 0x24, 0x8000, 0x8, 0x3}})
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) (async, rerun: 64)
read$auto_vhci_fops_hci_vhci(r3, 0x0, 0x0) (async, rerun: 64)
select$auto(0x2, 0x0, 0x0, &(0x7f0000000580)={[0x201, 0xfffffffffffffffc, 0x1e, 0x1, 0xc, 0xcfdf, 0x10015f4da0a, 0x10, 0x55daad95, 0x7926, 0x8000001f, 0x2, 0x63c5badf, 0x1, 0xc, 0x1]}, 0x0) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0) (async)
ioctl$auto(0x3, 0x8905, 0x38) (async)
r4 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv$auto(r4, &(0x7f0000000200)={&(0x7f0000000080), 0x9}, 0x2) (async)
mmap$auto(0x0, 0x40000b, 0x2, 0x9b72, 0x2, 0x800008002) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/tty33/power/autosuspend_delay_ms\x00', 0x63102, 0x0)
sendfile$auto(r6, r6, 0x0, 0x2) (async)
ioctl$auto_SNAPSHOT_FREE(r5, 0x3314, 0x0)
syz_genetlink_get_family_id$auto_seg6(&(0x7f00000001c0), r2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) (async, rerun: 32)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty19\x00', 0x800, 0x0) (async, rerun: 32)
ioctl$auto(r2, 0x7, r2) (async)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

2m1.753106844s ago: executing program 2 (id=625):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x2, 0x0)
socket(0x2, 0x1, 0x0)
sysfs$auto(0x2, 0x7, 0x2)
r0 = epoll_create$auto(0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r1, 0x0)
epoll_wait$auto(r0, 0x0, 0xe007, 0xe8a4e409)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0xc)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
mprotect$auto(0x200000000000, 0x806121, 0x6)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x0, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4000000)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef)

2m0.974823333s ago: executing program 2 (id=627):
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001d40)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/netfs/cookies\x00', 0x40080, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/o2cb/logmask/ERROR\x00', 0x102d82, 0x0)
r1 = fanotify_init$auto(0x5, 0x2000000000002)
r2 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409)
fanotify_mark$auto(r1, 0x6, 0x9, r2, 0x0)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/seccomp/actions_logged\x00', 0x8202, 0x0)
sendfile$auto(r3, r0, 0x0, 0x48)

2m0.811503957s ago: executing program 2 (id=628):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x731100, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x12900, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x20)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x2)
mmap$auto(0x4, 0x2020008, 0x3, 0x2000000eb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x3, 0x0, 0x8001, 0x400000000005)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="010026bd7000fbdbdf2501000000040007807105841978a1214d9b6d080001000000ec000c00020000000000000000008fc24ce51b6356b111b4f317212222c7cc7bd918ec7cc838ef95c6348666aa2c94ba6ac6c840cdd5b30b0180eaddb9a5465f40bd9de01c2285024fdbf6f73379059506f9d3498af9b15c1df0c5a12fe6aef887612b9744afdc7eb56898320e8efc0197d9b86a010f0000b441b5c1206e248d15c9999e03466d832a78e781e9bee3b8cbd5"], 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000050)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r3 = io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb3, 0xfffffffffffffffa, 0x8000)
r4 = socketpair$auto(0x7c, 0x6, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000001c0), 0x410703, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0)
ioctl$auto(r5, 0xc0303e03, r3)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r4)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/10, @ANYRESHEX=r4, @ANYBLOB="010027bd7000fedbdf250100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4104}, 0x20044050)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x12)
madvise$auto(0x6, 0x7, 0x10000019)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x80, 0x0)

2m0.27152913s ago: executing program 2 (id=629):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
mmap$auto(0x2000000, 0x2020007, 0x7, 0xeb1, r0, 0x40)
r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d)
rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00')
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x4)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1)
sendmsg$auto_NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x24000080)

1m59.719081865s ago: executing program 2 (id=632):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x1f40)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

1m58.584853088s ago: executing program 33 (id=560):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x101041, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745500, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0xcc9749e2a29edf4, 0x0)
r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x52000, 0x0)
r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x7, 0x5, 0x6, 0x7, 0x400b, <r3=>r1, [], {0x6, 0x6, 0x7, 0x29a, 0x8, 0x80, 0x104, 0x6, 0x4}, {0x100, 0xfffffffd, 0x40101, 0x85, 0x2, 0x24, 0x8000, 0x8, 0x3}})
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) (async, rerun: 64)
read$auto_vhci_fops_hci_vhci(r3, 0x0, 0x0) (async, rerun: 64)
select$auto(0x2, 0x0, 0x0, &(0x7f0000000580)={[0x201, 0xfffffffffffffffc, 0x1e, 0x1, 0xc, 0xcfdf, 0x10015f4da0a, 0x10, 0x55daad95, 0x7926, 0x8000001f, 0x2, 0x63c5badf, 0x1, 0xc, 0x1]}, 0x0) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0) (async)
ioctl$auto(0x3, 0x8905, 0x38) (async)
r4 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv$auto(r4, &(0x7f0000000200)={&(0x7f0000000080), 0x9}, 0x2) (async)
mmap$auto(0x0, 0x40000b, 0x2, 0x9b72, 0x2, 0x800008002) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/tty33/power/autosuspend_delay_ms\x00', 0x63102, 0x0)
sendfile$auto(r6, r6, 0x0, 0x2) (async)
ioctl$auto_SNAPSHOT_FREE(r5, 0x3314, 0x0)
syz_genetlink_get_family_id$auto_seg6(&(0x7f00000001c0), r2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) (async, rerun: 32)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty19\x00', 0x800, 0x0) (async, rerun: 32)
ioctl$auto(r2, 0x7, r2) (async)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

1m58.577310112s ago: executing program 2 (id=636):
unshare$auto(0x40000080) (async, rerun: 32)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x81, 0x0) (async, rerun: 32)
r0 = clone3$auto(0x0, 0x3ff)
prctl$auto(0x3e, 0x1, r0, 0x1, 0x0) (async)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x14\'\x02~\xe0\x10\xb9\xa8\x9b\xa7D=\x9c\xe4\x03L\xc6{]\xe2\x1c\'7\xde\n\x9aL\x12\'\xb6-d\x1c\xd7\xb5\xb2)\xee \x9a\xe9\xcbf\xe9\xd8K\xbb\x14\x06\xcd\xa1\xbd\x94\xc2\x03\x00&j\x86N\xc0d\x0f\x84\xe6@\"G\xa2l\xfd\xfc\xc2\x8c_#\x1f+\x89{*o*\x17!\x02-\x1b\xe3\x80\xf1\xefw\xda\xe8\xb1\x0f\xae\xae\"E\xf5\xd54\x87\xdd\xad\xe7\x8b\xee\x9c\x01\xa7\xf9\x90\xe9Q\xe8O\xfe>\x1f\a0\xc72\xf2\xde\xff\xebb\xdc\xd6\xf4E\xac\xf35x$\b\xbb\xe0\xb4$c\x93\xdc)\"\xc4\n@\x93|\x9f\t\x9a9\x15@\xad\xc5\x1f\x96\xe5\x00\xb5:<\xffo\xb0\xb3\x01\xc3\x93\x11\xce\x99\xfbn\x17\xad\x85\x87\xef\xbd\x1b\xfe8\xb1\xb1\xad\xaa\x1c\"', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) (rerun: 32)
ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000)) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) (async)
keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x5) (async)
madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64)
unshare$auto(0x40000080) (async, rerun: 64)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async, rerun: 32)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (rerun: 32)
close_range$auto(0x0, 0x5, 0x0) (async)
pipe$auto(0x0)
pipe$auto(0x0) (async)
tee$auto(0x2000000000000, 0x3, 0x402, 0xd) (async)
write$auto(0x1, 0x0, 0x100)
ioctl$auto(r2, 0x4b72, 0xffffffffffffffff) (async)
madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32)
madvise$auto(0x0, 0x200007, 0x19) (rerun: 32)
rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)

1m43.929973295s ago: executing program 5 (id=717):
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x343040, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)=ANY=[@ANYRES8=r2, @ANYRES32=r1, @ANYRESOCT=r0, @ANYBLOB="a7537a07202062eab3dafc2a13c5fbc8", @ANYRESDEC=r2], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4048011)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/v4l-touch3\x00', 0x101500, 0x0)
ioctl$auto_VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000280)={0x800, r3})
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x119003, 0x0)
read$auto_vhci_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0)
select$auto(0x3, 0x0, 0x0, &(0x7f0000000580)={[0x200, 0x8000, 0xd, 0x5, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x2379, 0x5, 0x8000001f, 0x0, 0x6d3d, 0x0, 0xffffffffffffffff, 0x400000002]}, 0x0)
r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/softirqs\x00', 0x0, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r5, &(0x7f0000000040)=""/26, 0x1a)
write$auto(r0, &(0x7f0000000600)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\x94\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x85\xe2\x9c-\fE\a\xca\xad\xf0\x90\xcaYv\x7f\xe9A\xb6%a]\x9d-\x15\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x7f\xcf\xc5D\xcc[\x9e@T*\xeeM\xad\x18\x9be\x9ek\xa1+\xfa\x11\xde\xf0q\x94\v\xc30\xb6iL\x1f\x0e\xf3\xcc\xdb\aQ\xf2\xe8=\xf7\xdaw\xea\x87\xaa\x85~w\xab:\xf5\xb8\"\x9aHh\xe0\xca\xe4\x97s/_\xcb=\x1f\n\x82#\xf5\xd4.\xe4I\xca\x7f;\x95\x06\xb5\x9b\xe3\xe6\xfa,\xafR\x00\x99\x00\xb2:\xa3l\xb7\xc8V\xe2\x80S\xa6`\xa4\xb5\x0f\xf0\xf5#>\xa2\f\x8c\xe2\x89USS\xf0\xc4T\x8cQ\x8e.\xbd\x99\x8a.qE\xc5$\x98\x94O\x90\xa7\xd4E\xd2YD\tr[)\xf0c\x99\x11V\xb3\xff\x9etnbl\x01Z\x98r\xb9\xf7\xf7\xee)38V\xf6\x19\xf2\x11\xaa\xd9\b\xdb\xe1\x02\xce\xdb~\xf9\xa2\xad\xc4O\x9a\xf0dp\xeb\xa0\x0eT\xcd\x191\xa8E\xd8\x9cX\xc7\x86\xe8\xacA\x1b77n$\xee\x92\x9f\xea\xb0~\xb3c\xae\xdb\xf6ov:\x1f\xf9\xf3\xf1\xa4\xd7\xc7\xe0\x9b\x1e\b', 0x8)
arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x5)
ioctl$auto(0x3, 0x8905, 0x38)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7040c79dea190a0000000c0002006e6c383032313100"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040810)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), r6)
r7 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv$auto(r7, 0x0, 0xc)
connect$auto(0x3, 0x0, 0x55)
r8 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
sendfile$auto(r9, r9, 0x0, 0x2)
ioctl$auto_SNAPSHOT_FREE(r8, 0x3314, 0x0)

1m43.005654239s ago: executing program 5 (id=720):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc040880}, 0x40000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x7)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, 0x0, 0x3)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/stack\x00', 0x800, 0x0)

1m42.989250709s ago: executing program 34 (id=636):
unshare$auto(0x40000080) (async, rerun: 32)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x81, 0x0) (async, rerun: 32)
r0 = clone3$auto(0x0, 0x3ff)
prctl$auto(0x3e, 0x1, r0, 0x1, 0x0) (async)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x14\'\x02~\xe0\x10\xb9\xa8\x9b\xa7D=\x9c\xe4\x03L\xc6{]\xe2\x1c\'7\xde\n\x9aL\x12\'\xb6-d\x1c\xd7\xb5\xb2)\xee \x9a\xe9\xcbf\xe9\xd8K\xbb\x14\x06\xcd\xa1\xbd\x94\xc2\x03\x00&j\x86N\xc0d\x0f\x84\xe6@\"G\xa2l\xfd\xfc\xc2\x8c_#\x1f+\x89{*o*\x17!\x02-\x1b\xe3\x80\xf1\xefw\xda\xe8\xb1\x0f\xae\xae\"E\xf5\xd54\x87\xdd\xad\xe7\x8b\xee\x9c\x01\xa7\xf9\x90\xe9Q\xe8O\xfe>\x1f\a0\xc72\xf2\xde\xff\xebb\xdc\xd6\xf4E\xac\xf35x$\b\xbb\xe0\xb4$c\x93\xdc)\"\xc4\n@\x93|\x9f\t\x9a9\x15@\xad\xc5\x1f\x96\xe5\x00\xb5:<\xffo\xb0\xb3\x01\xc3\x93\x11\xce\x99\xfbn\x17\xad\x85\x87\xef\xbd\x1b\xfe8\xb1\xb1\xad\xaa\x1c\"', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) (rerun: 32)
ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000)) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) (async)
keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x5) (async)
madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64)
unshare$auto(0x40000080) (async, rerun: 64)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async, rerun: 32)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (rerun: 32)
close_range$auto(0x0, 0x5, 0x0) (async)
pipe$auto(0x0)
pipe$auto(0x0) (async)
tee$auto(0x2000000000000, 0x3, 0x402, 0xd) (async)
write$auto(0x1, 0x0, 0x100)
ioctl$auto(r2, 0x4b72, 0xffffffffffffffff) (async)
madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32)
madvise$auto(0x0, 0x200007, 0x19) (rerun: 32)
rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)

1m42.476936498s ago: executing program 5 (id=724):
r0 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0)
write$auto_proc_fault_inject_operations_base(r0, 0x0, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x20000, 0x4020009, 0x100000000df, 0x50, 0x401, 0x8000)
socketpair$auto(0x9, 0x5adb, 0x5, &(0x7f0000000180)=0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sysfs$auto(0x2, 0x43, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x0, 0x1000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
acct$auto(&(0x7f0000000100)='/dev/v4l-subdev5\x00')
r1 = clone3$auto(&(0x7f0000000100)={0x2, 0x6, 0xa549, 0x8, 0xff, 0x6, 0x7, 0x7f, 0x8, 0x4000000000004, 0x80000000000002}, 0x4)
syz_clone3(&(0x7f0000000040)={0x8020000, 0x0, 0x0, 0x0, {0x4000029}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r1, 0x0, 0x0], 0x3}, 0x58)

1m42.185264524s ago: executing program 5 (id=726):
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4)
madvise$auto(0x400, 0x8, 0xffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_hcd.6/usb7/devnum\x00', 0x0, 0x0)
ioctl$auto(0x3, 0x80108907, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
migrate_pages$auto(0x0, 0x99, 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$auto_SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f00000012c0))
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x23, 0x0)
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, 0x0, 0x4)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200102, 0x0)
socket(0x10, 0x2, 0x4)
socket(0xa, 0x1, 0x84)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80240, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x5, 0x9487, 0x445f, 0x15f4da0a, 0x1, 0x81, 0xf8bd, 0x100, 0x4, 0x392, 0xfffffffffffffffd, 0x2, 0x2]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
connect$auto(r0, &(0x7f0000000080)=@ethernet={0x306, @remote}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0xa, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), r2)
sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000dab04e88f2e318f36074062fb8abbb1a96bf193fb9ff3a251102b91dd571e5b1a6ff431cb8b032bdf41a662468b15640a7d81d19f55e430416c0eacbb99b7a9ffcdcd84a", @ANYRES16=r3, @ANYBLOB="a9e127bd7000fbdbdf2501000000050006000600000005000500030000000800030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810)
sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x190, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_SECRET={0xe4, 0x4, "8fc77765552959e16d50bdf3876329ba0915e3c31e884cfb0197a1b7db02869a8be572969574a1c05b047343b271e9aee4c08260c25eb9469dc83aa0952c3b4711ff3bf41163dd4fd6975e664b2f5075c7b1cae8a6ad2698a8354c7f7f7de1b206992a505c7f5e339b7bb873f6c17ac837a16255e3ab86e177cd249ab5cd19338d5636a35688eaff98217c58304e7a92f92ab51b0787038820b032a668bd89843f36cb1a1d658f2ec205697fd5aba696163dbdd9db9dd41e0453e8789288520a2f99348b12c1631b62115227af3777ceb8a9461139c8d4d63c84b000b0e72542"}, @SEG6_ATTR_HMACINFO={0x90, 0x7, 0x0, 0x1, [@generic="2115403a7f0993f0c564807db5b05dce3976072f6684f8d481a4ba97236664d36a1130804d1384d7b96161b4459d0c07eec2fda24336e8b629c9f71283ac67a72b0ed15dec83608b71cf97dbb96e0755e911190c5ebe83c782120e02580eba9ed769004bd85a21ad5e0579271fa16a47500d63cfacceb01bc2dea1d52a2336f29b01c744934c327aaa5e0a0d"]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

1m41.667856001s ago: executing program 5 (id=727):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000)
r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x0, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0\x00', <r3=>0x0})
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x64, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xd01e}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x6787}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r3}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x5}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x6}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x6}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x10000}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x6}, @NETDEV_A_QUEUE_ID={0x8}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x411)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
close_range$auto(0x0, 0xe903, 0x2)
socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x5, 0x0)
r5 = socket(0xa, 0x5, 0x84)
close_range$auto(0x0, 0x5, 0x0)
io_uring_setup$auto(0x1, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$auto(r5, 0xc040aed4, r6)
close_range$auto(0x2, 0x8, 0x0)
r8 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
accept4$auto(r4, &(0x7f0000000380)=@vsock={0x28, 0x0, 0xffffffff, @host}, &(0x7f00000003c0)=0x3, 0x2)

1m41.08432555s ago: executing program 5 (id=729):
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(&(0x7f0000000040)='.\x00', 0x100, 0x161)
socket(0xa, 0x3, 0x3a)
getdents64$auto(0x0, 0x0, 0x18) (async)
getdents64$auto(0x0, 0x0, 0x18)
ioctl$auto(0x1, 0x8941, 0x8)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r2, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) (async)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r2, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) (async)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)

1m25.779476455s ago: executing program 35 (id=729):
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(&(0x7f0000000040)='.\x00', 0x100, 0x161)
socket(0xa, 0x3, 0x3a)
getdents64$auto(0x0, 0x0, 0x18) (async)
getdents64$auto(0x0, 0x0, 0x18)
ioctl$auto(0x1, 0x8941, 0x8)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r2, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) (async)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r2, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) (async)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)

1m20.578086941s ago: executing program 6 (id=805):
openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x80201, 0x0)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0)
ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x22)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x4a, 0x0)
ioctl$auto(0xffffffffffffffff, 0x4008550d, 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400d0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
r4 = setfsuid$auto(0xee00)
r5 = setfsuid$auto(0xee01)
setresuid$auto(r4, r5, r4)
sendmsg$auto_TIPC_NL_BEARER_ADD(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x2, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x94)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0xa508}, 0xa788}, 0x7, 0x4)

1m20.444395334s ago: executing program 6 (id=807):
socket(0x25, 0x1, 0x0)
mmap$auto(0x0, 0x2000c, 0xde, 0x20eb1, 0x40000000000a5, 0x8000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000)
mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x3, 0x100)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0c/sub2/status\x00', 0x20080, 0x0)
pipe$auto(&(0x7f0000000000)=<r2=>0xffffffffffffffff)
splice$auto(r2, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x8)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev6\x00', 0x103280, 0x0)
ioctl$auto(r3, 0xc0285628, r0)

1m20.156378431s ago: executing program 6 (id=808):
r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0)
ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0)
ioctl$auto_SNAPSHOT_UNFREEZE(r0, 0x3302, 0x0)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6})
fanotify_init$auto(0x65, 0x2)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r1)
read$auto(r1, &(0x7f0000000040)='nl80211\x00', 0xbe62)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dsp1\x00', 0x480, 0x0)
mmap$auto_snd_pcm_oss_f_reg_pcm_oss(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc65248f80e303c5e}, 0x2004c055)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptye4\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, &(0x7f0000000340)="e440d3dc61af508a41ff7515b65dbc3b0671b7cc7739d4b30ea4dafac7020081bb8b606dfcad21da533ffb2fc20e2f97440b782c249b1792fb5be886f99fbcffa4ea90e8ecd4b053f9a52d00de7949f33f9d30d15536a831320c066c74715536fd4de9526061f5d4f782f76a73a89e298c0b1a7afd4218c62bb432ab24b9d087a4c17060a9a43551dc45e0cd9738231ee9ab8b83dcffe1ef21d471ef7dd658fb35fae9a0b31d92ebac51f2b62991481c381e0d2ef5933afffc34b48d15")
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1m19.989547512s ago: executing program 6 (id=809):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto_PTRACE_GET_SYSCALL_INFO(0x420e, r0, 0x400, 0x1)

1m19.805631068s ago: executing program 6 (id=810):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
r1 = socket(0x2, 0x1, 0x0)
getsockopt$auto_SO_PASSCRED(r1, 0x6, 0x10, &(0x7f0000000000)=',\x00', &(0x7f0000000040)=0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x4085)
r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
ioctl$auto_TUNSETVNETLE2(r2, 0x400454dc, &(0x7f0000000180)=0x1)
sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf0102000000000000000400000008001c"], 0x24}, 0x1, 0x0, 0x0, 0x4044c11}, 0xc0804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1m19.586066147s ago: executing program 6 (id=811):
memfd_secret$auto(0x0)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket(0x1a, 0x1, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0xa, 0x1, 0x0, 0x100001, 0xfffffffffffffffc)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400005, 0xdb, 0x18, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1)
socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
set_mempolicy$auto(0x6, 0x0, 0x21)
unshare$auto(0xb)
bind$auto(0xffffffffffffffff, 0x0, 0x80)
bpf$auto(0x5, 0x0, 0x7)
ioctl$auto_BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0)
prctl$auto(0x37, 0x200003, 0x0, 0x7, 0x6)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mremap$auto(0x110c230000, 0x0, 0x2000101, 0x3, 0xf000)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0xf, 0x7, 0x4, 0xffffffffffffffff, 0xffe, "2af051a940806ec05be276cfc83ce63f", <r3=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3, r0}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
ioctl$auto_BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0)
writev$auto(0xffffffffffffffff, 0x0, 0xa)
unshare$auto(0x40000080)
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

1m4.960778815s ago: executing program 7 (id=877):
r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x4, 0x7ff)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b)
mmap$auto(0x0, 0xe983, 0x9, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080))
setgroups$auto(0x8, &(0x7f0000000000)=0x5)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8)
write$auto_proc_mem_operations_base(r1, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91)
syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff)
r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000340)=""/179, 0xb3)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0)
read$auto(r5, 0x0, 0x7)
acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90')
r6 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c001300fcdbbc2353f74fa9256563b979e41af25e403ec2c853d4662dc2477fb8ce947bdc0f5c0513ff03a03e2f969bf97ff8acf360d119aec1eb971d4cc78fc8e0d10db928bac2c986c79fec", @ANYRESHEX=r6], 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0)

1m4.029437475s ago: executing program 7 (id=880):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x2, 0x0)
socket(0x2, 0x1, 0x0)
sysfs$auto(0x2, 0x7, 0x2)
r0 = epoll_create$auto(0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r1, 0x0)
epoll_wait$auto(r0, 0x0, 0xe007, 0xe8a4e409)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1)
close_range$auto(0x2, 0x8, 0xfdff)
r2 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0xc)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
mprotect$auto(0x200000000000, 0x806121, 0x6)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x0, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4000000)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef)

1m3.985147024s ago: executing program 36 (id=811):
memfd_secret$auto(0x0)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket(0x1a, 0x1, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0xa, 0x1, 0x0, 0x100001, 0xfffffffffffffffc)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400005, 0xdb, 0x18, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1)
socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
set_mempolicy$auto(0x6, 0x0, 0x21)
unshare$auto(0xb)
bind$auto(0xffffffffffffffff, 0x0, 0x80)
bpf$auto(0x5, 0x0, 0x7)
ioctl$auto_BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0)
prctl$auto(0x37, 0x200003, 0x0, 0x7, 0x6)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mremap$auto(0x110c230000, 0x0, 0x2000101, 0x3, 0xf000)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0xf, 0x7, 0x4, 0xffffffffffffffff, 0xffe, "2af051a940806ec05be276cfc83ce63f", <r3=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3, r0}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
ioctl$auto_BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0)
writev$auto(0xffffffffffffffff, 0x0, 0xa)
unshare$auto(0x40000080)
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

1m3.278252406s ago: executing program 7 (id=885):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x2, 0x0)
socket(0x2, 0x1, 0x0)
sysfs$auto(0x2, 0x7, 0x2)
r0 = epoll_create$auto(0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r1, 0x0)
epoll_wait$auto(r0, 0x0, 0xe007, 0xe8a4e409)
fcntl$auto(r0, 0xce, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0xc)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
mprotect$auto(0x200000000000, 0x806121, 0x6)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x0, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4000000)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef)

1m2.305887164s ago: executing program 7 (id=888):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
writev$auto(r0, 0x0, 0x1)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x129800, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x5, 0x0, 0x4, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, &(0x7f0000000080)={0xa8})
execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000180)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00', 0x0)
execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
bind$auto(0xffffffffffffffff, 0x0, 0x7)
ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r2, 0x4004550d, &(0x7f0000000180)=0x795)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffc]}, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0xb, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x40000000001]}, 0x0)

