last executing test programs:

2m41.608309243s ago: executing program 32 (id=861):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0)
io_uring_setup$auto(0xa, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8040, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = pidfd_open$auto(0x1, 0x0)
setns(r4, 0x60020000)
io_uring_setup$auto(0x6, 0x0)
mknod$auto(0x0, 0x1081, 0x3)
open(0x0, 0xa240, 0x15e)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x10e00, 0x1e6)
sysfs$auto(0x2, 0x1e, 0x0)
setuid$auto(0xe)
openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/setgroups\x00', 0x300, 0x0)
r5 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev$auto(r5, &(0x7f0000000300)={0x0, 0x10001}, 0xc)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0)

2m35.01866005s ago: executing program 33 (id=886):
socket(0x2, 0x2, 0x0) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async)
r1 = pipe$auto(&(0x7f0000000000))
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r1, 0x2, 0x7, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) (async)
io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) (async)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0x5, 0x0) (async)
pipe$auto(0x0) (async)
sysfs$auto(0x2, 0x10000000000002c, 0x0)
r2 = fsopen$auto(0x0, 0x1) (async)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x149942, 0x0) (async, rerun: 64)
ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) (async, rerun: 64)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) (async)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000)
lchown$auto(0x0, 0x0, 0x0) (async)
read$auto_tracing_entries_fops_trace(0xffffffffffffffff, 0x0, 0x0) (async)
write$auto(0xca, &(0x7f0000000380)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe9\xb4\xe4\xfc1v\x19\x1b\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5l\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8)6O\x81\x84\x96\x970\xcd\xbc\xc2\xf9\x1c \x15\xce\xda\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xb2\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\x86\x11\x97^\xd6r\xc0\xca', 0x9) (async, rerun: 64)
socket(0x10, 0x2, 0x80000000) (async, rerun: 64)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
read$auto(r0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

2m34.458174464s ago: executing program 2 (id=921):
openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f000002ad40), 0x28202, 0x0)
r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$auto_VHOST_SET_VRING_BASE2(r0, 0x4008af12, &(0x7f0000000040)={0xa, 0x4})
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="01012b"], 0x20}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
pwrite64$auto(0xffffffffffffffff, 0x0, 0x6bc, 0x5)
socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0xfffffffe, 0x802, 0x8000000000000000, 0x0)
r1 = socket(0xa, 0x5, 0x84)
setsockopt$auto(r1, 0x10000000084, 0x23, 0x0, 0x8)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0xa, 0x1, 0x84)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
io_uring_setup$auto(0x6, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
getsockopt$auto(r2, 0x84, 0x6d, 0x0, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
bpf$auto(0x1, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x8000, 0xf9c, 0x466, 0x9, 0x3, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)

2m33.894479965s ago: executing program 2 (id=923):
r0 = socket(0xa, 0x1, 0xfffffffd)
setsockopt$auto_SO_BUSY_POLL(r0, 0x7b, 0x2e, &(0x7f0000000000)='!]\x00', 0x400000)
socket(0x10, 0x80002, 0x0)
openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = epoll_create$auto(0x20109)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon16\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000bd5cce0e54b2eb59a1a47e4fd74c8d1e8d2b7c5b37091ae5b7b770110e9db9656aa11c17a4c96b7e0ac7b8dc00aeef3a3109f0e70d0ce4521e177295ae7965f5f827305ad90781cb302246ebdad4b7f35b9ca4ccfd6937d3b6c9690969c07da43fd82056bacc6a47f4e28c33cb0eaeb2a624d0816200"/132, @ANYRESDEC, @ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000080)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="72289327eaae8c6c1a576e94e2f661c7da010000c59c1a669af2918bdbbc1cd02f5ca17697b5390f92a5a8cc6920764a4a67a0b6", @ANYBLOB="1a1525e05fc7a420581d69b5bb0027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0xd04}, 0x2, 0x5)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0)
epoll_create$auto(0x3e)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x9)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
creat$auto(&(0x7f0000000080)='./file0\x00', 0x6)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)

2m32.807941007s ago: executing program 2 (id=926):
r0 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000001440), 0x20000, 0x0)
read$auto_sync_info_debugfs_fops_(r0, &(0x7f0000001480)=""/79, 0x4f)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
ioctl$auto(r1, 0x5608, r1)

2m32.376587601s ago: executing program 2 (id=928):
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb000000)

2m32.251211841s ago: executing program 2 (id=929):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mbind$auto(0x8000000000000, 0x2091d2, 0x8, 0x0, 0x6, 0x2)
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffe}]}, 0x28}}, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
msgrcv$auto(0x3, 0x0, 0x100, 0x9, 0x51f)
msgctl$auto(0x0, 0x1, 0x0)

2m31.065103648s ago: executing program 2 (id=931):
mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_RTC_PARAM_GET(r0, 0x40187013, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020008, 0x1, 0x9000000ebf, 0xfffffffffffffffa, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4008815)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
r2 = socket(0x22, 0x800, 0x800004)
bpf$auto(0x6, &(0x7f00000001c0)=@test={r2, 0x10004, 0x0, 0x3e, 0x106, 0x0, 0x0, 0xfff, 0x800, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), 0xffffffffffffffff)
msgctl$auto_IPC_INFO(0x0, 0x3, &(0x7f0000001140)={{0x1, <r4=>0xee00, 0xffffffffffffffff, 0x5d1f62e, 0xf, 0xf0, 0x8000}, &(0x7f00000010c0)=0x3, &(0x7f0000001100)=0x1, 0x8, 0x8, 0x81, 0x6, 0x7f, 0xdea4, 0xed, 0xb1, @raw=0x6, @raw=0x7})
r5 = getpid()
process_vm_readv$auto(r5, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000017c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001780)={&(0x7f0000000300)=ANY=[@ANYBLOB="b4030000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0800960007000000da01188afc0006800800b100", @ANYRES32=r5, @ANYBLOB="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"], 0x3b4}, 0x1, 0x0, 0x0, 0x20000001}, 0x48881)
r6 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r6, 0x29, 0x18, &(0x7f0000000040)='!\x00', 0x1ff)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0)
get_mempolicy$auto(&(0x7f00000011c0)=0x9, &(0x7f0000001200)=0x4, 0xdc, 0x0, 0xc6)
write$auto_sg_fops_sg(r7, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e)
prctl$auto(0x3, 0x5, 0xffffffffffffffff, 0x0, 0xe)

2m29.076999252s ago: executing program 34 (id=905):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'nr0\x00'})
r1 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68)
ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r1, 0x80044dfe, &(0x7f0000000140)="1af01c8db27b768852b4fb5839b2b5957e7175aad400b3458de84cd71acd5f54e56f2be23ab0d10869fde8a5188fe17e76938ffd1d939050b47f1d595bf992d2213823ea7cd1d003f889dcd64d49e86d4a5f13f1cb409dbd86d8db7dfae5eeac2095b3f5a7cf0d63d56d92930bcd8e1d09c8d5e6eb7da3e810fae95e0b39b06b7f18917eacb6a023f477d0bc38b843e5c10f5cf2f0c35a4e8b06b17515ccd40a5e45631e41c246073bf9dd5d9addc4318af653190a07b6746923e2aad6bfc5527f3dd6d00a57a1194e648ff2baf09580b160589c88bc976abe1722fcdc96011d3f19fe9e106e5ae4b2dd903a799fd403e53862b8bb7d853bdafdf1d0e53474")
ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080))

2m24.438060493s ago: executing program 4 (id=948):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b80040043"], 0x40}, 0x1, 0x0, 0x0, 0x20004040}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fedbdf2502000000080003008000400008001d"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x841)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x5, 0x0, [{0x40000001, 0x7, 0x1000}]})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2m24.257568725s ago: executing program 4 (id=949):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) (async)
mlock$auto(0xfbed, 0xc) (async)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x890) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/platform/dummy_hcd.7/usb8/serial\x00', 0xa2400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) (async)
madvise$auto(0x8000, 0x87fff, 0xc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r1)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700580000000800001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon14\x00', 0x8001, 0x0) (async)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r4, 0x4, 0x100000000) (async)
ptrace$auto_PTRACE_SETREGSET(0x4205, r4, 0xffffffff00000202, 0x6)
r5 = setfsuid$auto(0xffffffffffffffff)
pidfd_send_signal$auto_SIGCONT(r3, 0x12, &(0x7f00000001c0)={@siginfo_0_0={0x10001, 0x1, 0x3, @_sigchld={r4, r5, 0x3, 0x5, 0x189}}}, 0x57)
faccessat2$auto(0x1, 0x0, 0x4, 0x1200)

2m23.271157697s ago: executing program 4 (id=958):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x0, 0xff)
connect$auto(0x3, &(0x7f0000000140), 0x55)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0xc0000, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0)
socket(0x11, 0x3, 0x9)
ioctl$auto(0xffffffffffffffff, 0x6f41, 0x38)
mmap$auto(0x0, 0x5, 0x3, 0xffffffffffff6f3e, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000005880)='/proc/sys/kernel/panic_print\x00', 0x80801, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto_PR_SET_MM_ARG_START(0x7ff, 0x8, 0xffffffffffffffff, 0x7fffffff, 0x8001)
recvmmsg$auto(r2, 0x0, 0x10000, 0xffffff19, 0x0)
write$auto(0x3, 0x0, 0xfdef)
syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000100), r1)
sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
ioctl$auto_FICLONE(r0, 0x40049409, r3)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
ioctl$auto(r4, 0x541c, 0xffffffffffffffff)

2m22.440455096s ago: executing program 4 (id=953):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x9, 0x1, 0xf)
mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x0, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0xffffff7fffff0005, 0x8)
r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0x200007, 0x8)
r2 = getsockopt$auto(r1, 0x3ff, 0x2, &(0x7f0000000280)='!^\xf3\x00', &(0x7f00000002c0)=0xfffffffc)
mmap$auto(0x0, 0x200009, 0x2, 0x5d9, r2, 0x300000000000)
connect$auto(0x3, 0x0, 0x58)
capset$auto(&(0x7f0000000040)={0x5, <r3=>0xffffffffffffffff}, &(0x7f0000000080)={0x1, 0x4, 0xe})
prctl$auto(0x3e, 0x1, r3, 0x8, 0x0)
pipe$auto(&(0x7f0000000080)=<r4=>0xffffffffffffffff)
flock$auto(r4, 0x5)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setresuid$auto(0x2, 0x7, 0x8080)
bpf$auto(0x0, &(0x7f0000000280)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/240, 0xf0)

2m20.988841666s ago: executing program 4 (id=960):
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, r0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x8, 0xa, 0x7)
r2 = socket(0xa, 0x1, 0x84)
r3 = socket(0x2, 0x1, 0x0)
r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r4, 0x400, 0x1)
mkdir$auto(&(0x7f0000000300)='}[,&*}\x00', 0x6)
mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x47c9, 0x0)
r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001040)='/proc/cpuinfo\x00', 0x40580, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r5, &(0x7f0000000040)=""/4080, 0x1036)
statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]})
connect$auto(r4, 0x0, 0x54)
ioctl$auto_VHOST_SET_LOG_FD2(r4, 0x4004af07, &(0x7f0000000380)=r1)
getsockopt$auto_SO_TXREHASH(r3, 0x1, 0x4a, &(0x7f0000000040)='/proc/thread-self/net/snmp\x00', &(0x7f0000000080)=0x9)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r6 = gettid()
openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/ht40allow_map\x00', 0x181000, 0x0)
rt_sigqueueinfo$auto(r6, 0x11, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_sigchld={r6, 0x0, 0xc525, 0x4, 0xffffffffffffffff}}})
uname$auto(0x0)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90)
r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000180), r1)
r8 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen\x00', 0x0, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xd8, r7, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x233e}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "6f71953a7aec0c422ebcb985a88e"}, @OVS_PACKET_ATTR_KEY={0x98, 0x2, 0x0, 0x1, [@generic="3d08661bd46ca7b9d93a3a2a8ff45fcc6c3fba506a4eeae4b1cb2097cf49eddc00b0781d0305a8955555677d2a41372349273f82a60fb2934eec5cf40f017400ea115ee2943d866b320c6d8f6c3d7129c02dfbf59d722bc9dd8d55e48b57deb46e6713bf094dd1c7b3d8b5266416d91e205a248be0ce16ecf3c2a56854c31abca0c4c7fb", @generic, @nested={0xc, 0xf7, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @fd=r8}]}, @typed={0x4, 0xfb}]}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x1}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000004}, 0x44000010)
sendto$auto(0x3, 0x0, 0x6, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1d)

2m20.626488612s ago: executing program 4 (id=963):
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8600, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0)
r0 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x141402, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
socket(0x2, 0x1, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
sysfs$auto(0x2, 0x100000000000029, 0x0)
r1 = fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0x81a0ae8c, 0x0)
read$auto_trace_clock_fops_trace(r0, &(0x7f00000000c0)=""/4096, 0x1000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10441, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = pipe$auto(0x0)
write$auto(0x1, 0x0, 0x80000000)
vmsplice$auto(r4, &(0x7f0000000000)={0x0, 0x4000005}, 0x6, 0x8)
ioctl$auto_SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000600)="5ba8d4")
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/loop6\x00', 0x2a80, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c00, 0x0)

2m19.89450699s ago: executing program 6 (id=969):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x6065c0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
socket(0x10, 0x3, 0x6)
socket(0x2, 0x2, 0x0)
r0 = socket(0x10, 0x2, 0x4)
r1 = socket(0x10, 0x3, 0x6)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r0, @ANYBLOB="0800fb00", @ANYRES32=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vlan0\x00'})
arch_prctl$auto(0x5002, 0x2)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/kernel/random/boot_id\x00', 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
socket(0x28, 0x5, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xc86, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x7]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)

2m18.750145055s ago: executing program 6 (id=971):
unshare$auto(0x40000080)
unshare$auto(0x40000080)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/arp_interval\x00', 0x20b42, 0x0)
r1 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0)
write$auto(r1, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x40)
setsockopt$auto_SO_REUSEADDR(r0, 0x3, 0x2, &(0x7f0000000440)='.^):%\x00\xfe\xce_^2:\x06cTc\x90\xf7`Q\xde\xeb\xf3\x10ZL\xae9|8\xe5zvu\x98\xa7yLH\xe7\x12S\x96#T,\xbf\xc5\x8d\xc1\x88\xe6e\x92-\a\xf0\x03\x89\xcb]\x0f\xa3\xc7Z\t\x00\xccQ\xf1P\x1e\xe2F;\bS\xa8S\xe0\xf7\xbd\xb6e\r\'\xfc\aW\x1c\xa8\xba\xd2\xbb\xc9Di=s\xf3\n\xc8\f\xe5\x8b\xce', 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/pagemap\x00', 0x12501, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0)
sendfile$auto(r2, r3, 0x0, 0x1000000000001)
write$auto(0xffffffffffffffff, &(0x7f0000003000)='/sys/kernel/debug/split_huge_pages\x00', 0x9)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
sendfile$auto(r0, r0, 0x0, 0x4f64a1d5)
waitid$auto_P_PID(0x1, 0x0, &(0x7f00000001c0)={@siginfo_0_0={0x0, 0x9, 0x7}}, 0x9, &(0x7f0000000340)={{0x0, 0x3935}, {0x4, 0x80000001}, 0x648, 0x0, 0x10001, 0x9aa, 0xffffffffffffffff, 0xfffffffffffffffe, 0x8, 0xd3f, 0x3, 0xc, 0x7, 0x3, 0x8001, 0xffffffffffffffff})
mmap$auto(0x4, 0x400007, 0xdf, 0x17, 0xffffffffffffffff, 0x400)
read$auto(0x3, 0x0, 0x8080)
unshare$auto(0x40000083)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ttyt5/power/runtime_status\x00', 0x4240, 0x0)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb0, 0x404, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0)
mmap$auto(0x4, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r4 = socket(0x1e, 0x1, 0x106)
io_uring_setup$auto(0x1, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x0, 0x0)
prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0x4, 0x22, 0x6e, 0x77)
ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0)
ioctl$auto(r5, 0x89f2, r4)
mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xffffffffffffffff, 0x9)

2m18.16631732s ago: executing program 6 (id=975):
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18)
r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1)
write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/dvb_usb_m920x/remove_id\x00', 0x802, 0x0)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/debug/usb/usbmon/10t\x00', 0x80000, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0x2, 0x801, 0x106)

2m17.65309449s ago: executing program 6 (id=979):
mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
preadv$auto(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3}, 0x5, 0x1ff, 0x81)

2m17.369124249s ago: executing program 6 (id=980):
r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, r0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x8, 0xa, 0x7)
r2 = socket(0xa, 0x1, 0x84)
r3 = socket(0x2, 0x1, 0x0)
r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r4, 0x400, 0x1)
mkdir$auto(&(0x7f0000000300)='}[,&*}\x00', 0x6)
mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x47c9, 0x0)
r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001040)='/proc/cpuinfo\x00', 0x40580, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r5, &(0x7f0000000040)=""/4080, 0x1036)
statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]})
connect$auto(r4, 0x0, 0x54)
ioctl$auto_VHOST_SET_LOG_FD2(r4, 0x4004af07, &(0x7f0000000380)=r1)
getsockopt$auto_SO_TXREHASH(r3, 0x1, 0x4a, &(0x7f0000000040)='/proc/thread-self/net/snmp\x00', &(0x7f0000000080)=0x9)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r6 = gettid()
openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/ht40allow_map\x00', 0x181000, 0x0)
rt_sigqueueinfo$auto(r6, 0x11, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_sigchld={r6, 0x0, 0xc525, 0x4, 0xffffffffffffffff}}})
uname$auto(0x0)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90)
r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000180), r1)
r8 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen\x00', 0x0, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xd8, r7, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x233e}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "6f71953a7aec0c422ebcb985a88e"}, @OVS_PACKET_ATTR_KEY={0x98, 0x2, 0x0, 0x1, [@generic="3d08661bd46ca7b9d93a3a2a8ff45fcc6c3fba506a4eeae4b1cb2097cf49eddc00b0781d0305a8955555677d2a41372349273f82a60fb2934eec5cf40f017400ea115ee2943d866b320c6d8f6c3d7129c02dfbf59d722bc9dd8d55e48b57deb46e6713bf094dd1c7b3d8b5266416d91e205a248be0ce16ecf3c2a56854c31abca0c4c7fb", @generic, @nested={0xc, 0xf7, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @fd=r8}]}, @typed={0x4, 0xfb}]}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x1}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000004}, 0x44000010)
sendto$auto(0x3, 0x0, 0x6, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1d)

2m17.161725695s ago: executing program 6 (id=981):
unshare$auto(0x40000080)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESHEX=r1], 0x14}, 0x1, 0xf0ffff, 0x0, 0x20004005}, 0x28044004)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-touch5\x00', 0x0, 0x0)
read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000010c0)=""/22, 0x16)
getsockopt$auto_SO_RXQ_OVFL(r1, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
pidfd_open$auto(0x1, 0x0)
socket(0x2, 0x3, 0x100)
setuid$auto(0xe)
socket(0x2a, 0x2, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/usb-serial/drivers/nokia/new_id\x00', 0x68542, 0x0)
write$auto(r3, &(0x7f0000000100)='\xfa\xb5\x00\x00\x00\x00\x00\x00\x00\x00\x88\x97U\x1b\xae5\by\x02\xc8\xf5\xca\xb2\xdbU\xf5\xc0\xfa&\xed\x88\fm\xfb\x8b\xd4\a\x00\x00\x00\'-\xd1\xd6\x9dq\xc3\x13\x8f\x91dK\xab\x90\xdc\xe7\x15\xe4\xd0\x9c\x8e\x960~\xd4H\x04\x05\xad\x9f\x89/~\xb0\xff\\\xa1d\xe5[k\xae\x90\x87\xbdhl\xbc\xef\x95*(db\x91\xa3$\xc4\x87fu\xc9z\xfd\x01?\xb38MV\xf9\xf63N\n\xbdV5\x1a*\\\x14\xd3\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000)
r4 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0xfffffffffffffffd)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffff7fffff0005, 0x8)
socketpair$auto(0x800, 0x1, 0x8000000000000000, 0x0)
madvise$auto(0x0, 0x2003f2, 0x15)

2m15.738502438s ago: executing program 5 (id=984):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/boot_params/data\x00', 0x2c40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4109, 0x100d)
socket(0x10, 0x2, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x894}, 0x4)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
mbind$auto(0x8000, 0x200fa9d, 0x1, 0x0, 0x3, 0x1)
set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0)
ioctl$auto_XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)="da6104ded9", 0x95, 0x0, 0xdc, 0x0, 0x0})
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x2c, 0x800000000000010d}, {0x0, 0x7, 0x7}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3)
r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000a00)=0x101)
r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nbd1\x00', 0x428004, 0x0)
ioctl$auto_IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f0000000240)={0x5, 0x40})
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32=r6, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
recvfrom$auto(0x3, 0x0, 0x8000000003, 0xfffff4a5, 0x0, 0xfffffffffffffffd)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
recvmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0)

2m15.722859146s ago: executing program 35 (id=931):
mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_RTC_PARAM_GET(r0, 0x40187013, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020008, 0x1, 0x9000000ebf, 0xfffffffffffffffa, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4008815)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
r2 = socket(0x22, 0x800, 0x800004)
bpf$auto(0x6, &(0x7f00000001c0)=@test={r2, 0x10004, 0x0, 0x3e, 0x106, 0x0, 0x0, 0xfff, 0x800, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), 0xffffffffffffffff)
msgctl$auto_IPC_INFO(0x0, 0x3, &(0x7f0000001140)={{0x1, <r4=>0xee00, 0xffffffffffffffff, 0x5d1f62e, 0xf, 0xf0, 0x8000}, &(0x7f00000010c0)=0x3, &(0x7f0000001100)=0x1, 0x8, 0x8, 0x81, 0x6, 0x7f, 0xdea4, 0xed, 0xb1, @raw=0x6, @raw=0x7})
r5 = getpid()
process_vm_readv$auto(r5, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000017c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001780)={&(0x7f0000000300)=ANY=[@ANYBLOB="b4030000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0800960007000000da01188afc0006800800b100", @ANYRES32=r5, @ANYBLOB="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"], 0x3b4}, 0x1, 0x0, 0x0, 0x20000001}, 0x48881)
r6 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r6, 0x29, 0x18, &(0x7f0000000040)='!\x00', 0x1ff)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0)
get_mempolicy$auto(&(0x7f00000011c0)=0x9, &(0x7f0000001200)=0x4, 0xdc, 0x0, 0xc6)
write$auto_sg_fops_sg(r7, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e)
prctl$auto(0x3, 0x5, 0xffffffffffffffff, 0x0, 0xe)

2m15.274781387s ago: executing program 5 (id=986):
mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x143382, 0x0)
preadv$auto(r0, &(0x7f0000000140)={0x0, 0x3}, 0x5, 0x1ff, 0x81)

