last executing test programs:

9m15.022714946s ago: executing program 0 (id=397):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0xa, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
r0 = socket(0x18, 0x1, 0x0)
socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x8982, 0x4)

9m14.536481234s ago: executing program 0 (id=399):
mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x401, 0x8000000000000001)
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d") (async, rerun: 64)
mmap$auto(0x10000, 0x5, 0xdf, 0x9b72, 0x2, 0x8000008001) (async, rerun: 64)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
mmap$auto(0x0, 0x3000f, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) (async)
r1 = socket(0x1d, 0x2, 0x6)
prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x6, 0x2ba, 0xe77b, 0x9) (async)
fstatfs$auto(0x3, 0x0) (async)
setsockopt$auto(r1, 0x6a, 0x1, 0x0, 0xc)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socket(0x8, 0x2, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) (async)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
write$auto(r2, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) (async, rerun: 64)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) (async, rerun: 64)
execve$auto(0x0, 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async, rerun: 64)
read$auto(0x3, 0x0, 0x8080) (rerun: 64)
sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008004)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async, rerun: 64)
socket(0xa, 0x1, 0x84) (rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)

8m59.155439347s ago: executing program 32 (id=399):
mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x401, 0x8000000000000001)
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d") (async, rerun: 64)
mmap$auto(0x10000, 0x5, 0xdf, 0x9b72, 0x2, 0x8000008001) (async, rerun: 64)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
mmap$auto(0x0, 0x3000f, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) (async)
r1 = socket(0x1d, 0x2, 0x6)
prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x6, 0x2ba, 0xe77b, 0x9) (async)
fstatfs$auto(0x3, 0x0) (async)
setsockopt$auto(r1, 0x6a, 0x1, 0x0, 0xc)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socket(0x8, 0x2, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) (async)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
write$auto(r2, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) (async, rerun: 64)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) (async, rerun: 64)
execve$auto(0x0, 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async, rerun: 64)
read$auto(0x3, 0x0, 0x8080) (rerun: 64)
sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008004)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async, rerun: 64)
socket(0xa, 0x1, 0x84) (rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)

2m47.062524032s ago: executing program 3 (id=1589):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/id\x00', 0x100880, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x48401, 0x0)
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
ioctl$auto(r0, 0x64c2, 0x1e2)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
socket(0x2, 0x5, 0x0)
io_uring_setup$auto(0xffd, 0x0)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0xffffffffffffffff)
ioctl$auto(0x3, 0x4010ae67, 0x38)
r2 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x8, 0x1, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd)
syz_clone3(&(0x7f0000000280)={0x1e02c857826e6653, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/snd/midiC2D2\x00', 0x40881, 0x0)
socket(0xa, 0x3, 0x3b)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103281, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
write$auto(0xca, &(0x7f0000000280)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2\xd7Z\x85\x83\xfc\x9c\xf2\xae\xd6\xb6\x9f\xf4|u;K2\x14\x88J\x10\x1d:*\xa9\x804\f\xe3\xdcu-?\x9e\x88.\xe5\xb7g\x04\xd4e\xbd\x84\x8d@\xe7\x80G\x16\xec3\xbd\x97\xbe\x8fH\x81\xe4sc@\xf2\x9e3\xfd\xfb\x18`0\x93\'\xa1\'\xec\a)\xff\\\xb2\n32\xe0\x8a\xa80\x89\xe5\f\xab\xa5\xa7\xa8\xf0\x1a#\xa1\xc9r\x9b\xec\xc5\xcd\xf8@\xc78\"x V\xe7\xbc^\xf8\xe1\n|{Z\x1f\xcf\xdcV\xe8\x16\xc7\xdf`\xfd\xc9q\x7f0sF\x19\xb85l\x8aI\x95\xb3\xb0\x04!&gq\xdc#\x8e{\xd6\x06G\xb1\xbcS\xd5\xf2A\x1f\xd0QMf\xcf\xfdO\xcc+\x16V\x17,,\x8e\x91\x8f\xc9>OZ\x8b\x11\xac\xce\xabe=0\x9d\x12>Hm^\xfe\x8c\x13\xc0\x94\xd3\xd5\xbd\x887,\xaag))`=\'\x16\xe0\x9b\xd9\x05\xb9\x8c\x7f5M\xb2\x03aZ\xb7\xdfJ6_[\'\xb1\xca\x84\xf2\xc44!\x97d\v\xa2 <\xdd', 0x400)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)=@bpf_attr_4={0xfff, 0xffffffffffffffff, 0x4}, 0x7)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42)
socket$nl_generic(0x10, 0x3, 0x10)

2m45.997942523s ago: executing program 3 (id=1592):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000008000)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
setpriority$auto(0x7, 0x8, 0x8)
r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cpu/0/cpuid\x00', 0xad80, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0)
write$auto(r0, &(0x7f0000000000)='/dev/cpu/0/cpuid\x00', 0x8)
readv$auto(r0, &(0x7f0000000680)={0x0, 0x40200}, 0x3)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x41)
syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff)
mkdir$auto(&(0x7f0000000200)='./file0/file0\x00', 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f00000000c0)=0x8)
getsockopt$auto(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x24800, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x1, 0x0)
ioctl$auto_FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000040))
mremap$auto(0x401, 0x0, 0x7fda, 0x6, 0x3)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub4/info\x00', 0x420040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d9054347db3c28701c67fa1e57d81b881638b518dd8e24969b7fd10406fcf6eb9bb66bf56ed7568510c72b380fa6e")

2m43.129549372s ago: executing program 3 (id=1599):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x40000a, 0x80000001, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54)
read$auto(0x3, 0x0, 0x8080)
write$auto(0x3, 0x0, 0xffd8)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
pwritev2$auto(r0, &(0x7f0000000140)={0x0, 0x8001}, 0x2, 0x9, 0x6, 0x9)
r1 = prctl$auto_PR_SET_MM_BRK(0xd, 0x7, 0xffffffffffffffff, 0x96, 0x6)
r2 = socket(0x15, 0x5, 0x0)
r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
vmsplice$auto(r3, &(0x7f0000000100)={&(0x7f0000000000)="fd595189e4955c1c5cedb487f057fc344976384e8530966427bc98f74d3013fab15d4105d217584f73fc15155d0569e28c99a1be15098bba31b20ecdd902c8e1b6ef303030e5f690f13d1a19efe5a364988da8efb61c7dcb3ec0abda56d961feb824afd0eb0de38e1b2790dca8fce65a48cffc3fb320a965b07ba2eb6f96a4181030f5f921a20bc99ce62d39305ea44abf4e355605257325f85e1d90a6a0f2d1f7af7dadb9a8cc04d96228e62ce0941805efc405f920d5f984831ff16dd1feeaff5b7343ebdf3160e9f760fc60d81b9ca3a6f9b1b685a060eea40b822c6822702188997c8bb5", 0x3802}, 0x7cfd6eb0, 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0)
sendfile$auto(r5, r5, 0x0, 0x7fffe000)
r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d1}, 0x40090)
sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="2ca9e7cd2d7fd73e118c46ae3383b2113ef259e07cb5449c13c2154181a6fe52e7fa220ad4a42afce38d9bb482a4a66ba73cacc6b3eca9e9407e21aa9eaca520f17d37b5e5bb5fb3", @ANYRES16=r6, @ANYBLOB="00042abd7000fedbdf25120000000c0017004b0000000000000020023080120014007d232d9723bf3a2a232e5c5df800000008008100", @ANYRES32=r3, @ANYBLOB="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"/540], 0x25c}, 0x1, 0x0, 0x0, 0x8000}, 0x40808)
waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000200)={@siginfo_0_0={0x82e1, 0x2, 0xd, @_sigfault={&(0x7f0000000180)="e9db4a77a724b113718c7815c703973141fd5749ecc94a6577fbc7d0dd43e1f5d12e55db1becedc5232d549d4c5015f838f078ffebbfc2ab7f75555a98fa0cf73ecb9f1e206585dcee51462472ac90808f5d36f67741ceae1a5ffe673b0e7a3defb7593542073e308c725783c43d42c7b2aff9afe01f95810b28", @_perf={0x4, 0x40}}}}, 0xe, &(0x7f0000000280)={{0x8, 0x6f4e}, {0x3ff, 0xf}, 0x4, 0xbba1, 0xff0, 0x8, 0x1ee, 0x81c, 0xa6a, 0x8, 0x7, 0x8, 0x7fffffffffffffff, 0x2, 0x1, 0x1})
sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
bind$auto(r2, &(0x7f0000000040)=@generic={0xa, "986d17a55d9b07bcc94c4e3770c4"}, 0x6a)
ioctl$auto_PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000040)={0x9, 0x2})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)

2m43.056089633s ago: executing program 3 (id=1600):
mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0xa, 0x3, 0x3a)
bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x1}}, 0x6a)
r0 = getpid()
mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101880, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000008000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xd, 0x0, 0xb0cd, 0x0, 0x1fc, 0xffffffbd}, 0x895}, 0x0, 0x200000)
r1 = getpid()
sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='{'], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4080)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24020054)
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
rt_sigpending$auto(0x0, 0x8)
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0)
madvise$auto(0x2, 0x99c5, 0xc)
setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567)

2m42.649366453s ago: executing program 3 (id=1601):
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
socketcall$auto_SYS_ACCEPT4(0x12, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
dup2$auto(0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mount$auto(0x0, 0x0, &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3p\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_mon_fops_binary_mon_bin(0xffffffffffffffff, 0x0, 0x30)

2m41.243774917s ago: executing program 2 (id=1606):
mmap$auto(0x0, 0x400006, 0x800, 0x1009b72, 0x2, 0x6)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x141702, 0x0)
write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40101, 0x0)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
msync$auto(0x0, 0xe0, 0x9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x11, 0x4, 0xfffffffe)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x58)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0)
read$auto(r1, 0x0, 0x39b8)
socketcall$auto_SYS_RECVMSG(0x11, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)

2m38.074030231s ago: executing program 3 (id=1613):
mmap$auto(0x10000000080, 0x200004, 0x4000000000e3, 0x40eb4, 0xffffffffffffffff, 0x5)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) (async)
ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) (async, rerun: 64)
r1 = socket(0x11, 0x5, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
pipe2$auto(0x0, 0x80)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
setrlimit$auto(0x1000000007, 0x0) (async, rerun: 64)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) (async)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)=ANY=[@ANYBLOB="147f3538", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 32)
mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) (rerun: 32)
sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100a6bd7000fddbdf25050000000a000100000000000000000006000600f8b70000060006000e0000000600070009000000060006000400000008000200", @ANYRES32=0x0, @ANYBLOB="0800040002000000060007000400000800020000", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800)
r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0)
pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)

2m36.915331712s ago: executing program 2 (id=1616):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8)
open_by_handle_at$auto(r0, &(0x7f0000000000)={0xd, 0x2664, "d118fe157c0ece8e1243d9f0ff"}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r1, 0x0)
socket(0xa, 0x801, 0x84) (async)
r2 = socket(0xa, 0x801, 0x84)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/aqm\x00', 0x80, 0x0) (async)
r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/aqm\x00', 0x80, 0x0)
pread64$auto(r3, 0x0, 0xe5, 0x74) (async)
pread64$auto(r3, 0x0, 0xe5, 0x74)
mmap$auto(0x0, 0x2020008, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) (async)
mmap$auto(0x0, 0x2020008, 0x1000000000000007, 0xeb1, 0x0, 0x1008000)
sysfs$auto(0x2, 0x46, 0x0) (async)
sysfs$auto(0x2, 0x46, 0x0)
setsockopt$auto(r2, 0x10000000084, 0x9, 0x0, 0x9c) (async)
setsockopt$auto(r2, 0x10000000084, 0x9, 0x0, 0x9c)
socket$nl_generic(0x10, 0x3, 0x10)
shutdown$auto(0x200000003, 0x2)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0xe}}, 0x54)
mmap$auto(0x0, 0xffffffffffffffff, 0xdf, 0x9b72, 0x400, 0x28000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x10001)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000240)={0x0, 0x7}, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r6, 0x0, 0x400000000006)

2m36.690117459s ago: executing program 2 (id=1617):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000340)={0x24, r1, 0x401, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)

2m36.482357832s ago: executing program 2 (id=1619):
mmap$auto(0x0, 0x20009, 0x400000000000dd, 0xebe, 0xffffffffffffffff, 0x4)
mmap$auto(0x4, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc")
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socket(0x8, 0x6, 0x5)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8008)
io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x80000002, 0x10, 0x2, 0x401, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x3, 0x72, 0x6, 0x100, 0x8000083, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x200052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0)
madvise$auto(0x0, 0x1010001, 0x100000003)
r2 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140))
lseek$auto(r2, 0x7, 0x2)
madvise$auto(0x1000, 0x400050, 0x9)

2m36.04867714s ago: executing program 2 (id=1622):
acct$auto(0x0)
madvise$auto(0x0, 0xffffffffffff0004, 0x3)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0x2, 0x9b72, 0xffffffffffffffff, 0x27ffd)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
semtimedop$auto(0x7, &(0x7f0000000140)={0x9, 0x7, 0x3ff}, 0x1000040, &(0x7f0000000180)={0x8000000000000000, 0x7f})
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES64=r2, @ANYRES16=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2040890)
syz_clone(0x58000000, &(0x7f0000000100)="4fefb8226a3db9c44df890db6055c2f6b4f30b572ac6f92fb8398197", 0x1c, &(0x7f0000000140), &(0x7f00000001c0), 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/freezer.parent_freezing\x00', 0x100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0)
bpf$auto_BPF_MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$auto_MACSEC_CMD_UPD_RXSC(r1, 0x0, 0x4084881)
ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
socket(0x5, 0x3, 0x6)
setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14)
rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00')
io_uring_setup$auto(0x6, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/btrfs/features/rmdir_subvol\x00', 0x480800, 0x0)
preadv$auto(r5, &(0x7f0000000080)={0x0, 0x6}, 0x7, 0xbbf, 0x69bf)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0)
write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0)

2m34.836481792s ago: executing program 2 (id=1625):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x1c9802, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/vtconsole/vtcon1/power/runtime_suspended_time\x00', 0x5f8580, 0x0)
sendfile$auto(r0, r0, 0x0, 0x3)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x18, 0xa, 0x1)
r1 = socket(0x29, 0x1, 0x40)
connect$auto(r1, &(0x7f0000000100)=@can, 0x53)
mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x2000}, 0x6a)
r2 = io_uring_setup$auto(0x406, 0x0)
io_uring_register$auto_IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x7)
r3 = pidfd_open$auto(0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', <r6=>0x0})
sendmsg$auto_NET_SHAPER_CMD_GROUP(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="5a29cfc2", @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf25040000000c000400feffffffffffffff0c000500040000000000000008000800", @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24844}, 0x20048014)
setns(r3, 0x60020000)
umount2$auto(&(0x7f0000000000)='.\x00', 0x3)
umount2$auto(&(0x7f0000000080)='.\x00', 0x7)
modify_ldt$auto(0x1, 0x0, 0x10)
modify_ldt$auto(0x807ff0000000000, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0)
close_range$auto(0x2, 0x8, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2m27.033763539s ago: executing program 4 (id=1652):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
socket(0x21, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1d, 0x2, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
connect$auto(0x5, 0x0, 0x9)
sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, 0x0, 0x1000000, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x3}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
socket(0x10, 0x2, 0x0)
r1 = openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x800, 0x0)
read$auto_dfs_cpu_ops_debugfs(r1, &(0x7f00000000c0)=""/128, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0002, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000080)=')@-!\x00', 0x1e1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008)
syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f402, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
sendmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x200084a, 0x0, 0xd, 0x0, 0x1, 0x10b}, 0x4}, 0xffffffff, 0xc5f)
writev$auto(r3, &(0x7f0000000100)={0x0, 0x600}, 0x8)

2m26.832188186s ago: executing program 4 (id=1654):
mmap$auto(0x0, 0x400005, 0xdf, 0x10010, 0x2, 0x8000)
mremap$auto(0x0, 0x500000000, 0x4, 0x7, 0x100000000)
madvise$auto(0xfffffffffffffffd, 0x200005, 0xb)
r0 = io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000000, 0x9, 0x4002, 0x3, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x20], {0x10000009, 0x6, 0xf, 0x29f, 0x104, 0x4000007f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x1, 0x100000000}})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/ueagle_atm/parameters/sync_wait\x00', 0x1e2142, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
io_uring_setup$auto(0x401, 0x0)
bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@link_create={@map_fd=r0, @target_ifindex, 0x4b6a, 0x8, @uprobe_multi={0x6, 0x4, 0x8ee, 0xf94, 0x1, 0xec5, <r2=>0x0}}, 0x6)
r3 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$auto_qrtr_tun_ops_tun(r3, &(0x7f0000000300)="01000000d80746ebe4fa29705e2e6540f64b000003000000a7e9ce67feffffffb096b449", 0x24)
mlockall$auto(0x7)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
io_uring_setup$auto(0x9, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r5, r5, 0x0, 0x3)
write$auto(r1, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000d36a7dfe2a716048d6ef506605836d", @ANYRES16=r6, @ANYBLOB="00022cbd7000fbdbdf25300000000500a20004000000"], 0x1c}}, 0x5)
process_vm_writev$auto(r2, &(0x7f0000000280)={0x0, 0x600000000}, 0x1, &(0x7f0000000340)={0x0, 0x2}, 0x4, 0x0)
sendfile$auto(r1, r1, 0x0, 0x8000)