1m1.974700727s ago: executing program 7 (id=892):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
socket(0x11, 0x80003, 0x300)
r1 = open(0x0, 0x22240, 0x154)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000380), 0xffffffffffffffff)
setfsuid$auto(0xffffffffffffffff)
shmctl$auto_IPC_SET(0x5, 0x1, &(0x7f00000004c0)={{0xfe29, 0xffffffffffffffff, 0xee00, 0x3, 0x4, 0x8000, 0xfffb}, 0x26e9, 0x0, 0x100, 0xff, @raw=0x2, @raw=0x9, 0xabe, 0x0, &(0x7f00000003c0)="d2abd0ff3894d4061df1c9337d089092c7455da0706895648cdcea0850f2d7799c54305690bb8e6162fa97aeccd61e629f6c613590b7e79caea6efbec68616e8d23694ec2004c4c351ec92a916dccf3b409d9e54d45523da68ebb51c2f2d9bb88d1b29ee402878355fc7cefe9ca866f21cd179208f24bca07072742677bd01028d1015a58ca2e810230a9adb944c99ee23882647dee6026046b958741d5a37f55358e61ecc009de719e910a4d1", &(0x7f0000000480)="fcbc8a9fc4041cd557d241883487afd6c7ecbaea2727b64f"})
sendmsg$auto_NL802154_CMD_DISASSOCIATE(r0, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="040104006dea9f99d531580a7476da547f95fca30c5019f1cb270c9f6edc078dab4fc5ff0ac64ea10185977939a3f98acc7a53d3f6d5aef8abe9394144e95608dec3f5b3c1e84216e68abce26f90d6b09f7b5d5204ec97e858fbd80444d24facf4b6b441543049ca40836b6742669e1739f077dba7be58afb3895c97322857e8520a24c8d8d708f51e6c9f3911365e2405c0d3f278152cf5d8c15169e1a96280fefa8a4ca961c29505c2a8217949a7ab86f1e9", @ANYRES16=r2, @ANYBLOB="000225bd7000fbdbdf252900000008002a00fbffffff08000e00060000000600090007000000d5001e80080026000000000044963fd2f1572e0060cc519c8cd661a78881d4daef89b2d2ab23ab6d38b1aa49463f1c643f54ee9e76d55a156899af665bfe5b96f3ff3dbed54b511f916d1d81f9ef6b6cac8e6aeed7540fbc5079aa738c98546fb49bedf38443f2fd07d0a9a41f97b6238d15ab9921a70905d039ef628d3e56ba7b9a703c1220c6372598bdaddfcfb9747968f1d15bc2693dabe77816e1f706f9ae7ee7e73b604508002500", @ANYRES32, @ANYBLOB="0c00940001040000000000003779637c0821c0c305cba2fe86b31aabe8b708004d0064010102000000"], 0x104}, 0x1, 0x0, 0x0, 0x20004040}, 0xc005)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/swaps\x00', 0x200, 0x0)
execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
sendmmsg$auto(r1, &(0x7f0000000300)={{&(0x7f0000000080)="dfbeb2322fe0e14251e4c042fb21f562fce5138915c3fe87e87f7379d2aaaeb166c4069c493f2f8ad21e0931374138757ae0e11821cd17ab", 0x8, &(0x7f00000001c0)={&(0x7f00000000c0)="90a9d90855b82f13d129ebe262797e85ac2088795f7bc07d933e3714b5995770373a12f1ac08d2cf38640f2eb1d4625e7fa9b3aefbb3e6e3c627a1ed095aff2bf3772e8f9fd4a5aaf65203d0029ab5bdadb538384b4ee1a793d65887aae2117a799ad444810998923f2b9262d27fa73931b15df539a205d55e0a5fe676fb5331fabf552e835b3d974a21b65d5559ca934d05e901a22c729bdf5e496a88eb755fe47f6fce5dc65e687e4a5f292d9fecd540aecb49c627ba8ee3df6f669124474fdab3199b4f38c255093d5364d43faea4276224a0fc0b06", 0x3}, 0x7, &(0x7f0000000200)="1b0b795e30fe40dfd7301e8ff5e0b32e30d078076dbeec2e8c42b7f712a4942d1528b493f469403cf234b3a600467278a81f0bbf8e2519de15312867ea56302baee5c28566880dd6d5e7abbb08b44d630fe87d1393a68d2bff975ba03f92f4372b5ba52a854868c89232fbbd70b7f34847d4a74dd65e96f178760a2c268b9a310dbcf02cb5070808afa6fc7e673bc3686860c6e02df6ee2ce41e9cdf3e2b98a224de8739bbd14e7e62518e3ffa5f26801d7cd4ff7c3a95846d1ae52f45cf0bb9b2b8ee0211483e2e79aa04312086d2c483c6a05c2261abf4e8fcf3360a60c3d0fd8292e84ed56fd2fd7e14bfd79b6c3bba4faae1cbbf41a8", 0x9d1, 0x8000}}, 0x0, 0x1)
mmap$auto(0x0, 0x400005, 0xdf, 0x10, 0x2, 0x8000)
r3 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
socket(0x15, 0x80001, 0x3ff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
write$auto(0x3, 0x0, 0x7fffffff)
select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r4 = socket(0xa, 0x802, 0x3a)
setsockopt$auto(r4, 0x29, 0x21, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "3d64dc8bff7fff7f610000000024"}, 0x55)

1m1.753664838s ago: executing program 7 (id=893):
mlock$auto(0xfff, 0xde7f)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
r0 = io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x404c534a, 0x38)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r1 = gettid()
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
kill$auto(r1, 0x11)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x80009, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x400053, 0x9)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x1, 0x100)
getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0)
sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022bbd7000fedbdf25070000230c0017002200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000)
waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0)

46.629316303s ago: executing program 37 (id=893):
mlock$auto(0xfff, 0xde7f)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
r0 = io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x404c534a, 0x38)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r1 = gettid()
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
kill$auto(r1, 0x11)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x80009, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x400053, 0x9)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x1, 0x100)
getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0)
sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022bbd7000fedbdf25070000230c0017002200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000)
waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0)

28.852226748s ago: executing program 8 (id=1018):
r0 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x80000000, 0x0, 0xffffffffffffffff, 0x1, 0x5)
ioctl$auto_SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)="c1a2d5d5dd8ad4c38f058e5275780ffef8f418bb4715097a0fac5e60176088e3da42d443b28b8889d5a6e8a947c3c92771c036185042abb1d3c23673e1c6a22dafea51418cca1739a8598ccd2b6990b64ae967357caeef510fd66718c248aa7665976cd75c1e5186859e93885b746aefed3a760261dfd62954d8adc5ff9623cafe7bf1f3bd782e938bfb836d709e32e230fba95c6bf5bdf0ad846588bb5ca656fdc5bda77605ecbe51152a4ae8ba6605238fb7842a5394891ebfcfb02ca1b58cff0840f7dc43875b098489172dbeda8bfd667e0dfce883cf73bd712152bd84860d6c3c2d68439f4f30e3bb6a7966d0b2a9813ce9e3a23c")
sendmmsg$auto(r0, &(0x7f0000001240)={{&(0x7f0000000100)="6baf07ae2674bf9f2d50c808065d58af5846085e", 0x2, &(0x7f0000000200)={&(0x7f0000000140)="7421283d8276a4272545f17dc7706730bd004acbd4d78926f05d6026bbc91f8a57ab5cd01ddbca81d398d967dfdaadfaaf0dfc388d76fe6ac44cde72710fe4e5de7c07f04c3a7249e97f19b2c63cb891d8471d8c07fcb899e40604248eb7d7439a9909fb1189d56ea90e8057a6d21f5acd4029adf524e2ae64d45f46ea2ce6565aa3212b7cd9ecbbf8cc", 0x9}, 0x9, &(0x7f0000000240)="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", 0x3, 0x9}, 0x1}, 0x6, 0x5)
r1 = ioctl$auto_NS_GET_MNTNS_ID(r0, 0x8008b705, &(0x7f0000001280)=0x2)
shmctl$auto_IPC_RMID(0x2, 0x0, &(0x7f0000001480)={{0x5, <r2=>0xee01, <r3=>0xee00, 0x1beb, 0x4969, 0xfffffff8, 0x4}, 0x9, 0x1, 0x80000001, 0x1, @raw=0x8, @inferred=<r4=>0x0, 0x6, 0x0, &(0x7f00000012c0)="7619e83ecb49631cd2d9fcaec2e014dbd884953ec1c04c24a956690015a3df09f1a8f5ed0cb6f1552beb7052e62b1f81ca57fe524123fb7eb730446c7e21eec076493b4fcdcd64d1840a295c52b2556187ab80cac2641b458c2fd85dc6cf53716de5dd11cc5ff502588473bce9e0df6cbc32cee0cfc5fd5686eb74d4eaf6992dfed5fc69c5c6c291c57c1064db325168cf2e198d9f53f285fccc7f1e97dff7af74294bfec2085f223b", &(0x7f0000001380)="40cc7836ec806fad9a74d6d4f4a277bea9338037d65585e64eeac9532b8ffb69c9fb81c132f41390323fec0c69a3bc13f4e86f9816cb20139873eb2d81c1d58a5a7e128df64b68f0211ac437faee1544c877cbd7fcec4b1c02ba877fd3a16075bcb337dea3cbaf5af260e1c93edd60206bd02a2058b56c75fec77a948e62f5ce1c98a324512fdfab9b98c4eb095885ea025c2a4e6e9cdae18c0131584bd9e3c4193329cd5fd8278f763bda4444af9adbd3b2bbe8186cfbe170df2e205385958469"})
setreuid$auto(r2, 0xee00)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001540), r0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000001880)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001840)={&(0x7f0000001580)={0x290, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CABLE_TEST_TDR_CFG={0xf0, 0x2, 0x0, 0x1, [@generic="1e79e571d7124f9c6a38b081ce3cb8cc539d71d1d877202e9db8d0524b4541245c1697e2a31002926e519de5ffc22e3ce71a0df3a2b79b1bc879123595e234398def72d5c02771b2d22e6b440d62601e9d9659b3060edcc442023b2297a0bfbe30095eea791bd055440fb77768a39f9e2b5463e9462d9f09e47fde6633a3efc1669085b2fc9bf1dfa28326699abc590e48", @generic="dabee6ea6948621feb3a4f963c11787f5e496267ca485643603370ab43218274d24478c0665bc09ef7171dac489eb3c697c19d0239a2312c52c9a9ee96990cb78653f530c5930979a633136d44975d44c849e70fd4f4917954a9d2"]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x18c, 0x2, 0x0, 0x1, [@nested={0x187, 0x8c, 0x0, 0x1, [@generic="20f502661284fd397c85523c88e8638778eee44838e344f72cad3697a58427c02b893d7e513d95aaee0e6c7dcea8d130b5f8460c3010a1e5fefb33176077c43e3ea0c24d5f5b71e6", @nested={0x4, 0x92}, @generic="51bcb09436cb674942225f6a0e909f877e895eb6d80f163a177d67648996c1cea1b7a42fd80ba2f79f086826d5251b3b40303c246c", @typed={0x6, 0x84, 0x0, 0x0, @str='.\x00'}, @typed={0x8, 0x80, 0x0, 0x0, @str='^.*\x00'}, @nested={0x4, 0x129}, @generic="67f65961189df4d3b3c73c8addd4773e1819c8d41f4c2d1201011dc6bbb4be780b2f3c3109b633a1cb5d58f483ffb9fe70a0c2abb26423c99bd625e9c52d8c97080e0e5d40ada7986c27ced981f3b824f4a8be4f2af0f81aec65805ddb6ef80be1c662aa851d1c7f7f35879fce8119725dad83fde04e185c5c8d416f70533f9824ec5a15f0ca3e0cc5d3a5b29e6e5deef25de6c3ec562d768d150aa45c5a22cd2d3c96a67dd4d1bbf5611605081f1595bfd03ce707c0b51b422f092454585e7493ff472da6c3600f084115d7cdd0348623751a78ddb75609aa4e5901cd0510edf22924c1463a", @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@multicast2}]}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4004}, 0x40040)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/devices/virtual/block/ram3/queue/discard_granularity\x00', 0x8000, 0x0)
io_uring_register$auto(r6, 0xb, &(0x7f0000001900)="2d7d442ed395f60fe82020f515cbee11f219861d36d9cfb88b82e1a1b96d0df32dc6c6f19f9f01c2a86f5510c8f332bd1e92d326855c8ea5ee7ee9fe7b4de11288af2ed3e2ef5d0abbf24b47c85ded51ee0696194342197db4cd2f95f8c02bff5a10e8d0e68f53f159706ac025d3b3c9ca9ef307e4d310b2757579eb75007ff28c079a2cc94b9fd23e217a7db1afc388c0fdb2f5850d57ba9f3057ce8cc15c4320a28c9c0c0fd44970d575eac36dfe70775413927cb96812c193a9f697f72b226bafc1c5f86dd99a89521a1ff9b84920b157bdde515600e427535f230c054409662d9e2f18bf07e610", 0x3)
shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000001b00)={{0x10000, <r7=>r2, r3, 0xfffffffd, 0x8000, 0xf, 0x9}, 0x4, 0x355, 0x40, 0x1, @inferred=r4, @raw=0x7f, 0x6, 0x0, &(0x7f0000001a00)="6b91f9c377d7ccc3a5da4b288c110edc3d902d52ce3491db890a83fcafa89a5bb840c0184a277a61fff0b5d71420fb9707f480b57a2cd51c453ba94d563c02c8950e0c50ca2f6e05341e324315b520220d98872fe8d240fbf9fa02322f34c1cc173afa147b1bb16eb549e6a5a867117dc853ec8c3970b7e1db8e2daad6705adbd414fa7829d5ac153cc5e9ff2c55f922831c0e861e3efb6f639ee27d0088ceb431d8923356c04b03577bc375519002", &(0x7f0000001ac0)="b94a87407f31"})
shmctl$auto_SHM_UNLOCK(0xfffffff8, 0xc, &(0x7f0000001d00)={{0x423114f5, r7, r3, 0x3ff, 0x3, 0x0, 0x3}, 0x7f, 0x3, 0xffff, 0x5, @raw=0x1, @inferred=<r8=>r4, 0x2, 0x0, &(0x7f0000001b80)="5249f90f773fd00646bcafac06c282f0481fed5cb97b59a3ebdcfdf4039c7493d7aa6eb3c8494a845a199425307b8bcc2b6b04b9634eebfddeab1d4e00be8e96a455fd1f76e5e9060965a8ffb70ba345643fa183cb26825ffa576049b2484e9ce611444b19e33898e13fd1a3268a4dec5ba299f4e79fca03c5b36e229541c5fb5c1b2252867e47467993d49c802d7a606ccb50ed0c8a989dba76dbcb322393808930832385e4e0602f28abda077e38e753527673922130480a876a53c7bcbf8d8409fb869ac731dcb5360244290f66dffb426241cac4719f4f4c857852c6b8e32d05a764b0f04f6d8a840d4859a62e5768fda38d4a", &(0x7f0000001c80)="9e3001e673417d747b127bdb18b671f47496f4a47e5b77bb7ea92637263cecf1fc0e54ce2a6db72cdb80bc58e64eb0cc84b30d84a620dd3aa5c445ed49546a1fb411bd2f8e0d33a657a8faa6f63e421ed7c4f9a434fe264c79c4dc9c5293fe28728698d68b976ba112cbe351"})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001dc0)={'gre0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'geneve1\x00', <r10=>0x0})
r11 = getpgid$auto(r4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e40)={'batadv_slave_0\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e80)={'veth0\x00', <r13=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001ec0)={'batadv0\x00', <r14=>0x0})
capset$auto(&(0x7f0000001f00)={0x7, <r15=>r8}, &(0x7f0000001f40)={0x5, 0x9, 0x6b9})
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000026c0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002680)={&(0x7f0000001f80)={0x6e0, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x265, 0x3, 0x0, 0x1, [@generic="ba5a7afefdc0a669f0e2bcd7c7b6a8ce19831b97e967", @generic="ff5055d6963f50a6301e6b0f490269a6d402806b178714438bcc1b45c32538d80810a36435ec1a784feeb4be1626eee41fb73d10b56c9c3d15debeeac925f89ab518b0b80f82ffcae8cdfed58cc87f7dacf789ac58f1cb57bf23ce3ec25e7b043dee04f2c60b154be1d200f835f3c89531c3cd6603a07a325fa6dbe1b9970fc486297269741c24a7634a71073b9cf4f4ac1778e9e158409815b9331d2253f62e60d5ba898ca6959a7304ae5ebc682d5cef21f3799673d453dc229945e521339e990e88b3c1ff279dcc48000a22d4c728c163206c2197ace86ad32e6aa4fb3b0129", @nested={0x8, 0x12b, 0x0, 0x1, [@nested={0x4, 0x38}]}, @generic="6269a520fc8602", @typed={0x8, 0x117, 0x0, 0x0, @fd=r0}, @generic="4d4f1aa58f3022eedc0db17cfce256cfe1f83248ce1ace0bff7f583fa0f697342e52eac26f129a18a9dc0659a8c8ad7c7961a4f02bbe48993ae893a585aec82e2dfd37a387fbe4dfddffcf645e78f06cd8c62cb242c1fd7b89fbc192af1313afb62f3738f2a497a2c8a866e144f6d0452b2d3e10628b3e0c9f6f1c81d597b2b8fb8b49e54d9ada6fe0e684e58bd42025d24e233a6970dd49359b0881ae50e5f822f5b10dabb766dd7222bcaafa90c914965439ef5d0c", @generic="347d580eeb7d1584bd2f586d489e9ec6316785f63cd5f3e27c622ac90f5d5e55e2af46b4df86b7fc03880f702cb4fe9660cfa9ee209e6cf38efa4031b868271407eaa91cf75e4b516365ec2124bec4153407fb13139af31d6320c8d3c13e6b8ae14ba629", @generic="1cce26026a54116b1b7c96129a1bf594f5d4bbdba52be961cf52aa1fdcc35f97e3644685f07b131f2f79383ad6a31ad8772f66dd788a7c4ff7"]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_WANTED={0x27a, 0x3, 0x0, 0x1, [@nested={0xc, 0x99, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @pid=r11}]}, @generic="8de5746530e4fe921f2e940934238610b9e45114c199d93f401ce8142e877664f7696d252b8ead84442ae5ace1ef66e7410598189e22f28cbf78212a9feceac24981c8870954901c71ad5d281823b2dd9dfdf65e79dbd82b2e2468277f445fe23ef1d8ab97ddaf3e6850070a04a2c43e5a682892d5f60e9a79595da8e110f546fa752e6246cc20895f64e109b5b73079d2f624b09f8e2ef2c28b835e8eed6ca59f2e1cb34151970e1376dfafc7f49532d1c3857c6892c275", @typed={0xc, 0x2a, 0x0, 0x0, @u64=0x1}, @generic="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", @nested={0xa2, 0x5a, 0x0, 0x1, [@generic, @generic="604dd68474e10bb6fe2e49f6e42c82a859cd7d6882bbebec039a95f5e8ffe60340c5abb04197b26cd252f5561d1c619744e367be7420e0a8ab771bbc730b61e7347737f7403347dfa6ea7ddfc6976bb149203250a5ed3fbdd020faf27d9c887aa724e42925a98b2896cf79ca9dd9c2831e97d3a228cd4dcc879c2ff159f48bce05fa36d610d2192b0c5856edaab435940ca073af11414f5816fd369ba54d"]}, @typed={0x4, 0xba}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_FEATURES_WANTED={0x166, 0x3, 0x0, 0x1, [@nested={0xea, 0xaa, 0x0, 0x1, [@typed={0x14, 0xd, 0x0, 0x0, @ipv6=@private1}, @generic="a2c9b2a929507e11533c8a5f098b489fa4157ad386af230d6ae4ee56ab31353dc6f341d157184b5c087503c81493ae56d7f28b4415475787596da9989acd2398b7b8d3ffbb61112e3b440df628d94796a8288a65a4d98163143941a72bc922875bde712bc9d18d36edf9b8ca8cf8b3cabe0930121d8fd1fa7c33c400c57103a73b4d6f26aa6d30a26479ada2c5974c3b79", @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="60aa46c23d9a34c82a3ae89beb7f75ffdf217700aff5c5ee4fa4c42b680e8af8ae9c7b811253c6e4415772b381"]}, @nested={0xc, 0x117, 0x0, 0x1, [@typed={0x8, 0xc5, 0x0, 0x0, @uid=r7}]}, @generic="3c97ef4d32c974c8efae362f447c5a24cd255c14e25b1d293f972ca249a623f8aaed08672c67cc62d2864b8900d26c1d08116c65ebf57899338deae4d4ca92dda0cdd7b7c6bea02504c1f0648486d1be2eada0d2e5bea2d7d9eb85a5a895ab998bff", @typed={0x8, 0x10d, 0x0, 0x0, @pid=r15}]}]}, 0x6e0}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
rmdir$auto(&(0x7f0000002700)='./file0\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002740)={'vlan1\x00'})
r16 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000027c0), r0)
sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000002980)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000002940)={&(0x7f0000002800)={0x13c, r16, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0x8}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x3d3f}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x2d}, @NFC_ATTR_SE_APDU={0xe8, 0x19, "215df783150fddc8d04a94e363faf54a9233a040a27c00bf2c57251d384beb1b147c10f962010d745b727758bd7e0688010ddd177487e056ca2363d0f613644b8e31f1344fae06d3cc57ea498849b9285994bd113b8ce3e9a995d70e0e7a71ae4d80bfc37591d2e2e50fd655325fd665737f631bf9dc752d876dc0534f999484c7307584d7453fa9f1027d1d4c74a6aba48ba4af20a74af73dacdedac58f8bc02ae9c595f9c232468b82a1c451fe7297729ed374512ac739506ab1e03d9daea3485a350e729113506dacc39d84d7e58f3a257069e781569ece1f8320c5a099a268dac0f7"}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x3}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x3}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x9}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)
r17 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f00000029c0), 0x101100, 0x0)
mmap$auto(0x10, 0x7, 0x8, 0x19, r17, 0x3572)
r18 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000002a40), r0)
sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x2c, r18, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x80}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x24044815)
sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r1, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x20, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_TSCONFIG_HWTSTAMP_PROVIDER={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x54, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x2b, 0xbb, "76c96ca3571a0d25a0f9bc46bb2db779d39312749e71b7c4fc20fc6d79607c5148c712c4a829fc"}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xe55}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001)

28.698008631s ago: executing program 8 (id=1019):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
fallocate$auto(r0, 0x1, 0x820, 0x7fff)
mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0x8, 0xeb1, r0, 0x8000)
sysfs$auto(0x2, 0x100000000000036, 0x0)
r1 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8)
timer_create$auto(0x8, 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001a40)=""/4101, 0x1005)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0)
unshare$auto(0x40000084)
ioctl$auto_NS_GET_PID_IN_PIDNS(r0, 0x8004b708, &(0x7f0000000080)=0x3580)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40043d04, 0x0)
read$auto(0x3, 0x0, 0x7fffffff)
socket(0x15, 0x5, 0x0)
ioctl$auto(0x3, 0x89e0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0)

28.411075019s ago: executing program 8 (id=1020):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x30, 0x65f, 0x6, 0x2, 0x3, 0x20000002, 0x7, 0x3, 0x4, 0x4, 0xb4, 0x6, 0x80000000000a, 0x10003, 0x80, 0x4, 0x3, 0x2, 0x1002000, 0x205, 0x108, 0x84, 0xfffffffffffffffd, 0x0, 0x0, 0x40000000, 0x0, [0x0, 0xfbfffffffffffffc, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1ff, 0x0, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x2, 0x0, 0x400000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1]}, 0x3, 0xd) (async)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)

28.18655639s ago: executing program 8 (id=1023):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0xa, 0x2, 0x0)
lsm_list_modules$auto(&(0x7f0000000000)=0x9, &(0x7f0000000040)=0x5, 0x2)
setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a80)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_FEC_MODES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c61ec00)
r2 = socket(0x10, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_DEL_DEST(r2, &(0x7f0000000000)={0x0, 0x3b, &(0x7f0000004f40)={&(0x7f0000000140)={0x20, r3, 0x8574a35e83815fa9, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008801}, 0x14)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c4, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x120}, @IPVS_CMD_ATTR_SERVICE={0xdd, 0x1, 0x0, 0x1, [@nested={0x14, 0x135, 0x0, 0x1, [@nested={0x4, 0xc}, @nested={0x4, 0x84}, @nested={0x4, 0x140}, @nested={0x4, 0xab}]}, @generic="5355ef528a08bf8f019151ab13f7d17adf92327e7efd3c23015246f247c0d1d392a687ec14b7d7a84fc14030055396ea82c0426ca4311ae855da23f9996270a3267df43ede4594a3db71a7c901d487a2a43bb760b231bcd4c5185da1847020bc54475adfa85f0f4d8492af2f7ed558de640abfdbf1e48fce758a83657675f2fafa32a5151f825652248b7dc6fa57df11a4a5447cb22c44ebdd5cb360ef43bc0f2bd6aadb60bb481b0b146a599aca35ed716c90e6da47b9fab0dca40feb5131bf4605f8bdcd"]}, @IPVS_CMD_ATTR_DAEMON={0xbd, 0x3, 0x0, 0x1, [@generic="02e22c0b6c88ac37250324345933ba300099a7a176ddc2e6f5d6c1dcab7c3a6beb3e68e2f3cdcfaf7e0de31cdf06d67709ea5b6d5663b16c0d31df06ef30766010844002c83469b66d813771e0a657dd48bd4328d3313831369d37623258585ed161b3fb37ae29478f357486f3f2d402b77fd09eb342433504021323ee", @nested={0x3c, 0x6a, 0x0, 0x1, [@nested={0x4, 0x5c}, @typed={0x8, 0xef, 0x0, 0x0, @str='[&%\x00'}, @typed={0x1a, 0xd9, 0x0, 0x0, @binary="82ec4546c047ebf75ff6c6f5f819664d1a25cb459a51"}, @nested={0x4, 0x5a}, @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x2a}]}, @generic]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x404c800}, 0x40)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async)
socket(0xa, 0x2, 0x0) (async)
lsm_list_modules$auto(&(0x7f0000000000)=0x9, &(0x7f0000000040)=0x5, 0x2) (async)
setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a80)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_FEC_MODES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c61ec00) (async)
socket(0x10, 0x2, 0x0) (async)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmsg$auto_IPVS_CMD_DEL_DEST(r2, &(0x7f0000000000)={0x0, 0x3b, &(0x7f0000004f40)={&(0x7f0000000140)={0x20, r3, 0x8574a35e83815fa9, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008801}, 0x14) (async)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c4, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x120}, @IPVS_CMD_ATTR_SERVICE={0xdd, 0x1, 0x0, 0x1, [@nested={0x14, 0x135, 0x0, 0x1, [@nested={0x4, 0xc}, @nested={0x4, 0x84}, @nested={0x4, 0x140}, @nested={0x4, 0xab}]}, @generic="5355ef528a08bf8f019151ab13f7d17adf92327e7efd3c23015246f247c0d1d392a687ec14b7d7a84fc14030055396ea82c0426ca4311ae855da23f9996270a3267df43ede4594a3db71a7c901d487a2a43bb760b231bcd4c5185da1847020bc54475adfa85f0f4d8492af2f7ed558de640abfdbf1e48fce758a83657675f2fafa32a5151f825652248b7dc6fa57df11a4a5447cb22c44ebdd5cb360ef43bc0f2bd6aadb60bb481b0b146a599aca35ed716c90e6da47b9fab0dca40feb5131bf4605f8bdcd"]}, @IPVS_CMD_ATTR_DAEMON={0xbd, 0x3, 0x0, 0x1, [@generic="02e22c0b6c88ac37250324345933ba300099a7a176ddc2e6f5d6c1dcab7c3a6beb3e68e2f3cdcfaf7e0de31cdf06d67709ea5b6d5663b16c0d31df06ef30766010844002c83469b66d813771e0a657dd48bd4328d3313831369d37623258585ed161b3fb37ae29478f357486f3f2d402b77fd09eb342433504021323ee", @nested={0x3c, 0x6a, 0x0, 0x1, [@nested={0x4, 0x5c}, @typed={0x8, 0xef, 0x0, 0x0, @str='[&%\x00'}, @typed={0x1a, 0xd9, 0x0, 0x0, @binary="82ec4546c047ebf75ff6c6f5f819664d1a25cb459a51"}, @nested={0x4, 0x5a}, @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x2a}]}, @generic]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x404c800}, 0x40) (async)