2m15.203133841s ago: executing program 5 (id=987):
ioctl$auto_BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000000)={0x5, 0x528bba02, [0xa78, 0x4, 0x4], 0x2, 0x1})
r0 = ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, &(0x7f0000000040)=0x4) (async)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000016c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001680)={&(0x7f0000000100)={0x1550, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x152c, 0x2, 0x0, 0x1, [@typed={0x8, 0xfc, 0x0, 0x0, @u32=0x1}, @typed={0x5, 0x148, 0x0, 0x0, @str='\x00'}, @nested={0x117, 0xeb, 0x0, 0x1, [@nested={0x4, 0xaa}, @nested={0x4, 0x11b}, @typed={0x6, 0x161, 0x0, 0x0, @str=',\x00'}, @typed={0x14, 0x164, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="eeb534c2cf1f6f73a3d50f9e204018a5cb16f6569c6ae7bd725685777b94eeb1972ac4a9d17cb43ccb741df84fb21d0a836cfdabe21aba35e328aeb64faae218079e93a45eb76a9aca810f2910f40bb63bd6132ffc600b7ac8bda74b42d1ec07ef189fa940592814cde83688f35ea6bf4d4214ecbe11bdc8ec62272e7c08232b091bd28ef2c8853e9122bba784654bc1eaadc09b08e2573d3daa2b44ed35a6fb7bf9f74fdeff5b0925e7557a77a4982d29d5e9a820e35db4f742be3ab736f4b2fea2c0f41b995784555c4a5da6a9a93581b58c7ef7468dbb852d0723e6af0a50501ce13e8994953c432b2001eebfcd"]}, @typed={0x8, 0xb5, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xd4, 0x13, 0x0, 0x1, [@nested={0x4, 0xa3}, @generic="669d12b383b477feb7b659778124312d22bb4bb76638fa1cd0f04f46463925be19980494ba66d748ed3175608d47ef8d31af266a409987f0003f2ff43e7157c06d30e755cf8ded35665dc2b1724499cf78ec7cbc290bc0106a08aa33df42990b1b95faf4fa48", @generic="d63505c82190525d4c96af772c936c47af84a1c74f8319647409f104c722bc6a10e9d16aa84444f887e953b37999e6c80c9f45b20292492e9ded8c7075e4f55c7a9ebe6188ccc7129c9b3c445793535076db964ef37fcec6a3c46d062dae3ab8804de2ae26df"]}, @nested={0x248, 0x67, 0x0, 0x1, [@typed={0xbe, 0x61, 0x0, 0x0, @binary="13040f3baca425b64a8f23e9e46c40594fc5e02a6a10c8d756d194adbbf4fdefbcb620ce8447a2c18f0d6ed83f69c88bc0b1658d1f411a20796c7a5ca0ab616852ea327c7428d85f00e2cf275f4462f91d3efd8aff09126c1946a2e270674d3dce2f883d25c30f4e63b2152ccf0b50286e7459042cbdf92c9830b6ef55f06811abdaa3ebd514da27e81b0d0e2913e5ac1205cb804a12b94fbffd05b800149b41928f333100ec0e3c0c611904298d84fdfcba03f8d09a0d49dce5"}, @generic="40bb69b186724df86dc6d07b80b6904b322fc2270a4839af7b2a742eee4118a35f7060ae26de68a41b8c85a1896d282ab8c7185bfb5388303aec6489d03c4bef67e3a8df15a8cd81f872701d1032a4fd53412ee52454c40813fe8665a71f23774d02c383ea5f2c622edb26f0f7199ba799f237d55a023ee94e4a939bdf624f78951101826f5ecbaeb5b5afa57ca29a2135286ae4d5d3e7346fea80ffa7934df2cfaa96948a2de4c84678e0713030d5d5fb296ece701f6a7c9e94", @generic="e2bfd4dde57310ba85357b51ca5ed9aba0a7cf49a5f773dc255a21610ed927a62da89f13e94db9b2c0734697af8b3668267fdbdb198034712fe04dad6422863410e2548aeaf06956924b7f8d76b4e9ee68fff2c601cbd4ba31a62c3a07d2ec107aab8b94467c29fd3f4d01d10b7cd27b85f090cff2dda85eaa8030f39fa5e915925e2cf1da84836be424f3d87e305c11b990fe6900ca70ecb4ee7f848bbb9ebbfdbe157237378a60c2132691e0c59901425b68cee15513f9c5f57a56aea9ed93bc86a1d4472cef55a8e5"]}, @generic="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", @generic="e43b4d7c456d06d15ded2070924e3c6fb2dad971028d3f75e5c3240efac8a284de53caa334a7c9668282b52418870185447c0efe1c21f9e8ae0c7a9cc3605648b9fd7bb2b26e7f43b2a3418c972d02ad8636e136022b5a784dc2938fa786f22e2927133b77090c4c548055ddd72fb8205c7e1b03a35f26c7a85df4e0c5195e755200519fbdfc996f36175fc1b4725608fdfc84a2a0cfeb64fae6e6602dd97b82aa29e0126ead37ab94bc201c45a3e2ad8077f7e30ccfd40176d9fc0e4ad8624e8d87345c5d35b8782bcf0396b388928c3e940a3bf2fd85727c2a078c"]}]}, 0x1550}}, 0x81) (async)
r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000001700)='/dev/mtd0ro\x00', 0x0, 0x0)
mmap$auto_mtd_fops_mtdchar(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x4010, r2, 0x8000000000000001)
r3 = creat$auto(&(0x7f0000001740)='./file0\x00', 0x7) (async)
r4 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/ieee80211/phy5/user_power\x00', 0x101000, 0x0)
write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r4, &(0x7f00000017c0)="41380605a4b7e97932cb5c03ccd80629bc8a00c19fcefd4d375a35f4f6d953995818d44054be8ff9fdb0dba514edc5347ae5cf6222a4910ab604659cba03b0ef0a5fb313a261baf662c093a02f2b7205de76f71c4f0bd00d0799444bc16fd6df076401", 0x63)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001840)='/sys/devices/virtual/bdi/1:13/power/runtime_status\x00', 0x101000, 0x0) (async)
ioctl$auto_TIOCSWINSZ(r3, 0x5414, &(0x7f0000001880)="ee15ea41b669b32d3f249eb5fbc70d22625c3bfcda8a9514414f5db2ea4912c58ec0aca1560ba099711e6c301e2aec28af1ae7a3dcc4f29d181285a062b86db8b097d356ae8170d89774c835edec418ab68f996d2338ea2e08fb43b21df88bc9ea3861eb7ea4044ea8ac028521f1f5c373a77a1e6ea635bb794696bf4cb5862554c94508d3af884951337ac04ea8ad21c6f7df508e11e32f6403eca21ab35a5ab04f417755dec81edcce1c0e230317143f7041721fc09f2a75c160c451de356d62b57e85f05374f0ca9387319e5aac3be3b9675d3758b871e235c8c77942f8e7040faf2e4793ffc6240496ebcf30634f52") (async)
r5 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000001980)={0x2, "e52dd3ec253e9cca1a152925b9c075ff82c0797b8c2b7f2e7fe0773f9f3ab05d", @inferred=<r6=>r2}) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a00), r3) (rerun: 32)
sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000002240)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002200)={&(0x7f0000001a40)={0x790, r7, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "79f30ceca4e2f852fdf55bda57716dbe48b45c7d7a77af9939aa"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_MESH_CONFIG={0x748, 0x23, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}, @generic="2dcef3635857a61e0d20a9beeb81ba24c83ca68ca8888c7ea5db8b2582fba7bc109ff36fb466781e94164e5ee2a30be6fe3edf05b66fe9bfd2ff43c17990bf7686edb241ab0e54ebd1e8b557031dff88c4d29439078b9943481b1a0d7a5d338a6b644b00b8018a4563bd94dde5b8de7607d265f7db420167d519d914c320291224213472efeb13cfae0bea447eb0a8790cab144c7e9decd3d9ffe92c66b8a78a4baba1d9d85b1ae29815463fe0441a97f57bb18f692d22054d1b2e4f7789f8400b0990ab89b4314b462a60070f074d3c0294e29b0fbbea9b0413c4", @nested={0x227, 0x110, 0x0, 0x1, [@generic="349ce9ab8e7a040943babd44b0dbb4ff9121a9329cef1972b7750ec7b787614c305e34df5adc99c3aa2d1fe0ebecef2241df80f99f4ec23a2966264e5d98826bfb34f8c44a315a3e75ee52cfeca8f5dabb41639deafde72cf43f60be8d87b3d836e09f238d55a4a9f4c3632908659b06bfa42c483d931f22f9cea4d2f697501bca0984bb3bdbada5d3f5eb30b6293625643fc4e9aee751d58371fe3871bfa41725bbce335131cd34025fdbec9b766ad6f0227edc537e4344d5ac10f77a44b0cdf02e9a4c212e8bb1d04c465266f28978abea", @typed={0x8, 0xfb, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x1b, 0x0, 0x0, @u64}, @nested={0x4, 0x14d}, @nested={0x4, 0x142}, @generic="60461bf8e03b73f03a2a5ba142b3a411ec0fa5636b998ff7f8a835de0c0af242485650575ee5b1594de985678d2571dde147c97ab34c3e4254ab3fb4a116c087071c046d03e5afd6b75c0276193c751733897fb0972fd145841de7728609fbdf4f018273a81743d122f6d6852291578c61bd4124ccc5d6062815da46c20b4b5f9e20dd996fe50fe0bed75461", @typed={0xc, 0xe1, 0x0, 0x0, @u64=0x5}, @typed={0xc, 0x3c, 0x0, 0x0, @u64=0x2}, @generic="2d4784bfc1c10b3334579b43cc997fa43181cf4910394ab5599b8cbe3c3bb091531ff413bd0ea8461f66d22c6b311ad0d97d312d9b1d510888980fee8930dbeef885a63d87e11eadca474b60e5d098948d8a84306bac79977edad016836802baee64bb60fe90f581b2d07e44f397bd64337b1931aab187c8de6e82a176e9169b9dcbfc889c9d8845b8685537c1", @nested={0x4, 0x74}]}, @generic="9b49e584adda50a157af7329dac0a0bd335dec51cb331ba059caccc15ff6d55c804ec083409b32e1a88772206ae5a103a4037c437c84ff20a4c56425c9623f406d1168e3e20a1b11923430413bfc4c42b4b4828896444bf0a896410f2fbc7f9c1d403d65f200656d761c47679874b6500fb154f3c84d4363ee0948c753799512716c753c819c9a5395f48691074060b4286c67bb8945585382f8562d713c559e696a8c907d9457e86950a33a55cc114d651c7664635c976006be712b0e8c200cf6c812d93d57745f05f99ac5098ba063c9bb69ad77dd674bb0d276", @generic="a78d5f795f545eae6169d9245cb7a3e68d5b3070ad56c8832f9b5f2351e070d4192442ab2eee518470ab13d03a297824bfd0f4afd645cac9d331dccaa0ad533661e270d86ed9607197873ae8c1c56a95d5e167729009d991f290c659e0c00af04d2e2816e15e8b46feb26de307b8d00917e0572e997000e7771ff6410ae79d3e72657e2acbb51115f4e31f7adcc52d172f06a5181f8d6774740e85baed6a5d6ef9d9e1663eb6b10a721028c41071dd2ec0581dbdcb145c5e360a39a5d544685ba24449070c", @typed={0x30, 0x4c, 0x0, 0x0, @str='/sys/kernel/debug/ieee80211/phy5/user_power\x00'}, @typed={0x6, 0x118, 0x0, 0x0, @str=',\x00'}, @generic="e9221d586b3af2c8c75158ba8c9af994a98668aeaabb533552c8c7dc145b0e88a28a9b76f3f6f1dc6c2d30d9a83053dc868c4a7ebae2acf5c69170be361e6833fd060b11b90cee992cd0bae9bdd738b87281ef1c24aa4f14f98fa727d3af9e3b012bc764265e7d702b9829f8a0d50beaf2911c480f02c630470b0bbff802105c06622d90190c12481541b2b7503023cefbbdab7d797eeb325a4ae4b32a3cb2474b5188cecf6a6be5a83efba6c26b7b97e92db64eaeec3b3bbc0273af54", @generic="2999551c95f8db584ffe729edc5eaaba3ab02b16d68de9d9d31c6f2e6986a0ad1e7870c83e69e61040b59d56f8cc8fa216972831e7eaa46fa3386b16178cad9bb42579e26ceae2dce3b333874ceee6130b2d850c62b40146425c64ca2601d77a", @nested={0x143, 0xf1, 0x0, 0x1, [@nested={0x4, 0x7c}, @generic="6219c2cb9a4334c0d170dd74b3ce5e1c02c1d8ded5daac82cb8f946711d02b37fc254ddd", @nested={0x4, 0xf2}, @generic="f271e33d5d1518687678369cf97e36d3258972ff296a9954faf56d6bb96916d5663b2fa559d9e036fd8cb46bed821d2f66f4627e1e75536b69be4eb3a76457191bd96300827d101e8265996f18be1b0a206c7e3144dc0880b5f0366fb1a5d092e4db22e57076f11c2a1b7676b8e5489c2d9bb4bdbd3601396299fade46bae2ebfdc65c02f7a1949698660a4851844eb21a1c81c381a1b80b7a47", @typed={0x3a, 0xa2, 0x0, 0x0, @binary="19140f2933fe9c5a54404bdc8c15ee8ba5981e7d3daed07225de7402b58187f21633d9674d12a47875b5b519f7c6f7564d62d0574c87"}, @nested={0x4, 0xff}, @typed={0x7, 0x141, 0x0, 0x0, @str='--\x00'}, @typed={0x10, 0xd8, 0x0, 0x0, @str='/dev/mtd0ro\x00'}, @generic="677707cdf2c5ffa0b3de6a6e277966ab66adceb9c5dbaff6e3d3b5d81a6180fa86"]}]}]}, 0x790}, 0x1, 0x0, 0x0, 0x1}, 0x4010) (async)
ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000002280)="d882a8c416e044574403c141891b376d24c9c4f3fd9ff8b1dc51dcdd334276d81fac432888bfce27fa547dcbd88cb8f3acb7dc17e511a005c79e27030f4a42f21d6467d1752dfac24959dc87fd5b6bce6f5a2933e7ff6cd4fa829377cb9642ae6546c9f777b2a43fbe7a69749945df484a94143bba4cf9fbe3301f0828a034ac49308c7c8b88b56a5370ef9386f864f9f9893472571ed3169c28b1a68f889da555bf9a0011efafcc1a")
ioctl$auto_IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000002340)={0x7, 0x400}) (async)
syslog$auto(0x19, &(0x7f0000002380)='nl80211\x00', 0x400) (async)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002400), r6)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x24, r8, 0x404, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x7f}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xffffff01}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040)
io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002500)="6b0590bf4968ba20a10128858c5a607483fed6e9344804e3b5d70eccd963ec83609098e58cd0feb9d6a478e841885ed981bc3faf5dfa416c592f2732cf4618abe38ef281752fe4f8aa8d22ffc935ca44b03ad4ce0fd7688470f1b315", 0x8c)
setsockopt$auto_SO_CNX_ADVICE(r2, 0x81, 0x35, &(0x7f0000002580)='&\x00', 0x8) (async, rerun: 64)
r9 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000025c0)='/sys/kernel/debug/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x0, 0x0) (rerun: 64)
setsockopt$auto_SO_TXREHASH(r9, 0x80000001, 0x4a, &(0x7f0000002600)='/sys/kernel/debug/ieee80211/phy5/user_power\x00', 0x8001)
read$auto_vhost_vsock_fops_vsock(r6, &(0x7f0000002640)=""/187, 0xbb) (async)
sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x240c000c) (async)
r10 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000002840), r5)
sendmsg$auto_VDPA_CMD_MGMTDEV_GET(r0, &(0x7f00000029c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002980)={&(0x7f0000002880)={0xdc, r10, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@VDPA_ATTR_DEV_NET_CFG_MACADDR={0xc7, 0xa, "f3cf88fb7403227af7831fad9c6c41bb522fab82b002c8d220c161f8ee0e80f620ca9d751cf78ffda028e825237e0252fd0da24bd2a6f991fa06c2a5498feb90a187eb5d450ea526616a303cf8bfb602482d7865a63ae61eccf45cf8d50f344055747b78da1ab78657ce74387166899fc8e85682d7a48fda1d1f89b8d5cc2ae2c5ce28a096e30f2a9ff19b06f599ec75e436481fe8caac10b627737122a186e036d9183e526a524db77db64d01d1e9a9562e0131e76eb4863b99cfff4d7cc17a320c0d"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004040)
sync_file_range$auto(r0, 0x6, 0x9, 0xc61b)
getsockopt$auto_SO_LOCK_FILTER(0xffffffffffffffff, 0x963, 0x2c, &(0x7f0000002a00)='nl80211\x00', &(0x7f0000002a40)=0x840)
sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r5, &(0x7f0000004300)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000042c0)={&(0x7f0000002dc0)={0x14d8, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x1270, 0x2, 0x0, 0x1, [@nested={0x4f, 0x15a, 0x0, 0x1, [@generic="b6114fa33de50f0dfec1a5b496a9739a03bf5ddc05265bf915ff50791c444ad82ae01c344ecfd3c41d231eb9e759ea4cc26149", @nested={0x4, 0x12a}, @typed={0x8, 0xc1, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xe4}, @typed={0x8, 0x93, 0x0, 0x0, @uid}]}, @nested={0x111d, 0x6a, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @ipv4=@multicast2}, @generic="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", @nested={0x4, 0x11b}, @nested={0x4, 0xf0}, @generic="e4114fd87ecd038728f2b9be1be82a7fb72615869f86dd96f62fa36589eed8853cf569ef6e2e6a2c12bcc225fd86584f8f52ee626a92e70d36d5f9bc7ae588116c35949ff60ca8ccddbea87f9f127913f3f2f9093f419aef2801ef9e4eccb62dec37188647de00ed44deeb6acc0d71242fb76922ae5bb9ea838b526b909ce90e3891e07a5df9feceaacaa6779fee715354446770b4151182dcd6595bf3d06b512f0712d2aa90de5cbc9055a6256b2ca14121a9eb6d1aceb3fb1d90ee2a988d99dc", @typed={0xc, 0xe3, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xd2}, @typed={0x37, 0xa9, 0x0, 0x0, @str='/sys/devices/virtual/bdi/1:13/power/runtime_status\x00'}]}, @nested={0x3d, 0x10e, 0x0, 0x1, [@nested={0x4, 0xc0}, @typed={0x8, 0x1f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="96a23b0601b2ac7beaea3c9d4d01d6a8293804296d3e66", @generic="1cd912e40db2a0a077044db03b40412ce86877a730dd"]}, @nested={0xc, 0xdd, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @fd=r6}]}, @nested={0x5f, 0x1, 0x0, 0x1, [@generic="26aaf3a5ea06cc3356382d885c2d4a620eb465b87a9c53d9e9f34c03e462116f6bc04f82d341405b3306fbc3ad7d70296d6d275d0f8461af2384b8671a841bf903ba57ea8fbc2e6483d1dbf08cbb3c", @nested={0x4, 0x138}, @typed={0x4, 0x75}, @nested={0x4, 0xb0}]}, @typed={0x8, 0xc6, 0x0, 0x0, @uid}, @nested={0x48, 0xdb, 0x0, 0x1, [@nested={0x4, 0x1}, @generic="1f19c125771cea1c600e80651fcd5116988174ca8bb3ffc39e42a02b4d2aae1bfd5b2f39d2d9474d83e54f74", @typed={0x8, 0xbb, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @typed={0x9, 0x31, 0x0, 0x0, @str='vdpa\x00'}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x11b, 0x2, 0x0, 0x1, [@nested={0xd, 0xf, 0x0, 0x1, [@nested={0x4, 0x83}, @generic="42a358c840"]}, @typed={0x4, 0x8d}, @generic="4df8863a6f58b280858446a0e5648216f198e5706a4e8e4e298e2c0396a92dbdaf462b64f6abe18e8f74ba9fdcbe3c", @typed={0x8, 0xf7, 0x0, 0x0, @u32=0x298}, @generic="6871d44527c33b84d871118805669b557a495493397720799516170d62b7e9e62a23752ace20a2ca9f0608ee338b09f21f46154ac2f963fceef574ac83f2d859875a5acc8a3b4ab86756958472708b6d4089f983ff9cc42a265af748c84dc8e54a04d24ae8a1520b5f343701a645fb2ba443ae6b3db0552b38a18f4c9cda0da29ba5eee755cdfe83e9008d61b78f2e1a1018c3c471894098e354f974b18ade1b3adf39ae3ce12379cff606bc8c6c698812ffa46f2f988168a8c0a4106f708ba998fa1980e5a1726a321559ac"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x12d, 0x3, 0x0, 0x1, [@typed={0x2c, 0x2d, 0x0, 0x0, @binary="887d01585ff56959da3c18e6f42d9e68fc391b836f4d25ca0396e73fbd418646e6de7c1f8baef2cd"}, @generic="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"]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8}]}, 0x14d8}, 0x1, 0x0, 0x0, 0x4}, 0x4000)

2m15.129435203s ago: executing program 5 (id=988):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x6, 0x5, 0x1007181, 0x2, 0x7, 0x0, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xffff, 0x8, 0x0, 0x30, 0x0, 0x862, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x81, 0x2000000000000000, 0x0, 0x20000, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5e6, 0x0, 0x0, 0x3]}, 0x9, 0xd)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0x2, &(0x7f0000000380)="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")
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd05, &(0x7f00000001c0))
r2 = socket(0x27, 0x4, 0x0)
setsockopt$auto(r2, 0x10000000084, 0x1e, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=@raw_tracepoint={0x2, r2, 0x0, 0x1}, 0xb2e5)
socket(0xa, 0x5, 0x0)
splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3fb, 0xb)
r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x20080, 0x0)
mmap$auto(0x800000, 0x7, 0xfffffffffffff0e0, 0x8000000008011, r3, 0x80000000)

2m15.05178904s ago: executing program 5 (id=989):
mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
preadv$auto(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3}, 0x5, 0x1ff, 0x81)

2m14.802757498s ago: executing program 5 (id=990):
mmap$auto(0x0, 0x8000000020009, 0x4000000000df, 0x40000000000eb2, 0xffffffffffffffff, 0x7ffe) (async)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
close_range$auto(r0, r0, 0x0) (async)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0)
ioctl$auto(r1, 0xc0046209, 0xffffffffffffffff)
ioctl$auto_BINDER_SET_CONTEXT_MGR(r1, 0x40046207, &(0x7f0000000480)="6a05000000cd8624fe25587c49590600000085bffb4475ab20259d5cc08bd3aa7f93c43b0a203fbaa87e2a0cc848d3153aa07fffffff90387de32046d78a608fce80ce3709b80087bab093b578c115a9570000b1253972372306f1023b3711be3a2fe767d229bb910be7ef5c668d0800000000c420f7a0e800000000002000"/147) (async)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10003, 0x0)
lchown$auto(&(0x7f0000000180)='}[,&*}\x00', 0xffffffffffffffff, 0xee00)
io_uring_setup$auto(0x6, 0x0) (async)
socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x9, 0xecb, 0x9b72, r1, 0x8000) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
socket(0xa, 0x801, 0x84) (async)
bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x6a)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) (async)
sendmsg$auto_NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000000380)=ANY=[@ANYBLOB="03000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf250e00000004002101bc001180b8000580b4000080b0000380040002008c0001802c0001800400080004000b00040008000400010004000a0005000d000100000004000a00060004000900000020000180080002000600000004000a00040008000500070007000000040009001000018004000b0004000a00040001002c00018005000600010000000800020013050000080002000100000004000b00050006000700000004000a001c0001801800018004000c0005000600030000000400090004000100"], 0xd4}, 0x1, 0x0, 0x0, 0x4085}, 0x240180d1)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) (async)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) (async)
r4 = socketcall$auto(0xa, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae60, 0x10000000000402) (async)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd})
ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0)

2m5.531393105s ago: executing program 36 (id=963):
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8600, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0)
r0 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x141402, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
socket(0x2, 0x1, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
sysfs$auto(0x2, 0x100000000000029, 0x0)
r1 = fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0x81a0ae8c, 0x0)
read$auto_trace_clock_fops_trace(r0, &(0x7f00000000c0)=""/4096, 0x1000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10441, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = pipe$auto(0x0)
write$auto(0x1, 0x0, 0x80000000)
vmsplice$auto(r4, &(0x7f0000000000)={0x0, 0x4000005}, 0x6, 0x8)
ioctl$auto_SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000600)="5ba8d4")
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/loop6\x00', 0x2a80, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c00, 0x0)

2m2.10923801s ago: executing program 37 (id=981):
unshare$auto(0x40000080)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESHEX=r1], 0x14}, 0x1, 0xf0ffff, 0x0, 0x20004005}, 0x28044004)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-touch5\x00', 0x0, 0x0)
read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000010c0)=""/22, 0x16)
getsockopt$auto_SO_RXQ_OVFL(r1, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
pidfd_open$auto(0x1, 0x0)
socket(0x2, 0x3, 0x100)
setuid$auto(0xe)
socket(0x2a, 0x2, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/usb-serial/drivers/nokia/new_id\x00', 0x68542, 0x0)
write$auto(r3, &(0x7f0000000100)='\xfa\xb5\x00\x00\x00\x00\x00\x00\x00\x00\x88\x97U\x1b\xae5\by\x02\xc8\xf5\xca\xb2\xdbU\xf5\xc0\xfa&\xed\x88\fm\xfb\x8b\xd4\a\x00\x00\x00\'-\xd1\xd6\x9dq\xc3\x13\x8f\x91dK\xab\x90\xdc\xe7\x15\xe4\xd0\x9c\x8e\x960~\xd4H\x04\x05\xad\x9f\x89/~\xb0\xff\\\xa1d\xe5[k\xae\x90\x87\xbdhl\xbc\xef\x95*(db\x91\xa3$\xc4\x87fu\xc9z\xfd\x01?\xb38MV\xf9\xf63N\n\xbdV5\x1a*\\\x14\xd3\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000)
r4 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0xfffffffffffffffd)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffff7fffff0005, 0x8)
socketpair$auto(0x800, 0x1, 0x8000000000000000, 0x0)
madvise$auto(0x0, 0x2003f2, 0x15)

2m1.475930286s ago: executing program 8 (id=1014):
socket(0x10, 0x2, 0x4)
mmap$auto(0x0, 0x2000d, 0x6, 0xeb1, 0xffffffffffffffff, 0x8004)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
r0 = socket(0xa, 0x2, 0x3a)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0xe)
setsockopt$auto(r0, 0x29, 0x4e, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
shutdown$auto(0x200000003, 0x2)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000)
bpf$auto(0x8, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x0, 0x10017, 0x800020010080c, 0x2, 0x5f, 0x20000000000803, 0x2000000000000003}, 0x6f0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2m0.959839954s ago: executing program 8 (id=1015):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
close_range$auto(0x2, 0x8, 0x0)
clock_nanosleep$auto(0x9, 0xe, &(0x7f0000000040)={0x10, 0x7}, 0x0) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
madvise$auto(0x4, 0x7f, 0x7) (async)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) (async)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mq_open$auto(&(0x7f0000001200)='}\x00', 0xcee, 0x7ff, &(0x7f0000001240)={0x1, 0x10001, 0x8, 0x8001}) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x80000003, 0x7) (async)
futex_wait$auto(0x0, 0x0, 0x83, 0xa, 0x0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae41, r1) (async)
ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x40000071, 0x7, 0x1000}]}) (async)
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000040)={0x2, 0xfffd, 0x0, 0x3, 0x8b, <r3=>0xffffffffffffffff})
prctl$auto(0x1000000003b, 0x1, r3, 0x5, 0x9) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
ioperm$auto(0x4, 0xbc6, 0x81) (async)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async)
sched_setaffinity$auto(0x0, 0x1, &(0x7f0000000000)=0x2) (async)
ioperm$auto(0xc8, 0x800, 0x8)

1m59.819279028s ago: executing program 38 (id=990):
mmap$auto(0x0, 0x8000000020009, 0x4000000000df, 0x40000000000eb2, 0xffffffffffffffff, 0x7ffe) (async)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
close_range$auto(r0, r0, 0x0) (async)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0)
ioctl$auto(r1, 0xc0046209, 0xffffffffffffffff)
ioctl$auto_BINDER_SET_CONTEXT_MGR(r1, 0x40046207, &(0x7f0000000480)="6a05000000cd8624fe25587c49590600000085bffb4475ab20259d5cc08bd3aa7f93c43b0a203fbaa87e2a0cc848d3153aa07fffffff90387de32046d78a608fce80ce3709b80087bab093b578c115a9570000b1253972372306f1023b3711be3a2fe767d229bb910be7ef5c668d0800000000c420f7a0e800000000002000"/147) (async)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10003, 0x0)
lchown$auto(&(0x7f0000000180)='}[,&*}\x00', 0xffffffffffffffff, 0xee00)
io_uring_setup$auto(0x6, 0x0) (async)
socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x9, 0xecb, 0x9b72, r1, 0x8000) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
socket(0xa, 0x801, 0x84) (async)
bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x6a)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) (async)
sendmsg$auto_NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000000380)=ANY=[@ANYBLOB="03000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf250e00000004002101bc001180b8000580b4000080b0000380040002008c0001802c0001800400080004000b00040008000400010004000a0005000d000100000004000a00060004000900000020000180080002000600000004000a00040008000500070007000000040009001000018004000b0004000a00040001002c00018005000600010000000800020013050000080002000100000004000b00050006000700000004000a001c0001801800018004000c0005000600030000000400090004000100"], 0xd4}, 0x1, 0x0, 0x0, 0x4085}, 0x240180d1)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) (async)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) (async)
r4 = socketcall$auto(0xa, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae60, 0x10000000000402) (async)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd})
ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0)

1m59.642754012s ago: executing program 8 (id=1017):
socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
fsopen$auto(0x0, 0x6)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
prctl$auto(0x1000000003b, 0x400002, 0x0, 0x5, 0x8000000000000005)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x100000000, 0xdf, 0x4000000000009b72, 0x2, 0x4)
openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0)
write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10)
mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
sysfs$auto(0x2, 0x3c, 0x0)
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040), 0x0)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
unshare$auto(0x40000080)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/query\x00', 0x42e01, 0x0)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840)
madvise$auto(0x110c230000, 0x1, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000)
io_setup$auto(0x7ffe, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m54.387684686s ago: executing program 8 (id=1026):
socket(0x11, 0x80003, 0x300)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
r0 = getpid()
r1 = gettid()
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0)
openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x420800, 0x0)
bpf$auto(0x0, 0x0, 0xf)
rt_tgsigqueueinfo$auto(r0, r1, 0x1f, 0x0)
msgctl$auto_IPC_INFO(0x10000, 0x3, 0x0)
socket(0x18, 0x3, 0x2)
socketpair$auto(0xfffffffd, 0x93, 0x7, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
symlink$auto(0x0, &(0x7f0000000040)='./file0\x00')
io_uring_setup$auto(0x6, 0x0)
io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x10, 0x0, 0xf2a7214)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001b40)={0x28, r3, 0xd0d58b333228212f, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SSIDS={0xc, 0x2d, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @u32=0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004050)
sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)

1m52.808962581s ago: executing program 8 (id=1029):
setfsgid$auto(0xee01) (async)
setfsgid$auto(0xee01)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
mkdir$auto(&(0x7f0000000300)='}[,&*}\x00', 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/pci_bus/0000:00/rescan\x00', 0xc2801, 0x0) (async)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/pci_bus/0000:00/rescan\x00', 0xc2801, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(r1, 0x0, 0x6) (async)
write$auto(r1, 0x0, 0x6)
mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xcf, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async)
r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000580)={@sival_ptr=&(0x7f0000000340)="7b88298e507254d338d3a3209374d8b5433984351689522bd4697e4383eb6585bceb0535d2267565589724287ef45943cd5bf42dc9a51755723a605d14c3b8fbd12c12662bde81e34180377044e8fb06f21632e88d51422020356eee9965c408e7e88ab71035369109b8b4f5aab5e9b2e02c6fe7ce09eaaa5f4999c6ebc939ef54d0327b3f67e8cdfa5975504fa4dd27e26c8eaef9b239368d9652034a424778ca9074b813c713a187ad8012fa02c345c52dbf23c68843ee90efcd4cdc6aa5b2b897e7d73c61eb7dce863330c18a9c8b59", @inferred=r3, 0x9, @_sigev_thread={&(0x7f0000000480)=&(0x7f0000000440)=0x6, &(0x7f00000004c0)="b5c42831c354e12ef6a6b730cbfbbcedcf11518408a165a87740b6947483e1c4e73bab22ea0185918bd775b2b35151f2b532662c0547c10104123f229572f740476425107b842aaf8b274469b31eabb048e0c831603b4933124a0cd0de6445d36db69453f3066bf002cd7e7b2a224395604e02e6dcdbfe72307e08a2551d8e58d46167b4caaea44e0a9efe5025d296d3fa7bf41ad00b42b2d4ed3df85fb6"}}, &(0x7f00000005c0)=0x15)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3})
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0)
ioctl$auto(0x3, 0xc0303e03, r2) (async)
ioctl$auto(0x3, 0xc0303e03, r2)
statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x96f0, 0xb, 0x56b9, {[0x2c7e, 0x3]}, 0x10001, 0x8, 0x8, [0xa4, 0x3, 0x6, 0x9]})
ioctl$auto(r0, 0x4008550c, r0)
write$auto(0xffffffffffffffff, &(0x7f0000000300)='//\xf2\x02\xaa\xf3npn\xbdu\xa2\xbd\xb2\xc1\xf7c5\xcf\x93\x14\x1b\xca\xbd\x1e\x93\xe5\xf5\x166\x00\xe0\xe2]\x82\xfa\xe3_\'\xcfys\x92$,Ag\xca\xa77\x8b\x05\x15\x8b\x15\xb5%\xf5\"\x13\xc8s\xaa\x00\x00\x00\x00\x00\x00\x00\x00\xd1\x98e7\xb3]v\ae~\xed\xc1v\xc6\xde\xca%\xcf\x00', 0x80000002)