2m25.622352644s ago: executing program 4 (id=1656):
mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x84)
r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0xa80, 0x0)
ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2})
ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r2 = socket(0xa, 0x3, 0x3b)
setsockopt$auto(r2, 0x29, 0x1f, 0x0, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f0000000000)=@token_create={0x10}, 0xa3)
close_range$auto(r3, 0xfffffffffffff000, 0x2)
ioctl$auto_BLKFINISHZONE(r0, 0x40101288, &(0x7f0000000080)={0x7fffffffffffffff, 0x4})
landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400000000000400, 0x9}, 0x9, 0x0)
landlock_restrict_self$auto(r3, 0x0)
linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='&&\x00', 0x1400)
openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci1/msft_opcode\x00', 0x8000, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setresuid$auto(0x8, 0x8, 0x0)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)

2m23.682904469s ago: executing program 4 (id=1659):
mount$auto(0x0, &(0x7f0000000540)='./cgroup/../file0\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\xf6\xff\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3p\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)

2m23.629789597s ago: executing program 4 (id=1660):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x100, 0x0)
ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000140)="13")
unshare$auto(0x40000080)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
r1 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x20681, 0x0)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_clone3(&(0x7f0000000640)={0x108000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa})
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x20a02, 0x0)
ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x6)
writev$auto(r4, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
write$auto(r2, &(0x7f00000000c0)='7\n\r\x00\x00\x00\x06\x00\x00\xc2Ow\xfaX', 0x83)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)={0x14, r6, 0x309, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)=@bpf_attr_1={<r7=>r2, 0x17c96bda, @value=0x9, 0xfffffffffffffff7}, 0x4)
msgctl$auto_MSG_STAT_ANY(0x6, 0xd, &(0x7f0000000400)={{0x7ff, <r8=>0x0, 0xffffffffffffffff, 0x0, 0x2, 0x7, 0x1ff}, &(0x7f0000000380)=0x5, &(0x7f00000003c0)=0x4e, 0x2, 0x8, 0x2, 0x8, 0x1, 0x2, 0xffff, 0x4, @raw=0x1, @inferred=0xffffffffffffffff})
r9 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000580)={@siginfo_0_0={0x8, 0x401, 0x6, @_sigfault={&(0x7f0000000480)="1087a4f918e401f39c485536dfd973b2c7896cf198311f436b2580422b12571f762a7d2dd2e34d94f90130a75439d1b5aac31a4af427bc9ef641230d326f5cfa25b0daa8e734d41f7fd5a9d2b299a9c1b8fac53d1d1d134053e3982c61af39d760adc9c0da98b5f8fb70ef14292d5e2efb4f60684a3763281122350b89b208c206bfe5364b971f6722e235f20c8d443e1d0ed6cc18678159d41c6ed96d7ad045ff6016496544fb2924b0ce432bb0b99912e44dcb683226b871c9ae5faa05207e2b170e13cb6a61583b9212241e8f6c0b1a2c836cc75cde71bc560f5112960209be7832c391cd942ad8a10505b178c2fd06f804", @_addr_lsb=0x1ff}}}, 0xff, &(0x7f0000000600)={{0x1, 0x7fffffff}, {0x3, 0xffff}, 0x6eb2, 0x2, 0x100000000, 0x5, 0x7, 0x6, 0x400, 0x7, 0x5e9d, 0xfff, 0x7, 0xff, 0xfffffffffffffffb})
sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000001c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c00)={&(0x7f00000006c0)={0x1528, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_1\x00'}, @NL802154_ATTR_SEC_KEY={0x14f8, 0x30, 0x0, 0x1, [@typed={0x4, 0xc6}, @nested={0x2cb, 0x58, 0x0, 0x1, [@generic="bd5acf44303a620810a9845479eb6a497e321c6f76ca1c7294f35e7bb6474c74d24294496017e5e145bd2d109d69510155d041973fd748cb00ec3aa219dd8dedda63cebed3df05c15416ed805c5f419b8099793c40", @typed={0xd5, 0xbe, 0x0, 0x0, @binary="1cdf7d4af64138c9b67b02ef9e9e9c5ff568413494b66c9264039a364d465b62df2b644b322e71f16d7f5e697a5cf375085b3265c2547104383bfe76ed092243f0a33568ac38bf0a4dedf4b863a9a96e8f7865f172d841759e62480832e233cbbbf02a753f9eb3683586e20cea5ff4ea127b5432ac0af04fcf666bf1ffae5c9507ddf3dd5d45a56de497cbb438927fa6e9ef6ed14317c03aaecacd130527b3ced311bada75b859bc23246102570d0a43f46a8088f0177d85c99dbec404f1ef4fb4d97dec30aaeabf470d03e9ac67d00d06"}, @typed={0xca, 0xd0, 0x0, 0x0, @binary="155152237bbd5e2323db30080cbedff6745c0c4ebd1d16a3704205103142294baf6c23dec9cf6892435b4c20dee6ce68df4745800cf0d1c9e2e4e02226cbd10eaf2b76d51435157fe75b00f791a50693271e70a71db71dc5e80602fa44326155a593036132b9ae0ed7e01e3b2162ef0b675d495f5264c0a981ac96dd46b9a543df40834b8b76ef8874094ed3e4c487028f0daffea8bbe398cbab5431c90b712ff5eccc2b42ee38c1b67c83d7aec68ab278e52fb6976556e73f5fb0647ca1bc26bb381a90acdb"}, @generic="cc1ff69dd945abfd0e32c674227ebff3e24b6ef079bbf6d15c447b7d065ec84d74a935d344af5b75f9ae10ee717368d7ce4534c9d9cdc4e82de69def212c38bd95c93e025faae9fe000568544eb294bf7b3bad7d07ca1a661e024e50067852ae9486bc14b5f8eb55fa384633afb6f0407f599d15b5541a87145550e8afc4299d4f37683a5fb1814716ac74ecc7b25cec3134bee42115f8d375dc8afccba95b19e7c58ec19641149ddb6ff9a90a0aad9c924cf450dc833dc7aa48a5f872372898cce55742a2d4a8c580202c5c1bd9"]}, @nested={0xc, 0x135, 0x0, 0x1, [@typed={0x4, 0x2a}, @generic="43a9c5ef"]}, @nested={0x5e, 0x46, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @fd=r7}, @generic="04084f6ccdd5c4333f735792684b8d4e5256f3b55c550b338c06d7b470c2bd32ba70fe5e29d0f706d19bf0f2d133bca3d876bdc11172d6f5c1d249b8c0fc349aee0f1acbd5cf15117399", @typed={0x8, 0x5, 0x0, 0x0, @uid=r8}]}, @generic="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", @nested={0x1b6, 0x97, 0x0, 0x1, [@typed={0xc, 0x11b, 0x0, 0x0, @u64=0x3443}, @nested={0x4, 0xff}, @generic="4f39b7944dffc4291f8953e549228867f5237dae0aa140909e02c1144a10abbd2a10f8569eef5f4a2be52b6766f979882c8268d3f5", @generic="6f4e9e407b9d6333c375dc872c167bb91a34b6ff603fb9fae772205e2311a863bbfef237e095d810f13c891498e985ce32d07d717562751b06dee9d930f76e321c3ed2876a4891f32709e20177d057dc372ee103a4ed2b7dd1fa32fc264a287a891179d2cc9f5ec86b9b61e69de440e2ca9d3d4020ce763cdf3b409b83c976f23ca1679d99110b000f02a1e5c3f909ecbe84581693cf40fc67cec1ea116867b211a7a0112369631e7215a26f67c67aa024d83ab84c4fc806e25a7d18ee1b03f08ff21d34f7bc342a1a362615f7fce7e820a6d3dbf2f09d844fa0a4d2c2169047217d7b5a00481cfc62d17b903575", @generic="400be8c7c8ca5dc12be0628fa72632aee550a524927f8bc2d22138335a73a8f47c8d0ace97c92dcac4871ca9af4df07d60b63e8ee26f207d7b1a0e8eb28dadf884c7d4a20d3e222e61d2d94f157f1ff516c51d948b9ee8f984466f0736ae41cdcb9f8e1f3804e602ea8f409397f7624c0a5d3878c8aa5a", @typed={0x8, 0x3f, 0x0, 0x0, @pid=r9}]}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xfff}]}, 0x1528}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010)
r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r10, 0x0, 0x2, 0x0)
landlock_restrict_self$auto(r1, 0xb)

2m23.084332125s ago: executing program 4 (id=1661):
io_pgetevents$auto(0x8, 0xfffffffffffffffb, 0x3ff, 0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffc})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25040000000c0001800800010011008b63aba47dbe5f0000"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setgroups$auto(0x9, 0x0)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
sysfs$auto(0x2, 0x22, 0x0)
socket(0x15, 0x5, 0x0)
setsockopt$auto(0x3, 0x114, 0x3f, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="205c782002200dc0023af10e9bfa1babfa203753ca9a20370a", 0x19)
ioperm$auto(0x7, 0x6, 0x90c)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
acct$auto(0x0)
rt_sigprocmask$auto(0xffffffff, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, r3, 0xd)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_GET_RADIO(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x70bd26, 0x259fdbfe, {}, [@HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd14/queue/iosched/prio_aging_expire\x00', 0x207a1, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000000c0)='-7', 0x2)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/mount_params\x00', 0x480, 0x0)
read$auto(r7, &(0x7f0000000300)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x805644)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)

2m22.753856706s ago: executing program 33 (id=1613):
mmap$auto(0x10000000080, 0x200004, 0x4000000000e3, 0x40eb4, 0xffffffffffffffff, 0x5)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) (async)
ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) (async, rerun: 64)
r1 = socket(0x11, 0x5, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
pipe2$auto(0x0, 0x80)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
setrlimit$auto(0x1000000007, 0x0) (async, rerun: 64)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) (async)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)=ANY=[@ANYBLOB="147f3538", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 32)
mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) (rerun: 32)
sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100a6bd7000fddbdf25050000000a000100000000000000000006000600f8b70000060006000e0000000600070009000000060006000400000008000200", @ANYRES32=0x0, @ANYBLOB="0800040002000000060007000400000800020000", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800)
r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0)
pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)

2m19.726798327s ago: executing program 34 (id=1625):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x1c9802, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/vtconsole/vtcon1/power/runtime_suspended_time\x00', 0x5f8580, 0x0)
sendfile$auto(r0, r0, 0x0, 0x3)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x18, 0xa, 0x1)
r1 = socket(0x29, 0x1, 0x40)
connect$auto(r1, &(0x7f0000000100)=@can, 0x53)
mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x2000}, 0x6a)
r2 = io_uring_setup$auto(0x406, 0x0)
io_uring_register$auto_IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x7)
r3 = pidfd_open$auto(0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', <r6=>0x0})
sendmsg$auto_NET_SHAPER_CMD_GROUP(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="5a29cfc2", @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf25040000000c000400feffffffffffffff0c000500040000000000000008000800", @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24844}, 0x20048014)
setns(r3, 0x60020000)
umount2$auto(&(0x7f0000000000)='.\x00', 0x3)
umount2$auto(&(0x7f0000000080)='.\x00', 0x7)
modify_ldt$auto(0x1, 0x0, 0x10)
modify_ldt$auto(0x807ff0000000000, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0)
close_range$auto(0x2, 0x8, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2m14.324354414s ago: executing program 5 (id=1663):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x14, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x10, 0x1, "5e1f970f497f9f23d63e7285"}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/psaux\x00', 0x381342, 0x0) (async)
socket(0x10, 0x2, 0x4)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101000, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8881, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
close_range$auto(0x2, r2, 0x0)
r4 = socket(0x10, 0x2, 0x4) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5)
read$auto(r5, &(0x7f0000000000)='\x00', 0x91e2) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x24100, 0x0) (async)
r6 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r6, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) (async)
write$auto(r4, &(0x7f0000000000)='-\xd3', 0xfdef)
openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0) (async)
unshare$auto(0x40000080) (async)
r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async)
ioctl$auto_BLKFLSBUF(r7, 0x1261, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) (async)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) (async)
getpid()

2m7.974934668s ago: executing program 35 (id=1661):
io_pgetevents$auto(0x8, 0xfffffffffffffffb, 0x3ff, 0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffc})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25040000000c0001800800010011008b63aba47dbe5f0000"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setgroups$auto(0x9, 0x0)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
sysfs$auto(0x2, 0x22, 0x0)
socket(0x15, 0x5, 0x0)
setsockopt$auto(0x3, 0x114, 0x3f, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="205c782002200dc0023af10e9bfa1babfa203753ca9a20370a", 0x19)
ioperm$auto(0x7, 0x6, 0x90c)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
acct$auto(0x0)
rt_sigprocmask$auto(0xffffffff, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, r3, 0xd)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_GET_RADIO(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x70bd26, 0x259fdbfe, {}, [@HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd14/queue/iosched/prio_aging_expire\x00', 0x207a1, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000000c0)='-7', 0x2)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/mount_params\x00', 0x480, 0x0)
read$auto(r7, &(0x7f0000000300)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x805644)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)

1m58.63271363s ago: executing program 36 (id=1663):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x14, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x10, 0x1, "5e1f970f497f9f23d63e7285"}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/psaux\x00', 0x381342, 0x0) (async)
socket(0x10, 0x2, 0x4)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101000, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8881, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
close_range$auto(0x2, r2, 0x0)
r4 = socket(0x10, 0x2, 0x4) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5)
read$auto(r5, &(0x7f0000000000)='\x00', 0x91e2) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x24100, 0x0) (async)
r6 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r6, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) (async)
write$auto(r4, &(0x7f0000000000)='-\xd3', 0xfdef)
openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0) (async)
unshare$auto(0x40000080) (async)
r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async)
ioctl$auto_BLKFLSBUF(r7, 0x1261, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) (async)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) (async)
getpid()

1m36.778254046s ago: executing program 8 (id=1749):
r0 = socket(0xa, 0x4, 0x9000300)
sendfile$auto(r0, r0, 0x0, 0x8001)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x55d042, 0x0)
preadv2$auto(r1, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/SecurityFlags\x00', 0x101000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000080)=""/4096, 0x1000)
fanotify_init$auto(0xf8, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r3 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c)
unshare$auto(0x40000080)
mmap$auto(0x1, 0x1, 0x3, 0xeb1, r3, 0x8000)
r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
ioctl$auto(r4, 0x921064a0, r4)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0x20499d, 0x9)

1m34.469439802s ago: executing program 8 (id=1756):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000080), r0)
sendmsg$auto_NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="13cc6d5fee89b300"], 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(0x0, 0x2a4c0, 0x20)
prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x4000000)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b74, 0x2, 0x8000)
semctl$auto_SEM_INFO(0x0, 0x6, 0x13, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
mmap$auto(0x10000000000000, 0x6, 0x4040000000003, 0x7fffffd2, 0xffffffffffffffff, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram0\x00', 0x16f300, 0x0)
r3 = socket(0x2b, 0x1, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, r3)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0x0, 0x0)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0)
read$auto(r4, 0x0, 0x39b8)
move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0)
r5 = socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000040)=0x3ff)
ioctl$auto_BTRFS_IOC_ENCODED_READ(r5, 0x80809440, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f0000000180)="818536bbb46196934b6f2a085f3190df66f0af1ea9f8ac8241ad8685504fa50932d248d4e04aad00387f5ed857894e6693798595678b60d8130ab40b7028693fff59174e1ce8a8d08a3f7b", 0xcb7a}, 0x1, 0x3, 0x9, 0x4ee, 0x2, 0x4, 0xfffffffb, 0x9, "44cab05ec57ecc8b8b860ccbc30a9a77785a13ad1eb9878ef6b73b76f7d4e13d38010b4853e41bcf68e4af1bb73195068e36422ddcbdbb6c33e4f75d97fb8a59"})
setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10)

1m33.395990145s ago: executing program 8 (id=1758):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/firmware/acpi/hotplug/processor/enabled\x00', 0x2062, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x100000001, 0x7ff)
pidfd_open$auto(r0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000080)={0x1, 0x4, 0x8000, @raw=0x35, &(0x7f0000000040)={@inferred=r0, 0x4, 0x8, 0x6, "035b34fcb5d99b544705a0dfd60e47d5330132ad0b55edd7021fcdcce08f93736dff9248e4c64f1868553543", @raw=0x1}, "b5afca76848cc45b33fe567991bc6fabdd37ca474b1a1b5a162fed7542c47f70b6db31693f5215e5d1bc10158d51397a2ef5"})

1m33.090282554s ago: executing program 8 (id=1759):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x9, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0x2, &(0x7f0000000380)="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")
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd05, &(0x7f00000001c0))
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setrlimit$auto(0x1000000007, 0x0)
socket(0x15, 0x5, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r4 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
r5 = socket(0x1a, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
write$auto_proc_clear_refs_operations_internal(r4, 0x0, 0xffffff4b)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
socket(0x10, 0x2, 0x0)

1m32.57505037s ago: executing program 8 (id=1763):
rmdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00')

1m32.281413811s ago: executing program 8 (id=1766):
r0 = pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r0, 0x8, &(0x7f0000000440)={@siginfo_0_0={0x8, 0x80, 0xffff93e3, @_sigsys={0x0, 0x732, 0x9}}}, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fchdir$auto(r1)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x600, 0x0)
mmap$auto(0x0, 0x40000b, 0xdd, 0x9b72, r1, 0x20000000008000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x20000)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0)
unshare$auto(0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68)
ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080))
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00')
fchdir$auto(r2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyd9\x00', 0x10300, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0)

1m17.068277944s ago: executing program 37 (id=1766):
r0 = pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r0, 0x8, &(0x7f0000000440)={@siginfo_0_0={0x8, 0x80, 0xffff93e3, @_sigsys={0x0, 0x732, 0x9}}}, 0x2)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fchdir$auto(r1)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x600, 0x0)
mmap$auto(0x0, 0x40000b, 0xdd, 0x9b72, r1, 0x20000000008000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x20000)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0)
unshare$auto(0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68)
ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080))
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00')
fchdir$auto(r2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyd9\x00', 0x10300, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0)