27.848714449s ago: executing program 8 (id=1025):
r0 = open(0x0, 0x4242, 0xe1d2b27bdc14aabc)
mmap$auto(0x0, 0x86f3, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r1 = socket(0x2, 0x1, 0x0)
setsockopt$auto(r1, 0x6, 0x13, 0x0, 0x40)
sendmsg$auto_NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x24000080)

27.771503423s ago: executing program 8 (id=1026):
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00?W\xff\xff\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) (async)
r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x8000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/swpout_fallback\x00', 0xc0200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/231, 0xe7) (async)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, r0, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
unshare$auto(0x40000080) (async)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x810004, 0xff9, 0x8000000008011, 0x3, 0x8000) (async)
preadv2$auto(r2, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) (async, rerun: 32)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64)
write$auto(r3, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64)
listen$auto(0x3, 0x81)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0)
close_range$auto(0xffffffffffffffff, 0xa, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) (async)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) (async)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0) (async)
ioctl$auto_MEMGETINFO(r4, 0x80204d01, 0x0) (async)
r5 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0)
mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
read$auto(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 64)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
mmap$auto(0x0, 0xe982, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
getsockopt$auto_SO_SNDBUF(r5, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

12.731258527s ago: executing program 38 (id=1026):
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00?W\xff\xff\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) (async)
r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x8000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/swpout_fallback\x00', 0xc0200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/231, 0xe7) (async)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, r0, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
unshare$auto(0x40000080) (async)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x810004, 0xff9, 0x8000000008011, 0x3, 0x8000) (async)
preadv2$auto(r2, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) (async, rerun: 32)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64)
write$auto(r3, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64)
listen$auto(0x3, 0x81)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0)
close_range$auto(0xffffffffffffffff, 0xa, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) (async)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) (async)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0) (async)
ioctl$auto_MEMGETINFO(r4, 0x80204d01, 0x0) (async)
r5 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0)
mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
read$auto(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 64)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
mmap$auto(0x0, 0xe982, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
getsockopt$auto_SO_SNDBUF(r5, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

4.416072046s ago: executing program 9 (id=1130):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0)
ioctl$auto_USBDEVFS_REAPURB32(r0, 0x4004550c, &(0x7f0000000080)=0xfffffffc)
r1 = fcntl$auto_F_GETOWN(r0, 0x9, 0x7)
bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000000c0)=@task_fd_query={r1, r0, 0x7, 0x10000, 0x5, 0x3, r0, 0x16, 0x6}, 0x6)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)={0x2, 0x0, 0x4, 0x81, &(0x7f00000001c0), 0x9, 0xeb8e, 0x0, @number_of_packets=0xfffffff7, 0x7, 0x800476, 0x0})

3.914696578s ago: executing program 9 (id=1132):
getpid()
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
uname$auto(0x0)
r0 = socket(0x2, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x2, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$auto(r1, 0x10e, 0x9, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
bpf$auto(0xaa0, &(0x7f00000001c0)=@test={<r2=>0xffffffffffffffff, 0x3, 0xfd0, 0xa0, 0x2878, 0x8, 0x7, 0x0, 0xfffffffd, 0x1000, 0x2, 0xa, 0xfffffff8, 0x7, 0xf}, 0x660e)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000002b00)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x20900, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8)
r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x27, 0x0, 0x0, 0x0, 0x0)
pread64$auto(r4, 0x0, 0xd00, 0x2)
ioctl$auto_AUTOFS_IOC_SETTIMEOUT32(r2, 0xc0049364, &(0x7f0000000080)=0xfffffffb)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0x82002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
ioctl$auto_BLKDISCARDZEROES(r5, 0x127c, 0x0)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0)
write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'dummy0\x00', <r9=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)={0x20, r8, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x1000060}, 0x400c080)

3.536345722s ago: executing program 3 (id=1135):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1cc19e9d4fc16ce8, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
listen$auto(0x3, 0x81) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) (async)
ptrace$auto(0x6, 0x1, 0x3, 0x180002) (async)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048004)
madvise$auto(0x0, 0x200007, 0x19) (async)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x4001, 0x0) (async)
mmap$auto(0x8, 0x2, 0xdf, 0xeb1, 0x401, 0x3)
prctl$auto(0x5, 0x1, 0x0, 0x3, 0x7) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb78, 0x66a) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
read$auto_proc_pid_maps_operations_internal(r2, &(0x7f0000000480)=""/4099, 0x1003) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) (async)
read$auto(r1, 0x0, 0xf9) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0)
ioctl$auto_RTC_UIE_ON(r3, 0x7003, 0x0)
ioctl$auto_RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000000)={0x3, 0x3, {0x5, 0x4, 0x9, 0x7, 0x5, 0x3a50, 0xfffffffd, 0xffff, 0xfd}})
close_range$auto(0x2, 0x8, 0x0) (async)
madvise$auto(0x0, 0x200007, 0x19) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

3.417075581s ago: executing program 4 (id=1136):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) (async)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd9\x00', 0x0, 0x0) (async)
capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) (async)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';')
ioctl$auto(0x3, 0x40046201, 0x38) (async)
ioctl$auto(r0, 0xab02, r0)

3.35934363s ago: executing program 9 (id=1137):
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x81, "c54cc98a5db34744e39882bb30415db6eda394f53c316b1772ff425e40f57e2e", @raw=0x8000})
ioctl$auto_SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000480)="f6a6fb15792d314e90f634ba4f9eaef92707313ae6a843ee74e202f0ebb97d3f627a09a674a41d03390b7559cab99994617bcd5bf7aa9295e43acd6a2ffbcf7300461de51ce0000825f574426c938822a19d8f3f97ea52cae206b5336aa55679b24548e19e95ef1ab3a8d6d83c39cacf1bf8e2689ccae0389ac20ad881effdc23cd8c10c1771157269f87b569dba258fbfd6692d0516d6c0db404059f5254c19948217f9e5cce93f44f00434aa756b1ffa14b860e94810b8e8c27e28a9228209c79f5601cf553000723de211901439d71d8cfc4f575f94")
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x8000000000002, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0xfffffffd, 0x0)
semtimedop$auto(0x7fffffff, &(0x7f00000000c0)={0x7fff, 0x5, 0x8}, 0x5, &(0x7f0000000140)={0x1, 0x1})
setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x169443, 0x114)
fcntl$auto(r1, 0x40a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
rseq$auto(&(0x7f00000001c0)={0xe, 0xfffffff7, 0x1, 0x9, 0xffffffff, 0x9}, 0x8000, 0x0, 0x6)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0)
bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, <r4=>r3, 0x454f, 0xfff, 0x0, 0x0, r2, 0x80000000}, 0x6d4)
flock$auto(r4, 0xc6)
r5 = open(0x0, 0x4242, 0x59)
flock$auto(r5, 0x6)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0xc)
ioctl$auto_RTC_UIE_ON(r6, 0x7003, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x90, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r7 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008)

3.188980571s ago: executing program 4 (id=1138):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x6, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x28, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80f)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1c, 0x1, 0x6, 0xee00, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0x90001, 0x0)
fdatasync$auto(r2)
r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="fdff0700", @ANYRES16=r3, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000180)=""/250, 0xfa)
pread64$auto(r4, 0x0, 0xa75, 0x4)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x17)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x84102, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0)
ioctl$auto_SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000480))

3.032491315s ago: executing program 9 (id=1139):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
ioctl$auto(r0, 0x92106402, r0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyt8\x00', 0x0, 0x0)
io_uring_setup$auto(0x1, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)

2.879401556s ago: executing program 0 (id=1140):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x826c0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x129221, 0x0)
r2 = bpf$auto(0x8000000, &(0x7f0000000000)=@test={r1, 0x5, 0x9, 0xfffffff8, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0xfffffffffffffffc, 0xe2, 0x4, 0xc28}, 0x0)
prctl$auto(0x40, 0x1, 0x0, 0x1, 0x9) (async)
r3 = prctl$auto(0x40, 0x1, 0x0, 0x1, 0x9)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010023bd7000fddbdf250200000008000300", @ANYRES32=r6, @ANYBLOB="04000c010700f200"], 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x80) (async)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010023bd7000fddbdf250200000008000300", @ANYRES32=r6, @ANYBLOB="04000c010700f200"], 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x80)
sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x4000}, @NL80211_ATTR_WIPHY_NAME={0x6, 0x2, '$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x4000}, @NL80211_ATTR_WIPHY_NAME={0x6, 0x2, '$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) (async)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x24000000)
write$auto(r7, 0x0, 0x98c7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r8 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
msgget$auto(0xc, 0x77d9) (async)
msgget$auto(0xc, 0x77d9)
msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3)
syz_genetlink_get_family_id$auto_nl80211(0x0, r8)
sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x80)
msgctl$auto(0x0, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000280), r8)
sendmsg$auto_NFC_CMD_GET_TARGET(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x120, r9, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x8001}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}, @NFC_ATTR_VENDOR_DATA={0xe2, 0x1f, "2b40638d8b5fefc8eedcbfd2a4d2b5fa308dad0eb329372a738f16dfe43417c2cd5d1d9628b9a74176b77becd3e761eb24f1436d6011d506aff9288fafda74f209cd5f5c279ab5fb6308a3ef88a08f8bff125dac2b77733205e55b8da58c50131b1b0cc4a165e65b49f56e6405e6563a2b0c667194bd567520ea0ffc41146aa74068f77de9f19113fb24c3d5c434df38af88ceafb0c911ba98f94bec885ef1116bc8bf25d48ba0bf346b38af151ee654638742ad855addba9c181fd29d93bd1ca203c82b026a2f305b40f243b3f0a105438266e464b6f832576b91ad6aae"}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '[/#'}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xf}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x4e}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async)
sendmsg$auto_NFC_CMD_GET_TARGET(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x120, r9, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x8001}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}, @NFC_ATTR_VENDOR_DATA={0xe2, 0x1f, "2b40638d8b5fefc8eedcbfd2a4d2b5fa308dad0eb329372a738f16dfe43417c2cd5d1d9628b9a74176b77becd3e761eb24f1436d6011d506aff9288fafda74f209cd5f5c279ab5fb6308a3ef88a08f8bff125dac2b77733205e55b8da58c50131b1b0cc4a165e65b49f56e6405e6563a2b0c667194bd567520ea0ffc41146aa74068f77de9f19113fb24c3d5c434df38af88ceafb0c911ba98f94bec885ef1116bc8bf25d48ba0bf346b38af151ee654638742ad855addba9c181fd29d93bd1ca203c82b026a2f305b40f243b3f0a105438266e464b6f832576b91ad6aae"}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '[/#'}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xf}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x4e}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
setrlimit$auto(0x7, 0x0)
mmap$auto(0x0, 0x2020005, 0x1000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020005, 0x1000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)

2.661076762s ago: executing program 3 (id=1141):
madvise$auto_MADV_MERGEABLE(0x37, 0x8000000000000001, 0xc) (async)
r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
ioctl$auto(r0, 0x40084d05, 0x7) (async)
r1 = socket(0x2, 0x1, 0x6)
setsockopt$auto(r1, 0x0, 0x24, 0x0, 0x9)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
mq_open$auto(&(0x7f0000000280)='\xcep\x88\\.', 0x7e, 0x9, 0x0)
ioctl$auto(0x4000000000000c8, 0x900454cf, 0xffffffffffffffff) (async)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x220000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r2, 0xfffffffffffff000, 0x2) (async)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) (async)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) (async)
select$auto(0xd, 0x0, 0x0, &(0x7f00000000c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x3, 0xffff, 0x4010, 0x64, 0xeeb4, 0x1000, 0xb, 0x6, 0x2, 0x8]}, 0x0)

2.517855757s ago: executing program 0 (id=1142):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
mq_notify$auto(0x4, &(0x7f0000000040)={@sival_int=0x5de7, @inferred, 0x7f, @_tid})
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8000, 0x1}, 0x8}, 0x1, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x1, 0xfffffff7}, 0x8c}, 0xb, 0xe)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0)
setreuid$auto(0x0, 0x7)
prlimit64$auto(0x0, 0x7, &(0x7f0000000cc0)={0xfff, 0xf1c6}, 0x0)
mmap$auto(0x100000000, 0x2000d, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x100000000)
sysfs$auto(0x2, 0x5, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x3, 0x1, 0x0)
semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xc, 0xeb1, r0, 0x8000)
ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x28, 0x801, 0x0)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c402, 0x0)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x2080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4)
sendfile$auto(r3, r2, 0x0, 0x10000)

2.439728384s ago: executing program 3 (id=1143):
socket(0x29, 0x1, 0xa)
bind$auto(0x3, &(0x7f0000000140)=@sco={0x1f, @none}, 0x7)
socket(0x29, 0x1, 0xa) (async)
bind$auto(0x3, &(0x7f0000000140)=@sco={0x1f, @none}, 0x7) (async)

2.261010413s ago: executing program 3 (id=1144):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
timerfd_gettime$auto(0xffffffffffffffff, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
getsockopt$auto(r0, 0x0, 0x80, 0x0, 0x0)
getsockopt$auto_SO_BUSY_POLL(r0, 0x10000, 0x2e, 0x0, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video21\x00', 0x40180, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x11, 0xa, 0x300)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa)
setsockopt$auto(0x3, 0x3, 0x1, 0x0, 0x9)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
sendto$auto(0x3, 0x0, 0x2000e, 0x101, 0x0, 0x1c)

2.204180404s ago: executing program 9 (id=1145):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x34f602, 0x0)
socket(0x10, 0x2, 0x0)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0)
ioctl$auto(r1, 0x5646, r1)
statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x9, 0x1, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0xffffffff, 0x6, 0x4, 0xb0, 0x9, 0x0, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2004, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x2000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}})
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/user/max_time_namespaces\x00', 0x202, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x4008, 0xffffffffffffffff, [0x8], {0x401, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x1}, {0x20010100, 0xfffffffd, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x2}})
socket(0xa, 0x1, 0x7)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2e2580, 0x0)
capset$auto(0x0, 0x0)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)

2.105787543s ago: executing program 4 (id=1146):
r0 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setsockopt$auto_SO_PRIORITY(r0, 0x8000, 0xc, &(0x7f0000000180)='\x00', 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1.569190183s ago: executing program 0 (id=1147):
r0 = socket(0xa, 0x5, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0x3ff)
fcntl$auto_F_DUPFD_QUERY(r0, 0x403, r0)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0)
write$auto(r3, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001)
sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="c8020000", @ANYRES16=r1, @ANYBLOB="010029bd700002dcdf2503000000510207800301e2804ad1d450a02311824135beea2e7a3f9217517f096f0b435cee9152e89d0c3c4ffe3272e446fe732c84603681d1c8cc9698e3b7257eeb12edbec0131a14c988ec50e702bf7d047f07d7c3c9cbf501f14b81b0705b1d5c6ba260bf831ee134b3d1dbbfd6ea59983e83d4596faf1873cf26c318a45750779aed88d351bac883b97aa5f5d1c895b2719cf26ab111b50370b271d28268dc25e7a653aa8c6fe7419c660478708acc4ebf2800d5eab09d424852f827e2e592108ea6d96db354683d20a33182900400c18008005600", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="14003000fc010000000000000000000000000000664fafebf000"], 0x2c8}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)

1.564274502s ago: executing program 4 (id=1148):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyab\x00', 0x0, 0x0)
r1 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
clock_nanosleep$auto(0xb, 0xa000001c, 0x0, 0xffffffffffffffff)
connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8)
ioctl$auto_TCFLSH2(r0, 0x5453, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x181881, 0x0)
r3 = socket(0x11, 0xa, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r4=>0x0})
bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex=r4, 0x0, 0x8, 0x9, 0x0, @prog_cnt, 0x0, 0x3, 0x5a3522aa, 0xffffffff, 0x9}, 0x6f4)
ioctl$auto_SNDCTL_TMR_CONTINUE(r2, 0x5404, 0x0)

1.221046004s ago: executing program 9 (id=1149):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/fuse/parameters/max_user_bgreq\x00', 0x0, 0x0) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/fuse/parameters/max_user_bgreq\x00', 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x400, 0x0)
read$auto(r1, 0x0, 0x20)
write$auto(r0, 0x0, 0x8001) (async)
write$auto(r0, 0x0, 0x8001)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x27a3c2, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, [{0x5, 0x7, 0x5}, {0xb, 0x100, 0x7fffffffffffffff}, {0x9a, 0x9, 0x8}, {0x401, 0x7}, {0xf, 0x7, 0x80010000000000}, {0x80, 0xf, 0x6}]}) (async)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, [{0x5, 0x7, 0x5}, {0xb, 0x100, 0x7fffffffffffffff}, {0x9a, 0x9, 0x8}, {0x401, 0x7}, {0xf, 0x7, 0x80010000000000}, {0x80, 0xf, 0x6}]})
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x4800, 0x0) (async)
r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x4800, 0x0)
openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) (async)
r6 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0)
read$auto(r6, 0x0, 0x4)
ioctl$auto_RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000001c0)={0x1, 0x6, 0x4, 0x8000004, 0xfffffffa, 0x10001, 0x9, 0x420006, 0x4})
mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, r2, 0x8000) (async)
mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, r2, 0x8000)
mmap$auto(0xba, 0x3c, 0xc, 0x16, 0xfffffffffffffffa, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x7fffffff, 0x0, 0x9) (async)
madvise$auto(0x7fffffff, 0x0, 0x9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2)
r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop3\x00', 0x40000, 0x0)
ioctl$auto_BLKRAGET(r7, 0x1263, 0x0)
wait4$auto(0x0, &(0x7f0000000000)=0x2, 0xe8, &(0x7f0000000040)={{}, {0x0, 0x7dffffffffffffff}, 0x2, 0x708d, 0x7, 0x310, 0xa, 0x4, 0xfffffffffffffffa, 0x2, 0x2701, 0x9, 0xe, 0x1d8, 0x40, 0x7})
mincore$auto(0x1000, 0x4000000, 0x0)
r8 = socket(0x11, 0x3, 0x3a)
openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, 0x0, 0x8c0, 0x0)
ioctl$auto(r8, 0x8916, 0x1) (async)
ioctl$auto(r8, 0x8916, 0x1)
close_range$auto(r5, r4, 0x0)

1.178630212s ago: executing program 4 (id=1150):
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
mmap$auto(0x0, 0x86f3, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x0)
socket(0x2, 0x1, 0x84)
listen$auto(0x3, 0x81)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x0, 0x0)
prctl$auto(0x416, 0x2000000001, 0x0, 0x1, 0x380000000000000)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xffffffffffffffff, 0x8000)
mmap$auto(0x4, 0x2020009, 0x3, 0x15, r0, 0x5)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x7, 0x1, 0xe4b7, 0x200, 0x30b})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000d, 0x4000000000db, 0x12, 0x400, 0x18002)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xfff)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000)
read$auto(r2, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef)
mmap$auto(0xfffffffffffff922, 0x200006, 0x1, 0x40ebf, 0x602, 0x300000000000)
prctl$auto(0x1000000003b, 0x200000000000008, 0x4, 0x5, 0x7)
getcpu$auto(0x0, 0x0, 0x0)

1.072640139s ago: executing program 3 (id=1151):
mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r0, 0x114, 0x2718, 0xfffffffffffffffc, 0x0)
r1 = socket(0x2, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0)
ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00", 0x3ff, 0x408, 0xc, 0x400004, 0x200000000040000d})
ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0)
madvise$auto(0x0, 0x5, 0x15)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
r4 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x217102, 0x0)
recvmmsg$auto(r4, 0x0, 0xd, 0xc, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x9)
write$auto(r1, 0x0, 0x3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x2, 0x8544, 0xaa)
madvise$auto(0x0, 0x200007, 0x19)
prctl$auto(0x43, 0x0, 0x0, 0xfffffffffffffffe, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00')
mmap$auto(0x0, 0x400008, 0xc93, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6a)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/mb_stats\x00', 0x88000, 0x0)

709.179222ms ago: executing program 0 (id=1152):
r0 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0)
ioctl$auto_BINDER_CTL_ADD(r0, 0xc1086201, 0x0)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x3)
socket(0xa, 0x2, 0x88) (async)
socket(0xa, 0x2, 0x88)
setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9)
close_range$auto(r0, r0, 0x0)

476.160261ms ago: executing program 0 (id=1153):
keyctl$auto_KEYCTL_NEGATE(0xd, 0xfffffffffffffffc, 0x0, 0x1, 0x2)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
mmap$auto(0x0, 0xa, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x8000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1f, 0x801, 0x84)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x6)
eventfd$auto(0x3)
pipe$auto(0x0)
socketpair$auto(0x9e, 0x3, 0x4, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x20000, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r0, 0xc0384707, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)

472.559218ms ago: executing program 3 (id=1154):
getcwd$auto(0x0, 0x7)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x9, 0x4, 0x8000000000000000, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
read$auto(r1, 0x0, 0x6)
ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x400c040}, 0x10000040)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2404c800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_key\x00', 0x8300, 0x0)
read$auto(r4, &(0x7f0000000240)='nl80211\x00', 0x7)
r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r0)
sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_DAT_CACHE_HWADDRESS={0xa, 0x24, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004080)

107.462185ms ago: executing program 4 (id=1155):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
r0 = getpid()
pidfd_open$auto(r0, 0x0)
r1 = epoll_create$auto(0x3e)
epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0)
r2 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000)
getsockopt$auto(r2, 0x0, 0x12, 0xfffffffffffffffe, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)="0b41eabf", 0x4)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x389d25edbd18497a, 0x0)
r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r4, 0x400, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x1, 0x0)
socket(0x1, 0x2, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
open(&(0x7f00000000c0)='./file0\x00', 0x80001, 0x154)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0)
close_range$auto(0x0, 0x5, 0x0)

0s ago: executing program 0 (id=1156):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81) (async)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000040"], 0x14}}, 0x24048004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000020810004006e66736600d8efe42d132b72f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb8fed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000ca0c3171834a9a8a72073b745f3b36dffe28d713118387649a3911ae8e"], 0xa8}}, 0x4000) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000020810004006e66736600d8efe42d132b72f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb8fed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000ca0c3171834a9a8a72073b745f3b36dffe28d713118387649a3911ae8e"], 0xa8}}, 0x4000)
sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
readv$auto(r4, &(0x7f0000000080)={0x0, 0x36a}, 0x6) (async)
readv$auto(r4, &(0x7f0000000080)={0x0, 0x36a}, 0x6)
madvise$auto(0x0, 0x200007, 0x19) (async)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x6, 0x3, 0xa) (async)
socket(0x6, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x3)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/vhci_hcd.4/usb18/18-0:1.0/usb18-port4/early_stop\x00', 0x0, 0x0)
sendfile$auto(r5, r5, 0x0, 0x200)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd5\x00', 0x4602, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)

kernel console output (not intermixed with test programs):