1m52.471748793s ago: executing program 8 (id=1023):
process_vm_writev$auto(0x0, &(0x7f0000000280)={0x0, 0x600000000}, 0x1, &(0x7f0000000340)={0x0, 0x9249}, 0x9, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0)
ioctl$auto_USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x400)
mmap$auto(0x0, 0x400008, 0x400df, 0x9b72, 0x2, 0x5)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x16, 0x2000000004, 0x3, 0xd3, r0, 0x1000000fff)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x288400, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket(0x2, 0x80000, 0x20000)
io_uring_setup$auto(0x7, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose3/queues/tx-0/tx_maxrate\x00', 0x64401, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
unlink$auto(&(0x7f00000002c0)='}[,&*}\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHY_GET(r2, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x2c}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0)
write$auto(0x3, 0x0, 0x6)
write$auto(0x3, 0x0, 0x6)
read$auto(r1, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x1, 0x2a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
pwritev2$auto(r5, &(0x7f00000003c0)={0x0, 0x5}, 0x8000008000000004, 0xffffffffffffffff, 0x397b024d, 0xb)

1m43.597551873s ago: executing program 9 (id=1047):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0)
r1 = socket(0x10, 0x2, 0xf) (async)
mmap$auto(0xfffffffffffffffc, 0x400005, 0xe2, 0x13, r0, 0x8000) (async)
mlock2$auto(0x1, 0x8001, 0x0)
madvise$auto_MADV_GUARD_REMOVE(0x5, 0x18, 0x67) (async)
bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, <r2=>r1, 0xffffffff}, 0xd)
bpf$auto(0x3, &(0x7f0000000280)=@bpf_attr_0={0xfffffffc, 0x0, 0x1000, 0xf74, 0xa63, r0, 0x101, "1d5557a38c8eaa03c1481e612eb415c5", 0x0, r2, 0x9, 0x2, 0x6, 0xa2, r1, r2}, 0xa) (async)
madvise$auto_MADV_GUARD_REMOVE(0x7fffffff, 0x9, 0x67) (async)
madvise$auto_MADV_GUARD_REMOVE(0x100, 0x3, 0x67) (async)
write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)

1m43.353271506s ago: executing program 9 (id=1048):
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r0 = getpid()
r1 = gettid()
mmap$auto(0x1fffffa, 0x400010, 0xdf, 0x9b74, 0x2, 0x8000)
r2 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
lseek$auto(0xffffffffffffffff, 0xfffffffffffffffd, 0x1)
write$auto(0x3, 0x0, 0x7fffffff)
r3 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_HSR_C_GET_NODE_LIST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042500fedbdf2505000000060006000700000008000300090000000a000500aaaaaaaaaa1300000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x804)
write$auto(0x3, 0x0, 0x100000000)
sendfile$auto(0x1, 0x3, 0x0, 0xf4c)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r4, 0x114, 0x8, 0x0, 0x4)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x9, 0x1, 0xffffff7f, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66d54a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7)
socket(0x28, 0x5, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000)
socket(0x10, 0x2, 0x4)
rt_tgsigqueueinfo$auto(r0, r1, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r0}}})

1m43.32137963s ago: executing program 9 (id=1049):
socket(0xf, 0x803, 0xfffffffc)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0)
ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0)

1m43.269439222s ago: executing program 9 (id=1050):
r0 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x143382, 0x0)
preadv$auto(r0, 0x0, 0x5, 0x1ff, 0x81)

1m43.207291833s ago: executing program 9 (id=1051):
r0 = socket(0xa, 0x3, 0x3b)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0)
r1 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r1, 0x29, 0x18, &(0x7f0000000040)='!\x00', 0x1ff)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
setfsuid$auto(0xee00)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r0, @ANYBLOB="2f212cbd7000fcdbc0e0255d300400000000b750ef6f5c9e7a85b4ce18ac6c9b4e8ec8a508288f993c851b2d7af3b21a048b69bf96c7ccc130780af3c7c7c2d722499c560e36af19", @ANYRES32=r1, @ANYBLOB="0100e5ff"], 0x20}}, 0x4000000)
sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000001e80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB="800f30e0", @ANYRES16=r3, @ANYBLOB="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"], 0x1028}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, 0x0, 0x24040000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0)
readv$auto(0x3, 0x0, 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setxattrat$auto(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, 0x4)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4)
mmap$auto(0x0, 0x8, 0x3, 0x1000000000eb1, 0xfffffffffffffffa, 0x8000)
r6 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/airtime_flags\x00', 0x82, 0x0)
r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r7, 0x0, 0x1f40)
write$auto(r6, 0x0, 0x3)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYRESDEC=r2], 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x40800)

1m42.262992651s ago: executing program 9 (id=1053):
socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x81, 0x2, 0x40eb2, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
read$auto(r2, 0x0, 0x9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r2, 0x408010)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto(r4, 0xc0045520, r3)
write$auto(0x3, 0x0, 0x100082)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r5, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)

1m37.488293918s ago: executing program 39 (id=1023):
process_vm_writev$auto(0x0, &(0x7f0000000280)={0x0, 0x600000000}, 0x1, &(0x7f0000000340)={0x0, 0x9249}, 0x9, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0)
ioctl$auto_USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x400)
mmap$auto(0x0, 0x400008, 0x400df, 0x9b72, 0x2, 0x5)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x16, 0x2000000004, 0x3, 0xd3, r0, 0x1000000fff)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x288400, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket(0x2, 0x80000, 0x20000)
io_uring_setup$auto(0x7, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose3/queues/tx-0/tx_maxrate\x00', 0x64401, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
unlink$auto(&(0x7f00000002c0)='}[,&*}\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHY_GET(r2, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x2c}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0)
write$auto(0x3, 0x0, 0x6)
write$auto(0x3, 0x0, 0x6)
read$auto(r1, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x1, 0x2a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
pwritev2$auto(r5, &(0x7f00000003c0)={0x0, 0x5}, 0x8000008000000004, 0xffffffffffffffff, 0x397b024d, 0xb)

1m26.940378148s ago: executing program 40 (id=1053):
socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x81, 0x2, 0x40eb2, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
read$auto(r2, 0x0, 0x9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r2, 0x408010)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto(r4, 0xc0045520, r3)
write$auto(0x3, 0x0, 0x100082)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r5, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)

22.470046746s ago: executing program 1 (id=1284):
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="17000000", @ANYBLOB='j\x00%', @ANYRES64=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x9, &(0x7f0000000100)={&(0x7f0000000140)="8e98c3b17cec487061f7f2e4857e2441214c822974516459acc9844fa0dcc46dff1f9926ef8b81f87787d6322f6997af9ab78c900b", 0xfc2}, 0x2, &(0x7f0000000340)="c6be7c46d1c0205285a3730ec78054a7c95dbf7d473eb0e4df27e1de3541350cedb96e1b2061d6b44a93fa4c6cd04f3603fb2982ce1e0d2764a6b626d0f755178a4c6e48d84f10dcd3e4df231dc22defe60fdc8a6e2a046192a5e2851ae39ebfab516db8131b3436715c34d42e8e59523dc27f0d3d236a64018c9bb86d7bc6a4ed5aca29cd0fd796ff777d73300a9f4abdd2a83b76dc5a6d90f078b506bc6293362f2334a969f839d02d9862", 0xb0d8, 0xa505}, 0x860}, 0x7, 0x4008)
r1 = socket(0xa, 0x801, 0x84)
connect$auto(r1, &(0x7f0000000080)=@generic={0xa, "509235679a5532c63bacddae0710"}, 0x54)
mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd11/queue/iostats_passthrough\x00', 0x2a001, 0x0)
write$auto(r2, &(0x7f0000000180)='#\x00T\x8e\xf2\xd3U\x1c\vAZ\x84\xd8\x1ds{\xeaS3{\bC1\xff\xb8mw{\x00\x8d\xa2\x04R\xa47\x00\xaa\xe98\x92E&\x93\xe0%\xd4Xx\x10\xc6S<\xc7\xce\xbc8X\xebm\x15\x95I\xf1C\xc6\xf8\xb9\xc7_\x80\xbe', 0x81)
capget$auto(0x0, 0xfffffffffffffffe)
setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow\x00', 0x40, 0x0)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x2a02, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8)
pread64$auto(r4, 0x0, 0x10001, 0x830)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7e}, 0x40000000000009)

22.260169163s ago: executing program 1 (id=1285):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0)
r4 = socket(0x2a, 0x2, 0x1)
mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000)
connect$auto(r4, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57)
write$auto(0x3, 0x0, 0x3f00)
ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5)
ioctl$auto(r3, 0x4008af23, r2)
r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r5, 0xc0686611, &(0x7f0000000080)={0x17, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x9})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="ff070000", @ANYRES16, @ANYBLOB="01002cbd7000fddbdf25280000000800070000000000"], 0x1c}, 0x1, 0x6000, 0x0, 0x1}, 0x20008800)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, ':fR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r7 = pipe$auto(0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x5c3d81, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r8)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fbdbdf25040000002d0011"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="019c66492600ffdbdf250a0000fcffffff006e6574646576000082f1c0417440"], 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810)
sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="8800000010fa597a6e5d403202cea83d10a6ac6086cb32eb29afad6806a5b981c8a32aac01bfbaf0849b6756d890fea0b00818413f0f5ca00778c8a7b94a002bcdde3417ae8a528e2c322884d5639550d0011ffb02a8df71e42acb53d5a0a4c96f1847e02d213c08e5b500468d2d4206bf4be2d1f3f390e0c23a7ab37c696600ed23f7efb06b6ec4e6207fcff651db43c9c0de8eaa", @ANYRES16=r11, @ANYBLOB="20032cbd7000fedbdf250a000000130002004d414338303231315f485753494d00000600010003000000130002004d414338303231315f485753494d000008000a0003000000060002005c00000008000a00070000000600010007000000130002004d414338303231315f485753494d000006000100040000000600010009000000"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0)

21.679277416s ago: executing program 1 (id=1287):
mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x101000, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x805)
r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080), 0x448000, 0x0)
fsopen$auto(&(0x7f00000001c0)='nfsd\x00', 0x1)
readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400)
read$auto_vhci_fops_hci_vhci(r0, &(0x7f00000004c0)=""/4096, 0x1000)
rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00')
read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000200)=""/155, 0x9b)

21.458366s ago: executing program 1 (id=1288):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r0 = socket(0x18, 0x800, 0x0) (async)
r1 = socket(0xa, 0x3, 0x3c)
bpf$auto(0x6, &(0x7f0000000200)=@link_create={@prog_fd, @target_fd=r1, 0x80000001, 0xbca, @kprobe_multi={0x5, 0x6, 0x4, 0x8, 0xc66}}, 0x101)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
symlink$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
write$auto(r1, &(0x7f0000000080)='+&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f)
ioctl$sock_SIOCGIFINDEX(r0, 0x40047459, 0x0)

21.241992184s ago: executing program 1 (id=1289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="e5b725bd7000fcdbdd25190001800800030007000000"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x4dd8, 0x5)
syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
write$auto(r0, &(0x7f0000000040)='\n\x00\x00\x00', 0x57)
sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRES16=r0, @ANYRES32, @ANYBLOB="8df04c6397effded01ed59c31b986ced2350ecf3774502dafc6ad07c6854ee370a8b9f9b6a0b55b3db02a3d15f6d66e51482f1473bc692f1cd3f9ca4bb6709000000000000004041684575f7e22efd70f540fa3ac93497992dbc4512a1a73e7ef17098ef6c2d068f26f1e29cfc05a7dc40c9a996c41282d5c483426c1bdc61646f0c08348699025a44938038dce6fadf82e7ba", @ANYBLOB="10a40a18dbc4822a6153b1362402bd7743c9658115e1c32baede0318dcce1c4138aa5fd2"], 0x28}, 0x1, 0x0, 0x0, 0xd9752a8dcfd2e112}, 0x2004c005)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
mmap$auto(0x800000000000, 0x6, 0xdf, 0x13, r0, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r5)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="4e000140", @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf2512000000180001801400020076657468315f746f5f626f6e640000000800070001000000"], 0x34}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800)
msgctl$auto_IPC_INFO(0x45, 0x3, &(0x7f0000000200)={{0xff, 0xee00, 0xee00, 0x7fff, 0xb61, 0xa, 0xe17}, &(0x7f0000000180)=0xbf, &(0x7f00000001c0)=0x1, 0x4, 0x8000000000000001, 0x8000000000100001, 0x0, 0x10, 0x7, 0x7ff, 0x2, @inferred, @inferred=0xffffffffffffffff})
sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r4, 0x0, 0x6081)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw=0x2000000000000000, 0x2, 0x0, 0x929, 0xe5c3, 0x7cd, "abfd2e69df26f540a1d76b645086c3ed69a359d46ed201e13aea69af"})
close_range$auto(0x2, 0x8, 0x0)
socket(0x23, 0x80002, 0x73)
r7 = socket(0xa, 0x2, 0x73)
mmap$auto(0xfffffffffffffc, 0xd8f0, 0x100000001, 0xeb1, r7, 0xbf47)
madvise$auto(0x0, 0x8, 0x15)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x16b802, 0x0)
mmap$auto(0x0, 0x4020005, 0xe3, 0xeb3, 0x401, 0x8000)
unshare$auto(0x3ff)

20.053111365s ago: executing program 1 (id=1296):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async)
sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x20000000)
mmap$auto(0xffffffffdffffffc, 0x2020006, 0x202, 0x14, 0xfffffffffffffffa, 0x400006) (async)
ioprio_set$auto(0x9, 0x0, 0x6) (async)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_stats\x00', 0x600580, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000400)=""/232, 0xfdef)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0)
ioctl$auto_VHOST_SET_MEM_TABLE(r3, 0x4001af84, 0x0) (async)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r4 = socket(0x2, 0x1, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0x16, r0, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55)
write$auto(0x3, 0x0, 0x5c8) (async)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async)
sendto$auto(0x3, 0x0, 0x47, 0x101, 0x0, 0x5)
getsockopt$auto(r4, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x18) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x408a0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) (async)
io_uring_register$auto(0x2, 0x0, 0x0, 0x3)

9.166427805s ago: executing program 3 (id=1334):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mount$auto(0x0, 0x0, 0x0, 0x1ff, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x2, 0x801, 0x106)
socket(0x10, 0x80002, 0x0)
io_uring_setup$auto(0x6, 0x0)
timerfd_create$auto(0x0, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/topology/core_cpus_list\x00', 0x169000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/218, 0xda)
write$auto(0xffffffffffffffff, 0x0, 0x8)
write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c\f\xb6,NS\xa2(Q\xcc', 0x7f)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0x2020007, 0x3, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
syz_clone(0x411, 0x0, 0x5a, 0x0, 0x0, 0x0)

8.6745468s ago: executing program 0 (id=1335):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/phonet\x00', 0x42000, 0x0) (async)
io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) (async)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
clock_nanosleep$auto(0x8, 0x1, 0x0, 0xffffffffffffffff)
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
io_uring_enter$auto(0x3, 0x4, 0xffffffff, 0x6, 0x0, 0x2) (async)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000002100)=""/15, 0xf) (async)
sched_get_priority_min$auto_SCHED_EXT(0x7)

7.808310748s ago: executing program 3 (id=1336):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.prio.class\x00', 0x183042, 0x0)
sendfile$auto(r0, r0, 0x0, 0x10001)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x81)

7.581309413s ago: executing program 0 (id=1337):
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2a4803, 0x0)
writev$auto(r0, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lstat$auto(0x0, &(0x7f0000000180)={0x1, 0x100000000000001c, 0x27fffffffffa, 0x63, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000008040000a, 0x3, 0x7, 0xc, 0xffffffff80000000, 0x800000000000b, 0x2, 0x240000100103})
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
r1 = socket(0x10, 0x2, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x8014}, 0x4004)
r2 = socket(0x10, 0x2, 0x4)
ioprio_set$auto(0x2, 0x800000000, 0x8)
clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x24, 0xf, 0x63, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x60, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r3, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe, <r4=>0xffffffffffffffff}, 0x47)
clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x42000, 0x0)
ioctl$auto(0x3, 0x541b, 0x7f)
prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80004)
write$auto_set_tracer_fops_trace(r4, &(0x7f00000003c0)="b49af5e533978df73e405d57a63daee900672037c7ae20566617be3b21b725689abdcbb22c7537e2ba25874b4bc12ed1a5cd544a435812408f1d60232019b282ae32dd2b47fca67299ffd52462d9e2e14c448a61e69102124b7099678c6cb185b4854589607b22e3930ee447cb47224122db3c558cfe925c94c22c3a7aa99992752b6912cc4346b95d0662061acff7", 0x8f)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x42000, 0x0)

7.523303646s ago: executing program 3 (id=1338):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32)
sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_NAME={0xa, 0x2, '(,([\xa2-'}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffff}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x1}, @NFC_ATTR_DEVICE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '$'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '.'}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x401}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x4)
personality$auto(0x4)
unlink$auto(&(0x7f0000000180)='./file0\x00') (async, rerun: 32)
r2 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/format\x00', 0x252000, 0x0) (rerun: 32)
read$auto_ftrace_event_format_fops_trace_events(r2, &(0x7f0000000240)=""/42, 0x2a)
r3 = fanotify_init$auto(0xc, 0x8)
ioctl$auto_SG_GET_TRANSFORM(r3, 0x2205, &(0x7f0000000280)="03fb268a66c0a4f31822ed67218ac543f7e8c514509e2f82456a7dac22517ba42a0a3827ab292b9993badc85401025c660bd2baab7504e8554e5680930625054894dad3616a7b14bb93a65610a089789cda7752075d53d2283a6f08fa5f71249a66a2e1df8ef37e6a5c192ec1e5375c96d47a9132a9a0bb0ed0528c7a6146efda64ada2f59cbb78b05b7d13a4dd904e850711b9a97150aacc19d7aa9be55edc365383b419e22f22e2f7555") (async)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x228, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_FTM_RESPONDER={0x1c4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xcd, 0x3, "e5478f892c3c9b6bd53f8331a35abb98aa0e4d7f7c12f763171b2d14fe15f1988b495e1768f844ab816329433a52536be219c3a766f34e8f46b29f2eeb0b39b1e5853239beb36f966aa527ad0b26a9709f354d624a899d46d33209a7d3101dcd28c2e91890d325ab0956554b867014ae338b3bbe2bd68d13800c47a15f45210b7df1a2ee41f532023981eae0e449fe52f92a2f6a51890ae5e8f016dbe8a9ac2e3e20473e2ae0cf3c0e12898913c28c766de81af26045015ce4d085a1b628adc9766a217d7810b3d977"}, @NL80211_FTM_RESP_ATTR_LCI={0xef, 0x2, "8eac07e25e0e206e7c4c470517c80c8b43a38cd37d33a50c2876f9ee040a9b81bf8ed9681e678a69b7fd6dc7024f61d2608b3d944a898e3efb4553fe69b3507c64563b52de058ae3f6f1fe24e9f498467001fcf430ed24b49ff98b2390f42abe502de294e416a2c26646cc7f80e8e9ab95098507b6702218bc7fed067a9e1e7f11ed46816c4fddf0e10ad7d95797a3304d914049bf78ba40e2ba48345ba392a8dd3d42951b8cfaaf11c9fb4864a95e7ccfbe507eb6149ba1641f3bc9e6c9c2cd2dce6d46184c2d59ae63ac83749f2683930a4ff5ca0eb4b59d383f9b2fcd11b65ea0719bc7778d0552b5c3"}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfff}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x2c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xcd}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6f}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x84}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4040000}, 0x40440c0) (async)
r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000680), r3)
sendmsg$auto_IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000)
r5 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000007c0), r0)
sendmsg$auto_NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1b4, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x10}, @NLBL_UNLABEL_A_SECCTX={0x60, 0x7, "a8014a4557fc5c78bb35ab7b4d1b3b2e195a6ded4668952f115cbe6056e57851bc4846c898c9334b3a4c73595a8ba024aff240a1a04c2ff478963c6a49041ce8ef7c4148803149bfea8af308baec67f5866ebe4136694075b232f111"}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0xfd}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0xef, 0x7, "f5b15db551ac9e17ee40f8e523c6d6708490657d6d7fbae7106c6a4c9d2acc5a02f3557848ebb1a42e89266ecd59a14f3a8f41aa816a7bcae7335f3c740b8c4bd5d039c031219dc3dfbb8d1d8562ab4a1b9a1c27941d6061410ac9c5f4a08b9599e2747bd778c4a2d7b0674f4e4d5d57fa2a2c1239a8374130db3bb63ef57878baded48e6a9c346057f065f3a3d3cb1bc93aebc017ef805b6ae34136b01496649c57740a8daf94dbfe40bce5ee1c5c3d9a3016810d0f29d8644b220db356abd065145db3f84e57d2abc4bf8e716eb1c03f8f4afbc2dcbe21032e931b5a74d8aef21d56d4507e2da45bf3ab"}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x810}, 0x4) (async)
r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000a80), r0)
sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_THROUGHPUT={0x8, 0x1a, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x4}]}, 0x34}}, 0x840) (async, rerun: 32)
r7 = socket(0x1e, 0x6, 0x10001) (rerun: 32)
sysinfo$auto(&(0x7f0000000b80)={0x8, [0x1, 0x7, 0x2], 0x3, 0x3, 0x2, 0xffff, 0x6, 0xe, 0x6, 0x0, 0x7, 0x4})
ioctl$auto_XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000c00)={<r8=>r0, 0x7}) (async)
r9 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000c80), r7)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', <r10=>0x0})
sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r8, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r9, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r10}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x2}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0xc55a}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x80}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x200480c0)
mmap$auto(0x1ff, 0xffffffffffffffff, 0xfffffffffffffff9, 0x90, r0, 0x101)
r11 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/thread-self/smaps\x00', 0x400, 0x0)
bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)=@bpf_attr_1={<r12=>r11, 0xb4, @next_key=0x9, 0xffff}, 0x305) (async, rerun: 32)
r13 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000f00), r3) (rerun: 32)
sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r12, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8030}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r13, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000090) (async, rerun: 64)
sendmsg$auto_IEEE802154_SET_MACPARAMS(r3, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x401d}, 0x8000) (rerun: 64)
sendmsg$auto_IEEE802154_SET_MACPARAMS(r8, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x6}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xc}, @IEEE802154_ATTR_ED_LIST={0x1f, 0x16, "edba36f42b55e89fd07c20914dd632ee4091bcd5977a5d8e7c55f3"}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async)
setsockopt$auto_SO_DOMAIN(r7, 0xffff, 0x27, &(0x7f0000001240)='/proc/thread-self/smaps\x00', 0x1)

7.21007785s ago: executing program 0 (id=1339):
r0 = socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
setsockopt$auto_SO_RCVBUFFORCE(r0, 0x5, 0x21, &(0x7f0000000000)='@\x00', 0x4) (async)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={0x0, 0x96bc}, 0x2, 0x0, 0x7, 0x4}, 0x9}, 0x7, 0x4008) (async, rerun: 32)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) (async, rerun: 32)
read$auto(0x3, 0x0, 0x7fffffff) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
umount2$auto(&(0x7f0000000040)='.\x00', 0x5) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000)

7.13379846s ago: executing program 3 (id=1340):
mmap$auto(0x40000, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x0)
unshare$auto(0x40000080)
setfsuid$auto(0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r1, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x15, 0x0, 0x1, [@typed={0x7, 0x1, 0x0, 0x0, @binary="59f8ca"}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771fdc19f1779048590822ad9"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002a80), r2)
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x881}, 0xc810)
r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f00000000c0)=@enable_stats={0x6}, 0xc0000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto_proc_pid_maps_operations_internal(r4, &(0x7f00000020c0)=""/4093, 0xffd)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x28c2, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video48\x00', 0x16ba00, 0x0)
ioctl$auto(r7, 0x80885659, r7)
unshare$auto(0x40000080)
r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0)
pread64$auto(r8, 0x0, 0x8, 0x8000)
r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x8402, 0x0)
ioctl$auto_TIOCGETD2(r9, 0x5424, &(0x7f0000002cc0))
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0)
read$auto(0x3, 0x0, 0x80)

6.822364617s ago: executing program 0 (id=1341):
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
semctl$auto_SETALL(0x0, 0xc, 0x11, 0x3a0000)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x6) (async)
close_range$auto(0x2, 0x8, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x181}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_register$auto(r1, 0xfffffffe, &(0x7f00000003c0)="5606b85535cf44f24a470573885b67d50902369d9dc495871e9a9e6585f157ee56d3ae4557c381a6022dd19ddcb94f0440bec8a545c7d3fffaf02730335625bf12725f23007638d145aa1f4092e9890000007ddda17c6983db77b45b5b2ef700"/114, 0xfffffff9) (async)
io_uring_register$auto(r1, 0xfffffffe, &(0x7f00000003c0)="5606b85535cf44f24a470573885b67d50902369d9dc495871e9a9e6585f157ee56d3ae4557c381a6022dd19ddcb94f0440bec8a545c7d3fffaf02730335625bf12725f23007638d145aa1f4092e9890000007ddda17c6983db77b45b5b2ef700"/114, 0xfffffff9)
madvise$auto(0x0, 0x200007, 0x8)
setresuid$auto(0x0, 0x0, 0x0)
setuid$auto(0x0)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
ioctl$auto_TIOCGPTPEER2(r1, 0x5441, 0x0) (async)
ioctl$auto_TIOCGPTPEER2(r1, 0x5441, 0x0)
fsconfig$auto_FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f00000002c0)="06a1f7bb16f81b18c75bba10364b2b43efade5a9fef65e8cba91629684e24e9012362e6f7621dda06775d495247bffd802edbe6936a3d60d7197486748a7ca1dbba3263ecc6f5d767c247ba51887180a1ea82a0ba08e579f51b654b5807d910c2cc2b9a2e30234d92ffc6c2dc1fc6c4308f9fa311915ede69fe215eaaccba42e3cbbd8ed8daf77928b11be75e2e7b0f1b21045546b66d819903a254c168adfa0d50bf32a0d86c6274a618b346c5a9f63f5d5b0401c51c88ef282b5d8195626fe0749013c32a20163e61e6c5bc2bffb8ab5adda9eabfa9d55f0406788cacc20867c02743abb7b0ef7fe7871b91661642558035c211261ec", 0xffffffffffffffff)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0xd00, 0x0) (async)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0xd00, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon33\x00', 0x121200, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x206200, 0x0)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRES16=r1, @ANYBLOB="08002dbd5f00eddbdf250e0000000500120040000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) (async)
sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRES16=r1, @ANYBLOB="08002dbd5f00eddbdf250e0000000500120040000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000)
io_setup$auto(0x7ffe, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram7\x00', 0x6af970bd8aeafe47, 0x0)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop14\x00', 0x400, 0x0)
ioctl$auto_HDIO_GETGEO(r4, 0x301, &(0x7f00000004c0)="a097ac3a533408960b39941b04e7d20c2897ecd48b6661586266259f4e161778e0b24ecc4eed27ee2fb710b1352bbb8c0858c499cca02f1e6d5370e397b95d0ce2f8e855ce0dd8a06f5abf90241e51eacff7a6f69169fa834c77e62141a1556ee63ce29e9a000000004fe77149d5009c7419c2a44245f65c77c92555fecb6b1e918269d68000000000000000b89c4cc4589acc7dd2c272d0b86aa5d7bff0958b3ae909a1d5433345216c505bd124e7ed0a175cf02fd8fbc0c79dcc03e59c8a000022fdc688ccf1b28be08eb2424d778d7c56f3d5e6ca425000"/231) (async)
ioctl$auto_HDIO_GETGEO(r4, 0x301, &(0x7f00000004c0)="a097ac3a533408960b39941b04e7d20c2897ecd48b6661586266259f4e161778e0b24ecc4eed27ee2fb710b1352bbb8c0858c499cca02f1e6d5370e397b95d0ce2f8e855ce0dd8a06f5abf90241e51eacff7a6f69169fa834c77e62141a1556ee63ce29e9a000000004fe77149d5009c7419c2a44245f65c77c92555fecb6b1e918269d68000000000000000b89c4cc4589acc7dd2c272d0b86aa5d7bff0958b3ae909a1d5433345216c505bd124e7ed0a175cf02fd8fbc0c79dcc03e59c8a000022fdc688ccf1b28be08eb2424d778d7c56f3d5e6ca425000"/231)
fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) (async)
fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0)
write$auto_sg_fops_sg(r1, &(0x7f0000000240)="4a0200000000040000000000000000000700924d1b3c5d2e00000000fdd2adc245a4fe3a61af156016d2e122228118b035ab6f7e46cbe922896e7e796fec3370fd6cf2d037d9f213d48b743bd7804490341927d618b20f562edf1261d0", 0x5d) (async)
write$auto_sg_fops_sg(r1, &(0x7f0000000240)="4a0200000000040000000000000000000700924d1b3c5d2e00000000fdd2adc245a4fe3a61af156016d2e122228118b035ab6f7e46cbe922896e7e796fec3370fd6cf2d037d9f213d48b743bd7804490341927d618b20f562edf1261d0", 0x5d)
pipe$auto(0x0)