54.966328087s ago: executing program 9 (id=1843):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
r2 = memfd_create$auto(&(0x7f0000000000)='\x00', 0x6)
read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0)
r3 = open(&(0x7f00000001c0)='./cgroup.net/\f\x00', 0x0, 0x11)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r2, 0x7fff)
sched_setaffinity$auto(0x0, 0x5, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r6], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
keyctl$auto(0xa, 0xfffffffd, 0xee01, 0x0, 0x7f)
syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/smbd_max_frmr_depth\x00', 0x402, 0x0)
write$auto(r7, &(0x7f0000000500)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x9f\xe2\xc7cOM\xb6\xa3,!oc.\xe7\x1d$\x9a`\xd8/g\xd3\x1a\xcd\x8e\x1d\xbb\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xa9O\x00\x00\x00\x00\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xb6\xb0N\x99\x04z\xd0I>\x8f\x00\xe5\x1c*\xedE\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xa3\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\xac\x92\x7f]|\x04\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xa6\x89\xdd\xce\xab\xd5\xe4+\xeaF\x06Y\xe9\xa1`\xb1\x8d\x85\xe0w+\x1e\x8b+\xd67IH\xff\x80N\xd1E8\xb7\xff\xa7\xff\x80\xd0y\x0f\x1d(!\x99\xab\xdf\x01\x00\x00\x00\x00\x00\x00\x00\xcdd\x87\x06\xfbK\xb9/\x19\xe5\x8b\x10P\xe7i8\xbe', 0x7)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x400000000000021, 0xe, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xd)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
mmap$auto(0x8, 0xfffffffffffffff7, 0x100000000fd6, 0x100012, r2, 0xa)
mmap$auto(0x9, 0x1fe, 0x4, 0x14, 0x3, 0x0)
close_range$auto(r1, r1, 0x5)
syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), r1)
fcntl$getown(r3, 0x9)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={"066d3970917268f77ce910cc79bac67915f7f5439753e9d53263c6412d09fa6a", 0x8, 0x1, 0x80000000, 0xff, 0xffff})
socket(0x2d, 0x2, 0x0)
mkdir$auto(&(0x7f0000000040)='./cgroup.net/\f\x00\x00\x00\x00', 0xa3)
syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/mnt\x00')

53.872300683s ago: executing program 9 (id=1846):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x404482, 0x0)
r3 = prctl$auto(0x7, 0x7fffffff, 0x0, 0xffffffffffffff8c, 0x4)
fcntl$auto_F_ADD_SEALS(r3, 0x409, 0x7fff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket(0x2, 0x1, 0x0)
r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r1)
sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="f4ffffffec921b705ba238e6b47652175d77d136e683672b8c3d133a91b092d536f1ebbb8cc0e5ed08118f70d4f66d4b429aefb96ec245ed8c3187", @ANYRES16=r5, @ANYBLOB="00082cbd7000fcdbdf250400000005002f00000000000800310000000000"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x840)
r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev1\x00', 0x420001, 0x0)
setsockopt$auto_SO_BSDCOMPAT(r6, 0xfe6, 0xe, &(0x7f00000000c0)='vcan0\x00', 0xe)
close_range$auto(0x2, 0x8, 0x0)
preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
madvise$auto(0x110d230000, 0x1, 0x3)
read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0)
unshare$auto(0x8)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)

51.302868159s ago: executing program 9 (id=1852):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/stat_refresh\x00', 0x101382, 0x0)
mprotect$auto(0x200000000000, 0x806124, 0x8)
r0 = socket(0x10, 0x3, 0x0)
splice$auto(r0, 0x0, r0, &(0x7f0000000100)=0x8, 0x100, 0x2)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000040), 0x115000, 0x0)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
socket(0x2, 0x2, 0x0)
setsockopt$auto(0x4, 0x0, 0x480, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x3, 0x80000000000df, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x42, 0xf}, 0x18)
lremovexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="248f0484", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="0800400003000800"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x8800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x5)
sysfs$auto(0x2, 0xd, 0x0)
fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r5, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r5, @ANYBLOB="0600060005000000080004003d4b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)

50.949440778s ago: executing program 9 (id=1853):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000007c0), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000040), r0)
sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_REQUEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4051)
sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f0000000880)={0x0, 0xfffffffffffffe66, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r1, 0x195603a1b51df9d, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x804)

50.637694155s ago: executing program 9 (id=1855):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x40, 0x800000000000001, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x14)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
socket(0xa, 0x1, 0x84)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", <r2=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb-serial/drivers/ti_usb_3410_5052_1/new_id\x00', 0xc0082, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)='7', 0x1)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
listen$auto(0x3, 0x83)
close_range$auto(0x2, 0x8, 0x0)

48.789224667s ago: executing program 9 (id=1859):
mbind$auto(0x6, 0x5, 0xffff, 0x0, 0xffffffffffffff81, 0xff)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x44243, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000020c0), 0x800, 0x0)
ioctl$auto_RTC_AIE_OFF(r0, 0x7002, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
r2 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
bind$auto(0x3, 0x0, 0x6a)
sendto$auto(r1, &(0x7f0000000100), 0x5, 0x9, 0x0, 0x2)
mprotect$auto(0x0, 0x80611d, 0xc)
openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
utime$auto(0x0, &(0x7f0000000140)={0x7, 0x7})
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x10001)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf250500000008000500030000000c000180280003"], 0x28}, 0x1, 0x0, 0x0, 0x278e18a297a8387c}, 0x24000802)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x5, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000004000800040003374b0008"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

33.602600547s ago: executing program 38 (id=1859):
mbind$auto(0x6, 0x5, 0xffff, 0x0, 0xffffffffffffff81, 0xff)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x44243, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000020c0), 0x800, 0x0)
ioctl$auto_RTC_AIE_OFF(r0, 0x7002, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
r2 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
bind$auto(0x3, 0x0, 0x6a)
sendto$auto(r1, &(0x7f0000000100), 0x5, 0x9, 0x0, 0x2)
mprotect$auto(0x0, 0x80611d, 0xc)
openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
utime$auto(0x0, &(0x7f0000000140)={0x7, 0x7})
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x10001)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf250500000008000500030000000c000180280003"], 0x28}, 0x1, 0x0, 0x0, 0x278e18a297a8387c}, 0x24000802)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x5, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000004000800040003374b0008"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

14.039981607s ago: executing program 1 (id=1917):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
setresuid$auto(0x0, 0x7, 0x8080)
kill$auto(0x0, 0x11)
sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000800)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x8, 0x0)
poll$auto(&(0x7f0000000000)={r0, 0x2, 0x5}, 0xc, 0x4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
setresuid$auto(0x0, 0x7, 0x8080) (async)
kill$auto(0x0, 0x11) (async)
sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000800) (async)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x8, 0x0) (async)
poll$auto(&(0x7f0000000000)={r0, 0x2, 0x5}, 0xc, 0x4) (async)

13.885228907s ago: executing program 6 (id=1918):
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
socketcall$auto_SYS_ACCEPT4(0x12, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
dup2$auto(0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mount$auto(0x0, &(0x7f0000000540)='./cgroup/../file0\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x81\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3p\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_mon_fops_binary_mon_bin(0xffffffffffffffff, 0x0, 0x30)

13.666182379s ago: executing program 1 (id=1919):
mprotect$auto(0x200000000000, 0x806122, 0xc)
sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000040)={0x2})
ioprio_set$auto(0x102, 0x800000000, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0x1}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
unshare$auto(0x40000080)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socket(0x11, 0x5, 0x100)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(0x0, 0x7f)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0)
select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff)
poll$auto(&(0x7f0000000340)={0xffffffffffffffff, 0x5, 0x3}, 0x4, 0x101)
mlock$auto(0x7c88, 0x7fff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x1)

13.097379027s ago: executing program 0 (id=1885):
socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000009c0)={{@inferred, 0xd252, 0x9, 0x2, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @inferred=<r2=>0x0}, 0x4, 0x2000963, 0x2, @inferred, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df5fdffffffffffffffdbb68aec3f51e29bc18b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673ee57f2f5fde573fa4d4328a8ea0be7eccec0adb4f64290e53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"})
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x400000100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = prctl$auto(0x83b, 0xffffffffffffffff, r2, 0x0, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001400)='ns/mnt\x00')
ioctl$NS_GET_PARENT(r4, 0x8008b705, 0x0)
ioctl$auto(r3, 0x0, r4)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0x8a001, 0x0)
write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
io_uring_setup$auto(0x2, &(0x7f0000000080)={0x5, 0x9, 0x9, 0x6, 0x4, 0x5, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x39f, 0x5, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}})
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000)
sched_getattr$auto(0x0, 0x0, 0x1, 0x0)

11.906526993s ago: executing program 6 (id=1920):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000)
mmap$auto(0x7, 0x400008, 0x7ffffffb, 0x13, 0xffffffffffffffff, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_FEATURES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x4c, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x5}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x9}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x10000}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x9}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000040)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
epoll_create$auto(0x8800001)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e1000000ff000000deff00"}, 0x58)
prctl$auto(0x3a, 0x1, 0x0, 0x2, 0x8000000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0)
setrlimit$auto(0x7, &(0x7f0000000280)={0x0, 0x2})
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
msync$auto(0x0, 0xe0, 0x6)
ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000200))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x800, 0x0)
prctl$auto(0x43, 0xe, 0x0, 0x0, 0x0)

9.921920965s ago: executing program 1 (id=1922):
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
socketcall$auto_SYS_ACCEPT4(0x12, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
dup2$auto(0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mount$auto(0x0, &(0x7f0000000540)='./cgroup/../file0\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00 \x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3p\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_mon_fops_binary_mon_bin(0xffffffffffffffff, 0x0, 0x30)

9.855781405s ago: executing program 0 (id=1923):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0xffffffffffffffff, &(0x7f0000000480)='\xbe$>\x04L`\xb0D\xb0\xbe{\xca\xd4\x17x\xef\x00\x92\x0e\x05\xbdm\x9a\x90\xb1\xf4K\xe06ECf\xf9\xa5\x88\xa8\x13U\xe0\xbcV\xc2\x003\x86l\xbb\f\xbb\xbd\xbb\x16\xf0\v\xd8\xe7\x95\xdf7\xa5\xc8\xac\xce\xcb\xf3\xed\xfbA\xf9N~\'\b \xc7\x7f\xe7\xce\tF\x99\xcf\x92s\x0f\xa5\xc7E9w\x80\x01\x00\x00\x00\xb9\x8f\x1c\xbc\xb5\x1b\x80\x1b1Z\xd9\xae\x1bI\x8f3\xd4@\x1ce\xef~\xef}\v&\x11\xcd\xe2{\xc9\xa5\xba\x05\'\x13\x1d\x00\x00\xd9T\x86\xf0x\x84{F/\xc3\xa7i\xa6\x9a\xf2P\x97R\xfa\xe8dt\xf5\x91f\x06\xff\x7f\x00\x00\x00\x00\x00\x004\x13j\x0e\x8b\xfb\xabn\xbf\xa9\xfe\x19{\xca\x8e\xb3w\xc3\x14\x05n\x97\xaa\x8d\xcfn\x02\x00\x00\x00\xc1\x8e\x10M?\xae\x93\xeeb\xb3\x00'/221, 0x6)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x4, 0x3, 0x4, 0x2d)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/hid/drivers/hid-u2fzero/new_id\x00', 0x0, 0x0)
write$auto(r1, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\b\x00\x00\x00\x00\x00\x00\x00\xc1n+\n|j\xc9\xd0\xad\x82\xb6Q\xddT\b\xcbb\xca5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xd4\\e!\a\x82\t,\xa7\x00', 0x1)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x14be02, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$auto_GTP_CMD_NEWPDP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010005000000fddbdf2500000000080008000500000008000100e0e4516508ff000001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x14)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
ptrace$auto(0x10, 0x0, 0x1, 0x7ff)
ptrace$auto(0x4, 0x0, 0x1, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000808}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="00f21ef71e681a7759b3e1025dd2b6f5de5b2fa9aa1e2da35b1ec2bf25fc9687d6af72586edabb1fb95e3a462209b5ac9690ff925221117ce9b06e2b18a4fb416d9c7694d79b7e566d5c54ce230c3374b24b83fa728b26b720e995b593d4f39bce345965568f5be0fff75c96b81ca6e73ef68551f428c7d36343daa522dc6ef4e32b2a9602bed7a75b4c8298a025358c1e0741f415d58c11b9b4e9a2084a4d8d61e33c87c8", @ANYRES16=r6, @ANYBLOB="040028bd7000fcdbdf252b000000050020010f00000006004f010800000008003f0007000000e60084801c62d5822d56fb00a49144d63f1abdb7db7acfefc4c7cbd090aaa7ec3d758b542247ec4e00ed4c60cbe86248e46983702118ead6b45c0c70af6282418c38c50d2933f4ed3e1e3132dbbaf7ff088d3b3e6227c33664e1d2a0a0e446e32b98aec81e1e3e20c01be749d7fd78fa703fb38ec14ac133990be4a32173b9af3c1469246b70fbdc0196c078b0b6309accf19f0975b309ad8325eaf2fa7a6c5f5965933c249dd032752872feb23b334451311a23660cbfcd0eb9280af0c5c13a40f783a5abb1c44a1c9d16cb3a9b109f5a89596ddd0df7e7ea6488e82d5e18675384334f0f3b000005002f010400000010001b8004000300050001008100000004003401"], 0x130}, 0x1, 0x0, 0x0, 0x400e}, 0x20008000)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r7, r7, 0x0, 0x3)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000100)=""/63, 0x3f)
removexattr$auto(0x0, 0x0)
mmap$auto(0xb90, 0x203, 0x2, 0x100000000040eb5, r0, 0x7)
prctl$auto_SECCOMP_MODE_FILTER(0xfe000000, 0x2, 0x0, 0xf307, 0x101)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x656, 0x800, 0xef1, r2, 0x402)
close_range$auto(0x2, 0x8, 0x0)
socket(0x21, 0x6, 0x5)
socket(0x22, 0x1, 0x84)
prctl$auto(0x23, 0x0, 0x2008, 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)

8.514183724s ago: executing program 7 (id=1925):
r0 = socket(0x2, 0x3, 0x8)
connect$auto(r0, &(0x7f0000000040)=@in={0x2, 0x9, @loopback}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
process_vm_readv$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)="00eb055d3495e39f521b3acee816b3b092d0df986e5ac5eabfa9e609465033693a8a123c5296", 0x5}, 0x81, &(0x7f0000000240)={&(0x7f00000001c0)="03131babec74aab949c31bb3eec3c9446722ba78ef79f264acd1b27ed523005e9b78230c325f217b9a6ff400966986226f595dfb85a32efe6af6ff3c9c973fbe52fd37a0d365db9e10ca1a04b1f89ac44569520f2ea62d6ec05c4a3bb3f6a918", 0x5}, 0x123, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8080, 0x0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000)
fanotify_init$auto(0x5, 0x2000000000002)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0)
preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0)
ioctl$auto(0x3, 0x402c542d, r3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0)
linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x3, 0x40000c, 0xdf, 0x12, 0x2, 0x8000)
flistxattr$auto(r1, &(0x7f0000000280)='/dev/ptyz7\x00', 0xf7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

8.44222293s ago: executing program 6 (id=1926):
setfsgid$auto(0xee01)
setfsgid$auto(0xee01)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f0000000880)={0x0, 0xfffffffffffffe66, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r1, 0x195603a1b51df9d, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x804)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyb9\x00', 0x4000, 0x0)
mmap$auto(0x4, 0xf, 0xb, 0x18, r2, 0x9)

8.041692053s ago: executing program 6 (id=1927):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x10be02, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x306, 0x0)
socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
read$auto(0x4, 0x0, 0xfdef)
io_uring_setup$auto(0x6, 0x0)
r2 = socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x11, 0x3, 0x9)
close_range$auto(0x2, r3, 0x0)
r4 = socket(0x11, 0x80003, 0x20000300)
setsockopt$auto(r4, 0x107, 0x14, 0x0, 0x4)
r5 = prctl$auto_PR_SYS_DISPATCH_ON(0x4, 0x1, 0x0, 0x7ddb, 0x40)
ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x7, r5})
sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100)
fcntl$auto_F_ADD_SEALS(r0, 0x409, 0x0)

7.350614379s ago: executing program 6 (id=1928):
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
socketcall$auto_SYS_ACCEPT4(0x12, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
dup2$auto(0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x10000100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x10101, 0x876c5, 0xc9, 0x3}})
io_uring_register$auto(r0, 0x14, 0x0, 0x9)
mount$auto(0x0, &(0x7f0000000540)='./cgroup/../file0\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3p\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_mon_fops_binary_mon_bin(0xffffffffffffffff, 0x0, 0x30)

6.180597335s ago: executing program 0 (id=1929):
preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402)
unshare$auto(0x40000080)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4a083, 0x0)
ioctl$auto_BLKRRPART(r1, 0x125f, 0x0)
write$auto(r1, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_FIFREEZE(r0, 0xc0045878, 0x8001)
socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000080)=0xf4d)
semget$auto(0x0, 0x33, 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0)
r2 = io_uring_setup$auto(0x200, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x0, 0x0)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$auto(0xffffffffffffffff, 0xc038563b, r3)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x10002, 0x0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x0)
openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, 0x0, 0x41180, 0x0)
socket(0x1d, 0x3, 0x1)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007)

6.011475306s ago: executing program 7 (id=1930):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}})
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4000, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x2, 0x101, 0x0, 0xfffffffffffffffd)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6})
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0)
ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000000))
acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00')
write$auto(0xffffffffffffffff, 0x0, 0x8000007f)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0)
mmap$auto(0x0, 0x402000a, 0x1006, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket(0xa, 0x1, 0x84)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)

