last executing test programs:

4m58.355450447s ago: executing program 0 (id=1521):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x9}, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket(0xa, 0x3, 0x5)
openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000)
mmap$auto(0x0, 0x2020009, 0x40003, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x0, 0x4, 0x5, 0x3d3c)
timer_create$auto(0x3, 0x0, 0x0)
timer_settime$auto(0x0, 0x801, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0)
socket(0x29, 0x2, 0x0)
socket(0x1d, 0x2, 0x2)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x801, 0x0)
socket(0x2, 0x2, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/asound/card0/pcm0c/info\x00', 0x3d6b00, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/slab/kmalloc-64/min_partial\x00', 0x501, 0x0)
socket(0x10, 0x2, 0x0)
r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0)
ioctl$auto_USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000040)={0xa1b, 0x855, 0xdb, &(0x7f00000001c0)="da94e86c1133f19d41954e5e478867a6ce81e3a35fdfcb7218478bb35df4d94e3829f499ee8c3937725253b52a52f6ae937b8dbd55cfe0d4d330c0d563e17c3069d8747dbb7467ce1ace7b"})
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)

4m57.294361461s ago: executing program 0 (id=1527):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x8, 0x1, 0x7b)
connect$auto(0x3, &(0x7f0000000000)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x55)
r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
write$auto_cachefiles_daemon_fops_internal(r0, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0)
socket(0x2b, 0x1, 0x0)
socket(0xa, 0x1, 0x84)
socket(0x28, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0)
io_uring_setup$auto(0x1, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
socket(0x2, 0x3, 0xa)
close_range$auto(0x2, 0xa, 0x0)

4m56.341392597s ago: executing program 0 (id=1533):
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003800)=""/168, 0xa8)
r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rxrpc/calls\x00', 0x40280, 0x0)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x400c004)
sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x90080200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826fd7000fcdbdf250300000008000a001800000005000d0005000000"], 0x24}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x11)
sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000031eacc97c5cc02f78b07d9716233087983793ba522b0", @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf250300000006001d000000000008000900090000000c000f000400000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x5)
mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r1, 0x40107447, 0x0)
socket(0xa, 0x3, 0x100)
r2 = socketpair$auto(0xb, 0xd, 0x800e8, 0x0)
socket(0x8, 0x1, 0x0)
mmap$auto(0x0, 0x4, 0x9c07, 0x9b72, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0x7452c3, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000002ac0)=""/64, 0x40)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x6fffffc)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x8003e, 0x9, 0xffffffffffffffff, 0x7, 0x100000000000000)
bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x6, 0x7ff, 0x257c, 0x1, 0x722a9fd3, r2, 0x4, "5c2941ec80449e6ac7cffbf100f1a6a0", 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x3, 0x4, r3, r0}, 0x171)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x5e, 0x0, 0x100000, 0xffffffffffffaee1, 0xfffffffffffffffe, 0x2, 0x7, 0xbfd, 0x79, 0x30, 0x3, 0x2})
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0)
select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x5, 0x1800000, 0x1, 0x948a, 0x3, 0x800295f4da0a, 0x400, 0x40000000000003, 0x462, 0x80000001, 0x50a7, 0x10000, 0x5, 0x1, 0xfffffffffffffffe]}, 0x0)

4m56.187196261s ago: executing program 0 (id=1535):
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0)
openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace_marker\x00', 0x341, 0x0) (async)
mmap$auto(0x401000000000, 0x40000004020009, 0xc, 0x15, 0xffffffffffffffff, 0x7ffe) (async, rerun: 64)
r0 = socket(0x10, 0x5, 0xd) (async, rerun: 64)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 32)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket(0x2c, 0x6, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0) (async)
setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) (async)
r5 = getuid()
sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="901d0000", @ANYRES64=r2, @ANYBLOB="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", @ANYBLOB="55c5ec9ad8f0becc0ef17f59c1f2e0737713f34fd3b5ad8e970fc74894442ef3dade64e01d8ec59f76cfcd5ebc53d05fff591b40666d75c73b23df18856b5eea36c67338358d5987c69596e5b8c2", @ANYBLOB="5707be7cd8848e7744de2fb3b8bd1dfbcab32ed5616e3e0b305ea367d9c1a760158c9e347046ff09af0a5f8bdb4724075cf1d6f3b30fceabe162bf7d38c2346cdc953da7703957c1acfd0b58c9848d992fd8d3d4ec080400098008003c00", @ANYRESDEC=r0, @ANYRESDEC=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="1800698014006600fe8000000000000000000000000000262000358004007d8008002f00", @ANYRES32=r0, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08001200", @ANYRES32=r1, @ANYBLOB="efaac42583e74436c25ab0b0f91b7d23ad8ac4cc154fe9f92abf9c057f52318bd1d3aaf26f9dda28d46812e2264fc14f2b4eb8f61f2fb8b603da278bf19b9089193630b756d3e3c718d5fe1ce4c95d4f7ee6cafa631be1044301c4bb050f1bab91d2f409000000000000006844c3daffee06dbfe9ca607dbcfa518f6358fe25e8ab1267f8963b70001000000000000bf8b5364970e451c60f0647e2499aab2ed7c17fc954cf85b02f38b073738362e81019b795662a668f2c019072ad9c26c47e755e526a799264d3d0c6f41260caf311c98b5e86acd9010565f8cbb60c303800005debde4afabb226d1923dba04ac92983cc8", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5], 0x1d90}, 0x1, 0x0, 0x0, 0x80}, 0x14) (async, rerun: 32)
setsockopt$auto(0x3, 0x10f, 0x89, 0x0, 0x0) (async, rerun: 32)
recvmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x200, &(0x7f0000000100)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7ffc, 0x20f) (async)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
r6 = prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007)
bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000300)=@bpf_attr_0={0x9a, 0x2, 0x5, 0x8, 0x7eb, r2, 0x5, "e03f43200a26d5ea743998fb7500", 0x0, <r7=>r6, 0x9, 0x1, 0x4, 0x7, r3, r3}, 0x7ff)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r10=>0x0}) (async)
io_uring_setup$auto(0x9, 0x0) (async)
madvise$auto(0x0, 0x2003f0, 0x15) (async)
r11 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_VFIO_IOMMU_MAP_DMA(r11, 0x3b71, 0x0)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x4080)

4m56.015111382s ago: executing program 0 (id=1536):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket(0x29, 0x2, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9)
mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0)
r2 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0)
read$auto_state_fops_(r2, &(0x7f0000000180)=""/61, 0xfffffeeb)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x0, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
connect$auto(0xffffffffffffffff, 0x0, 0x2)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000600), 0x104800, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000200), 0x3c1941, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_max_time_ms\x00', 0x40200, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff)
shmctl$auto_SHM_INFO(0xb46, 0xe, &(0x7f00000002c0)={{0x4, <r6=>0x0, 0xee00, 0x4, 0x10001, 0x2, 0xbdf3}, 0x7, 0x39a7e6f3, 0x6, 0x7, @raw=0x586d482f, @inferred=0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000640)="67232662bba5a31cec3c230169be45727a63415549956f600601df5f381e17e6e1f42a13cdcaaf870ae883b1a62daf19db97798b38ff74171a1bdce05104003e202c20d26df90bc5b54721901e3d801657afc020c1313731d3c412169ea0b781e5cbaa1920485246bce8f7e9b1", &(0x7f0000000280)="670d96cb1fd1008b16ecc772cbdadebca57bb53f9b6e"})
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="90010000", @ANYRES16=r5, @ANYBLOB="080025bd7000fedbdf250c000000350103805c006280de3c551b863bc06d4b3b4056b3297629dc9a13809620c109bee68471ca4a09f80a9c4bdd3b2ecdb3d16945fbeed4836cbf7c0ed676916c58dae0132d2963b7e641634d076ece7eab43c0d3a50800a800", @ANYRES32, @ANYBLOB="04001680476af92944ce0cc30ce3352589afb182665f5a801f4ab3755faee5f44d061ab247c1e610128e354f86b44708a91c825a8c5a2c8e7ad686a15f462518301abc0bed1e7e9a5b48747aabed0e92a8a6e785ce49a1bf3e86cd61d3c0893a384d1596386e3b8813b4bf2c2429f5a77250e7a51d6351ff58002b52c262a194c0be9841d29809372a2604aad385c0bc989e1167b60debadbf6ff3adee30e32faf96756eba94de9dc98e2b4e8b4483a0352438e999095faf19457cae9c13d4f836bf5b0b063c5cfc90be8dd748622f8f5608004f0027d8091761e541120b13ce87fbca45e8ac695b45453d4c698b875bc5a90c90dc3aa9380000561d418b55b1990d612fdcbd859962692d45e3f483a43b0ad5e9712bc69b5dc6493a2939a004b9b7e0aac2556c036f156a27c20509e0e6793a580874a663612469383a99acb6014cf38c2042ff82dd8bfcd552a7634c2de6ac9b81e7dd149e5d9243f4bd0011c6a2b329890da05cf9aed3638152bc36fc7419373d7375ed4d303065481187157316a2f8d7f46528eaaf6b29ed8cad0ccb8cca4e38", @ANYRES32=r6, @ANYBLOB="0000004400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e30000000000000140002006772657461703000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x190}, 0x1, 0x0, 0x0, 0x24000085}, 0x40088c1)
lseek$auto(r1, 0x0, 0x4)
readv$auto(r3, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1)
getsockopt$auto(0xffffffffffffffff, 0x805, 0x8e0, &(0x7f0000000480)='/dev/cec27\x00#\xb4\xb7\xfd-:D\xedH\xdd\xfbG\xde\xa1\x92\xe4Dr\x8d6\x83g\xe5\xb8\xda\x8b\xa2\xbdw\xa3\xab7\xd0{\xee\xfaO\xd3Q\xca\x1f\xecc\x80q.\x87:]\xe1\x16x\x87\xc9|Q\x86P\xfe\xef1\xe9W7\xc7\xecd\x03fC\'\x06\xd7\x06F\xe8\xa5\xea\xe0\x041C\xd5\x89\xddL6\x10n\xd9\xb8\xc0\x9fq\x96\xf0V\xcc\x01\x04\xbc\xe7n\xa9\xbf\x8c\x0f\'\r\x8c\x00\x8d\x1c2\xe9\x02\t\xcc%W\t\xa6\x06{\xc6\x16\np\x93b:{(\xb9\x83\x16@\xb3\xf0oJ\xa3\xb3\xefI\x85\xe7;\xeb=\x9e\xb5\xb3\x93\x7f\a\x00\xbd\x8d\x11\x1bY\xed\x1dC\x93\xb4\x8e\xe7!e\xd7w_D\v7|\x1bhdKuk\x0e\x06\xcc\xd9\x03fB\xa3h\f\x1d\x136\t}\xe0\xc9\x1e\xf5_5#2\x82\x06n', 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0)
msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x6, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x7}, 0x0, &(0x7f0000000440)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c6, @raw=0x3, @raw=0x1})
splice$auto(r0, &(0x7f00000001c0)=0x3, 0xffffffffffffffff, &(0x7f00000006c0)=0x5, 0x1, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

4m55.542717104s ago: executing program 0 (id=1538):
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0xf7374674b920089e)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x10, 0x2, 0x0) (async)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x801}, 0x0)
recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x8, 0x0, 0x200002, 0x13}, 0x3}, 0xfffffff9, 0x10, 0x0)
r1 = setfsuid$auto(0xee00)
r2 = setfsuid$auto(0xee01)
setresuid$auto(r1, r2, r1) (async)
setresuid$auto(r1, r2, r1)
mmap$auto(0x0, 0x2000000002, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x29, 0x2, 0x0) (async)
r3 = socket(0x29, 0x2, 0x0)
mmap$auto(0xc5f1, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async)
mmap$auto(0xc5f1, 0x8, 0x2, 0x9b72, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), 0xffffffffffffffff)
r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0)
ioctl$auto_BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, 0x0)
ioctl$auto_BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)="fc1c4959ff21a2458364a2b1590d19513f344e1b39f1cffdd87c4ba311042e1012")
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r3, 0x89f3, 0x24)

4m39.747642034s ago: executing program 32 (id=1538):
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0xf7374674b920089e)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x10, 0x2, 0x0) (async)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x801}, 0x0)
recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x8, 0x0, 0x200002, 0x13}, 0x3}, 0xfffffff9, 0x10, 0x0)
r1 = setfsuid$auto(0xee00)
r2 = setfsuid$auto(0xee01)
setresuid$auto(r1, r2, r1) (async)
setresuid$auto(r1, r2, r1)
mmap$auto(0x0, 0x2000000002, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x29, 0x2, 0x0) (async)
r3 = socket(0x29, 0x2, 0x0)
mmap$auto(0xc5f1, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async)
mmap$auto(0xc5f1, 0x8, 0x2, 0x9b72, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), 0xffffffffffffffff)
r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0)
ioctl$auto_BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, 0x0)
ioctl$auto_BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)="fc1c4959ff21a2458364a2b1590d19513f344e1b39f1cffdd87c4ba311042e1012")
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r3, 0x89f3, 0x24)

2m39.807890355s ago: executing program 2 (id=1949):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0)
writev$auto(r0, &(0x7f00000000c0)={0x0, 0x7}, 0x3)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/sg0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2c, 0x3, 0x0)
socket(0x10, 0x2, 0x4)
r1 = socket(0x10, 0x2, 0x4)
bind$auto(r1, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xe)
bind$auto(0x3, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0x68)
close_range$auto(0x2, 0x8, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r2, 0x8000)
prctl$auto(0x1000000003b, 0x100001, 0x4, 0x80a, 0x6)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72014033ff0000fe71c92266af977fd9f6bcb3ff4cabc5683c175b3af44648a84baef0915f765dddef4e2954ebb0a737d555788da7b59ca9c351dd3387e52b695e08810795b2021233c1360a08f0bd70b0dd62282e18876bcd30a5487d9905e064", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
ioctl$auto_UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0x130, 0x8, 0x10001})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080))
setgroups$auto(0x8, &(0x7f0000000000)=0x5)

2m38.710926748s ago: executing program 2 (id=1951):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket(0x29, 0x2, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9)
mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0)
r2 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0)
read$auto_state_fops_(r2, &(0x7f0000000180)=""/61, 0xfffffeeb)
pivot_root$auto(0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x0, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
connect$auto(0xffffffffffffffff, 0x0, 0x2)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000600), 0x104800, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x3c1941, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_max_time_ms\x00', 0x40200, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff)
shmctl$auto_SHM_INFO(0xb46, 0xe, &(0x7f00000002c0)={{0x4, <r6=>0x0, 0xee00, 0x4, 0x10001, 0x2, 0xbdf3}, 0x7, 0x39a7e6f3, 0x6, 0x7, @raw=0x586d482f, @inferred=0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000640)="67232662bba5a31cec3c230169be45727a63415549956f600601df5f381e17e6e1f42a13cdcaaf870ae883b1a62daf19db97798b38ff74171a1bdce05104003e202c20d26df90bc5b54721901e3d801657afc020c1313731d3c412169ea0b781e5cbaa1920485246bce8f7e9b1", &(0x7f0000000280)="670d96cb1fd1008b16ecc772cbdadebca57bb53f9b6e"})
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="90010000", @ANYRES16=r5, @ANYBLOB="080025bd7000fedbdf250c000000350103805c006280de3c551b863bc06d4b3b4056b3297629dc9a13809620c109bee68471ca4a09f80a9c4bdd3b2ecdb3d16945fbeed4836cbf7c0ed676916c58dae0132d2963b7e641634d076ece7eab43c0d3a50800a800", @ANYRES32, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000004400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e30000000000000140002006772657461703000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x190}, 0x1, 0x0, 0x0, 0x24000085}, 0x40088c1)
lseek$auto(r1, 0x0, 0x4)
readv$auto(r3, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1)
getsockopt$auto(0xffffffffffffffff, 0x805, 0x8e0, &(0x7f0000000480)='/dev/cec27\x00#\xb4\xb7\xfd-:D\xedH\xdd\xfbG\xde\xa1\x92\xe4Dr\x8d6\x83g\xe5\xb8\xda\x8b\xa2\xbdw\xa3\xab7\xd0{\xee\xfaO\xd3Q\xca\x1f\xecc\x80q.\x87:]\xe1\x16x\x87\xc9|Q\x86P\xfe\xef1\xe9W7\xc7\xecd\x03fC\'\x06\xd7\x06F\xe8\xa5\xea\xe0\x041C\xd5\x89\xddL6\x10n\xd9\xb8\xc0\x9fq\x96\xf0V\xcc\x01\x04\xbc\xe7n\xa9\xbf\x8c\x0f\'\r\x8c\x00\x8d\x1c2\xe9\x02\t\xcc%W\t\xa6\x06{\xc6\x16\np\x93b:{(\xb9\x83\x16@\xb3\xf0oJ\xa3\xb3\xefI\x85\xe7;\xeb=\x9e\xb5\xb3\x93\x7f\a\x00\xbd\x8d\x11\x1bY\xed\x1dC\x93\xb4\x8e\xe7!e\xd7w_D\v7|\x1bhdKuk\x0e\x06\xcc\xd9\x03fB\xa3h\f\x1d\x136\t}\xe0\xc9\x1e\xf5_5#2\x82\x06n', 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0)
msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x6, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x7}, 0x0, &(0x7f0000000440)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c6, @raw=0x3, @raw=0x1})
splice$auto(r0, &(0x7f00000001c0)=0x3, 0xffffffffffffffff, &(0x7f00000006c0)=0x5, 0x1, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

2m38.365204529s ago: executing program 1 (id=1952):
r0 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/ns/cgroup\x00', 0xa80, 0x0)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sg0\x00', 0x103002, 0x0)
write$auto_sg_fops_sg(r1, &(0x7f0000000140)="01000000000d0000624c492f4aa7a158ad329acb69abe1d4bbe91b3ddc84d02747403bbca33c95be8fb08baf91e29260d0", 0x31)
ioctl$auto_NS_GET_OWNER_UID(r0, 0xb704, 0x0)
socket(0x2, 0x1, 0x6)
mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
semctl$auto_GETPID(0x2, 0x0, 0xb, 0x4)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/wireless\x00', 0x80, 0x0)
pread64$auto(r2, 0x0, 0x201, 0xe6)
mmap$auto(0x0, 0x10002, 0x7ffe, 0xeb1, 0xfffffffffffffffa, 0x8000)
pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0xffff, &(0x7f0000000180)={@_si_pad}, 0x0)
futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1)
futex_wake$auto(0x0, 0x1000, 0xfffffffa, 0x2)
r3 = memfd_create$auto(0x0, 0x4)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto_KVM_CHECK_EXTENSION(r4, 0xae03, 0xf4)
statx$auto(r3, 0x0, 0x1000, 0xbdfc, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0)
ioctl$auto(r7, 0xc0305602, r6)
setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x9)
bind$auto(0x3, &(0x7f0000000640)=@in={0x2, 0x0, @empty}, 0x69)

2m37.775330272s ago: executing program 1 (id=1955):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0)
write$auto(r2, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000080017000800000004000e0000000000"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000)
write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2)
socket(0xf, 0x3, 0x2)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r3 = gettid()
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
kill$auto(r3, 0x11)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r7=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000100)=ANY=[@ANYBLOB="01b537431bbef8d5000080", @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250d00000008000300", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c0002800800010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0)
r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0)
sendfile$auto(r8, r9, 0x0, 0x1000200)

2m36.999150825s ago: executing program 2 (id=1958):
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x101000, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
socket(0x1d, 0x80000, 0x9)
unshare$auto(0x40000080)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0)
pread64$auto(r2, 0x0, 0x201, 0xc000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5ac, 0x0, 0x4, 0x0, 0x5, 0x11}, 0x5}, 0x2, 0x100)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
r3 = socket(0x2, 0x2, 0x88)
setsockopt$auto(r3, 0x1, 0x5f71, 0x0, 0x8)
mprotect$auto(0x200000000000, 0x806121, 0x8)
io_pgetevents$auto(0x1, 0x8, 0x4, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_XFS_IOC_FREESP(r1, 0x4030580b, 0x0)
settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0)
clock_gettime$auto(0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
connect$auto(r3, &(0x7f0000000080)=@nl=@unspec, 0x9)
r4 = socket(0xa, 0x3, 0x3a)
ioctl$auto(r4, 0x8982, 0x1)
ioctl$auto_SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000240))

2m36.275998432s ago: executing program 2 (id=1961):
r0 = prctl$auto(0x84, 0x6, 0x0, 0x1000000000003, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000000)=@isdn={0x22, 0x3, 0xb, 0x6, 0x6}, 0x55)
mmap$auto(0x1000000000a, 0xb, 0x40e0, 0x15, r0, 0x8000)
mmap$auto(0x2000000, 0xa, 0x5, 0x9b75, 0xffffffffffffffff, 0x3)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
r1 = epoll_create$auto(0x4)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0)
epoll_ctl$auto(r1, 0x1, r2, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb5, 0xffffffffffffffff, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/4/effective_affinity\x00', 0x88000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
r3 = socket(0x25, 0x800, 0xd063)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@can, 0x6a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
connect$auto(r0, &(0x7f0000000100)=@llc={0x1a, 0x312, 0x5, 0x1, 0xb, 0x1, @local}, 0xc)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, &(0x7f0000000040)={0x0, 0x1ff}, 0x7, 0x0, 0x0, 0x3}, 0x3}, 0x1, 0x1)
io_uring_setup$auto(0x18, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/power/level\x00', 0x129882, 0x0)
sendfile$auto(r4, r4, 0x0, 0x4)
memfd_create$auto(&(0x7f0000000000)='\x00', 0xe)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop8\x00', 0x161780, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c00, 0x0)

2m36.248197241s ago: executing program 1 (id=1962):
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x82001, 0x0)
r0 = open(&(0x7f0000000800)='./file1\x00', 0x22240, 0x154)
execveat$auto(r0, 0x0, 0x0, 0x0, 0x1003)
msgctl$auto_MSG_INFO(0x3, 0xc, &(0x7f0000000300)={{0x1, <r1=>0xee00, <r2=>0xee01, 0x1ff, 0x4, 0x5, 0x2}, &(0x7f0000000240)=0x2, &(0x7f00000002c0)=0x2, 0x5ce7, 0x9, 0x170, 0x1, 0x6, 0x1, 0x0, 0x4, @inferred, @inferred=0xffffffffffffffff})
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) (async)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x7ffffff8, 0x5, 0x7, 0x5, 0x61, 0x103}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async)
msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x1, 0x0, <r4=>r2, 0x3, 0x9, 0x7, 0xb065}, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x8b, 0x9, 0x1, 0x3d0, 0x8, 0x401, 0x4, 0xff01, 0x6, @raw=0x8, @inferred=0xffffffffffffffff})
statx$auto(r0, 0x0, 0x3, 0x4, &(0x7f0000000480)={0x0, 0x0, 0x3, 0x10, r1, r4, 0x329f, 0x10, 0xffffffffffffffff, 0xb050, 0x299, 0x1, {0x2, 0xb}, {0x5, 0x2}, {0x3, 0x4}, {0x9, 0xfffffffb}, 0x3, 0x6, 0x6, 0xcd2, 0x10, 0x8, 0x101, 0x7, 0xafb2, 0xfff, 0xd, 0x9, [0x9, 0x9, 0xc, 0x13da00000000000, 0x332c, 0x4, 0xb0, 0x6, 0xff]}) (async)
epoll_create$auto(0x4)
r5 = socket(0x2, 0x5, 0x0)
setsockopt$auto(r5, 0x10000000084, 0x6e, 0x0, 0x0) (async)
mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) (async)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) (async)
r6 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
io_uring_setup$auto(0xc, 0x0) (async)
ioctl$auto_dvb_demux_fops_dmxdev(r6, 0x403c6f2b, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0x4000eb1, 0xffffffffffffffff, 0x8000) (async)
r7 = epoll_create$auto(0x4)
epoll_ctl$auto(r7, 0x1, 0xffffffffffffffff, 0x0)

2m35.990464864s ago: executing program 1 (id=1965):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred=0xffffffffffffffff, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x2, 0x5, 0x4, @raw, @integer={0x100000000000007, 0x5, 0x1}, "7adec199a16a2311eacf2fc7ae6e9858eeb78db8d04fdd73340238d212b6debe0eda71bdd709254592b67f9ca1adb17884a16f7ce8cbce0bb32791702b8d7c38"})
r2 = socket(0x11, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5)
ioctl$auto(r3, 0x4008af10, 0xffffffffffffffff)
write$auto(0xca, &(0x7f0000000180)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2', 0x2d9)
r4 = open_tree$auto(r1, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6)
pread64$auto(r4, &(0x7f0000000080)='/dev/vhost-net\x00', 0x4, 0x1)
read$auto_tracing_saved_cmdlines_size_fops_trace(r1, &(0x7f00000001c0)=""/211, 0xd3)

2m34.920525186s ago: executing program 1 (id=1970):
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x10, 0x8, 0x7fb, &(0x7f00000002c0)})
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x1e, 0x2, 0x0)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x80a, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xc, 0x2, 0x1d2d, 0x3, 0x2, 0x15f4da0e, 0xfffffffffffffffb, 0x9, 0xfffffff000000000, 0x8, 0x1, 0x800000fca, 0x9, 0x1, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2c, 0x1, 0x3)
write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto(0xffffffffffffffff, 0x4b45, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r3, 0x7)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0)