6.164654136s ago: executing program 7 (id=1342):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYBLOB="010025bd7000fcdbdf2502"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb000000)

5.836410461s ago: executing program 7 (id=1343):
r0 = socket(0x2, 0x1, 0x106)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r1, 0x1, 0x7ff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/bus/usb-serial/drivers/omninet/new_id\x00', 0x40180, 0x0)
read$auto(0x3, 0x0, 0x7fffffff)
ptrace$auto(0x9, r1, 0x8, 0x6)
socket(0x2, 0x801, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66)
mremap$auto(0x80000001ff000, 0xff, 0x3, 0x3, 0xfffff000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x7fffffffffffffff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb5, 0x401, 0x8000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event1\x00', 0x0, 0x0)
ioctl$auto_EVIOCSMASK(r2, 0x40104593, 0x0)
ioctl$auto(0x3, 0xae41, 0xffffffffffffffff)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pwrite64$auto(0xffffffffffffffff, 0x0, 0x400000, 0xc)
bind$auto(r0, &(0x7f0000000040)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, 0x6a)

5.388891523s ago: executing program 7 (id=1344):
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x80000012, 0xfffffffffffffffb, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r1 = mq_open$auto(0x0, 0x7e, 0x9, 0x0)
mmap$auto(0x0, 0x1000400008, 0xdf, 0x800000000012, 0xffffffffffffffff, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0)
ioctl$auto(r3, 0xc0046209, r2)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k\xc9\xb7\x80T\xd0\xc2\xa0\a\xf6*:\xb7_\xf1\xb1yx\xc8\x00\xf1\xf9\x87\xa4D\xf4S\xda\xa9Y4*\x1a[\xcdv\x83q\xab\x1aK8 \xe9\xf7TU\xc6\xe3~\x92S\xef\x9c\xc0\xc9\x04/\x18\xf1\xe2\xe4_\xfa{\xe0DB\x1d\x83e\x12*\xa0K\xc0`\nt\xf5\xac$\x94\xf0>\xceXs\xb5\xd8dV\xc4lG\b~\x1cn\x80\xde?\xed~\xcfV\xcd\xdc\xdd\'\xc4^.=\xc4\x86\xce*\xba<\xbf\x19N\xc5~zFY\xc6\x90\xf6o>\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x2)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev6\x00', 0x80000, 0x0)
ioctl$auto(r5, 0xc0305602, r5)
ioctl$auto_SIOCGIFHWADDR2(r1, 0x8927, &(0x7f0000000640)="e99d18cdd18d6b7c5c184ff31031dd022e97381d95ea6c2bff0217a0883130e2e5dc4a74a1d9b4597dd5862ccb3142a9fba20c1b3353e9acc40390f7fb3733a514f3698c93e874a0bb995e4f79424e1b6fa5bed7c01fb308e440034241870bc533a36e8de76b4b39f73a681f8cfcbd46e6f0ad359252c509b2d492eda5b295932725379b0375c20de685d50412aa5695500c3dda13ee5159d6815727d70d67a4e539569af9292309b3535a2123c2a1eec845cdf691abd1250fee61c9d4bf90d1bde0b45413287c1e540a96c92b3c4984bac34738344896cde8d199d377b04bc12ccd80902f5128a767b8359c7ae6403ca9ec365fc393b0789b5dee93c3dfb1adc8284904c82fd4bddab890dc2762d7c73abf1c409b0668815be87dc55fff9e3c7f313801516c19c082fb372ce9e2047d7a76d638b411121c9ea5bbb35d24609b60033667ae83130950f6ac80512fa27b061c13229b8bbd9d13c0a2de688530a0bbced53ef686e099a0e38a22e037cd2aca4e9bd5e9df75713ca211710d788f7495b10bbf1df0a99ddbf3178115f18507240ea2d1152cba0ab7e50e42159aff74ea92943d8be141062b0669269ec637a85a804dfbeb2e4e9934cf2e9bcb1ba695effef89172c6069936ecadded780ecdb0026c31424bf225ab828c7dd96151caf621cce2d8c1c8c4d24b3ec94712d8141846b2d98ec54b24d870e866c9cc5bc1801ba86e68723b8e0efd61171313c71441380575494a6a45962187a9cb0719f7ada8c3126a5058cab5614788bdba65f9c6cbd883e878a16a5f7b7d1dc799447decd7d9e8542afd75e50dd9e40c629d5d9ccf646913ab782773c93e5cb43fef48b191feae4b0070719b662b4b30f46875e37f3eb6b2962b1e09cb8841254111ab20715c23cae9e39f246c3cfdda34f218a16a2cc3e13069d6da06beb12b849969afb8e9b35ba89cc76a31534878463b66e19a969555d3fe926472e49aaaea98c6b4bc80e3567376845d39cefba9789628d859c348ae337cfb86dc8d953906c14130038c2c789e7cc09e08d2dda87edab6dbba0f7e11cde7662cf7cdac4a2d9d2667bdb0526c10f5d66a0e130aa2e3db3855ecfb017925949c7ce51a0e531c20e2f24c8d46a7d11c5f964f8e2a6d8faf55a3d22c4666f3bd2747cefe7ef3b26688c6aec4eb890af317e5e2c544cc3b9d0f1cb03dc6219f22873bb3e70611f78d69e0216fb0fc10f755d30cc6f0c2d1bc62e4a355f85ea19896301342814b2ad82079070f43dd7432334dbd3e46df5588e9429de4d764dc1bad79802762c0103eb828e4d0a7ac12610ee644deb3d425ac49db60fb136c17727e03645f49d0cb503713deee760db3ed88a09d15129e27bd456b9e69df814dda8a4e8e50dfc3226fdf83e915b517b8cd5aaac8549ef4416743922a209d7f344f184eeeed04275866196ff50de82c25ee5a16839a3788bd9812ce6c8d6f05510a99135ce7cfbc5d5d3a384566022de99f27fb37c2f77661d9d0f55e8ddf92aa06b7e212cd679bcf5aa58760b505082fb89f7276984591dbc68edf797843b0c42fcb98ce498f01180d2d2ab51ea6486d1d31749ccb0a29e91bcea1e596b8fb56668d875aa69207dcd95a0ba7c5b058a76c4df777abf03bb114aefc518af7cc7eee91bebadb05d023c375b11c8639026251f0bb436423d56d6ddb778d5de4432449e4c8149182e3c37e5ddbda0f3613ec990dd43eaf903e494143b65295a11c28d1e74428ee4a53afc2ddc6b7b234c964dd0ef67b7c2b04c54b1139a0acf6e5718fa761597970138dbb06fc7bdd8c460c0ba9599237555a62bf57b3f69a53bc1ac842ccfb1e351221744ccf4f4fe3e28bd567d2e258913842862593fb8e1445aad5260478dd0bfe47a319e4717af66e0f7a94b0c4f065d66686265f86eec6c2ff85e5973022e2632f023e3c8fdbd464a6aa99d9abd8ec72ec50531a25c697dbdd098a268e9b2e264adc0e0b2f2c4e8a07b5fcdd15751421a7327d3c37fe2cb415deb41cf5e69fa2a239db4db13d13f2bf96c47473ff97316d32e035fee2b7d834e99db49259762b52d74dfce73e4a053a8a1ce18f156464a026630121d26de7bc72c92126bfeabb1679ba4ab5a663154e6c1fa4826fcd9fec99156bab9f2710e512568f1dee4c3b437d64060a585919567075fc301d4da5bfd79677e78f4993b88a0f1db8ec1820aaa9d326a26c981799a368efe20dbc6cdf66efeb392ed121bd1613e623b21bc3a8220a0ea9b095cd13058fee5917d15d658b3534151eea3abd27b9739dc917ce4c8fe62b6d6f0afcb1499c692177bb900b41d0aac9fee1257f4fcde6c16b8549c02688988037e4816af4f4c1f9861180002bc16c98febee880cf980faa7d10e38c4cb9edf13cf64c7ca5513ab54b887b79311954c604ede8228b3f92cdf300bf3e9a6da554a52b14e5666e2a7fac835f37117933939039a06bc8017798211d413dfa221ac6e23b1553fa7a30cd16fb9bdfb5660bd5bd62e203d01aca7f883fe163624a21f1e4918962d5cd99e331b3b9a92ef4f163fe9b8d533b388a9dc30101141da370872da3262cc66e4dcd491a5161ee5025cc4378c0e980e791ce2c616c2fad2da7ad6de8360ecc0c9f625ec6e11eb95bbabba096075cca66e957d92b6f187c87a1019164f63666815bbaf3138a7da433dcc5c12b25b4f40697876689dd1458011ffabde16d0ad712a04f52a3d7cff5ba8426948d9f6681097daef58459232a0042d78f6cce5315705d0010537769b2ac30ccc80ff5d2524c816d97aeb78db77d9920aa699482bc54db6bba75fd1f91a4936bec81082e7f9cecc59dc2ce2b452ca85fe21a416658a526fcbc42b473ab366a08f3a640f4181760276cc9add5ab032748e9a02288d8448eca16b9ad2453984914a9bcc662f09a6ff3695d0680f72bdc3fbe03d607702cc79ff227a127872ed552e5155fa8f5f784fdb7f430db2c3915cc2f68c72d09257a018bcc5df53518c936c48edd48554b1a7dbe9a1a5e82cf660314b9fc87c2b6a6f6a57eeb36aee47f305b352d8045743a37c313be2440cae6495dd8b4c92dd3e8a543c35943f4334a4ecbdfae731ecd36625b264c09da045434bc519094e67f52958042e9d4585e2561c1ba29f61c991e1627de90074fde09afd7b4b13f6ecb6df91937b9f95e52379801dfe8d450a31636f0f44613a83a24cb507debfd23418672d71dd2f9fca1b5a71eca9b010e684f940d9fdf013d9927a70f4012f64542dcabbfe842deff0fd92c36c1c2bdb86b1281dad5f84791f8ecfe4fbea23cc12b0a1c76c89427fa3abf6c795e6fae18e7b4e8ad3365ab5991e5b78e0a795a1326c49bf953c3f631280ed33f116c9747c3a4f2417d3fb04f670abdd84df1b315ff3e5c3168434953742364ae921d37c04d546a07b69308ea2f6bace37161f3ee834183522485ac84768729c21ec245b0cfa21506aff30661abd0a836f1ee6a7fbe3f95394c35055584cff4dac3ae6afbdfd72bc0ef5b566c096fc6c6c7f0807768541139a24c344b2c93dacafd79b545f652d482f65c020a7e4ce5797edabfe700e278dad8c43bde2c50b948efd47cf690f08bf72040fd0a4f794513ed2db0815b685fe784f981ad7e65efa6f5127532c6a0645a6765fa4c88307395db547f1283d6cd07d7f599ec2564d97f47ed21c9bdf0a7df44f3d944928a9186bac4c8433fd4613b61b710d1b39ae95dcefe8161735e316597397f095870f873519a44ebd69dcbbbeea18358888bb47a9eb0f24d85f297b947f94a653fb3d16874998d5487ed4691a8ee1a27bf8250b2331a57eb6380f98782ffa1e5aa32b682894bcb6b2ac13de16495282f3ad29537044a43b59a3bee2f53aab7c4cb87d4bec74b6121a2c67c9aac260a3adb49bb0bf44845f4b1902734f7d69d0f2165f1b38fc6a7993e9b9697ec3a503544bd08c517e1f97d2d734d9f26d29e4022611d1ae974baec593670cee104a95b2fa14b0f3dd33a59af71903e878c496fb71e3da468348140a0cfc9ac0460b44c842032437eafb52238cac7c14deb9dc410e0b5575b4500635030c7c5b23ee07b0a49a96c21cbc32092d3e1f10a62e4a9f95a9a2970c533d43e2f0e19a866288ed274a7ca461f52affe6868a1b426338c4586db731cdb821d579269504d6fe375149c2d3fc822b27519709a89f74437ac1d77005b3b9d2d8eb00f7a4d5b8930d9f47d71c7ff20939f102d02bb2124d49f39f8bae328b76042e3e66d56729cfe2be8303676cbff0bbe761cde333db50039a6782d3c6de826c93634e24bbaa46b03964b381085c577673b53a2368af2abfc05fce40ab38261b7bcc2ac89c42c381300273bd0b954708ab374f7602a3760b2cae67802ffbe4a92adc0ab328abbc7660381d93b1e1d7a87937552cff8166b22896999a12e2e96c604a1a5908589c9ca24da39952bd84ba153dc27f806af392ff44f5d8699d24d1e98f2cb66fa9c10630fe9019f3be5f80a74a279658f92b2b0bf461a732ec521d676bb6030974e1268e12ef613503ea5400dff71be5426b485ffb612d7f49075e2598abbfc410825fb46f6d4df49cd0ea0dce1651176da82894aecf0d362340c7a2cebe8f15cb47d6d1aee6349a41af4e6358bafa54fbcf22defc998bb005953939bccae771147eccfbbf73a6046c5d38a5a3fcc654b6c8a05464cddb16c41209228693516dbb311e6deab23f854f7380be3aaf1f0247bf103aae4e5f32c2a761351301fa38624724bfc85f26c4b35b2fc32c4f5930917cae8dbf53558f1b5a6a9233a0d3f0a484bbfef923eb19317abc4394240dc7313c9fc2b31e51319e6c4a4d7d4ab08fcbffa68d13f4e8b69d42bfc90292142e333fbc7714d8d69c3cd2698ca4e5e8dd643df36d0f1998922d3e75aa14e7cbe2c251223499676516850a1f570d5c523ed3491cecfa9224493c7b108c63b8bb66f35b21f55e11045947d914ccfdb0b0d779f59550de2b736e2b4e3fad2958d9d279030c2e3e651702536384c78aeebed15332216ca0cf960ddb2de6d142646a5cb58f3fa36cc4265fd74548389c47d17fe7c367e82b814dce1ffe040cf3b24663ba0525bdf899e4cafc53a1bf240f1649d12a7e933d15ba1f227d8fc303f634d58966e28b429b25054620ef9311510b037742b51340415cb2e692cd20cc5709821a63451acc3acf23404df6886e5cc04f8ab36da135702ae778a617819cf34c5406d62b55f59324e49a476d9bd4b6bac0eba99ff595a789b774e44ca0e2d0e4694416668a07aa2c7b7b9a9ebfc56ef0237e5ef36fd833b9229b3f205d1a8cddbc32664860e1d3fbc16e0e65a0b81a276427f98c1f867705c3b9c7815ef39408a903a4008ab1865d5fc049b6ab642d614eb49f921e1da09a1beca86364bea5d3003c9b921dcece4fdf143a527e7c02287bde1443ae10bab8c230c152164eee5f3e27105716b738b7710ee6a1d2ca82c711aa91d6d3a32d3325794ab7f9791f641118f4087a2dc8c6c0b45cb74b8deb6748535661a1ffe9a092627fc5928fd8a6c1cc17971ae11c5720c5f0b554b31dc4c5b438d130cd0bbf1e97c10b30388d5e080e9aee1bef94a2ec8edadc2b82962caf9b2a96f4b41c58d83fca0a9aea2ee74c3c9a365f49eb36a512df768041b5c089eeff1560adf3c35ef638dd33e3d23521601d20a78e2a64578ee58c9da7ca1ca8bcd9f45c55ca8998042dd76832cc485ba4e470a0f85c14419522542544db726de7f61210a44a188b9d35f3ca932f0f249fd6d42c86")
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)

3.543188964s ago: executing program 41 (id=1296):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async)
sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x20000000)
mmap$auto(0xffffffffdffffffc, 0x2020006, 0x202, 0x14, 0xfffffffffffffffa, 0x400006) (async)
ioprio_set$auto(0x9, 0x0, 0x6) (async)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_stats\x00', 0x600580, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000400)=""/232, 0xfdef)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0)
ioctl$auto_VHOST_SET_MEM_TABLE(r3, 0x4001af84, 0x0) (async)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r4 = socket(0x2, 0x1, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0x16, r0, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55)
write$auto(0x3, 0x0, 0x5c8) (async)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async)
sendto$auto(0x3, 0x0, 0x47, 0x101, 0x0, 0x5)
getsockopt$auto(r4, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x18) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x408a0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) (async)
io_uring_register$auto(0x2, 0x0, 0x0, 0x3)

1.311228642s ago: executing program 0 (id=1346):
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0x100, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x72b023b655859958, 0x800, 0x184)
r0 = socket(0xa, 0x3, 0x4)
r1 = getsockopt$auto(r0, 0xff, 0x6, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
mmap$auto(0x1, 0xffff, 0xbfb, 0x13, r1, 0x1007ffe)
clock_nanosleep$auto(0x1, 0x200, 0x0, 0x0) (async)
preadv2$auto(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x9}, 0x6, 0x3, 0x4, 0x2a) (async)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x20f01, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
r3 = clone3$auto(&(0x7f0000000180)={0x64, 0x7fffffff, 0x80000001, 0xfffffffffffffffd, 0x9, 0x5, 0xffff, 0x9, 0x0, 0x8, 0x1}, 0x200)
prctl$auto_SECCOMP_MODE_STRICT(0x7, 0x1, r3, 0x80000001, 0xa) (async)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r4, 0x8000)
ioctl$auto_FIFREEZE(r2, 0xc0045878, 0x2) (async)
mprotect$auto(0x1000, 0x401000, 0x4)
mmap$auto(0xffffffffffffffff, 0x202000a, 0xf, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x5) (async)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001e00)='/sys/kernel/debug/tracing/set_event\x00', 0x0, 0x0)
pread64$auto(r5, &(0x7f0000001e40)='\x00', 0x2, 0x1) (async)
ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) (async)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x25, 0x5, 0x2) (async)
rt_sigsuspend$auto(0x0, 0x8)

929.263597ms ago: executing program 3 (id=1347):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.prio.class\x00', 0x183042, 0x0)
sendfile$auto(r0, r0, 0x0, 0x10001)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x81)

826.075209ms ago: executing program 0 (id=1348):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x5, 0x0, 0x10000000000000, 0x2}, 0x885}, 0x1, 0x0)
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0)
read$auto(r2, &(0x7f0000000000)='veth1\x00', 0x10)
madvise$auto(0x0, 0xffffffffffff0005, 0x1b)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000003)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x40000080)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff)
getsockopt$auto_SO_PREFER_BUSY_POLL(r1, 0xeb47, 0x45, &(0x7f0000000040)='veth1\x00', &(0x7f0000000080)=0x4)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r5)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r7=>0x0})
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_ID={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'nr0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r9=>0x0})
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="740f010000008c73ff5c18071fb4413657ca839bf91e9368c84f714a98e09a7b5c5b4d0fb7678d1229e36932c3ccb6b667d53af00bab191cd3eb9894b8509db5b49436cce7882a3becc2d8b5af5e851939eec40bb4cf514e49506f5f4a90c180b194a12920c314b811a2c5eb068f", @ANYRES16=r4, @ANYBLOB="000326bd7000ffdbdf251c000000280001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="3400018008000100", @ANYRES32=r9, @ANYBLOB="140002006261746164763000000000000000000014000200677265300000000000000000000000002c0001801400020074756e6c3000000000000000000000001400020070696d36726567300000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="c85728bd700548dfc525060012e3233c0500258848926ac93886154fc1db4f84d509005f2b554a8a6c0000"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x48070)
read$auto(0xffffffffffffffff, 0x0, 0x7f)
r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0)
clock_nanosleep$auto(0x400000, 0x1, 0x0, &(0x7f0000000040)={0x7fff, 0x2})
ioctl$auto_TIOCSTI2(r10, 0x5412, &(0x7f0000000040))
bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7)

767.699148ms ago: executing program 7 (id=1349):
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="17000000", @ANYBLOB='j\x00%', @ANYRES64=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x9, &(0x7f0000000100)={&(0x7f0000000140)="8e98c3b17cec487061f7f2e4857e2441214c822974516459acc9844fa0dcc46dff1f9926ef8b81f87787d6322f6997af9ab78c900b", 0xfc2}, 0x2, &(0x7f0000000340)="c6be7c46d1c0205285a3730ec78054a7c95dbf7d473eb0e4df27e1de3541350cedb96e1b2061d6b44a93fa4c6cd04f3603fb2982ce1e0d2764a6b626d0f755178a4c6e48d84f10dcd3e4df231dc22defe60fdc8a6e2a046192a5e2851ae39ebfab516db8131b3436715c34d42e8e59523dc27f0d3d236a64018c9bb86d7bc6a4ed5aca29cd0fd796ff777d73300a9f4abdd2a83b76dc5a6d90f078b506bc6293362f2334a969f839d02d9862", 0xb0d8, 0xa505}, 0x860}, 0x7, 0x4008)
r1 = socket(0xa, 0x801, 0x84)
connect$auto(r1, &(0x7f0000000080)=@generic={0xa, "509235679a5532c63bacddae0710"}, 0x54)
mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd11/queue/iostats_passthrough\x00', 0x2a001, 0x0)
write$auto(r2, &(0x7f0000000180)='#\x00T\x8e\xf2\xd3U\x1c\vAZ\x84\xd8\x1ds{\xeaS3{\bC1\xff\xb8mw{\x00\x8d\xa2\x04R\xa47\x00\xaa\xe98\x92E&\x93\xe0%\xd4Xx\x10\xc6S<\xc7\xce\xbc8X\xebm\x15\x95I\xf1C\xc6\xf8\xb9\xc7_\x80\xbe', 0x81)
capget$auto(0x0, 0xfffffffffffffffe)
setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow\x00', 0x40, 0x0)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x2a02, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3)
pread64$auto(r4, 0x0, 0x10001, 0x830)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7e}, 0x40000000000009)

537.053617ms ago: executing program 3 (id=1350):
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
madvise$auto(0x0, 0x200007, 0x8)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0)
fsconfig$auto_FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f00000002c0)="06a1f7bb16f81b18c75bba10364b2b43efade5a9fef65e8cba91629684e24e9012362e6f7621dda06775d495247bffd802edbe6936a3d60d7197486748a7ca1dbba3263ecc6f5d767c247ba51887180a1ea82a0ba08e579f51b654b5807d910c2cc2b9a2e30234d92ffc6c2dc1fc6c4308f9fa311915ede69fe215eaaccba42e3cbbd8ed8daf77928b11be75e2e7b0f1b21045546b66d819903a254c168adfa0d50bf32a0d86c6274a618b346c5a9f63f5d5b0401c51c88ef282b5d8195626fe0749013c32a20163e61e6c5bc2bffb8ab5adda9eabfa9d55f0406788cacc20867c02743abb7b0ef7fe7871b91661642558035c211261ec", 0xffffffffffffffff)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x6ec0, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon33\x00', 0x121200, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x206200, 0x0)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x2004000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0xa, 0x5, 0x84)
io_uring_setup$auto(0xa, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setsockopt$auto(r2, 0x10000000084, 0x23, 0x0, 0x8)
sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="08002dbd5f00eddbdf250e0000000500120040000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000)
io_setup$auto(0x7ffe, 0x0)

329.192099ms ago: executing program 7 (id=1351):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYBLOB="010025bd7000fcdbdf2502"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb000000)