5.449744904s ago: executing program 1 (id=1931):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/ext4/sda1/warning_count\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x202000a, 0x2, 0xeb1, 0xfffffffffffffffa, 0x0)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000600}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socket(0x15, 0x5, 0x0)
prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mountinfo\x00', 0x8000, 0x0)

3.991483708s ago: executing program 0 (id=1932):
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
socketcall$auto_SYS_ACCEPT4(0x12, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
dup2$auto(0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mount$auto(0x0, &(0x7f0000000540)='./cgroup/../file0\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\'\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3p\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto_mon_fops_binary_mon_bin(0xffffffffffffffff, 0x0, 0x30)

3.545329852s ago: executing program 7 (id=1933):
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x28801, 0x0)
ioctl$auto(0xffffffffffffffff, 0x9210641e, 0xffffffffffffffff)
r1 = socket(0x11, 0x3, 0x9)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
ioctl$auto_RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000001c0)={0x7, 0x7, 0x14, 0x8, 0x6, 0x63, 0xf, 0x81, 0x103})
sendmsg$auto_NL80211_CMD_STOP_NAN(r1, &(0x7f0000000bc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000200)={0x960, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_HEAD={0x851, 0xe, "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"}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x6c, 0x14e, "1800173ad755ea9bd93d1147ab82c5e833c747ef138f81221a6a07e2c21166c6a1508f644914bb778ac4af8d4353a394955abf20fb2a3f39a2f53982d9ad025a28601d783f695369488927be0b971cb975e68a9ea6d62118b5f7143d28b31efd7b21c292f774833b"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2}, @NL80211_ATTR_HE_OBSS_PD={0x14, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x4c}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x81}]}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x401}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x13, 0xbd, "74ca6c2998a8465d41f3073553d365"}, @NL80211_ATTR_EHT_CAPABILITY={0x47, 0x136, "f36da6cfb70e530dfc74652f35d50f6a4fa8fc4a9b19dbe0e43782ebcf29f6e4788681e13e52df2f1f151b04090ebd661b6664cc12375f6ebd2cb36f53181f978abfaa"}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x960}, 0x1, 0x0, 0x0, 0x4041}, 0x91)
capset$auto(0x0, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x149182, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
r4 = fsmount$auto(r0, 0x46a5, 0x2e6)
ioctl$auto_BLKFRAGET(r4, 0x1265, 0x0)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0)
sendfile$auto(r5, r5, 0x0, 0x7)
getsockopt$auto_SO_PREFER_BUSY_POLL(r0, 0x9, 0x45, &(0x7f0000000040)='%+!\x00', &(0x7f0000000080)=0x3)
setsockopt$auto_SO_TIMESTAMP_NEW(r0, 0x5, 0x3f, &(0x7f00000000c0)='/sys/module/zswap/parameters/compressor\x00', 0x0)

2.728372987s ago: executing program 6 (id=1934):
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0)
ioctl$auto(r0, 0x1, r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x3, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x641, 0x0)
write$auto(0x3, 0x0, 0x7fffffffffffffff)
preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
mprotect$auto(0x1000, 0x401000, 0x4)
mmap$auto(0xfffffffffffffff7, 0x0, 0x5, 0x10, r2, 0x2)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0)
connect$auto(0x3, 0x0, 0x50)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
msync$auto(0x110c230000, 0x200001, 0x6)
sendmmsg$auto(0x3, 0x0, 0x9a5, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)

2.604404979s ago: executing program 7 (id=1935):
mmap$auto(0x0, 0xb, 0xdf, 0xeb1, 0x401, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ptrace$auto(0xe, 0x0, 0x9, 0x47)
sendmsg$auto_NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x34c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x13, 0x14, 'MAC80211_HWSIM\x00'}, @NFC_ATTR_SE_APDU={0x20, 0x19, "dffd7ed22fd04982d20ec4693b1d472be1caf95eafba5ce38372cd8c"}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x34}, @NFC_ATTR_LLC_SDP={0x55, 0x13, 0x0, 0x1, [@generic="684fad529ae47f7fda839394381682a955212f4dba942e7610f43a5d07f9cf5a13059d7af890523fb89f1287977c001021e34525bbbd36436fd3c257fd9eee34aab4fd4b9c89b64920488426da", @typed={0x4, 0x104}]}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x1}, @NFC_ATTR_LLC_SDP={0x183, 0x13, 0x0, 0x1, [@nested={0x8b, 0x13d, 0x0, 0x1, [@generic="bc02f86c5392b743253de88b1c31b086b37fbbe93c18d8b84fca7ae123a4b392fab44e72b069ed2d4eb8a7f33777474b63e1eb42196e1589cd70b60195aaae8a238052fab3dcab1aa953e019a864a03c0f59d853befbbb23b297e43274ffd2d819509ac1c943e34d14ffb0cb9467aec826c1f065bd2183113c23c9b22fd170", @typed={0x8, 0xc4, 0x0, 0x0, @fd}]}, @typed={0x8, 0x136, 0x0, 0x0, @pid}, @typed={0x8, 0x162, 0x0, 0x0, @fd=r0}, @generic="d23eab5da91391d50232663e00f1bfb1e6359f8a6024240aa4a59373d7c3eb7d5321d4a6ee03cab3174f6bf29c50dac46a1a524917c7c3980033106ba374fd8b52dcee673b9bd6d71aeabd47d08b53e961b16db2a92290f9012a793a1c9f3856f079528374cdb2d7f78ac993b6ab6845e557d48970bc9741085f4ce0dbf9ba67834beea4700e2cd2879442844514cb26341b3321601590435c4a1802ca938926ff6ba2fbedc4dc4d8505cb3ab8ec4bf84158633932f71b346da64b6dff35a59869affb7def8cdab059a260", @nested={0x18, 0xb9, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x78, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0xba}]}]}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x9}, @NFC_ATTR_SE_APDU={0x100, 0x19, "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"}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x6569}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7fff}]}, 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x24000005)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c008000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf250400000008000c0002000000"], 0x1c}, 0x1, 0x300000000000000, 0x0, 0x4081}, 0x8800)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x0, 0x0)
pread64$auto(r2, 0x0, 0x201, 0xc000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r3 = socket(0x2b, 0x1, 0x0)
openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/o2hb/quorum_regions\x00', 0x500, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
socket(0x2c, 0x3, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x400c)
keyctl$auto(0x0, 0xdfffffffffffffff, 0x69c9, 0x0, 0x400)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0xa00009}, 0x6, 0x20000003)
sendfile$auto(0x1, 0x3, 0x0, 0x7ff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd13/power/autosuspend_delay_ms\x00', 0x105401, 0x0)
socket(0xa, 0x801, 0x84)
getpid()
sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6)
socket(0x11, 0x80003, 0x0)
mmap$auto(0x0, 0x26, 0xdf, 0x9b72, 0x1000, 0x28000)

2.428683693s ago: executing program 1 (id=1936):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008800)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x40008c0)
close_range$auto(0x2, 0x8, 0x0)
fanotify_init$auto(0x65, 0x2)
socket(0x1d, 0x2, 0x2)
connect$auto(0x3, 0x0, 0x55)
socket(0x10, 0x3, 0x6)
socketpair$auto(0x1e, 0xb, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x38}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x6, 0x1f00)
write$auto(0x3, 0x0, 0x7fffffff)
sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001800)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
r3 = wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x80000001, &(0x7f0000000280)={{0x2, 0x7}, {0x9, 0x400}, 0x10000, 0x7, 0x100000001, 0x2, 0x80, 0xfffffffffffff801, 0x6, 0x1, 0x100000000, 0x9, 0x8, 0x8, 0x4, 0x1})
sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f000000a200)={&(0x7f0000001f40)={0x2184, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_HINT={0xe, 0xc8, "9f62528f1003312e23cf"}, @NL80211_ATTR_MLO_LINKS={0x2158, 0x138, 0x0, 0x1, [{0x4}, {0x175c, 0x0, 0x0, 0x1, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "c34ca1"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}, @NL80211_ATTR_EMA_RNR_ELEMS={0x1733, 0x145, 0x0, 0x1, [@typed={0x4, 0xb4}, @generic="3c144559e4f50bf47f371eba39b5cefe53a708056cd1104bb25ae398e53ba78d2664017bbaeca743d5528f58dd55f97f7ae71b223fe0ebbbb568d014fc68dc06d1b470565077406e5ab29248142a7a9077c5e0f11f05f98a02c44eec9f69bf66dd580a816902409a5357f6", @nested={0x15f3, 0x11, 0x0, 0x1, [@nested={0x4, 0xba}, @nested={0x1522, 0x14f, 0x0, 0x1, [@nested={0x399, 0x7b, 0x0, 0x1, [@nested={0x2b1, 0xfb, 0x0, 0x1, [@generic="0912f12d4f8db676fde979a6833c7df569e49381d25ce9a48d35daf8c89d54a9bb01", @nested={0x4, 0x152}, @generic="f5abbb4b2f0a27cfd29f0ab26942d256b8331ff3869d2c5cabd0b3dfff87cfdcf329a18809b82cf21a3c86427aecf967904c2e0a8b69890e00da248b8570e1f3500fa58ec4bfcb672ae9bc1853c32820aed6d65c396f418fdb8bbb741622739f415be8be69b30f965c6b6252ba425d1b9371da3f25e3", @generic="587c38cd07d983dcc9565c164bb98682f6722f5b455e76a252cc58ce0f8302fce9ef95532e3492e8da94f90bb72b0b18c7be23039cecf3d2065b502a4e77b9e8321e3b7e8536b5f873ae2aaf2641a5e91568e84a55326d653f3a", @nested={0x4, 0x166}, @nested={0x4, 0x15d}, @typed={0x9, 0x123, 0x0, 0x0, @str='])-#\x00'}, @generic="bea8ccc446599adfc09f8b58bc00c542718eac6da86f5459be69e443aa46c407eaf87288e383b5c019bced1248fabdb9c2677788c9ebae22848fbee970b222689a34a9897690a640f8a147eb7f0baaac4dbc7808187694c434ec4459099f555d732e1327909585e0ad5173090f363ab7a5560fbdeec1252a9544713287db9b9ab012b46b815a1a9b7c774ee1dc089f68395ee15eb817d220d4453aa6106dbe64127103c70a9933095c1b61eb2008f0b6aca8fa1ae5e3", @generic="f24e3f8ca96f1299f98f12d28189dcf21a09dc053614f492d864f2b46da0d2a06d45396d97178639d1e6a4b0dd27184b35d72a51e046152cf2bb46d0d692d4fa21948499931c21d183daf82d5e38d6ddc38d1188b8bcf003903c087bbd342c2d4708048b7865a18729d8dbffcb637762d05b129338fd3b04d472180c2000ab2afd506ee5a4e46146f7427051663f57de85b01e15fabde694febf680175069cecb3ec76f6a6da7d4b576fe14beacc4df754e0cbf735fc012d270e13af5f7278094fd97dc23b2954f32c988aaae828b676c34ffc9b11ea9c75d49d39dc634e6baa220613a1a770c951f5", @nested={0x4, 0x52}]}, @generic="e519ea7e38746445d9ca9f309e4c220ffab45c43fe3a6dc33274235deec96b15325c19ac0465a548762027bfbd97eb0408c03813e343246dc61449f199136f28663ad3e57010f3e02fe3e17deb5eddea15bfe2bdca64db5672bed2114d0454efbf587e631430498cee3d38ca5ea5056c78865dae2b9a6c670484e8b87821765103fc5c2c0c2ad0ecc3e5a6bd4608b8582b4ceaf31714d4d6f8a288cb5a91d0cb96fecaaee1c3a08db8de7316b07b8f60c306c29c54c63b770ca876bbe84c0bf8c51751a0448ab6dc988a12bb3c", @typed={0x14, 0x9a, 0x0, 0x0, @ipv6=@empty}]}, @generic="b56275580aad4635acbfafbd7a84d01e5e14c983a3460cf10d851e4c53be86cafe8fabb6a66c6d3b04ac136baf70c804f575af6f5ee6c5d84ee901d9e744a332cce976826d937fdef5ba4fbff89edc1f81b3b6344781ddf42a5228c627f6f6cc62c1d70a33b8895f14d681", @generic="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", @nested={0xe3, 0x43, 0x0, 0x1, [@generic="c5d15daa79d3c495b653fab35ee93c7bc7373de00a4e22a98f7203a377d6c03fc592a34c00914b1e3ac492e4e7949f3f768ec55dc734a7434540e1ccffbee27d531da43591b60e1034d6656a9259a9deed376ba9d23fac9324d15a7706cffd026148213bddb41632ca1a9a90786d0636394dc1afb29065380be132a4256d9d103508b403ed7003eb4ea6f888d8c942ef0ed7a7927df56e0143e949e5a14b3a3dcf13c94d2dbacb744253a300d92600d0e7362f20fd18001ba3c92fa1eb42cd43c95d8891ac731f77c433d6b37fae14af02d11c90714abf67b21b0bf3d7e4c7"]}, @generic="3b79592521bbbe1947bcb280cefbf1ec380b2a8fe0f55ca0acaf66442dec3766735cfe7a9c9dc0c3cf34b628522a8f23547fd0"]}, @typed={0x8, 0x84, 0x0, 0x0, @pid=r3}, @generic="ac7e80680ddb3a21dd756140fa8209a2a96365f1dfbddd7cb88cd534f215de15030e8804325d9baee25d93e49b7cbd941c28da25d4004e2b0742d72e394ebe855f6e4aefebac12c0c0b308ce596419b2fd4ac4d196911b7d3c2eaebeb96e3e642eab5d60fd0ac66b65fc7aefde80f557d3a49b0e5fe57ae5ca95391a7e46cf6b49a83c752baba6762dc306c9a034b61b8e36274913b576cb4f2aae994e55dbb94f753f1ea5750ee63b40e1d95956e26f8cddfba936ef95c35d014d9523910d"]}, @nested={0xc9, 0x56, 0x0, 0x1, [@generic="9866f83c82e08983d2cb7e0d6ed417d314fc1fe2814ea914a99341da903942f0556c93c74a856d52509e3eadf871a9ad79769832ba7a967be5bbddb7dedd6df4", @generic="013e7a9a8fe36d6e20ed476aab76a16bd702534d8f4bba1ec75a2a3923e0ad18db7cd2e08b685fa646305b379b9233a341", @nested={0x4, 0x2e}, @nested={0x4, 0x84}, @typed={0x8, 0xcc, 0x0, 0x0, @pid}, @typed={0x34, 0x24, 0x0, 0x0, @binary="6101edd5190539fb373c5da5a452317d5ae684147d0a0f8f69add74b52c3a42c3cac4149b492d957a0083b14a9dd0b52"}, @nested={0x4, 0xb9}, @nested={0x4, 0x98}, @nested={0x4, 0x2e}, @nested={0x4, 0x105}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xca}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_IE_ASSOC_RESP={0x399, 0x80, "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"}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x10}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "5cb5034c024abde6661081a869e4515d2108eac2058412849b27"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, "869527164f3966c8c3"}, @NL80211_ATTR_IE_PROBE_RESP={0x24e, 0x7f, "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"}]}, {0x3b8, 0x0, 0x0, 0x1, [@NL80211_ATTR_HT_CAPABILITY={0x3ab, 0x1f, "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"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}]}, 0x2184}, 0x1, 0x0, 0x0, 0x800d808}, 0x20040871)
write$auto(0x3, 0x0, 0x100000000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0)
ioctl$auto(r4, 0x5646, r4)
r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0)
write$auto(r5, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff)
setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9)
read$auto(0x3, 0x0, 0x80)

1.873771212s ago: executing program 7 (id=1937):
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0xa, 0x3, 0x3b) (async)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (rerun: 64)
unshare$auto(0x40000080) (async)
prctl$auto(0x8, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) (async)
sendmsg$auto_HWSIM_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44080}, 0x20048880)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0x2, 0x1, 0x106) (async)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) (async)
socket(0x28, 0x5, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x5, 0x3, 0xfffffffffffffffc, 0x7, 0x80000000, 0x8000, 0xffffdfffffffff81, 0x4]}, 0x0) (async)
syz_clone(0x52000080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async)
syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)

656.052259ms ago: executing program 1 (id=1938):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.8/usb25/ep_00/wMaxPacketSize\x00', 0x2e001, 0x0)
write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad?\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\x02\x00\x00\x00\x00\x00\x00\x00\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0xffffffffffffffff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0xfffffffffffffffc, 0xfffffffffffffff5, 0x15)
io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x1, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}})
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000)
sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0)
madvise$auto(0x0, 0x7, 0x15) (async)
madvise$auto(0x0, 0x7, 0x15)
socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000100)=0x3) (async)
socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000100)=0x3)