[  232.945781][ T8292] RBP: 00007fe22fe08c1f R08: 0000000000000000 R09: 0000000000000000
[  232.945803][ T8292] R10: 0000000000004a00 R11: 0000000000000246 R12: 0000000000000000
[  232.945820][ T8292] R13: 00007fe230016128 R14: 00007fe230016090 R15: 00007ffd9b99ea28
[  232.945860][ T8292]  </TASK>
[  232.951307][ T8294] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13
[  234.218377][ T8281] Bluetooth: hci0: command 0x0c1a tx timeout
[  234.387158][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  234.438518][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  234.538243][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  234.577263][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  234.661130][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  234.697565][ T8281] Bluetooth: hci2: command 0x0c1a tx timeout
[  234.707859][ T8281] Bluetooth: hci1: command 0x0c1a tx timeout
[  234.777543][ T8281] Bluetooth: hci3: command 0x0c1a tx timeout
[  234.878033][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  234.907034][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  234.923362][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  234.952731][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  234.968517][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  235.031594][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  235.045916][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  235.132962][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  235.141546][ T8317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  236.370694][ T8343] [U] ^\
[  239.642524][ T8421] FAULT_INJECTION: forcing a failure.
[  239.642524][ T8421] name failslab, interval 1, probability 0, space 0, times 0
[  239.657725][ T8421] CPU: 1 UID: 0 PID: 8421 Comm: syz.2.482 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  239.657771][ T8421] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  239.657781][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  239.657797][ T8421] Call Trace:
[  239.657806][ T8421]  <TASK>
[  239.657816][ T8421]  dump_stack_lvl+0x100/0x190
[  239.657856][ T8421]  should_fail_ex.cold+0x5/0xa
[  239.657902][ T8421]  should_failslab+0xc2/0x120
[  239.657941][ T8421]  kmem_cache_alloc_noprof+0x83/0x780
[  239.657975][ T8421]  ? seq_open+0x55/0x170
[  239.658018][ T8421]  ? __pfx_proc_single_show+0x10/0x10
[  239.658048][ T8421]  ? seq_open+0x55/0x170
[  239.658085][ T8421]  seq_open+0x55/0x170
[  239.658123][ T8421]  ? __pfx_proc_single_show+0x10/0x10
[  239.658153][ T8421]  single_open+0xfc/0x1d0
[  239.658196][ T8421]  do_dentry_open+0x73e/0x1570
[  239.658229][ T8421]  ? __pfx_proc_single_open+0x10/0x10
[  239.658265][ T8421]  ? security_inode_permission+0xbf/0x250
[  239.658314][ T8421]  vfs_open+0x82/0x3f0
[  239.658359][ T8421]  path_openat+0x21dc/0x3120
[  239.658403][ T8421]  ? __pfx_path_openat+0x10/0x10
[  239.658450][ T8421]  do_filp_open+0x1f7/0x420
[  239.658487][ T8421]  ? __pfx_do_filp_open+0x10/0x10
[  239.658532][ T8421]  ? __pfx_kfree_link+0x10/0x10
[  239.658584][ T8421]  ? _raw_spin_unlock+0x28/0x50
[  239.658612][ T8421]  ? alloc_fd+0x476/0x790
[  239.658654][ T8421]  do_sys_openat2+0x12e/0x220
[  239.658696][ T8421]  ? __pfx_do_sys_openat2+0x10/0x10
[  239.658741][ T8421]  ? __fget_files+0x21f/0x3d0
[  239.658779][ T8421]  __x64_sys_openat+0x12d/0x210
[  239.658822][ T8421]  ? __pfx___x64_sys_openat+0x10/0x10
[  239.658863][ T8421]  ? xfd_validate_state+0x129/0x190
[  239.658918][ T8421]  do_syscall_64+0xc9/0xf80
[  239.658954][ T8421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.658983][ T8421] RIP: 0033:0x7f3efff9aeb9
[  239.659005][ T8421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.659032][ T8421] RSP: 002b:00007f3f00e63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  239.659060][ T8421] RAX: ffffffffffffffda RBX: 00007f3f00215fa0 RCX: 00007f3efff9aeb9
[  239.659079][ T8421] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  239.659097][ T8421] RBP: 00007f3f00008c1f R08: 0000000000000000 R09: 0000000000000000
[  239.659114][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.659131][ T8421] R13: 00007f3f00216038 R14: 00007f3f00215fa0 R15: 00007ffcc4c296c8
[  239.659169][ T8421]  </TASK>
[  242.277254][ T8477] nfsd: Unknown parameter '�^����'��	*h��]<�Ľ;�	j�y|M���Q
f.�$��2�L�'
[  242.831252][   T30] audit: type=1806 audit(1770535761.418:7): xattr="." res=0
[  243.031837][ T8485] binder: 8484:8485 ioctl c018620c 0 returned -1
[  243.199795][ T8495] netlink: 330 bytes leftover after parsing attributes in process `syz.3.496'.
[  243.500380][ T8504] nfsd: Unknown parameter '�^����'��	*h��]<�Ľ;�	j�y|M���Q
f.�$��2�L�'
[  243.918993][ T8511] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7f8d2976d pfn:0x78c00
[  243.929419][ T8511] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff)
[  243.941390][ T8511] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000
[  243.950099][ T8511] raw: 00000007f8d2976d 0000000000000000 0000000400000002 0000000000000000
[  243.958907][ T8511] page dumped because: unmovable page
[  243.964355][ T8511] page_owner tracks the page as allocated
[  243.971322][ T8511] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5819, tgid 5819 (syz-executor), ts 84250441917, free_ts 80340579922
[  243.991275][ T8511]  post_alloc_hook+0x1e1/0x250
[  243.996293][ T8511]  get_page_from_freelist+0xe3d/0x2e10
[  244.002789][ T8511]  __alloc_frozen_pages_noprof+0x26c/0x2410
[  244.008986][ T8511]  alloc_pages_mpol+0x1fb/0x550
[  244.013978][ T8511]  alloc_pages_noprof+0x131/0x390
[  244.019127][ T8511]  __vmalloc_node_range_noprof+0xe5c/0x1530
[  244.025149][ T8511]  vmalloc_user_noprof+0x9e/0xe0
[  244.030253][ T8511]  kcov_ioctl+0x4c/0x720
[  244.034531][ T8511]  __x64_sys_ioctl+0x18e/0x210
[  244.039649][ T8511]  do_syscall_64+0xc9/0xf80
[  244.045645][ T8511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.051740][ T8511] page last free pid 5811 tgid 5811 stack trace:
[  244.060161][ T8511]  free_unref_folios+0xb2a/0x1760
[  244.065444][ T8511]  folios_put_refs+0x53c/0x840
[  244.070431][ T8511]  free_pages_and_swap_cache+0x242/0x480
[  244.076104][ T8511]  __tlb_batch_free_encoded_pages+0xe9/0x280
[  244.083994][ T8511]  tlb_finish_mmu+0x1b0/0x810
[  244.088805][ T8511]  vms_clear_ptes+0x55c/0x790
[  244.093621][ T8511]  vms_complete_munmap_vmas+0x1cf/0x970
[  244.099573][ T8511]  do_vmi_align_munmap+0x44f/0x5f0
[  244.104902][ T8511]  do_vmi_munmap+0x1f8/0x3e0
[  244.109577][ T8511]  __vm_munmap+0x196/0x390
[  244.114178][ T8511]  __x64_sys_munmap+0x59/0x80
[  244.119048][ T8511]  do_syscall_64+0xc9/0xf80
[  244.123591][ T8511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.649458][ T8526] netlink: 330 bytes leftover after parsing attributes in process `syz.1.504'.
[  244.918026][ T8538] netlink: 234 bytes leftover after parsing attributes in process `syz.1.507'.
[  245.224771][ T8281] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7
[  245.813325][ T8562] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14
[  247.410219][ T8596] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input15
[  249.664590][ T8281] Bluetooth: hci3: unexpected event 0x33 length: 124 > 10
[  249.723521][ T8649] NFSD: Failed to start, no listeners configured.
[  250.719052][ T5825] Process accounting paused
[  250.723039][ T8684] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  250.742666][ T8685] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  250.986660][ T8693] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  250.996378][ T8693] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.014858][ T8693] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.025819][ T8693] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  251.049209][ T8693] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.517486][ T8692] chnl_net:caif_netlink_parms(): no params data found
[  251.700833][ T8692] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.712818][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.726772][ T8692] bridge_slave_0: entered allmulticast mode
[  251.735516][ T8692] bridge_slave_0: entered promiscuous mode
[  251.760001][ T8692] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.767581][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.775054][ T8692] bridge_slave_1: entered allmulticast mode
[  251.783741][ T8692] bridge_slave_1: entered promiscuous mode
[  251.860978][ T8692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.879733][ T8692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.935137][ T8692] team0: Port device team_slave_0 added
[  251.944547][ T8692] team0: Port device team_slave_1 added
[  252.008380][ T8692] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.015489][ T8692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  252.066655][ T8692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.110020][ T8722] netlink: 330 bytes leftover after parsing attributes in process `syz.1.546'.
[  252.121119][ T8692] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.128423][ T8692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  252.177687][ T8692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.327967][ T8692] hsr_slave_0: entered promiscuous mode
[  252.348635][ T8692] hsr_slave_1: entered promiscuous mode
[  252.368944][ T8692] debugfs: 'hsr0' already exists in 'hsr'
[  252.394194][ T8692] Cannot create hsr debugfs directory
[  252.532106][ T8734] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7f8d2976d pfn:0x78c00
[  252.553191][ T8734] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff)
[  252.567532][ T8734] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000
[  252.614796][ T8734] raw: 00000007f8d2976d 0000000000000000 0000000400000002 0000000000000000
[  252.633239][ T8734] page dumped because: unmovable page
[  252.654596][ T8734] page_owner tracks the page as allocated
[  252.688182][ T8734] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5819, tgid 5819 (syz-executor), ts 84250441917, free_ts 80340579922
[  252.718441][ T8734]  post_alloc_hook+0x1e1/0x250
[  252.724204][ T8734]  get_page_from_freelist+0xe3d/0x2e10
[  252.730396][ T8734]  __alloc_frozen_pages_noprof+0x26c/0x2410
[  252.736898][ T8734]  alloc_pages_mpol+0x1fb/0x550
[  252.742480][ T8734]  alloc_pages_noprof+0x131/0x390
[  252.812024][ T8734]  __vmalloc_node_range_noprof+0xe5c/0x1530
[  252.854460][ T8734]  vmalloc_user_noprof+0x9e/0xe0
[  252.870810][ T8734]  kcov_ioctl+0x4c/0x720
[  252.875131][ T8734]  __x64_sys_ioctl+0x18e/0x210
[  252.891501][ T8734]  do_syscall_64+0xc9/0xf80
[  252.924400][ T8734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.953750][ T8734] page last free pid 5811 tgid 5811 stack trace:
[  252.986998][ T8692] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  253.007458][ T8734]  free_unref_folios+0xb2a/0x1760
[  253.012587][ T8734]  folios_put_refs+0x53c/0x840
[  253.017375][ T8734]  free_pages_and_swap_cache+0x242/0x480
[  253.065687][ T8734]  __tlb_batch_free_encoded_pages+0xe9/0x280
[  253.086098][ T8734]  tlb_finish_mmu+0x1b0/0x810
[  253.097656][ T8693] Bluetooth: hci4: command tx timeout
[  253.105254][ T8734]  vms_clear_ptes+0x55c/0x790
[  253.111771][ T8734]  vms_complete_munmap_vmas+0x1cf/0x970
[  253.127494][ T8734]  do_vmi_align_munmap+0x44f/0x5f0
[  253.132720][ T8734]  do_vmi_munmap+0x1f8/0x3e0
[  253.137322][ T8734]  __vm_munmap+0x196/0x390
[  253.152595][ T8734]  __x64_sys_munmap+0x59/0x80
[  253.162121][ T8734]  do_syscall_64+0xc9/0xf80
[  253.166929][ T8734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.183925][ T8692] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  253.203308][ T8692] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  253.223079][ T8692] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  253.559981][ T8692] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.594889][ T8692] 8021q: adding VLAN 0 to HW filter on device team0
[  253.629634][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.629778][ T8366] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.635930][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.636040][ T8279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.689537][ T8766] netlink: 'syz.3.556': attribute type 11 has an invalid length.
[  253.689570][ T8766] netlink: 'syz.3.556': attribute type 11 has an invalid length.
[  253.689581][ T8766] netlink: 'syz.3.556': attribute type 11 has an invalid length.
[  253.689592][ T8766] netlink: 'syz.3.556': attribute type 11 has an invalid length.
[  253.690146][ T8765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.757628][ T8692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  254.019143][ T8778] futex_wake_op: syz.3.559 tries to shift op by -2048; fix this program
[  254.019270][ T8778] futex_wake_op: syz.3.559 tries to shift op by -2048; fix this program
[  254.114704][ T8692] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.703473][ T8692] veth0_vlan: entered promiscuous mode
[  254.726123][ T8692] veth1_vlan: entered promiscuous mode
[  254.766488][ T8692] veth0_macvtap: entered promiscuous mode
[  254.778087][ T8692] veth1_macvtap: entered promiscuous mode
[  254.822206][ T8692] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.854803][ T8692] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.884231][ T8273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.906127][ T8273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.934837][ T8273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.986380][ T8273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.063994][ T8279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.092963][ T8279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.136390][ T8324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.146518][ T8324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.178519][ T8693] Bluetooth: hci4: command tx timeout
[  256.119011][ T8828] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  256.126486][ T8828] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  256.133184][ T8828] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  256.143136][ T8828] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  256.177687][ T8828] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  256.193464][ T8828] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  256.214303][ T8828] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  257.233920][ T8858] netlink: 25 bytes leftover after parsing attributes in process `syz.4.579'.
[  258.138421][ T8281] Bluetooth: hci0: command 0x0c1a tx timeout
[  258.217883][ T8281] Bluetooth: hci4: command 0x0419 tx timeout
[  258.223962][ T8281] Bluetooth: hci3: command 0x0c1a tx timeout
[  258.230154][ T8693] Bluetooth: hci2: command 0x0c1a tx timeout
[  258.236266][ T8693] Bluetooth: hci1: command 0x0c1a tx timeout
[  259.745544][ T8936] ptp ptp0: new virtual clock ptp1
[  259.758129][ T8936] ptp ptp0: guarantee physical clock free running
[  259.768149][ T8936] ptp ptp0: delete virtual clock ptp1
[  259.802464][ T8936] ptp ptp0: only physical clock in use now
[  259.842155][ T8936] : Can't lookup blockdev
[  259.993179][ T8941] FAULT_INJECTION: forcing a failure.
[  259.993179][ T8941] name failslab, interval 1, probability 0, space 0, times 0
[  260.016249][ T8941] CPU: 0 UID: 0 PID: 8941 Comm: syz.4.596 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  260.016295][ T8941] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  260.016306][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  260.016327][ T8941] Call Trace:
[  260.016337][ T8941]  <TASK>
[  260.016348][ T8941]  dump_stack_lvl+0x100/0x190
[  260.016387][ T8941]  should_fail_ex.cold+0x5/0xa
[  260.016435][ T8941]  should_failslab+0xc2/0x120
[  260.016473][ T8941]  kmem_cache_alloc_lru_noprof+0x8e/0x7d0
[  260.016513][ T8941]  ? sock_alloc_inode+0x25/0x1c0
[  260.016547][ T8941]  ? __pfx_sock_alloc_inode+0x10/0x10
[  260.016574][ T8941]  ? sock_alloc_inode+0x25/0x1c0
[  260.016600][ T8941]  ? apparmor_socket_create+0x59/0x310
[  260.016637][ T8941]  sock_alloc_inode+0x25/0x1c0
[  260.016664][ T8941]  alloc_inode+0x68/0x250
[  260.016705][ T8941]  sock_alloc+0x44/0x280
[  260.016728][ T8941]  ? security_socket_create+0x7f/0x250
[  260.016766][ T8941]  __sock_create+0xc2/0x860
[  260.016803][ T8941]  __sys_socketpair+0x1e4/0x5b0
[  260.016840][ T8941]  ? __pfx___sys_socketpair+0x10/0x10
[  260.016878][ T8941]  ? tomoyo_file_fcntl+0x6c/0xc0
[  260.016918][ T8941]  __x64_sys_socketpair+0x96/0x100
[  260.016951][ T8941]  ? lockdep_hardirqs_on+0x78/0x100
[  260.016985][ T8941]  do_syscall_64+0xc9/0xf80
[  260.017022][ T8941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.017050][ T8941] RIP: 0033:0x7fdcf4f9aeb9
[  260.017072][ T8941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.017100][ T8941] RSP: 002b:00007fdcf5dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  260.017131][ T8941] RAX: ffffffffffffffda RBX: 00007fdcf5215fa0 RCX: 00007fdcf4f9aeb9
[  260.017151][ T8941] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  260.017168][ T8941] RBP: 00007fdcf5008c1f R08: 0000000000000000 R09: 0000000000000000
[  260.017185][ T8941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.017202][ T8941] R13: 00007fdcf5216038 R14: 00007fdcf5215fa0 R15: 00007ffd088d8788
[  260.017247][ T8941]  </TASK>
[  260.250790][ T8941] socket: no more sockets
[  260.301012][ T8892] Bluetooth: hci4: command 0x0419 tx timeout
[  260.990951][ T8967] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  261.023153][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  261.029775][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  261.930892][ T8968] Process accounting paused
[  262.381145][ T8892] Bluetooth: hci4: command 0x0419 tx timeout
[  263.114737][ T9014] FAULT_INJECTION: forcing a failure.
[  263.114737][ T9014] name fail_futex, interval 1, probability 0, space 0, times 0
[  263.137732][ T9014] CPU: 1 UID: 0 PID: 9014 Comm: syz.2.615 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  263.137780][ T9014] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  263.137791][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  263.137806][ T9014] Call Trace:
[  263.137815][ T9014]  <TASK>
[  263.137826][ T9014]  dump_stack_lvl+0x100/0x190
[  263.137864][ T9014]  should_fail_ex.cold+0x5/0xa
[  263.137906][ T9014]  ? get_pid_task+0xfc/0x250
[  263.137946][ T9014]  get_futex_key+0x1d2/0x1620
[  263.137984][ T9014]  ? __pfx_get_futex_key+0x10/0x10
[  263.138016][ T9014]  ? kfree+0x2a9/0x690
[  263.138055][ T9014]  futex_wake+0xea/0x530
[  263.138101][ T9014]  ? __pfx_futex_wake+0x10/0x10
[  263.138143][ T9014]  ? fdget_pos+0x2aa/0x380
[  263.138178][ T9014]  ? do_writev+0x214/0x340
[  263.138215][ T9014]  do_futex+0x32b/0x350
[  263.138262][ T9014]  ? __pfx_do_futex+0x10/0x10
[  263.138304][ T9014]  ? __fget_files+0x21f/0x3d0
[  263.138339][ T9014]  __x64_sys_futex+0x34f/0x4d0
[  263.138382][ T9014]  ? __pfx___x64_sys_futex+0x10/0x10
[  263.138421][ T9014]  ? __pfx_do_writev+0x10/0x10
[  263.138460][ T9014]  do_syscall_64+0xc9/0xf80
[  263.138498][ T9014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.138527][ T9014] RIP: 0033:0x7f3efff9aeb9
[  263.138548][ T9014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.138576][ T9014] RSP: 002b:00007f3f00e630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  263.138602][ T9014] RAX: ffffffffffffffda RBX: 00007f3f00215fa8 RCX: 00007f3efff9aeb9
[  263.138621][ T9014] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3f00215fac
[  263.138640][ T9014] RBP: 00007f3f00215fa0 R08: 0000000000000000 R09: 0000000000000000
[  263.138658][ T9014] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  263.138674][ T9014] R13: 00007f3f00216038 R14: 00007ffcc4c295e0 R15: 00007ffcc4c296c8
[  263.138712][ T9014]  </TASK>
[  263.730354][ T9015] nbd: must specify a size in bytes for the device
[  264.458317][ T8892] Bluetooth: hci4: command 0x0419 tx timeout
[  266.126502][ T9063] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  266.187515][ T9063] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  267.639375][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'.
[  268.257562][ T9104] FAULT_INJECTION: forcing a failure.
[  268.257562][ T9104] name fail_futex, interval 1, probability 0, space 0, times 0
[  268.400825][ T9104] CPU: 1 UID: 0 PID: 9104 Comm: syz.4.630 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  268.400873][ T9104] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  268.400884][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  268.400900][ T9104] Call Trace:
[  268.400909][ T9104]  <TASK>
[  268.400919][ T9104]  dump_stack_lvl+0x100/0x190
[  268.400959][ T9104]  should_fail_ex.cold+0x5/0xa
[  268.400994][ T9104]  ? get_pid_task+0xfc/0x250
[  268.401033][ T9104]  get_futex_key+0x1d2/0x1620
[  268.401070][ T9104]  ? __pfx_get_futex_key+0x10/0x10
[  268.401100][ T9104]  ? kfree+0x2a9/0x690
[  268.401136][ T9104]  futex_wake+0xea/0x530
[  268.401182][ T9104]  ? __pfx_futex_wake+0x10/0x10
[  268.401222][ T9104]  ? fdget_pos+0x2aa/0x380
[  268.401254][ T9104]  ? do_writev+0x214/0x340
[  268.401292][ T9104]  do_futex+0x32b/0x350
[  268.401329][ T9104]  ? __pfx_do_futex+0x10/0x10
[  268.401367][ T9104]  ? __fget_files+0x21f/0x3d0
[  268.401403][ T9104]  __x64_sys_futex+0x34f/0x4d0
[  268.401446][ T9104]  ? __pfx___x64_sys_futex+0x10/0x10
[  268.401487][ T9104]  ? __pfx_do_writev+0x10/0x10
[  268.401523][ T9104]  do_syscall_64+0xc9/0xf80
[  268.401561][ T9104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.401588][ T9104] RIP: 0033:0x7fdcf4f9aeb9
[  268.401610][ T9104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  268.401638][ T9104] RSP: 002b:00007fdcf5dcb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  268.401666][ T9104] RAX: ffffffffffffffda RBX: 00007fdcf5215fa8 RCX: 00007fdcf4f9aeb9
[  268.401683][ T9104] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdcf5215fac
[  268.401699][ T9104] RBP: 00007fdcf5215fa0 R08: 0000000000000000 R09: 0000000000000000
[  268.401716][ T9104] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  268.401730][ T9104] R13: 00007fdcf5216038 R14: 00007ffd088d86a0 R15: 00007ffd088d8788
[  268.401775][ T9104]  </TASK>
[  269.021750][ T9117] FAULT_INJECTION: forcing a failure.
[  269.021750][ T9117] name failslab, interval 1, probability 0, space 0, times 0
[  269.050398][ T9117] CPU: 0 UID: 0 PID: 9117 Comm: syz.2.632 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  269.050450][ T9117] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  269.050461][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  269.050480][ T9117] Call Trace:
[  269.050490][ T9117]  <TASK>
[  269.050500][ T9117]  dump_stack_lvl+0x100/0x190
[  269.050540][ T9117]  should_fail_ex.cold+0x5/0xa
[  269.050587][ T9117]  should_failslab+0xc2/0x120
[  269.050628][ T9117]  kmem_cache_alloc_noprof+0x83/0x780
[  269.050663][ T9117]  ? __pfx_map_id_range_down+0x10/0x10
[  269.050693][ T9117]  ? security_inode_alloc+0x3b/0x2c0
[  269.050770][ T9117]  ? security_inode_alloc+0x3b/0x2c0
[  269.050806][ T9117]  security_inode_alloc+0x3b/0x2c0
[  269.050844][ T9117]  inode_init_always_gfp+0xced/0x1040
[  269.050884][ T9117]  alloc_inode+0x8e/0x250
[  269.050923][ T9117]  path_from_stashed+0x25b/0x750
[  269.050957][ T9117]  ? do_raw_spin_unlock+0x145/0x1e0
[  269.051005][ T9117]  ns_get_path+0x60/0x80
[  269.051041][ T9117]  proc_ns_get_link+0x121/0x230
[  269.051080][ T9117]  ? __pfx_proc_ns_get_link+0x10/0x10
[  269.051122][ T9117]  ? atime_needs_update+0x8b/0x6b0
[  269.051167][ T9117]  pick_link+0xd17/0x13c0
[  269.051194][ T9117]  ? __pfx_proc_ns_get_link+0x10/0x10
[  269.051236][ T9117]  step_into_slowpath+0x6c2/0xf50
[  269.051271][ T9117]  ? __pfx_step_into_slowpath+0x10/0x10
[  269.051298][ T9117]  ? find_held_lock+0x2b/0x80
[  269.051338][ T9117]  path_openat+0xf95/0x3120
[  269.051383][ T9117]  ? __pfx_path_openat+0x10/0x10
[  269.051429][ T9117]  do_filp_open+0x1f7/0x420
[  269.051464][ T9117]  ? __pfx_do_filp_open+0x10/0x10
[  269.051523][ T9117]  ? _raw_spin_unlock+0x28/0x50
[  269.051550][ T9117]  ? alloc_fd+0x476/0x790
[  269.051592][ T9117]  do_sys_openat2+0x12e/0x220
[  269.051635][ T9117]  ? __pfx_do_sys_openat2+0x10/0x10
[  269.051679][ T9117]  ? __fget_files+0x21f/0x3d0
[  269.051725][ T9117]  __x64_sys_openat+0x12d/0x210
[  269.051769][ T9117]  ? __pfx___x64_sys_openat+0x10/0x10
[  269.051811][ T9117]  ? xfd_validate_state+0x129/0x190
[  269.051868][ T9117]  do_syscall_64+0xc9/0xf80
[  269.051905][ T9117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.051934][ T9117] RIP: 0033:0x7f3efff5b78e
[  269.051956][ T9117] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  269.051984][ T9117] RSP: 002b:00007f3f00e62ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  269.052013][ T9117] RAX: ffffffffffffffda RBX: 00007f3f00e636c0 RCX: 00007f3efff5b78e
[  269.052031][ T9117] RDX: 0000000000000002 RSI: 00007f3f00e62f90 RDI: ffffffffffffff9c
[  269.052048][ T9117] RBP: 00007f3f00008c1f R08: 0000000000000000 R09: 0000000000000000
[  269.052065][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.052081][ T9117] R13: 00007f3f00216038 R14: 00007f3f00215fa0 R15: 00007ffcc4c296c8
[  269.052118][ T9117]  </TASK>
[  269.862548][ T8274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  269.873390][ T8274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  269.882692][ T8274] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  269.891171][ T8274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  269.900453][ T8274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  270.172010][ T8274] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  270.675388][ T9136] chnl_net:caif_netlink_parms(): no params data found
[  270.937344][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.955267][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.963324][ T9136] bridge_slave_0: entered allmulticast mode