0s ago: executing program 7 (id=1352):
unshare$auto(0x40000080)
write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000000), 0x0)
close_range$auto(0x2, 0x8, 0x0)
pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x0, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
socket(0x6, 0x2, 0x144b)
ioctl$auto(0x3, 0x80000541b, 0x38)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
mmap$auto(0x2e1, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x10000, 0x0)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2000000006, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x5, 0x3, 0x8000000000000000, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000440)={{@raw=0x5, 0x5, 0xf8, 0x5, "a401d243991a4de376cc2bd4dbe3e10d3cff152230323227f8d6c24be7ceeed84366bbadec1b7ea40209a468", @raw}, 0x1ea, 0x3, 0x1, @inferred, @enumerated={0x383, 0x1, "9df82ad3f7e9030c2da31306b14b03ab909ec7ed05341fe427503811a54ec6e093a2d6b26bc285629b63088004840ad40213cdebd9b2076f31f78f35381eb3bb", 0x7, 0xf}, "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"})
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/oss/sndstat\x00', 0x88400, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/209, 0xd1)
madvise$auto(0x0, 0x2003ec, 0x14)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mlockall$auto(0x7)
setresuid$auto(0x8, 0x8, 0x0)
mlock$auto(0xcecc, 0xd325)
madvise$auto(0xb, 0x1, 0x3)

kernel console output (not intermixed with test programs):