2m34.6840072s ago: executing program 2 (id=1971):
openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0)
socket(0x1, 0x2, 0x0)
mmap$auto(0x0, 0x81cf, 0xdf, 0xe91, 0x401, 0x800000000008000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
r1 = ioctl$auto_TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000000080)=0x486)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800)
unshare$auto(0x40000080)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1492b200", @ANYRES16=r2, @ANYBLOB="010b27bd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000084)
mmap$auto(0x0, 0x2020009, 0x3, 0x209000000eb2, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x0, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x161100, 0x0)
sysfs$auto(0x2, 0x25, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3)

2m33.95129485s ago: executing program 2 (id=1972):
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snd/controlC1\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x80000000) (async, rerun: 32)
r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, <r1=>0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) (async)
timer_create$auto(0x0, 0x0, 0x0) (async, rerun: 64)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64)
read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) (async, rerun: 32)
mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r4, 0x300000000000) (rerun: 32)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'nicvf0\x00', <r6=>0x0}) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'geneve0\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="130026bd7000dddbdf250200000008000300", @ANYRES32=0x0, @ANYRESDEC=r8], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r11=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x110, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x101}]}, @ETHTOOL_A_MODULE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_MODULE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffc8b, 0x3, 0xfffffffd}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x2f}, @ETHTOOL_A_MODULE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x3}]}, 0x110}}, 0x4000000)
r12 = socket(0x10, 0x3, 0x15)
write$auto(r12, &(0x7f0000000000)='-\x00', 0x2fb) (async)
sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01e46cb7b7e6831b0a1672b8d588"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) (async)
unshare$auto(0x40000080) (async, rerun: 32)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2m33.862641919s ago: executing program 1 (id=1974):
write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
fdatasync$auto(r0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop6\x00', 0x10800, 0x0)
ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0)
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x303101, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_long_retry_limit_ops_(r2, &(0x7f0000001700)=""/4096, 0x1000)
write$auto(r1, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\tC:\x84D\x1du\xb4\x9ab\xce\xa7TU\xff\xff\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\x036\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xfc\xfd\xac\xd4\xbd\b\xb2\xa85\xd9\xd6\r\xc2\x97h\xa4\xeas\x90\xb3\xf7\x83\x11`V5;\xccg\"\xb8\r\xe1\x87j\xed\xe1\xb9WW\x82\\\"\xef\xb2\xc4M\xa0=ii\xfb\xdd\x90\xe0\xda\x10_\xffO\xbb\xb0\xf0<k\x1f\xa0[=\x86\xbaK,}\xd7\x89\t\xa6\x8e\xd8\xecY\'v\x94\xc4d\xca\x16I\a\xd3\xa8\x91\xfa\xe2KC\xc9\xb8\a?\x16y6\xa1\xed\xf8\xbf%],do\xbb\r\xf9Y\x8f\xa9m\xe7\xcey\xf1b\xc8\xee\xf5\x12\xc1\x11\x91N\xb6\xd2\x03\xd2J^\xbb1\xd5\x88l_\xacs(^\f\x10\x94\x8c\xaeR\xd4\x93[rn0\xa4\xb17\xd3a\b\x1e\x1f\xc01\\\xe3\xea\xd6i\xb1f\xc1\xf8\xd0_\x80\xa5\xe2X\x84dy\xe0\xca\xb7', 0x5597)
r3 = set_tid_address$auto(0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace\x00', 0x80302, 0x0)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
syz_clone3(&(0x7f0000000500)={0x0, &(0x7f00000001c0), &(0x7f0000000380), &(0x7f00000003c0)=<r4=>0x0, {0x37}, &(0x7f0000000400)=""/163, 0xa3, &(0x7f0000000700)=""/4096, &(0x7f00000004c0)=[r3, r3, r3], 0x3, {r2}}, 0x58)
waitid$auto_P_PID(0x1, r4, 0x0, 0x100006, 0x0)
r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
ioctl$auto(r5, 0x6, r0)
r6 = socket(0x11, 0x3, 0x9)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0)
sendfile$auto(0xffffffffffffffff, r7, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8000000000000000, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6})
r8 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b)
fchown$auto(r8, 0xe5a, 0x5)
utimes$auto(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x8, 0x8001})
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r6, &(0x7f00000006c0)={{&(0x7f0000000080)="5f6584003e7a13105031f58066c375ef0870a9", 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x4b}, 0x3, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0xf9fe, 0x100)

2m18.96468043s ago: executing program 33 (id=1972):
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snd/controlC1\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x80000000) (async, rerun: 32)
r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, <r1=>0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) (async)
timer_create$auto(0x0, 0x0, 0x0) (async, rerun: 64)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64)
read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) (async, rerun: 32)
mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r4, 0x300000000000) (rerun: 32)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'nicvf0\x00', <r6=>0x0}) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'geneve0\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="130026bd7000dddbdf250200000008000300", @ANYRES32=0x0, @ANYRESDEC=r8], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r11=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x110, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x101}]}, @ETHTOOL_A_MODULE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_MODULE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffc8b, 0x3, 0xfffffffd}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x2f}, @ETHTOOL_A_MODULE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x3}]}, 0x110}}, 0x4000000)
r12 = socket(0x10, 0x3, 0x15)
write$auto(r12, &(0x7f0000000000)='-\x00', 0x2fb) (async)
sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01e46cb7b7e6831b0a1672b8d588"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) (async)
unshare$auto(0x40000080) (async, rerun: 32)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2m18.768221651s ago: executing program 34 (id=1974):
write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
fdatasync$auto(r0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop6\x00', 0x10800, 0x0)
ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0)
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x303101, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_long_retry_limit_ops_(r2, &(0x7f0000001700)=""/4096, 0x1000)
write$auto(r1, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\tC:\x84D\x1du\xb4\x9ab\xce\xa7TU\xff\xff\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\x036\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xfc\xfd\xac\xd4\xbd\b\xb2\xa85\xd9\xd6\r\xc2\x97h\xa4\xeas\x90\xb3\xf7\x83\x11`V5;\xccg\"\xb8\r\xe1\x87j\xed\xe1\xb9WW\x82\\\"\xef\xb2\xc4M\xa0=ii\xfb\xdd\x90\xe0\xda\x10_\xffO\xbb\xb0\xf0<k\x1f\xa0[=\x86\xbaK,}\xd7\x89\t\xa6\x8e\xd8\xecY\'v\x94\xc4d\xca\x16I\a\xd3\xa8\x91\xfa\xe2KC\xc9\xb8\a?\x16y6\xa1\xed\xf8\xbf%],do\xbb\r\xf9Y\x8f\xa9m\xe7\xcey\xf1b\xc8\xee\xf5\x12\xc1\x11\x91N\xb6\xd2\x03\xd2J^\xbb1\xd5\x88l_\xacs(^\f\x10\x94\x8c\xaeR\xd4\x93[rn0\xa4\xb17\xd3a\b\x1e\x1f\xc01\\\xe3\xea\xd6i\xb1f\xc1\xf8\xd0_\x80\xa5\xe2X\x84dy\xe0\xca\xb7', 0x5597)
r3 = set_tid_address$auto(0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace\x00', 0x80302, 0x0)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
syz_clone3(&(0x7f0000000500)={0x0, &(0x7f00000001c0), &(0x7f0000000380), &(0x7f00000003c0)=<r4=>0x0, {0x37}, &(0x7f0000000400)=""/163, 0xa3, &(0x7f0000000700)=""/4096, &(0x7f00000004c0)=[r3, r3, r3], 0x3, {r2}}, 0x58)
waitid$auto_P_PID(0x1, r4, 0x0, 0x100006, 0x0)
r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
ioctl$auto(r5, 0x6, r0)
r6 = socket(0x11, 0x3, 0x9)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0)
sendfile$auto(0xffffffffffffffff, r7, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8000000000000000, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6})
r8 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b)
fchown$auto(r8, 0xe5a, 0x5)
utimes$auto(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x8, 0x8001})
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r6, &(0x7f00000006c0)={{&(0x7f0000000080)="5f6584003e7a13105031f58066c375ef0870a9", 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x4b}, 0x3, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0xf9fe, 0x100)

2m12.276234808s ago: executing program 4 (id=2035):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x331080, 0x0)
io_uring_register$auto(r1, 0x0, &(0x7f0000000000), 0x3)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000001240)=@task_fd_query={0x0, <r2=>0xffffffffffffffff, 0x1, 0x1568, 0x6, 0x15aa, r0, 0x4, 0xf}, 0x3)
semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1)
ioctl$auto(r2, 0x2, 0xffffffffffffffff)
futex$auto(0x0, 0x3, 0x1f, 0x0, 0x0, 0x440a48d3)
unshare$auto(0x40000080)
ioctl$auto_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
mmap$auto(0x8, 0x6, 0x3, 0x13, 0xffffffffffffffff, 0x400)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d)
listen$auto(0x3, 0x81)
r3 = socket(0x2, 0x1, 0x0)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
setsockopt$auto_SO_RCVLOWAT(r4, 0x0, 0x12, &(0x7f0000000340)='7\x00\x00\xec\x007\xfe(\xbd\xb0\x86\xe0K\xcf\xcf\x8d\xf2S6\x9e\x81\xcdc\xd7\x19-7\xc2\x89\x9d\x8cR`\xab6F\xd6O\x8b[\"\x80\xd0\xd2!\xc5\xdf\x8c&\xbd\x12\xb0\xa9v\vK\xfe+\xfb4\x02l\t5:a\xbf\xaf\xe3VX\x8d/l\f\xef\x1c\xc9\x13\xf6\x86\xb9N\xeeq\'\xb8\xb0\xa4\xd8\x94\xb8\xbc\b1\xc5\xb7\xca\x8e\x94\x0e\xc9\x99C\x97\xc2]\x80,\xaa\xf5\x17\xacnQ>\aH\xf6\xd6`/f\xcf\x8d\xaa\x00\xd5\x91\x9f\x96\xc6\xa4\'N\xebE\x8b', 0x1)
unshare$auto(0x40000080)

2m10.855203947s ago: executing program 4 (id=2037):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0xa, 0x1, 0x84)
r0 = io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0)
write$auto(r1, &(0x7f0000000500)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x9f\xe2\xc7cOM\xb6\xa3,!oc.\xe7\x1d$\x9a`\xd8/g\xd3\x1a\xcd\x8e\x1d\xbb\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xa9O\x00\x00\x00\x00\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xb6\xb0N\x99\x04z\xd0I>\x8f\x00\xe5\x1c*\xedE\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xa3\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\xac\x92\x7f]|\x04\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xa6\x89\xdd\xce\xab\xd5\xe4+\xeaF\x06Y\xe9\xa1`\xb1\x8d\x85\xe0w+\x1e\x8b+\xd67IH\xff\x80N\xd1E8\xb7\xff\xa7\xff\x80\xd0y\x0f\x1d(!\x99\xab\xdf\x01\x00\x00\x00\x00\x00\x00\x00\xcdd\x87\x06\xfbK\xb9/\x19\xe5\x8b\x10P\xe7i8\xbe', 0x7)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x3, 0x4, 0x3, 0x401b65b, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10, 0x4, 0x0, 0x100000000, 0xfffffffffffffffd, 0x2, 0x3, 0x7, 0xe, 0x6})
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x200)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r2, 0x8000)
ioctl$auto_BLKRRPART(r2, 0x125f, 0x0)
madvise$auto(0x0, 0x400053, 0x9)
waitid$auto_P_PIDFD(0x3, r0, &(0x7f00000001c0)={@_si_pad}, 0x9, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000380), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x3, 0x2)
r3 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/trace_options\x00', 0x8000, 0x0)
r4 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
prctl$auto(0x43, 0x2000017, 0x0, 0x0, 0x0)
execveat$auto(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x11000)
pread64$auto(r3, &(0x7f0000000ec0)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x80000002, 0x40)
mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
open(&(0x7f0000000280)='./file0\x00', 0x40, 0x109)
mmap$auto(0x5, 0x4, 0xde, 0xee3e, 0xffffffffffffffff, 0xa)

2m9.226185076s ago: executing program 4 (id=2039):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0x24102, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x1a, 0x6, 0xffffffff)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x4000, 0x0)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
open(0x0, 0x36dc2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x28, 0x6, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x2, &(0x7f00000002c0)=@bpf_attr_11={0x4d8e, 0x7ff, 0x6137398, 0x1, 0x0, 0x8}, 0xf)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x284000, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/virt_boundary_mask\x00', 0x0, 0x0)
write$auto(r0, 0x0, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/serial8250/serial8250:0/serial8250:0.2/tty/ttyS2/power/wakeup_max_time_ms\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x2ab82, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)

2m8.840875482s ago: executing program 4 (id=2040):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4)
r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
write$auto_full_fops_mem(r0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
wait4$auto(0x1, 0xfffffffffffffffc, 0x60000002, 0x0)
r2 = socket(0x10, 0x2, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c855}, 0x40805)
sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf250000000008000b000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8c1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="7f"], 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0)
read$auto_proc_pid_maps_operations_internal(r3, &(0x7f00000030c0)=""/4087, 0x106a)
sendmsg$auto_NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="06002abd700087"], 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x1)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
socket(0x11, 0x80003, 0x300)
r4 = socket(0x11, 0x2, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0xd, 0x8})
sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1040}, 0x5}, 0x2, 0x100)
setuid$auto(0xe)
sendto$auto(0x3, 0x0, 0x13, 0xfffffff5, &(0x7f0000000440)=@phonet={0x23, 0x7, 0xfd, 0xc}, 0x22)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r1)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x24, r5, 0xf08, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x9c}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8085)

2m5.625235278s ago: executing program 4 (id=2043):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb)
prctl$auto_PR_SET_MM(0x23, 0xb, r0, 0x1, 0x401)
keyctl$auto(0xc, 0x4, 0xfffffffffffffffd, 0x7c, 0x5)
sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004001}, 0x40)
madvise$auto(0x0, 0x8000000000000000, 0x15)
dup$auto(r0)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
rseq$auto(0x0, 0xfffffff4, 0x0, 0x5)

2m2.604114645s ago: executing program 4 (id=2052):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r0, r0, 0x0)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0xa200, 0x0)
ioctl$auto(r1, 0xc0585611, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, r3, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket(0xa, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x18)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
stat$auto(0x0, &(0x7f0000000380)={0x506f, 0x7, 0x80000000000000, 0xfffffff2, 0x0, 0xee01, 0x0, 0x5, 0x101, 0x4, 0x1, 0x9, 0xffff, 0x2, 0xb56, 0x1000000000, 0xfffffffeffffffff})
r6 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000080), 0x20082, 0x0)
writev$auto(r6, &(0x7f00000003c0)={0x0, 0x8}, 0x3)
process_vm_writev$auto(0x0, 0x0, 0x3, 0x0, 0x4, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
madvise$auto(0x0, 0x4, 0x15)
ioctl$auto(0x3, 0x800005411, 0x38)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)

1m47.465573162s ago: executing program 35 (id=2052):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r0, r0, 0x0)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0xa200, 0x0)
ioctl$auto(r1, 0xc0585611, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, r3, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket(0xa, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x18)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
stat$auto(0x0, &(0x7f0000000380)={0x506f, 0x7, 0x80000000000000, 0xfffffff2, 0x0, 0xee01, 0x0, 0x5, 0x101, 0x4, 0x1, 0x9, 0xffff, 0x2, 0xb56, 0x1000000000, 0xfffffffeffffffff})
r6 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000080), 0x20082, 0x0)
writev$auto(r6, &(0x7f00000003c0)={0x0, 0x8}, 0x3)
process_vm_writev$auto(0x0, 0x0, 0x3, 0x0, 0x4, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
madvise$auto(0x0, 0x4, 0x15)
ioctl$auto(0x3, 0x800005411, 0x38)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)

51.791836196s ago: executing program 7 (id=2261):
r0 = socket(0x22, 0x3, 0x0)
openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000300)='/dev/etherd/revalidate\x00', 0x5c1000, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x80044943, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x4, 0xeb0, r0, 0x8040) (async)
openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) (async)
r1 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) (async)
r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x8c80, 0x0)
read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000100)=""/240, 0xf0) (async)
unshare$auto(0x8000400) (async)
readv$auto(r1, &(0x7f0000000100)={0x0, 0x3}, 0x1)
syz_open_procfs$namespace(0x0, 0x0) (async)
memfd_secret$auto(0x0) (async)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) (async)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) (async)
lstat$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000600)={0x318, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x6, 0xffff, 0x6, 0x100, 0x36, 0x7fff, 0x6, 0x7000000000, 0xd, 0x9}) (async)
r3 = prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) (async)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async)
umount2$auto(&(0x7f0000000180)='/proc/bus/pci/00/01.3\x00', 0x1) (async)
preadv2$auto(r4, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) (async)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
shmdt$auto(&(0x7f0000000000)='(\x00')
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x201, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) (async)
getsockopt$auto_SO_REUSEADDR(r3, 0x8000, 0x2, &(0x7f0000000040)='^\x92[\x00', &(0x7f00000000c0)=0x6) (async)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0)
pread64$auto(r5, 0x0, 0x9, 0x2) (async)
openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/failslab/probability\x00', 0x22042, 0x0)

51.542943132s ago: executing program 7 (id=2265):
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x5, 0x0, 0x1, 0x4d)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2b, 0x1, 0x0)
sysfs$auto(0x2, 0xd, 0x0)
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0)
fsmount$auto(0x4, 0x0, 0x200003)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008)
statmount$auto(0x0, 0x0, 0x7, 0x281)
openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x18000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x400000003)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r5, 0x1, 0x70bd31, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x20}}, 0x24048004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

50.003357054s ago: executing program 7 (id=2268):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/workqueue/scsi_tmf_0/power/autosuspend_delay_ms\x00', 0x8000, 0x0) (async)
openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x20681, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='-7', 0x2) (async, rerun: 64)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async, rerun: 64)
write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\nC:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xb7\xc5D\xcc\xe48\x97\xd6\xaa\xbb)\xfdQ\x9b\x92\x9e\xbf\a\x00b\xd2\xf2\xaa%J\\\x19\xd0\xaa5\xb0(i\xcf\x10\xf6\xe2\xa2\xc1\xa0\xf8C\xe7\xb2w\x89\a\xd2t\x87\xc1\xae\xfb\xb0\xc9?\xfd|\xa5\x90\xdf\xd4\x02\xdd\xfa\xcb\xfbu\xef\xdc\x0eJ\xf7\xb9\xf8\xdc \x14\b\xd7\xcdG\xd4=\x00g\xf2\xa5\xe3\fl=w\xfc\x80Z\xde\b\xcb\x8c\xd9\x85_-\xf5l\xe2\x0e\xc2\xb1\f-X/\xa3\xdf\xe72\xe9>?\xa1{Q\xe2\xd2 \xe7\x94(A\xf4!\xb0\xa6\xe3', 0x100000a3d7)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x400)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 64)
io_uring_setup$auto(0x85, 0x0) (async, rerun: 64)
r3 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0)
write$auto_rfkill_fops_core(r3, 0x0, 0x700)
close_range$auto(r1, 0xfffffffffffff000, 0x2)
bpf$auto(0x5, &(0x7f00000000c0)=@test={<r4=>0xffffffffffffffff, 0xa, 0xa, 0x7fffffff, 0x108800000, 0xff, 0x6, 0x2be2b3fd, 0x8000, 0x10000, 0x2, 0x7, 0xfffff890, 0x1, 0x2}, 0x80)
read$auto(r0, 0x0, 0x1f40) (async)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000240)={0x0, 0x7}, 0x3) (async, rerun: 32)
r6 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x28201, 0x0) (rerun: 32)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto_TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000000)=0x6) (async)
r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$auto_OVS_FLOW_CMD_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x800) (async)
sendmsg$auto_OVS_FLOW_CMD_SET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x7}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x4000000) (async)
write$auto(0x3, 0x0, 0xffd8) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)

48.850731854s ago: executing program 7 (id=2270):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket(0x29, 0x2, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9)
mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0)
r2 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0)
read$auto_state_fops_(r2, &(0x7f0000000180)=""/61, 0xfffffeeb)
pivot_root$auto(0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x0, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
connect$auto(0xffffffffffffffff, 0x0, 0x2)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000600), 0x104800, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000200), 0x3c1941, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_max_time_ms\x00', 0x40200, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff)
shmctl$auto_SHM_INFO(0xb46, 0xe, &(0x7f00000002c0)={{0x4, <r6=>0x0, 0xee00, 0x4, 0x10001, 0x2, 0xbdf3}, 0x7, 0x39a7e6f3, 0x6, 0x7, @raw=0x586d482f, @inferred=0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000640)="67232662bba5a31cec3c230169be45727a63415549956f600601df5f381e17e6e1f42a13cdcaaf870ae883b1a62daf19db97798b38ff74171a1bdce05104003e202c20d26df90bc5b54721901e3d801657afc020c1313731d3c412169ea0b781", &(0x7f0000000280)="670d96cb1fd1008b16ecc772cbdadebca57bb53f9b6e"})
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="90010000", @ANYRES16=r5, @ANYBLOB="080025bd7000fedbdf250c000000350103805c006280de3c551b863bc06d4b3b4056b3297629dc9a13809620c109bee68471ca4a09f80a9c4bdd3b2ecdb3d16945fbeed4836cbf7c0ed676916c58dae0132d2963b7e641634d076ece7eab43c0d3a50800a800", @ANYRES32, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000004400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e30000000000000140002006772657461703000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x190}, 0x1, 0x0, 0x0, 0x24000085}, 0x40088c1)
lseek$auto(r1, 0x0, 0x4)
readv$auto(r3, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1)
getsockopt$auto(0xffffffffffffffff, 0x805, 0x8e0, &(0x7f0000000480)='/dev/cec27\x00#\xb4\xb7\xfd-:D\xedH\xdd\xfbG\xde\xa1\x92\xe4Dr\x8d6\x83g\xe5\xb8\xda\x8b\xa2\xbdw\xa3\xab7\xd0{\xee\xfaO\xd3Q\xca\x1f\xecc\x80q.\x87:]\xe1\x16x\x87\xc9|Q\x86P\xfe\xef1\xe9W7\xc7\xecd\x03fC\'\x06\xd7\x06F\xe8\xa5\xea\xe0\x041C\xd5\x89\xddL6\x10n\xd9\xb8\xc0\x9fq\x96\xf0V\xcc\x01\x04\xbc\xe7n\xa9\xbf\x8c\x0f\'\r\x8c\x00\x8d\x1c2\xe9\x02\t\xcc%W\t\xa6\x06{\xc6\x16\np\x93b:{(\xb9\x83\x16@\xb3\xf0oJ\xa3\xb3\xefI\x85\xe7;\xeb=\x9e\xb5\xb3\x93\x7f\a\x00\xbd\x8d\x11\x1bY\xed\x1dC\x93\xb4\x8e\xe7!e\xd7w_D\v7|\x1bhdKuk\x0e\x06\xcc\xd9\x03fB\xa3h\f\x1d\x136\t}\xe0\xc9\x1e\xf5_5#2\x82\x06n', 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0)
msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x6, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x7}, 0x0, &(0x7f0000000440)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c6, @raw=0x3, @raw=0x1})
splice$auto(r0, &(0x7f00000001c0)=0x3, 0xffffffffffffffff, &(0x7f00000006c0)=0x5, 0x1, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

46.58828076s ago: executing program 7 (id=2277):
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
mmap$auto(0x0, 0xdb3, 0xff, 0xeb4, 0xffffffffffffffff, 0x0)
r0 = socket(0x29, 0x2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x8, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r0, 0x89f2, 0x24)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x80340, 0x0)
ioctl$auto_RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000180)=0x438c)
r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000002c0)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000400)='nfsd\x00\xda\xa9\x1c\xd1\xc2\xbfw\x85\xb4\xf3L\x0fhHU@f\x8c:\xfc\xe9\xbf\xaa#\x89A~\xb8r~\a\xcbgq$#D\xa6\xcfxhU\xa3\xc2\x92q\n\xb2\xab\xb5pQKL,H\xd4iQ\x16\xdb\x10\xf4E\xff\xdd\xf7\x11\xadh\xf0\x11\x95E\xff\x93\xc4\xed\\\x18\xef\xc2\xc7\xb6L6\xa8\x0fA\xf3\xdf\xdfCB=\xcb\xb9\xc3\xe9\x99\x12\x81\xe7\xf4\xe55X\xee\x05\xa2\xd2\xae\xed\xa8\xf4v\xb1\x85\xe4\xec\x86\x98\xb1IA\xef6\x1cM\x98>\xeb-\xe3\x8bMu\xf6\xf7x\xdaF\\\xc4l\xdfo\xdej\xc2\xf6\x10n\xb8\x8f\xdc\f\xe1\xb4S\x84\xce\xa5z\xf1q\x97F\x9d\xe7x\xbd\b\xf0\x109\x85\xba\x1d\x1b\xaegg\t\xf7\x02\'\xa2%t\xa11\xe3\xa7\x9cI\xc5*\xe6\xde\xa3\x1bZC9\xb2\"\x88\xd4\x18\x1c\x89kI\x17_\x80\xd2\'\xe9\xc8\xae]\xaf\x1f\xb1}j\xd3kG\x05oq\x83\xe2\xa7\xa1}|+\xe8N{tLHq\xb08+C\xba\xb0\x8bl\xb2\xb6T\xeb,S$\x96\xde^\xa347&l\x0es\xa9\xdac%\xe0\x8d?%\xc3,\xf1\xb9\xd9Rj<\x8cg\x9d', 0x10000, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
mmap$auto(0x0, 0x8000, 0x3, 0xeb2, 0xfffffffffffffffa, 0x10000000008000)
r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x1)
getdents$auto(r4, 0x0, 0x62d4)
write$auto(r3, 0x0, 0x5)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
r5 = socket(0x2, 0x3, 0xa)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7ffffffffffffffb, 0x3)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
r6 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy16/statistics/dot11FCSErrorCount\x00', 0x303000, 0x0)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/batadv0/mcast_solicit\x00', 0x2000, 0x0)
read$auto(r7, 0x0, 0x1ff)
write$auto(r6, 0x0, 0x9)
connect$auto(r5, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54)