[  270.973247][ T9136] bridge_slave_0: entered promiscuous mode
[  270.983166][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.990889][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.998529][ T9136] bridge_slave_1: entered allmulticast mode
[  271.036312][ T9136] bridge_slave_1: entered promiscuous mode
[  271.111827][ T9136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.125134][ T9136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.201052][ T9136] team0: Port device team_slave_0 added
[  271.219347][ T9136] team0: Port device team_slave_1 added
[  271.347527][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.372627][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  271.427532][ T9136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.460483][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.477683][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  271.557749][ T9136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.754311][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'.
[  271.760578][ T9136] hsr_slave_0: entered promiscuous mode
[  271.782699][ T9136] hsr_slave_1: entered promiscuous mode
[  271.798006][ T9136] debugfs: 'hsr0' already exists in 'hsr'
[  271.814936][ T9136] Cannot create hsr debugfs directory
[  271.977671][ T8892] Bluetooth: hci5: command tx timeout
[  272.384286][ T9136] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  272.428967][ T9136] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  272.451630][ T9136] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  272.473979][ T9136] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  272.818264][ T9136] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.859179][ T9136] 8021q: adding VLAN 0 to HW filter on device team0
[  272.873725][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.880952][ T8609] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.920360][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.927665][ T8273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.216044][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'.
[  273.441424][ T9136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.870386][ T9226] FAULT_INJECTION: forcing a failure.
[  273.870386][ T9226] name failslab, interval 1, probability 0, space 0, times 0
[  273.887124][ T9226] CPU: 1 UID: 0 PID: 9226 Comm: syz.4.652 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  273.887172][ T9226] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  273.887183][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  273.887199][ T9226] Call Trace:
[  273.887208][ T9226]  <TASK>
[  273.887218][ T9226]  dump_stack_lvl+0x100/0x190
[  273.887257][ T9226]  should_fail_ex.cold+0x5/0xa
[  273.887300][ T9226]  should_failslab+0xc2/0x120
[  273.887338][ T9226]  kmem_cache_alloc_noprof+0x83/0x780
[  273.887377][ T9226]  ? __pfx_map_id_range_down+0x10/0x10
[  273.887403][ T9226]  ? security_inode_alloc+0x3b/0x2c0
[  273.887445][ T9226]  ? security_inode_alloc+0x3b/0x2c0
[  273.887478][ T9226]  security_inode_alloc+0x3b/0x2c0
[  273.887512][ T9226]  inode_init_always_gfp+0xced/0x1040
[  273.887550][ T9226]  alloc_inode+0x8e/0x250
[  273.887589][ T9226]  path_from_stashed+0x25b/0x750
[  273.887621][ T9226]  ? do_raw_spin_unlock+0x145/0x1e0
[  273.887670][ T9226]  ns_get_path+0x60/0x80
[  273.887703][ T9226]  proc_ns_get_link+0x121/0x230
[  273.887740][ T9226]  ? __pfx_proc_ns_get_link+0x10/0x10
[  273.887780][ T9226]  ? atime_needs_update+0x8b/0x6b0
[  273.887825][ T9226]  pick_link+0xd17/0x13c0
[  273.887850][ T9226]  ? __pfx_proc_ns_get_link+0x10/0x10
[  273.887890][ T9226]  step_into_slowpath+0x6c2/0xf50
[  273.887925][ T9226]  ? __pfx_step_into_slowpath+0x10/0x10
[  273.887950][ T9226]  ? find_held_lock+0x2b/0x80
[  273.887988][ T9226]  path_openat+0xf95/0x3120
[  273.888033][ T9226]  ? __pfx_path_openat+0x10/0x10
[  273.888091][ T9226]  do_filp_open+0x1f7/0x420
[  273.888125][ T9226]  ? __pfx_do_filp_open+0x10/0x10
[  273.888182][ T9226]  ? _raw_spin_unlock+0x28/0x50
[  273.888210][ T9226]  ? alloc_fd+0x476/0x790
[  273.888248][ T9226]  do_sys_openat2+0x12e/0x220
[  273.888289][ T9226]  ? __pfx_do_sys_openat2+0x10/0x10
[  273.888333][ T9226]  ? __fget_files+0x21f/0x3d0
[  273.888370][ T9226]  __x64_sys_openat+0x12d/0x210
[  273.888412][ T9226]  ? __pfx___x64_sys_openat+0x10/0x10
[  273.888452][ T9226]  ? xfd_validate_state+0x129/0x190
[  273.888505][ T9226]  do_syscall_64+0xc9/0xf80
[  273.888539][ T9226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.888566][ T9226] RIP: 0033:0x7fdcf4f5b78e
[  273.888587][ T9226] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  273.888615][ T9226] RSP: 002b:00007fdcf5dcaec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  273.888641][ T9226] RAX: ffffffffffffffda RBX: 00007fdcf5dcb6c0 RCX: 00007fdcf4f5b78e
[  273.888659][ T9226] RDX: 0000000000000002 RSI: 00007fdcf5dcaf90 RDI: ffffffffffffff9c
[  273.888674][ T9226] RBP: 00007fdcf5008c1f R08: 0000000000000000 R09: 0000000000000000
[  273.888689][ T9226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  273.888703][ T9226] R13: 00007fdcf5216038 R14: 00007fdcf5215fa0 R15: 00007ffd088d8788
[  273.888735][ T9226]  </TASK>
[  273.895001][ T9136] veth0_vlan: entered promiscuous mode
[  274.192405][ T8892] Bluetooth: hci5: command tx timeout
[  274.235126][ T9136] veth1_vlan: entered promiscuous mode
[  274.284172][ T9136] veth0_macvtap: entered promiscuous mode
[  274.296396][ T9136] veth1_macvtap: entered promiscuous mode
[  274.331710][ T9136] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.353924][ T9136] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.392126][ T8609] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.439695][ T8609] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.463196][ T8609] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.512351][ T8609] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.628021][ T8609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.651239][ T8609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.779176][ T8273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.787141][ T8273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.968392][ T9248] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.113134][ T9258] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  275.723708][ T9271] binder: 9270:9271 ioctl c018620c 0 returned -1
[  275.732782][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.662'.
[  276.217454][ T8892] Bluetooth: hci5: command tx timeout
[  276.313210][ T9285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.665'.
[  276.659754][ T9292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.667'.
[  277.408540][ T9310] futex_wake_op: syz.3.671 tries to shift op by -2048; fix this program
[  277.417295][ T9310] futex_wake_op: syz.3.671 tries to shift op by -2048; fix this program
[  277.557063][ T9313] debugfs: '!PjE�r��҄y�*�"�l-���y–��L̓���]' already exists in 'ieee80211'
[  277.771483][ T9321] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  278.298350][ T8892] Bluetooth: hci5: command tx timeout
[  280.689054][ T9374] random: crng reseeded on system resumption
[  282.468870][ T9427] bond0: no command found in slaves file - use +ifname or -ifname
[  284.385540][ T9483] random: crng reseeded on system resumption
[  284.439294][ T9483] hub 1-0:1.0: USB hub found
[  284.467318][ T9483] hub 1-0:1.0: 1 port detected
[  284.675323][ T9492] FAULT_INJECTION: forcing a failure.
[  284.675323][ T9492] name failslab, interval 1, probability 0, space 0, times 0
[  284.701216][ T9492] CPU: 0 UID: 0 PID: 9492 Comm: syz.4.719 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  284.701245][ T9492] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  284.701250][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  284.701260][ T9492] Call Trace:
[  284.701265][ T9492]  <TASK>
[  284.701272][ T9492]  dump_stack_lvl+0x100/0x190
[  284.701296][ T9492]  should_fail_ex.cold+0x5/0xa
[  284.701321][ T9492]  should_failslab+0xc2/0x120
[  284.701345][ T9492]  __kmalloc_cache_noprof+0x80/0x810
[  284.701362][ T9492]  ? vkms_plane_duplicate_state+0x87/0x130
[  284.701386][ T9492]  ? vkms_plane_duplicate_state+0x87/0x130
[  284.701404][ T9492]  vkms_plane_duplicate_state+0x87/0x130
[  284.701424][ T9492]  drm_atomic_get_plane_state+0x279/0x760
[  284.701444][ T9492]  drm_client_modeset_commit_atomic+0x237/0x7e0
[  284.701466][ T9492]  ? trace_contention_end+0xd6/0x110
[  284.701487][ T9492]  ? __mutex_lock+0x26a/0x1b90
[  284.701516][ T9492]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  284.701537][ T9492]  ? drm_master_internal_acquire+0x21/0x80
[  284.701577][ T9492]  drm_client_modeset_commit_locked+0x14d/0x580
[  284.701601][ T9492]  drm_client_modeset_commit+0x4f/0x80
[  284.701622][ T9492]  __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160
[  284.701646][ T9492]  drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0
[  284.701668][ T9492]  drm_fbdev_client_restore+0x1b/0x30
[  284.701685][ T9492]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  284.701700][ T9492]  drm_client_dev_restore+0x205/0x2a0
[  284.701724][ T9492]  drm_release+0x2c6/0x360
[  284.701743][ T9492]  ? __pfx_drm_release+0x10/0x10
[  284.701761][ T9492]  __fput+0x3ff/0xb40
[  284.701785][ T9492]  task_work_run+0x150/0x240
[  284.701809][ T9492]  ? __pfx_task_work_run+0x10/0x10
[  284.701836][ T9492]  exit_to_user_mode_loop+0x100/0x4b0
[  284.701868][ T9492]  ? rcu_is_watching+0x12/0xc0
[  284.701884][ T9492]  do_syscall_64+0x4ea/0xf80
[  284.701905][ T9492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.701920][ T9492] RIP: 0033:0x7fdcf4f9aeb9
[  284.701933][ T9492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  284.701947][ T9492] RSP: 002b:00007fdcf5daa028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  284.701962][ T9492] RAX: 0000000000000000 RBX: 00007fdcf5216090 RCX: 00007fdcf4f9aeb9
[  284.701972][ T9492] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  284.701981][ T9492] RBP: 00007fdcf5008c1f R08: 0000000000000000 R09: 0000000000000000
[  284.701990][ T9492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.701999][ T9492] R13: 00007fdcf5216128 R14: 00007fdcf5216090 R15: 00007ffd088d8788
[  284.702027][ T9492]  </TASK>
[  285.365995][ T8274] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  285.375393][ T8274] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  285.383874][ T8274] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  285.391919][ T8274] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  285.400541][ T8274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  285.978838][ T9500] chnl_net:caif_netlink_parms(): no params data found
[  286.706196][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.721331][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.770252][ T9500] bridge_slave_0: entered allmulticast mode
[  286.778503][ T9500] bridge_slave_0: entered promiscuous mode
[  286.799874][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.815186][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.833055][ T9500] bridge_slave_1: entered allmulticast mode
[  286.872684][ T9500] bridge_slave_1: entered promiscuous mode
[  287.101701][ T9500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.121610][ T9500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.184289][ T9500] team0: Port device team_slave_0 added
[  287.201147][ T9500] team0: Port device team_slave_1 added
[  287.465690][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.472947][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.506663][ T8274] Bluetooth: hci6: command tx timeout
[  287.537696][ T9500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.660262][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.673911][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.727429][ T9500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.909540][ T9500] hsr_slave_0: entered promiscuous mode
[  287.916771][ T9500] hsr_slave_1: entered promiscuous mode
[  287.924233][ T9500] debugfs: 'hsr0' already exists in 'hsr'
[  287.930528][ T9500] Cannot create hsr debugfs directory
[  288.322427][ T9553] FAULT_INJECTION: forcing a failure.
[  288.322427][ T9553] name fail_futex, interval 1, probability 0, space 0, times 0
[  288.348054][ T9553] CPU: 1 UID: 0 PID: 9553 Comm: syz.4.731 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  288.348098][ T9553] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  288.348108][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  288.348122][ T9553] Call Trace:
[  288.348131][ T9553]  <TASK>
[  288.348141][ T9553]  dump_stack_lvl+0x100/0x190
[  288.348175][ T9553]  should_fail_ex.cold+0x5/0xa
[  288.348216][ T9553]  get_futex_key+0x106f/0x1620
[  288.348253][ T9553]  ? __pfx_get_futex_key+0x10/0x10
[  288.348298][ T9553]  futex_wake+0xea/0x530
[  288.348340][ T9553]  ? __pfx_futex_wake+0x10/0x10
[  288.348379][ T9553]  ? exit_mm_release+0x19/0x30
[  288.348423][ T9553]  do_futex+0x32b/0x350
[  288.348455][ T9553]  ? __pfx_do_futex+0x10/0x10
[  288.348486][ T9553]  ? __might_fault+0xc5/0x140
[  288.348524][ T9553]  mm_release+0x24a/0x2f0
[  288.348554][ T9553]  do_exit+0x675/0x2a30
[  288.348596][ T9553]  ? __pfx_do_exit+0x10/0x10
[  288.348631][ T9553]  ? do_raw_spin_lock+0x128/0x260
[  288.348667][ T9553]  ? find_held_lock+0x2b/0x80
[  288.348692][ T9553]  ? get_signal+0x7e0/0x21e0
[  288.348723][ T9553]  do_group_exit+0xd5/0x2a0
[  288.348762][ T9553]  get_signal+0x1ec7/0x21e0
[  288.348797][ T9553]  ? find_held_lock+0x2b/0x80
[  288.348827][ T9553]  ? __pfx_get_signal+0x10/0x10
[  288.348857][ T9553]  ? do_futex+0x192/0x350
[  288.348895][ T9553]  arch_do_signal_or_restart+0x91/0x770
[  288.348932][ T9553]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  288.348982][ T9553]  ? __pfx___x64_sys_futex+0x10/0x10
[  288.349014][ T9553]  ? xfd_validate_state+0x129/0x190
[  288.349059][ T9553]  exit_to_user_mode_loop+0x86/0x4b0
[  288.349094][ T9553]  ? rcu_is_watching+0x12/0xc0
[  288.349122][ T9553]  do_syscall_64+0x4ea/0xf80
[  288.349155][ T9553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.349181][ T9553] RIP: 0033:0x7fdcf4f9aeb9
[  288.349202][ T9553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  288.349227][ T9553] RSP: 002b:00007fdcf5dcb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  288.349251][ T9553] RAX: fffffffffffffe00 RBX: 00007fdcf5215fa8 RCX: 00007fdcf4f9aeb9
[  288.349268][ T9553] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdcf5215fa8
[  288.349284][ T9553] RBP: 00007fdcf5215fa0 R08: 0000000000000000 R09: 0000000000000000
[  288.349299][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.349314][ T9553] R13: 00007fdcf5216038 R14: 00007ffd088d86a0 R15: 00007ffd088d8788
[  288.349349][ T9553]  </TASK>
[  289.243551][ T9500] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  289.577508][ T8274] Bluetooth: hci6: command tx timeout
[  289.639330][ T9500] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  289.671931][ T9500] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  289.715419][ T9500] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  290.198825][ T9500] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.292706][ T9500] 8021q: adding VLAN 0 to HW filter on device team0
[  290.320713][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.328193][ T8273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.374391][ T9500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  290.385227][ T9500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  290.405231][ T8324] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.412423][ T8324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.805396][ T9500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  291.635135][ T9500] veth0_vlan: entered promiscuous mode
[  291.659544][ T8274] Bluetooth: hci6: command tx timeout
[  291.684987][ T9500] veth1_vlan: entered promiscuous mode
[  291.742714][ T9500] veth0_macvtap: entered promiscuous mode
[  291.765233][ T9500] veth1_macvtap: entered promiscuous mode
[  291.813606][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.842193][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.874330][ T8609] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.884253][ T8609] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.894191][ T8609] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.911091][ T8609] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.036648][ T8279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.052357][ T8279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.120624][ T8609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.128966][ T8609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.740310][ T8274] Bluetooth: hci6: command tx timeout
[  294.745451][ T9694] zswap: compressor  not available
[  295.126810][ T9694] FAULT_INJECTION: forcing a failure.
[  295.126810][ T9694] name failslab, interval 1, probability 0, space 0, times 0
[  295.147005][ T9694] CPU: 1 UID: 0 PID: 9694 Comm: syz.6.751 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  295.147034][ T9694] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  295.147040][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  295.147050][ T9694] Call Trace:
[  295.147056][ T9694]  <TASK>
[  295.147062][ T9694]  dump_stack_lvl+0x100/0x190
[  295.147086][ T9694]  should_fail_ex.cold+0x5/0xa
[  295.147112][ T9694]  should_failslab+0xc2/0x120
[  295.147132][ T9694]  kmem_cache_alloc_noprof+0x83/0x780
[  295.147152][ T9694]  ? __kernfs_new_node+0xd2/0x960
[  295.147182][ T9694]  ? __kernfs_new_node+0xd2/0x960
[  295.147201][ T9694]  __kernfs_new_node+0xd2/0x960
[  295.147224][ T9694]  ? __pfx___kernfs_new_node+0x10/0x10
[  295.147248][ T9694]  ? find_held_lock+0x2b/0x80
[  295.147263][ T9694]  ? kernfs_root+0xee/0x2a0
[  295.147282][ T9694]  ? kernfs_root+0xee/0x2a0
[  295.147305][ T9694]  kernfs_new_node+0x11b/0x1a0
[  295.147329][ T9694]  __kernfs_create_file+0x53/0x350
[  295.147348][ T9694]  sysfs_add_file_mode_ns+0x207/0x3c0
[  295.147391][ T9694]  internal_create_group+0x593/0xf40
[  295.147435][ T9694]  ? __pfx_internal_create_group+0x10/0x10
[  295.147479][ T9694]  ? kernfs_create_link+0x1bd/0x240
[  295.147502][ T9694]  internal_create_groups+0x9d/0x150
[  295.147524][ T9694]  device_add+0x71a/0x1950
[  295.147546][ T9694]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  295.147562][ T9694]  ? __pfx_device_add+0x10/0x10
[  295.147581][ T9694]  ? lockdep_init_map_type+0x5c/0x250
[  295.147601][ T9694]  ? __init_waitqueue_head+0xca/0x150
[  295.147627][ T9694]  netdev_register_kobject+0x1a9/0x3d0
[  295.147646][ T9694]  register_netdevice+0x12b3/0x21d0
[  295.147664][ T9694]  ? __pfx_register_netdevice+0x10/0x10
[  295.147683][ T9694]  __ip_tunnel_create+0x52b/0x670
[  295.147707][ T9694]  ? __pfx___ip_tunnel_create+0x10/0x10
[  295.147728][ T9694]  ? net_generic+0xea/0x2a0
[  295.147746][ T9694]  ip_tunnel_init_net+0x230/0x780
[  295.147762][ T9694]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  295.147780][ T9694]  ? trace_kmalloc+0x83/0xb0
[  295.147799][ T9694]  ? __kmalloc_noprof+0x365/0x9c0
[  295.147816][ T9694]  ? __pfx_vti_init_net+0x10/0x10
[  295.147831][ T9694]  vti_init_net+0x2e/0x140
[  295.147850][ T9694]  ops_init+0x1e2/0x5f0
[  295.147892][ T9694]  setup_net+0x118/0x3a0
[  295.147918][ T9694]  ? __pfx_setup_net+0x10/0x10
[  295.147940][ T9694]  ? lockdep_init_map_type+0x5c/0x250
[  295.147962][ T9694]  ? mutex_init_lockep+0x110/0x150
[  295.147984][ T9694]  copy_net_ns+0x46f/0x7c0
[  295.148001][ T9694]  create_new_namespaces+0x3ea/0xab0
[  295.148023][ T9694]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  295.148041][ T9694]  ksys_unshare+0x455/0xab0
[  295.148062][ T9694]  ? __pfx_ksys_unshare+0x10/0x10
[  295.148082][ T9694]  ? xfd_validate_state+0x129/0x190
[  295.148110][ T9694]  __x64_sys_unshare+0x31/0x40
[  295.148129][ T9694]  do_syscall_64+0xc9/0xf80
[  295.148148][ T9694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.148171][ T9694] RIP: 0033:0x7f660a59aeb9
[  295.148184][ T9694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.148198][ T9694] RSP: 002b:00007f660b407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  295.148213][ T9694] RAX: ffffffffffffffda RBX: 00007f660a815fa0 RCX: 00007f660a59aeb9
[  295.148223][ T9694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  295.148231][ T9694] RBP: 00007f660a608c1f R08: 0000000000000000 R09: 0000000000000000
[  295.148240][ T9694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.148248][ T9694] R13: 00007f660a816038 R14: 00007f660a815fa0 R15: 00007fff32b48bf8
[  295.148268][ T9694]  </TASK>
[  296.313810][ T9722] FAULT_INJECTION: forcing a failure.
[  296.313810][ T9722] name failslab, interval 1, probability 0, space 0, times 0
[  296.354973][ T9722] CPU: 0 UID: 0 PID: 9722 Comm: syz.4.757 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  296.355033][ T9722] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  296.355044][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  296.355060][ T9722] Call Trace:
[  296.355069][ T9722]  <TASK>
[  296.355079][ T9722]  dump_stack_lvl+0x100/0x190
[  296.355120][ T9722]  should_fail_ex.cold+0x5/0xa
[  296.355159][ T9722]  should_failslab+0xc2/0x120
[  296.355183][ T9722]  kmem_cache_alloc_noprof+0x83/0x780
[  296.355203][ T9722]  ? seq_open+0x55/0x170
[  296.355228][ T9722]  ? __pfx_proc_single_show+0x10/0x10
[  296.355247][ T9722]  ? seq_open+0x55/0x170
[  296.355270][ T9722]  seq_open+0x55/0x170
[  296.355294][ T9722]  ? __pfx_proc_single_show+0x10/0x10
[  296.355310][ T9722]  single_open+0xfc/0x1d0
[  296.355333][ T9722]  do_dentry_open+0x73e/0x1570
[  296.355350][ T9722]  ? __pfx_proc_single_open+0x10/0x10
[  296.355366][ T9722]  ? security_inode_permission+0xbf/0x250
[  296.355391][ T9722]  vfs_open+0x82/0x3f0
[  296.355415][ T9722]  path_openat+0x21dc/0x3120
[  296.355438][ T9722]  ? __pfx_path_openat+0x10/0x10
[  296.355463][ T9722]  do_filp_open+0x1f7/0x420
[  296.355482][ T9722]  ? __pfx_do_filp_open+0x10/0x10
[  296.355507][ T9722]  ? __pfx_kfree_link+0x10/0x10
[  296.355534][ T9722]  ? _raw_spin_unlock+0x28/0x50
[  296.355550][ T9722]  ? alloc_fd+0x476/0x790
[  296.355573][ T9722]  do_sys_openat2+0x12e/0x220
[  296.355596][ T9722]  ? __pfx_do_sys_openat2+0x10/0x10
[  296.355621][ T9722]  ? __fget_files+0x21f/0x3d0
[  296.355641][ T9722]  __x64_sys_openat+0x12d/0x210
[  296.355664][ T9722]  ? __pfx___x64_sys_openat+0x10/0x10
[  296.355687][ T9722]  ? xfd_validate_state+0x129/0x190
[  296.355717][ T9722]  do_syscall_64+0xc9/0xf80
[  296.355737][ T9722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.355753][ T9722] RIP: 0033:0x7fdcf4f9aeb9
[  296.355768][ T9722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.355783][ T9722] RSP: 002b:00007fdcf5daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  296.355799][ T9722] RAX: ffffffffffffffda RBX: 00007fdcf5216090 RCX: 00007fdcf4f9aeb9
[  296.355809][ T9722] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  296.355819][ T9722] RBP: 00007fdcf5008c1f R08: 0000000000000000 R09: 0000000000000000
[  296.355828][ T9722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.355837][ T9722] R13: 00007fdcf5216128 R14: 00007fdcf5216090 R15: 00007ffd088d8788
[  296.355857][ T9722]  </TASK>
[  296.842392][ T9728] FAULT_INJECTION: forcing a failure.
[  296.842392][ T9728] name failslab, interval 1, probability 0, space 0, times 0
[  296.898402][ T9728] CPU: 1 UID: 0 PID: 9728 Comm: syz.4.761 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  296.898463][ T9728] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  296.898479][ T9728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  296.898496][ T9728] Call Trace:
[  296.898507][ T9728]  <TASK>
[  296.898519][ T9728]  dump_stack_lvl+0x100/0x190
[  296.898559][ T9728]  should_fail_ex.cold+0x5/0xa
[  296.898604][ T9728]  should_failslab+0xc2/0x120
[  296.898642][ T9728]  ? ops_init+0x77/0x5f0
[  296.898681][ T9728]  __kmalloc_noprof+0xf6/0x9c0
[  296.898712][ T9728]  ? lockdep_init_map_type+0x5c/0x250
[  296.898757][ T9728]  ? ops_init+0x77/0x5f0
[  296.898795][ T9728]  ops_init+0x77/0x5f0
[  296.898843][ T9728]  setup_net+0x118/0x3a0
[  296.898870][ T9728]  ? __pfx_setup_net+0x10/0x10
[  296.898892][ T9728]  ? lockdep_init_map_type+0x5c/0x250
[  296.898940][ T9728]  ? mutex_init_lockep+0x110/0x150
[  296.898981][ T9728]  copy_net_ns+0x46f/0x7c0
[  296.899010][ T9728]  create_new_namespaces+0x3ea/0xab0
[  296.899048][ T9728]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  296.899081][ T9728]  ksys_unshare+0x455/0xab0
[  296.899122][ T9728]  ? __pfx_ksys_unshare+0x10/0x10
[  296.899161][ T9728]  ? xfd_validate_state+0x129/0x190
[  296.899219][ T9728]  __x64_sys_unshare+0x31/0x40
[  296.899257][ T9728]  do_syscall_64+0xc9/0xf80
[  296.899296][ T9728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.899326][ T9728] RIP: 0033:0x7fdcf4f9aeb9
[  296.899348][ T9728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.899375][ T9728] RSP: 002b:00007fdcf5dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  296.899412][ T9728] RAX: ffffffffffffffda RBX: 00007fdcf5215fa0 RCX: 00007fdcf4f9aeb9
[  296.899431][ T9728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  296.899449][ T9728] RBP: 00007fdcf5008c1f R08: 0000000000000000 R09: 0000000000000000
[  296.899466][ T9728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.899483][ T9728] R13: 00007fdcf5216038 R14: 00007fdcf5215fa0 R15: 00007ffd088d8788
[  296.899522][ T9728]  </TASK>
[  300.111844][ T9789] netlink: 62 bytes leftover after parsing attributes in process `syz.3.773'.
[  300.122652][ T9789] netlink: 342 bytes leftover after parsing attributes in process `syz.3.773'.
[  300.133842][ T9789] netlink: 342 bytes leftover after parsing attributes in process `syz.3.773'.
[  301.925922][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'.