 addr_prefs: Invalid Command
[  307.057884][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'.
[  307.740360][ T9908] random: crng reseeded on system resumption
[  307.822193][ T9908] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n]	ò|
[  307.822193][ T9908] MÅ' is too long
[  307.879415][ T9908] scsi_strcpy_devinfo: model string '’Dd5‚ÕK€2bÛ
[  307.879415][ T9908] ††½W�Ïõ›ú «ú' is too long
[  308.023008][ T9913] netlink: 252 bytes leftover after parsing attributes in process `syz.2.741'.
[  308.131832][ T9811] Bluetooth: hci2: command tx timeout
[  308.158996][ T9921] netlink: 252 bytes leftover after parsing attributes in process `syz.2.741'.
[  308.194948][ T9690] hsr_slave_0: left promiscuous mode
[  308.223786][ T9690] hsr_slave_1: left promiscuous mode
[  308.260260][ T9690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.308283][ T9690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.381534][ T9690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.417628][ T9690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.541550][ T9690] veth1_macvtap: left promiscuous mode
[  308.580596][ T9690] veth0_macvtap: left promiscuous mode
[  309.290362][ T9690] team0 (unregistering): Port device team_slave_1 removed
[  309.339470][ T9690] team0 (unregistering): Port device team_slave_0 removed
[  309.689260][ T9809] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.718979][ T9809] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.741702][ T9809] bridge_slave_0: entered allmulticast mode
[  309.768100][ T9809] bridge_slave_0: entered promiscuous mode
[  309.792168][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2
[  309.827082][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.853753][ T9809] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.882079][ T9809] bridge_slave_1: entered allmulticast mode
[  309.905677][ T9809] bridge_slave_1: entered promiscuous mode
[  310.201935][ T9811] Bluetooth: hci2: command tx timeout
[  310.216534][ T9809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.254300][ T9809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.623458][ T9809] team0: Port device team_slave_0 added
[  310.668108][ T9809] team0: Port device team_slave_1 added
[  310.972567][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.972582][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  310.972599][ T9809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.990891][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.990907][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  310.990924][ T9809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.130886][ T9809] hsr_slave_0: entered promiscuous mode
[  311.133457][ T9809] hsr_slave_1: entered promiscuous mode
[  311.135974][ T9809] debugfs: 'hsr0' already exists in 'hsr'
[  311.135991][ T9809] Cannot create hsr debugfs directory
[  311.929889][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3
[  312.164351][ T9989] netlink: 252 bytes leftover after parsing attributes in process `syz.2.750'.
[  312.271607][ T9811] Bluetooth: hci2: command tx timeout
[  312.299336][ T9991] netlink: 252 bytes leftover after parsing attributes in process `syz.2.750'.
[  313.797030][ T9809] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  313.865657][ T9809] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  313.898314][ T9809] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  313.967992][ T9809] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  313.984259][T10025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.756'.
[  314.010715][ T9809] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  314.064612][ T9809] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  314.111000][ T9809] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  314.199762][ T9809] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  314.402653][T10047] vivid-008: =================  START STATUS  =================
[  314.467272][T10047] vivid-008: ==================  END STATUS  ==================
[  314.820101][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  314.833124][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  315.092252][ T9809] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.206276][ T9809] 8021q: adding VLAN 0 to HW filter on device team0
[  315.303293][ T9814] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.310541][ T9814] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.399278][ T9814] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.406466][ T9814] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.198766][T10051] Process accounting resumed
[  316.450861][T10083] netlink: 252 bytes leftover after parsing attributes in process `syz.3.761'.
[  316.539528][T10086] netlink: 252 bytes leftover after parsing attributes in process `syz.3.761'.
[  317.321028][ T9809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.554499][ T9809] veth0_vlan: entered promiscuous mode
[  317.625449][ T9809] veth1_vlan: entered promiscuous mode
[  317.788172][ T9809] veth0_macvtap: entered promiscuous mode
[  317.837889][ T9809] veth1_macvtap: entered promiscuous mode
[  317.956125][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.031826][T10117] bond0: invalid ARP target specified
[  318.116872][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  318.210341][ T9690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.263791][ T9690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.371768][ T9690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.421508][ T9690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.980216][ T9709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.032005][ T9709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.460135][ T9709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.494614][ T9709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.518893][T10143] netlink: 252 bytes leftover after parsing attributes in process `syz.0.770'.
[  319.567190][T10143] netlink: 252 bytes leftover after parsing attributes in process `syz.0.770'.
[  321.407093][   T30] audit: type=1800 audit(1780638163.201:12): pid=10180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.775" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  321.816509][ T9811] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  321.899209][T10195] FAULT_INJECTION: forcing a failure.
[  321.899209][T10195] name failslab, interval 1, probability 0, space 0, times 0
[  321.941984][T10195] CPU: 0 UID: 0 PID: 10195 Comm: syz.2.778 Not tainted syzkaller #0 PREEMPT(full) 
[  321.942007][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  321.942016][T10195] Call Trace:
[  321.942021][T10195]  <TASK>
[  321.942027][T10195]  dump_stack_lvl+0x100/0x190
[  321.942048][T10195]  should_fail_ex.cold+0x5/0xa
[  321.942068][T10195]  should_failslab+0xc2/0x120
[  321.942087][T10195]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  321.942109][T10195]  ? __proc_create+0x2cb/0x8c0
[  321.942132][T10195]  __proc_create+0x2cb/0x8c0
[  321.942151][T10195]  ? __pfx___proc_create+0x10/0x10
[  321.942172][T10195]  ? _raw_write_unlock+0x28/0x50
[  321.942194][T10195]  proc_create_reg+0x75/0x170
[  321.942215][T10195]  proc_create_data+0x86/0x110
[  321.942234][T10195]  ? __pfx_proc_create_data+0x10/0x10
[  321.942254][T10195]  ? cache_register_net+0x137/0x5e0
[  321.942269][T10195]  ? cache_register_net+0x137/0x5e0
[  321.942287][T10195]  cache_register_net+0x1e0/0x5e0
[  321.942302][T10195]  nfsd_idmap_init+0x16e/0x250
[  321.942319][T10195]  ? __pfx_nfsd_net_init+0x10/0x10
[  321.942347][T10195]  nfsd_net_init+0x85/0x3e0
[  321.942370][T10195]  ? __pfx_nfsd_net_init+0x10/0x10
[  321.942391][T10195]  ops_init+0x1e2/0x5f0
[  321.942410][T10195]  setup_net+0x118/0x3a0
[  321.942426][T10195]  ? __pfx_setup_net+0x10/0x10
[  321.942441][T10195]  ? mutex_init_lockdep+0xf1/0x120
[  321.942460][T10195]  copy_net_ns+0x46f/0x7c0
[  321.942479][T10195]  create_new_namespaces+0x3ea/0xac0
[  321.942502][T10195]  unshare_nsproxy_namespaces+0xf2/0x220
[  321.942522][T10195]  ksys_unshare+0x438/0xab0
[  321.942542][T10195]  ? __pfx_ksys_unshare+0x10/0x10
[  321.942561][T10195]  ? xfd_validate_state+0x129/0x190
[  321.942575][T10195]  ? ksys_write+0x1ac/0x250
[  321.942597][T10195]  __x64_sys_unshare+0x31/0x40
[  321.942616][T10195]  do_syscall_64+0x115/0x840
[  321.942635][T10195]  ? clear_bhb_loop+0x40/0x90
[  321.942653][T10195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.942667][T10195] RIP: 0033:0x7ff144f9ce59
[  321.942681][T10195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  321.942694][T10195] RSP: 002b:00007ff145e42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  321.942709][T10195] RAX: ffffffffffffffda RBX: 00007ff145215fa0 RCX: 00007ff144f9ce59
[  321.942718][T10195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  321.942727][T10195] RBP: 00007ff145032d6f R08: 0000000000000000 R09: 0000000000000000
[  321.942735][T10195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  321.942743][T10195] R13: 00007ff145216038 R14: 00007ff145215fa0 R15: 00007fff12ad55c8
[  321.942769][T10195]  </TASK>
[  322.629379][T10205] netlink: 'syz.1.780': attribute type 11 has an invalid length.
[  323.183666][T10217] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  323.327532][T10211] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  323.495291][T10222] netlink: 252 bytes leftover after parsing attributes in process `syz.2.785'.
[  323.558027][T10222] netlink: 252 bytes leftover after parsing attributes in process `syz.2.785'.
[  323.887827][ T9710] Bluetooth: hci0: command 0x0c1a tx timeout
[  325.957131][ T9811] Bluetooth: hci0: command 0x0c1a tx timeout
[  327.553574][T10291] futex_wake_op: syz.2.802 tries to shift op by -2048; fix this program
[  327.589513][   T30] audit: type=1804 audit(1780638169.423:13): pid=10289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.798" name="/newroot/203/file0" dev="tmpfs" ino=1070 res=1 errno=0
[  327.676755][T10290] 0x000000000001-0x000000020000 : ""
[  327.746083][   T30] audit: type=1804 audit(1780638169.484:14): pid=10289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.798" name="/newroot/203/file0" dev="tmpfs" ino=1070 res=1 errno=0
[  327.943437][T10290] ftl_cs: FTL header corrupt!
[  328.942052][T10310] random: crng reseeded on system resumption
[  330.465854][T10339] FAULT_INJECTION: forcing a failure.
[  330.465854][T10339] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  330.520887][T10339] CPU: 0 UID: 0 PID: 10339 Comm: syz.1.812 Not tainted syzkaller #0 PREEMPT(full) 
[  330.520908][T10339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  330.520916][T10339] Call Trace:
[  330.520921][T10339]  <TASK>
[  330.520927][T10339]  dump_stack_lvl+0x100/0x190
[  330.520947][T10339]  should_fail_ex.cold+0x5/0xa
[  330.520965][T10339]  _copy_from_user+0x2e/0xd0
[  330.520985][T10339]  restore_sigcontext+0xcd/0x6a0
[  330.521005][T10339]  ? __pfx_restore_sigcontext+0x10/0x10
[  330.521036][T10339]  ? __pfx_restore_altstack+0x10/0x10
[  330.521057][T10339]  ? _raw_spin_unlock_irq+0x23/0x50
[  330.521075][T10339]  ? lockdep_hardirqs_on+0x78/0x100
[  330.521096][T10339]  __do_sys_rt_sigreturn+0x229/0x2c0
[  330.521116][T10339]  ? __pfx___do_sys_rt_sigreturn+0x10/0x10
[  330.521135][T10339]  ? exit_to_user_mode_loop+0xf3/0x670
[  330.521158][T10339]  ? rcu_is_watching+0x12/0xc0
[  330.521176][T10339]  do_syscall_64+0x115/0x840
[  330.521194][T10339]  ? clear_bhb_loop+0x40/0x90
[  330.521211][T10339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.521225][T10339] RIP: 0033:0x7f151c73e1d9
[  330.521237][T10339] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25
[  330.521249][T10339] RSP: 002b:00007f151d672b40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f
[  330.521264][T10339] RAX: ffffffffffffffda RBX: 00007f151ca16188 RCX: 00007f151c73e1d9
[  330.521273][T10339] RDX: 00007f151d672b40 RSI: 00007f151d672c70 RDI: 0000000000000011
[  330.521281][T10339] RBP: 00007f151ca16180 R08: 0000000000000000 R09: 0000000000000000
[  330.521291][T10339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  330.521299][T10339] R13: 00007f151ca16218 R14: 00007ffcbdcaa520 R15: 00007ffcbdcaa608
[  330.521317][T10339]  </TASK>
[  332.370089][T10356] zswap: compressor 000 not available
[  332.586136][T10374] netlink: 252 bytes leftover after parsing attributes in process `syz.1.818'.
[  332.650450][T10376] netlink: 252 bytes leftover after parsing attributes in process `syz.1.818'.
[  333.543417][ T9710] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  333.582131][T10384] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  333.673613][T10392] netlink: 'syz.2.821': attribute type 1 has an invalid length.
[  333.687920][T10390] FAULT_INJECTION: forcing a failure.
[  333.687920][T10390] name failslab, interval 1, probability 0, space 0, times 0
[  333.761766][T10390] CPU: 0 UID: 0 PID: 10390 Comm: syz.1.820 Not tainted syzkaller #0 PREEMPT(full) 
[  333.761788][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  333.761798][T10390] Call Trace:
[  333.761803][T10390]  <TASK>
[  333.761809][T10390]  dump_stack_lvl+0x100/0x190
[  333.761830][T10390]  should_fail_ex.cold+0x5/0xa
[  333.761849][T10390]  ? lsm_blob_alloc+0x68/0x90
[  333.761871][T10390]  should_failslab+0xc2/0x120
[  333.761890][T10390]  __kmalloc_noprof+0xe0/0x850
[  333.761903][T10390]  ? trace_kmalloc+0xe3/0x110
[  333.761923][T10390]  lsm_blob_alloc+0x68/0x90
[  333.761944][T10390]  security_sk_alloc+0x2d/0x290
[  333.761960][T10390]  sk_prot_alloc+0x12a/0x2a0
[  333.761980][T10390]  sk_alloc+0x36/0xe80
[  333.761994][T10390]  __netlink_create+0x5e/0x2c0
[  333.762012][T10390]  __netlink_kernel_create+0xed/0x750
[  333.762033][T10390]  ? __pfx___netlink_kernel_create+0x10/0x10
[  333.762051][T10390]  ? find_held_lock+0x2b/0x80
[  333.762072][T10390]  ? __pfx_crypto_netlink_init+0x10/0x10
[  333.762094][T10390]  crypto_netlink_init+0xb7/0x140
[  333.762116][T10390]  ? __pfx_crypto_netlink_init+0x10/0x10
[  333.762138][T10390]  ? __nf_register_net_hook+0x291/0x780
[  333.762157][T10390]  ? __pfx_crypto_netlink_rcv+0x10/0x10
[  333.762179][T10390]  ? nf_register_net_hook+0xe2/0x170
[  333.762198][T10390]  ? nf_register_net_hooks+0xb1/0xd0
[  333.762218][T10390]  ops_init+0x1e2/0x5f0
[  333.762235][T10390]  setup_net+0x118/0x3a0
[  333.762251][T10390]  ? __pfx_setup_net+0x10/0x10
[  333.762266][T10390]  ? mutex_init_lockdep+0xf1/0x120
[  333.762283][T10390]  copy_net_ns+0x46f/0x7c0
[  333.762302][T10390]  create_new_namespaces+0x3ea/0xac0
[  333.762329][T10390]  unshare_nsproxy_namespaces+0xf2/0x220
[  333.762349][T10390]  ksys_unshare+0x438/0xab0
[  333.762371][T10390]  ? __pfx_ksys_unshare+0x10/0x10
[  333.762391][T10390]  ? xfd_validate_state+0x129/0x190
[  333.762404][T10390]  ? ksys_write+0x1ac/0x250
[  333.762427][T10390]  __x64_sys_unshare+0x31/0x40
[  333.762446][T10390]  do_syscall_64+0x115/0x840
[  333.762466][T10390]  ? clear_bhb_loop+0x40/0x90
[  333.762484][T10390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.762511][T10390] RIP: 0033:0x7f151c79ce59
[  333.762525][T10390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  333.762539][T10390] RSP: 002b:00007f151d6b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  333.762554][T10390] RAX: ffffffffffffffda RBX: 00007f151ca15fa0 RCX: 00007f151c79ce59
[  333.762564][T10390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  333.762572][T10390] RBP: 00007f151c832d6f R08: 0000000000000000 R09: 0000000000000000
[  333.762581][T10390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  333.762590][T10390] R13: 00007f151ca16038 R14: 00007f151ca15fa0 R15: 00007ffcbdcaa608
[  333.762610][T10390]  </TASK>
[  334.677080][T10391] NFSD: Failed to start, no listeners configured.
[  335.588871][ T9710] Bluetooth: hci2: command 0x2016 tx timeout
[  336.367295][T10431] netlink: 252 bytes leftover after parsing attributes in process `syz.2.829'.
[  336.411700][T10431] netlink: 252 bytes leftover after parsing attributes in process `syz.2.829'.
[  336.588027][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'.
[  337.664620][ T9710] Bluetooth: hci2: command 0x2016 tx timeout
[  338.354835][T10452] futex_wake_op: syz.1.834 tries to shift op by -2048; fix this program
[  338.376796][T10449] Process accounting resumed
[  339.227239][T10494] netlink: 252 bytes leftover after parsing attributes in process `syz.0.841'.
[  339.339827][T10495] netlink: 252 bytes leftover after parsing attributes in process `syz.0.841'.
[  340.207776][T10531] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  340.329091][T10534] netlink: 25 bytes leftover after parsing attributes in process `syz.0.849'.
[  341.424669][T10556] netlink: 342 bytes leftover after parsing attributes in process `syz.1.854'.
[  341.890642][T10564] netlink: 342 bytes leftover after parsing attributes in process `syz.2.856'.
[  342.308863][T10565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.855'.
[  343.275115][T10610] netlink: 'syz.0.861': attribute type 1 has an invalid length.
[  344.168583][T10629] FAULT_INJECTION: forcing a failure.
[  344.168583][T10629] name failslab, interval 1, probability 0, space 0, times 0
[  344.216699][T10629] CPU: 0 UID: 0 PID: 10629 Comm: syz.1.864 Not tainted syzkaller #0 PREEMPT(full) 
[  344.216721][T10629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  344.216729][T10629] Call Trace:
[  344.216734][T10629]  <TASK>
[  344.216739][T10629]  dump_stack_lvl+0x100/0x190
[  344.216759][T10629]  should_fail_ex.cold+0x5/0xa
[  344.216777][T10629]  ? tomoyo_realpath_from_path+0xb6/0x690
[  344.216797][T10629]  should_failslab+0xc2/0x120
[  344.216813][T10629]  __kmalloc_noprof+0xe0/0x850
[  344.216825][T10629]  ? kfree+0x1dd/0x6c0
[  344.216846][T10629]  tomoyo_realpath_from_path+0xb6/0x690
[  344.216870][T10629]  tomoyo_path_number_perm+0x23c/0x580
[  344.216886][T10629]  ? tomoyo_path_number_perm+0x22e/0x580
[  344.216903][T10629]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  344.216938][T10629]  ? find_held_lock+0x2b/0x80
[  344.216954][T10629]  ? __fget_files+0x215/0x3d0
[  344.216969][T10629]  ? hook_file_ioctl_common+0x149/0x410
[  344.216985][T10629]  ? __fget_files+0x215/0x3d0
[  344.217004][T10629]  ? __fget_files+0x21f/0x3d0
[  344.217022][T10629]  security_file_ioctl+0xd3/0x230
[  344.217040][T10629]  __x64_sys_ioctl+0xb7/0x210
[  344.217055][T10629]  do_syscall_64+0x115/0x840
[  344.217074][T10629]  ? clear_bhb_loop+0x40/0x90
[  344.217091][T10629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.217105][T10629] RIP: 0033:0x7f151c79ce59
[  344.217118][T10629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.217130][T10629] RSP: 002b:00007f151d6b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  344.217144][T10629] RAX: ffffffffffffffda RBX: 00007f151ca15fa0 RCX: 00007f151c79ce59
[  344.217153][T10629] RDX: 0000200000000080 RSI: 0000000000004601 RDI: 0000000000000003
[  344.217161][T10629] RBP: 00007f151d6b5090 R08: 0000000000000000 R09: 0000000000000000
[  344.217169][T10629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.217177][T10629] R13: 00007f151ca16038 R14: 00007f151ca15fa0 R15: 00007ffcbdcaa608
[  344.217195][T10629]  </TASK>
[  344.217201][T10629] ERROR: Out of memory at tomoyo_realpath_from_path.
[  344.903595][T10638] vivid-011: =================  START STATUS  =================
[  344.943548][T10638] vivid-011: Radio HW Seek Mode: Bounded
[  344.973870][T10638] vivid-011: Radio Programmable HW Seek: false
[  345.021541][T10638] vivid-011: RDS Rx I/O Mode: Block I/O
[  345.088446][T10638] vivid-011: Generate RBDS Instead of RDS: false
[  345.123946][T10638] vivid-011: RDS Reception: true
[  345.134705][T10640] netlink: zone id is out of range
[  345.146273][T10638] vivid-011: RDS Program Type: 0 inactive
[  345.154607][T10640] netlink: zone id is out of range
[  345.164969][T10640] netlink: zone id is out of range
[  345.174336][T10638] vivid-011: RDS PS Name:  inactive
[  345.192413][T10638] vivid-011: RDS Radio Text:  inactive
[  345.198552][T10640] netlink: zone id is out of range
[  345.211005][T10638] vivid-011: RDS Traffic Announcement: false inactive
[  345.227207][T10640] netlink: zone id is out of range
[  345.235416][T10638] vivid-011: RDS Traffic Program: false inactive
[  345.254310][T10638] vivid-011: RDS Music: false inactive
[  345.261579][T10640] netlink: zone id is out of range
[  345.271413][T10638] vivid-011: ==================  END STATUS  ==================
[  345.292164][T10640] netlink: zone id is out of range
[  345.324845][T10640] netlink: zone id is out of range
[  345.372257][T10640] netlink: zone id is out of range
[  345.415698][T10640] netlink: zone id is out of range
[  345.818400][ T9811] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  345.825969][ T9811] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff
[  346.141485][T10661] blktrace: Concurrent blktraces are not allowed on loop2
[  346.269810][T10590] Process accounting paused
[  346.537928][T10665] netlink: 342 bytes leftover after parsing attributes in process `syz.1.872'.
[  346.842059][T10675] FAULT_INJECTION: forcing a failure.
[  346.842059][T10675] name failslab, interval 1, probability 0, space 0, times 0
[  346.916219][T10678] random: crng reseeded on system resumption
[  346.929280][T10675] CPU: 0 UID: 0 PID: 10675 Comm: syz.2.874 Not tainted syzkaller #0 PREEMPT(full) 
[  346.929300][T10675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  346.929308][T10675] Call Trace:
[  346.929313][T10675]  <TASK>
[  346.929318][T10675]  dump_stack_lvl+0x100/0x190
[  346.929338][T10675]  should_fail_ex.cold+0x5/0xa
[  346.929356][T10675]  ? tomoyo_encode2+0xfb/0x3c0
[  346.929375][T10675]  should_failslab+0xc2/0x120
[  346.929391][T10675]  __kmalloc_noprof+0xe0/0x850
[  346.929403][T10675]  ? d_absolute_path+0x136/0x1b0
[  346.929420][T10675]  tomoyo_encode2+0xfb/0x3c0
[  346.929441][T10675]  tomoyo_encode+0x29/0x50
[  346.929458][T10675]  tomoyo_realpath_from_path+0x18c/0x690
[  346.929482][T10675]  tomoyo_path_number_perm+0x23c/0x580
[  346.929498][T10675]  ? tomoyo_path_number_perm+0x22e/0x580
[  346.929515][T10675]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  346.929550][T10675]  ? find_held_lock+0x2b/0x80
[  346.929567][T10675]  ? __fget_files+0x215/0x3d0
[  346.929581][T10675]  ? hook_file_ioctl_common+0x149/0x410
[  346.929597][T10675]  ? __fget_files+0x215/0x3d0
[  346.929616][T10675]  ? __fget_files+0x21f/0x3d0
[  346.929634][T10675]  security_file_ioctl+0xd3/0x230
[  346.929652][T10675]  __x64_sys_ioctl+0xb7/0x210
[  346.929667][T10675]  do_syscall_64+0x115/0x840
[  346.929686][T10675]  ? clear_bhb_loop+0x40/0x90
[  346.929703][T10675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.929717][T10675] RIP: 0033:0x7ff144f9ce59
[  346.929729][T10675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.929742][T10675] RSP: 002b:00007ff145e42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  346.929755][T10675] RAX: ffffffffffffffda RBX: 00007ff145215fa0 RCX: 00007ff144f9ce59
[  346.929764][T10675] RDX: 0000200000000080 RSI: 0000000000004601 RDI: 0000000000000003
[  346.929772][T10675] RBP: 00007ff145e42090 R08: 0000000000000000 R09: 0000000000000000
[  346.929780][T10675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  346.929788][T10675] R13: 00007ff145216038 R14: 00007ff145215fa0 R15: 00007fff12ad55c8
[  346.929806][T10675]  </TASK>
[  346.929819][T10675] ERROR: Out of memory at tomoyo_realpath_from_path.
[  348.661774][T10697] netlink: 252 bytes leftover after parsing attributes in process `syz.1.880'.
[  348.726335][T10699] netlink: 252 bytes leftover after parsing attributes in process `syz.1.880'.
[  349.778125][T10713] ubi0: attaching mtd0
[  349.879316][T10713] ubi0: scanning is finished
[  349.946279][T10713] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  350.243731][T10713] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  350.305377][T10736] syz.2.887 uses obsolete (PF_INET,SOCK_PACKET)
[  350.579793][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'.
[  350.728371][T10750] netlink: 342 bytes leftover after parsing attributes in process `syz.2.889'.
[  351.108160][T10755] netlink: 342 bytes leftover after parsing attributes in process `syz.3.890'.
[  352.161263][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'.
[  352.247399][T10774] net_ratelimit: 47 callbacks suppressed
[  352.247415][T10774] openvswitch: netlink: Multiple metadata blocks provided
[  353.679941][T10789] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0]
[  356.455149][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'.
[  356.491290][T10832] openvswitch: netlink: Multiple metadata blocks provided
[  358.632518][ T9710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  358.646532][ T9710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  358.654607][ T9710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  358.664588][ T9710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  358.677479][ T9710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  360.298447][T10857] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.325167][T10857] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.351001][T10857] bridge_slave_0: entered allmulticast mode
[  360.380542][T10857] bridge_slave_0: entered promiscuous mode
[  360.404441][T10857] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.430539][T10857] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.453948][T10857] bridge_slave_1: entered allmulticast mode
[  360.482034][T10857] bridge_slave_1: entered promiscuous mode
[  360.578496][T10857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.615658][T10857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.730123][T10857] team0: Port device team_slave_0 added
[  360.738983][ T9710] Bluetooth: hci4: command tx timeout
[  360.769631][T10857] team0: Port device team_slave_1 added
[  360.847765][T10857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.871934][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  360.956358][T10857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.005581][T10857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.028319][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  361.102056][T10857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.241238][T10857] hsr_slave_0: entered promiscuous mode
[  361.276056][T10857] hsr_slave_1: entered promiscuous mode
[  361.298175][T10857] debugfs: 'hsr0' already exists in 'hsr'
[  361.319028][T10857] Cannot create hsr debugfs directory
[  361.813093][T10857] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  361.833728][T10857] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  361.852072][T10857] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  361.880294][T10857] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  361.898805][T10857] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  361.924125][T10857] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  361.942448][T10857] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  361.965689][T10857] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  362.050548][T10513] syz.3.844 (10513) used greatest stack depth: 18056 bytes left
[  362.100013][T10857] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.123183][T10857] 8021q: adding VLAN 0 to HW filter on device team0
[  362.146654][ T9705] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.153829][ T9705] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.193336][ T9705] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.200543][ T9705] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.256991][T10857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  362.806239][ T9710] Bluetooth: hci4: command tx timeout
[  362.826585][T10857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.187454][T10857] veth0_vlan: entered promiscuous mode
[  363.217978][T10857] veth1_vlan: entered promiscuous mode
[  363.268415][T10857] veth0_macvtap: entered promiscuous mode
[  363.290524][T10857] veth1_macvtap: entered promiscuous mode
[  363.327632][T10857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  363.353154][T10857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.384348][ T9705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.403998][ T9705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.427286][ T9705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.459717][ T9705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.585707][ T9705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.615595][ T9705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.669188][ T9709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.690114][ T9709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.876381][ T9710] Bluetooth: hci4: command tx timeout
[  365.151041][T10964] netlink: 330 bytes leftover after parsing attributes in process `syz.2.918'.
[  365.414010][T10963] zswap: compressor  not available
[  365.528958][ T9811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  365.543059][ T9811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  365.551970][ T9811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  365.562142][ T9811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  365.574276][ T9811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  365.658295][ T9811] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  366.944464][ T9811] Bluetooth: hci4: command tx timeout
[  367.661647][ T9710] Bluetooth: hci0: command 0x0c1a tx timeout
[  367.667869][ T9710] Bluetooth: hci5: command tx timeout
[  367.891150][T10971] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.930695][T10971] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.954359][T10971] bridge_slave_0: entered allmulticast mode
[  367.976810][T10971] bridge_slave_0: entered promiscuous mode
[  368.008529][T10971] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.035502][T10971] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.056435][T10971] bridge_slave_1: entered allmulticast mode
[  368.083249][T10971] bridge_slave_1: entered promiscuous mode
[  368.162022][T10971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.199186][T10971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.298562][T10971] team0: Port device team_slave_0 added
[  368.324966][T10971] team0: Port device team_slave_1 added
[  368.385645][T10971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.400925][T10971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.474172][T10971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.521392][T10971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.544470][T10971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.634436][T10971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.662773][T11018] Process accounting paused
[  368.807115][T10971] hsr_slave_0: entered promiscuous mode
[  368.830449][T10971] hsr_slave_1: entered promiscuous mode
[  368.849212][T10971] debugfs: 'hsr0' already exists in 'hsr'
[  368.868388][T10971] Cannot create hsr debugfs directory
[  369.231126][T10971] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  369.244728][T10971] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  369.253183][T10971] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  369.276677][T10971] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  369.289071][T10971] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  369.298910][T10971] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  369.307477][T10971] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  369.332416][T10971] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  369.500985][T10971] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.537382][T10971] 8021q: adding VLAN 0 to HW filter on device team0
[  369.554225][ T9705] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.561401][ T9705] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.603118][ T9705] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.610277][ T9705] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.731741][ T9811] Bluetooth: hci0: command 0x0c1a tx timeout
[  369.740758][ T9710] Bluetooth: hci5: command tx timeout
[  370.314438][T10971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.970811][T10971] veth0_vlan: entered promiscuous mode
[  371.010191][T10971] veth1_vlan: entered promiscuous mode
[  371.088843][T10971] veth0_macvtap: entered promiscuous mode
[  371.129715][T10971] veth1_macvtap: entered promiscuous mode
[  371.189209][T10971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.238142][T10971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  371.253661][ T9691] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  371.269099][ T9691] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  371.277023][ T9691] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  371.287537][ T9691] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  371.300607][ T9691] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  371.351203][ T9690] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.381013][ T9690] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.422184][ T9690] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.465204][ T9690] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.664730][ T9705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.696096][ T9705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.757395][ T9705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.782507][ T9705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.800272][T11043] Bluetooth: hci5: command tx timeout
[  372.069298][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.917'.
[  372.104196][T11096] openvswitch: netlink: Multiple metadata blocks provided
[  372.182066][T11102] netlink: 252 bytes leftover after parsing attributes in process `syz.4.939'.
[  372.219540][T11102] netlink: 252 bytes leftover after parsing attributes in process `syz.4.939'.
[  372.817069][T11084] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.843597][T11084] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.870811][T11084] bridge_slave_0: entered allmulticast mode
[  372.898051][T11084] bridge_slave_0: entered promiscuous mode
[  372.927091][T11084] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.953643][T11084] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.980191][T11084] bridge_slave_1: entered allmulticast mode
[  373.008091][T11084] bridge_slave_1: entered promiscuous mode
[  373.104924][T11084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  373.144507][T11084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  373.220124][T11118] futex_wake_op: syz.4.941 tries to shift op by -2048; fix this program
[  373.246321][T11084] team0: Port device team_slave_0 added
[  373.253868][T11118] futex_wake_op: syz.4.941 tries to shift op by -2048; fix this program
[  373.271832][T11084] team0: Port device team_slave_1 added
[  373.282175][T11119] 0x000000000001-0x000000020000 : ""
[  373.335631][T11119] ftl_cs: FTL header corrupt!
[  373.377656][T11084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  373.393344][T11043] Bluetooth: hci6: command tx timeout
[  373.427369][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  373.564517][T11084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  373.602689][T11084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  373.613572][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  373.652740][T11125] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  373.683170][T11084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.728244][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'.
[  373.842253][T11084] hsr_slave_0: entered promiscuous mode
[  373.856231][T11084] hsr_slave_1: entered promiscuous mode
[  373.870204][T11043] Bluetooth: hci5: command tx timeout
[  373.879805][T11084] debugfs: 'hsr0' already exists in 'hsr'
[  373.891654][T11084] Cannot create hsr debugfs directory
[  374.708528][T11084] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  374.718255][T11084] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  374.734754][T11084] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  374.747359][T11084] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  374.757478][T11084] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  374.767255][T11084] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  374.778112][T11084] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  374.790674][T11084] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  374.880057][T11084] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.899546][T11084] 8021q: adding VLAN 0 to HW filter on device team0
[  374.913620][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.920749][ T9690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.999900][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.007058][ T9690] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.460117][T11043] Bluetooth: hci6: command tx timeout
[  375.792400][T11169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.949'.
[  375.952541][T11084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.286117][T11084] veth0_vlan: entered promiscuous mode
[  376.309650][T11084] veth1_vlan: entered promiscuous mode
[  376.343236][T11084] veth0_macvtap: entered promiscuous mode
[  376.355478][T11084] veth1_macvtap: entered promiscuous mode
[  376.376269][T11084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.393783][T11084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.409220][ T9875] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.428433][ T9875] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.484531][ T9875] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.523871][ T9875] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.567076][ T9875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.592097][ T9875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.620961][ T9838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.629936][ T9838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.219127][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  377.233907][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  377.529064][T11043] Bluetooth: hci6: command tx timeout
[  377.790817][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.952'.
[  379.309088][T11237] netlink: 'syz.5.962': attribute type 11 has an invalid length.
[  379.346218][T11237] netlink: 'syz.5.962': attribute type 11 has an invalid length.
[  379.389538][T11237] netlink: 'syz.5.962': attribute type 11 has an invalid length.
[  379.598317][T11043] Bluetooth: hci6: command tx timeout
[  379.978683][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.966'.
[  380.021459][T11263] netlink: 252 bytes leftover after parsing attributes in process `syz.5.968'.
[  380.041406][T11263] netlink: 252 bytes leftover after parsing attributes in process `syz.5.968'.
[  380.113190][T11265] netlink: 252 bytes leftover after parsing attributes in process `syz.6.969'.
[  380.147350][T11265] netlink: 252 bytes leftover after parsing attributes in process `syz.6.969'.
[  381.392066][T11279] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  381.611412][T11288] futex_wake_op: syz.5.974 tries to shift op by -2048; fix this program
[  381.630641][T11288] futex_wake_op: syz.5.974 tries to shift op by -2048; fix this program
[  381.658474][T11288] 0x000000000001-0x000000020000 : ""
[  381.694303][T11288] ftl_cs: FTL header corrupt!
[  381.883229][T11292] bond0: invalid ARP target specified
[  382.029262][T11292] nbd: socks must be embedded in a SOCK_ITEM attr
[  382.102656][T11292] block nbd0: shutting down sockets
[  382.133183][T11292] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  384.393681][ T9691] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  384.412150][ T9691] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  384.421875][ T9691] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  384.430269][ T9691] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  384.438072][ T9691] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  385.322634][T11329] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.334632][T11329] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.342585][T11329] bridge_slave_0: entered allmulticast mode
[  385.350332][T11329] bridge_slave_0: entered promiscuous mode
[  385.360961][T11329] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.368851][T11329] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.376047][T11329] bridge_slave_1: entered allmulticast mode
[  385.383691][T11329] bridge_slave_1: entered promiscuous mode
[  385.415578][T11329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.431639][T11329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.460378][T11329] team0: Port device team_slave_0 added
[  385.469585][T11329] team0: Port device team_slave_1 added
[  385.496473][T11329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.504283][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.534376][T11329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.548227][T11329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.555257][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.583797][T11329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.626977][T11329] hsr_slave_0: entered promiscuous mode
[  385.633303][T11329] hsr_slave_1: entered promiscuous mode
[  385.641001][T11329] debugfs: 'hsr0' already exists in 'hsr'
[  385.647120][T11329] Cannot create hsr debugfs directory
[  385.819319][T11329] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  385.832127][T11329] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  385.840418][T11329] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  385.849777][T11329] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  385.859967][T11329] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  385.871717][T11329] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  385.880974][T11329] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  385.891390][T11329] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  385.920513][T11329] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.928503][T11329] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.936516][T11329] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.943632][T11329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.010150][T11329] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.027046][ T9875] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.039947][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.055629][T11329] 8021q: adding VLAN 0 to HW filter on device team0