44.480895271s ago: executing program 7 (id=2279):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0x4c4202, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/intel_ishtp_loader/parameters/dma_buf_size_limit\x00', 0x8000, 0x0)
sendfile$auto(r0, r1, 0x0, 0x405)
clock_settime$auto(0x0, &(0x7f0000000000)={0x1, 0x8})
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000))
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000180)='/dev/audio1\x00\xb2\x04\xc2\xca\xdf\xaa\\\xfbA\xc0|\xe29\xd4\xd0\t\x9aV~\xb0\xc3p\xef\xfc\xa86\xa2\x14\xbd\x98Y\xe7\xceg\x16\x9a\xedk\xc9\x1a\xf0\xdb\xdc\\\x91\xe6G\x84\x8d\x90@\xbeu\x87\x81\x80@\xa4\xe6\xba\x99\x1c\x89}LP\xba\xe1\x96\xe8\x15V\x87\xcc\xe0\x93\xe4!Xo\xd4\xa9\xcf>\x83\x00', 0x100000a3d9)
mmap$auto(0x0, 0x2, 0x2000de, 0x15, 0x7, 0x28000)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
open(0x0, 0x26142, 0x4b)
syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000010c0), r3)
sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r3, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x4004000)
sendmsg$auto_NET_SHAPER_CMD_GET2(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f)

29.785867238s ago: executing program 3 (id=2315):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0x240007, 0x19)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/pagemap\x00', 0x250841, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315, r2}, 0x1)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001)
ioctl$auto_SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000040))

29.343255257s ago: executing program 36 (id=2279):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0x4c4202, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/intel_ishtp_loader/parameters/dma_buf_size_limit\x00', 0x8000, 0x0)
sendfile$auto(r0, r1, 0x0, 0x405)
clock_settime$auto(0x0, &(0x7f0000000000)={0x1, 0x8})
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000))
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000180)='/dev/audio1\x00\xb2\x04\xc2\xca\xdf\xaa\\\xfbA\xc0|\xe29\xd4\xd0\t\x9aV~\xb0\xc3p\xef\xfc\xa86\xa2\x14\xbd\x98Y\xe7\xceg\x16\x9a\xedk\xc9\x1a\xf0\xdb\xdc\\\x91\xe6G\x84\x8d\x90@\xbeu\x87\x81\x80@\xa4\xe6\xba\x99\x1c\x89}LP\xba\xe1\x96\xe8\x15V\x87\xcc\xe0\x93\xe4!Xo\xd4\xa9\xcf>\x83\x00', 0x100000a3d9)
mmap$auto(0x0, 0x2, 0x2000de, 0x15, 0x7, 0x28000)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
open(0x0, 0x26142, 0x4b)
syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000010c0), r3)
sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r3, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x4004000)
sendmsg$auto_NET_SHAPER_CMD_GET2(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f)

28.324904629s ago: executing program 5 (id=2319):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r1, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0xffffffffffffffff, 0x2000d, 0x8, 0xeb1, 0x404, 0x80000000)
write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000001bc0)="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", 0x850)
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r2 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x3b)
socketpair$auto(0x1, 0x1, 0x2a340, 0x0)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1ff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0x8cfb7, 0x9, 0x6]}, 0x0)
wait4$auto(r2, 0x0, 0x80000001, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x64, 0xff, 0x0, @raw=0xfffff020}})
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x282403, 0x0)
io_uring_register$auto(0x2, 0x1000000a, 0x0, 0x4020)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)

27.678517711s ago: executing program 3 (id=2320):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf857000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)

27.284012461s ago: executing program 3 (id=2321):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x9}, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
flock$auto(r0, 0x4)
socket(0xa, 0x3, 0x5)
openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000)
mmap$auto(0x0, 0x2020009, 0x40003, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x0, 0x4, 0x5, 0x3d3c)
timer_create$auto(0x3, 0x0, 0x0)
timer_settime$auto(0x0, 0x801, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0)
socket(0x29, 0x2, 0x0)
socket(0x1d, 0x2, 0x2)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x801, 0x0)
socket(0x2, 0x2, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/asound/card0/pcm0c/info\x00', 0x3d6b00, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/slab/kmalloc-64/min_partial\x00', 0x501, 0x0)
socket(0x10, 0x2, 0x0)
r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, 0x0)
ioctl$auto_USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000040)={0xa1b, 0x855, 0xdb, &(0x7f00000001c0)="da94e86c1133f19d41954e5e478867a6ce81e3a35fdfcb7218478bb35df4d94e3829f499ee8c3937725253b52a52f6ae937b8dbd55cfe0d4d330c0d563e17c3069d8"})
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)

27.137914125s ago: executing program 5 (id=2322):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
r0 = socket(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c000980080001808847338012000100890485908286dd00000400028000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
read$auto_proc_fail_nth_operations_base(r3, &(0x7f0000000340), 0x0)
writev$auto(r0, &(0x7f0000000340)={0x0, 0x100000000003}, 0xffffffffffffffce)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x20009, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
r5 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f00000001c0), 0x10803, 0x0)
read$auto_severities_coverage_fops_severity(r5, &(0x7f00000002c0)=""/108, 0x6c)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800)
io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x10001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x8], {0x9, 0x1, 0x6, 0x0, 0x420, 0x2, 0x3fdc, 0x3, 0x5}, {0x2, 0x140, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0x3}})
close_range$auto(r4, r3, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002712a4575f02e832ae2ee445ead54ca31f7680b38618216fc86193c7e23d30e3cbd4e5168c4fc51e4b86ecf1150acabb687e18927f44e299158037f91b99e293317ce952aa4c4d7d0400000000000000000000faefe6c3915d9e037209e8e741d6f8"], 0x2c}, 0x1, 0x0, 0x0, 0x48895}, 0x40)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x19)
ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000100)=0x3)

26.815306545s ago: executing program 5 (id=2323):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0)
getsockopt$auto(r0, 0x0, 0x481, 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
write$auto(0x3, 0x0, 0xfffffdef)

26.566268654s ago: executing program 5 (id=2324):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), r0)
sendmsg$auto_SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x4080)
lsm_list_modules$auto(0x0, 0x0, 0x0)
getsockopt$auto(r0, 0x84, 0x71, 0x0, 0x0)
io_uring_register$auto(0x2, 0xd, 0x0, 0x20)

26.364922023s ago: executing program 5 (id=2325):
seccomp$auto(0x0, 0x80000000, 0xfffffffffffffffc)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000001200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x19U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x81\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xecWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xfbJ7\xd1\xdc\xe1\x80yi\xef\x91M\xfbB\x97\x80\x9a\xbep\x86\x93\xcc4\xe5\xba\x015I\x1d\r\xdf\xc1Q\x8eM\xa6\t$\xb7ZR\xdcs\x94\xccn\x05\xb8\x06', 0x500000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r1 = socket(0x23, 0x80805, 0x0)
getsockopt$auto_SO_ACCEPTCONN(r1, 0xd1, 0x1e, 0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
madvise$auto(0x1afd, 0x7fffffff, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0xfff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
mmap$auto(0x0, 0x86f3, 0x6, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x88442, 0x0)
writev$auto(r2, &(0x7f00000018c0)={0x0, 0x2}, 0x8)
bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0xa93f, 0x9, 0x3, 0x3, 0x3da1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x9, 0x1}, 0x171)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r3 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x8000, 0x0, 0x4000000000de, 0x50000000000eb0, 0xffffffffffffffff, 0x80000000008000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/024/001\x00', 0x40a01, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)

24.116654878s ago: executing program 3 (id=2329):
r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f00000002c0), 0x8242, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/system/cpu/hotplug/states\x00', 0x8800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/18, 0x12)
ppoll$auto(&(0x7f0000000200)={r0, 0x23ff, 0x104}, 0xd9, 0x0, 0x0, 0x8)

24.07273876s ago: executing program 5 (id=2330):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0)
read$auto(r0, &(0x7f0000000000)='/\x00', 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
set_mempolicy$auto(0x6, 0x0, 0x21)
unshare$auto(0x40000080)
r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40603d07, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000001480), 0x400, 0x0)
pread64$auto(r2, 0x0, 0x101, 0x800005c2b)
writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xa)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9)
recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0)

23.892074935s ago: executing program 3 (id=2331):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r2 = ioctl$auto_TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, 0x0, 0x20000094)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x82, 0x0)
socketpair$auto(0x9, 0x2, 0xb, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
madvise$auto(0x110c230000, 0x1, 0x9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900), 0x0)
getrandom$auto(0x0, 0x3, 0x80000001)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
msgctl$auto_MSG_STAT_ANY(0x1, 0xd, &(0x7f00000000c0)={{0x5, <r4=>0xffffffffffffffff, 0x0, 0x8, 0xbaa5, 0x1, 0xbb}, &(0x7f0000000040)=0x61, &(0x7f0000000080)=0x2, 0x800, 0x800, 0x2, 0x9, 0x1, 0x800, 0x8000, 0xc000, @raw=0x6, @raw})
keyctl$auto(0xd, 0x1, r4, 0x4, 0x3c)
msync$auto(0x110c230000, 0x200001, 0x6)
r5 = socket(0xa, 0x1, 0x84)
sendto$auto(r5, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba87e8000"}, 0x1c)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0)

21.543153695s ago: executing program 3 (id=2336):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x3, 0x5, 0x3)
write$auto(0x1, 0x0, 0x80000000)
close_range$auto(0x2, 0xa, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(0xca, 0x0, 0x2b)
r1 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140))
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
gettid()
socket(0xa, 0x2, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto_XFS_IOC_FREESP(r1, 0x4030580b, &(0x7f0000000040)={0x8, 0x9, 0x5, 0x4fcd, 0x5, <r4=>0xffffffffffffffff})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000200)={{@raw=0x2, 0xffffffff, 0x1, 0x81, "313bf5eb195a060000002af9ffb683dba3931f33828bbfba40f03510bf6b7fe5e2f94ba460d57d448667798d", @inferred=r4}, 0x2, 0x5, 0x4, @raw=0x5, @integer={0xdbe, 0x255, 0x1}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"})
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyc4\x00', 0x30080, 0x0)
write$auto_console_fops_tty_io(r5, &(0x7f0000000a00)="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", 0x837)
read$auto(0x3, 0x0, 0x80)
sendfile$auto(r2, r2, 0x0, 0x5)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
clock_getres$auto(0x2, 0x0)
alarm$auto(0x2)
r6 = epoll_create$auto(0x8800001)
epoll_ctl$auto(r6, 0x1, r0, 0x0)

21.226569124s ago: executing program 6 (id=2337):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x9}, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
flock$auto(r0, 0x4)
socket(0xa, 0x3, 0x5)
openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000)
mmap$auto(0x0, 0x2020009, 0x40003, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x0, 0x4, 0x5, 0x3d3c)
timer_create$auto(0x3, 0x0, 0x0)
timer_settime$auto(0x0, 0x801, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0)
socket(0x29, 0x2, 0x0)
socket(0x1d, 0x2, 0x2)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x801, 0x0)
socket(0x2, 0x2, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/asound/card0/pcm0c/info\x00', 0x3d6b00, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/slab/kmalloc-64/min_partial\x00', 0x501, 0x0)
socket(0x10, 0x2, 0x0)
r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, 0x0)
ioctl$auto_USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000040)={0xa1b, 0x855, 0xdb, &(0x7f00000001c0)="da94e86c1133f19d41954e5e478867a6ce81e3a35fdfcb7218478bb35df4d94e3829f499ee8c3937725253b52a52f6ae937b8dbd55cfe0d4d330c0d563e17c3069d8747dbb7467"})
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)

20.758450499s ago: executing program 6 (id=2338):
socket(0x2a, 0x2, 0x1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', <r0=>0x0})
sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'pim6reg0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00', <r2=>0x0})
sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf252e0000000c000180080003000700000020000180140002007663616e300000000000000000000000080003008c9f000054000180140002006d616376746170300000000000000000080003000000008008000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f776966693000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="180001801400020076657468305f746f5f626174616476003800018008000100", @ANYRES32=0x0, @ANYBLOB="080001f6de4d7e5640732fd100", @ANYRES32=r0, @ANYBLOB="1400020076657468305f746f5f68737200000000080003000700000008000100", @ANYRES32=r1, @ANYBLOB="2000018008000100", @ANYRES32=r2, @ANYBLOB="1400020062617461647630000000000000000000"], 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001}, 0x6f4)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000)
r3 = socket(0x2, 0x1, 0x106)
bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x25af, @any, 0x100, 0xa21b68d0f0ad20cb}, 0x54)
openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff5095141729de40aee41da2a874a3096581f618dd02d4f9ea95617b64f8b2b91222aa5c540d25e26833945b44d647c86bb617"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40)
sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00+'], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000)

19.764883969s ago: executing program 6 (id=2339):
statmount$auto(0x0, &(0x7f0000000840)={0x8, 0x506, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x1, 0x5, 0x2, 0x6, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], "ded14ed47bd332a15e5059d03c5cff9510fcf7de79d1306d34ec5262aefd70e7bf468169a683d0d498fb8828539153182375ecb9df8f6690907753e8da0b7b08b7a0b01f0b77efe4f72d048c8193611cf80c60e2326f27da29060014"}, 0x1fe, 0x81) (async)
statmount$auto(0x0, &(0x7f0000000840)={0x8, 0x506, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x1, 0x5, 0x2, 0x6, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], "ded14ed47bd332a15e5059d03c5cff9510fcf7de79d1306d34ec5262aefd70e7bf468169a683d0d498fb8828539153182375ecb9df8f6690907753e8da0b7b08b7a0b01f0b77efe4f72d048c8193611cf80c60e2326f27da29060014"}, 0x1fe, 0x81)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x0) (async)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16=<r1=>0xffffffffffffffff], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x20040844}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa509}, 0x800}, 0x7, 0x4008) (async)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa509}, 0x800}, 0x7, 0x4008)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) (async)
r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
poll$auto(&(0x7f00000003c0)={<r3=>r0, 0x2, 0xe}, 0x0, 0x4000000)
write$auto_fops_u64_(r3, &(0x7f0000000480)="caeb4e6fd3139653d81a44593c65b9e4b38c2c29b201379603c26eb553776baf5c94fedb509d5fbe1f1664a5f85235419a26a9634423d5fa69a0529ae0c97e2b852a77d63391bc89f9c5b58c44744376baafc1f31ebd19c758bdad8cd652c8cff0dc674df321895acf638d0bed4940a42bdbcb17d7bca98da5d569dcd12c6ab2db6b442606d5050a3a45c608558f7eea2eaf01a8de37a0a8b7c0b01208271bf48d1389aede6776c1", 0xa8)
write$auto(r2, &(0x7f0000000700)='!=ev_vhc&\x00', 0x9)
r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x20002, 0x0)
ioctl$auto_SNDCTL_DSP_POST(r4, 0x5008, 0x0)
ioctl$auto_SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) (async)
ioctl$auto_SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040))
setreuid$auto(0x9, 0x1) (async)
setreuid$auto(0x9, 0x1)
mount_setattr$auto(0x5, 0x0, 0x0, 0x0, 0x7ff) (async)
mount_setattr$auto(0x5, 0x0, 0x0, 0x0, 0x7ff)
mmap$auto(0x4000000000, 0x200004, 0x4000000000e3, 0x13, 0xd, 0x300000000000)
syz_genetlink_get_family_id$auto_vdpa(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
io_uring_setup$auto(0xc, 0x0)
read$auto(0x3, 0x0, 0x80)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/008/001\x00', 0x204080, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/default_smp_affinity\x00', 0x40000, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/default_smp_affinity\x00', 0x40000, 0x0)
sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4050}, 0x14)
syz_clone(0x11, 0x0, 0x50, 0x0, 0x0, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)

18.72812711s ago: executing program 6 (id=2341):
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3)
timer_create$auto(0x8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r3, 0x400, 0x0)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x234}, 0x1, 0x0, 0x0, 0x40b4ff741f26f506}, 0x0)
r4 = socket(0x11, 0x2, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0xa, 0x8})
sendmmsg$auto(r4, 0x0, 0x2, 0x100fe)
ioctl$auto_VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000000c0)=0x4000000)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x7d48, 0x948b, 0x4, 0x15f4da0c, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0)

16.887507756s ago: executing program 8 (id=2342):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), r0)
r1 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000380), r0)
sendmsg$auto_NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, "d27269c1ac9f71eb27bdca43ee8e565d0ec5c9d84ef880a5f5eaf569fcd899d6f2"}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x4002}, 0x4004011)
socket(0x2, 0x1, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
statmount$auto(0x0, &(0x7f0000000180)={0x315, 0xfffffffd, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x6, 0x3, 0x2, 0x9, 0x2, 0x4000006, 0x4, 0xb6, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="000826bd7000fedbdf25030000000600070008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x4004)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

16.727550168s ago: executing program 8 (id=2343):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socket(0x2b, 0x1, 0x1)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/bNumEndpoints\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
munmap$auto(0x1, 0x9)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
inotify_init1$auto(0x3000000000000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000)
read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000)
fstat$auto(0x2, 0x0)
r2 = socket(0x28, 0x1, 0x0)
getsockopt$auto(r2, 0x28, 0x0, 0x0, 0x0)
r3 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5)
fallocate$auto(0x3, 0x0, 0xe, 0x8ec5)
getpeername$auto(r3, &(0x7f0000000080)=@hci={0x1f, 0x1, 0x2}, &(0x7f00000000c0)=0x2)
mmap$auto(0x0, 0xe983, 0x3, 0x6b1, 0xffffffffffffffff, 0x8000)
read$auto(0x3, 0x0, 0xfdef)
ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000580)={0x3, &(0x7f0000000540)={0x6, 0x2, 0x0, @inferred=r1}})
ioctl$auto(r1, 0x4b49, 0x9)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x10001)

16.58464965s ago: executing program 6 (id=2344):
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self/mounts\x00', 0x80, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
r0 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x103700, 0x0)
read$auto(r0, 0x0, 0x4000000081)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0xa, 0x1, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r3)
sendmsg$auto_OVS_VPORT_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, r4, 0x1, 0x71b527, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2)
sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x85, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
sysfs$auto(0x2, 0x2, 0x0)
getsockopt$auto(r2, 0x84, 0x1b, 0x0, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b", @ANYRES32, @ANYRES32, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x0)
r6 = socket(0x18, 0xa, 0x1)
connect$auto(r6, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26)
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x11, 0x0)

16.365097413s ago: executing program 6 (id=2345):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x9}, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
flock$auto(r0, 0x4)
socket(0xa, 0x3, 0x5)
openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000)
mmap$auto(0x0, 0x2020009, 0x40003, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x0, 0x4, 0x5, 0x3d3c)
timer_create$auto(0x3, 0x0, 0x0)
timer_settime$auto(0x0, 0x801, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0)
socket(0x29, 0x2, 0x0)
socket(0x1d, 0x2, 0x2)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x801, 0x0)
socket(0x2, 0x2, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/asound/card0/pcm0c/info\x00', 0x3d6b00, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/slab/kmalloc-64/min_partial\x00', 0x501, 0x0)
socket(0x10, 0x2, 0x0)
r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, 0x0)
ioctl$auto_USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000040)={0xa1b, 0x855, 0xdb, &(0x7f00000001c0)="da94e86c1133f19d41954e5e478867a6ce81e3a35fdfcb7218478bb35df4d94e3829f499ee8c3937725253b52a52f6ae937b8dbd55cfe0d4d330c0d563e17c3069d8747dbb7467"})
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)

15.796810526s ago: executing program 8 (id=2346):
r0 = prctl$auto(0x80, 0xd, 0x0, 0x1, 0x9)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r1, 0x5453, 0x0)
connect$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x55)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
mmap$auto(0x2000000, 0xa, 0x5, 0x9b75, 0xffffffffffffffff, 0x3)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
r2 = epoll_create$auto(0x4)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0)
epoll_ctl$auto(r2, 0x1, r3, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb5, 0xffffffffffffffff, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/4/effective_affinity\x00', 0x88000, 0x0)
close_range$auto(0x2, 0x8, 0x8003)
socket(0x10, 0x2, 0x4)
socket(0x25, 0x800, 0xd063)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00'})
bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@can, 0x6a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
connect$auto(r0, &(0x7f0000000100)=@llc={0x1a, 0x312, 0x5, 0x1, 0xb, 0x1, @local}, 0xc)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, &(0x7f0000000040)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x3}, 0x3}, 0x3, 0x0)
io_uring_setup$auto(0xffd, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/tty45\x00', 0x94443, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/power/level\x00', 0x129882, 0x0)
sendfile$auto(r4, r4, 0x0, 0x4)
memfd_create$auto(&(0x7f0000000000)='\x00', 0xe)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd10\x00', 0x478e213548314cf1, 0x0)

15.252360019s ago: executing program 8 (id=2347):
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x80, 0x0)
ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000000)={<r1=>r0, 0x81})
r2 = fcntl$getown(r1, 0x9)
r3 = prctl$auto(0xb, 0x6, r2, 0x4, 0x6)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13002ebd70fad0c4819a96185f0008000300", @ANYRES32=r7, @ANYBLOB='\b\x00&'], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894)
sendmsg$auto_MACSEC_CMD_DEL_TXSA(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x12ac, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x128f, 0x2, 0x0, 0x1, [@generic="a0c2522e5966a25ca2e362543145f221e47fdbc47a8f6b03185614cd5cb9d79e023aa3cfe1883de941d7b6dc60c2d7594185b2ce7133ce85463d21f18a8016b05624edd415d2997557fef4f1190666a95c0013d281fca3619f951fc91b6f6348959c0c9bf539040cb6c7f00e91fe8e57ab477e20f89a64ddcde4a369b3b18297457e218fa8cdf927456e685bcccc37fa4cbc3c44d00c339f4ba2f78d52fb81807d45018ed863783d1f2c0699b36d0b0d0a0dfaabee74f35040f3889f8c01e8429756b2ebbbf4297fb6b842c97bb47f875a9854b903bf961cb2674f1dba7ed166a451e87e15bd", @nested={0x10f, 0xc3, 0x0, 0x1, [@generic="cd41c5cda975c5db771618770733e70dc799f8fb82a00518f0590944a507cb0b8a64251b852c6f42a9e7508b4f2bcdafd112a801600e8237e48905165815c0aabb040fb80a87eaf5", @nested={0x4, 0xe3}, @typed={0x4, 0x9a, 0x0, 0x0, @binary}, @generic="478b6461fedab8b8b7d5fdaed2129792a4efd246bb7ef137d9481cb9", @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@empty}, @generic="738b1c8fc847b622b3085cd14f373d3b180d6545f9440c258135b889be9d5306b67c591163b91e9e2c84cf04c4b8697611767db5965fcd34778781926884120f4cdd2c093033419e0235afdcf9f2255dd5458e029be73e354bf69f", @generic="4dd79df54c1f91e5ab085f58fc6a7116396ca55aab649a33fb4f431532941111087c539a7c0e7d63741283ad58d1bf4544b38a46010732e2", @nested={0x4, 0x56}]}, @nested={0x28, 0x77, 0x0, 0x1, [@nested={0x4, 0xdc}, @typed={0x8, 0x12d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0xd, 0x93, 0x0, 0x0, @str='/dev/sg0\x00'}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x1004, 0x5d, 0x0, 0x0, @binary="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"}, @generic="9fa4e5c7a4d836952d321eeeb841421167ea8afb4c1d14cc764f1b05dc26cebae6177054f53505472d76e326a816dd1c82f06249b0205df3425f91bb05b60681a353189dfb8a1808d201d8eebaa39faa0bfb1865f1", @typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@loopback}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}]}, 0x12ac}}, 0x40)

14.950408141s ago: executing program 8 (id=2348):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
set_mempolicy$auto(0x6, 0x0, 0x21) (async)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020209, 0x9, 0x18, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xa) (async)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) (async)
setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6})
timerfd_create$auto(0x9, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
getcwd$auto(0x0, 0x7) (async)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000)
socket(0x2, 0x3, 0xa) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async)
socket(0x2, 0x80002, 0x73)
r0 = socket(0x15, 0x5, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r0, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f6)

14.345285462s ago: executing program 8 (id=2349):
socket(0x11, 0x80003, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0xffffffffffffffff, 0x0, 0x80000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyz4\x00', 0x1a5c1, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x4}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000)
io_uring_register$auto(r0, 0x18, 0x0, 0x9)
timer_create$auto(0x0, 0x0, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r3, 0x300000000000)
mmap$auto(0x7f, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020001, 0x3, 0x17, 0xfffffffffffffffa, 0x8000)
socket(0x11, 0xa, 0x4)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x55)
write$auto(0x3, 0x0, 0xfdef)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_MM_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="6911c5310c43538e81e928dae23e59eb24cabb1a7fbd710325aa51e29b81b23fcf72818cf4e35e8f6b17795a141fc8b24f728663098478696320b197cbc49c3a1d6b95d622ca4524f334e58f92280e365214625ac2a404a237b767f81052712bae"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x800002, 0xeb1, 0xfffffffffffffffa, 0x40000000000000f)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