0s ago: executing program 7 (id=1939):
r0 = openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x100, 0x0)
mmap$auto(0xd, 0x2020009, 0x15c, 0xa37, r0, 0x5)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0)
write$auto(r1, &(0x7f00000001c0)='7K\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec)
r2 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r2, 0x29, 0x39, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev7\x00', 0x20200, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
r4 = socket(0x11, 0x80003, 0x300)
name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000400)={0x0, 0x10}, 0x0, 0x1001)
setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4)
r5 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r5, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000200)='L', 0x101}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x182b02, 0x0)
writev$auto(r6, &(0x7f0000000080)={&(0x7f0000000040), 0x400}, 0x5)
ioctl$auto(r3, 0xc040563d, r3)

kernel console output (not intermixed with test programs):

netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'.
[  523.883715][T12860] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1315'.
[  526.409438][T12924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'.
[  531.413806][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'.
[  534.614323][T13071] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  534.627972][T13071] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  534.640651][T13071] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  534.689739][T13071] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  534.999560][   T29] audit: type=1804 audit(1843170309.622:64): pid=13102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1353" name="/newroot/360/file0" dev="tmpfs" ino=1914 res=1 errno=0
[  535.779908][T13110] zswap: compressor  not available
[  535.862350][ T5637] Bluetooth: hci1: command 0x0406 tx timeout
[  536.664050][ T5637] Bluetooth: hci3: command 0x2016 tx timeout
[  536.664061][ T5625] Bluetooth: hci2: command 0x0406 tx timeout
[  536.741937][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout
[  537.009962][T13146] netlink: 'syz.4.1363': attribute type 8 has an invalid length.
[  537.477230][T13155] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1366'.
[  537.505962][T13155] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1366'.
[  537.929158][T13166] zswap: compressor  not available
[  538.226127][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'.
[  539.603953][T13218] syz.3.1379 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  539.621313][T13218] CPU: 0 UID: 0 PID: 13218 Comm: syz.3.1379 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  539.621360][T13218] Tainted: [L]=SOFTLOCKUP
[  539.621371][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  539.621389][T13218] Call Trace:
[  539.621398][T13218]  <TASK>
[  539.621409][T13218]  dump_stack_lvl+0x100/0x190
[  539.621448][T13218]  dump_header+0xfb/0x606
[  539.621483][T13218]  oom_kill_process.cold+0xd/0x330
[  539.621530][T13218]  out_of_memory+0x340/0x14f0
[  539.621581][T13218]  ? __pfx_out_of_memory+0x10/0x10
[  539.621661][T13218]  mem_cgroup_out_of_memory+0xc6/0x130
[  539.621723][T13218]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  539.621772][T13218]  ? find_held_lock+0x2b/0x80
[  539.621812][T13218]  ? do_raw_spin_unlock+0x145/0x1e0
[  539.621842][T13218]  ? _raw_spin_unlock+0x28/0x50
[  539.621881][T13218]  try_charge_memcg+0x6e5/0xdf0
[  539.621924][T13218]  ? __pfx_try_charge_memcg+0x10/0x10
[  539.621960][T13218]  ? find_held_lock+0x2b/0x80
[  539.621991][T13218]  ? rcu_read_unlock+0x17/0x60
[  539.622030][T13218]  ? rcu_read_unlock+0x17/0x60
[  539.622067][T13218]  ? find_held_lock+0x2b/0x80
[  539.622100][T13218]  ? rcu_read_unlock+0x17/0x60
[  539.622147][T13218]  charge_memcg+0x187/0x1e0
[  539.622187][T13218]  __mem_cgroup_charge+0x2b/0x1c0
[  539.622232][T13218]  shmem_alloc_and_add_folio+0x451/0xd40
[  539.622288][T13218]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  539.622337][T13218]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  539.622395][T13218]  shmem_get_folio_gfp+0x6ad/0x1910
[  539.622452][T13218]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  539.622503][T13218]  ? inode_maybe_inc_iversion+0x169/0x220
[  539.622551][T13218]  shmem_fault+0x1f9/0xa20
[  539.622596][T13218]  ? __lock_acquire+0x49f/0x1a40
[  539.622645][T13218]  ? __pfx_shmem_fault+0x10/0x10
[  539.622689][T13218]  ? rcu_is_watching+0x12/0xc0
[  539.622723][T13218]  ? __mark_inode_dirty+0x55c/0x16e0
[  539.622854][T13218]  ? __pfx_filemap_map_pages+0x10/0x10
[  539.622898][T13218]  __do_fault+0x10b/0x440
[  539.622928][T13218]  ? find_held_lock+0x2b/0x80
[  539.622964][T13218]  do_fault+0x2db/0x1750
[  539.623008][T13218]  __handle_mm_fault+0x187d/0x2a00
[  539.623059][T13218]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  539.623092][T13218]  ? __pfx___handle_mm_fault+0x10/0x10
[  539.623140][T13218]  ? pte_offset_map_lock+0x174/0x320
[  539.623175][T13218]  ? find_held_lock+0x2b/0x80
[  539.623218][T13218]  ? follow_page_pte+0x4d0/0x13f0
[  539.623261][T13218]  handle_mm_fault+0x37b/0xa30
[  539.623312][T13218]  __get_user_pages+0x1178/0x32a0
[  539.623360][T13218]  ? down_read_killable+0x35e/0x520
[  539.623392][T13218]  ? __pfx___get_user_pages+0x10/0x10
[  539.623439][T13218]  faultin_page_range+0x1f1/0x9e0
[  539.623486][T13218]  madvise_do_behavior+0x354/0x510
[  539.623531][T13218]  ? __pfx_madvise_do_behavior+0x10/0x10
[  539.623575][T13218]  ? __pfx_futex_wait+0x10/0x10
[  539.623624][T13218]  do_madvise+0x238/0x290
[  539.623670][T13218]  ? __pfx_do_madvise+0x10/0x10
[  539.623710][T13218]  ? do_futex+0x190/0x440
[  539.623772][T13218]  __x64_sys_madvise+0xa9/0x110
[  539.623814][T13218]  ? lockdep_hardirqs_on+0x78/0x100
[  539.623858][T13218]  do_syscall_64+0x115/0x840
[  539.623903][T13218]  ? clear_bhb_loop+0x40/0x90
[  539.623940][T13218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.623970][T13218] RIP: 0033:0x7f98dd59de59
[  539.623995][T13218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  539.624023][T13218] RSP: 002b:00007f98de4f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  539.624051][T13218] RAX: ffffffffffffffda RBX: 00007f98dd825fa0 RCX: 00007f98dd59de59
[  539.624071][T13218] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000
[  539.624089][T13218] RBP: 00007f98dd633e6f R08: 0000000000000000 R09: 0000000000000000
[  539.624107][T13218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  539.624124][T13218] R13: 00007f98dd826038 R14: 00007f98dd825fa0 R15: 00007ffe5634d5f8
[  539.624161][T13218]  </TASK>
[  539.628764][T13218] memory: usage 3072kB, limit 3072kB, failcnt 52435
[  540.180110][T13218] memory+swap: usage 3076kB, limit 9007199254740988kB, failcnt 0
[  540.187922][T13218] kmem: usage 1096kB, limit 9007199254740988kB, failcnt 0
[  540.210022][T13218] Memory cgroup stats for /syz3:
[  540.210296][T13218] cache 1814528
[  540.218768][T13218] rss 184320
[  540.222911][T13218] rss_huge 0
[  540.227652][T13218] shmem 1814528
[  540.239982][T13218] mapped_file 1814528
[  540.244028][T13218] dirty 0
[  540.246991][T13218] writeback 0
[  540.269966][T13218] workingset_refault_anon 12263
[  540.281707][T13218] workingset_refault_file 5607
[  540.291084][T13218] swap 0
[  540.300092][T13218] swapcached 275595264
[  540.308987][T13218] pgpgin 330400
[  540.321383][T13218] pgpgout 330451
[  540.326465][T13218] pgfault 342694
[  540.335035][T13218] pgmajfault 3432
[  540.351855][T13218] inactive_anon 20480
[  540.357412][T13218] active_anon 8192
[  540.365930][T13218] inactive_file 0
[  540.376211][T13218] active_file 0
[  540.390040][T13218] unevictable 1949696
[  540.394084][T13218] hierarchical_memory_limit 3145728
[  540.403190][T13218] hierarchical_memsw_limit 9223372036854771712
[  540.419913][T13218] total_cache 1814528
[  540.425434][T13218] total_rss 184320
[  540.439882][T13218] total_rss_huge 0
[  540.443677][T13218] total_shmem 1814528
[  540.447686][T13218] total_mapped_file 1814528
[  540.454056][T13218] total_dirty 0
[  540.459041][T13218] total_writeback 0
[  540.469901][T13218] total_workingset_refault_anon 12263
[  540.475336][T13218] total_workingset_refault_file 5607
[  540.489913][T13218] total_swap 0
[  540.493356][T13218] total_swapcached 275595264
[  540.497997][T13218] total_pgpgin 330400
[  540.522500][T13218] total_pgpgout 330451
[  540.526662][T13218] total_pgfault 342694
[  540.531115][T13218] total_pgmajfault 3432
[  540.541886][T13218] total_inactive_anon 20480
[  540.559865][T13218] total_active_anon 8192
[  540.567139][T13234] zswap: compressor  not available
[  540.570725][T13218] total_inactive_file 0
[  540.581178][T13218] total_active_file 0
[  540.590053][T13218] total_unevictable 1949696
[  540.599113][T13218] anon_cost 28
[  540.608469][T13218] file_cost 0
[  540.619798][T13218] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1379,pid=13217,uid=0
[  540.652591][T13218] Memory cgroup out of memory: Killed process 13217 (syz.3.1379) total-vm:170172kB, anon-rss:1424kB, file-rss:22328kB, shmem-rss:1776kB, UID:0 pgtables:148kB oom_score_adj:1000
[  542.805236][T13280] FAULT_INJECTION: forcing a failure.
[  542.805236][T13280] name fail_futex, interval 1, probability 0, space 0, times 0
[  542.904660][T13280] CPU: 0 UID: 0 PID: 13280 Comm: syz.1.1390 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  542.904710][T13280] Tainted: [L]=SOFTLOCKUP
[  542.904721][T13280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  542.904738][T13280] Call Trace:
[  542.904748][T13280]  <TASK>
[  542.904759][T13280]  dump_stack_lvl+0x100/0x190
[  542.904797][T13280]  should_fail_ex.cold+0x5/0xa
[  542.904830][T13280]  get_futex_key+0x1d2/0x14f0
[  542.904881][T13280]  ? __pfx_get_futex_key+0x10/0x10
[  542.904927][T13280]  ? find_held_lock+0x2b/0x80
[  542.904961][T13280]  ? futex_wake+0x4ea/0x5e0
[  542.905003][T13280]  futex_wake+0xf4/0x5e0
[  542.905042][T13280]  ? __pfx_futex_wake+0x10/0x10
[  542.905076][T13280]  ? __call_rcu_common.constprop.0+0x3f0/0x9b0
[  542.905130][T13280]  ? __lock_acquire+0x49f/0x1a40
[  542.905179][T13280]  do_futex+0x2b2/0x440
[  542.905209][T13280]  ? __pfx_do_futex+0x10/0x10
[  542.905239][T13280]  ? find_held_lock+0x2b/0x80
[  542.905275][T13280]  __x64_sys_futex+0x34f/0x4d0
[  542.905315][T13280]  ? __pfx___x64_sys_futex+0x10/0x10
[  542.905361][T13280]  do_syscall_64+0x115/0x840
[  542.905409][T13280]  ? clear_bhb_loop+0x40/0x90
[  542.905449][T13280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.905482][T13280] RIP: 0033:0x7fae11f9de59
[  542.905509][T13280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.905539][T13280] RSP: 002b:00007fae12eb50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  542.905569][T13280] RAX: ffffffffffffffda RBX: 00007fae12226188 RCX: 00007fae11f9de59
[  542.905589][T13280] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fae1222618c
[  542.905609][T13280] RBP: 00007fae12226180 R08: 0000000000000001 R09: 0000000000000000
[  542.905626][T13280] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  542.905641][T13280] R13: 00007fae12226218 R14: 00007fffee5352e0 R15: 00007fffee5353c8
[  542.905669][T13280]  </TASK>
[  543.904778][   T29] audit: type=1800 audit(4294967300.741:65): pid=13289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1388" name="version" dev="configfs" ino=48016 res=0 errno=0
[  544.580286][T13324] netlink: 'syz.3.1398': attribute type 2 has an invalid length.
[  544.721517][T13326] ubi: mtd0 is already attached to ubi0
[  544.870846][T13326] ubi0: detaching mtd0
[  544.888506][T13326] ubi0: mtd0 is detached
[  547.138047][T13352] Process accounting paused
[  550.454322][T13496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1421'.
[  554.780381][T13568] FAULT_INJECTION: forcing a failure.
[  554.780381][T13568] name fail_futex, interval 1, probability 0, space 0, times 0
[  554.835262][T13568] CPU: 0 UID: 0 PID: 13568 Comm: syz.1.1431 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  554.835301][T13568] Tainted: [L]=SOFTLOCKUP
[  554.835307][T13568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  554.835320][T13568] Call Trace:
[  554.835326][T13568]  <TASK>
[  554.835334][T13568]  dump_stack_lvl+0x100/0x190
[  554.835361][T13568]  should_fail_ex.cold+0x5/0xa
[  554.835384][T13568]  get_futex_key+0xf74/0x14f0
[  554.835420][T13568]  ? __pfx_get_futex_key+0x10/0x10
[  554.835451][T13568]  ? lock_acquire+0x1b9/0x370
[  554.835486][T13568]  futex_wake+0xf4/0x5e0
[  554.835513][T13568]  ? __pfx_futex_wake+0x10/0x10
[  554.835536][T13568]  ? find_held_lock+0x2b/0x80
[  554.835559][T13568]  ? exit_mm_release+0x19/0x30
[  554.835586][T13568]  do_futex+0x2b2/0x440
[  554.835606][T13568]  ? __pfx_do_futex+0x10/0x10
[  554.835624][T13568]  ? __might_fault+0xc5/0x140
[  554.835663][T13568]  mm_release+0x24a/0x2f0
[  554.835696][T13568]  do_exit+0x707/0x2ae0
[  554.835727][T13568]  ? __pfx_do_exit+0x10/0x10
[  554.835788][T13568]  ? do_raw_spin_lock+0x128/0x260
[  554.835813][T13568]  ? find_held_lock+0x2b/0x80
[  554.835834][T13568]  ? get_signal+0x7e0/0x21e0
[  554.835856][T13568]  do_group_exit+0xd5/0x2a0
[  554.835883][T13568]  get_signal+0x1ec7/0x21e0
[  554.835908][T13568]  ? preempt_schedule_common+0x42/0xc0
[  554.835939][T13568]  ? __pfx_get_signal+0x10/0x10
[  554.835960][T13568]  ? do_futex+0x190/0x440
[  554.835980][T13568]  arch_do_signal_or_restart+0x91/0x7a0
[  554.836012][T13568]  ? cap_task_prctl+0x104/0xa50
[  554.836043][T13568]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  554.836087][T13568]  exit_to_user_mode_loop+0x139/0x6f0
[  554.836118][T13568]  ? rcu_is_watching+0x12/0xc0
[  554.836141][T13568]  do_syscall_64+0x652/0x840
[  554.836171][T13568]  ? clear_bhb_loop+0x40/0x90
[  554.836195][T13568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.836216][T13568] RIP: 0033:0x7fae11f9de59
[  554.836237][T13568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.836256][T13568] RSP: 002b:00007fae12ed60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  554.836275][T13568] RAX: fffffffffffffe00 RBX: 00007fae12226098 RCX: 00007fae11f9de59
[  554.836289][T13568] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fae12226098
[  554.836301][T13568] RBP: 00007fae12226090 R08: 0000000000000000 R09: 0000000000000000
[  554.836313][T13568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  554.836325][T13568] R13: 00007fae12226128 R14: 00007fffee5352e0 R15: 00007fffee5353c8
[  554.836350][T13568]  </TASK>
[  555.310884][T13576] FAULT_INJECTION: forcing a failure.
[  555.310884][T13576] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  555.324385][T13576] CPU: 0 UID: 0 PID: 13576 Comm: syz.1.1434 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  555.324427][T13576] Tainted: [L]=SOFTLOCKUP
[  555.324436][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  555.324453][T13576] Call Trace:
[  555.324462][T13576]  <TASK>
[  555.324472][T13576]  dump_stack_lvl+0x100/0x190
[  555.324506][T13576]  should_fail_ex.cold+0x5/0xa
[  555.324531][T13576]  ? prepare_alloc_pages+0x16d/0x5f0
[  555.324571][T13576]  should_fail_alloc_page+0xeb/0x140
[  555.324606][T13576]  prepare_alloc_pages+0x1f0/0x5f0
[  555.324648][T13576]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  555.324678][T13576]  ? folio_batch_move_lru+0x37c/0xc00
[  555.324724][T13576]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  555.324770][T13576]  ? folio_batch_move_lru+0x3a9/0xc00
[  555.324814][T13576]  ? __pfx_lru_add+0x10/0x10
[  555.324860][T13576]  ? __pfx_folio_batch_move_lru+0x10/0x10
[  555.324903][T13576]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  555.324946][T13576]  ? __lock_acquire+0x49f/0x1a40
[  555.324987][T13576]  ? __lock_acquire+0x49f/0x1a40
[  555.325039][T13576]  ? lock_acquire+0x1b9/0x370
[  555.325079][T13576]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  555.325119][T13576]  ? policy_nodemask+0xed/0x4f0
[  555.325158][T13576]  alloc_pages_mpol+0x1fb/0x540
[  555.325204][T13576]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  555.325251][T13576]  folio_alloc_mpol_noprof+0x36/0x260
[  555.325296][T13576]  vma_alloc_folio_noprof+0xed/0x1d0
[  555.325338][T13576]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  555.325392][T13576]  do_anonymous_page+0xb2b/0x2080
[  555.325436][T13576]  ? rcu_read_unlock+0x2d/0xb0
[  555.325489][T13576]  __handle_mm_fault+0x1d2c/0x2a00
[  555.325536][T13576]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  555.325567][T13576]  ? __pfx___handle_mm_fault+0x10/0x10
[  555.325613][T13576]  ? pte_offset_map_lock+0x174/0x320
[  555.325646][T13576]  ? find_held_lock+0x2b/0x80
[  555.325689][T13576]  ? follow_page_pte+0x4d0/0x13f0
[  555.325732][T13576]  handle_mm_fault+0x37b/0xa30
[  555.325790][T13576]  __get_user_pages+0x1178/0x32a0
[  555.325840][T13576]  ? __pfx___get_user_pages+0x10/0x10
[  555.325886][T13576]  populate_vma_page_range+0x267/0x3f0
[  555.325928][T13576]  ? __pfx_populate_vma_page_range+0x10/0x10
[  555.325966][T13576]  ? __pfx_find_vma_intersection+0x10/0x10
[  555.326004][T13576]  ? do_mmap+0x93f/0x12f0
[  555.326042][T13576]  __mm_populate+0x107/0x3a0
[  555.326081][T13576]  ? __pfx___mm_populate+0x10/0x10