[  302.778968][ T8892] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  302.798747][ T8892] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  302.811581][ T8892] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  302.831256][ T8892] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  302.887976][ T8892] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  303.130122][ T9838] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(268435460.0.1), cmd(2)
[  303.273274][ T9827] chnl_net:caif_netlink_parms(): no params data found
[  303.525247][ T9827] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.575588][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.597740][ T9827] bridge_slave_0: entered allmulticast mode
[  303.618946][ T9827] bridge_slave_0: entered promiscuous mode
[  303.641377][ T9827] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.658441][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.665786][ T9827] bridge_slave_1: entered allmulticast mode
[  303.749554][ T9827] bridge_slave_1: entered promiscuous mode
[  303.796090][ T9854] futex_wake_op: syz.6.786 tries to shift op by -2048; fix this program
[  303.804971][ T9854] futex_wake_op: syz.6.786 tries to shift op by -2048; fix this program
[  303.912698][ T9827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.925966][ T9827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.986115][ T9827] team0: Port device team_slave_0 added
[  304.000403][ T9827] team0: Port device team_slave_1 added
[  304.055049][ T9827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.062966][ T9827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.089465][ T9827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.102828][ T9827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.110583][ T9827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.140632][ T9845] delete_channel: no stack
[  304.140847][ T9827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.276528][ T9827] hsr_slave_0: entered promiscuous mode
[  304.291956][ T9827] hsr_slave_1: entered promiscuous mode
[  304.311045][ T9827] debugfs: 'hsr0' already exists in 'hsr'
[  304.316825][ T9827] Cannot create hsr debugfs directory
[  304.407865][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'.
[  304.428677][ T9866] netlink: 17 bytes leftover after parsing attributes in process `syz.3.788'.
[  304.864955][ T9827] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  304.879966][ T9827] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  304.890371][ T9827] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  304.900954][ T9827] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  304.938461][ T8274] Bluetooth: hci7: command tx timeout
[  305.008903][ T9827] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.047053][ T9827] 8021q: adding VLAN 0 to HW filter on device team0
[  305.062325][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.069594][ T8609] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.104469][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.111667][ T8609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.237315][ T9827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  305.251352][ T9827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  305.564432][ T9894] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  305.773167][ T9827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.815983][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'.
[  306.012446][ T9916] futex_wake_op: syz.6.796 tries to shift op by -2048; fix this program
[  306.021531][ T9916] futex_wake_op: syz.6.796 tries to shift op by -2048; fix this program
[  306.455970][ T9928] nfs4: Unknown parameter '����'
[  306.465000][ T8892] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  306.543420][ T9827] veth0_vlan: entered promiscuous mode
[  306.631056][ T9827] veth1_vlan: entered promiscuous mode
[  306.777215][ T9827] veth0_macvtap: entered promiscuous mode
[  306.868431][ T9827] veth1_macvtap: entered promiscuous mode
[  306.956955][ T9827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.023717][ T8274] Bluetooth: hci7: command tx timeout
[  307.130437][ T9827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.193001][ T8349] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.205477][ T8349] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.215767][ T8349] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.231790][ T8349] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.434879][ T8273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.455397][ T8273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.538088][ T8324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.571301][ T8324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.021955][ T9974] random: crng reseeded on system resumption
[  308.437802][ T9985] netlink: 'syz.6.810': attribute type 28 has an invalid length.
[  308.455785][ T9985] netlink: 'syz.6.810': attribute type 3 has an invalid length.
[  308.476025][ T9985] netlink: 306 bytes leftover after parsing attributes in process `syz.6.810'.
[  309.085392][ T8274] Bluetooth: hci4: unexpected event 0x31 length: 19 > 6
[  309.104215][ T8274] Bluetooth: hci7: command tx timeout
[  311.187490][ T8274] Bluetooth: hci7: command tx timeout
[  311.706440][T10060] FAULT_INJECTION: forcing a failure.
[  311.706440][T10060] name failslab, interval 1, probability 0, space 0, times 0
[  311.742746][T10060] CPU: 0 UID: 0 PID: 10060 Comm: syz.4.821 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  311.742791][T10060] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  311.742801][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  311.742815][T10060] Call Trace:
[  311.742823][T10060]  <TASK>
[  311.742834][T10060]  dump_stack_lvl+0x100/0x190
[  311.742869][T10060]  should_fail_ex.cold+0x5/0xa
[  311.742909][T10060]  should_failslab+0xc2/0x120
[  311.742945][T10060]  kmem_cache_alloc_lru_noprof+0x8e/0x7d0
[  311.742981][T10060]  ? proc_alloc_inode+0x25/0x200
[  311.743020][T10060]  ? __pfx_proc_alloc_inode+0x10/0x10
[  311.743053][T10060]  ? proc_alloc_inode+0x25/0x200
[  311.743084][T10060]  proc_alloc_inode+0x25/0x200
[  311.743118][T10060]  alloc_inode+0x68/0x250
[  311.743155][T10060]  new_inode+0x22/0x1c0
[  311.743195][T10060]  proc_get_inode+0x1d/0x780
[  311.743233][T10060]  proc_lookup_de+0x236/0x360
[  311.743261][T10060]  ? __pfx_proc_lookup+0x10/0x10
[  311.743282][T10060]  proc_lookup+0xcf/0x110
[  311.743307][T10060]  lookup_open.isra.0+0x486/0x1890
[  311.743341][T10060]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  311.743387][T10060]  ? mnt_get_write_access+0x1e9/0x2f0
[  311.743431][T10060]  path_openat+0xa9b/0x3120
[  311.743474][T10060]  ? __pfx_path_openat+0x10/0x10
[  311.743517][T10060]  do_filp_open+0x1f7/0x420
[  311.743548][T10060]  ? __pfx_do_filp_open+0x10/0x10
[  311.743589][T10060]  ? __pfx_kfree_link+0x10/0x10
[  311.743633][T10060]  ? _raw_spin_unlock+0x28/0x50
[  311.743648][T10060]  ? alloc_fd+0x476/0x790
[  311.743669][T10060]  do_sys_openat2+0x12e/0x220
[  311.743690][T10060]  ? __pfx_do_sys_openat2+0x10/0x10
[  311.743730][T10060]  __x64_sys_openat+0x12d/0x210
[  311.743751][T10060]  ? __pfx___x64_sys_openat+0x10/0x10
[  311.743770][T10060]  ? xfd_validate_state+0x129/0x190
[  311.743798][T10060]  do_syscall_64+0xc9/0xf80
[  311.743816][T10060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.743831][T10060] RIP: 0033:0x7fdcf4f9aeb9
[  311.743843][T10060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.743857][T10060] RSP: 002b:00007fdcf5dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  311.743871][T10060] RAX: ffffffffffffffda RBX: 00007fdcf5215fa0 RCX: 00007fdcf4f9aeb9
[  311.743881][T10060] RDX: 00000000000aa102 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  311.743890][T10060] RBP: 00007fdcf5008c1f R08: 0000000000000000 R09: 0000000000000000
[  311.743898][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.743906][T10060] R13: 00007fdcf5216038 R14: 00007fdcf5215fa0 R15: 00007ffd088d8788
[  311.743925][T10060]  </TASK>
[  312.564214][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'.
[  312.627692][T10078] netlink: 17 bytes leftover after parsing attributes in process `syz.3.819'.
[  314.416599][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'.
[  314.724272][T10126] __vm_enough_memory: pid: 10126, comm: syz.4.834, bytes: 4398046511104 not enough memory for the allocation
[  314.861165][T10129] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  315.251039][T10137] netlink: 74 bytes leftover after parsing attributes in process `syz.3.835'.
[  316.420618][ T8274] Bluetooth: hci4: Malformed LE Event: 0x0b
[  317.457972][   T30] audit: type=1326 audit(4294967314.060:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.3.850" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84e419aeb9 code=0x0
[  317.658794][T10174] FAULT_INJECTION: forcing a failure.
[  317.658794][T10174] name fail_futex, interval 1, probability 0, space 0, times 0
[  317.683194][T10174] CPU: 0 UID: 0 PID: 10174 Comm: syz.4.845 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  317.683227][T10174] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  317.683233][T10174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  317.683241][T10174] Call Trace:
[  317.683246][T10174]  <TASK>
[  317.683252][T10174]  dump_stack_lvl+0x100/0x190
[  317.683273][T10174]  should_fail_ex.cold+0x5/0xa
[  317.683297][T10174]  get_futex_key+0x1d2/0x1620
[  317.683317][T10174]  ? __pfx_get_futex_key+0x10/0x10
[  317.683333][T10174]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  317.683357][T10174]  ? do_fault+0x6a4/0x1990
[  317.683386][T10174]  futex_wake+0xea/0x530
[  317.683405][T10174]  ? __handle_mm_fault+0x4ec/0x2b50
[  317.683422][T10174]  ? __pfx_futex_wake+0x10/0x10
[  317.683450][T10174]  ? __pfx_css_rstat_updated+0x10/0x10
[  317.683485][T10174]  do_futex+0x32b/0x350
[  317.683518][T10174]  ? __pfx_do_futex+0x10/0x10
[  317.683548][T10174]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  317.683588][T10174]  __x64_sys_futex+0x34f/0x4d0
[  317.683624][T10174]  ? __pfx___x64_sys_futex+0x10/0x10
[  317.683676][T10174]  do_syscall_64+0xc9/0xf80
[  317.683709][T10174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.683735][T10174] RIP: 0033:0x7fdcf4f9aeb9
[  317.683755][T10174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.683780][T10174] RSP: 002b:00007ffd088d88e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  317.683804][T10174] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdcf4f9aeb9
[  317.683820][T10174] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdcf5215fa8
[  317.683836][T10174] RBP: 0000000000001d0d R08: 0000000000000001 R09: 0000000000000000
[  317.683851][T10174] R10: 00007fdcf5215fa0 R11: 0000000000000246 R12: 0000000000000000
[  317.683866][T10174] R13: 00007fdcf5215fac R14: 00007fdcf5215fa8 R15: 00007fdcf5215fa0
[  317.683901][T10174]  </TASK>
[  317.685589][T10175] nfs: Unknown parameter 'B��lY�	7�w��E�ɮH��s[�ؐu`�]��e��6z�c��ޕ�[$(�u�����Ҟ��%�E��tO��2*�p��[���Oug����r��ts���QZ׀z'
[  317.693844][   T30] audit: type=1326 audit(4294967314.130:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.3.850" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84e419aeb9 code=0x0
[  319.275744][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'.
[  321.380139][T10261] FAULT_INJECTION: forcing a failure.
[  321.380139][T10261] name failslab, interval 1, probability 0, space 0, times 0
[  321.393136][T10261] CPU: 1 UID: 0 PID: 10261 Comm: syz.7.864 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  321.393182][T10261] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  321.393193][T10261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  321.393210][T10261] Call Trace:
[  321.393218][T10261]  <TASK>
[  321.393228][T10261]  dump_stack_lvl+0x100/0x190
[  321.393269][T10261]  should_fail_ex.cold+0x5/0xa
[  321.393315][T10261]  should_failslab+0xc2/0x120
[  321.393355][T10261]  ? cache_create_net+0x9b/0x220
[  321.393391][T10261]  __kmalloc_noprof+0xf6/0x9c0
[  321.393420][T10261]  ? cache_create_net+0x2b/0x220
[  321.393464][T10261]  ? cache_create_net+0x9b/0x220
[  321.393545][T10261]  cache_create_net+0x9b/0x220
[  321.393588][T10261]  gss_svc_init_net+0x11f/0x640
[  321.393623][T10261]  ? __pfx_canbcm_pernet_init+0x10/0x10
[  321.393666][T10261]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[  321.393703][T10261]  ops_init+0x1e2/0x5f0
[  321.393750][T10261]  setup_net+0x118/0x3a0
[  321.393776][T10261]  ? __pfx_setup_net+0x10/0x10
[  321.393798][T10261]  ? lockdep_init_map_type+0x5c/0x250
[  321.393846][T10261]  ? mutex_init_lockep+0x110/0x150
[  321.393891][T10261]  copy_net_ns+0x46f/0x7c0
[  321.393925][T10261]  create_new_namespaces+0x3ea/0xab0
[  321.393966][T10261]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  321.394001][T10261]  ksys_unshare+0x455/0xab0
[  321.394042][T10261]  ? __pfx_ksys_unshare+0x10/0x10
[  321.394088][T10261]  ? xfd_validate_state+0x129/0x190
[  321.394143][T10261]  __x64_sys_unshare+0x31/0x40
[  321.394182][T10261]  do_syscall_64+0xc9/0xf80
[  321.394219][T10261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.394247][T10261] RIP: 0033:0x7f4890f9aeb9
[  321.394271][T10261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  321.394298][T10261] RSP: 002b:00007f488f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  321.394322][T10261] RAX: ffffffffffffffda RBX: 00007f4891215fa0 RCX: 00007f4890f9aeb9
[  321.394340][T10261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  321.394357][T10261] RBP: 00007f4891008c1f R08: 0000000000000000 R09: 0000000000000000
[  321.394375][T10261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  321.394391][T10261] R13: 00007f4891216038 R14: 00007f4891215fa0 R15: 00007ffe37eb1418
[  321.394431][T10261]  </TASK>
[  322.465355][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  322.471933][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  323.366843][T10320] netlink: 330 bytes leftover after parsing attributes in process `syz.7.877'.
[  324.482372][ T8892] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  324.499016][ T8892] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  324.511028][ T8892] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  324.519382][ T8892] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  324.532436][ T8892] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  324.557808][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.7.880'.
[  325.094157][T10336] chnl_net:caif_netlink_parms(): no params data found
[  325.210504][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.7.885'.
[  325.220384][T10347] netlink: 17 bytes leftover after parsing attributes in process `syz.7.885'.
[  325.475636][T10336] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.500699][T10336] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.517778][T10336] bridge_slave_0: entered allmulticast mode
[  325.526198][T10336] bridge_slave_0: entered promiscuous mode
[  325.559424][T10336] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.567258][T10336] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.575253][T10336] bridge_slave_1: entered allmulticast mode
[  325.629636][T10336] bridge_slave_1: entered promiscuous mode
[  325.733006][T10336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.775200][T10336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.911372][T10336] team0: Port device team_slave_0 added
[  325.934894][T10336] team0: Port device team_slave_1 added
[  326.021803][T10336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  326.028859][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.099076][T10336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  326.242078][T10336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  326.250730][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.296058][T10336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  326.448950][T10336] hsr_slave_0: entered promiscuous mode
[  326.466950][T10336] hsr_slave_1: entered promiscuous mode
[  326.488420][T10336] debugfs: 'hsr0' already exists in 'hsr'
[  326.494219][T10336] Cannot create hsr debugfs directory
[  326.617662][ T8892] Bluetooth: hci8: command tx timeout
[  327.002052][T10336] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  327.030926][T10336] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  327.055007][T10336] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  327.096033][T10336] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  327.556751][T10406] bridge0: port 3(batadv0) entered blocking state
[  327.604265][T10406] bridge0: port 3(batadv0) entered disabled state
[  327.657835][T10406] batadv0: entered allmulticast mode
[  327.680193][T10406] batadv0: entered promiscuous mode
[  327.686518][T10406] bridge0: port 3(batadv0) entered blocking state
[  327.693175][T10406] bridge0: port 3(batadv0) entered forwarding state
[  327.830990][T10336] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.888915][T10336] 8021q: adding VLAN 0 to HW filter on device team0
[  327.917805][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.925092][ T8273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.964368][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.971603][ T8273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.038495][ T9997] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  328.048417][ T9997] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  328.556102][T10336] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.681082][T10429] pim6reg: entered allmulticast mode
[  328.697616][ T8892] Bluetooth: hci8: command tx timeout
[  329.278605][T10336] veth0_vlan: entered promiscuous mode
[  329.297213][T10336] veth1_vlan: entered promiscuous mode
[  329.380013][T10336] veth0_macvtap: entered promiscuous mode
[  329.427181][T10336] veth1_macvtap: entered promiscuous mode
[  329.522904][T10336] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.559390][T10336] batman_adv: batadv0: Interface activated: batadv_slave_1
[  329.598823][ T9997] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.618486][ T9997] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.648993][ T9997] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.670236][ T9997] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.869785][ T9998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.887537][ T9998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.970700][ T9997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.999635][ T9997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.110750][T10441] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  330.778497][ T8892] Bluetooth: hci8: command tx timeout
[  331.023480][T10460] FAULT_INJECTION: forcing a failure.
[  331.023480][T10460] name failslab, interval 1, probability 0, space 0, times 0
[  331.081689][T10460] CPU: 1 UID: 0 PID: 10460 Comm: syz.4.905 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  331.081738][T10460] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  331.081748][T10460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  331.081764][T10460] Call Trace:
[  331.081773][T10460]  <TASK>
[  331.081783][T10460]  dump_stack_lvl+0x100/0x190
[  331.081822][T10460]  should_fail_ex.cold+0x5/0xa
[  331.081867][T10460]  should_failslab+0xc2/0x120
[  331.081907][T10460]  kmem_cache_alloc_noprof+0x83/0x780
[  331.081941][T10460]  ? __pfx_map_id_range_down+0x10/0x10
[  331.081969][T10460]  ? security_inode_alloc+0x3b/0x2c0
[  331.082012][T10460]  ? security_inode_alloc+0x3b/0x2c0
[  331.082046][T10460]  security_inode_alloc+0x3b/0x2c0
[  331.082084][T10460]  inode_init_always_gfp+0xced/0x1040
[  331.082122][T10460]  alloc_inode+0x8e/0x250
[  331.082171][T10460]  new_inode+0x22/0x1c0
[  331.082215][T10460]  mqueue_get_inode+0x2e/0xe00
[  331.082248][T10460]  ? sget_fc+0x801/0xc70
[  331.082278][T10460]  ? __pfx_mqueue_fill_super+0x10/0x10
[  331.082309][T10460]  mqueue_fill_super+0x14d/0x260
[  331.082343][T10460]  get_tree_nodev+0xdd/0x190
[  331.082375][T10460]  mqueue_get_tree+0xf1/0x130
[  331.082407][T10460]  vfs_get_tree+0x92/0x320
[  331.082434][T10460]  fc_mount_longterm+0x1a/0x270
[  331.082462][T10460]  mq_init_ns+0x482/0x820
[  331.082501][T10460]  copy_ipcs+0x3dd/0x7e0
[  331.082541][T10460]  create_new_namespaces+0x20a/0xab0
[  331.082572][T10460]  ? security_capable+0x80/0x260
[  331.082609][T10460]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  331.082644][T10460]  ksys_unshare+0x455/0xab0
[  331.082683][T10460]  ? __pfx_ksys_unshare+0x10/0x10
[  331.082720][T10460]  ? xfd_validate_state+0x129/0x190
[  331.082775][T10460]  __x64_sys_unshare+0x31/0x40
[  331.082811][T10460]  do_syscall_64+0xc9/0xf80
[  331.082845][T10460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.082871][T10460] RIP: 0033:0x7fdcf4f9aeb9
[  331.082895][T10460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.082922][T10460] RSP: 002b:00007fdcf5dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  331.082948][T10460] RAX: ffffffffffffffda RBX: 00007fdcf5215fa0 RCX: 00007fdcf4f9aeb9
[  331.082968][T10460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000
[  331.082984][T10460] RBP: 00007fdcf5008c1f R08: 0000000000000000 R09: 0000000000000000
[  331.083000][T10460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  331.083016][T10460] R13: 00007fdcf5216038 R14: 00007fdcf5215fa0 R15: 00007ffd088d8788
[  331.083052][T10460]  </TASK>
[  331.995448][T10471] FAULT_INJECTION: forcing a failure.
[  331.995448][T10471] name failslab, interval 1, probability 0, space 0, times 0
[  332.068366][T10471] CPU: 1 UID: 0 PID: 10471 Comm: syz.4.908 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  332.068416][T10471] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  332.068426][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  332.068442][T10471] Call Trace:
[  332.068452][T10471]  <TASK>
[  332.068462][T10471]  dump_stack_lvl+0x100/0x190
[  332.068500][T10471]  should_fail_ex.cold+0x5/0xa
[  332.068546][T10471]  should_failslab+0xc2/0x120
[  332.068586][T10471]  kmem_cache_alloc_noprof+0x83/0x780
[  332.068622][T10471]  ? __pfx_map_id_range_down+0x10/0x10
[  332.068650][T10471]  ? security_inode_alloc+0x3b/0x2c0
[  332.068694][T10471]  ? security_inode_alloc+0x3b/0x2c0
[  332.068729][T10471]  security_inode_alloc+0x3b/0x2c0
[  332.068767][T10471]  inode_init_always_gfp+0xced/0x1040
[  332.068805][T10471]  alloc_inode+0x8e/0x250
[  332.068844][T10471]  sock_alloc+0x44/0x280
[  332.068868][T10471]  ? security_socket_create+0x7f/0x250
[  332.068905][T10471]  __sock_create+0xc2/0x860
[  332.068944][T10471]  __sys_socket+0x14d/0x260
[  332.068977][T10471]  ? __pfx___sys_socket+0x10/0x10
[  332.069009][T10471]  ? xfd_validate_state+0x129/0x190
[  332.069069][T10471]  __x64_sys_socket+0x72/0xb0
[  332.069102][T10471]  ? lockdep_hardirqs_on+0x78/0x100
[  332.069133][T10471]  do_syscall_64+0xc9/0xf80
[  332.069165][T10471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.069191][T10471] RIP: 0033:0x7fdcf4f9aeb9
[  332.069211][T10471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  332.069238][T10471] RSP: 002b:00007fdcf5dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  332.069261][T10471] RAX: ffffffffffffffda RBX: 00007fdcf5215fa0 RCX: 00007fdcf4f9aeb9
[  332.069278][T10471] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002
[  332.069295][T10471] RBP: 00007fdcf5008c1f R08: 0000000000000000 R09: 0000000000000000
[  332.069312][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  332.069327][T10471] R13: 00007fdcf5216038 R14: 00007fdcf5215fa0 R15: 00007ffd088d8788
[  332.069363][T10471]  </TASK>
[  332.069409][T10471] socket: no more sockets
[  332.645049][T10481] Invalid ELF header magic: != ELF
[  332.859611][ T8892] Bluetooth: hci8: command tx timeout
[  333.506915][ T8892] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6
[  333.514836][T10484] zswap: compressor U��x�f�>��@k׌mu$�ǹ%���g�W'�w�
[  333.514836][T10484] �ns|C� not available
[  334.094318][T10499] netlink: 672 bytes leftover after parsing attributes in process `syz.4.912'.
[  334.445306][   T30] audit: type=1800 audit(4294985675.051:10): pid=10516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.915" name="features" dev="configfs" ino=56905 res=0 errno=0
[  335.231169][T10523] FAULT_INJECTION: forcing a failure.
[  335.231169][T10523] name failslab, interval 1, probability 0, space 0, times 0
[  335.268915][T10523] CPU: 1 UID: 0 PID: 10523 Comm: syz.4.917 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  335.268959][T10523] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  335.268968][T10523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  335.268983][T10523] Call Trace:
[  335.268991][T10523]  <TASK>
[  335.269001][T10523]  dump_stack_lvl+0x100/0x190
[  335.269041][T10523]  should_fail_ex.cold+0x5/0xa
[  335.269093][T10523]  should_failslab+0xc2/0x120
[  335.269136][T10523]  kmem_cache_alloc_noprof+0x83/0x780
[  335.269174][T10523]  ? __pmd_alloc+0xbf/0x9c0
[  335.269226][T10523]  ? __pmd_alloc+0xbf/0x9c0
[  335.269267][T10523]  __pmd_alloc+0xbf/0x9c0
[  335.269307][T10523]  ? mt_find+0x687/0x8e0
[  335.269346][T10523]  huge_pte_alloc+0x5ee/0x730
[  335.269396][T10523]  hugetlb_fault+0x363/0x14f0
[  335.269430][T10523]  ? __pfx_hugetlb_fault+0x10/0x10
[  335.269472][T10523]  ? find_vma+0xbf/0x140
[  335.269507][T10523]  ? __pfx_find_vma+0x10/0x10
[  335.269545][T10523]  handle_mm_fault+0x5f1/0xa20
[  335.269580][T10523]  do_user_addr_fault+0x74c/0x12f0
[  335.269624][T10523]  exc_page_fault+0x6f/0xd0
[  335.269658][T10523]  asm_exc_page_fault+0x26/0x30
[  335.269686][T10523] RIP: 0010:__put_user_4+0xd/0x20
[  335.269719][T10523] Code: 66 89 01 31 c9 0f 01 ca e9 50 bb 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90
[  335.269747][T10523] RSP: 0018:ffffc9000fe0fe60 EFLAGS: 00050202
[  335.269781][T10523] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000007