8.866799537s ago: executing program 37 (id=2330):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0)
read$auto(r0, &(0x7f0000000000)='/\x00', 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
set_mempolicy$auto(0x6, 0x0, 0x21)
unshare$auto(0x40000080)
r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40603d07, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000001480), 0x400, 0x0)
pread64$auto(r2, 0x0, 0x101, 0x800005c2b)
writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xa)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9)
recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0)

6.311739334s ago: executing program 38 (id=2336):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x3, 0x5, 0x3)
write$auto(0x1, 0x0, 0x80000000)
close_range$auto(0x2, 0xa, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(0xca, 0x0, 0x2b)
r1 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140))
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
gettid()
socket(0xa, 0x2, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto_XFS_IOC_FREESP(r1, 0x4030580b, &(0x7f0000000040)={0x8, 0x9, 0x5, 0x4fcd, 0x5, <r4=>0xffffffffffffffff})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000200)={{@raw=0x2, 0xffffffff, 0x1, 0x81, "313bf5eb195a060000002af9ffb683dba3931f33828bbfba40f03510bf6b7fe5e2f94ba460d57d448667798d", @inferred=r4}, 0x2, 0x5, 0x4, @raw=0x5, @integer={0xdbe, 0x255, 0x1}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"})
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyc4\x00', 0x30080, 0x0)
write$auto_console_fops_tty_io(r5, &(0x7f0000000a00)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f895d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb43d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081e440be6a13a68f54c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf0971d5739599fa84b108a766d049b6273c92e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a41dc2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde0484c21a8be23cd7c01ea4e5b16faaca74093fefe8bd428364af17bfeede4d89ce3bf720abf435b94439b8aedcd0000", 0x837)
read$auto(0x3, 0x0, 0x80)
sendfile$auto(r2, r2, 0x0, 0x5)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
clock_getres$auto(0x2, 0x0)
alarm$auto(0x2)
r6 = epoll_create$auto(0x8800001)
epoll_ctl$auto(r6, 0x1, r0, 0x0)

3.674393869s ago: executing program 9 (id=2352):
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3)
timer_create$auto(0x8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r3, 0x400, 0x0)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x234}, 0x1, 0x0, 0x0, 0x40b4ff741f26f506}, 0x0)
r4 = socket(0x11, 0x2, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0xa, 0x8})
sendmmsg$auto(r4, 0x0, 0x2, 0x100fe)
ioctl$auto_VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000000c0)=0x4000000)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x7d48, 0x948b, 0x4, 0x15f4da0c, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0)

2.032228159s ago: executing program 9 (id=2353):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002840)='/sys/devices/virtual/net/bond0/bonding/ad_user_port_key\x00', 0x80000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002880)=""/226, 0xe2)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x82a02, 0x0)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
read$auto(r0, 0x0, 0x20)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002840)='/sys/devices/virtual/net/bond0/bonding/ad_user_port_key\x00', 0x80000, 0x0) (async)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002880)=""/226, 0xe2) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x82a02, 0x0) (async)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) (async)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) (async)
read$auto(r3, 0x0, 0x20) (async)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async)
read$auto(r0, 0x0, 0x20) (async)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) (async)

1.412568663s ago: executing program 9 (id=2354):
r0 = openat$auto_fuse_dir_operations_dir(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x1c1000, 0x0)
ioctl$auto_FS_IOC_MEASURE_VERITY3(r0, 0xc0046686, &(0x7f00000001c0)={0x1, 0xdb1d, "1b61dc15349fc12b0923f8b9e8b677b1580e99a27b31ed06f933c0c62040d8508d9c46f8683f87c98b22baf0983b2469f7acbf973ed750433d784c4ece612c77b3b02d6042570057da2094b01b24fb0c5774a09a3201853070054d9d306ba3864ab817be547eb2ca4098d2c350ddc24d702d7d05885c88e066e5cf37001076c9f6755ab9f5be9cdd09aa2c7b"})
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/mem\x00', 0x109000, 0x0)
mmap$auto(0x0, 0x420007, 0xdf, 0xeb1, r1, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0xff)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7fffffffffffffff, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/blkio.bfq.sectors_recursive\x00', 0x88000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000500)=""/189, 0xbd)
r3 = socket(0x1d, 0x2, 0x7)
r4 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
bind$auto(r4, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r6=>0x0})
connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r6}, 0x18)
getpeername$auto(0x3, 0x0, 0x0)

1.312407825s ago: executing program 39 (id=2345):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x9}, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
flock$auto(r0, 0x4)
socket(0xa, 0x3, 0x5)
openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000)
mmap$auto(0x0, 0x2020009, 0x40003, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x0, 0x4, 0x5, 0x3d3c)
timer_create$auto(0x3, 0x0, 0x0)
timer_settime$auto(0x0, 0x801, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0)
socket(0x29, 0x2, 0x0)
socket(0x1d, 0x2, 0x2)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x801, 0x0)
socket(0x2, 0x2, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/asound/card0/pcm0c/info\x00', 0x3d6b00, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/slab/kmalloc-64/min_partial\x00', 0x501, 0x0)
socket(0x10, 0x2, 0x0)
r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, 0x0)
ioctl$auto_USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000040)={0xa1b, 0x855, 0xdb, &(0x7f00000001c0)="da94e86c1133f19d41954e5e478867a6ce81e3a35fdfcb7218478bb35df4d94e3829f499ee8c3937725253b52a52f6ae937b8dbd55cfe0d4d330c0d563e17c3069d8747dbb7467"})
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)

1.28540545s ago: executing program 9 (id=2356):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0xfffffd85, 0x1, r2}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x810)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00')
syz_genetlink_get_family_id$auto_nl80211(&(0x7f000000a500), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x200, 0x70bd0a, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x8c5}, 0x24008080)

1.104503929s ago: executing program 9 (id=2357):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) (async)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c94cb37", @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="100024800c00b28005009a0040000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x20000000)
socket(0x1d, 0x2, 0x2) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x28, 0x1, 0x0) (async)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) (async)
listen$auto(0x3, 0x81)
socket(0x2, 0x1, 0x106) (async)
bind$auto(0xffffffffffffffff, 0x0, 0x80)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async)
r3 = openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x501080, 0x0)
socketpair$auto(0x80001, 0x6, 0x10000000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x401, 0x4f, 0x5, 0x1, 0x40, 0x4, 0x7, 0x100000004}}) (async)
r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/33u\x00', 0x20202, 0x0)
pread64$auto(r4, 0x0, 0x0, 0x9)
read$auto_mon_fops_text_t_mon_text(r4, 0x0, 0x0) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x60800, 0x0) (async)
close_range$auto(0x2, 0xa, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) (async)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
setsockopt$auto_SO_MAX_PACING_RATE(r3, 0x0, 0x2f, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x6) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x5, 0xd3e, 0x1, 0x948b, 0x1, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x4, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe]}, 0x0) (async)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)

0s ago: executing program 9 (id=2358):
poll$auto(&(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x3, 0x2}, 0x5, 0x6)
mmap$auto(0x3, 0x202000a, 0x3, 0x17, r0, 0x8003)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timerfd_create$auto_CLOCK_REALTIME(0x0, 0x1)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
io_uring_setup$auto(0x5, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xfffffffffffffffd, 0x80040000d, 0x5, 0x9b72, r1, 0x8000)
dup$auto(0xffffffffffffffff)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
r3 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409)
fanotify_mark$auto(0x0, 0x401, 0x9, r3, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)="42bf466a98f4921b6c0a", 0xa)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
r5 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r5, 0x400, 0x1)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000180)=""/250, 0xfa)

kernel console output (not intermixed with test programs):