[  555.326123][T13576]  ? up_write+0x2e5/0x5c0
[  555.326152][T13576]  vm_mmap_pgoff+0x37f/0x470
[  555.326196][T13576]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  555.326237][T13576]  ? __pfx_do_futex+0x10/0x10
[  555.326265][T13576]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  555.326314][T13576]  ksys_mmap_pgoff+0xe4/0x610
[  555.326349][T13576]  ? __x64_sys_futex+0x358/0x4d0
[  555.326378][T13576]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  555.326413][T13576]  ? xfd_validate_state+0x129/0x190
[  555.326449][T13576]  __x64_sys_mmap+0x125/0x190
[  555.326483][T13576]  do_syscall_64+0x115/0x840
[  555.326520][T13576]  ? clear_bhb_loop+0x40/0x90
[  555.326552][T13576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.326579][T13576] RIP: 0033:0x7fae11f9de59
[  555.326600][T13576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  555.326625][T13576] RSP: 002b:00007fae12ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  555.326649][T13576] RAX: ffffffffffffffda RBX: 00007fae12225fa0 RCX: 00007fae11f9de59
[  555.326667][T13576] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  555.326683][T13576] RBP: 00007fae12033e6f R08: 0000000000000002 R09: 0000000000008000
[  555.326699][T13576] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  555.326715][T13576] R13: 00007fae12226038 R14: 00007fae12225fa0 R15: 00007fffee5353c8
[  555.326748][T13576]  </TASK>
[  558.983982][T13637] zswap: compressor û not available
[  558.999505][T13632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1437'.
[  561.317997][   T29] audit: type=1800 audit(4294967318.160:66): pid=13686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1454" name="dbroot" dev="configfs" ino=50016 res=0 errno=0
[  561.348401][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1449'.
[  561.489268][T13684] vhci_hcd: not connected 4
[  562.010223][T13706] warning: `syz.1.1456' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  562.743057][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  562.755655][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  562.985110][T13713] zswap: compressor  not available
[  563.659160][T13731] ubi0: attaching mtd0
[  563.681817][T13731] ubi0: scanning is finished
[  563.934368][T13731] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  563.934436][T13731] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  563.934467][T13731] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  563.934597][T13731] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  563.934627][T13731] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  563.934656][T13731] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  563.934685][T13731] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3480833233
[  563.934720][T13731] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  563.934827][T13734] ubi0: detaching mtd0
[  564.125917][T13752] FAULT_INJECTION: forcing a failure.
[  564.125917][T13752] name failslab, interval 1, probability 0, space 0, times 0
[  564.126011][T13752] CPU: 1 UID: 0 PID: 13752 Comm: syz.1.1466 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  564.126059][T13752] Tainted: [L]=SOFTLOCKUP
[  564.126070][T13752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  564.126090][T13752] Call Trace:
[  564.126099][T13752]  <TASK>
[  564.126111][T13752]  dump_stack_lvl+0x100/0x190
[  564.126151][T13752]  should_fail_ex.cold+0x5/0xa
[  564.126187][T13752]  should_failslab+0xc2/0x120
[  564.126237][T13752]  __kmalloc_cache_noprof+0x91/0x6c0
[  564.126285][T13752]  ? __asan_memset+0x23/0x50
[  564.126312][T13752]  ? snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  564.126365][T13752]  snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  564.126412][T13752]  ? trace_contention_end+0x126/0x160
[  564.126471][T13752]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  564.126516][T13752]  ? __pfx___mutex_lock+0x10/0x10
[  564.126562][T13752]  ? __mutex_lock+0x26d/0x1bd0
[  564.126611][T13752]  ? find_held_lock+0x2b/0x80
[  564.126655][T13752]  ? __mutex_unlock_slowpath+0x35d/0x930
[  564.126711][T13752]  snd_pcm_oss_make_ready+0xeb/0x1b0
[  564.126758][T13752]  snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0
[  564.126814][T13752]  snd_pcm_oss_poll+0x404/0xae0
[  564.126856][T13752]  ? __pfx___pollwait+0x10/0x10
[  564.126926][T13752]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  564.126971][T13752]  ? __fget_files+0x21f/0x3d0
[  564.127023][T13752]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  564.127071][T13752]  do_select+0xd54/0x1850
[  564.127144][T13752]  ? __pfx_do_select+0x10/0x10
[  564.127189][T13752]  ? find_held_lock+0x2b/0x80
[  564.127223][T13752]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  564.127276][T13752]  ? __pfx___pollwait+0x10/0x10
[  564.127324][T13752]  ? __pfx_pollwake+0x10/0x10
[  564.127370][T13752]  ? __pfx_pollwake+0x10/0x10
[  564.127464][T13752]  ? find_held_lock+0x2b/0x80
[  564.127498][T13752]  ? __might_fault+0xc5/0x140
[  564.127548][T13752]  ? __might_fault+0xc5/0x140
[  564.127610][T13752]  ? core_sys_select+0x55b/0xbb0
[  564.127654][T13752]  core_sys_select+0x55b/0xbb0
[  564.127709][T13752]  ? __pfx_core_sys_select+0x10/0x10
[  564.127764][T13752]  ? futex_wake+0x220/0x5e0
[  564.127828][T13752]  ? do_futex+0x190/0x440
[  564.127860][T13752]  ? __pfx_do_futex+0x10/0x10
[  564.127904][T13752]  kern_select+0x1d0/0x280
[  564.127955][T13752]  ? __pfx_kern_select+0x10/0x10
[  564.128014][T13752]  __x64_sys_select+0xbd/0x160
[  564.128058][T13752]  ? do_syscall_64+0x90/0x840
[  564.128106][T13752]  ? lockdep_hardirqs_on+0x78/0x100
[  564.128165][T13752]  do_syscall_64+0x115/0x840
[  564.128208][T13752]  ? clear_bhb_loop+0x40/0x90
[  564.128244][T13752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.128275][T13752] RIP: 0033:0x7fae11f9de59
[  564.128299][T13752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  564.128328][T13752] RSP: 002b:00007fae12ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  564.128356][T13752] RAX: ffffffffffffffda RBX: 00007fae12226090 RCX: 00007fae11f9de59
[  564.128376][T13752] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000007
[  564.128394][T13752] RBP: 00007fae12033e6f R08: 0000000000000000 R09: 0000000000000000
[  564.128412][T13752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  564.128430][T13752] R13: 00007fae12226128 R14: 00007fae12226090 R15: 00007fffee5353c8
[  564.128468][T13752]  </TASK>
[  564.277134][T13734] ubi0: mtd0 is detached
[  564.893364][T13766] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1468'.
[  564.893442][T13766] tc_dump_action: action bad kind
[  565.363437][T13768] zswap: compressor  not available
[  566.470803][T13797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1474'.
[  566.851244][T13807] smpboot: CPU 1 is now offline
[  568.453583][T13821] zswap: compressor  not available
[  569.564902][T13854] ima: policy update failed
[  569.663109][   T29] audit: type=1802 audit(4294967326.514:67): pid=13854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1482" res=0 errno=0
[  569.960523][T13864] FAULT_INJECTION: forcing a failure.
[  569.960523][T13864] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  570.108516][T13864] CPU: 0 UID: 0 PID: 13864 Comm: syz.1.1485 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  570.108556][T13864] Tainted: [L]=SOFTLOCKUP
[  570.108565][T13864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  570.108580][T13864] Call Trace:
[  570.108587][T13864]  <TASK>
[  570.108596][T13864]  dump_stack_lvl+0x100/0x190
[  570.108628][T13864]  should_fail_ex.cold+0x5/0xa
[  570.108651][T13864]  ? prepare_alloc_pages+0x16d/0x5f0
[  570.108687][T13864]  should_fail_alloc_page+0xeb/0x140
[  570.108724][T13864]  prepare_alloc_pages+0x1f0/0x5f0
[  570.108757][T13864]  ? is_bpf_text_address+0x8a/0x1a0
[  570.108793][T13864]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  570.108826][T13864]  ? is_bpf_text_address+0x94/0x1a0
[  570.108859][T13864]  ? kernel_text_address+0x8d/0x100
[  570.108894][T13864]  ? find_held_lock+0x2b/0x80
[  570.108922][T13864]  ? __kernel_text_address+0xd/0x30
[  570.108957][T13864]  ? unwind_get_return_address+0x59/0xa0
[  570.108992][T13864]  ? arch_stack_walk+0xa6/0xf0
[  570.109033][T13864]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  570.109061][T13864]  ? __pfx_stack_trace_save+0x10/0x10
[  570.109094][T13864]  ? stack_depot_save_flags+0x27/0x9d0
[  570.109136][T13864]  ? kasan_save_stack+0x3f/0x50
[  570.109162][T13864]  ? kasan_save_stack+0x30/0x50
[  570.109192][T13864]  ? handle_mm_fault+0x37b/0xa30
[  570.109229][T13864]  ? __get_user_pages+0x1178/0x32a0
[  570.109260][T13864]  ? populate_vma_page_range+0x267/0x3f0
[  570.109294][T13864]  ? __mm_populate+0x107/0x3a0
[  570.109325][T13864]  ? vm_mmap_pgoff+0x37f/0x470
[  570.109353][T13864]  ? ksys_mmap_pgoff+0xe4/0x610
[  570.109381][T13864]  ? __x64_sys_mmap+0x125/0x190
[  570.109407][T13864]  ? do_syscall_64+0x115/0x840
[  570.109445][T13864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.109473][T13864]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  570.109510][T13864]  ? policy_nodemask+0xed/0x4f0
[  570.109545][T13864]  alloc_pages_mpol+0x1fb/0x540
[  570.109579][T13864]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  570.109620][T13864]  alloc_pages_noprof+0x1a/0x160
[  570.109658][T13864]  pte_alloc_one+0x1c/0x3d0
[  570.109694][T13864]  __pte_alloc+0x6d/0x3e0
[  570.109723][T13864]  ? __pfx___pte_alloc+0x10/0x10
[  570.109753][T13864]  ? do_raw_spin_lock+0x128/0x260
[  570.109777][T13864]  ? find_held_lock+0x2b/0x80
[  570.109807][T13864]  do_anonymous_page+0x13ae/0x2080
[  570.109856][T13864]  ? __pmd_alloc+0x3fb/0x950
[  570.109891][T13864]  __handle_mm_fault+0x1d2c/0x2a00
[  570.109935][T13864]  ? mt_find+0x45e/0x8e0
[  570.109961][T13864]  ? __pfx___handle_mm_fault+0x10/0x10
[  570.109998][T13864]  ? __pfx_mt_find+0x10/0x10
[  570.110047][T13864]  handle_mm_fault+0x37b/0xa30
[  570.110091][T13864]  __get_user_pages+0x1178/0x32a0
[  570.110135][T13864]  ? __pfx___get_user_pages+0x10/0x10
[  570.110175][T13864]  populate_vma_page_range+0x267/0x3f0
[  570.110211][T13864]  ? __pfx_populate_vma_page_range+0x10/0x10
[  570.110246][T13864]  ? __pfx_find_vma_intersection+0x10/0x10
[  570.110278][T13864]  ? do_mmap+0x93f/0x12f0
[  570.110312][T13864]  __mm_populate+0x107/0x3a0
[  570.110347][T13864]  ? __pfx___mm_populate+0x10/0x10
[  570.110384][T13864]  ? up_write+0x2e5/0x5c0
[  570.110409][T13864]  vm_mmap_pgoff+0x37f/0x470
[  570.110443][T13864]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  570.110479][T13864]  ? __pfx_do_futex+0x10/0x10
[  570.110508][T13864]  ksys_mmap_pgoff+0xe4/0x610
[  570.110540][T13864]  ? __x64_sys_futex+0x358/0x4d0
[  570.110564][T13864]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  570.110596][T13864]  ? xfd_validate_state+0x129/0x190
[  570.110627][T13864]  __x64_sys_mmap+0x125/0x190
[  570.110657][T13864]  do_syscall_64+0x115/0x840
[  570.110695][T13864]  ? clear_bhb_loop+0x40/0x90
[  570.110725][T13864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.110750][T13864] RIP: 0033:0x7fae11f9de59
[  570.110771][T13864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  570.110796][T13864] RSP: 002b:00007fae12eb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  570.110824][T13864] RAX: ffffffffffffffda RBX: 00007fae12226180 RCX: 00007fae11f9de59
[  570.110841][T13864] RDX: 00000000000000df RSI: 0000000000000005 RDI: 0000000000000000
[  570.110856][T13864] RBP: 00007fae12033e6f R08: 0000000000000007 R09: 0000000000028000
[  570.110872][T13864] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  570.110886][T13864] R13: 00007fae12226218 R14: 00007fae12226180 R15: 00007fffee5353c8
[  570.110918][T13864]  </TASK>
[  573.448025][T13884] zswap: compressor  not available
[  574.009766][T13902] Process accounting resumed
[  574.688416][T13926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'.
[  576.572391][   T29] audit: type=1800 audit(4294967333.418:68): pid=13944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1499" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  578.209859][T13973] bond0: no command found in slaves file - use +ifname or -ifname
[  578.294184][T13971] FAULT_INJECTION: forcing a failure.
[  578.294184][T13971] name fail_futex, interval 1, probability 0, space 0, times 0
[  578.551497][T13971] CPU: 0 UID: 0 PID: 13971 Comm: syz.3.1502 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  578.551531][T13971] Tainted: [L]=SOFTLOCKUP
[  578.551539][T13971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  578.551552][T13971] Call Trace:
[  578.551559][T13971]  <TASK>
[  578.551567][T13971]  dump_stack_lvl+0x100/0x190
[  578.551594][T13971]  should_fail_ex.cold+0x5/0xa
[  578.551617][T13971]  get_futex_key+0x1d2/0x14f0
[  578.551655][T13971]  ? __pfx_get_futex_key+0x10/0x10
[  578.551688][T13971]  ? find_held_lock+0x2b/0x80
[  578.551712][T13971]  ? futex_wake+0x4ea/0x5e0
[  578.551744][T13971]  futex_wake+0xf4/0x5e0
[  578.551766][T13971]  ? futex_wait+0x11e/0x370
[  578.551794][T13971]  ? __pfx_futex_wake+0x10/0x10
[  578.551821][T13971]  ? __might_fault+0xc5/0x140
[  578.551861][T13971]  do_futex+0x2b2/0x440
[  578.551882][T13971]  ? __pfx_do_futex+0x10/0x10
[  578.551902][T13971]  ? cap_task_prctl+0x104/0xa50
[  578.551936][T13971]  ? __pfx_sched_core_share_pid+0x10/0x10
[  578.551966][T13971]  __x64_sys_futex+0x34f/0x4d0
[  578.551990][T13971]  ? __pfx___x64_sys_futex+0x10/0x10
[  578.552011][T13971]  ? __pfx___do_sys_prctl+0x10/0x10
[  578.552054][T13971]  do_syscall_64+0x115/0x840
[  578.552087][T13971]  ? clear_bhb_loop+0x40/0x90
[  578.552114][T13971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.552136][T13971] RIP: 0033:0x7f98dd59de59
[  578.552153][T13971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  578.552174][T13971] RSP: 002b:00007f98de4d80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  578.552194][T13971] RAX: ffffffffffffffda RBX: 00007f98dd826098 RCX: 00007f98dd59de59
[  578.552208][T13971] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f98dd82609c
[  578.552221][T13971] RBP: 00007f98dd826090 R08: 0000000000000001 R09: 0000000000000000
[  578.552234][T13971] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  578.552247][T13971] R13: 00007f98dd826128 R14: 00007ffe5634d510 R15: 00007ffe5634d5f8
[  578.552273][T13971]  </TASK>
[  578.869367][T13971] Process accounting resumed
[  580.357541][T14004] FAULT_INJECTION: forcing a failure.
[  580.357541][T14004] name fail_futex, interval 1, probability 0, space 0, times 0
[  580.520604][T14004] CPU: 0 UID: 0 PID: 14004 Comm: syz.4.1512 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  580.520640][T14004] Tainted: [L]=SOFTLOCKUP
[  580.520647][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  580.520661][T14004] Call Trace:
[  580.520667][T14004]  <TASK>
[  580.520675][T14004]  dump_stack_lvl+0x100/0x190
[  580.520702][T14004]  should_fail_ex.cold+0x5/0xa
[  580.520745][T14004]  get_futex_key+0x1d2/0x14f0
[  580.520783][T14004]  ? __pfx_get_futex_key+0x10/0x10
[  580.520818][T14004]  ? find_held_lock+0x2b/0x80
[  580.520843][T14004]  ? futex_wake+0x4ea/0x5e0
[  580.520881][T14004]  futex_wake+0xf4/0x5e0
[  580.520906][T14004]  ? futex_wait+0x11e/0x370
[  580.520935][T14004]  ? __pfx_futex_wake+0x10/0x10
[  580.520966][T14004]  ? do_sys_openat2+0x1b6/0x1e0
[  580.520998][T14004]  do_futex+0x2b2/0x440
[  580.521020][T14004]  ? __pfx_do_futex+0x10/0x10
[  580.521048][T14004]  __x64_sys_futex+0x34f/0x4d0
[  580.521072][T14004]  ? fdget_pos+0x2c0/0x380
[  580.521092][T14004]  ? __pfx___x64_sys_futex+0x10/0x10
[  580.521112][T14004]  ? ksys_write+0x1ac/0x250
[  580.521156][T14004]  ? __pfx_ksys_write+0x10/0x10
[  580.521194][T14004]  do_syscall_64+0x115/0x840
[  580.521227][T14004]  ? clear_bhb_loop+0x40/0x90
[  580.521252][T14004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.521274][T14004] RIP: 0033:0x7f407bf9de59
[  580.521290][T14004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  580.521311][T14004] RSP: 002b:00007f407ceff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  580.521330][T14004] RAX: ffffffffffffffda RBX: 00007f407c226098 RCX: 00007f407bf9de59
[  580.521344][T14004] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f407c22609c
[  580.521357][T14004] RBP: 00007f407c226090 R08: 0000000000000001 R09: 0000000000000000
[  580.521370][T14004] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  580.521382][T14004] R13: 00007f407c226128 R14: 00007ffc0640bb10 R15: 00007ffc0640bbf8
[  580.521408][T14004]  </TASK>
[  583.859277][   T29] audit: type=1800 audit(4294967340.711:69): pid=14053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1522" name="dbroot" dev="configfs" ino=52525 res=0 errno=0
[  583.930670][T14040] zswap: compressor  not available
[  586.229045][T14083] FAULT_INJECTION: forcing a failure.
[  586.229045][T14083] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  586.323919][T14083] CPU: 0 UID: 0 PID: 14083 Comm: syz.4.1528 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  586.323958][T14083] Tainted: [L]=SOFTLOCKUP
[  586.323967][T14083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  586.323982][T14083] Call Trace:
[  586.323990][T14083]  <TASK>
[  586.324000][T14083]  dump_stack_lvl+0x100/0x190