[  335.269799][T10523] RDX: 0000000000000000 RSI: ffffffff82527001 RDI: ffff888036aac2bc
[  335.269819][T10523] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000000001c1
[  335.269836][T10523] R10: 0000000000000200 R11: 0000000000000000 R12: 1ffff92001fc1fcf
[  335.269854][T10523] R13: 0000000000000007 R14: 0000000000000000 R15: dffffc0000000000
[  335.269886][T10523]  ? __might_fault+0x111/0x140
[  335.269935][T10523]  __do_sys_prctl+0xa0c/0x21a0
[  335.269964][T10523]  ? __pfx___do_sys_prctl+0x10/0x10
[  335.270022][T10523]  do_syscall_64+0xc9/0xf80
[  335.270059][T10523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.270088][T10523] RIP: 0033:0x7fdcf4f9aeb9
[  335.270110][T10523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.270138][T10523] RSP: 002b:00007fdcf5daa028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  335.270164][T10523] RAX: ffffffffffffffda RBX: 00007fdcf5216090 RCX: 00007fdcf4f9aeb9
[  335.270183][T10523] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000002
[  335.270199][T10523] RBP: 00007fdcf5008c1f R08: 0000000000000001 R09: 0000000000000000
[  335.270216][T10523] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  335.270233][T10523] R13: 00007fdcf5216128 R14: 00007fdcf5216090 R15: 00007ffd088d8788
[  335.270273][T10523]  </TASK>
[  336.050847][T10523] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input16
[  336.929919][T10532] bridge0: port 3(team0) entered blocking state
[  336.936317][T10532] bridge0: port 3(team0) entered disabled state
[  336.944884][T10532] team0: entered allmulticast mode
[  336.960495][T10532] team_slave_0: entered allmulticast mode
[  336.985769][T10532] team_slave_1: entered allmulticast mode
[  337.006237][T10532] team0: entered promiscuous mode
[  337.031529][T10532] team_slave_0: entered promiscuous mode
[  337.053338][T10532] team_slave_1: entered promiscuous mode
[  337.073082][T10532] bridge0: port 3(team0) entered blocking state
[  337.079602][T10532] bridge0: port 3(team0) entered forwarding state
[  338.969001][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'.
[  339.246492][T10578] Unable to find swap-space signature
[  339.472538][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'.
[  339.508636][T10584] netlink: 'syz.4.930': attribute type 1 has an invalid length.
[  339.516435][T10584] netlink: 13 bytes leftover after parsing attributes in process `syz.4.930'.
[  339.546380][T10584] netlink: 'syz.4.930': attribute type 1 has an invalid length.
[  340.554716][T10607] FAULT_INJECTION: forcing a failure.
[  340.554716][T10607] name failslab, interval 1, probability 0, space 0, times 0
[  340.597386][T10607] CPU: 0 UID: 0 PID: 10607 Comm: syz.4.936 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  340.597434][T10607] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  340.597446][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  340.597461][T10607] Call Trace:
[  340.597469][T10607]  <TASK>
[  340.597479][T10607]  dump_stack_lvl+0x100/0x190
[  340.597520][T10607]  should_fail_ex.cold+0x5/0xa
[  340.597565][T10607]  should_failslab+0xc2/0x120
[  340.597605][T10607]  ? sk_prot_alloc+0x10b/0x2a0
[  340.597631][T10607]  __kmalloc_noprof+0xf6/0x9c0
[  340.597659][T10607]  ? evm_inode_alloc_security+0x44/0xc0
[  340.597702][T10607]  ? sk_prot_alloc+0x10b/0x2a0
[  340.597728][T10607]  sk_prot_alloc+0x10b/0x2a0
[  340.597760][T10607]  sk_alloc+0x36/0xe80
[  340.597798][T10607]  __netlink_create+0x5e/0x2c0
[  340.597837][T10607]  __netlink_kernel_create+0xed/0x750
[  340.597880][T10607]  ? _raw_write_unlock+0x28/0x50
[  340.597912][T10607]  ? __pfx___netlink_kernel_create+0x10/0x10
[  340.597960][T10607]  ? proc_create_reg+0xd7/0x170
[  340.597989][T10607]  xfrm_user_net_init+0xc6/0x190
[  340.598031][T10607]  ? __pfx_xfrm_user_net_init+0x10/0x10
[  340.598082][T10607]  ? __pfx_xfrm_netlink_rcv+0x10/0x10
[  340.598125][T10607]  ? __pfx_tls_init_net+0x10/0x10
[  340.598160][T10607]  ? tls_proc_init+0x59/0x70
[  340.598187][T10607]  ? __pfx_xfrm_user_net_init+0x10/0x10
[  340.598228][T10607]  ops_init+0x1e2/0x5f0
[  340.598274][T10607]  setup_net+0x118/0x3a0
[  340.598300][T10607]  ? __pfx_setup_net+0x10/0x10
[  340.598323][T10607]  ? lockdep_init_map_type+0x5c/0x250
[  340.598370][T10607]  ? mutex_init_lockep+0x110/0x150
[  340.598416][T10607]  copy_net_ns+0x46f/0x7c0
[  340.598450][T10607]  create_new_namespaces+0x3ea/0xab0
[  340.598492][T10607]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  340.598528][T10607]  ksys_unshare+0x455/0xab0
[  340.598569][T10607]  ? __pfx_ksys_unshare+0x10/0x10
[  340.598608][T10607]  ? xfd_validate_state+0x129/0x190
[  340.598663][T10607]  __x64_sys_unshare+0x31/0x40
[  340.598701][T10607]  do_syscall_64+0xc9/0xf80
[  340.598737][T10607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.598765][T10607] RIP: 0033:0x7fdcf4f9aeb9
[  340.598788][T10607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  340.598816][T10607] RSP: 002b:00007fdcf5daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  340.598843][T10607] RAX: ffffffffffffffda RBX: 00007fdcf5216090 RCX: 00007fdcf4f9aeb9
[  340.598862][T10607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  340.598878][T10607] RBP: 00007fdcf5008c1f R08: 0000000000000000 R09: 0000000000000000
[  340.598896][T10607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  340.598912][T10607] R13: 00007fdcf5216128 R14: 00007fdcf5216090 R15: 00007ffd088d8788
[  340.598950][T10607]  </TASK>
[  341.744719][ T8274] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  341.755835][ T8274] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  341.765592][ T8274] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  341.775498][ T8274] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  341.784828][ T8274] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  342.374322][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'.
[  342.520186][T10628] chnl_net:caif_netlink_parms(): no params data found
[  342.712409][T10628] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.719832][T10628] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.727297][T10628] bridge_slave_0: entered allmulticast mode
[  342.739681][T10628] bridge_slave_0: entered promiscuous mode
[  342.768625][T10628] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.817678][T10628] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.825113][T10628] bridge_slave_1: entered allmulticast mode
[  342.864655][T10628] bridge_slave_1: entered promiscuous mode
[  343.006445][T10628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.088708][T10628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.211703][T10628] team0: Port device team_slave_0 added
[  343.250426][T10628] team0: Port device team_slave_1 added
[  343.343721][T10628] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.367203][T10628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  343.429198][T10628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.476770][T10628] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.499195][T10628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  343.617567][T10628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.817539][ T8274] Bluetooth: hci9: command tx timeout
[  343.845233][T10628] hsr_slave_0: entered promiscuous mode
[  343.859860][T10628] hsr_slave_1: entered promiscuous mode
[  343.918781][T10628] debugfs: 'hsr0' already exists in 'hsr'
[  343.924560][T10628] Cannot create hsr debugfs directory
[  344.952146][T10628] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  345.011302][T10628] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  345.049965][T10691] can: request_module (can-proto-0) failed.
[  345.072003][T10628] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  345.192558][T10628] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  345.347131][T10628] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.400883][T10628] 8021q: adding VLAN 0 to HW filter on device team0
[  345.448671][T10001] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.455815][T10001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.476116][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'.
[  345.546418][T10001] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.553636][T10001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.802696][T10628] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.908143][ T8274] Bluetooth: hci9: command tx timeout
[  346.255145][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.959'.
[  346.472411][T10628] veth0_vlan: entered promiscuous mode
[  346.499332][T10628] veth1_vlan: entered promiscuous mode
[  346.563158][T10628] veth0_macvtap: entered promiscuous mode
[  346.589521][T10628] veth1_macvtap: entered promiscuous mode
[  346.632791][T10628] batman_adv: batadv0: Interface activated: batadv_slave_0
[  346.700079][T10628] batman_adv: batadv0: Interface activated: batadv_slave_1
[  346.755268][ T8273] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.770703][ T8273] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.796985][ T8273] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.810401][ T8273] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.196855][ T9997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.340122][ T9997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.588134][ T8282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.605283][ T8282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.979201][ T8274] Bluetooth: hci9: command tx timeout
[  348.245982][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'.
[  349.858896][T10841] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  350.067797][ T8274] Bluetooth: hci9: command tx timeout
[  350.102761][T10837] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  350.123420][T10847] netlink: 122 bytes leftover after parsing attributes in process `syz.3.977'.
[  351.715360][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.8.983'.
[  352.471505][T10894] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  353.745239][ T8274] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11
[  353.991890][T10918] block nbd0: NBD_DISCONNECT
[  354.050122][T10921] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  355.894518][ T8274] Bluetooth: hci8: unexpected subevent 0x01 length: 3 < 18
[  358.584568][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'.
[  358.606301][T11012] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1013'.
[  359.041819][T11006] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  359.067666][T11006] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  359.080370][T11006] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  359.113254][T11006] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  359.128123][T11006] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  359.154760][T11006] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  359.178806][T11006] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  359.184788][T11006] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  359.244261][T11006] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  359.299708][T11006] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  359.313139][T11006] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  359.426920][T11006] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  359.477033][T11006] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  359.496934][T11006] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  359.528871][T11006] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  359.578775][T11006] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  359.598358][T11006] Bluetooth: hci9: Opcode 0x0406 failed: -4
[  359.642974][T11006] Bluetooth: hci9: Opcode 0x0406 failed: -4
[  360.459057][ T8274] Bluetooth: hci0: command 0x0c1a tx timeout
[  360.516834][T11060] futex_wake_op: syz.8.1026 tries to shift op by -2048; fix this program
[  360.526227][T11057] 0x001c00000000-0x100002c00000200 : ""
[  360.533168][T11057] mtd: partition "" is out of reach -- disabled
[  361.120922][ T8274] Bluetooth: hci2: command 0x0c1a tx timeout
[  361.147478][ T8274] Bluetooth: hci1: command 0x0c1a tx timeout
[  361.188632][ T8892] Bluetooth: hci4: command 0x0419 tx timeout
[  361.195239][ T8274] Bluetooth: hci3: command 0x0c1a tx timeout
[  361.243434][T11057] ftl_cs: FTL header not found.
[  361.258741][ T8892] Bluetooth: hci5: command 0x0c1a tx timeout
[  361.353163][ T8892] Bluetooth: hci6: command 0x0c1a tx timeout
[  361.502663][ T8892] Bluetooth: hci8: command 0x0c1a tx timeout
[  361.657856][ T8892] Bluetooth: hci9: command 0x0c1a tx timeout
[  363.317473][ T8892] Bluetooth: hci3: command 0x0c1a tx timeout
[  363.404331][ T8892] Bluetooth: hci5: command 0x0c1a tx timeout
[  363.437649][ T8281] Bluetooth: hci6: command 0x0c1a tx timeout
[  363.449457][ T8274] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18
[  363.493134][ T8274] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff
[  363.577658][ T8892] Bluetooth: hci8: command 0x0c1a tx timeout
[  363.737722][ T8892] Bluetooth: hci9: command 0x0c1a tx timeout
[  364.177814][T11141] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18
[  365.144825][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'.
[  365.159318][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'.
[  365.196936][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'.
[  365.209175][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'.
[  365.278668][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'.
[  365.291728][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'.
[  365.316956][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'.
[  365.353253][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'.
[  365.377129][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'.
[  365.397571][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'.
[  365.429584][ T8892] Bluetooth: hci5: command 0x0c1a tx timeout
[  365.484230][T11177] sd 0:0:1:0: PR command failed: 1026
[  365.493046][T11177] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  365.508890][ T8892] Bluetooth: hci6: command 0x0c1a tx timeout
[  365.510340][T11177] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  365.657546][ T8892] Bluetooth: hci8: command 0x0c1a tx timeout
[  365.821092][ T8892] Bluetooth: hci9: command 0x0c1a tx timeout
[  365.952631][T11196] netlink: 'syz.4.1045': attribute type 11 has an invalid length.
[  365.960618][T11196] netlink: 'syz.4.1045': attribute type 11 has an invalid length.
[  365.982284][T11196] netlink: 'syz.4.1045': attribute type 11 has an invalid length.
[  366.013972][T11196] netlink: 'syz.4.1045': attribute type 11 has an invalid length.
[  366.077301][T11196] FAULT_INJECTION: forcing a failure.
[  366.077301][T11196] name failslab, interval 1, probability 0, space 0, times 0
[  366.135820][T11196] CPU: 0 UID: 0 PID: 11196 Comm: syz.4.1045 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  366.135874][T11196] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  366.135885][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  366.135902][T11196] Call Trace:
[  366.135912][T11196]  <TASK>
[  366.135922][T11196]  dump_stack_lvl+0x100/0x190
[  366.135965][T11196]  should_fail_ex.cold+0x5/0xa
[  366.136011][T11196]  should_failslab+0xc2/0x120
[  366.136051][T11196]  kmem_cache_alloc_noprof+0x83/0x780
[  366.136099][T11196]  ? security_file_alloc+0x34/0x2c0
[  366.136151][T11196]  ? security_file_alloc+0x34/0x2c0
[  366.136193][T11196]  security_file_alloc+0x34/0x2c0
[  366.136236][T11196]  init_file+0x93/0x4c0
[  366.136274][T11196]  alloc_empty_file+0x73/0x1c0
[  366.136312][T11196]  path_openat+0xe8/0x3120
[  366.136342][T11196]  ? getname_flags+0x93/0xf0
[  366.136367][T11196]  ? do_sys_openat2+0xc5/0x220
[  366.136408][T11196]  ? __x64_sys_openat+0x12d/0x210
[  366.136449][T11196]  ? do_syscall_64+0xc9/0xf80
[  366.136481][T11196]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.136518][T11196]  ? __pfx_path_openat+0x10/0x10
[  366.136561][T11196]  do_filp_open+0x1f7/0x420
[  366.136596][T11196]  ? __pfx_do_filp_open+0x10/0x10
[  366.136656][T11196]  ? _raw_spin_unlock+0x28/0x50
[  366.136683][T11196]  ? alloc_fd+0x476/0x790
[  366.136726][T11196]  do_sys_openat2+0x12e/0x220
[  366.136768][T11196]  ? __pfx_do_sys_openat2+0x10/0x10
[  366.136811][T11196]  ? find_held_lock+0x2b/0x80
[  366.136846][T11196]  __x64_sys_openat+0x12d/0x210
[  366.136891][T11196]  ? __pfx___x64_sys_openat+0x10/0x10
[  366.136932][T11196]  ? xfd_validate_state+0x129/0x190
[  366.136982][T11196]  do_syscall_64+0xc9/0xf80
[  366.137018][T11196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.137046][T11196] RIP: 0033:0x7fdcf4f9aeb9
[  366.137076][T11196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  366.137104][T11196] RSP: 002b:00007fdcf5dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  366.137132][T11196] RAX: ffffffffffffffda RBX: 00007fdcf5215fa0 RCX: 00007fdcf4f9aeb9
[  366.137150][T11196] RDX: 0000000000020000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  366.137168][T11196] RBP: 00007fdcf5008c1f R08: 0000000000000000 R09: 0000000000000000
[  366.137186][T11196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  366.137202][T11196] R13: 00007fdcf5216038 R14: 00007fdcf5215fa0 R15: 00007ffd088d8788
[  366.137239][T11196]  </TASK>
[  366.478796][T11195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  366.553698][T11204] FAULT_INJECTION: forcing a failure.
[  366.553698][T11204] name failslab, interval 1, probability 0, space 0, times 0
[  366.608051][T11204] CPU: 1 UID: 0 PID: 11204 Comm: syz.9.1047 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  366.608102][T11204] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  366.608113][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  366.608130][T11204] Call Trace:
[  366.608141][T11204]  <TASK>
[  366.608151][T11204]  dump_stack_lvl+0x100/0x190
[  366.608194][T11204]  should_fail_ex.cold+0x5/0xa
[  366.608240][T11204]  should_failslab+0xc2/0x120
[  366.608280][T11204]  kmem_cache_alloc_noprof+0x83/0x780
[  366.608317][T11204]  ? security_file_alloc+0x34/0x2c0
[  366.608368][T11204]  ? security_file_alloc+0x34/0x2c0
[  366.608410][T11204]  security_file_alloc+0x34/0x2c0
[  366.608453][T11204]  init_file+0x93/0x4c0
[  366.608492][T11204]  alloc_empty_file+0x73/0x1c0
[  366.608533][T11204]  path_openat+0xe8/0x3120
[  366.608564][T11204]  ? getname_flags+0x93/0xf0
[  366.608589][T11204]  ? do_sys_openat2+0xc5/0x220
[  366.608629][T11204]  ? __x64_sys_openat+0x12d/0x210
[  366.608670][T11204]  ? do_syscall_64+0xc9/0xf80
[  366.608701][T11204]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.608738][T11204]  ? __pfx_path_openat+0x10/0x10
[  366.608784][T11204]  do_filp_open+0x1f7/0x420
[  366.608820][T11204]  ? __pfx_do_filp_open+0x10/0x10
[  366.608879][T11204]  ? _raw_spin_unlock+0x28/0x50
[  366.608906][T11204]  ? alloc_fd+0x476/0x790
[  366.608949][T11204]  do_sys_openat2+0x12e/0x220
[  366.608996][T11204]  ? __pfx_do_sys_openat2+0x10/0x10
[  366.609049][T11204]  ? __fget_files+0x21f/0x3d0
[  366.609089][T11204]  __x64_sys_openat+0x12d/0x210
[  366.609133][T11204]  ? __pfx___x64_sys_openat+0x10/0x10
[  366.609174][T11204]  ? xfd_validate_state+0x129/0x190
[  366.609230][T11204]  do_syscall_64+0xc9/0xf80
[  366.609267][T11204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.609294][T11204] RIP: 0033:0x7f4ef5f5b78e
[  366.609318][T11204] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  366.609345][T11204] RSP: 002b:00007f4ef6e36ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  366.609372][T11204] RAX: ffffffffffffffda RBX: 00007f4ef6e376c0 RCX: 00007f4ef5f5b78e
[  366.609391][T11204] RDX: 0000000000000000 RSI: 00007f4ef6e36f90 RDI: ffffffffffffff9c
[  366.609410][T11204] RBP: 00007f4ef6008c1f R08: 0000000000000000 R09: 0000000000000000
[  366.609428][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  366.609444][T11204] R13: 00007f4ef6216038 R14: 00007f4ef6215fa0 R15: 00007ffed170e0f8
[  366.609481][T11204]  </TASK>
[  367.183381][T11211] FAULT_INJECTION: forcing a failure.
[  367.183381][T11211] name fail_futex, interval 1, probability 0, space 0, times 0
[  367.235677][T11211] CPU: 0 UID: 0 PID: 11211 Comm: syz.4.1048 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  367.235728][T11211] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  367.235739][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  367.235752][T11211] Call Trace:
[  367.235761][T11211]  <TASK>
[  367.235772][T11211]  dump_stack_lvl+0x100/0x190
[  367.235815][T11211]  should_fail_ex.cold+0x5/0xa
[  367.235860][T11211]  get_futex_key+0x1d2/0x1620
[  367.235899][T11211]  ? __pfx_get_futex_key+0x10/0x10
[  367.235949][T11211]  futex_wake+0xea/0x530
[  367.235999][T11211]  ? rcu_is_watching+0x12/0xc0
[  367.236029][T11211]  ? lockdep_hardirqs_on+0x78/0x100
[  367.236063][T11211]  ? __pfx_futex_wake+0x10/0x10
[  367.236110][T11211]  ? fd_install+0x223/0x580
[  367.236139][T11211]  ? putname+0xf5/0x1a0
[  367.236182][T11211]  do_futex+0x32b/0x350
[  367.236220][T11211]  ? __pfx_do_futex+0x10/0x10
[  367.236253][T11211]  ? __pfx_do_sys_openat2+0x10/0x10
[  367.236298][T11211]  ? __fget_files+0x21f/0x3d0
[  367.236332][T11211]  __x64_sys_futex+0x34f/0x4d0
[  367.236370][T11211]  ? __x64_sys_openat+0x12d/0x210
[  367.236413][T11211]  ? __pfx___x64_sys_futex+0x10/0x10
[  367.236447][T11211]  ? xfd_validate_state+0x129/0x190
[  367.236501][T11211]  do_syscall_64+0xc9/0xf80
[  367.236538][T11211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.236567][T11211] RIP: 0033:0x7fdcf4f9aeb9
[  367.236590][T11211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  367.236616][T11211] RSP: 002b:00007fdcf5dcb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  367.236641][T11211] RAX: ffffffffffffffda RBX: 00007fdcf5215fa8 RCX: 00007fdcf4f9aeb9
[  367.236659][T11211] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdcf5215fac
[  367.236675][T11211] RBP: 00007fdcf5215fa0 R08: 0000000000000000 R09: 0000000000000000
[  367.236692][T11211] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[  367.236708][T11211] R13: 00007fdcf5216038 R14: 00007ffd088d86a0 R15: 00007ffd088d8788
[  367.236744][T11211]  </TASK>
[  368.849744][T11270] FAULT_INJECTION: forcing a failure.
[  368.849744][T11270] name failslab, interval 1, probability 0, space 0, times 0
[  368.862520][T11270] CPU: 1 UID: 0 PID: 11270 Comm: syz.4.1058 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  368.862549][T11270] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  368.862562][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  368.862578][T11270] Call Trace:
[  368.862587][T11270]  <TASK>
[  368.862599][T11270]  dump_stack_lvl+0x100/0x190
[  368.862623][T11270]  should_fail_ex.cold+0x5/0xa
[  368.862648][T11270]  should_failslab+0xc2/0x120
[  368.862668][T11270]  kmem_cache_alloc_noprof+0x83/0x780
[  368.862687][T11270]  ? pidfs_register_pid+0x97/0x200
[  368.862708][T11270]  ? pidfs_register_pid+0x97/0x200
[  368.862723][T11270]  pidfs_register_pid+0x97/0x200
[  368.862739][T11270]  unix_socketpair+0xda/0x8c0
[  368.862758][T11270]  __sys_socketpair+0x2f7/0x5b0
[  368.862779][T11270]  ? __pfx___sys_socketpair+0x10/0x10
[  368.862819][T11270]  __x64_sys_socketpair+0x96/0x100
[  368.862837][T11270]  ? lockdep_hardirqs_on+0x78/0x100
[  368.862855][T11270]  do_syscall_64+0xc9/0xf80
[  368.862875][T11270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.862890][T11270] RIP: 0033:0x7fdcf4f9aeb9
[  368.862903][T11270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  368.862917][T11270] RSP: 002b:00007fdcf5dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  368.862932][T11270] RAX: ffffffffffffffda RBX: 00007fdcf5215fa0 RCX: 00007fdcf4f9aeb9
[  368.862942][T11270] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  368.862951][T11270] RBP: 00007fdcf5008c1f R08: 0000000000000000 R09: 0000000000000000
[  368.862960][T11270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.862969][T11270] R13: 00007fdcf5216038 R14: 00007fdcf5215fa0 R15: 00007ffd088d8788
[  368.862988][T11270]  </TASK>
[  370.975378][T11333] FAULT_INJECTION: forcing a failure.
[  370.975378][T11333] name failslab, interval 1, probability 0, space 0, times 0
[  371.022922][T11333] CPU: 0 UID: 0 PID: 11333 Comm: syz.9.1070 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  371.022972][T11333] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  371.022983][T11333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  371.022999][T11333] Call Trace:
[  371.023009][T11333]  <TASK>
[  371.023019][T11333]  dump_stack_lvl+0x100/0x190
[  371.023058][T11333]  should_fail_ex.cold+0x5/0xa
[  371.023104][T11333]  should_failslab+0xc2/0x120
[  371.023143][T11333]  kmem_cache_alloc_noprof+0x83/0x780
[  371.023180][T11333]  ? alloc_empty_file+0x55/0x1c0
[  371.023226][T11333]  ? alloc_empty_file+0x55/0x1c0
[  371.023263][T11333]  alloc_empty_file+0x55/0x1c0
[  371.023305][T11333]  path_openat+0xe8/0x3120
[  371.023336][T11333]  ? getname_flags+0x93/0xf0
[  371.023362][T11333]  ? do_sys_openat2+0xc5/0x220
[  371.023401][T11333]  ? __x64_sys_openat+0x12d/0x210
[  371.023448][T11333]  ? do_syscall_64+0xc9/0xf80
[  371.023481][T11333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.023518][T11333]  ? __pfx_path_openat+0x10/0x10
[  371.023564][T11333]  do_filp_open+0x1f7/0x420
[  371.023600][T11333]  ? __pfx_do_filp_open+0x10/0x10
[  371.023658][T11333]  ? _raw_spin_unlock+0x28/0x50
[  371.023685][T11333]  ? alloc_fd+0x476/0x790
[  371.023727][T11333]  do_sys_openat2+0x12e/0x220
[  371.023769][T11333]  ? __pfx_do_sys_openat2+0x10/0x10
[  371.023814][T11333]  ? __fget_files+0x21f/0x3d0
[  371.023853][T11333]  __x64_sys_openat+0x12d/0x210
[  371.023896][T11333]  ? __pfx___x64_sys_openat+0x10/0x10
[  371.023936][T11333]  ? xfd_validate_state+0x129/0x190
[  371.023992][T11333]  do_syscall_64+0xc9/0xf80