ioc+0x10/0x10
[  563.333483][T14318]  ? __pfx___mutex_lock+0x10/0x10
[  563.333507][T14318]  ? dev_load+0x8e/0x240
[  563.333531][T14318]  dev_ioctl+0x1b2/0x1060
[  563.333555][T14318]  sock_ioctl+0x5b3/0x6b0
[  563.333575][T14318]  ? __pfx_sock_ioctl+0x10/0x10
[  563.333591][T14318]  ? hook_file_ioctl_common+0x144/0x410
[  563.333617][T14318]  ? __fget_files+0x20e/0x3c0
[  563.333640][T14318]  ? __pfx_sock_ioctl+0x10/0x10
[  563.333662][T14318]  __x64_sys_ioctl+0x18e/0x210
[  563.333682][T14318]  do_syscall_64+0xcd/0xf80
[  563.333700][T14318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.333716][T14318] RIP: 0033:0x7fa49938f7c9
[  563.333731][T14318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  563.333747][T14318] RSP: 002b:00007fa49a253038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  563.333763][T14318] RAX: ffffffffffffffda RBX: 00007fa4995e5fa0 RCX: 00007fa49938f7c9
[  563.333774][T14318] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008
[  563.333783][T14318] RBP: 00007fa499413f91 R08: 0000000000000000 R09: 0000000000000000
[  563.333794][T14318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  563.333804][T14318] R13: 00007fa4995e6038 R14: 00007fa4995e5fa0 R15: 00007fff123ee8b8
[  563.333825][T14318]  </TASK>
[  564.108338][T14330] FAULT_INJECTION: forcing a failure.
[  564.108338][T14330] name failslab, interval 1, probability 0, space 0, times 0
[  564.139382][T14318] netdevsim netdevsim2 netdevsim1: left allmulticast mode
[  564.164474][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[  564.208365][T14330] CPU: 0 UID: 0 PID: 14330 Comm: syz.4.1819 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  564.208404][T14330] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  564.208412][T14330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  564.208422][T14330] Call Trace:
[  564.208429][T14330]  <TASK>
[  564.208435][T14330]  dump_stack_lvl+0x16c/0x1f0
[  564.208458][T14330]  should_fail_ex+0x512/0x640
[  564.208481][T14330]  ? __kmalloc_cache_noprof+0x5f/0x800
[  564.208501][T14330]  should_failslab+0xc2/0x120
[  564.208524][T14330]  __kmalloc_cache_noprof+0x80/0x800
[  564.208542][T14330]  ? trace_pid_list_alloc+0x232/0x480
[  564.208567][T14330]  ? trace_pid_list_alloc+0x232/0x480
[  564.208587][T14330]  trace_pid_list_alloc+0x232/0x480
[  564.208610][T14330]  trace_pid_write+0x10c/0x4b0
[  564.208647][T14330]  ? __pfx_trace_pid_write+0x10/0x10
[  564.208661][T14330]  ? __pfx_aa_file_perm+0x10/0x10
[  564.208679][T14330]  ? update_last_data+0xaa/0x510
[  564.208705][T14330]  event_pid_write.isra.0+0x1e4/0x7f0
[  564.208730][T14330]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  564.208756][T14330]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  564.208778][T14330]  vfs_write+0x2a0/0x11d0
[  564.208801][T14330]  ? __pfx___mutex_lock+0x10/0x10
[  564.208819][T14330]  ? __pfx_vfs_write+0x10/0x10
[  564.208845][T14330]  ? __fget_files+0x20e/0x3c0
[  564.208871][T14330]  ksys_write+0x12a/0x250
[  564.208891][T14330]  ? __pfx_ksys_write+0x10/0x10
[  564.208918][T14330]  do_syscall_64+0xcd/0xf80
[  564.208935][T14330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.208951][T14330] RIP: 0033:0x7f9305b8f7c9
[  564.208964][T14330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  564.208981][T14330] RSP: 002b:00007f9306a55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  564.208997][T14330] RAX: ffffffffffffffda RBX: 00007f9305de6090 RCX: 00007f9305b8f7c9
[  564.209007][T14330] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  564.209016][T14330] RBP: 00007f9305c13f91 R08: 0000000000000000 R09: 0000000000000000
[  564.209025][T14330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  564.209034][T14330] R13: 00007f9305de6128 R14: 00007f9305de6090 R15: 00007ffd41ccfc28
[  564.209055][T14330]  </TASK>
[  564.799204][   T53] Bluetooth: hci0: command 0x0c1a tx timeout
[  564.805457][ T5836] Bluetooth: hci3: command 0x2016 tx timeout
[  564.877734][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  564.886701][   T53] Bluetooth: hci4: command 0x0c1a tx timeout
[  565.428115][ T5164] Trying to write to read-only block-device sda1
[  565.688309][T14346] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40
[  565.832765][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1824'.
[  566.448976][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1827'.
[  567.016778][   T30] audit: type=1804 audit(4294967309.249:81): pid=14368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1826" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=30 res=1 errno=0
[  568.026054][T14378] Sensor B: =================  START STATUS  =================
[  568.112355][T14378] Sensor B: Test Pattern: 75% Colorbar
[  568.201385][T14378] Sensor B: Show Information: All
[  568.269354][T14378] Sensor B: Vertical Flip: false
[  568.345618][T14378] Sensor B: Horizontal Flip: false
[  568.483311][T14378] Sensor B: Brightness: 128
[  568.572481][T14378] Sensor B: Contrast: 128
[  568.628564][T14378] Sensor B: Hue: 0
[  568.738855][T14378] Sensor B: Saturation: 128
[  568.801946][T14378] Sensor B: ==================  END STATUS  ==================
[  568.914572][T14393] FAULT_INJECTION: forcing a failure.
[  568.914572][T14393] name failslab, interval 1, probability 0, space 0, times 0
[  569.000665][T14393] CPU: 0 UID: 0 PID: 14393 Comm: syz.1.1835 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  569.000702][T14393] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  569.000712][T14393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  569.000721][T14393] Call Trace:
[  569.000728][T14393]  <TASK>
[  569.000735][T14393]  dump_stack_lvl+0x16c/0x1f0
[  569.000760][T14393]  should_fail_ex+0x512/0x640
[  569.000782][T14393]  ? kmem_cache_alloc_noprof+0x62/0x770
[  569.000805][T14393]  should_failslab+0xc2/0x120
[  569.000828][T14393]  kmem_cache_alloc_noprof+0x83/0x770
[  569.000846][T14393]  ? alloc_uid+0x13d/0x4c0
[  569.000873][T14393]  ? alloc_uid+0x13d/0x4c0
[  569.000893][T14393]  alloc_uid+0x13d/0x4c0
[  569.000915][T14393]  ? __pfx_alloc_uid+0x10/0x10
[  569.000937][T14393]  ? bpf_lsm_capable+0x9/0x10
[  569.000958][T14393]  ? security_capable+0x7e/0x260
[  569.000978][T14393]  __sys_setreuid+0x79d/0xaf0
[  569.000997][T14393]  ? rcu_is_watching+0x12/0xc0
[  569.001020][T14393]  do_syscall_64+0xcd/0xf80
[  569.001037][T14393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.001054][T14393] RIP: 0033:0x7f52b198f7c9
[  569.001067][T14393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  569.001082][T14393] RSP: 002b:00007f52afbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071
[  569.001097][T14393] RAX: ffffffffffffffda RBX: 00007f52b1be6090 RCX: 00007f52b198f7c9
[  569.001108][T14393] RDX: 0000000000000000 RSI: 7fffffffffffffff RDI: 0000000080000000
[  569.001117][T14393] RBP: 00007f52b1a13f91 R08: 0000000000000000 R09: 0000000000000000
[  569.001135][T14393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  569.001145][T14393] R13: 00007f52b1be6128 R14: 00007f52b1be6090 R15: 00007ffc70ebd708
[  569.001165][T14393]  </TASK>
[  570.569523][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  570.575971][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  570.972676][T14412] Invalid ELF header len 5
[  571.315258][T14412] zswap: compressor  not available
[  571.341843][T14417] phram: not enough arguments
[  572.305970][T14433] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  572.344049][T14433] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  572.383289][T14433] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  572.414297][T14433] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  572.452122][T14433] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  572.950802][T14457] random: crng reseeded on system resumption
[  573.548249][T14480] netlink: 'syz.1.1854': attribute type 1 has an invalid length.
[  573.985787][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[  574.383360][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout
[  574.389449][   T53] Bluetooth: hci3: command 0x2016 tx timeout
[  574.395572][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  574.457313][T14500] random: crng reseeded on system resumption
[  574.465275][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout
[  575.937836][T14522] FAULT_INJECTION: forcing a failure.
[  575.937836][T14522] name failslab, interval 1, probability 0, space 0, times 0
[  576.100213][T14522] CPU: 0 UID: 0 PID: 14522 Comm: syz.3.1863 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  576.100248][T14522] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  576.100256][T14522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  576.100265][T14522] Call Trace:
[  576.100271][T14522]  <TASK>
[  576.100278][T14522]  dump_stack_lvl+0x16c/0x1f0
[  576.100301][T14522]  should_fail_ex+0x512/0x640
[  576.100324][T14522]  ? fs_reclaim_acquire+0xae/0x150
[  576.100354][T14522]  should_failslab+0xc2/0x120
[  576.100377][T14522]  __kmalloc_noprof+0xeb/0x910
[  576.100394][T14522]  ? tomoyo_encode2+0x100/0x3e0
[  576.100411][T14522]  ? tomoyo_encode2+0x100/0x3e0
[  576.100424][T14522]  tomoyo_encode2+0x100/0x3e0
[  576.100440][T14522]  tomoyo_encode+0x29/0x50
[  576.100453][T14522]  tomoyo_realpath_from_path+0x18f/0x6e0
[  576.100473][T14522]  tomoyo_check_open_permission+0x2ab/0x3c0
[  576.100495][T14522]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  576.100534][T14522]  ? do_raw_spin_lock+0x12c/0x2b0
[  576.100558][T14522]  tomoyo_file_open+0x6b/0x90
[  576.100576][T14522]  security_file_open+0x84/0x1e0
[  576.100599][T14522]  do_dentry_open+0x597/0x1590
[  576.100622][T14522]  ? security_inode_permission+0xbf/0x260
[  576.100646][T14522]  vfs_open+0x82/0x3f0
[  576.100664][T14522]  path_openat+0x2078/0x3140
[  576.100692][T14522]  ? __pfx_path_openat+0x10/0x10
[  576.100720][T14522]  do_filp_open+0x20b/0x470
[  576.100742][T14522]  ? __pfx_do_filp_open+0x10/0x10
[  576.100777][T14522]  ? alloc_fd+0x471/0x7d0
[  576.100804][T14522]  do_sys_openat2+0x11f/0x280
[  576.100820][T14522]  ? __pfx_do_sys_openat2+0x10/0x10
[  576.100834][T14522]  ? __fget_files+0x204/0x3c0
[  576.100861][T14522]  __x64_sys_openat+0x174/0x210
[  576.100878][T14522]  ? __pfx___x64_sys_openat+0x10/0x10
[  576.100902][T14522]  do_syscall_64+0xcd/0xf80
[  576.100920][T14522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.100936][T14522] RIP: 0033:0x7f36e438f7c9
[  576.100949][T14522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.100964][T14522] RSP: 002b:00007f36e520e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  576.100979][T14522] RAX: ffffffffffffffda RBX: 00007f36e45e5fa0 RCX: 00007f36e438f7c9
[  576.100989][T14522] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  576.100999][T14522] RBP: 00007f36e4413f91 R08: 0000000000000000 R09: 0000000000000000
[  576.101008][T14522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  576.101017][T14522] R13: 00007f36e45e6038 R14: 00007f36e45e5fa0 R15: 00007ffdd26f6c58
[  576.101037][T14522]  </TASK>
[  576.101056][T14522] ERROR: Out of memory at tomoyo_realpath_from_path.
[  576.456647][T14514] Process accounting paused
[  576.685090][   T30] audit: type=1800 audit(4294967318.909:82): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1864" name="dbroot" dev="configfs" ino=59250 res=0 errno=0
[  577.170258][T14538] binder: 14536:14538 ioctl 400c620e 0 returned -22
[  577.734773][T14554] FAULT_INJECTION: forcing a failure.
[  577.734773][T14554] name failslab, interval 1, probability 0, space 0, times 0
[  577.848566][T14554] CPU: 0 UID: 0 PID: 14554 Comm: syz.1.1870 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  577.848603][T14554] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  577.848612][T14554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  577.848622][T14554] Call Trace:
[  577.848628][T14554]  <TASK>
[  577.848635][T14554]  dump_stack_lvl+0x16c/0x1f0
[  577.848658][T14554]  should_fail_ex+0x512/0x640
[  577.848682][T14554]  ? kmem_cache_alloc_noprof+0x62/0x770
[  577.848703][T14554]  should_failslab+0xc2/0x120
[  577.848726][T14554]  kmem_cache_alloc_noprof+0x83/0x770
[  577.848744][T14554]  ? alloc_empty_file+0x55/0x1e0
[  577.848763][T14554]  ? alloc_empty_file+0x55/0x1e0
[  577.848777][T14554]  alloc_empty_file+0x55/0x1e0
[  577.848793][T14554]  alloc_file_pseudo+0x13a/0x230
[  577.848810][T14554]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  577.848826][T14554]  ? alloc_fd+0x471/0x7d0
[  577.848850][T14554]  sock_alloc_file+0x50/0x210
[  577.848866][T14554]  __sys_socket+0x1c0/0x260
[  577.848885][T14554]  ? __pfx___sys_socket+0x10/0x10
[  577.848902][T14554]  ? xfd_validate_state+0x61/0x180
[  577.848922][T14554]  __x64_sys_socket+0x72/0xb0
[  577.848939][T14554]  ? lockdep_hardirqs_on+0x7c/0x110
[  577.848956][T14554]  do_syscall_64+0xcd/0xf80
[  577.848973][T14554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.848989][T14554] RIP: 0033:0x7f52b198f7c9
[  577.849002][T14554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  577.849017][T14554] RSP: 002b:00007f52b2740038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  577.849033][T14554] RAX: ffffffffffffffda RBX: 00007f52b1be5fa0 RCX: 00007f52b198f7c9
[  577.849044][T14554] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a
[  577.849054][T14554] RBP: 00007f52b1a13f91 R08: 0000000000000000 R09: 0000000000000000
[  577.849064][T14554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  577.849073][T14554] R13: 00007f52b1be6038 R14: 00007f52b1be5fa0 R15: 00007ffc70ebd708
[  577.849092][T14554]  </TASK>
[  578.392008][T10998] netdevsim netdevsim13 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  580.131492][T14612] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  580.352475][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'.
[  580.430091][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'.
[  582.930117][T14683] ICMPv6: process `syz.1.1895' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead
[  583.191528][T14688] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1895'.
[  583.631650][T14691] FAULT_INJECTION: forcing a failure.
[  583.631650][T14691] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  583.727189][T14691] CPU: 0 UID: 0 PID: 14691 Comm: syz.2.1898 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  583.727228][T14691] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  583.727237][T14691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  583.727248][T14691] Call Trace:
[  583.727254][T14691]  <TASK>
[  583.727260][T14691]  dump_stack_lvl+0x16c/0x1f0
[  583.727283][T14691]  should_fail_ex+0x512/0x640
[  583.727308][T14691]  should_fail_alloc_page+0xe7/0x130
[  583.727334][T14691]  prepare_alloc_pages+0x401/0x670
[  583.727361][T14691]  __alloc_frozen_pages_noprof+0x18b/0x2430
[  583.727381][T14691]  ? __pfx_try_to_migrate_one+0x10/0x10
[  583.727402][T14691]  ? __up_read+0x2d1/0x700
[  583.727420][T14691]  ? __pfx___up_read+0x10/0x10
[  583.727436][T14691]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  583.727454][T14691]  ? rmap_walk_anon+0x559/0x790
[  583.727493][T14691]  __folio_alloc_noprof+0x11/0x220
[  583.727511][T14691]  alloc_migration_target+0x1a0/0x560
[  583.727536][T14691]  migrate_pages_batch+0x3bc/0x3bb0
[  583.727553][T14691]  ? __pfx_alloc_migration_target+0x10/0x10
[  583.727584][T14691]  ? __pfx_migrate_pages_batch+0x10/0x10
[  583.727602][T14691]  ? __pfx_walk_pgd_range+0x10/0x10
[  583.727632][T14691]  migrate_pages_sync+0x12d/0x8a0
[  583.727649][T14691]  ? __pfx_alloc_migration_target+0x10/0x10
[  583.727677][T14691]  ? queue_pages_test_walk+0x279/0x410
[  583.727702][T14691]  ? __pfx_migrate_pages_sync+0x10/0x10
[  583.727718][T14691]  ? walk_page_test+0x9b/0x180
[  583.727738][T14691]  ? walk_page_range_mm_unsafe+0x235/0xb40
[  583.727761][T14691]  migrate_pages+0x1b0b/0x2350
[  583.727778][T14691]  ? __pfx_alloc_migration_target+0x10/0x10
[  583.727807][T14691]  ? __pfx_migrate_pages+0x10/0x10
[  583.727822][T14691]  ? queue_pages_range+0x11e/0x180
[  583.727845][T14691]  ? __pfx___up_read+0x10/0x10
[  583.727862][T14691]  ? do_migrate_pages+0x45b/0x750
[  583.727887][T14691]  do_migrate_pages+0x491/0x750
[  583.727914][T14691]  ? __pfx_do_migrate_pages+0x10/0x10
[  583.727941][T14691]  ? rcu_is_watching+0x12/0xc0
[  583.727961][T14691]  ? cap_capable+0x10d/0x3f0
[  583.727978][T14691]  ? get_task_mm+0xc2/0xf0
[  583.727998][T14691]  ? security_capable+0x250/0x260
[  583.728017][T14691]  kernel_migrate_pages+0x55b/0x700
[  583.728040][T14691]  ? __pfx_kernel_migrate_pages+0x10/0x10
[  583.728063][T14691]  ? __pfx_do_writev+0x10/0x10
[  583.728086][T14691]  __x64_sys_migrate_pages+0x96/0x100
[  583.728109][T14691]  ? lockdep_hardirqs_on+0x7c/0x110
[  583.728125][T14691]  do_syscall_64+0xcd/0xf80
[  583.728143][T14691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.728159][T14691] RIP: 0033:0x7fa49938f7c9
[  583.728173][T14691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  583.728188][T14691] RSP: 002b:00007fa49a253038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100
[  583.728204][T14691] RAX: ffffffffffffffda RBX: 00007fa4995e5fa0 RCX: 00007fa49938f7c9
[  583.728215][T14691] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000
[  583.728224][T14691] RBP: 00007fa499413f91 R08: 0000000000000000 R09: 0000000000000000
[  583.728235][T14691] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000
[  583.728244][T14691] R13: 00007fa4995e6038 R14: 00007fa4995e5fa0 R15: 00007fff123ee8b8
[  583.728265][T14691]  </TASK>
[  584.692122][T14705] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1900'.
[  586.370857][T14744] ima: policy update failed
[  586.435829][   T30] audit: type=1802 audit(4294967328.770:83): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1897" res=0 errno=0
[  586.623475][T11020] netdevsim netdevsim15 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.782912][T14756] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  587.826364][T14756] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  587.852603][T14756] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  587.880357][T14756] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  587.902412][T14756] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  588.492805][T14795] futex_wake_op: syz.4.1918 tries to shift op by -2048; fix this program
[  588.567695][T14797] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1917'.
[  588.627424][T14795] futex_wake_op: syz.4.1918 tries to shift op by -2048; fix this program
[  588.723189][T14801] 0x000000000001-0x000000020000 : ""
[  588.890859][T14801] ftl_cs: FTL header corrupt!
[  589.106201][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[  589.822361][   T53] Bluetooth: hci0: command 0x0c1a tx timeout
[  589.828481][ T5836] Bluetooth: hci3: command 0x2016 tx timeout
[  589.902201][   T53] Bluetooth: hci1: command 0x0c1a tx timeout
[  589.908299][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout
[  590.417178][T14826] device-mapper: ioctl: Unable to rename non-existent device,  to „
[  591.198099][T14846] ovs_: entered promiscuous mode
[  592.740139][T14872] Unable to find swap-space signature
[  592.862925][T14874] FAULT_INJECTION: forcing a failure.
[  592.862925][T14874] name failslab, interval 1, probability 0, space 0, times 0
[  592.936547][T14874] CPU: 0 UID: 0 PID: 14874 Comm: syz.3.1932 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  592.936584][T14874] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  592.936593][T14874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  592.936603][T14874] Call Trace:
[  592.936616][T14874]  <TASK>
[  592.936623][T14874]  dump_stack_lvl+0x16c/0x1f0
[  592.936646][T14874]  should_fail_ex+0x512/0x640
[  592.936670][T14874]  ? __kmalloc_noprof+0xca/0x910
[  592.936689][T14874]  should_failslab+0xc2/0x120
[  592.936712][T14874]  __kmalloc_noprof+0xeb/0x910
[  592.936729][T14874]  ? udpv6_init_sock+0x24e/0x450
[  592.936755][T14874]  ? udpv6_init_sock+0x24e/0x450
[  592.936776][T14874]  udpv6_init_sock+0x24e/0x450
[  592.936798][T14874]  ? __pfx_udpv6_init_sock+0x10/0x10
[  592.936821][T14874]  inet6_create+0xb30/0x12b0
[  592.936839][T14874]  ? inet6_create+0x7f/0x12b0
[  592.936856][T14874]  __sock_create+0x339/0x8a0
[  592.936881][T14874]  __sys_socket+0x14d/0x260
[  592.936897][T14874]  ? fput+0x70/0xf0
[  592.936911][T14874]  ? __pfx___sys_socket+0x10/0x10
[  592.936928][T14874]  ? xfd_validate_state+0x61/0x180
[  592.936942][T14874]  ? __pfx_ksys_write+0x10/0x10
[  592.936966][T14874]  __x64_sys_socket+0x72/0xb0
[  592.936983][T14874]  ? lockdep_hardirqs_on+0x7c/0x110
[  592.936999][T14874]  do_syscall_64+0xcd/0xf80
[  592.937016][T14874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.937031][T14874] RIP: 0033:0x7f36e438f7c9
[  592.937045][T14874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  592.937060][T14874] RSP: 002b:00007f36e51ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  592.937075][T14874] RAX: ffffffffffffffda RBX: 00007f36e45e6090 RCX: 00007f36e438f7c9
[  592.937086][T14874] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a
[  592.937095][T14874] RBP: 00007f36e4413f91 R08: 0000000000000000 R09: 0000000000000000
[  592.937104][T14874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.937113][T14874] R13: 00007f36e45e6128 R14: 00007f36e45e6090 R15: 00007ffdd26f6c58
[  592.937134][T14874]  </TASK>
[  594.067771][T14896] random: crng reseeded on system resumption
[  595.833899][T14908] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  595.871568][T14908] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  595.906405][T14908] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  595.943765][T14908] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  595.977878][T14908] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  596.325823][T14927] FAULT_INJECTION: forcing a failure.
[  596.325823][T14927] name failslab, interval 1, probability 0, space 0, times 0
[  596.418818][T14927] CPU: 0 UID: 0 PID: 14927 Comm: syz.4.1944 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  596.418855][T14927] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  596.418864][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  596.418874][T14927] Call Trace:
[  596.418880][T14927]  <TASK>
[  596.418887][T14927]  dump_stack_lvl+0x16c/0x1f0
[  596.418911][T14927]  should_fail_ex+0x512/0x640
[  596.418934][T14927]  ? kmem_cache_alloc_noprof+0x62/0x770
[  596.418955][T14927]  should_failslab+0xc2/0x120
[  596.418978][T14927]  kmem_cache_alloc_noprof+0x83/0x770
[  596.418995][T14927]  ? vm_area_alloc+0x1f/0x160
[  596.419014][T14927]  ? vm_area_alloc+0x1f/0x160
[  596.419028][T14927]  vm_area_alloc+0x1f/0x160
[  596.419042][T14927]  create_init_stack_vma+0x7e/0x700
[  596.419065][T14927]  alloc_bprm+0x420/0x710
[  596.419087][T14927]  do_execveat_common.isra.0+0x1ce/0x610
[  596.419111][T14927]  __x64_sys_execve+0x8e/0xb0
[  596.419131][T14927]  do_syscall_64+0xcd/0xf80
[  596.419148][T14927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.419165][T14927] RIP: 0033:0x7f9305b8f7c9
[  596.419178][T14927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  596.419193][T14927] RSP: 002b:00007f9306a76038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  596.419300][T14927] RAX: ffffffffffffffda RBX: 00007f9305de5fa0 RCX: 00007f9305b8f7c9
[  596.419312][T14927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  596.419322][T14927] RBP: 00007f9305c13f91 R08: 0000000000000000 R09: 0000000000000000
[  596.419331][T14927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  596.419341][T14927] R13: 00007f9305de6038 R14: 00007f9305de5fa0 R15: 00007ffd41ccfc28
[  596.419362][T14927]  </TASK>
[  596.612057][T14906] FAULT_INJECTION: forcing a failure.
[  596.612057][T14906] name failslab, interval 1, probability 0, space 0, times 0
[  596.624777][T14906] CPU: 0 UID: 0 PID: 14906 Comm: syz.3.1940 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  596.624814][T14906] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  596.624824][T14906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  596.624834][T14906] Call Trace:
[  596.624841][T14906]  <TASK>
[  596.624848][T14906]  dump_stack_lvl+0x16c/0x1f0
[  596.624870][T14906]  should_fail_ex+0x512/0x640
[  596.624893][T14906]  ? __kmalloc_cache_noprof+0x5f/0x800
[  596.624914][T14906]  should_failslab+0xc2/0x120
[  596.624937][T14906]  __kmalloc_cache_noprof+0x80/0x800
[  596.624955][T14906]  ? trace_pid_list_alloc+0x232/0x480
[  596.624980][T14906]  ? trace_pid_list_alloc+0x232/0x480
[  596.624999][T14906]  trace_pid_list_alloc+0x232/0x480
[  596.625022][T14906]  trace_pid_write+0x10c/0x4b0
[  596.625041][T14906]  ? __pfx_trace_pid_write+0x10/0x10
[  596.625053][T14906]  ? __pfx_aa_file_perm+0x10/0x10
[  596.625071][T14906]  ? update_last_data+0xaa/0x510
[  596.625096][T14906]  event_pid_write.isra.0+0x1e4/0x7f0
[  596.625119][T14906]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  596.625146][T14906]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  596.625168][T14906]  vfs_write+0x2a0/0x11d0
[  596.625191][T14906]  ? __pfx___mutex_lock+0x10/0x10
[  596.625209][T14906]  ? __pfx_vfs_write+0x10/0x10
[  596.625268][T14906]  ? __fget_files+0x20e/0x3c0
[  596.625296][T14906]  ksys_write+0x12a/0x250
[  596.625316][T14906]  ? __pfx_ksys_write+0x10/0x10
[  596.625343][T14906]  do_syscall_64+0xcd/0xf80
[  596.625361][T14906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.625377][T14906] RIP: 0033:0x7f36e438f7c9
[  596.625391][T14906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  596.625406][T14906] RSP: 002b:00007f36e51ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  596.625422][T14906] RAX: ffffffffffffffda RBX: 00007f36e45e6090 RCX: 00007f36e438f7c9
[  596.625433][T14906] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  596.625443][T14906] RBP: 00007f36e4413f91 R08: 0000000000000000 R09: 0000000000000000
[  596.625452][T14906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  596.625462][T14906] R13: 00007f36e45e6128 R14: 00007f36e45e6090 R15: 00007ffdd26f6c58
[  596.625483][T14906]  </TASK>
[  597.431548][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[  597.949963][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  597.955986][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[  597.963990][   T53] Bluetooth: hci3: command 0x2016 tx timeout
[  598.020734][   T53] Bluetooth: hci4: command 0x0c1a tx timeout
[  599.281916][T14973] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in;
[  599.281916][T14973]    program syz.1.1952 not setting count and/or reply_len properly
[  599.434713][T14973] warning: `syz.1.1952' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  600.195866][T14998] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1956'.
[  600.235771][T14986] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  600.288073][T14986] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  600.320076][T14986] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  600.362182][T14986] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  600.407954][T14986] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  601.584571][T15027] loop8: detected capacity change from 0 to 8
[  601.760354][   T53] Bluetooth: hci2: command 0x0c1a tx timeout
[  601.846645][   T53] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260
[  602.317294][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[  602.335349][   T53] Bluetooth: hci3: command 0x2016 tx timeout
[  602.397708][   T53] Bluetooth: hci1: command 0x0c1a tx timeout
[  602.476987][   T53] Bluetooth: hci4: command 0x0c1a tx timeout
[  602.749683][T15052] vhci_hcd vhci_hcd.2: invalid port number 16
[  602.770122][T15052] vhci_hcd vhci_hcd.2: invalid port number 16
[  607.366874][T15111] FAULT_INJECTION: forcing a failure.
[  607.366874][T15111] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  607.416787][T15111] CPU: 0 UID: 0 PID: 15111 Comm: syz.4.1982 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  607.416822][T15111] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  607.416831][T15111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  607.416840][T15111] Call Trace:
[  607.416846][T15111]  <TASK>
[  607.416853][T15111]  dump_stack_lvl+0x16c/0x1f0
[  607.416877][T15111]  should_fail_ex+0x512/0x640
[  607.416903][T15111]  strncpy_from_user+0x3b/0x2e0
[  607.416924][T15111]  getname_flags.part.0+0x8f/0x550
[  607.416945][T15111]  getname_flags+0x93/0xf0
[  607.416965][T15111]  do_sys_openat2+0xb8/0x280
[  607.416982][T15111]  ? __pfx_do_sys_openat2+0x10/0x10
[  607.416998][T15111]  ? __pfx___might_resched+0x10/0x10
[  607.417021][T15111]  ? blkcg_maybe_throttle_current+0x650/0xf30
[  607.417044][T15111]  ? _raw_spin_unlock_irq+0x23/0x50
[  607.417073][T15111]  __x64_sys_openat+0x174/0x210
[  607.417097][T15111]  ? __pfx___x64_sys_openat+0x10/0x10
[  607.417127][T15111]  do_syscall_64+0xcd/0xf80
[  607.417145][T15111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.417161][T15111] RIP: 0033:0x7f9305b8f7c9
[  607.417174][T15111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  607.417188][T15111] RSP: 002b:00007f9306a76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  607.417203][T15111] RAX: ffffffffffffffda RBX: 00007f9305de5fa0 RCX: 00007f9305b8f7c9
[  607.417213][T15111] RDX: 0000000000088100 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  607.417222][T15111] RBP: 00007f9305c13f91 R08: 0000000000000000 R09: 0000000000000000
[  607.417231][T15111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  607.417240][T15111] R13: 00007f9305de6038 R14: 00007f9305de5fa0 R15: 00007ffd41ccfc28
[  607.417260][T15111]  </TASK>
[  609.599845][T15128] zswap: compressor  not available
[  611.142663][T15144] ima: policy update failed
[  611.186669][   T30] audit: type=1802 audit(4294967353.649:84): pid=15144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1988" res=0 errno=0
[  611.505063][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'.
[  612.976418][T15168] netlink: 314 bytes leftover after parsing attributes in process `syz.4.1993'.
[  613.008174][T15170] netlink: 314 bytes leftover after parsing attributes in process `syz.4.1993'.
[  613.617692][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'.
[  613.691075][T15180] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1997'.
[  615.347804][T15212] sg_write: data in/out 8156/1 bytes for SCSI command 0x0-- guessing data in;
[  615.347804][T15212]    program syz.3.2004 not setting count and/or reply_len properly
[  617.287521][T15230] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  617.319898][T15230] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  617.344342][T15230] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  617.397032][T15230] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  617.415207][T15230] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  617.641439][T15235] mkiss: ax0: crc mode is auto.
[  618.791736][   T53] Bluetooth: hci2: command 0x0c1a tx timeout
[  619.358741][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[  619.364779][   T53] Bluetooth: hci3: command 0x2016 tx timeout
[  619.399040][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  619.413305][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  619.421850][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  619.429303][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout
[  619.435301][ T5152] Bluetooth: hci4: command 0x0c1a tx timeout
[  619.443919][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  619.451722][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  619.807045][   T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  619.816481][   T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  619.826621][   T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  619.839592][   T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  619.847275][   T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  620.500411][T15263] chnl_net:caif_netlink_parms(): no params data found