[  586.324032][T14083]  should_fail_ex.cold+0x5/0xa
[  586.324055][T14083]  ? prepare_alloc_pages+0x16d/0x5f0
[  586.324091][T14083]  should_fail_alloc_page+0xeb/0x140
[  586.324125][T14083]  prepare_alloc_pages+0x1f0/0x5f0
[  586.324163][T14083]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  586.324194][T14083]  ? pick_eevdf+0x121/0x860
[  586.324230][T14083]  ? enqueue_task+0x1dc/0x4f0
[  586.324258][T14083]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  586.324293][T14083]  ? find_held_lock+0x2b/0x80
[  586.324326][T14083]  ? try_to_wake_up+0xd8d/0x1c90
[  586.324348][T14083]  ? try_to_wake_up+0xd8d/0x1c90
[  586.324377][T14083]  ? __lock_acquire+0x49f/0x1a40
[  586.324416][T14083]  ? __lock_acquire+0x49f/0x1a40
[  586.324452][T14083]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  586.324489][T14083]  ? policy_nodemask+0xed/0x4f0
[  586.324524][T14083]  alloc_pages_mpol+0x1fb/0x540
[  586.324557][T14083]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  586.324593][T14083]  ? do_raw_spin_lock+0x128/0x260
[  586.324620][T14083]  alloc_pages_noprof+0x1a/0x160
[  586.324657][T14083]  pte_alloc_one+0x1c/0x3d0
[  586.324694][T14083]  __pte_alloc+0x6d/0x3e0
[  586.324723][T14083]  ? __pfx___pte_alloc+0x10/0x10
[  586.324751][T14083]  ? __pfx___might_resched+0x10/0x10
[  586.324792][T14083]  ? copy_page_range+0x1c4a/0x5b20
[  586.324827][T14083]  copy_page_range+0x3dd8/0x5b20
[  586.324886][T14083]  ? mas_wr_store_entry+0xa1/0x1e80
[  586.324911][T14083]  ? __pfx_copy_page_range+0x10/0x10
[  586.324955][T14083]  ? __pfx___might_resched+0x10/0x10
[  586.324989][T14083]  ? dup_mmap+0xcfe/0x21b0
[  586.325018][T14083]  ? down_write+0x146/0x1f0
[  586.325041][T14083]  ? up_write+0x2e5/0x5c0
[  586.325062][T14083]  dup_mmap+0xd44/0x21b0
[  586.325100][T14083]  ? __pfx_dup_mmap+0x10/0x10
[  586.325127][T14083]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  586.325162][T14083]  ? __lock_acquire+0x49f/0x1a40
[  586.325194][T14083]  ? find_held_lock+0x2b/0x80
[  586.325217][T14083]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  586.325337][T14083]  copy_process+0x4588/0x8030
[  586.325375][T14083]  ? __pfx_copy_process+0x10/0x10
[  586.325398][T14083]  ? futex_wake+0x4ea/0x5e0
[  586.325434][T14083]  kernel_clone+0x176/0x9d0
[  586.325459][T14083]  ? __pfx_kernel_clone+0x10/0x10
[  586.325487][T14083]  ? ksys_write+0x190/0x250
[  586.325525][T14083]  __do_sys_clone+0xd9/0x120
[  586.325548][T14083]  ? __pfx___do_sys_clone+0x10/0x10
[  586.325571][T14083]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  586.325626][T14083]  do_syscall_64+0x115/0x840
[  586.325657][T14083]  ? clear_bhb_loop+0x40/0x90
[  586.325683][T14083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.325705][T14083] RIP: 0033:0x7f407bf9de59
[  586.325724][T14083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.325745][T14083] RSP: 002b:00007f407ceff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  586.325765][T14083] RAX: ffffffffffffffda RBX: 00007f407c226090 RCX: 00007f407bf9de59
[  586.325780][T14083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  586.325793][T14083] RBP: 00007f407c033e6f R08: 0000000000000042 R09: 0000000000000000
[  586.325806][T14083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  586.325819][T14083] R13: 00007f407c226128 R14: 00007f407c226090 R15: 00007ffc0640bbf8
[  586.325846][T14083]  </TASK>
[  591.444638][T14140] netlink: zone id is out of range
[  591.472238][T14140] netlink: zone id is out of range
[  591.502143][T14140] netlink: zone id is out of range
[  591.553256][T14140] netlink: zone id is out of range
[  591.624433][T14140] netlink: zone id is out of range
[  591.681107][T14140] netlink: zone id is out of range
[  591.740143][T14140] netlink: zone id is out of range
[  591.792647][T14140] netlink: zone id is out of range
[  591.848313][T14140] netlink: zone id is out of range
[  591.895105][T14140] netlink: zone id is out of range
[  597.367970][T14209] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[14209]
[  597.582175][T14209] FAULT_INJECTION: forcing a failure.
[  597.582175][T14209] name failslab, interval 1, probability 0, space 0, times 0
[  597.595481][T14209] CPU: 0 UID: 0 PID: 14209 Comm: syz.2.1550 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  597.595519][T14209] Tainted: [L]=SOFTLOCKUP
[  597.595528][T14209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  597.595544][T14209] Call Trace:
[  597.595552][T14209]  <TASK>
[  597.595561][T14209]  dump_stack_lvl+0x100/0x190
[  597.595594][T14209]  should_fail_ex.cold+0x5/0xa
[  597.595634][T14209]  should_failslab+0xc2/0x120
[  597.595660][T14209]  __kmalloc_cache_noprof+0x91/0x6c0
[  597.595692][T14209]  ? rcu_is_watching+0x12/0xc0
[  597.595713][T14209]  ? report_access+0x101/0x4d0
[  597.595744][T14209]  report_access+0x101/0x4d0
[  597.595772][T14209]  yama_ptrace_access_check+0x645/0xd00
[  597.595803][T14209]  security_ptrace_access_check+0xe9/0x210
[  597.595854][T14209]  __ptrace_may_access+0x4c1/0xa80
[  597.595879][T14209]  ptrace_may_access+0x2b/0x50
[  597.595902][T14209]  mm_access+0x180/0x2e0
[  597.595925][T14209]  process_vm_rw_core.constprop.0+0x214/0x950
[  597.595953][T14209]  ? find_held_lock+0x2b/0x80
[  597.595976][T14209]  ? rcu_read_unlock+0x2d/0xb0
[  597.596010][T14209]  ? rcu_read_unlock+0x2d/0xb0
[  597.596047][T14209]  ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10
[  597.596073][T14209]  ? iovec_from_user+0xda/0x140
[  597.596114][T14209]  ? iovec_from_user+0xda/0x140
[  597.596145][T14209]  process_vm_rw+0x226/0x2d0
[  597.596170][T14209]  ? __pfx_process_vm_rw+0x10/0x10
[  597.596194][T14209]  ? __lock_acquire+0x49f/0x1a40
[  597.596227][T14209]  ? __pfx___css_rstat_updated+0x10/0x10
[  597.596269][T14209]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  597.596294][T14209]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  597.596342][T14209]  __x64_sys_process_vm_writev+0xe2/0x1c0
[  597.596366][T14209]  ? do_syscall_64+0x90/0x840
[  597.596399][T14209]  ? lockdep_hardirqs_on+0x78/0x100
[  597.596431][T14209]  do_syscall_64+0x115/0x840
[  597.596463][T14209]  ? clear_bhb_loop+0x40/0x90
[  597.596489][T14209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.596511][T14209] RIP: 0033:0x7f970f39de59
[  597.596539][T14209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  597.596558][T14209] RSP: 002b:00007f97102cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  597.596577][T14209] RAX: ffffffffffffffda RBX: 00007f970f626360 RCX: 00007f970f39de59
[  597.596590][T14209] RDX: 0000000000000003 RSI: 0000200000002980 RDI: 0000000000000001
[  597.596602][T14209] RBP: 00007f970f433e6f R08: 0000000000000004 R09: 0000000000000000
[  597.596614][T14209] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000
[  597.596626][T14209] R13: 00007f970f6263f8 R14: 00007f970f626360 R15: 00007ffebd2c7bf8
[  597.596651][T14209]  </TASK>
[  598.998897][T14228] random: crng reseeded on system resumption
[  599.314125][T14242] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 17 with max blocks 39 with error 117
[  599.407488][T14242] EXT4-fs (sda1): This should not happen!! Data will be lost
[  599.407488][T14242] 
[  599.479268][T14243] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1556'.
[  600.784367][T14272] FAULT_INJECTION: forcing a failure.
[  600.784367][T14272] name failslab, interval 1, probability 0, space 0, times 0
[  600.865757][T14272] CPU: 0 UID: 0 PID: 14272 Comm: syz.2.1561 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  600.865793][T14272] Tainted: [L]=SOFTLOCKUP
[  600.865800][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  600.865813][T14272] Call Trace:
[  600.865820][T14272]  <TASK>
[  600.865827][T14272]  dump_stack_lvl+0x100/0x190
[  600.865853][T14272]  should_fail_ex.cold+0x5/0xa
[  600.865876][T14272]  should_failslab+0xc2/0x120
[  600.865903][T14272]  __kmalloc_noprof+0xfc/0x820
[  600.865926][T14272]  ? anon_vma_name_alloc+0x58/0x100
[  600.865959][T14272]  anon_vma_name_alloc+0x58/0x100
[  600.865991][T14272]  set_anon_vma_name+0x214/0x4c0
[  600.866028][T14272]  ? __pfx_set_anon_vma_name+0x10/0x10
[  600.866060][T14272]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  600.866091][T14272]  ? cap_task_prctl+0x104/0xa50
[  600.866127][T14272]  ? static_key_count+0x5a/0x70
[  600.866148][T14272]  ? security_task_prctl+0x11c/0x160
[  600.866182][T14272]  __do_sys_prctl+0xb41/0x2270
[  600.866213][T14272]  ? __pfx___do_sys_prctl+0x10/0x10
[  600.866249][T14272]  do_syscall_64+0x115/0x840
[  600.866281][T14272]  ? clear_bhb_loop+0x40/0x90
[  600.866306][T14272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.866328][T14272] RIP: 0033:0x7f970f39de59
[  600.866344][T14272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  600.866365][T14272] RSP: 002b:00007f971032e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  600.866385][T14272] RAX: ffffffffffffffda RBX: 00007f970f626090 RCX: 00007f970f39de59
[  600.866399][T14272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000053564d41
[  600.866412][T14272] RBP: 00007f970f433e6f R08: 0000000000000002 R09: 0000000000000000
[  600.866425][T14272] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000000
[  600.866438][T14272] R13: 00007f970f626128 R14: 00007f970f626090 R15: 00007ffebd2c7bf8
[  600.866464][T14272]  </TASK>
[  604.374036][T14332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1570'.
[  605.754785][T14310] Process accounting paused
[  609.311591][T14399] FAULT_INJECTION: forcing a failure.
[  609.311591][T14399] name failslab, interval 1, probability 0, space 0, times 0
[  609.419047][T14399] CPU: 0 UID: 0 PID: 14399 Comm: syz.4.1577 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  609.419082][T14399] Tainted: [L]=SOFTLOCKUP
[  609.419089][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  609.419102][T14399] Call Trace:
[  609.419109][T14399]  <TASK>
[  609.419116][T14399]  dump_stack_lvl+0x100/0x190
[  609.419143][T14399]  should_fail_ex.cold+0x5/0xa
[  609.419166][T14399]  should_failslab+0xc2/0x120
[  609.419194][T14399]  __kmalloc_cache_noprof+0x91/0x6c0
[  609.419228][T14399]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  609.419266][T14399]  ? sctp_endpoint_new+0xfc/0xb20
[  609.419295][T14399]  sctp_endpoint_new+0xfc/0xb20
[  609.419322][T14399]  ? __pfx_sctp_endpoint_new+0x10/0x10
[  609.419346][T14399]  ? lockdep_init_map_type+0x5c/0x250
[  609.419380][T14399]  ? lockdep_init_map_type+0x5c/0x250
[  609.419411][T14399]  ? lockdep_init_map_type+0x5c/0x250
[  609.419447][T14399]  sctp_init_sock+0xe2b/0x1300
[  609.419469][T14399]  ? __pfx_sctp_v6_init_sock+0x10/0x10
[  609.419495][T14399]  sctp_v6_init_sock+0x16/0x70
[  609.419517][T14399]  ? __pfx_sctp_v6_init_sock+0x10/0x10
[  609.419540][T14399]  inet6_create+0xb1a/0x12b0
[  609.419572][T14399]  ? inet6_create+0x7f/0x12b0
[  609.419605][T14399]  __sock_create+0x339/0x860
[  609.419640][T14399]  __sys_socket+0x14d/0x260
[  609.419672][T14399]  ? __pfx___sys_socket+0x10/0x10
[  609.419705][T14399]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  609.419743][T14399]  __x64_sys_socket+0x72/0xb0
[  609.419773][T14399]  ? lockdep_hardirqs_on+0x78/0x100
[  609.419805][T14399]  do_syscall_64+0x115/0x840
[  609.419837][T14399]  ? clear_bhb_loop+0x40/0x90
[  609.419862][T14399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.419884][T14399] RIP: 0033:0x7f407bf9de59
[  609.419901][T14399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.419922][T14399] RSP: 002b:00007f407cf20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  609.419941][T14399] RAX: ffffffffffffffda RBX: 00007f407c225fa0 RCX: 00007f407bf9de59
[  609.419955][T14399] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a
[  609.419968][T14399] RBP: 00007f407c033e6f R08: 0000000000000000 R09: 0000000000000000
[  609.419981][T14399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  609.419994][T14399] R13: 00007f407c226038 R14: 00007f407c225fa0 R15: 00007ffc0640bbf8
[  609.420020][T14399]  </TASK>
[  609.910246][T13667] Process accounting paused
[  611.350496][T14436] zero sized request
[  612.377562][T14456] FAULT_INJECTION: forcing a failure.
[  612.377562][T14456] name fail_futex, interval 1, probability 0, space 0, times 0
[  612.390513][T14456] CPU: 0 UID: 0 PID: 14456 Comm: syz.2.1588 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  612.390547][T14456] Tainted: [L]=SOFTLOCKUP
[  612.390555][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  612.390568][T14456] Call Trace:
[  612.390576][T14456]  <TASK>
[  612.390583][T14456]  dump_stack_lvl+0x100/0x190
[  612.390611][T14456]  should_fail_ex.cold+0x5/0xa
[  612.390637][T14456]  should_fail_futex+0x4c/0x60
[  612.390673][T14456]  futex_lock_pi_atomic+0x12d/0xaf0
[  612.390705][T14456]  futex_lock_pi+0x278/0x7f0
[  612.390736][T14456]  ? __pfx_futex_lock_pi+0x10/0x10
[  612.390760][T14456]  ? try_to_wake_up+0x70a/0x1c90
[  612.390784][T14456]  ? __pfx_try_to_wake_up+0x10/0x10
[  612.390822][T14456]  ? futex_private_hash_put+0x115/0x1c0
[  612.390860][T14456]  ? __pfx_futex_wake_mark+0x10/0x10
[  612.390894][T14456]  ? rcu_read_lock_any_held+0x6a/0xa0
[  612.390921][T14456]  ? find_held_lock+0x2b/0x80
[  612.390945][T14456]  ? ksys_write+0x190/0x250
[  612.390989][T14456]  do_futex+0x371/0x440
[  612.391011][T14456]  ? __pfx_do_futex+0x10/0x10
[  612.391034][T14456]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  612.391076][T14456]  __x64_sys_futex+0x34f/0x4d0
[  612.391101][T14456]  ? __pfx___x64_sys_futex+0x10/0x10
[  612.391133][T14456]  do_syscall_64+0x115/0x840
[  612.391167][T14456]  ? clear_bhb_loop+0x40/0x90
[  612.391196][T14456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.391219][T14456] RIP: 0033:0x7f970f39de59
[  612.391237][T14456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.391260][T14456] RSP: 002b:00007f971034f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  612.391281][T14456] RAX: ffffffffffffffda RBX: 00007f970f625fa0 RCX: 00007f970f39de59
[  612.391296][T14456] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000
[  612.391309][T14456] RBP: 00007f970f433e6f R08: 0000000000000000 R09: 000000008000fff5
[  612.391324][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  612.391337][T14456] R13: 00007f970f626038 R14: 00007f970f625fa0 R15: 00007ffebd2c7bf8
[  612.391365][T14456]  </TASK>
[  612.951213][T14457] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  613.229468][ T5637] Bluetooth: hci1: unexpected event 0x02 length: 1021 > 260
[  614.711396][T14481] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  616.489986][T14502] FAULT_INJECTION: forcing a failure.
[  616.489986][T14502] name failslab, interval 1, probability 0, space 0, times 0
[  616.636373][T14502] CPU: 0 UID: 0 PID: 14502 Comm: syz.1.1597 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  616.636409][T14502] Tainted: [L]=SOFTLOCKUP
[  616.636418][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  616.636432][T14502] Call Trace:
[  616.636439][T14502]  <TASK>
[  616.636448][T14502]  dump_stack_lvl+0x100/0x190
[  616.636478][T14502]  should_fail_ex.cold+0x5/0xa
[  616.636502][T14502]  should_failslab+0xc2/0x120
[  616.636531][T14502]  __kmalloc_cache_noprof+0x91/0x6c0
[  616.636569][T14502]  ? call_usermodehelper_setup+0xaf/0x360
[  616.636613][T14502]  ? __pfx_free_modprobe_argv+0x10/0x10
[  616.636636][T14502]  call_usermodehelper_setup+0xaf/0x360
[  616.636674][T14502]  __request_module+0x3c7/0x6a0
[  616.636697][T14502]  ? __pfx___request_module+0x10/0x10
[  616.636721][T14502]  ? __lock_acquire+0x49f/0x1a40
[  616.636757][T14502]  ? rcu_is_watching+0x12/0xc0
[  616.636782][T14502]  ? apparmor_capable+0x1d7/0x4d0
[  616.636812][T14502]  pn_socket_create+0x45b/0x560
[  616.636849][T14502]  __sock_create+0x339/0x860
[  616.636891][T14502]  __sys_socket+0x14d/0x260
[  616.636925][T14502]  ? __pfx___sys_socket+0x10/0x10
[  616.636967][T14502]  __x64_sys_socket+0x72/0xb0
[  616.636999][T14502]  ? lockdep_hardirqs_on+0x78/0x100
[  616.637051][T14502]  do_syscall_64+0x115/0x840
[  616.637088][T14502]  ? clear_bhb_loop+0x40/0x90
[  616.637117][T14502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.637142][T14502] RIP: 0033:0x7fae11f9de59
[  616.637161][T14502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  616.637184][T14502] RSP: 002b:00007fae12ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  616.637206][T14502] RAX: ffffffffffffffda RBX: 00007fae12226090 RCX: 00007fae11f9de59
[  616.637222][T14502] RDX: 0000000000010000 RSI: 0000000000000004 RDI: 0000000000000023
[  616.637236][T14502] RBP: 00007fae12033e6f R08: 0000000000000000 R09: 0000000000000000
[  616.637250][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  616.637264][T14502] R13: 00007fae12226128 R14: 00007fae12226090 R15: 00007fffee5353c8
[  616.637293][T14502]  </TASK>
[  617.024966][T14517] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:988d:a8ef:b61c:7dcb, load rds_tcp or rds_rdma?
[  617.247650][T14520] pim6reg: entered allmulticast mode
[  618.223437][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1602'.
[  620.112073][T14569] net_ratelimit: 48 callbacks suppressed
[  620.112090][T14569] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  623.281814][T14607] ima: policy update failed