[  386.068521][ T9875] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.075671][ T9875] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.098025][ T9875] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.105172][ T9875] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.441535][T11329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.526946][ T9691] Bluetooth: hci7: command tx timeout
[  386.655533][T11329] veth0_vlan: entered promiscuous mode
[  386.666046][T11329] veth1_vlan: entered promiscuous mode
[  386.700137][T11329] veth0_macvtap: entered promiscuous mode
[  386.709982][T11329] veth1_macvtap: entered promiscuous mode
[  386.729939][T11329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.748562][T11329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.768459][ T9875] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.794047][ T9875] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.854711][ T9875] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.889516][ T9875] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.916221][ T9875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.936193][ T9875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.966518][ T9838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.977457][ T9838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.057072][T11390] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  388.223778][T11396] No such timeout policy "
"
[  388.229772][T11396] netlink: Failed to associated timeout policy '
'
[  388.338169][T11398] netlink: 252 bytes leftover after parsing attributes in process `syz.7.993'.
[  388.349124][T11398] netlink: 252 bytes leftover after parsing attributes in process `syz.7.993'.
[  388.591565][ T9691] Bluetooth: hci7: command tx timeout
[  390.175212][T11423] cgroup: fork rejected by pids controller in /syz7
[  390.660987][ T9691] Bluetooth: hci7: command tx timeout
[  391.868113][T11525] FAULT_INJECTION: forcing a failure.
[  391.868113][T11525] name failslab, interval 1, probability 0, space 0, times 0
[  391.892785][T11525] CPU: 0 UID: 0 PID: 11525 Comm: syz.7.1006 Not tainted syzkaller #0 PREEMPT(full) 
[  391.892808][T11525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  391.892822][T11525] Call Trace:
[  391.892828][T11525]  <TASK>
[  391.892834][T11525]  dump_stack_lvl+0x100/0x190
[  391.892902][T11525]  should_fail_ex.cold+0x5/0xa
[  391.892934][T11525]  should_failslab+0xc2/0x120
[  391.892972][T11525]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  391.893000][T11525]  ? __d_alloc+0x34/0xa40
[  391.893032][T11525]  __d_alloc+0x34/0xa40
[  391.893053][T11525]  d_alloc+0x4a/0x1e0
[  391.893073][T11525]  lookup_one_qstr_excl+0x171/0x250
[  391.893101][T11525]  start_dirop+0x59/0xb0
[  391.893117][T11525]  simple_start_creating+0xf9/0x110
[  391.893135][T11525]  ? __pfx_simple_start_creating+0x10/0x10
[  391.893153][T11525]  ? mntput+0x70/0xa0
[  391.893168][T11525]  ? simple_pin_fs+0xa3/0x190
[  391.893187][T11525]  debugfs_start_creating.part.0+0x82/0x170
[  391.893276][T11525]  __debugfs_create_file+0xb3/0x4f0
[  391.893297][T11525]  debugfs_create_file_full+0x41/0x60
[  391.893315][T11525]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  391.893376][T11525]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  391.893408][T11525]  ? lockdep_init_map_type+0x5c/0x250
[  391.893451][T11525]  preinit_net.part.0+0x43b/0x920
[  391.893518][T11525]  copy_net_ns+0x339/0x7c0
[  391.893537][T11525]  create_new_namespaces+0x3ea/0xac0
[  391.893574][T11525]  unshare_nsproxy_namespaces+0xf2/0x220
[  391.893595][T11525]  ksys_unshare+0x438/0xab0
[  391.893623][T11525]  ? __pfx_ksys_unshare+0x10/0x10
[  391.893642][T11525]  ? xfd_validate_state+0x129/0x190
[  391.893665][T11525]  ? ksys_write+0x1ac/0x250
[  391.893687][T11525]  __x64_sys_unshare+0x31/0x40
[  391.893707][T11525]  do_syscall_64+0x115/0x840
[  391.893784][T11525]  ? clear_bhb_loop+0x40/0x90
[  391.893811][T11525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.893826][T11525] RIP: 0033:0x7f1ef2b9ce59
[  391.893840][T11525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  391.893854][T11525] RSP: 002b:00007f1ef3ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  391.893874][T11525] RAX: ffffffffffffffda RBX: 00007f1ef2e15fa0 RCX: 00007f1ef2b9ce59
[  391.893885][T11525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  391.893894][T11525] RBP: 00007f1ef2c32d6f R08: 0000000000000000 R09: 0000000000000000
[  391.893902][T11525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  391.893910][T11525] R13: 00007f1ef2e16038 R14: 00007f1ef2e15fa0 R15: 00007ffcf97a0d08
[  391.893929][T11525]  </TASK>
[  392.730508][ T9691] Bluetooth: hci7: command tx timeout
[  394.598418][T11043] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  394.610523][T11043] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  394.620773][T11043] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  394.629170][T11043] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  394.637705][T11043] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  395.546424][T11535] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.566788][T11535] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.584357][T11535] bridge_slave_0: entered allmulticast mode
[  395.596047][T11535] bridge_slave_0: entered promiscuous mode
[  395.614316][T11535] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.631781][T11535] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.644736][T11535] bridge_slave_1: entered allmulticast mode
[  395.662185][T11535] bridge_slave_1: entered promiscuous mode
[  395.727313][T11535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.750509][T11535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.818802][T11535] team0: Port device team_slave_0 added
[  395.838297][T11535] team0: Port device team_slave_1 added
[  395.889476][T11535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.904921][T11535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.964299][T11535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.991799][T11535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.012263][T11535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.069908][T11535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.168644][T11535] hsr_slave_0: entered promiscuous mode
[  396.182395][T11535] hsr_slave_1: entered promiscuous mode
[  396.198726][T11535] debugfs: 'hsr0' already exists in 'hsr'
[  396.214858][T11535] Cannot create hsr debugfs directory
[  396.709106][T11043] Bluetooth: hci8: command tx timeout
[  396.721926][T11535] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  396.735485][T11535] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  396.744572][T11535] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  396.753632][T11535] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  396.761689][T11535] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  396.776202][T11535] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  396.784173][T11535] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  396.793572][T11535] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  396.863608][T11535] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.890177][T11535] 8021q: adding VLAN 0 to HW filter on device team0
[  396.901893][ T9838] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.909008][ T9838] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.937227][ T9838] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.944348][ T9838] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.970805][T11535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  396.981833][T11535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  397.290582][T11535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.501792][T11535] veth0_vlan: entered promiscuous mode
[  397.514023][T11535] veth1_vlan: entered promiscuous mode
[  397.551755][T11535] veth0_macvtap: entered promiscuous mode
[  397.561542][T11535] veth1_macvtap: entered promiscuous mode
[  397.578794][T11535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.601358][T11535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  397.617037][T11502] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.633835][T11502] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.672628][T11502] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  397.713248][T11502] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.779915][T11502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.798533][T11502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.841342][T11506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.860927][T11506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.130276][ T9691] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  398.144556][ T9691] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  398.155366][ T9691] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  398.166756][ T9691] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  398.183314][ T9691] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  398.779790][ T9691] Bluetooth: hci8: command tx timeout
[  399.027829][T11600] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.370893][T11600] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.625311][T11600] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.750982][T11600] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.845113][T11600] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.211326][ T9691] Bluetooth: hci9: command tx timeout
[  400.491947][T11043] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  400.511644][T11043] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  400.520115][T11043] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  400.535249][T11043] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  400.554758][T11043] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  400.635363][T11587] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.680285][T11587] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.711717][T11587] bridge_slave_0: entered allmulticast mode
[  400.738507][T11587] bridge_slave_0: entered promiscuous mode
[  400.778923][T11587] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.809194][T11587] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.836772][T11587] bridge_slave_1: entered allmulticast mode
[  400.848478][T11043] Bluetooth: hci8: command tx timeout
[  400.865813][T11587] bridge_slave_1: entered promiscuous mode
[  400.884206][T11639] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1019'.
[  400.984055][T11587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  401.072911][T11587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.187081][T11587] team0: Port device team_slave_0 added
[  401.214700][T11587] team0: Port device team_slave_1 added
[  401.287489][T11587] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.307662][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.364250][T11587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.396192][T11587] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.417491][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.474209][T11587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.606769][T11587] hsr_slave_0: entered promiscuous mode
[  401.613253][T11587] hsr_slave_1: entered promiscuous mode
[  401.660552][T11587] debugfs: 'hsr0' already exists in 'hsr'
[  401.674204][T11587] Cannot create hsr debugfs directory
[  402.280381][T11043] Bluetooth: hci9: command tx timeout
[  402.425897][T11587] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  402.457156][T11587] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  402.478264][T11587] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  402.501254][T11587] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  402.527034][T11587] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  402.547731][T11587] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  402.577527][T11587] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  402.597074][T11587] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  402.607427][T11043] Bluetooth: hci10: command tx timeout
[  402.776024][T11634] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.790609][T11634] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.809280][T11634] bridge_slave_0: entered allmulticast mode
[  402.825354][T11634] bridge_slave_0: entered promiscuous mode
[  402.851817][T11634] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.867555][T11634] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.882631][T11634] bridge_slave_1: entered allmulticast mode
[  402.890323][T11634] bridge_slave_1: entered promiscuous mode
[  403.105964][T11634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.128593][T11634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.208555][T11634] team0: Port device team_slave_0 added
[  403.227353][T11634] team0: Port device team_slave_1 added
[  403.299485][T11634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.322217][T11634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.396486][T11634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.423785][T11634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.439302][T11634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.472002][T11634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.496389][T11587] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.536492][T11634] hsr_slave_0: entered promiscuous mode
[  403.542919][T11634] hsr_slave_1: entered promiscuous mode
[  403.549648][T11634] debugfs: 'hsr0' already exists in 'hsr'
[  403.561016][T11634] Cannot create hsr debugfs directory
[  403.569495][T11587] 8021q: adding VLAN 0 to HW filter on device team0
[  403.602410][T11505] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.609545][T11505] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.632161][T11505] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.639298][T11505] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.941113][T11634] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.052259][T11634] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.157995][T11634] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.345768][T11587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.355033][T11043] Bluetooth: hci9: command tx timeout
[  404.580153][T11634] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  404.613384][T11634] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  404.626867][T11634] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  404.656056][T11634] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  404.667677][T11043] Bluetooth: hci10: command tx timeout
[  404.703461][T11634] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  404.729372][T11634] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  404.751085][T11634] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  404.764563][T11634] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  404.822062][T11587] veth0_vlan: entered promiscuous mode
[  404.856057][T11587] veth1_vlan: entered promiscuous mode
[  404.920808][T11587] veth0_macvtap: entered promiscuous mode
[  404.939577][T11587] veth1_macvtap: entered promiscuous mode
[  404.959828][T11634] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.987444][T11587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  405.017819][T11634] 8021q: adding VLAN 0 to HW filter on device team0
[  405.028774][T11587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  405.050179][T11504] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.057308][T11504] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.070768][T11505] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.096572][T11504] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.103680][T11504] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.114357][T11505] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.137931][T11505] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.250963][T11504] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.329138][T11505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.357102][T11505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.444260][T11503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.458069][T11503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.685938][T11702] netlink: 252 bytes leftover after parsing attributes in process `syz.9.1010'.
[  405.776675][T11702] netlink: 252 bytes leftover after parsing attributes in process `syz.9.1010'.
[  406.419229][T11043] Bluetooth: hci9: command tx timeout
[  406.476560][T11634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.629314][T11634] veth0_vlan: entered promiscuous mode
[  406.669830][T11634] veth1_vlan: entered promiscuous mode
[  406.737541][T11043] Bluetooth: hci10: command tx timeout
[  406.774618][T11634] veth0_macvtap: entered promiscuous mode
[  406.803961][T11634] veth1_macvtap: entered promiscuous mode
[  406.852209][T11634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.878010][T11634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.924300][T11506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.948653][T11506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.986852][T11506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.070325][T11506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.210332][T11505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.271494][T11505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.412258][ T9838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.449476][ T9838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.725169][T11735] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  408.390418][T11753] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  408.815932][T11043] Bluetooth: hci10: command tx timeout
[  413.647428][   T30] audit: type=1800 audit(1780638255.921:15): pid=11773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1035" name="members" dev="configfs" ino=45310 res=0 errno=0
[  414.692458][T11043] Bluetooth: hci9: unexpected subevent 0x01 length: 123 > 18
[  415.926652][T11831] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  416.470354][T11839] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.764821][T11043] Bluetooth: hci9: command 0x2016 tx timeout
[  416.906685][T11852] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  418.091086][T11043] Bluetooth: hci10: ACL packet for unknown connection handle 0
[  418.237373][T11872] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  418.374275][T11043] Bluetooth: hci10: Received unexpected HCI Event 0x00
[  418.834017][T11043] Bluetooth: hci9: command 0x2016 tx timeout
[  420.576694][T11906] program syz.0.1062 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  420.597848][T11904] FAULT_INJECTION: forcing a failure.
[  420.597848][T11904] name failslab, interval 1, probability 0, space 0, times 0
[  420.669590][T11905] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1063'.
[  420.709344][T11904] CPU: 0 UID: 0 PID: 11904 Comm: syz.7.1063 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  420.709369][T11904] Tainted: [L]=SOFTLOCKUP
[  420.709373][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  420.709382][T11904] Call Trace:
[  420.709387][T11904]  <TASK>
[  420.709392][T11904]  dump_stack_lvl+0x100/0x190
[  420.709414][T11904]  should_fail_ex.cold+0x5/0xa
[  420.709434][T11904]  should_failslab+0xc2/0x120
[  420.709452][T11904]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  420.709474][T11904]  ? do_getname+0x35/0x390
[  420.709497][T11904]  do_getname+0x35/0x390
[  420.709518][T11904]  user_path_at+0x26/0x60
[  420.709534][T11904]  __x64_sys_mount+0x1fb/0x310
[  420.709555][T11904]  ? __pfx___x64_sys_mount+0x10/0x10
[  420.709575][T11904]  ? rcu_is_watching+0x12/0xc0
[  420.709594][T11904]  do_syscall_64+0x115/0x840
[  420.709615][T11904]  ? clear_bhb_loop+0x40/0x90
[  420.709633][T11904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.709647][T11904] RIP: 0033:0x7f1ef2b9ce59
[  420.709660][T11904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.709673][T11904] RSP: 002b:00007f1ef3aa5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  420.709687][T11904] RAX: ffffffffffffffda RBX: 00007f1ef2e16090 RCX: 00007f1ef2b9ce59
[  420.709696][T11904] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000200000000080
[  420.709705][T11904] RBP: 00007f1ef2c32d6f R08: 00002000000002c0 R09: 0000000000000000
[  420.709713][T11904] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  420.709721][T11904] R13: 00007f1ef2e16128 R14: 00007f1ef2e16090 R15: 00007ffcf97a0d08
[  420.709739][T11904]  </TASK>
[  421.089448][T11907] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1063'.
[  421.112060][T11904] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1063'.
[  422.675515][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1074'.
[  422.861688][T11043] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  422.880151][T11043] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  422.890445][T11043] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  422.901205][T11043] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  422.923975][T11043] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  424.964011][ T9691] Bluetooth: hci11: command tx timeout
[  425.262119][T11942] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.303184][T11942] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.339761][T11942] bridge_slave_0: entered allmulticast mode
[  425.384472][T11942] bridge_slave_0: entered promiscuous mode
[  425.417295][T11942] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.458363][T11942] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.488085][T11942] bridge_slave_1: entered allmulticast mode
[  425.527776][T11942] bridge_slave_1: entered promiscuous mode
[  425.939051][T11942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.992275][T11942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.133492][T11942] team0: Port device team_slave_0 added
[  426.188658][T11942] team0: Port device team_slave_1 added
[  426.368744][T11942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.398319][T11942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.498920][T11942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.563332][T11942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.591184][T11942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.687939][T11942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.031516][ T9691] Bluetooth: hci11: command tx timeout
[  427.124195][T11942] hsr_slave_0: entered promiscuous mode
[  427.162452][T11942] hsr_slave_1: entered promiscuous mode
[  427.195765][T11942] debugfs: 'hsr0' already exists in 'hsr'
[  427.233329][T11942] Cannot create hsr debugfs directory
[  427.411536][T11988] Process accounting resumed
[  427.824233][T11942] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.976112][T12009] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  428.228952][T11942] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.607365][T11942] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.889441][T11942] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.113414][T11043] Bluetooth: hci11: command tx timeout
[  429.676917][T11942] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  429.746926][T11942] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  429.785423][T11942] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  429.832041][T11942] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  429.879583][T11942] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  429.934236][T11942] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  429.985202][T11942] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  430.044139][T11942] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  430.215328][T11043] Bluetooth: hci2: command 0x2016 tx timeout
[  430.393296][T11942] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.498478][T11942] 8021q: adding VLAN 0 to HW filter on device team0
[  430.570912][T11506] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.578116][T11506] bridge0: port 1(bridge_slave_0) entered forwarding state
[  430.718599][T11505] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.725774][T11505] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.170072][ T9691] Bluetooth: hci11: command tx timeout
[  432.932348][T11942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.151896][T11942] veth0_vlan: entered promiscuous mode
[  433.214126][T11942] veth1_vlan: entered promiscuous mode
[  433.368036][T11942] veth0_macvtap: entered promiscuous mode
[  433.464954][T11942] veth1_macvtap: entered promiscuous mode
[  433.506975][T11043] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  433.524731][T11043] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  433.533125][T11043] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  433.547769][T11043] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  433.562740][T11043] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  434.229397][T11942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.813199][T11942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.975337][T11503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.012471][T11503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.091087][T11503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.138304][T11503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.618624][T11501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.628525][T11043] Bluetooth: hci12: command tx timeout
[  435.685056][T11501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.890718][T11503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.940076][T11503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.371488][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'.
[  436.714649][T11501] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.844619][T12133] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1101'.
[  436.926553][T11501] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.150952][T11501] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.340383][T11501] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.611882][T12087] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.632315][T12087] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.654508][T12087] bridge_slave_0: entered allmulticast mode
[  437.683905][T12087] bridge_slave_0: entered promiscuous mode
[  437.701140][T11043] Bluetooth: hci12: command tx timeout
[  437.728272][T12087] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.762644][T12087] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.798854][T12087] bridge_slave_1: entered allmulticast mode
[  437.821607][T12087] bridge_slave_1: entered promiscuous mode
[  438.171887][T12087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  438.232295][T12087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  438.340037][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  438.351294][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  438.550484][T12087] team0: Port device team_slave_0 added
[  438.631801][T11501] bridge_slave_1: left allmulticast mode
[  438.667414][T11501] bridge_slave_1: left promiscuous mode
[  438.693239][T11501] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.756149][T11501] bridge_slave_0: left allmulticast mode
[  438.788305][T11501] bridge_slave_0: left promiscuous mode
[  438.833068][T11501] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.771274][T11043] Bluetooth: hci12: command tx timeout
[  439.889730][T11501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  439.954873][T11501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  439.997336][T11501] bond0 (unregistering): Released all slaves
[  440.070615][T12087] team0: Port device team_slave_1 added
[  440.353349][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1
[  440.468844][T12087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.491039][T12087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.589515][T12087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.626659][T12087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.656237][T12087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.744383][T12087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.634440][T12200] FAULT_INJECTION: forcing a failure.
[  441.634440][T12200] name failslab, interval 1, probability 0, space 0, times 0
[  441.797792][T12200] CPU: 0 UID: 0 PID: 12200 Comm: syz.1.1110 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  441.797821][T12200] Tainted: [L]=SOFTLOCKUP
[  441.797827][T12200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  441.797835][T12200] Call Trace:
[  441.797840][T12200]  <TASK>
[  441.797846][T12200]  dump_stack_lvl+0x100/0x190
[  441.797866][T12200]  should_fail_ex.cold+0x5/0xa
[  441.797885][T12200]  ? get_callchain_buffers+0x123/0x380
[  441.797922][T12200]  should_failslab+0xc2/0x120
[  441.797941][T12200]  __kmalloc_noprof+0xe0/0x850
[  441.797954][T12200]  ? __pfx_rcu_is_watching+0x10/0x10
[  441.797974][T12200]  get_callchain_buffers+0x123/0x380
[  441.797991][T12200]  ? bpf_lsm_capable+0x9/0x10
[  441.798005][T12200]  ? security_capable+0x80/0x260
[  441.798083][T12200]  stack_map_alloc+0x316/0x610
[  441.798101][T12200]  ? __pfx_stack_map_mem_usage+0x10/0x10
[  441.798117][T12200]  map_create+0x84e/0x2bc0
[  441.798146][T12200]  ? futex_unqueue+0x13d/0x2c0
[  441.798167][T12200]  ? __futex_wait+0x256/0x300
[  441.798188][T12200]  ? __pfx_map_create+0x10/0x10
[  441.798206][T12200]  ? __might_fault+0xc5/0x140
[  441.798226][T12200]  ? __might_fault+0xc5/0x140
[  441.798253][T12200]  __sys_bpf+0x2091/0x4b90
[  441.798269][T12200]  ? __pfx___sys_bpf+0x10/0x10
[  441.798282][T12200]  ? __pfx_futex_wait+0x10/0x10
[  441.798303][T12200]  ? ksys_write+0x190/0x250
[  441.798324][T12200]  ? do_futex+0x192/0x350
[  441.798348][T12200]  ? xfd_validate_state+0x129/0x190
[  441.798368][T12200]  __x64_sys_bpf+0x7b/0xc0
[  441.798382][T12200]  ? lockdep_hardirqs_on+0x78/0x100
[  441.798429][T12200]  do_syscall_64+0x115/0x840
[  441.798447][T12200]  ? clear_bhb_loop+0x40/0x90
[  441.798465][T12200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.798479][T12200] RIP: 0033:0x7fcf5579ce59
[  441.798492][T12200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.798506][T12200] RSP: 002b:00007fcf566e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  441.798521][T12200] RAX: ffffffffffffffda RBX: 00007fcf55a16090 RCX: 00007fcf5579ce59
[  441.798530][T12200] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000
[  441.798538][T12200] RBP: 00007fcf55832d6f R08: 0000000000000000 R09: 0000000000000000
[  441.798546][T12200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  441.798554][T12200] R13: 00007fcf55a16128 R14: 00007fcf55a16090 R15: 00007fff3bcf6898
[  441.798573][T12200]  </TASK>
[  442.410121][T11043] Bluetooth: hci12: command tx timeout
[  442.446615][T12087] hsr_slave_0: entered promiscuous mode
[  442.485201][T12087] hsr_slave_1: entered promiscuous mode
[  442.565610][T12087] debugfs: 'hsr0' already exists in 'hsr'
[  442.589029][T12087] Cannot create hsr debugfs directory
[  442.740258][T11501] hsr_slave_0: left promiscuous mode
[  442.755039][T11501] hsr_slave_1: left promiscuous mode
[  442.766399][T11501] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  442.804464][T11501] batman_adv: batadv0: Removing interface: batadv_slave_0
[  442.835042][T11501] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.857112][T11501] batman_adv: batadv0: Removing interface: batadv_slave_1
[  442.893869][T11501] veth1_macvtap: left promiscuous mode
[  442.906557][T11501] veth0_macvtap: left promiscuous mode
[  442.921495][T11501] veth1_vlan: left promiscuous mode
[  442.933831][T11501] veth0_vlan: left promiscuous mode
[  443.375993][T11501] team0 (unregistering): Port device team_slave_1 removed
[  443.412840][T11501] team0 (unregistering): Port device team_slave_0 removed
[  443.745660][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2
[  444.291925][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1113'.
[  444.418098][T12230] sd 0:0:1:0: PR command failed: 1026
[  444.449470][T12230] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  444.512643][T12230] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  444.655082][T12230] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1114'.
[  444.698091][T12087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.285529][T12087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.335156][T12248] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  445.335156][T12248] The task syz.1.1116 (12248) triggered the difference, watch for misbehavior.
[  445.526120][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3
[  445.671640][T12087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.962024][T12087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.015880][   T30] audit: type=1804 audit(1780638289.464:16): pid=12274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1118" name="/newroot/10/file0" dev="tmpfs" ino=69 res=1 errno=0
[  447.439980][T12087] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  447.505127][T12087] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  447.550440][T12087] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  447.625623][ T9691] Bluetooth: hci10: unexpected subevent 0x01 length: 3 < 18
[  447.676852][T12087] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  447.730989][T12087] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  447.802167][T12087] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  447.857976][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4
[  447.893093][T12291] RGB/YUV Input: =================  START STATUS  =================
[  447.906829][T12087] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  447.945293][T12087] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  448.056709][T12291] RGB/YUV Input: Test Pattern: 75% Colorbar
[  448.318192][T12291] RGB/YUV Input: Show Information: All
[  448.399286][T12291] RGB/YUV Input: Vertical Flip: false
[  448.440966][T12087] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.483909][T12291] RGB/YUV Input: Horizontal Flip: false
[  448.602670][T12291] RGB/YUV Input: Brightness: 128
[  448.626648][T12087] 8021q: adding VLAN 0 to HW filter on device team0
[  448.730550][T12291] RGB/YUV Input: Contrast: 128
[  448.760347][T11505] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.767487][T11505] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.831739][T12291] RGB/YUV Input: Hue: 0
[  448.911174][ T9838] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.918371][ T9838] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.954404][T12291] RGB/YUV Input: Saturation: 128
[  449.037519][T12291] RGB/YUV Input: Pixel Rate: 160000000
[  449.162730][T12291] RGB/YUV Input: Horizontal Blanking: 800
[  449.289270][T12291] RGB/YUV Input: Vertical Blanking: 3223
[  449.410631][T12291] RGB/YUV Input: ==================  END STATUS  ==================
[  450.119745][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'.
[  451.569682][T12087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.848394][T12087] veth0_vlan: entered promiscuous mode
[  451.914615][T12087] veth1_vlan: entered promiscuous mode
[  452.064329][T12087] veth0_macvtap: entered promiscuous mode
[  452.135083][T12087] veth1_macvtap: entered promiscuous mode
[  452.273662][T12087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.365568][T12087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.445563][T11505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.497471][T11505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.577875][T11505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.670338][T11505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.008660][ T9838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.064488][ T9838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.233707][T11501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.272832][T11501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.906882][T12391] capability: warning: `syz.3.1094' uses deprecated v2 capabilities in a way that may be insecure
[  454.028504][T12391] netlink: 'syz.3.1094': attribute type 1 has an invalid length.
[  454.841991][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'.
[  454.871457][T12410] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  455.054280][T12414] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  456.231987][ T9691] Bluetooth: hci12: unexpected subevent 0x01 length: 3 < 18
[  456.470370][T12438] RGB/YUV Input: =================  START STATUS  =================
[  456.539553][T12438] RGB/YUV Input: Test Pattern: 75% Colorbar
[  456.579091][T12438] RGB/YUV Input: Show Information: All
[  456.616869][T12438] RGB/YUV Input: Vertical Flip: false
[  456.668810][T12438] RGB/YUV Input: Horizontal Flip: false
[  456.704385][T12438] RGB/YUV Input: Brightness: 128
[  456.750019][T12438] RGB/YUV Input: Contrast: 128
[  456.789826][T12438] RGB/YUV Input: Hue: 0
[  456.806891][T12453] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  456.843497][T12438] RGB/YUV Input: Saturation: 128
[  456.882701][T12438] RGB/YUV Input: Pixel Rate: 160000000
[  456.929025][T12438] RGB/YUV Input: Horizontal Blanking: 800
[  456.986569][T12438] RGB/YUV Input: Vertical Blanking: 3223
[  457.029677][T12438] RGB/YUV Input: ==================  END STATUS  ==================
[  457.366299][T12460] random: crng reseeded on system resumption
[  457.490864][T12451] Process accounting paused
[  458.152797][T12469] ubi0: attaching mtd0
[  458.203958][T12469] ubi0: scanning is finished
[  458.232892][T12469] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  458.251237][T12476] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  458.327132][T12476] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  458.479849][T12469] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  458.825374][T12494] bridge0: port 3(veth1) entered blocking state
[  458.873381][T12494] bridge0: port 3(veth1) entered disabled state
[  458.915774][T12495] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  458.960365][T12494] veth1: entered allmulticast mode
[  459.004294][T12494] veth1: entered promiscuous mode
[  459.034199][T12494] bridge0: port 3(veth1) entered blocking state
[  459.040611][T12494] bridge0: port 3(veth1) entered forwarding state
[  459.451351][T12509] 
[  459.842510][ T9691] Bluetooth: hci11: unexpected subevent 0x01 length: 3 < 18
[  460.201147][T12517] RGB/YUV Input: =================  START STATUS  =================
[  460.312928][T12517] RGB/YUV Input: Test Pattern: 75% Colorbar
[  460.337382][T12540] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  460.376654][T12517] RGB/YUV Input: Show Information: All
[  460.485029][T12517] RGB/YUV Input: Vertical Flip: false
[  460.570303][T12517] RGB/YUV Input: Horizontal Flip: false
[  460.630629][T12517] RGB/YUV Input: Brightness: 128
[  460.677541][T12517] RGB/YUV Input: Contrast: 128
[  460.729277][T12517] RGB/YUV Input: Hue: 0
[  460.776695][T12517] RGB/YUV Input: Saturation: 128
[  460.814209][T12517] RGB/YUV Input: Pixel Rate: 160000000
[  460.861598][T12517] RGB/YUV Input: Horizontal Blanking: 800
[  460.914847][T12517] RGB/YUV Input: Vertical Blanking: 3223
[  460.963855][T12517] RGB/YUV Input: ==================  END STATUS  ==================
[  462.920600][T12600] FAULT_INJECTION: forcing a failure.
[  462.920600][T12600] name failslab, interval 1, probability 0, space 0, times 0
[  463.279334][T12600] CPU: 0 UID: 0 PID: 12600 Comm: syz.7.1173 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  463.279361][T12600] Tainted: [L]=SOFTLOCKUP
[  463.279367][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  463.279376][T12600] Call Trace:
[  463.279382][T12600]  <TASK>
[  463.279388][T12600]  dump_stack_lvl+0x100/0x190
[  463.279411][T12600]  should_fail_ex.cold+0x5/0xa
[  463.279433][T12600]  should_failslab+0xc2/0x120
[  463.279452][T12600]  __kmalloc_node_noprof+0xe6/0x850
[  463.279476][T12600]  ? mempool_init_node+0x11b/0x6e0
[  463.279516][T12600]  ? lockdep_init_map_type+0x5c/0x250
[  463.279543][T12600]  ? __pfx_mempool_free_slab+0x10/0x10
[  463.279573][T12600]  ? __pfx_mempool_alloc_slab+0x10/0x10
[  463.279604][T12600]  mempool_init_node+0x11b/0x6e0
[  463.279621][T12600]  ? __pfx_xa_load+0x10/0x10
[  463.279695][T12600]  ? __pfx_mempool_alloc_slab+0x10/0x10
[  463.279712][T12600]  ? __pfx_mempool_free_slab+0x10/0x10
[  463.279729][T12600]  mempool_init_noprof+0x3a/0x50
[  463.279749][T12600]  bioset_init+0x37e/0x8a0
[  463.279805][T12600]  ? __pfx_bioset_init+0x10/0x10
[  463.279832][T12600]  __alloc_disk_node+0x83/0x6b0
[  463.279895][T12600]  __blk_alloc_disk+0xd2/0x170
[  463.279912][T12600]  ? __pfx___blk_alloc_disk+0x10/0x10
[  463.279941][T12600]  ? __pfx_idr_alloc+0x10/0x10
[  463.279993][T12600]  ? lockdep_init_map_type+0x5c/0x250
[  463.280017][T12600]  ? __raw_spin_lock_init+0x3a/0x110
[  463.280036][T12600]  ? __pfx_hot_add_show+0x10/0x10
[  463.280095][T12600]  zram_add+0x1bf/0x5d0
[  463.280114][T12600]  ? __pfx_zram_add+0x10/0x10
[  463.280146][T12600]  ? find_held_lock+0x2b/0x80
[  463.280165][T12600]  ? sysfs_file_kobj+0xe4/0x290
[  463.280197][T12600]  ? __pfx_hot_add_show+0x10/0x10
[  463.280216][T12600]  hot_add_show+0x21/0x80
[  463.280234][T12600]  class_attr_show+0x72/0xa0
[  463.280280][T12600]  ? __pfx_class_attr_show+0x10/0x10
[  463.280296][T12600]  sysfs_kf_seq_show+0x217/0x3a0
[  463.280314][T12600]  seq_read_iter+0x32f/0x1270
[  463.280330][T12600]  ? lock_acquire+0x1b1/0x370
[  463.280377][T12600]  kernfs_fop_read_iter+0x46c/0x610
[  463.280399][T12600]  ? rw_verify_area+0xce/0x6d0
[  463.280415][T12600]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[  463.280438][T12600]  vfs_read+0x825/0xb30
[  463.280458][T12600]  ? __pfx_vfs_read+0x10/0x10
[  463.280486][T12600]  ksys_read+0x12a/0x250
[  463.280502][T12600]  ? __pfx_ksys_read+0x10/0x10
[  463.280520][T12600]  ? rcu_is_watching+0x12/0xc0
[  463.280539][T12600]  do_syscall_64+0x115/0x840
[  463.280558][T12600]  ? clear_bhb_loop+0x40/0x90
[  463.280576][T12600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.280591][T12600] RIP: 0033:0x7f1ef2b9ce59
[  463.280611][T12600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  463.280627][T12600] RSP: 002b:00007f1ef3aa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  463.280642][T12600] RAX: ffffffffffffffda RBX: 00007f1ef2e16090 RCX: 00007f1ef2b9ce59
[  463.280653][T12600] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006
[  463.280662][T12600] RBP: 00007f1ef2c32d6f R08: 0000000000000000 R09: 0000000000000000