[  620.735619][T15284] deleting an unspecified loop device is not supported.
[  621.196956][T15263] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.242774][T15263] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.274463][T15263] bridge_slave_0: entered allmulticast mode
[  621.313954][T15263] bridge_slave_0: entered promiscuous mode
[  621.453698][T15263] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.480798][T15263] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.510221][   T53] Bluetooth: hci5: command tx timeout
[  621.541809][T15263] bridge_slave_1: entered allmulticast mode
[  621.578865][T15263] bridge_slave_1: entered promiscuous mode
[  621.754045][T15270] chnl_net:caif_netlink_parms(): no params data found
[  621.839913][T15263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  621.895749][   T53] Bluetooth: hci6: command tx timeout
[  621.976941][T15263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  622.245097][T15263] team0: Port device team_slave_0 added
[  622.289720][T15263] team0: Port device team_slave_1 added
[  622.395520][T15270] bridge0: port 1(bridge_slave_0) entered blocking state
[  622.403027][T15270] bridge0: port 1(bridge_slave_0) entered disabled state
[  622.433472][T15270] bridge_slave_0: entered allmulticast mode
[  622.461986][T15270] bridge_slave_0: entered promiscuous mode
[  622.560867][T15270] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.589212][T15270] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.609155][T15270] bridge_slave_1: entered allmulticast mode
[  622.641963][T15270] bridge_slave_1: entered promiscuous mode
[  622.673053][T15263] batman_adv: batadv0: Adding interface: batadv_slave_0
[  622.695099][T15263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  622.783726][T15263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  622.842712][T15263] batman_adv: batadv0: Adding interface: batadv_slave_1
[  622.887389][T15263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  623.009975][T15263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  623.180587][T15270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  623.229853][T15270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  623.291041][T15263] hsr_slave_0: entered promiscuous mode
[  623.320873][T15263] hsr_slave_1: entered promiscuous mode
[  623.351431][T15263] debugfs: 'hsr0' already exists in 'hsr'
[  623.384515][T15263] Cannot create hsr debugfs directory
[  623.566828][   T53] Bluetooth: hci5: command tx timeout
[  623.581761][T15270] team0: Port device team_slave_0 added
[  623.690322][T15270] team0: Port device team_slave_1 added
[  623.862030][T15270] batman_adv: batadv0: Adding interface: batadv_slave_0
[  623.895928][T15270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  623.967493][   T53] Bluetooth: hci6: command tx timeout
[  623.994573][T15270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  624.068732][T15270] batman_adv: batadv0: Adding interface: batadv_slave_1
[  624.097436][T15270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  624.193588][T15270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  624.443627][T15270] hsr_slave_0: entered promiscuous mode
[  624.461209][T15270] hsr_slave_1: entered promiscuous mode
[  624.472667][T15270] debugfs: 'hsr0' already exists in 'hsr'
[  624.490987][T15270] Cannot create hsr debugfs directory
[  625.028537][T15263] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  625.094344][T15263] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  625.163505][T15263] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  625.249328][T15263] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  625.636228][   T53] Bluetooth: hci5: command tx timeout
[  625.832493][T15270] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  625.849921][T15330] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  625.863047][T15330] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  625.875015][T15270] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  625.887681][T15330] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  625.915643][T15270] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  625.922921][T15330] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  625.937140][T15330] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  625.975104][T15330] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  625.983495][T15330] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  626.001923][T15330] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  626.034128][   T53] Bluetooth: hci6: command tx timeout
[  626.048401][T15330] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  626.064274][T15270] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  626.080854][T15330] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  626.114510][T15330] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  626.563248][T15263] 8021q: adding VLAN 0 to HW filter on device bond0
[  626.697002][T15263] 8021q: adding VLAN 0 to HW filter on device team0
[  626.770572][T11006] bridge0: port 1(bridge_slave_0) entered blocking state
[  626.777698][T11006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  626.859352][T15270] 8021q: adding VLAN 0 to HW filter on device bond0
[  626.891721][T11006] bridge0: port 2(bridge_slave_1) entered blocking state
[  626.898818][T11006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  626.970085][T15359] ima: policy update failed
[  626.974718][   T30] audit: type=1802 audit(4294967369.521:85): pid=15359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2036" res=0 errno=0
[  627.055617][T15270] 8021q: adding VLAN 0 to HW filter on device team0
[  627.125135][T10178] bridge0: port 1(bridge_slave_0) entered blocking state
[  627.132295][T10178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  627.232248][T10178] bridge0: port 2(bridge_slave_1) entered blocking state
[  627.239400][T10178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  627.466817][   T53] Bluetooth: hci2: command 0x0c1a tx timeout
[  627.865764][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout
[  627.944993][ T5848] Bluetooth: hci3: command 0x2016 tx timeout
[  627.951044][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout
[  627.957169][ T5152] Bluetooth: hci1: command 0x0c1a tx timeout
[  628.026290][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout
[  628.085889][T15263] 8021q: adding VLAN 0 to HW filter on device batadv0
[  628.097251][T15270] 8021q: adding VLAN 0 to HW filter on device batadv0
[  628.107908][ T5836] Bluetooth: hci6: command 0x0c1a tx timeout
[  628.785641][T15389] random: crng reseeded on system resumption
[  628.946799][T15263] veth0_vlan: entered promiscuous mode
[  628.966966][T15270] veth0_vlan: entered promiscuous mode
[  629.009939][T15263] veth1_vlan: entered promiscuous mode
[  629.019794][T15270] veth1_vlan: entered promiscuous mode
[  629.113962][T15270] veth0_macvtap: entered promiscuous mode
[  629.168232][T15270] veth1_macvtap: entered promiscuous mode
[  629.204653][T15263] veth0_macvtap: entered promiscuous mode
[  629.250750][T15263] veth1_macvtap: entered promiscuous mode
[  629.288877][T15270] batman_adv: batadv0: Interface activated: batadv_slave_0
[  629.324929][T15270] batman_adv: batadv0: Interface activated: batadv_slave_1
[  629.381031][T11004] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  629.416678][T11004] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  629.449923][T11004] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  629.488583][T11004] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  629.517829][T15263] batman_adv: batadv0: Interface activated: batadv_slave_0
[  629.558685][T15263] batman_adv: batadv0: Interface activated: batadv_slave_1
[  629.625865][T11004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  629.689480][T11004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  629.750963][T11004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  629.802945][T11004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  629.854345][   T53] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  629.860698][ T5836] Bluetooth: hci7: command 0x1003 tx timeout
[  629.934294][ T2131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  629.984140][ T2131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.004360][T15390] netlink: 74 bytes leftover after parsing attributes in process `syz.4.2040'.
[  630.096269][   T53] Bluetooth: hci5: command 0x0c1a tx timeout
[  630.156141][T10178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.178925][   T53] Bluetooth: hci6: command 0x0c1a tx timeout
[  630.210530][ T2131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.224852][T10178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.268193][ T2131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.378030][T11004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.430819][T11004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  631.646595][T15398] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  631.653930][T15398] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  631.690308][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  631.696778][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  631.882484][T15398] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  631.930313][T15398] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  632.006565][T15398] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  632.012705][T15398] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  632.077554][T15398] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  633.674342][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[  633.680441][   T53] Bluetooth: hci2: command 0x0c1a tx timeout
[  633.917133][   T53] Bluetooth: hci3: command 0x2016 tx timeout
[  633.995946][   T53] Bluetooth: hci1: command 0x0c1a tx timeout
[  634.073204][ T5152] Bluetooth: hci5: command 0x0c1a tx timeout
[  634.079277][   T53] Bluetooth: hci6: command 0x0c1a tx timeout
[  634.085303][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout
[  634.200125][T15459] block2mtd: parameter too long
[  636.231881][T15496] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  636.472183][T15504] ubi: mtd0 is already attached to ubi0
[  636.526857][T15504] ubi0: detaching mtd0
[  636.671232][T15504] ubi0: mtd0 is detached
[  637.101477][T15511] netlink: 'syz.6.2059': attribute type 11 has an invalid length.
[  637.151218][T15511] netlink: 'syz.6.2059': attribute type 11 has an invalid length.
[  637.245207][T15512] FAULT_INJECTION: forcing a failure.
[  637.245207][T15512] name fail_futex, interval 1, probability 0, space 0, times 0
[  637.305347][T15511] netlink: 'syz.6.2059': attribute type 11 has an invalid length.
[  637.381410][T15511] netlink: 'syz.6.2059': attribute type 11 has an invalid length.
[  637.421880][T15512] CPU: 0 UID: 0 PID: 15512 Comm: syz.6.2059 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  637.421917][T15512] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  637.421927][T15512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  637.421937][T15512] Call Trace:
[  637.421943][T15512]  <TASK>
[  637.421950][T15512]  dump_stack_lvl+0x16c/0x1f0
[  637.421973][T15512]  should_fail_ex+0x512/0x640
[  637.421999][T15512]  get_futex_key+0x1d0/0x15f0
[  637.422020][T15512]  ? __pfx_get_futex_key+0x10/0x10
[  637.422042][T15512]  futex_wake+0xea/0x530
[  637.422064][T15512]  ? __pfx_futex_wake+0x10/0x10
[  637.422087][T15512]  ? vfs_write+0x15d/0x11d0
[  637.422113][T15512]  do_futex+0x1e3/0x350
[  637.422130][T15512]  ? __pfx_do_futex+0x10/0x10
[  637.422152][T15512]  __x64_sys_futex+0x1e0/0x4c0
[  637.422170][T15512]  ? fput+0x70/0xf0
[  637.422183][T15512]  ? __pfx___x64_sys_futex+0x10/0x10
[  637.422199][T15512]  ? ksys_write+0x1ac/0x250
[  637.422220][T15512]  ? __pfx_ksys_write+0x10/0x10
[  637.422252][T15512]  do_syscall_64+0xcd/0xf80
[  637.422271][T15512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.422287][T15512] RIP: 0033:0x7fdd7718f7c9
[  637.422302][T15512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  637.422316][T15512] RSP: 002b:00007fdd780570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  637.422331][T15512] RAX: ffffffffffffffda RBX: 00007fdd773e6098 RCX: 00007fdd7718f7c9
[  637.422341][T15512] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdd773e609c
[  637.422351][T15512] RBP: 00007fdd773e6090 R08: 00007fdd78079000 R09: 0000000000000000
[  637.422361][T15512] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  637.422371][T15512] R13: 00007fdd773e6128 R14: 00007ffc0f914e30 R15: 00007ffc0f914f18
[  637.422391][T15512]  </TASK>
[  637.617713][T15511] netlink: 'syz.6.2059': attribute type 11 has an invalid length.
[  638.400621][T15516] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  638.429501][T15516] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  638.469275][T15516] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  638.491358][T15524] bond0: invalid ARP target specified
[  638.811538][T15530] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  639.948870][T15554] netlink: 'syz.3.2068': attribute type 19 has an invalid length.
[  640.013187][T15554] netlink: 226 bytes leftover after parsing attributes in process `syz.3.2068'.
[  643.173646][T15613] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2078'.
[  643.278012][T15613] ipvlan0: entered promiscuous mode
[  643.337672][T15613] ipvlan0: entered allmulticast mode
[  643.365358][T15613] veth0_vlan: entered allmulticast mode
[  644.715449][T15642] binder: 15641:15642 ioctl c0306201 0 returned -14
[  644.818146][T15631] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  644.849872][T15631] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  644.895536][T15631] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  644.917885][T15631] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  644.954766][T15631] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  644.997811][T15631] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  645.029885][T15631] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  645.314656][T15648] bridge0: port 3(batadv0) entered blocking state
[  645.346414][T15648] bridge0: port 3(batadv0) entered disabled state
[  645.353043][T15648] batadv0: entered allmulticast mode
[  645.410837][T15648] batadv0: entered promiscuous mode
[  645.443501][T15648] bridge0: port 3(batadv0) entered blocking state
[  645.450012][T15648] bridge0: port 3(batadv0) entered forwarding state
[  645.482974][T11013] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  645.492526][T11013] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  645.782346][ T5836] Bluetooth: hci5: unexpected event 0x02 length: 726 > 260
[  646.487819][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[  646.897325][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[  646.966107][ T5848] Bluetooth: hci3: command 0x2016 tx timeout
[  646.972133][   T53] Bluetooth: hci1: command 0x0c1a tx timeout
[  646.978238][ T5152] Bluetooth: hci4: command 0x0c1a tx timeout
[  647.045079][   T53] Bluetooth: hci5: command 0x0c1a tx timeout
[  647.051142][ T5848] Bluetooth: hci6: command 0x0c1a tx timeout
[  647.720151][T15669] binder: 15667:15669 ioctl 400c620e 0 returned -22
[  648.268283][T15673] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  648.324076][T15673] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  648.389532][T15673] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  648.436483][T15673] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  648.495519][T15673] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  648.553118][T15673] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  648.641504][T15673] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  649.385421][T15696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2094'.
[  649.830233][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout
[  650.185468][T15709] FAULT_INJECTION: forcing a failure.
[  650.185468][T15709] name failslab, interval 1, probability 393216, space 0, times 0
[  650.294571][T15709] CPU: 0 UID: 0 PID: 15709 Comm: syz.3.2099 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  650.294608][T15709] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  650.294616][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  650.294626][T15709] Call Trace:
[  650.294632][T15709]  <TASK>
[  650.294639][T15709]  dump_stack_lvl+0x16c/0x1f0
[  650.294663][T15709]  should_fail_ex+0x512/0x640
[  650.294687][T15709]  ? __kmalloc_noprof+0xca/0x910
[  650.294707][T15709]  should_failslab+0xc2/0x120
[  650.294738][T15709]  __kmalloc_noprof+0xeb/0x910
[  650.294753][T15709]  ? __pfx_map_id_range_down+0x10/0x10
[  650.294777][T15709]  ? security_inode_alloc+0x3b/0x2b0
[  650.294796][T15709]  ? sk_prot_alloc+0x1a8/0x2a0
[  650.294818][T15709]  ? sk_prot_alloc+0x1a8/0x2a0
[  650.294833][T15709]  sk_prot_alloc+0x1a8/0x2a0
[  650.294850][T15709]  sk_alloc+0x36/0xe30
[  650.294872][T15709]  packet_create+0x127/0x8e0
[  650.294895][T15709]  __sock_create+0x339/0x8a0
[  650.294916][T15709]  __sys_socket+0x14d/0x260
[  650.294934][T15709]  ? __pfx___sys_socket+0x10/0x10
[  650.294951][T15709]  ? xfd_validate_state+0x61/0x180
[  650.294966][T15709]  ? __task_pid_nr_ns+0x1f5/0x500
[  650.294985][T15709]  __x64_sys_socket+0x72/0xb0
[  650.295002][T15709]  ? lockdep_hardirqs_on+0x7c/0x110
[  650.295018][T15709]  do_syscall_64+0xcd/0xf80
[  650.295035][T15709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.295051][T15709] RIP: 0033:0x7f36e438f7c9
[  650.295065][T15709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  650.295079][T15709] RSP: 002b:00007f36e520e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  650.295094][T15709] RAX: ffffffffffffffda RBX: 00007f36e45e5fa0 RCX: 00007f36e438f7c9
[  650.295105][T15709] RDX: 0000000000000300 RSI: 0000000000080003 RDI: 0000000000000011
[  650.295114][T15709] RBP: 00007f36e4413f91 R08: 0000000000000000 R09: 0000000000000000
[  650.295124][T15709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  650.295133][T15709] R13: 00007f36e45e6038 R14: 00007f36e45e5fa0 R15: 00007ffdd26f6c58
[  650.295154][T15709]  </TASK>
[  650.875421][ T5848] Bluetooth: hci3: command 0x2016 tx timeout
[  650.881451][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout
[  650.887582][ T5848] Bluetooth: hci6: command 0x0c1a tx timeout
[  650.903752][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  650.910558][   T53] Bluetooth: hci0: command 0x0c1a tx timeout
[  650.916581][ T5152] Bluetooth: hci5: command 0x0c1a tx timeout
[  651.561923][T15715] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  651.623226][T15715] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  651.643099][T15715] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  651.663115][T15715] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  651.674934][T15715] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  653.730024][ T5840] Bluetooth: hci7: command tx timeout
[  654.227268][T15736] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  654.312218][T15736] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  654.400119][T15736] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  654.492251][T15736] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  654.634775][T15736] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  654.702243][T15716] chnl_net:caif_netlink_parms(): no params data found
[  654.748544][T15736] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  654.844999][T15736] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  654.955900][T15736] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  655.036684][T15736] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  655.296842][T15736] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  655.755929][T15716] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.805947][T15716] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.851663][T15716] bridge_slave_0: entered allmulticast mode
[  655.913518][T15716] bridge_slave_0: entered promiscuous mode
[  655.962593][T15716] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.978285][T15747] dyndbg: bad flag-op ð, at start of ðgŽ4^ûÖIu]ãÛ¦3!üÕKÕ,ùù¤asOcס¸7
[  656.022882][T15716] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.035508][T15747] dyndbg: flags parse failed
[  656.070599][T15716] bridge_slave_1: entered allmulticast mode
[  656.127546][T15716] bridge_slave_1: entered promiscuous mode
[  656.198436][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout
[  656.357264][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout
[  656.436447][T15715] Bluetooth: hci3: command 0x2016 tx timeout
[  656.442583][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout
[  656.480791][T15716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  656.653028][T15716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  656.675328][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout
[  656.754270][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout
[  656.923967][ T5840] Bluetooth: hci6: command 0x0c1a tx timeout
[  656.993272][ T5840] Bluetooth: hci7: command 0x040f tx timeout
[  657.014336][T15716] team0: Port device team_slave_0 added
[  657.101738][T15716] team0: Port device team_slave_1 added
[  657.623134][T15716] batman_adv: batadv0: Adding interface: batadv_slave_0
[  657.669435][T15716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  657.781243][T15716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  657.899009][T15716] batman_adv: batadv0: Adding interface: batadv_slave_1
[  657.939298][T15716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  657.978780][T15754] zswap: compressor û not available
[  658.053645][T15716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  658.259926][T15716] hsr_slave_0: entered promiscuous mode
[  658.283981][T15716] hsr_slave_1: entered promiscuous mode
[  658.307942][T15716] debugfs: 'hsr0' already exists in 'hsr'
[  658.326061][T15716] Cannot create hsr debugfs directory
[  659.065221][T15715] Bluetooth: hci7: command 0x040f tx timeout
[  659.764990][T15716] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  659.868190][T15716] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  659.949879][T15716] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  660.166666][T15716] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  661.131403][ T5840] Bluetooth: hci7: command 0x040f tx timeout
[  661.148822][T15716] 8021q: adding VLAN 0 to HW filter on device bond0
[  661.323084][T15716] 8021q: adding VLAN 0 to HW filter on device team0
[  661.420975][ T2131] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.428148][ T2131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  661.677300][T11002] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.684466][T11002] bridge0: port 2(bridge_slave_1) entered forwarding state
[  662.005352][T15822] netlink: set zone limit has 8 unknown bytes
[  662.614054][T15716] 8021q: adding VLAN 0 to HW filter on device batadv0
[  663.200809][ T5840] Bluetooth: hci7: command 0x040f tx timeout
[  663.210236][T15851] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43
[  664.399315][T15716] veth0_vlan: entered promiscuous mode
[  664.468522][T15716] veth1_vlan: entered promiscuous mode
[  664.613123][T15716] veth0_macvtap: entered promiscuous mode
[  664.687816][T15716] veth1_macvtap: entered promiscuous mode
[  664.778088][T15875] sysfs_service_op_store: Client not running :-5:
[  664.795106][T15716] batman_adv: batadv0: Interface activated: batadv_slave_0
[  664.882514][T15716] batman_adv: batadv0: Interface activated: batadv_slave_1
[  664.964917][T10178] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  665.028281][T10178] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  665.111436][T10178] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  665.143171][T15885] binder: 15884:15885 ioctl c018620c 0 returned -1
[  665.161926][T10178] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  665.186933][T15885] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2130'.
[  665.270168][ T5840] Bluetooth: hci7: command 0x040f tx timeout
[  665.662620][T11004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  665.723309][T11004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  665.873081][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  665.923955][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.764719][T15940] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  669.813702][T15940] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  669.868568][T15947] FAULT_INJECTION: forcing a failure.
[  669.868568][T15947] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  669.882118][T15940] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  669.919796][T15940] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  669.956810][T15940] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  669.966381][T15947] CPU: 0 UID: 0 PID: 15947 Comm: syz.3.2143 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  669.966416][T15947] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  669.966425][T15947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  669.966435][T15947] Call Trace:
[  669.966441][T15947]  <TASK>
[  669.966447][T15947]  dump_stack_lvl+0x16c/0x1f0
[  669.966471][T15947]  should_fail_ex+0x512/0x640
[  669.966497][T15947]  should_fail_alloc_page+0xe7/0x130
[  669.966523][T15947]  prepare_alloc_pages+0x401/0x670
[  669.966547][T15947]  ? kernel_text_address+0x8d/0x100
[  669.966568][T15947]  __alloc_frozen_pages_noprof+0x18b/0x2430
[  669.966595][T15947]  ? stack_trace_save+0x8e/0xc0
[  669.966619][T15947]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  669.966642][T15947]  ? trace_mm_page_alloc+0x11b/0x180
[  669.966674][T15947]  ? kmem_cache_alloc_noprof+0x25e/0x770
[  669.966694][T15947]  ? __pmd_alloc+0xbf/0x9c0
[  669.966723][T15947]  ? __handle_mm_fault+0xbeb/0x2bb0
[  669.966739][T15947]  ? handle_mm_fault+0x3fe/0xad0
[  669.966752][T15947]  ? __get_user_pages+0x54e/0x3590
[  669.966773][T15947]  ? populate_vma_page_range+0x267/0x3f0
[  669.966795][T15947]  ? __mm_populate+0x1d8/0x380
[  669.966815][T15947]  ? interleave_nodes+0x164/0x410
[  669.966840][T15947]  ? policy_nodemask+0xea/0x4e0
[  669.966863][T15947]  alloc_pages_mpol+0x1fb/0x550
[  669.966886][T15947]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  669.966914][T15947]  alloc_pages_noprof+0x131/0x390
[  669.966937][T15947]  pte_alloc_one+0x1e/0x3d0
[  669.966959][T15947]  __pte_alloc+0x6d/0x3f0
[  669.966979][T15947]  ? __pfx___pte_alloc+0x10/0x10
[  669.967000][T15947]  ? do_raw_spin_lock+0x12c/0x2b0
[  669.967018][T15947]  ? find_held_lock+0x2b/0x80
[  669.967038][T15947]  do_anonymous_page+0x1092/0x2190
[  669.967054][T15947]  ? __thp_vma_allowable_orders+0x1c8/0xcd0
[  669.967069][T15947]  ? do_huge_pmd_anonymous_page+0x85a/0x2200
[  669.967089][T15947]  ? __pmd_alloc+0x6aa/0x9c0
[  669.967112][T15947]  __handle_mm_fault+0x1ecf/0x2bb0
[  669.967133][T15947]  ? __pfx___handle_mm_fault+0x10/0x10
[  669.967165][T15947]  handle_mm_fault+0x3fe/0xad0
[  669.967183][T15947]  __get_user_pages+0x54e/0x3590
[  669.967213][T15947]  ? __pfx___get_user_pages+0x10/0x10
[  669.967241][T15947]  populate_vma_page_range+0x267/0x3f0
[  669.967265][T15947]  ? __pfx_populate_vma_page_range+0x10/0x10
[  669.967287][T15947]  ? __pfx_find_vma_intersection+0x10/0x10
[  669.967310][T15947]  ? do_mmap+0x69c/0x1210
[  669.967333][T15947]  __mm_populate+0x1d8/0x380
[  669.967356][T15947]  ? __pfx___mm_populate+0x10/0x10
[  669.967380][T15947]  ? up_write+0x282/0x4e0
[  669.967398][T15947]  vm_mmap_pgoff+0x37f/0x470
[  669.967421][T15947]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  669.967442][T15947]  ? do_set_mempolicy+0x220/0x480
[  669.967466][T15947]  ? __x64_sys_futex+0x1e0/0x4c0
[  669.967483][T15947]  ? __x64_sys_futex+0x1e9/0x4c0
[  669.967502][T15947]  ksys_mmap_pgoff+0x7d/0x5c0
[  669.967523][T15947]  ? xfd_validate_state+0x61/0x180
[  669.967536][T15947]  ? __pfx_kernel_set_mempolicy+0x10/0x10
[  669.967559][T15947]  __x64_sys_mmap+0x125/0x190
[  669.967577][T15947]  do_syscall_64+0xcd/0xf80
[  669.967595][T15947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.967612][T15947] RIP: 0033:0x7f36e438f7c9
[  669.967627][T15947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  669.967641][T15947] RSP: 002b:00007f36e520e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  669.967664][T15947] RAX: ffffffffffffffda RBX: 00007f36e45e5fa0 RCX: 00007f36e438f7c9
[  669.967675][T15947] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000
[  669.967685][T15947] RBP: 00007f36e4413f91 R08: 0000000000000007 R09: 0000000000028000
[  669.967695][T15947] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  669.967704][T15947] R13: 00007f36e45e6038 R14: 00007f36e45e5fa0 R15: 00007ffdd26f6c58
[  669.967725][T15947]  </TASK>
[  670.920906][T15940] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  670.926949][T15940] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  670.954172][T15940] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  671.249097][T15962] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  671.716906][T15715] Bluetooth: hci2: command 0x0c1a tx timeout
[  671.878169][T15715] Bluetooth: hci0: command 0x0c1a tx timeout
[  671.955410][ T5840] Bluetooth: hci3: command 0x2016 tx timeout
[  671.962508][ T5152] Bluetooth: hci1: command 0x0c1a tx timeout
[  671.968660][T15715] Bluetooth: hci4: command 0x0c1a tx timeout
[  672.911917][T15991] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2152'.
[  673.229721][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout
[  673.236598][ T5152] Bluetooth: hci7: command 0x040f tx timeout
[  673.242801][T15715] Bluetooth: hci6: command 0x0c1a tx timeout
[  674.350587][T16019] XFS: Clearing xfsstats
[  675.399218][T15715] Bluetooth: hci6: unknown advertising packet type: 0xea
[  677.088507][T16051] FAULT_INJECTION: forcing a failure.
[  677.088507][T16051] name failslab, interval 1, probability 393216, space 0, times 0
[  677.372535][T16060] zswap: compressor 000 not available
[  677.431254][T16051] CPU: 0 UID: 0 PID: 16051 Comm: syz.6.2167 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  677.431292][T16051] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  677.431301][T16051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  677.431310][T16051] Call Trace:
[  677.431316][T16051]  <TASK>
[  677.431325][T16051]  dump_stack_lvl+0x16c/0x1f0
[  677.431350][T16051]  should_fail_ex+0x512/0x640
[  677.431374][T16051]  ? __kmalloc_cache_noprof+0x5f/0x800
[  677.431393][T16051]  should_failslab+0xc2/0x120
[  677.431416][T16051]  __kmalloc_cache_noprof+0x80/0x800
[  677.431434][T16051]  ? trace_pid_list_alloc+0x232/0x480
[  677.431458][T16051]  ? trace_pid_list_alloc+0x232/0x480
[  677.431477][T16051]  trace_pid_list_alloc+0x232/0x480
[  677.431500][T16051]  trace_pid_write+0x10c/0x4b0
[  677.431519][T16051]  ? __pfx_trace_pid_write+0x10/0x10
[  677.431532][T16051]  ? __pfx_aa_file_perm+0x10/0x10
[  677.431549][T16051]  ? update_last_data+0xaa/0x510
[  677.431575][T16051]  event_pid_write.isra.0+0x1e4/0x7f0
[  677.431600][T16051]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  677.431628][T16051]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  677.431650][T16051]  vfs_write+0x2a0/0x11d0
[  677.431673][T16051]  ? __pfx___mutex_lock+0x10/0x10
[  677.431693][T16051]  ? __pfx_vfs_write+0x10/0x10
[  677.431719][T16051]  ? __fget_files+0x20e/0x3c0
[  677.431745][T16051]  ksys_write+0x12a/0x250
[  677.431766][T16051]  ? __pfx_ksys_write+0x10/0x10
[  677.431792][T16051]  do_syscall_64+0xcd/0xf80
[  677.431810][T16051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.431826][T16051] RIP: 0033:0x7fdd7718f7c9