[  371.024039][T11333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.024067][T11333] RIP: 0033:0x7f4ef5f5b78e
[  371.024094][T11333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  371.024122][T11333] RSP: 002b:00007f4ef6e36ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  371.024149][T11333] RAX: ffffffffffffffda RBX: 00007f4ef6e376c0 RCX: 00007f4ef5f5b78e
[  371.024167][T11333] RDX: 0000000000000000 RSI: 00007f4ef6e36f90 RDI: ffffffffffffff9c
[  371.024186][T11333] RBP: 00007f4ef6008c1f R08: 0000000000000000 R09: 0000000000000000
[  371.024203][T11333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  371.024220][T11333] R13: 00007f4ef6216038 R14: 00007f4ef6215fa0 R15: 00007ffed170e0f8
[  371.024258][T11333]  </TASK>
[  372.749726][T11377] FAULT_INJECTION: forcing a failure.
[  372.749726][T11377] name failslab, interval 1, probability 0, space 0, times 0
[  372.818042][T11377] CPU: 1 UID: 0 PID: 11377 Comm: syz.9.1082 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  372.818090][T11377] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  372.818102][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  372.818119][T11377] Call Trace:
[  372.818127][T11377]  <TASK>
[  372.818137][T11377]  dump_stack_lvl+0x100/0x190
[  372.818175][T11377]  should_fail_ex.cold+0x5/0xa
[  372.818220][T11377]  should_failslab+0xc2/0x120
[  372.818257][T11377]  kmem_cache_alloc_lru_noprof+0x8e/0x7d0
[  372.818303][T11377]  ? inode_set_ctime_current+0x283/0x7d0
[  372.818340][T11377]  ? __d_alloc+0x34/0xa80
[  372.818378][T11377]  ? __d_alloc+0x34/0xa80
[  372.818409][T11377]  __d_alloc+0x34/0xa80
[  372.818440][T11377]  ? __ns_ref_active_get+0x9f/0x1b0
[  372.818479][T11377]  path_from_stashed+0x427/0x750
[  372.818512][T11377]  ? do_raw_spin_unlock+0x145/0x1e0
[  372.818558][T11377]  ns_get_path+0x60/0x80
[  372.818588][T11377]  proc_ns_get_link+0x121/0x230
[  372.818622][T11377]  ? __pfx_proc_ns_get_link+0x10/0x10
[  372.818645][T11377]  ? atime_needs_update+0x8b/0x6b0
[  372.818669][T11377]  pick_link+0xd17/0x13c0
[  372.818683][T11377]  ? __pfx_proc_ns_get_link+0x10/0x10
[  372.818705][T11377]  step_into_slowpath+0x6c2/0xf50
[  372.818723][T11377]  ? __pfx_step_into_slowpath+0x10/0x10
[  372.818737][T11377]  ? find_held_lock+0x2b/0x80
[  372.818758][T11377]  path_openat+0xf95/0x3120
[  372.818781][T11377]  ? __pfx_path_openat+0x10/0x10
[  372.818804][T11377]  do_filp_open+0x1f7/0x420
[  372.818823][T11377]  ? __pfx_do_filp_open+0x10/0x10
[  372.818852][T11377]  ? _raw_spin_unlock+0x28/0x50
[  372.818867][T11377]  ? alloc_fd+0x476/0x790
[  372.818888][T11377]  do_sys_openat2+0x12e/0x220
[  372.818910][T11377]  ? __pfx_do_sys_openat2+0x10/0x10
[  372.818939][T11377]  __x64_sys_openat+0x12d/0x210
[  372.818961][T11377]  ? __pfx___x64_sys_openat+0x10/0x10
[  372.818982][T11377]  ? xfd_validate_state+0x129/0x190
[  372.819010][T11377]  do_syscall_64+0xc9/0xf80
[  372.819028][T11377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.819043][T11377] RIP: 0033:0x7f4ef5f5b78e
[  372.819057][T11377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  372.819075][T11377] RSP: 002b:00007f4ef6e36ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  372.819091][T11377] RAX: ffffffffffffffda RBX: 00007f4ef6e376c0 RCX: 00007f4ef5f5b78e
[  372.819101][T11377] RDX: 0000000000000002 RSI: 00007f4ef6e36f90 RDI: ffffffffffffff9c
[  372.819111][T11377] RBP: 00007f4ef6008c1f R08: 0000000000000000 R09: 0000000000000000
[  372.819121][T11377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.819130][T11377] R13: 00007f4ef6216038 R14: 00007f4ef6215fa0 R15: 00007ffed170e0f8
[  372.819150][T11377]  </TASK>
[  373.317633][ T8892] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260
[  373.317675][ T8892] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260
[  373.340446][ T8892] Bluetooth: hci4: Unknown advertising packet type: 0x7f
[  373.340489][ T8892] Bluetooth: hci4: adv larger than maximum supported
[  373.397383][ T8892] Bluetooth: hci4: Unknown advertising packet type: 0x7f
[  373.404216][ T8892] Bluetooth: hci4: adv larger than maximum supported
[  373.411682][ T8892] Bluetooth: hci4: adv larger than maximum supported
[  373.427030][ T8892] Bluetooth: hci4: Malformed LE Event: 0x0d
[  376.063990][ T8274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  376.082089][ T8274] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  376.096025][ T8274] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  376.108358][ T8274] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  376.115955][ T8274] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  376.145608][   T30] audit: type=1326 audit(2147483665.120:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11443 comm="syz.9.1097" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ef5f9aeb9 code=0x0
[  376.436351][T11454] __nla_validate_parse: 56 callbacks suppressed
[  376.436367][T11454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1098'.
[  376.634184][T11454] team0: Port device team_slave_0 removed
[  376.745314][T11458] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1099'.
[  376.771059][T11458] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1099'.
[  376.805936][T11458] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1099'.
[  376.985700][T11469] openvswitch: netlink: VXLAN extension 64 out of range max 1
[  377.012958][T11469] Invalid ELF header magic: != ELF
[  377.204299][T11448] chnl_net:caif_netlink_parms(): no params data found
[  377.403224][T11471] vcan0: tx drop: invalid sa for name 0x00000000000000fd
[  377.555669][T11448] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.573103][T11448] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.595671][T11448] bridge_slave_0: entered allmulticast mode
[  377.629631][T11448] bridge_slave_0: entered promiscuous mode
[  377.655746][T11448] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.690197][T11448] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.707766][T11448] bridge_slave_1: entered allmulticast mode
[  377.721826][T11448] bridge_slave_1: entered promiscuous mode
[  377.816364][T11448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.912379][T11448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.927010][T11488] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  378.076310][T11448] team0: Port device team_slave_0 added
[  378.219515][ T8892] Bluetooth: hci7: command tx timeout
[  378.321036][T11448] team0: Port device team_slave_1 added
[  378.420780][T11448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.588711][T11448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.683074][T11448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  378.736168][T11448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  378.758551][T11448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.820485][T11448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.975842][T11448] hsr_slave_0: entered promiscuous mode
[  378.989376][T11448] hsr_slave_1: entered promiscuous mode
[  378.996188][T11448] debugfs: 'hsr0' already exists in 'hsr'
[  379.018629][T11448] Cannot create hsr debugfs directory
[  379.380190][T11448] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.501828][T11448] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.521386][T11513] tipc: Trying to set illegal importance in message
[  379.612666][T11448] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.273737][T11448] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  380.298377][ T8892] Bluetooth: hci7: command tx timeout
[  380.316153][T11448] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  380.355285][T11448] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  380.373935][T11448] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  380.550021][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'.
[  380.666572][T11448] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.759861][T11448] 8021q: adding VLAN 0 to HW filter on device team0
[  380.796043][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.803262][ T8279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.858435][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.865582][ T8279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.039106][T11552] vivid-007: =================  START STATUS  =================
[  381.057633][T11552] vivid-007: Generate PTS: true
[  381.067901][T11552] vivid-007: Generate SCR: true
[  381.086102][T11552] tpg source WxH: 320x240 (Y'CbCr)
[  381.124665][T11552] tpg field: 1
[  381.137552][T11552] tpg crop: (0,0)/320x240
[  381.144188][T11552] tpg compose: (0,0)/320x240
[  381.162472][T11552] tpg colorspace: 8
[  381.171636][T11552] tpg transfer function: 0/0
[  381.190219][T11552] tpg Y'CbCr encoding: 0/0
[  381.194738][T11552] tpg quantization: 0/0
[  381.226340][T11552] tpg RGB range: 0/2
[  381.238677][T11552] vivid-007: ==================  END STATUS  ==================
[  381.529444][ T8892] Bluetooth: hci9: unexpected subevent 0x01 length: 123 > 18
[  382.015866][T11448] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.207209][T11448] veth0_vlan: entered promiscuous mode
[  382.233855][T11448] veth1_vlan: entered promiscuous mode
[  382.321105][T11448] veth0_macvtap: entered promiscuous mode
[  382.341377][T11448] veth1_macvtap: entered promiscuous mode
[  382.378169][ T8274] Bluetooth: hci7: command tx timeout
[  382.414949][T11448] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.444153][T11448] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.478155][T10001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.500914][T10001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.545580][T10001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.602334][T10001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.828404][ T8279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.846561][ T8279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.962505][ T9997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.010690][ T9997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.355821][T11617] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  383.372529][T11617] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  383.944025][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  383.956405][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  384.071678][T11626] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  384.108685][T11626] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0
[  384.286042][T11632] kafs: addr_prefs: Invalid Command
[  384.458212][ T8274] Bluetooth: hci7: command tx timeout
[  384.542359][T11618] kexec: Could not allocate control_code_buffer
[  384.804907][T11643] netlink: Conntrack attr has 16 unknown bytes
[  384.844558][T11648] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1137'.
[  384.903856][T11648] team0: Port device team_slave_0 removed
[  385.517748][T11659] netlink: 'syz.0.1140': attribute type 268 has an invalid length.
[  385.699371][T11650] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  385.884922][   T30] audit: type=1326 audit(2147483674.870:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.0.1142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f715539aeb9 code=0x0
[  386.219724][T11692] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1146'.
[  386.248420][T11690] vivid-007: =================  START STATUS  =================
[  386.263899][T11690] vivid-007: Generate PTS: true
[  386.271970][T11690] vivid-007: Generate SCR: true
[  386.304720][T11690] tpg source WxH: 320x240 (Y'CbCr)
[  386.332699][T11690] tpg field: 1
[  386.337261][T11690] tpg crop: (0,0)/320x240
[  386.344120][T11690] tpg compose: (0,0)/320x240
[  386.350211][T11690] tpg colorspace: 8
[  386.355315][T11690] tpg transfer function: 0/0
[  386.361107][T11690] tpg Y'CbCr encoding: 0/0
[  386.365714][T11690] tpg quantization: 0/0
[  386.372606][T11690] tpg RGB range: 0/2
[  386.391649][T11690] vivid-007: ==================  END STATUS  ==================
[  387.027983][T11705] ptp ptp0: only physical clock in use now
[  387.065183][T11705] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1147'.
[  387.089757][T11705] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  388.390642][   T31] INFO: task kworker/u11:1:8277 blocked for more than 143 seconds.
[  388.414058][   T31]       Tainted: G     U       L      syzkaller #0
[  388.581490][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  388.607370][   T31] task:kworker/u11:1   state:D stack:26776 pid:8277  tgid:8277  ppid:2      task_flags:0x4208060 flags:0x00080000
[  388.663766][   T31] Workqueue: netns cleanup_net
[  388.673271][   T31] Call Trace:
[  388.676621][   T31]  <TASK>
[  388.683980][T11751] Format for deleting device is "id" (uint).
[  388.696204][   T31]  ? __schedule+0xf67/0x5fa0
[  388.701924][   T31]  __schedule+0xfe6/0x5fa0
[  388.706468][   T31]  ? __lock_acquire+0x4a5/0x2630
[  388.711576][   T31]  ? __pfx___schedule+0x10/0x10
[  388.716699][   T31]  ? find_held_lock+0x2b/0x80
[  388.779601][   T31]  ? schedule+0x2bf/0x390
[  388.795333][   T31]  schedule+0xdd/0x390
[  388.818204][   T31]  schedule_timeout+0x1b2/0x280
[  388.853344][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  388.866358][   T31]  ? mark_held_locks+0x40/0x70
[  388.877135][   T31]  __wait_for_common+0x2e7/0x4c0
[  388.889031][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  388.900191][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  388.908702][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  388.914136][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  388.930524][   T31]  __flush_workqueue+0x3f7/0x1200
[  388.947841][   T31]  ? __lock_acquire+0x4a5/0x2630
[  388.959056][   T31]  ? __lock_acquire+0x4a5/0x2630
[  388.969879][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  388.986662][   T31]  ? reacquire_held_locks+0xce/0x1e0
[  388.997520][   T31]  ? __pfx_sock_def_readable+0x10/0x10
[  389.003185][   T31]  ? __pfx_sock_def_readable+0x10/0x10
[  389.031862][   T31]  rds_tcp_listen_stop+0x104/0x160
[  389.047240][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[  389.059775][   T31]  rds_tcp_exit_net+0xcb/0x810
[  389.090828][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[  389.104706][   T31]  ? __pfx___might_resched+0x10/0x10
[  389.117702][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[  389.133421][   T31]  ops_undo_list+0x2ee/0xab0
[  389.155540][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  389.169116][   T31]  ? cleanup_net+0x345/0x830
[  389.173768][   T31]  ? idr_destroy+0x62/0x2e0
[  389.179887][   T31]  cleanup_net+0x419/0x830
[  389.184341][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  389.194106][   T31]  ? rcu_is_watching+0x12/0xc0
[  389.207395][   T31]  process_one_work+0x9c2/0x1840
[  389.212452][   T31]  ? __pfx_process_one_work+0x10/0x10
[  389.220311][   T31]  ? assign_work+0x19c/0x250
[  389.224993][   T31]  worker_thread+0x5da/0xe40
[  389.229755][   T31]  ? kthread+0x17d/0x730
[  389.234214][   T31]  ? __pfx_worker_thread+0x10/0x10
[  389.239801][   T31]  kthread+0x3b3/0x730
[  389.245065][   T31]  ? __pfx_kthread+0x10/0x10
[  389.249825][   T31]  ? ret_from_fork+0x79/0xaf0
[  389.254642][   T31]  ? ret_from_fork+0x79/0xaf0
[  389.259631][   T31]  ? rcu_is_watching+0x12/0xc0
[  389.264422][   T31]  ? __pfx_kthread+0x10/0x10
[  389.269124][   T31]  ret_from_fork+0x754/0xaf0
[  389.273913][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  389.279194][   T31]  ? __switch_to+0x7b9/0x10c0
[  389.284124][   T31]  ? __pfx_kthread+0x10/0x10
[  389.289062][   T31]  ret_from_fork_asm+0x1a/0x30
[  389.293886][   T31]  </TASK>
[  389.296933][   T31] INFO: task syz.0.467:8369 blocked for more than 144 seconds.
[  389.304569][   T31]       Tainted: G     U       L      syzkaller #0
[  389.311137][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  389.319848][   T31] task:syz.0.467       state:D stack:24184 pid:8369  tgid:8346  ppid:5825   task_flags:0x400140 flags:0x00080002
[  389.332013][   T31] Call Trace:
[  389.335309][   T31]  <TASK>
[  389.338586][   T31]  ? __schedule+0xf67/0x5fa0
[  389.343222][   T31]  __schedule+0xfe6/0x5fa0
[  389.349235][   T31]  ? __lock_acquire+0x4a5/0x2630
[  389.354256][   T31]  ? __pfx___schedule+0x10/0x10
[  389.359270][   T31]  ? find_held_lock+0x2b/0x80
[  389.363979][   T31]  ? schedule+0x2bf/0x390
[  389.368416][   T31]  schedule+0xdd/0x390
[  389.372622][   T31]  schedule_timeout+0x1b2/0x280
[  389.377596][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  389.383013][   T31]  ? mark_held_locks+0x40/0x70
[  389.387873][   T31]  __wait_for_common+0x2e7/0x4c0
[  389.392865][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  389.398552][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  389.404048][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  389.409590][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  389.415438][   T31]  __flush_workqueue+0x3f7/0x1200
[  389.424187][   T31]  ? __lock_acquire+0x4a5/0x2630
[  389.429457][   T31]  ? __lock_acquire+0x4a5/0x2630
[  389.434438][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  389.440030][   T31]  ? reacquire_held_locks+0xce/0x1e0
[  389.445380][   T31]  ? __pfx_sock_def_readable+0x10/0x10
[  389.452046][   T31]  ? __pfx_sock_def_readable+0x10/0x10
[  389.457831][   T31]  rds_tcp_listen_stop+0x104/0x160
[  389.463051][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[  389.468543][   T31]  rds_tcp_exit_net+0xcb/0x810
[  389.473333][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[  389.478803][   T31]  ? __pfx___might_resched+0x10/0x10
[  389.484116][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[  389.489697][   T31]  ops_undo_list+0x2ee/0xab0
[  389.494338][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  389.500180][   T31]  ? ops_init+0x2f0/0x5f0
[  389.504546][   T31]  ? ops_init+0x2fa/0x5f0
[  389.509053][   T31]  setup_net+0x1fa/0x3a0
[  389.513413][   T31]  ? __pfx_setup_net+0x10/0x10
[  389.518380][   T31]  ? lockdep_init_map_type+0x5c/0x250
[  389.523784][   T31]  ? mutex_init_lockep+0x110/0x150
[  389.529050][   T31]  copy_net_ns+0x46f/0x7c0
[  389.533504][   T31]  create_new_namespaces+0x3ea/0xab0
[  389.539027][   T31]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  389.544739][   T31]  ksys_unshare+0x455/0xab0
[  389.549450][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  389.555662][   T31]  ? do_user_addr_fault+0x8d6/0x12f0
[  389.561100][   T31]  __x64_sys_unshare+0x31/0x40
[  389.565892][   T31]  do_syscall_64+0xc9/0xf80
[  389.570790][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.576802][   T31] RIP: 0033:0x7fe22fd9aeb9
[  389.581309][   T31] RSP: 002b:00007fe230c38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  389.589889][   T31] RAX: ffffffffffffffda RBX: 00007fe230016360 RCX: 00007fe22fd9aeb9
[  389.597970][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  389.606021][   T31] RBP: 00007fe22fe08c1f R08: 0000000000000000 R09: 0000000000000000
[  389.614138][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  389.622243][   T31] R13: 00007fe2300163f8 R14: 00007fe230016360 R15: 00007ffd9b99ea28
[  389.630329][   T31]  </TASK>
[  389.633492][   T31] 
[  389.633492][   T31] Showing all locks held in the system:
[  389.657617][   T31] 1 lock held by khungtaskd/31:
[  389.663074][   T31]  #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  389.673122][   T31] 2 locks held by getty/5584:
[  389.679090][   T31]  #0: ffff88803691d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  389.689000][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[  389.737098][   T31] 3 locks held by kworker/u11:1/8277:
[  389.742748][   T31]  #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[  389.753218][   T31]  #1: ffffc9000bac7c98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[  389.764202][   T31]  #2: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830
[  389.773700][   T31] 1 lock held by syz.0.467/8369:
[  389.778884][   T31]  #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  389.788657][   T31] 1 lock held by syz.1.560/8787:
[  389.793641][   T31]  #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  389.803230][   T31] 1 lock held by syz.2.636/9128:
[  389.808294][   T31]  #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  389.818885][   T31] 1 lock held by syz.5.729/9539:
[  389.823847][   T31]  #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  389.833411][   T31] 1 lock held by syz.6.811/9993:
[  389.838442][   T31]  #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  389.847981][   T31] 1 lock held by syz.8.1026/11055:
[  389.853100][   T31]  #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  389.863569][   T31] 
[  389.865905][   T31] =============================================
[  389.865905][   T31] 
[  389.874392][   T31] NMI backtrace for cpu 1
[  389.874410][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  389.874445][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  389.874453][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  389.874466][   T31] Call Trace:
[  389.874478][   T31]  <TASK>
[  389.874486][   T31]  dump_stack_lvl+0x100/0x190
[  389.874519][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  389.874548][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  389.874588][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  389.874630][   T31]  sys_info+0x141/0x190
[  389.874661][   T31]  watchdog+0xcc3/0xfe0
[  389.874714][   T31]  ? __pfx_watchdog+0x10/0x10
[  389.874742][   T31]  ? __kthread_parkme+0x18c/0x230
[  389.874771][   T31]  ? __pfx_watchdog+0x10/0x10
[  389.874798][   T31]  ? __pfx_watchdog+0x10/0x10
[  389.874823][   T31]  kthread+0x3b3/0x730
[  389.874861][   T31]  ? __pfx_kthread+0x10/0x10
[  389.874894][   T31]  ? ret_from_fork+0x79/0xaf0
[  389.874919][   T31]  ? ret_from_fork+0x79/0xaf0
[  389.874944][   T31]  ? rcu_is_watching+0x12/0xc0
[  389.874967][   T31]  ? __pfx_kthread+0x10/0x10
[  389.875003][   T31]  ret_from_fork+0x754/0xaf0
[  389.875028][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  389.875054][   T31]  ? __switch_to+0x7b9/0x10c0
[  389.875085][   T31]  ? __pfx_kthread+0x10/0x10
[  389.875119][   T31]  ret_from_fork_asm+0x1a/0x30
[  389.875171][   T31]  </TASK>
[  389.875208][   T31] Sending NMI from CPU 1 to CPUs 0:
[  390.024271][    C0] NMI backtrace for cpu 0
[  390.024293][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  390.024328][    C0] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  390.024336][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  390.024350][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  390.024380][    C0] Code: 96 7a 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 5c 17 00 fb f4 <e9> 7c 33 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  390.024400][    C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000242
[  390.024418][    C0] RAX: 000000000027e531 RBX: ffffffff8e297ac0 RCX: ffffffff8b7424b5
[  390.024434][    C0] RDX: 0000000000000000 RSI: ffffffff8dc41f2c RDI: ffffffff8bfa35a0
[  390.024448][    C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d
[  390.024462][    C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58
[  390.024476][    C0] R13: 0000000000000000 R14: ffffffff90b774d0 R15: 0000000000000000
[  390.024490][    C0] FS:  0000000000000000(0000) GS:ffff8881245e2000(0000) knlGS:0000000000000000
[  390.024511][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  390.024527][    C0] CR2: 00002000001ea000 CR3: 000000007cf9e000 CR4: 00000000003526f0
[  390.024542][    C0] Call Trace:
[  390.024549][    C0]  <TASK>
[  390.024556][    C0]  default_idle+0x9/0x10
[  390.024586][    C0]  default_idle_call+0x6c/0xb0
[  390.024615][    C0]  do_idle+0x35b/0x4b0
[  390.024639][    C0]  ? __pfx_do_idle+0x10/0x10
[  390.024665][    C0]  cpu_startup_entry+0x4f/0x60
[  390.024688][    C0]  rest_init+0x251/0x260
[  390.024717][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  390.024743][    C0]  start_kernel+0x47a/0x480
[  390.024766][    C0]  x86_64_start_reservations+0x24/0x30
[  390.024790][    C0]  x86_64_start_kernel+0x122/0x130
[  390.024814][    C0]  common_startup_64+0x13e/0x148
[  390.024849][    C0]  </TASK>
[  390.221096][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  390.227987][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  390.238659][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  390.243849][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  390.253896][   T31] Call Trace:
[  390.257170][   T31]  <TASK>
[  390.260092][   T31]  dump_stack_lvl+0x100/0x190
[  390.264764][   T31]  vpanic+0x20d/0x630
[  390.268748][   T31]  panic+0xd1/0xd1
[  390.272499][   T31]  ? __pfx_panic+0x10/0x10
[  390.276956][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  390.283219][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  390.289455][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  390.295609][   T31]  ? watchdog.cold+0x198/0x1ca
[  390.300365][   T31]  ? watchdog+0xcd3/0xfe0
[  390.304684][   T31]  watchdog.cold+0x1a9/0x1ca
[  390.309273][   T31]  ? __pfx_watchdog+0x10/0x10
[  390.314202][   T31]  ? __kthread_parkme+0x18c/0x230
[  390.319239][   T31]  ? __pfx_watchdog+0x10/0x10
[  390.323942][   T31]  ? __pfx_watchdog+0x10/0x10
[  390.328626][   T31]  kthread+0x3b3/0x730
[  390.332727][   T31]  ? __pfx_kthread+0x10/0x10
[  390.337331][   T31]  ? ret_from_fork+0x79/0xaf0
[  390.342025][   T31]  ? ret_from_fork+0x79/0xaf0
[  390.346728][   T31]  ? rcu_is_watching+0x12/0xc0
[  390.351517][   T31]  ? __pfx_kthread+0x10/0x10
[  390.356210][   T31]  ret_from_fork+0x754/0xaf0
[  390.360805][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  390.365940][   T31]  ? __switch_to+0x7b9/0x10c0
[  390.371145][   T31]  ? __pfx_kthread+0x10/0x10
[  390.375759][   T31]  ret_from_fork_asm+0x1a/0x30
[  390.380553][   T31]  </TASK>
[  390.383963][   T31] Kernel Offset: disabled
[  390.388277][   T31] Rebooting in 86400 seconds..