[  463.280672][T12600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  463.280680][T12600] R13: 00007f1ef2e16128 R14: 00007f1ef2e16090 R15: 00007ffcf97a0d08
[  463.280701][T12600]  </TASK>
[  463.964021][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'.
[  464.451809][T12600] zram: Error allocating disk structure for device 1
[  466.191932][ T9691] Bluetooth: hci7: unexpected subevent 0x01 length: 3 < 18
[  466.590290][T12642] RGB/YUV Input: =================  START STATUS  =================
[  466.721391][T12642] RGB/YUV Input: Test Pattern: 75% Colorbar
[  466.818681][T12657] FAULT_INJECTION: forcing a failure.
[  466.818681][T12657] name fail_futex, interval 1, probability 0, space 0, times 0
[  466.882236][T12642] RGB/YUV Input: Show Information: All
[  466.920522][T12657] CPU: 0 UID: 0 PID: 12657 Comm: syz.1.1181 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  466.920547][T12657] Tainted: [L]=SOFTLOCKUP
[  466.920552][T12657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  466.920560][T12657] Call Trace:
[  466.920565][T12657]  <TASK>
[  466.920571][T12657]  dump_stack_lvl+0x100/0x190
[  466.920591][T12657]  should_fail_ex.cold+0x5/0xa
[  466.920609][T12657]  get_futex_key+0xf78/0x1510
[  466.920633][T12657]  ? __pfx_get_futex_key+0x10/0x10
[  466.920654][T12657]  ? lock_acquire+0x1b1/0x370
[  466.920680][T12657]  futex_wake+0xea/0x530
[  466.920698][T12657]  ? __pfx_futex_wake+0x10/0x10
[  466.920714][T12657]  ? exit_mm_release+0x19/0x30
[  466.920740][T12657]  do_futex+0x32b/0x350
[  466.920754][T12657]  ? __pfx_do_futex+0x10/0x10
[  466.920767][T12657]  ? __might_fault+0xc5/0x140
[  466.920792][T12657]  mm_release+0x24a/0x2f0
[  466.920809][T12657]  do_exit+0x707/0x2af0
[  466.920832][T12657]  ? __pfx_do_exit+0x10/0x10
[  466.920851][T12657]  ? do_raw_spin_lock+0x128/0x260
[  466.920865][T12657]  ? find_held_lock+0x2b/0x80
[  466.920881][T12657]  ? get_signal+0x7e5/0x2210
[  466.920899][T12657]  do_group_exit+0xd5/0x2a0
[  466.920920][T12657]  get_signal+0x20ff/0x2210
[  466.920943][T12657]  ? __pfx_get_signal+0x10/0x10
[  466.920961][T12657]  ? do_futex+0x192/0x350
[  466.920976][T12657]  arch_do_signal_or_restart+0x91/0x7a0
[  466.921021][T12657]  ? cap_task_prctl+0x104/0xa50
[  466.921081][T12657]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  466.921110][T12657]  ? rcu_is_watching+0x12/0xc0
[  466.921128][T12657]  exit_to_user_mode_loop+0x98/0x670
[  466.921155][T12657]  ? rcu_is_watching+0x12/0xc0
[  466.921171][T12657]  do_syscall_64+0x652/0x840
[  466.921191][T12657]  ? clear_bhb_loop+0x40/0x90
[  466.921208][T12657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.921222][T12657] RIP: 0033:0x7fcf5579ce59
[  466.921235][T12657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.921248][T12657] RSP: 002b:00007fcf566e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  466.921263][T12657] RAX: 0000000000000000 RBX: 00007fcf55a16098 RCX: 00007fcf5579ce59
[  466.921272][T12657] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcf55a16098
[  466.921280][T12657] RBP: 00007fcf55a16090 R08: 0000000000000000 R09: 0000000000000000
[  466.921288][T12657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  466.921296][T12657] R13: 00007fcf55a16128 R14: 00007fff3bcf67b0 R15: 00007fff3bcf6898
[  466.921315][T12657]  </TASK>
[  467.268041][T12642] RGB/YUV Input: Vertical Flip: false
[  467.273533][T12642] RGB/YUV Input: Horizontal Flip: false
[  467.279179][T12642] RGB/YUV Input: Brightness: 128
[  467.284212][T12642] RGB/YUV Input: Contrast: 128
[  467.288969][T12642] RGB/YUV Input: Hue: 0
[  467.293425][T12642] RGB/YUV Input: Saturation: 128
[  467.298387][T12642] RGB/YUV Input: Pixel Rate: 160000000
[  467.304391][T12642] RGB/YUV Input: Horizontal Blanking: 800
[  467.310172][T12642] RGB/YUV Input: Vertical Blanking: 3223
[  467.315912][T12642] RGB/YUV Input: ==================  END STATUS  ==================
[  467.428861][T12667] netlink: 208 bytes leftover after parsing attributes in process `syz.7.1183'.
[  471.966684][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032e24400: rx timeout, send abort
[  471.978161][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032e24400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  472.332652][T12769] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1203'.
[  472.483497][T12767] can: request_module (can-proto-5) failed.
[  472.706343][T12774] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1204'.
[  474.998043][T12795] kexec: Could not allocate control_code_buffer
[  475.605824][T12836] random: crng reseeded on system resumption
[  475.923630][T12836] netlink: 'syz.7.1212': attribute type 1 has an invalid length.
[  476.706833][T12866] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers
[  477.546756][T12857] kexec: Could not allocate control_code_buffer
[  479.422623][T12897] sysfs: cannot create duplicate filename '/class/ieee80211/›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask'
[  479.595314][T12897] CPU: 0 UID: 0 PID: 12897 Comm: syz.1.1222 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  479.595340][T12897] Tainted: [L]=SOFTLOCKUP
[  479.595345][T12897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  479.595355][T12897] Call Trace:
[  479.595360][T12897]  <TASK>
[  479.595366][T12897]  dump_stack_lvl+0x100/0x190
[  479.595389][T12897]  sysfs_warn_dup.cold+0x1c/0x28
[  479.595434][T12897]  sysfs_do_create_link_sd+0x113/0x140
[  479.595453][T12897]  sysfs_create_link+0x61/0xc0
[  479.595470][T12897]  device_add+0x675/0x1950
[  479.595539][T12897]  ? __pfx_device_add+0x10/0x10
[  479.595555][T12897]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  479.595586][T12897]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[  479.595674][T12897]  wiphy_register+0x1edd/0x2d90
[  479.595692][T12897]  ? __rtnl_unlock+0xb9/0xf0
[  479.595742][T12897]  ? __pfx_wiphy_register+0x10/0x10
[  479.595761][T12897]  ? __asan_memset+0x23/0x50
[  479.595785][T12897]  ? minstrel_ht_alloc+0x5e6/0x7f0
[  479.595866][T12897]  ieee80211_register_hw+0x3055/0x4570
[  479.595927][T12897]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  479.595951][T12897]  ? __pfx___debug_object_init+0x10/0x10
[  479.596020][T12897]  ? find_held_lock+0x2b/0x80
[  479.596040][T12897]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  479.596062][T12897]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  479.596176][T12897]  ? __hrtimer_setup+0x208/0x330
[  479.596195][T12897]  mac80211_hwsim_new_radio+0x2a01/0x5aa0
[  479.596250][T12897]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  479.596271][T12897]  ? __asan_memcpy+0x3c/0x60
[  479.596297][T12897]  hwsim_new_radio_nl+0xc5f/0x1370
[  479.596314][T12897]  ? rcu_is_watching+0x12/0xc0
[  479.596332][T12897]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  479.596356][T12897]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  479.596419][T12897]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  479.596449][T12897]  genl_family_rcv_msg_doit+0x214/0x300
[  479.596473][T12897]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  479.596494][T12897]  ? genl_get_cmd+0x3e7/0x760
[  479.596518][T12897]  ? bpf_lsm_capable+0x9/0x10
[  479.596534][T12897]  ? security_capable+0x80/0x260
[  479.596549][T12897]  ? ns_capable+0xd2/0xf0
[  479.596568][T12897]  genl_rcv_msg+0x560/0x800
[  479.596596][T12897]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.596618][T12897]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  479.596642][T12897]  netlink_rcv_skb+0x159/0x420
[  479.596662][T12897]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.596684][T12897]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.596710][T12897]  ? netlink_deliver_tap+0x1ae/0xcc0
[  479.596731][T12897]  genl_rcv+0x28/0x40
[  479.596750][T12897]  netlink_unicast+0x585/0x850
[  479.596771][T12897]  ? __pfx_netlink_unicast+0x10/0x10
[  479.596796][T12897]  netlink_sendmsg+0x8b0/0xda0
[  479.596818][T12897]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.596836][T12897]  ? __import_iovec+0x1d2/0x640
[  479.596909][T12897]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  479.596954][T12897]  ____sys_sendmsg+0x9e1/0xb70
[  479.597000][T12897]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.597022][T12897]  ? __pfx_____sys_sendmsg+0x10/0x10
[  479.597044][T12897]  ? rcu_is_watching+0x12/0xc0
[  479.597060][T12897]  ? ___sys_sendmsg+0x19d/0x1e0
[  479.597084][T12897]  ? kfree+0x1dd/0x6c0
[  479.597108][T12897]  ___sys_sendmsg+0x190/0x1e0
[  479.597131][T12897]  ? __pfx____sys_sendmsg+0x10/0x10
[  479.597170][T12897]  ? __pfx___might_resched+0x10/0x10
[  479.597195][T12897]  __sys_sendmmsg+0x205/0x430
[  479.597213][T12897]  ? __pfx___sys_sendmmsg+0x10/0x10
[  479.597244][T12897]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  479.597308][T12897]  ? kcov_ioctl+0x16a/0x720
[  479.597331][T12897]  __x64_sys_sendmmsg+0x9c/0x100
[  479.597347][T12897]  ? lockdep_hardirqs_on+0x78/0x100
[  479.597368][T12897]  do_syscall_64+0x115/0x840
[  479.597387][T12897]  ? clear_bhb_loop+0x40/0x90
[  479.597405][T12897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.597420][T12897] RIP: 0033:0x7fcf5579ce59
[  479.597434][T12897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.597449][T12897] RSP: 002b:00007fcf566e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  479.597465][T12897] RAX: ffffffffffffffda RBX: 00007fcf55a16090 RCX: 00007fcf5579ce59
[  479.597475][T12897] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  479.597484][T12897] RBP: 00007fcf55832d6f R08: 0000000000000000 R09: 0000000000000000
[  479.597494][T12897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  479.597502][T12897] R13: 00007fcf55a16128 R14: 00007fcf55a16090 R15: 00007fff3bcf6898
[  479.597523][T12897]  </TASK>
[  480.830987][   T30] audit: type=1804 audit(1780638323.219:17): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1224" name="/newroot/21/file0" dev="tmpfs" ino=127 res=1 errno=0
[  480.902154][   T30] audit: type=1804 audit(1780638323.229:18): pid=12908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1224" name="/newroot/21/file0" dev="tmpfs" ino=127 res=1 errno=0
[  481.292945][ T9691] Bluetooth: hci4: command 0x0406 tx timeout
[  483.252131][T12958] debugfs: '›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' already exists in 'ieee80211'
[  483.466866][T12967] sysfs: cannot create duplicate filename '/class/ieee80211/›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask'
[  483.576280][T12967] CPU: 0 UID: 0 PID: 12967 Comm: syz.0.1234 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  483.576309][T12967] Tainted: [L]=SOFTLOCKUP
[  483.576315][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  483.576325][T12967] Call Trace:
[  483.576331][T12967]  <TASK>
[  483.576337][T12967]  dump_stack_lvl+0x100/0x190
[  483.576359][T12967]  sysfs_warn_dup.cold+0x1c/0x28
[  483.576384][T12967]  sysfs_do_create_link_sd+0x113/0x140
[  483.576404][T12967]  sysfs_create_link+0x61/0xc0
[  483.576421][T12967]  device_add+0x675/0x1950
[  483.576441][T12967]  ? __pfx_device_add+0x10/0x10
[  483.576456][T12967]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  483.576479][T12967]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[  483.576508][T12967]  wiphy_register+0x1edd/0x2d90
[  483.576525][T12967]  ? __rtnl_unlock+0xb9/0xf0
[  483.576548][T12967]  ? __pfx_wiphy_register+0x10/0x10
[  483.576566][T12967]  ? __asan_memset+0x23/0x50
[  483.576589][T12967]  ? minstrel_ht_alloc+0x5e6/0x7f0
[  483.576619][T12967]  ieee80211_register_hw+0x3055/0x4570
[  483.576652][T12967]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  483.576673][T12967]  ? __pfx___debug_object_init+0x10/0x10
[  483.576696][T12967]  ? find_held_lock+0x2b/0x80
[  483.576715][T12967]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  483.576736][T12967]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  483.576759][T12967]  ? __hrtimer_setup+0x208/0x330
[  483.576776][T12967]  mac80211_hwsim_new_radio+0x2a01/0x5aa0
[  483.576808][T12967]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  483.576828][T12967]  ? __asan_memcpy+0x3c/0x60
[  483.576852][T12967]  hwsim_new_radio_nl+0xc5f/0x1370
[  483.576870][T12967]  ? rcu_is_watching+0x12/0xc0
[  483.576887][T12967]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  483.576911][T12967]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  483.576934][T12967]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  483.576961][T12967]  genl_family_rcv_msg_doit+0x214/0x300
[  483.576984][T12967]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  483.577005][T12967]  ? genl_get_cmd+0x3e7/0x760
[  483.577029][T12967]  ? bpf_lsm_capable+0x9/0x10
[  483.577044][T12967]  ? security_capable+0x80/0x260
[  483.577060][T12967]  ? ns_capable+0xd2/0xf0
[  483.577079][T12967]  genl_rcv_msg+0x560/0x800
[  483.577111][T12967]  ? __pfx_genl_rcv_msg+0x10/0x10
[  483.577134][T12967]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  483.577155][T12967]  ? ref_tracker_free+0x51f/0x6c0
[  483.577174][T12967]  netlink_rcv_skb+0x159/0x420
[  483.577194][T12967]  ? __pfx_genl_rcv_msg+0x10/0x10
[  483.577217][T12967]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  483.577243][T12967]  ? rcu_is_watching+0x12/0xc0
[  483.577264][T12967]  genl_rcv+0x28/0x40
[  483.577282][T12967]  netlink_unicast+0x585/0x850
[  483.577304][T12967]  ? __pfx_netlink_unicast+0x10/0x10
[  483.577329][T12967]  netlink_sendmsg+0x8b0/0xda0
[  483.577351][T12967]  ? __pfx_netlink_sendmsg+0x10/0x10
[  483.577368][T12967]  ? __import_iovec+0x1d2/0x640
[  483.577391][T12967]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  483.577409][T12967]  ____sys_sendmsg+0x9e1/0xb70
[  483.577428][T12967]  ? __pfx_netlink_sendmsg+0x10/0x10
[  483.577448][T12967]  ? __pfx_____sys_sendmsg+0x10/0x10
[  483.577470][T12967]  ? rcu_is_watching+0x12/0xc0
[  483.577486][T12967]  ? ___sys_sendmsg+0x19d/0x1e0
[  483.577503][T12967]  ? kfree+0x1dd/0x6c0
[  483.577526][T12967]  ___sys_sendmsg+0x190/0x1e0
[  483.577547][T12967]  ? __pfx____sys_sendmsg+0x10/0x10
[  483.577585][T12967]  ? __pfx___might_resched+0x10/0x10
[  483.577605][T12967]  __sys_sendmmsg+0x205/0x430
[  483.577623][T12967]  ? __pfx___sys_sendmmsg+0x10/0x10
[  483.577654][T12967]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  483.577676][T12967]  ? kcov_ioctl+0x16a/0x720
[  483.577698][T12967]  __x64_sys_sendmmsg+0x9c/0x100
[  483.577713][T12967]  ? lockdep_hardirqs_on+0x78/0x100
[  483.577733][T12967]  do_syscall_64+0x115/0x840
[  483.577753][T12967]  ? clear_bhb_loop+0x40/0x90
[  483.577771][T12967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.577787][T12967] RIP: 0033:0x7f1ec179ce59
[  483.577801][T12967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  483.577815][T12967] RSP: 002b:00007f1ec270f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  483.577831][T12967] RAX: ffffffffffffffda RBX: 00007f1ec1a16090 RCX: 00007f1ec179ce59
[  483.577841][T12967] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  483.577850][T12967] RBP: 00007f1ec1832d6f R08: 0000000000000000 R09: 0000000000000000
[  483.577859][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  483.577868][T12967] R13: 00007f1ec1a16128 R14: 00007f1ec1a16090 R15: 00007ffc3e011c48
[  483.577889][T12967]  </TASK>
[  488.270100][T13034] Line length is too long: Should be less than 4094
[  488.493673][T13027] Process accounting resumed
[  489.322476][   T30] audit: type=1806 audit(1780638331.994:19): xattr="" res=-22
[  489.760503][T13059] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1255'.
[  490.332845][T13072] FAULT_INJECTION: forcing a failure.
[  490.332845][T13072] name fail_futex, interval 1, probability 0, space 0, times 0
[  490.406349][T13072] CPU: 0 UID: 0 PID: 13072 Comm: syz.7.1258 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  490.406376][T13072] Tainted: [L]=SOFTLOCKUP
[  490.406382][T13072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  490.406391][T13072] Call Trace:
[  490.406396][T13072]  <TASK>
[  490.406402][T13072]  dump_stack_lvl+0x100/0x190
[  490.406424][T13072]  should_fail_ex.cold+0x5/0xa
[  490.406443][T13072]  get_futex_key+0x1d2/0x1510
[  490.406471][T13072]  ? __pfx_get_futex_key+0x10/0x10
[  490.406500][T13072]  futex_wake+0xea/0x530
[  490.406519][T13072]  ? __pfx_futex_wake+0x10/0x10
[  490.406539][T13072]  ? errseq_sample+0x51/0x70
[  490.406559][T13072]  ? file_init_path+0x48e/0x670
[  490.406581][T13072]  do_futex+0x32b/0x350
[  490.406596][T13072]  ? __pfx_do_futex+0x10/0x10
[  490.406611][T13072]  ? fd_install+0x223/0x580
[  490.406631][T13072]  __x64_sys_futex+0x34f/0x4d0
[  490.406647][T13072]  ? __sys_socket+0xac/0x260
[  490.406667][T13072]  ? __pfx___x64_sys_futex+0x10/0x10
[  490.406682][T13072]  ? exit_to_user_mode_loop+0xf3/0x670
[  490.406707][T13072]  ? rcu_is_watching+0x12/0xc0
[  490.406726][T13072]  do_syscall_64+0x115/0x840
[  490.406746][T13072]  ? clear_bhb_loop+0x40/0x90
[  490.406763][T13072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.406778][T13072] RIP: 0033:0x7f1ef2b9ce59
[  490.406792][T13072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  490.406806][T13072] RSP: 002b:00007f1ef3ac60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  490.406821][T13072] RAX: ffffffffffffffda RBX: 00007f1ef2e15fa8 RCX: 00007f1ef2b9ce59
[  490.406831][T13072] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1ef2e15fac
[  490.406840][T13072] RBP: 00007f1ef2e15fa0 R08: 0000000000000001 R09: 0000000000000000
[  490.406848][T13072] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  490.406857][T13072] R13: 00007f1ef2e16038 R14: 00007ffcf97a0c20 R15: 00007ffcf97a0d08
[  490.406876][T13072]  </TASK>
[  490.831009][T13080] netlink: 25 bytes leftover after parsing attributes in process `syz.7.1258'.
[  491.387198][T11043] Bluetooth: hci5: command 0x0406 tx timeout
[  495.958799][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1275'.
[  496.431136][T11043] Bluetooth: hci6: command 0x0406 tx timeout
[  497.581559][T13210] netlink: 'syz.3.1290': attribute type 19 has an invalid length.
[  497.621991][T13210] netlink: 226 bytes leftover after parsing attributes in process `syz.3.1290'.
[  499.469606][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  499.481495][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  499.683950][T13264] QAT: Device 250 not found
[  499.908504][T13266] can: request_module (can-proto-4) failed.
[  500.208206][ T9691] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18
[  500.584170][T13285] random: crng reseeded on system resumption
[  502.251212][T11043] Bluetooth: hci7: command 0x2016 tx timeout
[  502.966855][T11043] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18
[  502.984494][T11043] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0'
[  502.996819][T11043] CPU: 0 UID: 0 PID: 11043 Comm: kworker/u12:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  502.996847][T11043] Tainted: [L]=SOFTLOCKUP
[  502.996853][T11043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  502.996884][T11043] Workqueue: hci7 hci_rx_work
[  502.996986][T11043] Call Trace:
[  502.996991][T11043]  <TASK>
[  502.996999][T11043]  dump_stack_lvl+0x100/0x190
[  502.997018][T11043]  sysfs_warn_dup.cold+0x1c/0x28
[  502.997042][T11043]  sysfs_create_dir_ns+0x24b/0x2b0
[  502.997060][T11043]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  502.997075][T11043]  ? find_held_lock+0x2b/0x80
[  502.997094][T11043]  ? kobject_add_internal+0x25f/0x930
[  502.997136][T11043]  ? kobject_add_internal+0x25f/0x930
[  502.997153][T11043]  ? do_raw_spin_unlock+0x145/0x1e0
[  502.997172][T11043]  kobject_add_internal+0x2c8/0x930
[  502.997190][T11043]  kobject_add+0x16a/0x1e0
[  502.997206][T11043]  ? __pfx_kobject_add+0x10/0x10
[  502.997220][T11043]  ? class_to_subsys+0x10f/0x150
[  502.997241][T11043]  ? kobject_put+0xb9/0x640
[  502.997262][T11043]  ? _raw_spin_unlock+0x28/0x50
[  502.997293][T11043]  device_add+0x294/0x1950
[  502.997311][T11043]  ? __pfx_dev_set_name+0x10/0x10
[  502.997367][T11043]  ? __pfx_device_add+0x10/0x10
[  502.997385][T11043]  ? mgmt_send_event_skb+0x2fb/0x460
[  502.997442][T11043]  hci_conn_add_sysfs+0x1a3/0x260
[  502.997505][T11043]  le_conn_complete_evt+0x11eb/0x1f60
[  502.997572][T11043]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  502.997589][T11043]  ? __pfx_bt_warn+0x10/0x10
[  502.997626][T11043]  hci_le_conn_complete_evt+0x23c/0x3a0
[  502.997646][T11043]  ? skb_pull_data+0x15f/0x1e0
[  502.997695][T11043]  hci_le_meta_evt+0x34a/0x5f0
[  502.997738][T11043]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  502.997761][T11043]  hci_event_packet+0x51c/0xcd0
[  502.997780][T11043]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  502.997801][T11043]  ? __pfx_hci_event_packet+0x10/0x10
[  502.997824][T11043]  ? kcov_remote_start+0x374/0x660
[  502.997844][T11043]  ? lockdep_hardirqs_on+0x78/0x100
[  502.997869][T11043]  hci_rx_work+0x451/0xfc0
[  502.997890][T11043]  process_one_work+0xa0e/0x1980
[  502.997913][T11043]  ? __pfx_process_one_work+0x10/0x10
[  502.997933][T11043]  ? __pfx_hci_rx_work+0x10/0x10
[  502.997952][T11043]  worker_thread+0x5ef/0xe50
[  502.997971][T11043]  ? __pfx_worker_thread+0x10/0x10
[  502.997986][T11043]  ? kthread+0x13a/0x450
[  502.998005][T11043]  ? __pfx_worker_thread+0x10/0x10
[  502.998018][T11043]  kthread+0x370/0x450
[  502.998038][T11043]  ? __pfx_kthread+0x10/0x10
[  502.998060][T11043]  ret_from_fork+0x72b/0xd50
[  502.998077][T11043]  ? __pfx_ret_from_fork+0x10/0x10
[  502.998091][T11043]  ? rcu_is_watching+0x12/0xc0
[  502.998108][T11043]  ? __switch_to+0x800/0x1100
[  502.998127][T11043]  ? __switch_to_asm+0x39/0x70
[  502.998145][T11043]  ? __pfx_kthread+0x10/0x10
[  502.998167][T11043]  ret_from_fork_asm+0x1a/0x30
[  502.998194][T11043]  </TASK>
[  502.998361][T11043] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  503.329958][T11043] Bluetooth: hci7: failed to register connection device
[  503.410851][T13325] netlink: 206 bytes leftover after parsing attributes in process `syz.7.1308'.
[  503.439730][T13329] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  504.322495][T11043] Bluetooth: hci7: command 0x2016 tx timeout
[  504.534792][T13346] MTRR 1 not used
[  505.605122][T13363] netlink: 326 bytes leftover after parsing attributes in process `syz.7.1315'.
[  505.913867][T13369] syz.7.1317 (13369): /proc/13367/oom_adj is deprecated, please use /proc/13367/oom_score_adj instead.
[  505.979660][T13368] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1317'.
[  506.270479][T13368] virt_wifi0: entered allmulticast mode
[  506.378659][T11043] Bluetooth: hci7: command 0x2016 tx timeout
[  508.448125][T11043] Bluetooth: hci7: command 0x2016 tx timeout
[  508.895008][T13420] netlink: 'syz.0.1325': attribute type 1 has an invalid length.
[  509.726594][T13432] random: crng reseeded on system resumption
[  510.517630][T11043] Bluetooth: hci7: command 0x2016 tx timeout
[  510.565577][T13442] MTRR 1 not used
[  511.035939][ T9691] Bluetooth: hci12: unexpected subevent 0x01 length: 123 > 18
[  512.475853][T13471] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1337'.
[  513.907012][T13489] netlink: 'syz.3.1340': attribute type 1 has an invalid length.
[  514.887533][T13491] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in;
[  514.887533][T13491]    program syz.0.1341 not setting count and/or reply_len properly
[  515.207182][T13505] FAULT_INJECTION: forcing a failure.
[  515.207182][T13505] name failslab, interval 1, probability 0, space 0, times 0
[  515.311687][T13505] CPU: 0 UID: 0 PID: 13505 Comm: syz.7.1344 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  515.311715][T13505] Tainted: [L]=SOFTLOCKUP
[  515.311721][T13505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  515.311730][T13505] Call Trace:
[  515.311735][T13505]  <TASK>
[  515.311741][T13505]  dump_stack_lvl+0x100/0x190
[  515.311763][T13505]  should_fail_ex.cold+0x5/0xa
[  515.311783][T13505]  should_failslab+0xc2/0x120
[  515.311802][T13505]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  515.311825][T13505]  ? __d_alloc+0x34/0xa40
[  515.311850][T13505]  __d_alloc+0x34/0xa40
[  515.311871][T13505]  d_alloc_pseudo+0x1c/0xc0
[  515.311885][T13505]  alloc_file_pseudo+0xcf/0x230
[  515.311908][T13505]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  515.311934][T13505]  __shmem_file_setup+0x205/0x460
[  515.311955][T13505]  ? __pfx___shmem_file_setup+0x10/0x10
[  515.311977][T13505]  ? vm_area_alloc+0x1f/0x160
[  515.312000][T13505]  shmem_zero_setup+0x96/0x1b0
[  515.312019][T13505]  __mmap_region+0x2509/0x2dd0
[  515.312045][T13505]  ? __pfx___mmap_region+0x10/0x10
[  515.312072][T13505]  ? find_held_lock+0x2b/0x80
[  515.312089][T13505]  ? process_measurement+0x4c8/0x2350
[  515.312174][T13505]  ? process_measurement+0x4c8/0x2350
[  515.312197][T13505]  ? __lock_acquire+0x4a5/0x2630
[  515.312221][T13505]  ? do_raw_spin_unlock+0x145/0x1e0
[  515.312239][T13505]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  515.312267][T13505]  ? find_held_lock+0x2b/0x80
[  515.312286][T13505]  ? rcu_is_watching+0x12/0xc0
[  515.312310][T13505]  ? rcu_is_watching+0x12/0xc0
[  515.312335][T13505]  ? finish_task_switch.isra.0+0x2cb/0x1010
[  515.312355][T13505]  ? lockdep_hardirqs_on+0x78/0x100
[  515.312406][T13505]  mmap_region+0x35d/0x620
[  515.312422][T13505]  ? rcu_is_watching+0x12/0xc0
[  515.312438][T13505]  ? __pfx_mmap_region+0x10/0x10
[  515.312455][T13505]  ? cap_mmap_addr+0x4b/0x120
[  515.312469][T13505]  ? bpf_lsm_mmap_addr+0x9/0x30
[  515.312490][T13505]  ? security_mmap_addr+0x71/0x1e0
[  515.312510][T13505]  ? __get_unmapped_area+0x255/0x3e0
[  515.312531][T13505]  do_mmap+0xc63/0x12f0
[  515.312553][T13505]  ? __pfx_do_mmap+0x10/0x10
[  515.312571][T13505]  ? __pfx_down_write_killable+0x10/0x10
[  515.312597][T13505]  vm_mmap_pgoff+0x29e/0x470
[  515.312619][T13505]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  515.312638][T13505]  ? do_futex+0x192/0x350
[  515.312654][T13505]  ? __pfx_do_futex+0x10/0x10
[  515.312672][T13505]  ksys_mmap_pgoff+0xe4/0x610
[  515.312690][T13505]  ? __x64_sys_futex+0x358/0x4d0
[  515.312706][T13505]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  515.312722][T13505]  ? xfd_validate_state+0x129/0x190
[  515.312737][T13505]  ? ksys_write+0x1ac/0x250
[  515.312757][T13505]  __x64_sys_mmap+0x125/0x190
[  515.312775][T13505]  do_syscall_64+0x115/0x840
[  515.312794][T13505]  ? clear_bhb_loop+0x40/0x90
[  515.312812][T13505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.312827][T13505] RIP: 0033:0x7f1ef2b9ce59
[  515.312841][T13505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  515.312856][T13505] RSP: 002b:00007f1ef3ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  515.312871][T13505] RAX: ffffffffffffffda RBX: 00007f1ef2e15fa0 RCX: 00007f1ef2b9ce59
[  515.312881][T13505] RDX: 00000000000000e3 RSI: 0000000000020009 RDI: 0000000000000000
[  515.312890][T13505] RBP: 00007f1ef2c32d6f R08: 00040000000000a1 R09: 0000000000008000
[  515.312899][T13505] R10: 0000000100000eb1 R11: 0000000000000246 R12: 0000000000000000
[  515.312908][T13505] R13: 00007f1ef2e16038 R14: 00007f1ef2e15fa0 R15: 00007ffcf97a0d08
[  515.312928][T13505]  </TASK>
[  516.847075][ T9811] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  516.865898][ T9811] Bluetooth: hci8: command 0x0406 tx timeout
[  516.882374][ T9811] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  516.913813][ T9811] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  516.988598][ T9710] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  517.074705][ T9710] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  518.583269][T13503] Process accounting paused
[  519.192572][ T9710] Bluetooth: hci9: command tx timeout
[  519.343089][T13509] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.388436][T13509] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.429178][T13509] bridge_slave_0: entered allmulticast mode
[  519.474608][T13509] bridge_slave_0: entered promiscuous mode
[  519.519488][T13509] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.556993][T13509] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.590240][T13509] bridge_slave_1: entered allmulticast mode
[  519.626959][T13509] bridge_slave_1: entered promiscuous mode
[  519.834310][T13509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.901276][T13509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.055256][T13509] team0: Port device team_slave_0 added
[  520.098113][T13509] team0: Port device team_slave_1 added
[  520.223481][T13509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.269643][T13509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  520.424645][T13509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.528043][T13509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.575168][T13509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  520.718385][T13509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  521.102334][   T31] INFO: task syz-executor:5633 blocked for more than 143 seconds.
[  521.119813][   T31]       Tainted: G             L      syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  521.151126][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  521.195041][   T31] task:syz-executor    state:D stack:23000 pid:5633  tgid:5633  ppid:1      task_flags:0x400140 flags:0x00080002
[  521.250235][   T31] Call Trace:
[  521.261626][ T9710] Bluetooth: hci9: command tx timeout
[  521.271455][   T31]  <TASK>
[  521.290099][   T31]  __schedule+0x1295/0x67a0
[  521.304433][   T31]  ? __pfx___schedule+0x10/0x10
[  521.329591][   T31]  ? find_held_lock+0x2b/0x80
[  521.374538][   T31]  ? schedule+0x2bf/0x390
[  521.405827][   T31]  schedule+0xdd/0x390
[  521.453301][   T31]  schedule_preempt_disabled+0x13/0x30
[  521.492466][   T31]  __mutex_lock+0xced/0x1b10
[  521.515417][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  521.544398][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  521.571239][   T31]  ? net_generic+0xea/0x2a0
[  521.587711][   T31]  ? net_generic+0xea/0x2a0
[  521.604059][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  521.624749][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  521.642240][   T31]  nfsd_umount+0x3b/0x60
[  521.662307][   T31]  deactivate_locked_super+0xc1/0x1b0
[  521.679500][   T31]  deactivate_super+0xe7/0x110
[  521.691496][   T31]  cleanup_mnt+0x21f/0x450
[  521.724930][   T31]  task_work_run+0x150/0x240
[  521.743889][   T31]  ? __pfx_task_work_run+0x10/0x10
[  521.760934][   T31]  ? rcu_is_watching+0x12/0xc0
[  521.785584][   T31]  exit_to_user_mode_loop+0x157/0x670
[  521.797831][   T31]  ? rcu_is_watching+0x12/0xc0
[  521.813261][   T31]  do_syscall_64+0x652/0x840
[  521.833540][   T31]  ? clear_bhb_loop+0x40/0x90
[  521.849948][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.869074][   T31] RIP: 0033:0x7ff144f9e097
[  521.885607][   T31] RSP: 002b:00007fff12ad4838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  521.915310][   T31] RAX: 0000000000000000 RBX: 00007ff1450321ca RCX: 00007ff144f9e097
[  521.945706][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff12ad48f0
[  521.978939][   T31] RBP: 00007fff12ad48f0 R08: 00007fff12ad58f0 R09: 00000000ffffffff
[  522.000952][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff12ad5980
[  522.025161][   T31] R13: 00007ff1450321ca R14: 000000000005a4b0 R15: 00007fff12ad59c0
[  522.055065][   T31]  </TASK>
[  522.077076][   T31] INFO: task syz-executor:5634 blocked for more than 164 seconds.
[  522.100989][   T31]       Tainted: G             L      syzkaller #0
[  522.111224][T13509] hsr_slave_0: entered promiscuous mode
[  522.137872][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  522.147676][T13509] hsr_slave_1: entered promiscuous mode
[  522.167138][T13509] debugfs: 'hsr0' already exists in 'hsr'
[  522.176003][   T31] task:syz-executor    state:D stack:23448 pid:5634  tgid:5634  ppid:1      task_flags:0x400140 flags:0x00080002
[  522.202609][T13509] Cannot create hsr debugfs directory
[  522.225967][   T31] Call Trace:
[  522.244226][   T31]  <TASK>
[  522.257599][   T31]  __schedule+0x1295/0x67a0
[  522.276570][   T31]  ? __pfx___schedule+0x10/0x10
[  522.292745][   T31]  ? find_held_lock+0x2b/0x80
[  522.308549][   T31]  ? schedule+0x2bf/0x390
[  522.330138][   T31]  schedule+0xdd/0x390
[  522.355529][   T31]  schedule_preempt_disabled+0x13/0x30
[  522.371505][   T31]  __mutex_lock+0xced/0x1b10
[  522.387130][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  522.403137][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  522.419521][   T31]  ? net_generic+0xea/0x2a0
[  522.453650][   T31]  ? net_generic+0xea/0x2a0
[  522.471405][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  522.488199][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  522.507893][   T31]  nfsd_umount+0x3b/0x60
[  522.517848][   T31]  deactivate_locked_super+0xc1/0x1b0
[  522.549453][   T31]  deactivate_super+0xe7/0x110
[  522.565039][   T31]  cleanup_mnt+0x21f/0x450
[  522.588635][   T31]  task_work_run+0x150/0x240
[  522.596513][   T31]  ? __pfx_task_work_run+0x10/0x10
[  522.627686][   T31]  ? rcu_is_watching+0x12/0xc0
[  522.632564][   T31]  exit_to_user_mode_loop+0x157/0x670
[  522.654925][   T31]  ? rcu_is_watching+0x12/0xc0
[  522.672470][   T31]  do_syscall_64+0x652/0x840
[  522.688115][   T31]  ? clear_bhb_loop+0x40/0x90
[  522.713734][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.723221][   T31] RIP: 0033:0x7efd9519e097
[  522.736873][   T31] RSP: 002b:00007fff82bb8508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  522.771468][   T31] RAX: 0000000000000000 RBX: 00007efd952321ca RCX: 00007efd9519e097
[  522.802708][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff82bb85c0
[  522.834544][   T31] RBP: 00007fff82bb85c0 R08: 00007fff82bb95c0 R09: 00000000ffffffff
[  522.860694][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff82bb9650
[  522.894485][   T31] R13: 00007efd952321ca R14: 0000000000057182 R15: 00007fff82bb9690
[  522.922682][   T31]  </TASK>
[  522.932702][   T31] INFO: task syz-executor:9809 blocked for more than 165 seconds.
[  523.015118][   T31]       Tainted: G             L      syzkaller #0
[  523.043574][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  523.073705][   T31] task:syz-executor    state:D stack:23368 pid:9809  tgid:9809  ppid:1      task_flags:0x400140 flags:0x00080002
[  523.117204][   T31] Call Trace:
[  523.128636][   T31]  <TASK>
[  523.138415][   T31]  __schedule+0x1295/0x67a0
[  523.156700][   T31]  ? __pfx___schedule+0x10/0x10
[  523.172549][   T31]  ? find_held_lock+0x2b/0x80
[  523.202070][   T31]  ? schedule+0x2bf/0x390
[  523.206594][   T31]  schedule+0xdd/0x390
[  523.210811][   T31]  schedule_preempt_disabled+0x13/0x30
[  523.237987][   T31]  __mutex_lock+0xced/0x1b10
[  523.259442][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  523.275609][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  523.291775][   T31]  ? net_generic+0xea/0x2a0
[  523.305509][   T31]  ? net_generic+0xea/0x2a0
[  523.330999][ T9710] Bluetooth: hci9: command tx timeout
[  523.341765][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  523.357327][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  523.372354][   T31]  nfsd_umount+0x3b/0x60
[  523.386639][   T31]  deactivate_locked_super+0xc1/0x1b0
[  523.402535][   T31]  deactivate_super+0xe7/0x110
[  523.418705][   T31]  cleanup_mnt+0x21f/0x450
[  523.432341][   T31]  task_work_run+0x150/0x240
[  523.447565][   T31]  ? __pfx_task_work_run+0x10/0x10
[  523.473999][   T31]  ? rcu_is_watching+0x12/0xc0
[  523.497295][   T31]  exit_to_user_mode_loop+0x157/0x670
[  523.512456][   T31]  ? rcu_is_watching+0x12/0xc0
[  523.527927][   T31]  do_syscall_64+0x652/0x840
[  523.541759][   T31]  ? clear_bhb_loop+0x40/0x90
[  523.564374][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.588792][   T31] RIP: 0033:0x7f151c79e097
[  523.603514][   T31] RSP: 002b:00007ffcbdca9878 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  523.638881][   T31] RAX: 0000000000000000 RBX: 00007f151c8321ca RCX: 00007f151c79e097
[  523.666326][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbdca9930
[  523.692950][   T31] RBP: 00007ffcbdca9930 R08: 00007ffcbdcaa930 R09: 00000000ffffffff
[  523.719041][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcbdcaa9c0
[  523.743466][   T31] R13: 00007f151c8321ca R14: 0000000000055a61 R15: 00007ffcbdcaaa00
[  523.774937][   T31]  </TASK>
[  523.801643][   T31] 
[  523.801643][   T31] Showing all locks held in the system:
[  523.849640][   T31] 1 lock held by khungtaskd/31:
[  523.881620][   T31]  #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  523.931986][   T31] 2 locks held by syz-executor/5633:
[  523.954364][   T31]  #0: ffff888069ca40d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  523.993354][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  524.034793][   T31] 2 locks held by syz-executor/5634:
[  524.046747][   T31]  #0: ffff8880348080d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  524.077273][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  524.090223][   T31] 2 locks held by syz-executor/9809:
[  524.107976][   T31]  #0: ffff88803114e0d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  524.128736][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  524.142887][   T31] 2 locks held by syz.0.861/10608:
[  524.148316][   T31]  #0: ffffffff906b4a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  524.156754][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  524.171463][   T31] 2 locks held by syz-executor/10857:
[  524.177086][   T31]  #0: ffff88802fc940d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  524.187927][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  524.197880][   T31] 2 locks held by syz-executor/11084:
[  524.203261][   T31]  #0: ffff88807e4f80d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  524.214095][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  524.225410][   T31] 2 locks held by syz.5.990/11358:
[  524.233447][   T31]  #0: ffff888032a4c0d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  524.245463][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  524.255568][   T31] 2 locks held by syz-executor/11535:
[  524.260985][   T31]  #0: ffff8880798a00d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  524.276618][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  524.287489][   T31] 2 locks held by syz-executor/11942:
[  524.292926][   T31]  #0: ffff8880374380d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  524.304017][   T31]  #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  524.313858][   T31] 1 lock held by syz-executor/13509:
[  524.319522][   T31]  #0: ffff88803faf4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[  524.331156][   T31] 2 locks held by syz.0.1348/13549:
[  524.338925][   T31]  #0: ffffffff905ed8c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  524.350711][   T31]  #1: ffffffff90606620 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0
[  524.360260][   T31] 1 lock held by syz.3.1350/13543:
[  524.365653][   T31]  #0: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  524.382001][   T31] 2 locks held by syz.7.1352/13545:
[  524.387514][   T31]  #0: ffffffff905ed8c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  524.397873][   T31]  #1: ffffffff90606620 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x15/0xa0
[  524.463513][   T31] 
[  524.467848][   T31] =============================================
[  524.467848][   T31] 
[  524.519000][   T31] NMI backtrace for cpu 0
[  524.519017][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  524.519037][   T31] Tainted: [L]=SOFTLOCKUP
[  524.519042][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  524.519050][   T31] Call Trace:
[  524.519055][   T31]  <TASK>
[  524.519060][   T31]  dump_stack_lvl+0x100/0x190
[  524.519081][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  524.519098][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  524.519135][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  524.519154][   T31]  sys_info+0x141/0x190
[  524.519166][   T31]  watchdog+0xcb1/0x1030
[  524.519189][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  524.519207][   T31]  ? __pfx_watchdog+0x10/0x10
[  524.519226][   T31]  ? __kthread_parkme+0x18c/0x230
[  524.519245][   T31]  ? kthread+0x13a/0x450
[  524.519264][   T31]  ? __pfx_watchdog+0x10/0x10
[  524.519280][   T31]  kthread+0x370/0x450
[  524.519299][   T31]  ? __pfx_kthread+0x10/0x10
[  524.519319][   T31]  ret_from_fork+0x72b/0xd50
[  524.519334][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  524.519349][   T31]  ? __switch_to+0x800/0x1100
[  524.519367][   T31]  ? __switch_to_asm+0x39/0x70
[  524.519383][   T31]  ? __pfx_kthread+0x10/0x10
[  524.519404][   T31]  ret_from_fork_asm+0x1a/0x30
[  524.519429][   T31]  </TASK>
[  525.127274][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  525.134240][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  525.144923][   T31] Tainted: [L]=SOFTLOCKUP
[  525.149261][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  525.159306][   T31] Call Trace:
[  525.162575][   T31]  <TASK>
[  525.165495][   T31]  dump_stack_lvl+0x100/0x190
[  525.170171][   T31]  vpanic+0x552/0x970
[  525.174250][   T31]  ? __pfx_vpanic+0x10/0x10
[  525.178825][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  525.184988][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  525.191155][   T31]  panic+0xd1/0xe0
[  525.194881][   T31]  ? __pfx_panic+0x10/0x10
[  525.199313][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  525.205477][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  525.211729][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  525.217873][   T31]  ? watchdog.cold+0x1ec/0x234
[  525.222629][   T31]  ? watchdog+0xcc1/0x1030
[  525.227038][   T31]  watchdog.cold+0x1fd/0x234
[  525.231637][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  525.237453][   T31]  ? __pfx_watchdog+0x10/0x10
[  525.242133][   T31]  ? __kthread_parkme+0x18c/0x230
[  525.247151][   T31]  ? kthread+0x13a/0x450
[  525.251383][   T31]  ? __pfx_watchdog+0x10/0x10
[  525.256048][   T31]  kthread+0x370/0x450
[  525.260107][   T31]  ? __pfx_kthread+0x10/0x10
[  525.264804][   T31]  ret_from_fork+0x72b/0xd50
[  525.269380][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  525.274503][   T31]  ? __switch_to+0x800/0x1100
[  525.279187][   T31]  ? __switch_to_asm+0x39/0x70
[  525.283942][   T31]  ? __pfx_kthread+0x10/0x10
[  525.288619][   T31]  ret_from_fork_asm+0x1a/0x30
[  525.293456][   T31]  </TASK>
[  525.296548][   T31] Kernel Offset: disabled
[  525.300872][   T31] Rebooting in 86400 seconds..