[  677.431847][T16051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  677.431863][T16051] RSP: 002b:00007fdd78036038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  677.431879][T16051] RAX: ffffffffffffffda RBX: 00007fdd773e6180 RCX: 00007fdd7718f7c9
[  677.431890][T16051] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  677.431900][T16051] RBP: 00007fdd77213f91 R08: 0000000000000000 R09: 0000000000000000
[  677.431910][T16051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  677.431919][T16051] R13: 00007fdd773e6218 R14: 00007fdd773e6180 R15: 00007ffc0f914f18
[  677.431940][T16051]  </TASK>
[  680.285618][T16094] netlink: 25 bytes leftover after parsing attributes in process `syz.6.2178'.
[  681.440864][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2182'.
[  681.508762][T16119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2182'.
[  681.723346][T16122] FAULT_INJECTION: forcing a failure.
[  681.723346][T16122] name failslab, interval 1, probability 393216, space 0, times 0
[  682.113091][T16122] CPU: 0 UID: 0 PID: 16122 Comm: syz.6.2180 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  682.113130][T16122] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  682.113140][T16122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  682.113149][T16122] Call Trace:
[  682.113156][T16122]  <TASK>
[  682.113162][T16122]  dump_stack_lvl+0x16c/0x1f0
[  682.113185][T16122]  should_fail_ex+0x512/0x640
[  682.113207][T16122]  ? __kmalloc_cache_noprof+0x5f/0x800
[  682.113228][T16122]  should_failslab+0xc2/0x120
[  682.113251][T16122]  __kmalloc_cache_noprof+0x80/0x800
[  682.113269][T16122]  ? trace_pid_list_alloc+0x232/0x480
[  682.113294][T16122]  ? trace_pid_list_alloc+0x232/0x480
[  682.113313][T16122]  trace_pid_list_alloc+0x232/0x480
[  682.113336][T16122]  trace_pid_write+0x10c/0x4b0
[  682.113354][T16122]  ? __pfx_trace_pid_write+0x10/0x10
[  682.113368][T16122]  ? __pfx_aa_file_perm+0x10/0x10
[  682.113385][T16122]  ? update_last_data+0xaa/0x510
[  682.113410][T16122]  event_pid_write.isra.0+0x1e4/0x7f0
[  682.113435][T16122]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  682.113462][T16122]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  682.113484][T16122]  vfs_write+0x2a0/0x11d0
[  682.113507][T16122]  ? __pfx___mutex_lock+0x10/0x10
[  682.113526][T16122]  ? __pfx_vfs_write+0x10/0x10
[  682.113552][T16122]  ? __fget_files+0x20e/0x3c0
[  682.113587][T16122]  ksys_write+0x12a/0x250
[  682.113608][T16122]  ? __pfx_ksys_write+0x10/0x10
[  682.113636][T16122]  do_syscall_64+0xcd/0xf80
[  682.113653][T16122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.113669][T16122] RIP: 0033:0x7fdd7718f7c9
[  682.113683][T16122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  682.113699][T16122] RSP: 002b:00007fdd78015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  682.113714][T16122] RAX: ffffffffffffffda RBX: 00007fdd773e6270 RCX: 00007fdd7718f7c9
[  682.113725][T16122] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  682.113734][T16122] RBP: 00007fdd77213f91 R08: 0000000000000000 R09: 0000000000000000
[  682.113744][T16122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  682.113754][T16122] R13: 00007fdd773e6308 R14: 00007fdd773e6270 R15: 00007ffc0f914f18
[  682.113775][T16122]  </TASK>
[  683.209425][T16137] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2185'.
[  686.491049][T16195] zero sized request
[  686.635245][T16189] FAULT_INJECTION: forcing a failure.
[  686.635245][T16189] name failslab, interval 1, probability 393216, space 0, times 0
[  686.713198][T16189] CPU: 0 UID: 0 PID: 16189 Comm: syz.3.2195 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  686.713236][T16189] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  686.713246][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  686.713256][T16189] Call Trace:
[  686.713262][T16189]  <TASK>
[  686.713269][T16189]  dump_stack_lvl+0x16c/0x1f0
[  686.713293][T16189]  should_fail_ex+0x512/0x640
[  686.713315][T16189]  ? __kmalloc_cache_noprof+0x5f/0x800
[  686.713336][T16189]  should_failslab+0xc2/0x120
[  686.713359][T16189]  __kmalloc_cache_noprof+0x80/0x800
[  686.713377][T16189]  ? allocate_file_region_entries+0x1a0/0x620
[  686.713400][T16189]  ? allocate_file_region_entries+0x1a0/0x620
[  686.713419][T16189]  allocate_file_region_entries+0x1a0/0x620
[  686.713442][T16189]  ? __pfx_allocate_file_region_entries+0x10/0x10
[  686.713467][T16189]  region_chg+0x85/0x140
[  686.713487][T16189]  __vma_reservation_common+0x43b/0x740
[  686.713508][T16189]  ? __pfx___vma_reservation_common+0x10/0x10
[  686.713527][T16189]  ? want_pmd_share+0x141/0x180
[  686.713550][T16189]  ? huge_pte_alloc+0x38e/0x5b0
[  686.713567][T16189]  hugetlb_fault+0x6f1/0x1730
[  686.713585][T16189]  ? __pfx_hugetlb_fault+0x10/0x10
[  686.713599][T16189]  ? __lock_acquire+0x436/0x2890
[  686.713621][T16189]  ? __pfx___up_read+0x10/0x10
[  686.713638][T16189]  ? hugetlb_vma_unlock_read+0xff/0x130
[  686.713659][T16189]  handle_mm_fault+0x95d/0xad0
[  686.713679][T16189]  __get_user_pages+0x54e/0x3590
[  686.713709][T16189]  ? __pfx___get_user_pages+0x10/0x10
[  686.713737][T16189]  populate_vma_page_range+0x267/0x3f0
[  686.713762][T16189]  ? __pfx_populate_vma_page_range+0x10/0x10
[  686.713784][T16189]  ? __pfx_find_vma_intersection+0x10/0x10
[  686.713806][T16189]  ? __pfx_apply_mlockall_flags+0x10/0x10
[  686.713826][T16189]  __mm_populate+0x1d8/0x380
[  686.713849][T16189]  ? __pfx___mm_populate+0x10/0x10
[  686.713882][T16189]  ? up_write+0x282/0x4e0
[  686.713902][T16189]  __do_sys_mlockall+0x516/0x5d0
[  686.713921][T16189]  do_syscall_64+0xcd/0xf80
[  686.713940][T16189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.713957][T16189] RIP: 0033:0x7f36e438f7c9
[  686.713972][T16189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  686.713987][T16189] RSP: 002b:00007f36e520e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[  686.714003][T16189] RAX: ffffffffffffffda RBX: 00007f36e45e5fa0 RCX: 00007f36e438f7c9
[  686.714014][T16189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0800000000000005
[  686.714024][T16189] RBP: 00007f36e4413f91 R08: 0000000000000000 R09: 0000000000000000
[  686.714034][T16189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  686.714044][T16189] R13: 00007f36e45e6038 R14: 00007f36e45e5fa0 R15: 00007ffdd26f6c58
[  686.714065][T16189]  </TASK>
[  691.076565][T16255] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  692.321542][T16273] ecryptfs_parse_packet_length: Error parsing packet length
[  692.371400][T16273] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22]
[  692.820025][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  692.826339][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  694.192600][T16307] program syz.7.2220 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  696.963846][T16364] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  697.017035][T16364] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  697.023050][T16364] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  697.095808][T16364] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  697.133924][T16364] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  697.164214][T16364] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  697.224136][T16364] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  697.270078][T16364] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  698.662856][T16389] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  698.717389][T16389] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  698.762204][T16389] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  698.809849][T16389] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  698.865383][T16389] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  698.924963][T16389] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  698.972616][T16389] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  699.026526][T16389] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  699.231480][T16401] futex_wake_op: syz.3.2239 tries to shift op by -2048; fix this program
[  699.294021][T16401] futex_wake_op: syz.3.2239 tries to shift op by -2048; fix this program
[  699.442584][T16401] ubi1: attaching mtd0
[  699.495326][T16401] ubi1: scanning is finished
[  699.672035][   T30] audit: type=1804 audit(4294967442.599:86): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2241" name="/newroot/54/file0" dev="tmpfs" ino=297 res=1 errno=0
[  699.918222][T16401] ubi1: attached mtd0 (name "mtdram test device", size 0 MiB)
[  700.049212][T16401] ubi1: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  700.065965][T16417] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44
[  700.171013][T16401] ubi1: min./max. I/O unit sizes: 1/64, sub-page size 1
[  700.208363][T15715] Bluetooth: hci2: command 0x0c1a tx timeout
[  700.257920][T16401] ubi1: VID header offset: 64 (aligned 64), data offset: 128
[  700.330815][T16401] ubi1: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  700.403412][T16401] ubi1: user volume: 0, internal volumes: 1, max. volumes count: 23
[  700.476147][T16401] ubi1: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3931192569
[  700.531200][T16401] ubi1: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  700.580785][T16416] ubi1: background thread "ubi_bgt1d" started, PID 16416
[  700.636824][T16425] random: crng reseeded on system resumption
[  700.765468][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout
[  700.771528][T15715] Bluetooth: hci3: command 0x2016 tx timeout
[  700.845044][T15715] Bluetooth: hci1: command 0x0c1a tx timeout
[  700.895221][T16431] FAULT_INJECTION: forcing a failure.
[  700.895221][T16431] name failslab, interval 1, probability 393216, space 0, times 0
[  700.935440][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout
[  700.941474][T15715] Bluetooth: hci6: command 0x0c1a tx timeout
[  700.951131][ T5152] Bluetooth: hci5: command 0x0c1a tx timeout
[  701.052470][T16431] CPU: 0 UID: 0 PID: 16431 Comm: syz.3.2246 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  701.052506][T16431] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  701.052514][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  701.052524][T16431] Call Trace:
[  701.052531][T16431]  <TASK>
[  701.052538][T16431]  dump_stack_lvl+0x16c/0x1f0
[  701.052561][T16431]  should_fail_ex+0x512/0x640
[  701.052583][T16431]  ? kmem_cache_alloc_noprof+0x62/0x770
[  701.052604][T16431]  should_failslab+0xc2/0x120
[  701.052627][T16431]  kmem_cache_alloc_noprof+0x83/0x770
[  701.052644][T16431]  ? seq_open+0x55/0x170
[  701.052664][T16431]  ? __pfx_proc_dma_show+0x10/0x10
[  701.052685][T16431]  ? seq_open+0x55/0x170
[  701.052700][T16431]  seq_open+0x55/0x170
[  701.052715][T16431]  ? __pfx_proc_dma_show+0x10/0x10
[  701.052736][T16431]  single_open+0xfc/0x1f0
[  701.052751][T16431]  ? __pfx_proc_single_open+0x10/0x10
[  701.052772][T16431]  proc_reg_open+0x2ab/0x5f0
[  701.052792][T16431]  do_dentry_open+0x748/0x1590
[  701.052813][T16431]  ? __pfx_proc_reg_open+0x10/0x10
[  701.052836][T16431]  vfs_open+0x82/0x3f0
[  701.052854][T16431]  path_openat+0x2078/0x3140
[  701.052882][T16431]  ? __pfx_path_openat+0x10/0x10
[  701.052911][T16431]  do_filp_open+0x20b/0x470
[  701.052933][T16431]  ? __pfx_do_filp_open+0x10/0x10
[  701.052968][T16431]  ? alloc_fd+0x471/0x7d0
[  701.052994][T16431]  do_sys_openat2+0x11f/0x280
[  701.053010][T16431]  ? __pfx_do_sys_openat2+0x10/0x10
[  701.053039][T16431]  __x64_sys_openat+0x174/0x210
[  701.053056][T16431]  ? __pfx___x64_sys_openat+0x10/0x10
[  701.053080][T16431]  do_syscall_64+0xcd/0xf80
[  701.053098][T16431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.053115][T16431] RIP: 0033:0x7f36e438f7c9
[  701.053128][T16431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  701.053142][T16431] RSP: 002b:00007f36e520e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  701.053157][T16431] RAX: ffffffffffffffda RBX: 00007f36e45e5fa0 RCX: 00007f36e438f7c9
[  701.053167][T16431] RDX: 0000000000008340 RSI: 00002000000002c0 RDI: ffffffffffffff9c
[  701.053176][T16431] RBP: 00007f36e4413f91 R08: 0000000000000000 R09: 0000000000000000
[  701.053186][T16431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  701.053195][T16431] R13: 00007f36e45e6038 R14: 00007f36e45e5fa0 R15: 00007ffdd26f6c58
[  701.053214][T16431]  </TASK>
[  701.561159][ T5152] Bluetooth: hci7: command 0x040f tx timeout
[  701.855504][T16445] FAULT_INJECTION: forcing a failure.
[  701.855504][T16445] name failslab, interval 1, probability 393216, space 0, times 0
[  701.992590][T16445] CPU: 0 UID: 0 PID: 16445 Comm: syz.5.2247 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  701.992626][T16445] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  701.992635][T16445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  701.992646][T16445] Call Trace:
[  701.992652][T16445]  <TASK>
[  701.992659][T16445]  dump_stack_lvl+0x16c/0x1f0
[  701.992682][T16445]  should_fail_ex+0x512/0x640
[  701.992705][T16445]  ? __kmalloc_cache_noprof+0x5f/0x800
[  701.992725][T16445]  should_failslab+0xc2/0x120
[  701.992748][T16445]  __kmalloc_cache_noprof+0x80/0x800
[  701.992766][T16445]  ? trace_pid_list_alloc+0x232/0x480
[  701.992790][T16445]  ? trace_pid_list_alloc+0x232/0x480
[  701.992809][T16445]  trace_pid_list_alloc+0x232/0x480
[  701.992832][T16445]  trace_pid_write+0x10c/0x4b0
[  701.992850][T16445]  ? __pfx_trace_pid_write+0x10/0x10
[  701.992863][T16445]  ? __pfx_aa_file_perm+0x10/0x10
[  701.992880][T16445]  ? update_last_data+0xaa/0x510
[  701.992905][T16445]  event_pid_write.isra.0+0x1e4/0x7f0
[  701.992929][T16445]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  701.992956][T16445]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  701.992977][T16445]  vfs_write+0x2a0/0x11d0
[  701.993000][T16445]  ? __pfx___mutex_lock+0x10/0x10
[  701.993019][T16445]  ? __pfx_vfs_write+0x10/0x10
[  701.993045][T16445]  ? __fget_files+0x20e/0x3c0
[  701.993072][T16445]  ksys_write+0x12a/0x250
[  701.993093][T16445]  ? __pfx_ksys_write+0x10/0x10
[  701.993119][T16445]  do_syscall_64+0xcd/0xf80
[  701.993136][T16445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.993152][T16445] RIP: 0033:0x7f099b98f7c9
[  701.993165][T16445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  701.993179][T16445] RSP: 002b:00007f099c7d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  701.993194][T16445] RAX: ffffffffffffffda RBX: 00007f099bbe6180 RCX: 00007f099b98f7c9
[  701.993204][T16445] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  701.993214][T16445] RBP: 00007f099ba13f91 R08: 0000000000000000 R09: 0000000000000000
[  701.993223][T16445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  701.993232][T16445] R13: 00007f099bbe6218 R14: 00007f099bbe6180 R15: 00007fff662bf398
[  701.993253][T16445]  </TASK>
[  703.051058][T16428] Process accounting resumed
[  704.180342][T16491] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2253'.
[  704.669066][T16502] random: crng reseeded on system resumption
[  704.779304][T16499] hub 1-0:1.0: USB hub found
[  704.815985][T16499] hub 1-0:1.0: 1 port detected
[  704.849995][T16501] Restarting kernel threads ...
[  704.882667][T16501] Done restarting kernel threads.
[  705.310990][T16515] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  705.340610][T16515] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  705.368229][T16515] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  705.401374][T16515] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  705.443178][T16515] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  705.487168][T16515] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  705.519882][T16515] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  705.569350][T16515] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  705.615371][T16530] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(512.0.1), cmd(16)
[  705.688623][T16532] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(512.0.1), cmd(2)
[  706.347279][T16547] FAULT_INJECTION: forcing a failure.
[  706.347279][T16547] name failslab, interval 1, probability 393216, space 0, times 0
[  706.450424][T16547] CPU: 0 UID: 0 PID: 16547 Comm: syz.7.2265 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  706.450462][T16547] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  706.450471][T16547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  706.450481][T16547] Call Trace:
[  706.450487][T16547]  <TASK>
[  706.450495][T16547]  dump_stack_lvl+0x16c/0x1f0
[  706.450517][T16547]  should_fail_ex+0x512/0x640
[  706.450540][T16547]  ? __kmalloc_node_track_caller_noprof+0xcb/0x930
[  706.450566][T16547]  should_failslab+0xc2/0x120
[  706.450589][T16547]  __kmalloc_node_track_caller_noprof+0xec/0x930
[  706.450611][T16547]  ? kasprintf+0xc7/0x100
[  706.450636][T16547]  ? kvasprintf+0xbc/0x150
[  706.450654][T16547]  kvasprintf+0xbc/0x150
[  706.450674][T16547]  ? __pfx_kvasprintf+0x10/0x10
[  706.450695][T16547]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  706.450720][T16547]  ? lockdep_hardirqs_on+0x7c/0x110
[  706.450736][T16547]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  706.450763][T16547]  kasprintf+0xc7/0x100
[  706.450783][T16547]  ? __pfx_kasprintf+0x10/0x10
[  706.450812][T16547]  ieee80211_alloc_led_names+0x1b0/0x420
[  706.450834][T16547]  ieee80211_alloc_hw_nm+0x197c/0x22b0
[  706.450857][T16547]  mac80211_hwsim_new_radio+0x1d3/0x5150
[  706.450897][T16547]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  706.450924][T16547]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  706.450951][T16547]  hwsim_new_radio_nl+0xba2/0x1330
[  706.450974][T16547]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  706.451001][T16547]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  706.451023][T16547]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  706.451046][T16547]  genl_family_rcv_msg_doit+0x209/0x2f0
[  706.451066][T16547]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  706.451084][T16547]  ? genl_get_cmd+0x194/0x580
[  706.451104][T16547]  ? bpf_lsm_capable+0x9/0x10
[  706.451124][T16547]  ? security_capable+0x7e/0x260
[  706.451142][T16547]  ? ns_capable+0xd7/0x110
[  706.451164][T16547]  genl_rcv_msg+0x55c/0x800
[  706.451184][T16547]  ? __pfx_genl_rcv_msg+0x10/0x10
[  706.451202][T16547]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  706.451229][T16547]  netlink_rcv_skb+0x158/0x420
[  706.451244][T16547]  ? __pfx_genl_rcv_msg+0x10/0x10
[  706.451262][T16547]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  706.451285][T16547]  ? netlink_deliver_tap+0x1ae/0xd30
[  706.451312][T16547]  genl_rcv+0x28/0x40
[  706.451327][T16547]  netlink_unicast+0x5aa/0x870
[  706.451345][T16547]  ? __pfx_netlink_unicast+0x10/0x10
[  706.451368][T16547]  netlink_sendmsg+0x8c8/0xdd0
[  706.451386][T16547]  ? __pfx_netlink_sendmsg+0x10/0x10
[  706.451404][T16547]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  706.451427][T16547]  ____sys_sendmsg+0xa5d/0xc30
[  706.451446][T16547]  ? copy_msghdr_from_user+0x10a/0x160
[  706.451472][T16547]  ? __pfx_____sys_sendmsg+0x10/0x10
[  706.451487][T16547]  ? preempt_schedule_thunk+0x16/0x30
[  706.451508][T16547]  ? try_to_wake_up+0xa67/0x1860
[  706.451533][T16547]  ___sys_sendmsg+0x134/0x1d0
[  706.451557][T16547]  ? __pfx____sys_sendmsg+0x10/0x10
[  706.451580][T16547]  ? futex_private_hash_put+0x160/0x1b0
[  706.451618][T16547]  __sys_sendmsg+0x16d/0x220
[  706.451641][T16547]  ? __pfx___sys_sendmsg+0x10/0x10
[  706.451663][T16547]  ? __x64_sys_futex+0x1e0/0x4c0
[  706.451692][T16547]  do_syscall_64+0xcd/0xf80
[  706.451709][T16547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.451725][T16547] RIP: 0033:0x7f43d038f7c9
[  706.451739][T16547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  706.451755][T16547] RSP: 002b:00007f43d1188038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  706.451770][T16547] RAX: ffffffffffffffda RBX: 00007f43d05e5fa0 RCX: 00007f43d038f7c9
[  706.451782][T16547] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008
[  706.451791][T16547] RBP: 00007f43d0413f91 R08: 0000000000000000 R09: 0000000000000000
[  706.451801][T16547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  706.451810][T16547] R13: 00007f43d05e6038 R14: 00007f43d05e5fa0 R15: 00007ffc78521178
[  706.451831][T16547]  </TASK>
[  706.972961][ T5152] Bluetooth: hci2: command 0x0c1a tx timeout
[  707.370959][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout
[  707.461944][T15715] Bluetooth: hci3: command 0x2016 tx timeout
[  707.469399][T15715] Bluetooth: hci4: command 0x0c1a tx timeout
[  707.476212][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout
[  707.637624][T15715] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  707.648044][T15715] Bluetooth: hci6: command 0x0c1a tx timeout
[  707.654376][T15715] Bluetooth: hci5: command 0x0c1a tx timeout
[  707.661147][T15715] Bluetooth: hci7: command 0x040f tx timeout
[  707.670230][T15715] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  707.678354][T15715] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  707.686150][T15715] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  707.694989][T15715] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  709.021001][T10998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.197596][T10178] netdevsim netdevsim511 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  709.323640][T10998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.424949][T16554] chnl_net:caif_netlink_parms(): no params data found
[  709.518145][T10998] bridge0: port 3(netdevsim1) entered disabled state
[  709.609098][T10998] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode
[  709.643644][T16586] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  709.659889][T16586] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  709.670631][T10998] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode
[  709.690747][T16586] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  709.704529][T10998] bridge0: port 3(netdevsim1) entered disabled state
[  709.732941][T16586] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  709.742536][T16586] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  709.755832][T10998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.766633][ T5152] Bluetooth: hci8: command tx timeout
[  709.780931][T16586] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  709.803416][T16586] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  709.826612][T16586] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  709.858375][T16586] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  709.899046][T16586] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  709.971671][T10998] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.544078][T16554] bridge0: port 1(bridge_slave_0) entered blocking state
[  710.598999][T16554] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.657801][T16554] bridge_slave_0: entered allmulticast mode
[  710.707327][T16554] bridge_slave_0: entered promiscuous mode
[  710.838388][T16554] bridge0: port 2(bridge_slave_1) entered blocking state
[  710.904574][T16554] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.952879][T16554] bridge_slave_1: entered allmulticast mode
[  711.022678][T16554] bridge_slave_1: entered promiscuous mode
[  711.128344][T10998] bridge_slave_1: left allmulticast mode
[  711.156780][T10998] bridge_slave_1: left promiscuous mode
[  711.197961][T10998] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.264499][T16627] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [1]
[  711.302205][T10998] bridge_slave_0: left allmulticast mode
[  711.307864][T10998] bridge_slave_0: left promiscuous mode
[  711.350300][ T5152] Bluetooth: hci2: command 0x0c1a tx timeout
[  711.410111][T10998] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.669490][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout
[  711.749046][T15715] Bluetooth: hci1: command 0x0c1a tx timeout
[  711.755079][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout
[  711.761302][ T5152] Bluetooth: hci5: command 0x0c1a tx timeout
[  711.851570][T15715] Bluetooth: hci6: command 0x0c1a tx timeout
[  711.858318][ T5152] Bluetooth: hci8: command 0x040f tx timeout
[  711.864691][ T5840] Bluetooth: hci7: command 0x040f tx timeout
[  712.316074][T10998] erspan0 (unregistering): left allmulticast mode
[  712.640370][T10998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  712.666665][T10998] bond0 (unregistering): Released all slaves
[  712.773361][T16554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  712.792928][T10998] HfR: left promiscuous mode
[  712.852076][T16554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  712.885040][T10998] ovs_: left promiscuous mode
[  713.100122][T16554] team0: Port device team_slave_0 added
[  713.150723][T16554] team0: Port device team_slave_1 added
[  713.309368][T16647] input: f¬
 as /devices/virtual/input/input45
[  713.354477][T16554] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.401135][T16554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  713.533656][T16554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  713.615149][T16554] batman_adv: batadv0: Adding interface: batadv_slave_1
[  713.640451][T16554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  713.767652][T16554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  713.897312][ T5840] Bluetooth: hci8: command 0x040f tx timeout
[  714.259950][T16554] hsr_slave_0: entered promiscuous mode
[  714.291991][T16554] hsr_slave_1: entered promiscuous mode
[  714.321690][T16554] debugfs: 'hsr0' already exists in 'hsr'
[  714.358381][T16554] Cannot create hsr debugfs directory
[  714.416710][T10998] hsr_slave_0: left promiscuous mode
[  714.450162][T10998] hsr_slave_1: left promiscuous mode
[  714.569193][T10998] veth1_vlan: left promiscuous mode
[  714.619607][T10998] veth0_vlan: left promiscuous mode
[  715.676478][T10998] team0 (unregistering): Port device team_slave_1 removed
[  715.778764][T10998] team0 (unregistering): Port device team_slave_0 removed
[  715.966324][ T5840] Bluetooth: hci8: command 0x040f tx timeout
[  717.290224][T16681] futex_wake_op: syz.5.2287 tries to shift op by -2048; fix this program
[  718.035753][ T5840] Bluetooth: hci8: command 0x040f tx timeout
[  718.572076][T16554] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  718.674979][T16554] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  718.705715][T16554] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  718.736759][T16554] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  719.083006][T16554] 8021q: adding VLAN 0 to HW filter on device bond0
[  719.180535][T16554] 8021q: adding VLAN 0 to HW filter on device team0
[  719.248602][T11008] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.255759][T11008] bridge0: port 1(bridge_slave_0) entered forwarding state
[  719.350161][T11008] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.357295][T11008] bridge0: port 2(bridge_slave_1) entered forwarding state
[  719.494302][T16739] ima: policy update failed
[  719.543635][   T30] audit: type=1802 audit(4294967462.572:87): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2293" res=0 errno=0
[  720.107437][ T5840] Bluetooth: hci8: command 0x040f tx timeout
[  720.408131][T16554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.638917][T16554] veth0_vlan: entered promiscuous mode
[  720.725731][T16554] veth1_vlan: entered promiscuous mode
[  720.743211][T16761] FAULT_INJECTION: forcing a failure.
[  720.743211][T16761] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  720.832306][T16761] CPU: 0 UID: 0 PID: 16761 Comm: syz.5.2295 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  720.832352][T16761] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  720.832360][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  720.832370][T16761] Call Trace:
[  720.832375][T16761]  <TASK>
[  720.832382][T16761]  dump_stack_lvl+0x16c/0x1f0
[  720.832404][T16761]  should_fail_ex+0x512/0x640
[  720.832429][T16761]  _copy_from_user+0x2e/0xd0
[  720.832451][T16761]  get_bitmap+0x6d/0x110
[  720.832473][T16761]  get_nodes+0x1df/0x210
[  720.832492][T16761]  ? __pfx_get_nodes+0x10/0x10
[  720.832513][T16761]  ? __x64_sys_futex+0x1e0/0x4c0
[  720.832533][T16761]  kernel_set_mempolicy+0x129/0x1e0
[  720.832556][T16761]  ? __pfx_kernel_set_mempolicy+0x10/0x10
[  720.832583][T16761]  do_syscall_64+0xcd/0xf80
[  720.832600][T16761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  720.832616][T16761] RIP: 0033:0x7f099b98f7c9
[  720.832628][T16761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  720.832643][T16761] RSP: 002b:00007f099c812038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee
[  720.832658][T16761] RAX: ffffffffffffffda RBX: 00007f099bbe5fa0 RCX: 00007f099b98f7c9
[  720.832669][T16761] RDX: 000000000000000b RSI: 0000200000000100 RDI: 0000000000000006
[  720.832678][T16761] RBP: 00007f099ba13f91 R08: 0000000000000000 R09: 0000000000000000
[  720.832687][T16761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  720.832696][T16761] R13: 00007f099bbe6038 R14: 00007f099bbe5fa0 R15: 00007fff662bf398
[  720.832715][T16761]  </TASK>
[  721.045399][T16554] veth0_macvtap: entered promiscuous mode
[  721.055430][T16554] veth1_macvtap: entered promiscuous mode
[  721.071166][T16554] batman_adv: batadv0: Interface activated: batadv_slave_0
[  721.081706][T16554] batman_adv: batadv0: Interface activated: batadv_slave_1
[  721.199616][T11007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  721.221095][ T6177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  721.246150][T11013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  721.259521][T11007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  721.285277][ T6177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  721.337459][T11013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  721.385859][T11013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  721.421472][T11013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  721.820975][T16781] program syz.6.2297 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  724.768080][T16837] random: crng reseeded on system resumption
[  724.979601][ T5840] Bluetooth: hci6: unexpected event 0x1c length: 725 > 5
[  725.617508][T16852] zswap: compressor  not available
[  727.707678][T16899] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2314'.
[  728.218256][T16904] FAULT_INJECTION: forcing a failure.
[  728.218256][T16904] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  728.492016][T16904] CPU: 0 UID: 0 PID: 16904 Comm: syz.6.2316 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  728.492054][T16904] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  728.492063][T16904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  728.492072][T16904] Call Trace:
[  728.492079][T16904]  <TASK>
[  728.492086][T16904]  dump_stack_lvl+0x16c/0x1f0
[  728.492109][T16904]  should_fail_ex+0x512/0x640
[  728.492136][T16904]  should_fail_alloc_page+0xe7/0x130
[  728.492162][T16904]  prepare_alloc_pages+0x401/0x670
[  728.492187][T16904]  ? rcu_is_watching+0x12/0xc0
[  728.492211][T16904]  __alloc_frozen_pages_noprof+0x18b/0x2430
[  728.492231][T16904]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  728.492256][T16904]  ? is_bpf_text_address+0x94/0x1a0
[  728.492276][T16904]  ? kernel_text_address+0x8d/0x100
[  728.492294][T16904]  ? __kernel_text_address+0xd/0x40
[  728.492310][T16904]  ? unwind_get_return_address+0x59/0xa0
[  728.492330][T16904]  ? arch_stack_walk+0xa6/0x100
[  728.492350][T16904]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  728.492375][T16904]  ? stack_depot_save_flags+0x29/0x9b0
[  728.492396][T16904]  ? __pfx_stack_trace_save+0x10/0x10
[  728.492421][T16904]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  728.492445][T16904]  ? policy_nodemask+0xea/0x4e0
[  728.492469][T16904]  alloc_pages_mpol+0x1fb/0x550
[  728.492491][T16904]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  728.492519][T16904]  alloc_pages_noprof+0x131/0x390
[  728.492549][T16904]  kimage_alloc_pages+0x74/0x350
[  728.492575][T16904]  kimage_alloc_control_pages+0x153/0xa00
[  728.492603][T16904]  ? __pfx_kimage_alloc_control_pages+0x10/0x10
[  728.492632][T16904]  do_kexec_load+0x439/0x860
[  728.492648][T16904]  ? __pfx_do_kexec_load+0x10/0x10
[  728.492663][T16904]  ? _copy_from_user+0x59/0xd0
[  728.492686][T16904]  __x64_sys_kexec_load+0x1bf/0x230
[  728.492702][T16904]  do_syscall_64+0xcd/0xf80
[  728.492720][T16904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.492735][T16904] RIP: 0033:0x7fdd7718f7c9
[  728.492749][T16904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  728.492764][T16904] RSP: 002b:00007fdd78078038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  728.492825][T16904] RAX: ffffffffffffffda RBX: 00007fdd773e5fa0 RCX: 00007fdd7718f7c9
[  728.492836][T16904] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007
[  728.492846][T16904] RBP: 00007fdd77213f91 R08: 0000000000000000 R09: 0000000000000000
[  728.492855][T16904] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[  728.492864][T16904] R13: 00007fdd773e6038 R14: 00007fdd773e5fa0 R15: 00007ffc0f914f18
[  728.492886][T16904]  </TASK>
[  728.492915][T16904] kexec: Could not allocate control_code_buffer
[  729.111161][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  729.126321][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  729.135715][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  729.145717][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  729.153963][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  729.279567][T16924] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46
[  729.993942][T16926] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47
[  730.520228][T16918] chnl_net:caif_netlink_parms(): no params data found
[  731.246806][ T5840] Bluetooth: hci3: command tx timeout
[  732.522553][T16918] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.529727][T16918] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.560308][T16918] bridge_slave_0: entered allmulticast mode
[  732.590170][T16918] bridge_slave_0: entered promiscuous mode
[  732.688074][T16918] bridge0: port 2(bridge_slave_1) entered blocking state
[  732.721980][T16918] bridge0: port 2(bridge_slave_1) entered disabled state
[  732.749443][T16918] bridge_slave_1: entered allmulticast mode
[  732.764712][T16918] bridge_slave_1: entered promiscuous mode
[  733.026105][T16918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  733.112211][T16918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  733.222015][T16918] team0: Port device team_slave_0 added
[  733.263128][T16918] team0: Port device team_slave_1 added
[  733.316186][ T5840] Bluetooth: hci3: command tx timeout
[  733.385029][T16918] batman_adv: batadv0: Adding interface: batadv_slave_0
[  733.424096][T16918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  733.553934][T16918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  733.667630][T16918] batman_adv: batadv0: Adding interface: batadv_slave_1
[  733.702698][T16918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  733.802219][T16971] FAULT_INJECTION: forcing a failure.
[  733.802219][T16971] name failslab, interval 1, probability 393216, space 0, times 0
[  733.843216][T16918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  733.884084][T16971] CPU: 0 UID: 0 PID: 16971 Comm: syz.3.2331 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  733.884122][T16971] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  733.884131][T16971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  733.884141][T16971] Call Trace:
[  733.884147][T16971]  <TASK>
[  733.884154][T16971]  dump_stack_lvl+0x16c/0x1f0
[  733.884176][T16971]  should_fail_ex+0x512/0x640
[  733.884199][T16971]  ? fs_reclaim_acquire+0xae/0x150
[  733.884224][T16971]  should_failslab+0xc2/0x120
[  733.884247][T16971]  kmem_cache_alloc_noprof+0x83/0x770
[  733.884265][T16971]  ? __pfx_map_id_range_down+0x10/0x10
[  733.884287][T16971]  ? security_inode_alloc+0x3b/0x2b0
[  733.884310][T16971]  ? security_inode_alloc+0x3b/0x2b0
[  733.884329][T16971]  security_inode_alloc+0x3b/0x2b0
[  733.884349][T16971]  inode_init_always_gfp+0xced/0x1040
[  733.884374][T16971]  alloc_inode+0x86/0x240
[  733.884390][T16971]  sock_alloc+0x40/0x280
[  733.884407][T16971]  __sock_create+0xc2/0x8a0
[  733.884427][T16971]  __sys_socketpair+0x1d8/0x5a0
[  733.884446][T16971]  ? __pfx___sys_socketpair+0x10/0x10
[  733.884467][T16971]  ? xfd_validate_state+0x61/0x180
[  733.884481][T16971]  ? __pfx___x64_sys_mount+0x10/0x10
[  733.884499][T16971]  __x64_sys_socketpair+0x96/0x100
[  733.884519][T16971]  ? lockdep_hardirqs_on+0x7c/0x110
[  733.884534][T16971]  do_syscall_64+0xcd/0xf80
[  733.884550][T16971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.884566][T16971] RIP: 0033:0x7fac56b8f7c9
[  733.884580][T16971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  733.884595][T16971] RSP: 002b:00007fac54df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  733.884611][T16971] RAX: ffffffffffffffda RBX: 00007fac56de5fa0 RCX: 00007fac56b8f7c9
[  733.884621][T16971] RDX: 000000000000000b RSI: 0000000000000002 RDI: 0000000000000009
[  733.884631][T16971] RBP: 00007fac56c13f91 R08: 0000000000000000 R09: 0000000000000000
[  733.884640][T16971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  733.884649][T16971] R13: 00007fac56de6038 R14: 00007fac56de5fa0 R15: 00007fffbd068768
[  733.884669][T16971]  </TASK>
[  733.884702][T16971] socket: no more sockets
[  734.481189][T16918] hsr_slave_0: entered promiscuous mode
[  734.513653][T16918] hsr_slave_1: entered promiscuous mode
[  735.232718][T16918] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  735.288678][T16918] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  735.346723][T16918] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  735.385875][ T5840] Bluetooth: hci3: command tx timeout
[  735.402730][T16918] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  735.688336][T16918] 8021q: adding VLAN 0 to HW filter on device bond0
[  735.777150][T16918] 8021q: adding VLAN 0 to HW filter on device team0
[  735.834106][T11000] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.841269][T11000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  735.917448][T11000] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.924594][T11000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  736.413531][T16918] 8021q: adding VLAN 0 to HW filter on device batadv0
[  737.154985][T16918] veth0_vlan: entered promiscuous mode
[  737.205079][T16918] veth1_vlan: entered promiscuous mode
[  737.299971][T16918] veth0_macvtap: entered promiscuous mode
[  737.341783][T16918] veth1_macvtap: entered promiscuous mode
[  737.414249][T16918] batman_adv: batadv0: Interface activated: batadv_slave_0
[  737.454600][ T5840] Bluetooth: hci3: command tx timeout
[  737.468815][T16918] batman_adv: batadv0: Interface activated: batadv_slave_1
[  737.518325][T10998] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  737.564761][T10998] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  737.586536][ T6903] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  737.631417][ T6903] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  737.806833][ T6903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  737.846311][ T6903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  737.883530][ T6903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  737.891364][ T6903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  739.455465][T17036] FAULT_INJECTION: forcing a failure.
[  739.455465][T17036] name failslab, interval 1, probability 393216, space 0, times 0
[  739.618371][T17036] CPU: 0 UID: 0 PID: 17036 Comm: syz.6.2341 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  739.618418][T17036] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  739.618427][T17036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  739.618437][T17036] Call Trace:
[  739.618444][T17036]  <TASK>
[  739.618451][T17036]  dump_stack_lvl+0x16c/0x1f0
[  739.618474][T17036]  should_fail_ex+0x512/0x640
[  739.618497][T17036]  ? __kmalloc_cache_noprof+0x5f/0x800
[  739.618518][T17036]  should_failslab+0xc2/0x120
[  739.618541][T17036]  __kmalloc_cache_noprof+0x80/0x800
[  739.618559][T17036]  ? trace_pid_list_alloc+0x232/0x480
[  739.618583][T17036]  ? trace_pid_list_alloc+0x232/0x480
[  739.618602][T17036]  trace_pid_list_alloc+0x232/0x480
[  739.618625][T17036]  trace_pid_write+0x10c/0x4b0
[  739.618643][T17036]  ? __pfx_trace_pid_write+0x10/0x10
[  739.618656][T17036]  ? __pfx_aa_file_perm+0x10/0x10
[  739.618673][T17036]  ? update_last_data+0xaa/0x510
[  739.618698][T17036]  event_pid_write.isra.0+0x1e4/0x7f0
[  739.618723][T17036]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  739.618750][T17036]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  739.618771][T17036]  vfs_write+0x2a0/0x11d0
[  739.618794][T17036]  ? __pfx___mutex_lock+0x10/0x10
[  739.618814][T17036]  ? __pfx_vfs_write+0x10/0x10
[  739.618839][T17036]  ? __fget_files+0x20e/0x3c0
[  739.618866][T17036]  ksys_write+0x12a/0x250
[  739.618886][T17036]  ? __pfx_ksys_write+0x10/0x10
[  739.618913][T17036]  do_syscall_64+0xcd/0xf80
[  739.618930][T17036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.618947][T17036] RIP: 0033:0x7fdd7718f7c9
[  739.618961][T17036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  739.618977][T17036] RSP: 002b:00007fdd78057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  739.618992][T17036] RAX: ffffffffffffffda RBX: 00007fdd773e6090 RCX: 00007fdd7718f7c9
[  739.619003][T17036] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  739.619012][T17036] RBP: 00007fdd77213f91 R08: 0000000000000000 R09: 0000000000000000
[  739.619021][T17036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  739.619030][T17036] R13: 00007fdd773e6128 R14: 00007fdd773e6090 R15: 00007ffc0f914f18
[  739.619052][T17036]  </TASK>
[  748.875949][ T5152] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  748.886352][ T5152] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  748.894164][ T5152] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  748.902080][ T5152] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  748.912341][ T5152] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  749.216989][T17076] chnl_net:caif_netlink_parms(): no params data found
[  749.369967][T17076] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.392587][T17076] bridge0: port 1(bridge_slave_0) entered disabled state
[  749.399838][T17076] bridge_slave_0: entered allmulticast mode
[  749.432377][T17076] bridge_slave_0: entered promiscuous mode
[  749.440519][T17076] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.465707][T17076] bridge0: port 2(bridge_slave_1) entered disabled state
[  749.492136][T17076] bridge_slave_1: entered allmulticast mode
[  749.502378][T17076] bridge_slave_1: entered promiscuous mode
[  749.558992][T17076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  749.594021][T17076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  749.654355][T17076] team0: Port device team_slave_0 added
[  749.672474][T17076] team0: Port device team_slave_1 added
[  749.724426][T17076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  749.745251][T17076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  749.801309][T17076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  749.833605][T17076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  749.854559][T17076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  749.919725][T17076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  750.010454][T17076] hsr_slave_0: entered promiscuous mode
[  750.028117][T17076] hsr_slave_1: entered promiscuous mode
[  750.039673][T17076] debugfs: 'hsr0' already exists in 'hsr'
[  750.045405][T17076] Cannot create hsr debugfs directory
[  750.381902][T17076] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  750.411303][T17076] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  750.431210][T17076] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  750.460602][T17076] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  750.610704][T17076] 8021q: adding VLAN 0 to HW filter on device bond0
[  750.651595][T17076] 8021q: adding VLAN 0 to HW filter on device team0
[  750.681021][T11001] bridge0: port 1(bridge_slave_0) entered blocking state
[  750.688213][T11001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  750.722489][T11001] bridge0: port 2(bridge_slave_1) entered blocking state
[  750.729660][T11001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  750.985924][ T5152] Bluetooth: hci9: command tx timeout
[  751.098320][T17076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  751.544587][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  751.558714][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  751.566940][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  751.575719][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  751.583310][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  751.739363][T17076] veth0_vlan: entered promiscuous mode
[  751.770868][T17076] veth1_vlan: entered promiscuous mode
[  751.895983][T17076] veth0_macvtap: entered promiscuous mode
[  751.930497][T17076] veth1_macvtap: entered promiscuous mode
[  752.044527][T17076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  752.091553][T17076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  752.167456][ T6903] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  752.210192][ T6903] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  752.248811][ T6903] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  752.298961][ T6903] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  752.365552][T17103] chnl_net:caif_netlink_parms(): no params data found
[  752.700551][T11010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  752.745344][T11010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  752.773905][T17103] bridge0: port 1(bridge_slave_0) entered blocking state
[  752.827620][T17103] bridge0: port 1(bridge_slave_0) entered disabled state
[  752.854835][T17103] bridge_slave_0: entered allmulticast mode
[  752.880095][T17103] bridge_slave_0: entered promiscuous mode
[  752.916013][T17103] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.923108][T17103] bridge0: port 2(bridge_slave_1) entered disabled state
[  752.976154][T17103] bridge_slave_1: entered allmulticast mode
[  752.995110][T17103] bridge_slave_1: entered promiscuous mode
[  753.057664][ T5840] Bluetooth: hci9: command tx timeout
[  753.106642][T11010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  753.124325][T17103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  753.135303][T11010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.176972][T17103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  753.305602][T17103] team0: Port device team_slave_0 added
[  753.338284][T17103] team0: Port device team_slave_1 added
[  753.496618][T17103] batman_adv: batadv0: Adding interface: batadv_slave_0
[  753.533321][T17103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  753.612853][ T5840] Bluetooth: hci10: command tx timeout
[  753.667956][T17103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  753.728006][T17103] batman_adv: batadv0: Adding interface: batadv_slave_1
[  753.770107][T17103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  753.916559][T17103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  753.948013][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  753.960649][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  754.157885][T17103] hsr_slave_0: entered promiscuous mode
[  754.165191][T17103] hsr_slave_1: entered promiscuous mode
[  754.208093][T17103] debugfs: 'hsr0' already exists in 'hsr'
[  754.213840][T17103] Cannot create hsr debugfs directory
[  754.818040][T17118] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  754.859405][T17103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.065091][T17103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.123093][ T5840] Bluetooth: hci9: command tx timeout
[  755.215822][T17103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.540708][T17103] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  755.586674][T17103] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  755.606451][T17121] FAULT_INJECTION: forcing a failure.
[  755.606451][T17121] name failslab, interval 1, probability 393216, space 0, times 0
[  755.626283][T17103] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  755.652703][T17121] CPU: 0 UID: 0 PID: 17121 Comm: syz.9.2353 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  755.652737][T17121] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  755.652745][T17121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  755.652754][T17121] Call Trace:
[  755.652760][T17121]  <TASK>
[  755.652767][T17121]  dump_stack_lvl+0x16c/0x1f0
[  755.652789][T17121]  should_fail_ex+0x512/0x640
[  755.652810][T17121]  ? __kmalloc_noprof+0xca/0x910
[  755.652829][T17121]  should_failslab+0xc2/0x120
[  755.652852][T17121]  __kmalloc_noprof+0xeb/0x910
[  755.652868][T17121]  ? process_preds+0x41a/0x1c50
[  755.652891][T17121]  ? process_preds+0x41a/0x1c50
[  755.652908][T17121]  process_preds+0x41a/0x1c50
[  755.652931][T17121]  ? create_filter_start.constprop.0+0x56/0x300
[  755.652954][T17121]  create_filter+0x140/0x210
[  755.652974][T17121]  ? __pfx_create_filter+0x10/0x10
[  755.652996][T17121]  ? find_held_lock+0x2b/0x80
[  755.653017][T17121]  apply_event_filter+0x220/0x500
[  755.653038][T17121]  ? __pfx_apply_event_filter+0x10/0x10
[  755.653063][T17121]  ? __pfx_event_filter_write+0x10/0x10
[  755.653077][T17121]  event_filter_write+0x16d/0x290
[  755.653093][T17121]  vfs_writev+0x5df/0xde0
[  755.653119][T17121]  ? __pfx_vfs_writev+0x10/0x10
[  755.653137][T17121]  ? fdget_pos+0x2a2/0x370
[  755.653172][T17121]  ? __fget_files+0x20e/0x3c0
[  755.653198][T17121]  ? do_writev+0x132/0x340
[  755.653215][T17121]  do_writev+0x132/0x340
[  755.653234][T17121]  ? __pfx_do_writev+0x10/0x10
[  755.653259][T17121]  do_syscall_64+0xcd/0xf80
[  755.653276][T17121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.653291][T17121] RIP: 0033:0x7f507118f7c9
[  755.653311][T17121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  755.653325][T17121] RSP: 002b:00007f5071f7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  755.653340][T17121] RAX: ffffffffffffffda RBX: 00007f50713e5fa0 RCX: 00007f507118f7c9
[  755.653350][T17121] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  755.653359][T17121] RBP: 00007f5071213f91 R08: 0000000000000000 R09: 0000000000000000
[  755.653368][T17121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  755.653376][T17121] R13: 00007f50713e6038 R14: 00007f50713e5fa0 R15: 00007fff02fcd648
[  755.653397][T17121]  </TASK>
[  755.656378][T17103] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  755.926015][ T5840] Bluetooth: hci10: command tx timeout
[  756.338715][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2356'.
[  756.576950][ T5152] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  756.595157][ T5152] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  756.605478][ T5152] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  756.615265][ T5152] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  756.625653][ T5152] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  756.945127][T17103] 8021q: adding VLAN 0 to HW filter on device bond0
[  757.038986][T17103] 8021q: adding VLAN 0 to HW filter on device team0
[  757.079499][T17126] bridge0: port 1(bridge_slave_0) entered blocking state
[  757.086660][T17126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  757.145073][T17126] bridge0: port 2(bridge_slave_1) entered blocking state
[  757.152297][T17126] bridge0: port 2(bridge_slave_1) entered forwarding state
[  757.192783][ T5152] Bluetooth: hci9: command tx timeout
[  757.221087][T17135] chnl_net:caif_netlink_parms(): no params data found
[  757.444820][T17135] bridge0: port 1(bridge_slave_0) entered blocking state
[  757.478994][T17135] bridge0: port 1(bridge_slave_0) entered disabled state
[  757.553252][T17135] bridge_slave_0: entered allmulticast mode
[  757.571780][T17135] bridge_slave_0: entered promiscuous mode
[  757.609454][T17135] bridge0: port 2(bridge_slave_1) entered blocking state
[  757.648843][T17135] bridge0: port 2(bridge_slave_1) entered disabled state
[  757.688778][T17135] bridge_slave_1: entered allmulticast mode
[  757.702134][T17135] bridge_slave_1: entered promiscuous mode
[  757.862222][T17135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  757.921961][T17135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  757.990763][ T5152] Bluetooth: hci10: command tx timeout
[  758.050379][T17135] team0: Port device team_slave_0 added
[  758.084743][T17103] 8021q: adding VLAN 0 to HW filter on device batadv0
[  758.118329][T17135] team0: Port device team_slave_1 added
[  758.223555][T17135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  758.243774][T17135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  758.300232][T17135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  758.368455][T17135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  758.375412][T17135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  758.425732][   T31] INFO: task syz-executor:5833 blocked for more than 143 seconds.
[  758.433571][   T31]       Tainted: G     U  W    L XTNJ syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  758.476781][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  758.535135][   T31] task:syz-executor    state:D stack:23336 pid:5833  tgid:5833  ppid:1      task_flags:0x400140 flags:0x00080002
[  758.564681][T17135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  758.600945][   T31] Call Trace:
[  758.604246][   T31]  <TASK>
[  758.638673][   T31]  ? __schedule+0x10b9/0x6150
[  758.704628][ T5152] Bluetooth: hci11: command tx timeout
[  758.751427][   T31]  __schedule+0x1139/0x6150
[  758.780248][   T31]  ? __lock_acquire+0x436/0x2890
[  758.803835][   T31]  ? __pfx___schedule+0x10/0x10
[  758.808724][   T31]  ? find_held_lock+0x2b/0x80
[  758.833343][   T31]  ? schedule+0x2d7/0x3a0
[  758.837702][   T31]  schedule+0xe7/0x3a0
[  758.873861][   T31]  schedule_preempt_disabled+0x13/0x30
[  758.879352][   T31]  __mutex_lock+0xc69/0x1ca0
[  758.922817][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  758.928145][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  758.947449][   T31]  ? net_generic+0xea/0x2a0
[  758.951984][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  758.983109][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  758.988257][   T31]  nfsd_umount+0x3b/0x60
[  759.032505][   T31]  deactivate_locked_super+0xc1/0x1a0
[  759.037925][   T31]  deactivate_super+0xde/0x100
[  759.050782][   T31]  cleanup_mnt+0x225/0x450
[  759.062084][   T31]  task_work_run+0x150/0x240
[  759.066688][   T31]  ? __pfx_task_work_run+0x10/0x10
[  759.071794][   T31]  exit_to_user_mode_loop+0xfb/0x540
[  759.107223][   T31]  do_syscall_64+0x4ee/0xf80
[  759.131767][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.137689][   T31] RIP: 0033:0x7f52b1990af7
[  759.171546][   T31] RSP: 002b:00007ffc70ebc998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  759.179982][   T31] RAX: 0000000000000000 RBX: 00007f52b1a13d7d RCX: 00007f52b1990af7
[  759.215973][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc70ebdae0
[  759.231270][   T31] RBP: 00007ffc70ebdacc R08: 0000000000000000 R09: 0000000000000000
[  759.239268][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc70ebdae0
[  759.271084][   T31] R13: 00007f52b1a13d7d R14: 0000000000093e2b R15: 00007ffc70ebdb20
[  759.279090][   T31]  </TASK>
[  759.369706][   T31] 
[  759.369706][   T31] Showing all locks held in the system:
[  759.446831][   T31] 1 lock held by khungtaskd/31:
[  759.483263][   T31]  #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  759.520192][   T31] 2 locks held by syz-executor/5833:
[  759.525515][   T31]  #0: ffff8880826ea0e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  759.579835][   T31]  #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  759.609288][   T31] 2 locks held by kworker/0:9/6178:
[  759.614510][   T31]  #0: ffff88813ff55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[  759.663951][   T31]  #1: ffffc9000b417c90 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[  759.698948][   T31] 2 locks held by kworker/u8:34/10178:
[  759.718669][   T31]  #0: ffff88801ef80948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[  759.762044][   T31]  #1: ffffc900034b7c90 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[  759.807450][   T31] 4 locks held by kworker/u8:48/11006:
[  759.828459][   T31]  #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[  759.859325][   T31]  #1: ffffc90003edfc90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[  759.879112][   T31]  #2: ffffffff90123410 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830
[  759.909478][   T31]  #3: ffffffff90139be8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0
[  759.927660][   T31] 3 locks held by kworker/u8:64/11025:
[  759.933122][   T31]  #0: ffff88814d1cd148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[  759.962837][   T31]  #1: ffffc900046efc90 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[  759.987426][   T31]  #2: ffffffff90139be8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14f0
[  759.996940][   T31] 2 locks held by getty/12817:
[  760.027799][   T31]  #0: ffff8880357d40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  760.047400][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510
[  760.059659][ T5152] Bluetooth: hci10: command tx timeout
[  760.086834][   T31] 1 lock held by syz.0.1538/12987:
[  760.091963][   T31] 2 locks held by syz.2.1972/15069:
[  760.106802][   T31]  #0: ffffffff901e0090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  760.139841][   T31]  #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  760.150326][   T31] 2 locks held by syz-executor/15263:
[  760.155690][   T31]  #0: ffff88805bbd80e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  760.186267][   T31]  #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  760.195868][   T31] 2 locks held by syz-executor/15270:
[  760.231623][   T31]  #0: ffff888034b380e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  760.255894][   T31]  #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  760.265503][   T31] 3 locks held by syz.4.2052/15474:
[  760.286063][   T31]  #0: ffffffff901e0090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  760.294274][   T31]  #1: ffff88805e9716f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990
[  760.335687][   T31]  #2: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170
[  760.355360][   T31] 2 locks held by syz-executor/15716:
[  760.360738][   T31]  #0: ffff8880289d40e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  760.395476][   T31]  #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  760.418889][   T31] 2 locks held by syz-executor/16554:
[  760.424265][   T31]  #0: ffff88802e3ce0e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  760.445096][   T31]  #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  760.454685][   T31] 2 locks held by syz.8.2349/17068:
[  760.484763][   T31]  #0: ffffffff901e0090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  760.492980][   T31]  #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  760.524676][   T31] 1 lock held by syz-executor/17076:
[  760.529973][   T31]  #0: ffffffff90139be8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  760.554628][   T31] 4 locks held by syz-executor/17103:
[  760.560003][   T31]  #0: ffff888082f04ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xc0
[  760.594154][   T31]  #1: ffff888082f040c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3af/0x1260
[  760.603847][   T31]  #2: ffffffff903b6a08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x290
[  760.634048][   T31]  #3: ffff888095149338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760
[  760.643456][   T31] 1 lock held by syz-executor/17135:
[  760.663796][   T31]  #0: ffffffff8e3d4bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  760.706988][   T31] 
[  760.709351][   T31] =============================================
[  760.709351][   T31] 
[  760.773406][ T5152] Bluetooth: hci11: command tx timeout
[  760.780991][   T31] NMI backtrace for cpu 0
[  760.781010][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  760.781041][   T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  760.781049][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  760.781059][   T31] Call Trace:
[  760.781065][   T31]  <TASK>
[  760.781071][   T31]  dump_stack_lvl+0x116/0x1f0
[  760.781092][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  760.781113][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  760.781139][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  760.781161][   T31]  sys_info+0x133/0x180
[  760.781179][   T31]  watchdog+0xe66/0x1180
[  760.781205][   T31]  ? rcu_is_watching+0x12/0xc0
[  760.781226][   T31]  ? __pfx_watchdog+0x10/0x10
[  760.781246][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  760.781262][   T31]  ? __kthread_parkme+0x19e/0x250
[  760.781285][   T31]  ? __pfx_watchdog+0x10/0x10
[  760.781306][   T31]  kthread+0x3c5/0x780
[  760.781320][   T31]  ? __pfx_kthread+0x10/0x10
[  760.781336][   T31]  ? rcu_is_watching+0x12/0xc0
[  760.781355][   T31]  ? __pfx_kthread+0x10/0x10
[  760.781370][   T31]  ret_from_fork+0x983/0xb10
[  760.781386][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  760.781402][   T31]  ? __switch_to+0x7af/0x10d0
[  760.781422][   T31]  ? __pfx_kthread+0x10/0x10
[  760.781437][   T31]  ret_from_fork_asm+0x1a/0x30
[  760.781468][   T31]  </TASK>
[  761.382388][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  761.389303][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  761.399980][   T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  761.410018][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  761.420058][   T31] Call Trace:
[  761.423345][   T31]  <TASK>
[  761.426267][   T31]  dump_stack_lvl+0x3d/0x1f0
[  761.430852][   T31]  vpanic+0x640/0x6f0
[  761.434993][   T31]  panic+0xca/0xd0
[  761.438700][   T31]  ? __pfx_panic+0x10/0x10
[  761.443101][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  761.449071][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[  761.455219][   T31]  ? nmi_trigger_cpumask_backtrace+0x2be/0x300
[  761.461363][   T31]  ? watchdog+0xe83/0x1180
[  761.465769][   T31]  ? watchdog+0xe76/0x1180
[  761.470177][   T31]  watchdog+0xe94/0x1180
[  761.474415][   T31]  ? rcu_is_watching+0x12/0xc0
[  761.479171][   T31]  ? __pfx_watchdog+0x10/0x10
[  761.483839][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  761.489023][   T31]  ? __kthread_parkme+0x19e/0x250
[  761.494039][   T31]  ? __pfx_watchdog+0x10/0x10
[  761.498708][   T31]  kthread+0x3c5/0x780
[  761.502762][   T31]  ? __pfx_kthread+0x10/0x10
[  761.507339][   T31]  ? rcu_is_watching+0x12/0xc0
[  761.512093][   T31]  ? __pfx_kthread+0x10/0x10
[  761.516668][   T31]  ret_from_fork+0x983/0xb10
[  761.521246][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  761.526348][   T31]  ? __switch_to+0x7af/0x10d0
[  761.531013][   T31]  ? __pfx_kthread+0x10/0x10
[  761.535586][   T31]  ret_from_fork_asm+0x1a/0x30
[  761.540349][   T31]  </TASK>
[  761.543407][   T31] Kernel Offset: disabled
[  761.547718][   T31] Rebooting in 86400 seconds..