[  623.300850][   T29] audit: type=1802 audit(4294967380.181:70): pid=14607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1616" res=0 errno=0
[  623.449155][T14605] Process accounting resumed
[  624.144576][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  624.154106][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  627.124210][T14680] ecryptfs_miscdev_write: Invalid packet size [0]
[  627.391597][T14682] zswap: compressor  not available
[  629.203241][T14719] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000
[  629.251099][T14719] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  629.293160][T14719] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  629.334349][T14719] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  629.412970][T14719] page dumped because: unmovable page
[  629.463510][T14719] page_owner tracks the page as allocated
[  629.528810][T14719] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1417800492, free_ts 0
[  629.669169][T14719]  register_early_stack+0x74/0xaf
[  629.722939][T14719]  init_page_owner+0x4c/0xa10
[  629.776992][T14719]  page_ext_init+0x71d/0x780
[  629.834676][T14719]  mm_core_init+0x229/0x270
[  629.882573][T14719] page_owner free stack trace missing
[  630.430641][T14741] bond0: option packets_per_slave: invalid value (Xµn)
[  630.442876][T14741] bond0: option packets_per_slave: allowed values 0 - 65535
[  631.088541][T14737] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  631.095971][T14737] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  631.102101][T14737] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  631.109241][T14737] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  631.399972][T14747] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1645'.
[  632.374025][ T5637] Bluetooth: hci1: command 0x0406 tx timeout
[  632.882576][T14775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1651'.
[  633.174109][ T5625] Bluetooth: hci3: command 0x2016 tx timeout
[  633.180174][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout
[  633.186265][ T5625] Bluetooth: hci2: command 0x0406 tx timeout
[  634.835956][T14806] input: f¬
 as /devices/virtual/input/input10
[  635.473831][T14813] random: crng reseeded on system resumption
[  635.928931][T14820] bridge0: port 3(team0) entered blocking state
[  635.959411][T14820] bridge0: port 3(team0) entered disabled state
[  635.974405][T14820] team0: entered allmulticast mode
[  636.002263][T14820] team_slave_0: entered allmulticast mode
[  636.018074][T14820] team_slave_1: entered allmulticast mode
[  636.046537][T14820] FAULT_INJECTION: forcing a failure.
[  636.046537][T14820] name failslab, interval 1, probability 0, space 0, times 0
[  636.092711][T14820] CPU: 0 UID: 0 PID: 14820 Comm: syz.1.1658 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  636.092751][T14820] Tainted: [L]=SOFTLOCKUP
[  636.092760][T14820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  636.092774][T14820] Call Trace:
[  636.092790][T14820]  <TASK>
[  636.092799][T14820]  dump_stack_lvl+0x100/0x190
[  636.092830][T14820]  should_fail_ex.cold+0x5/0xa
[  636.092857][T14820]  should_failslab+0xc2/0x120
[  636.092889][T14820]  kmem_cache_alloc_noprof+0x91/0x6a0
[  636.092918][T14820]  ? __kernfs_new_node+0xd2/0xa10
[  636.092961][T14820]  __kernfs_new_node+0xd2/0xa10
[  636.093004][T14820]  ? __pfx___kernfs_new_node+0x10/0x10
[  636.093049][T14820]  ? find_held_lock+0x2b/0x80
[  636.093079][T14820]  ? kernfs_root+0xee/0x2a0
[  636.093112][T14820]  ? kernfs_root+0xee/0x2a0
[  636.093151][T14820]  kernfs_new_node+0x117/0x150
[  636.093195][T14820]  __kernfs_create_file+0x53/0x350
[  636.093226][T14820]  sysfs_add_file_mode_ns+0x207/0x3c0
[  636.093266][T14820]  sysfs_create_file_ns+0x145/0x1e0
[  636.093298][T14820]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  636.093341][T14820]  ? kernfs_create_link+0x1bd/0x240
[  636.093367][T14820]  ? kernfs_put+0x3f/0x60
[  636.093397][T14820]  ? sysfs_do_create_link_sd+0xbb/0x140
[  636.093432][T14820]  br_sysfs_addif+0xe4/0x210
[  636.093465][T14820]  br_add_if+0x82c/0x1c80
[  636.093492][T14820]  ? security_capable+0x80/0x260
[  636.093530][T14820]  add_del_if+0x114/0x160
[  636.093557][T14820]  br_dev_siocdevprivate+0x8b5/0x1660
[  636.093588][T14820]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  636.093628][T14820]  ? lock_acquire+0x1b9/0x370
[  636.093669][T14820]  ? netdev_name_node_lookup+0x107/0x150
[  636.093710][T14820]  dev_ifsioc+0xc2f/0x1f10
[  636.093736][T14820]  ? __pfx_dev_ifsioc+0x10/0x10
[  636.093758][T14820]  ? __pfx___mutex_lock+0x10/0x10
[  636.093809][T14820]  ? dev_load+0x8e/0x240
[  636.093829][T14820]  ? dev_load+0x8e/0x240
[  636.093857][T14820]  dev_ioctl+0x70e/0x1070
[  636.093884][T14820]  sock_ioctl+0x494/0x6b0
[  636.093918][T14820]  ? __pfx_sock_ioctl+0x10/0x10
[  636.093951][T14820]  ? hook_file_ioctl_common+0x140/0x440
[  636.093982][T14820]  ? __fget_files+0x21f/0x3d0
[  636.094019][T14820]  ? __pfx_sock_ioctl+0x10/0x10
[  636.094053][T14820]  __x64_sys_ioctl+0x18e/0x210
[  636.094085][T14820]  do_syscall_64+0x115/0x840
[  636.094119][T14820]  ? clear_bhb_loop+0x40/0x90
[  636.094147][T14820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.094170][T14820] RIP: 0033:0x7fae11f9de59
[  636.094188][T14820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.094210][T14820] RSP: 002b:00007fae12ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  636.094230][T14820] RAX: ffffffffffffffda RBX: 00007fae12225fa0 RCX: 00007fae11f9de59
[  636.094246][T14820] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000003
[  636.094260][T14820] RBP: 00007fae12033e6f R08: 0000000000000000 R09: 0000000000000000
[  636.094274][T14820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  636.094286][T14820] R13: 00007fae12226038 R14: 00007fae12225fa0 R15: 00007fffee5353c8
[  636.094316][T14820]  </TASK>
[  636.540956][T14820] team0: left allmulticast mode
[  636.546502][T14820] team_slave_0: left allmulticast mode
[  636.556039][T14820] team_slave_1: left allmulticast mode
[  636.668982][T14828] input: jJǸ-�¶š9ã%vø“û¨l�ÐQ 	J86Ö‘ as /devices/virtual/input/input11
[  636.705733][T14828] i2c i2c-0: delete_device: Can't find device in list
[  637.491913][T14839] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139
[  637.855163][ T4942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  637.866227][ T4942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  637.874540][ T4942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  637.886909][ T4942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  637.896018][ T4942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  638.810498][T14858] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬	Up†µÌ¢{´¼V]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhî
é”'
[  639.261893][T14845] bridge0: port 1(bridge_slave_0) entered blocking state
[  639.280924][T14845] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.295527][T14845] bridge_slave_0: entered allmulticast mode
[  639.314081][T14845] bridge_slave_0: entered promiscuous mode
[  639.318831][T14845] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.318955][T14845] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.319058][T14845] bridge_slave_1: entered allmulticast mode
[  639.323934][T14845] bridge_slave_1: entered promiscuous mode
[  639.379235][T14845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  639.389852][T14845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  639.444813][T14845] team0: Port device team_slave_0 added
[  639.447312][T14845] team0: Port device team_slave_1 added
[  639.516839][T14845] batman_adv: batadv0: Adding interface: batadv_slave_0
[  639.516918][T14845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  639.516946][T14845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  639.519858][T14845] batman_adv: batadv0: Adding interface: batadv_slave_1
[  639.519872][T14845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  639.519897][T14845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  639.643940][T14845] hsr_slave_0: entered promiscuous mode
[  639.646251][T14845] hsr_slave_1: entered promiscuous mode
[  639.983672][ T4942] Bluetooth: hci0: command tx timeout
[  640.860088][T14781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  640.874089][T14781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  640.882243][T14781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  640.893199][T14781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  640.900867][T14781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  641.103140][T14845] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  641.165527][T14845] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  641.232422][T14845] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  641.244904][T14845] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  641.320011][T14845] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  641.344363][T14845] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  641.385159][T14845] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  641.405156][T14845] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  641.711355][T14845] 8021q: adding VLAN 0 to HW filter on device bond0
[  641.792030][T14845] 8021q: adding VLAN 0 to HW filter on device team0
[  641.858949][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.866133][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  641.917022][T13291] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.924250][T13291] bridge0: port 2(bridge_slave_1) entered forwarding state
[  642.049303][ T4942] Bluetooth: hci0: command tx timeout
[  642.250791][T14909] random: crng reseeded on system resumption
[  642.756775][T14889] bridge0: port 1(bridge_slave_0) entered blocking state
[  642.785111][T14889] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.827625][T14889] bridge_slave_0: entered allmulticast mode
[  642.860810][T14889] bridge_slave_0: entered promiscuous mode
[  642.887719][T14889] bridge0: port 2(bridge_slave_1) entered blocking state
[  642.915145][T14889] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.934879][T14889] bridge_slave_1: entered allmulticast mode
[  642.957266][T14889] bridge_slave_1: entered promiscuous mode
[  643.009993][ T4942] Bluetooth: hci4: command tx timeout
[  643.094607][T14889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  643.132434][T14889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  643.261232][T14889] team0: Port device team_slave_0 added
[  643.295857][T14889] team0: Port device team_slave_1 added
[  643.430225][T14889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  643.453685][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.513900][T14889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  643.539898][T14889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  643.557059][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.614105][T14889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  643.664099][T14845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  643.783063][T14889] hsr_slave_0: entered promiscuous mode
[  643.802080][T14889] hsr_slave_1: entered promiscuous mode
[  643.825999][T14889] debugfs: 'hsr0' already exists in 'hsr'
[  643.849451][T14889] Cannot create hsr debugfs directory
[  644.130323][ T4942] Bluetooth: hci0: command tx timeout
[  644.432863][T14845] veth0_vlan: entered promiscuous mode
[  644.463346][T14845] veth1_vlan: entered promiscuous mode
[  644.702555][T14845] veth0_macvtap: entered promiscuous mode
[  644.723036][T14889] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  644.743140][T14889] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  644.763730][T14845] veth1_macvtap: entered promiscuous mode
[  644.781723][T14889] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  644.809606][T14889] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  644.828488][T14889] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  644.862459][T14889] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  644.903684][T14889] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  644.924784][T14889] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  644.958675][T14845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  644.987092][T14845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  645.041504][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  645.052496][T14949] hub 1-0:1.0: USB hub found
[  645.077023][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  645.087882][ T4942] Bluetooth: hci4: command tx timeout
[  645.094946][T14949] hub 1-0:1.0: 1 port detected
[  645.103714][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  645.141056][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  645.393882][ T9898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  645.451857][ T9898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  645.484802][T14889] 8021q: adding VLAN 0 to HW filter on device bond0
[  645.562171][T13291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  645.579770][T13291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  645.631917][T14889] 8021q: adding VLAN 0 to HW filter on device team0
[  645.736212][T13291] bridge0: port 1(bridge_slave_0) entered blocking state
[  645.743461][T13291] bridge0: port 1(bridge_slave_0) entered forwarding state
[  645.852260][T13291] bridge0: port 2(bridge_slave_1) entered blocking state
[  645.859411][T13291] bridge0: port 2(bridge_slave_1) entered forwarding state
[  646.210058][ T4942] Bluetooth: hci0: command tx timeout
[  646.878511][T14889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  647.167452][ T4942] Bluetooth: hci4: command tx timeout
[  647.348721][T14889] veth0_vlan: entered promiscuous mode
[  647.381033][T14889] veth1_vlan: entered promiscuous mode
[  647.441834][T14889] veth0_macvtap: entered promiscuous mode
[  647.464739][T14889] veth1_macvtap: entered promiscuous mode
[  647.515601][T14889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  647.543278][T14889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  647.582093][T13291] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  647.618021][T13291] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  647.657952][T13291] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  647.682781][T13291] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  647.879547][ T9898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  647.909481][ T9898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  647.975903][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  647.993783][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  649.245791][ T4942] Bluetooth: hci4: command tx timeout
[  652.087948][T15036] futex_wake_op: syz.6.1681 tries to shift op by -1; fix this program
[  652.778476][T14781] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  652.792043][T14781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  652.803883][T14781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  652.819507][T14781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  652.828637][T14781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  654.078372][T15063] IPVS: length: 8 != 178738984744
[  654.923938][T14781] Bluetooth: hci6: command tx timeout
[  655.223727][T15045] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.248687][T15045] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.270565][T15045] bridge_slave_0: entered allmulticast mode
[  655.294955][T15045] bridge_slave_0: entered promiscuous mode
[  655.320190][T15045] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.338214][T15045] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.355375][T15045] bridge_slave_1: entered allmulticast mode
[  655.373272][T15045] bridge_slave_1: entered promiscuous mode
[  655.457507][T15045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  655.494903][T15045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  655.536685][T15088] input: f¬
 as /devices/virtual/input/input12
[  655.605019][T15045] team0: Port device team_slave_0 added
[  655.639776][T15045] team0: Port device team_slave_1 added
[  655.764672][T15045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  655.779070][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.841990][T15045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  655.884087][T15045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  655.899340][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.959267][T15045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  656.287060][T15045] hsr_slave_0: entered promiscuous mode
[  656.302913][T15045] hsr_slave_1: entered promiscuous mode
[  656.324623][T15045] debugfs: 'hsr0' already exists in 'hsr'
[  656.348988][T15045] Cannot create hsr debugfs directory
[  657.002601][T14781] Bluetooth: hci6: command tx timeout
[  657.501066][T15109] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  657.777497][T15045] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  657.811925][T15045] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  657.846122][T15045] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  657.874946][T15045] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  657.920930][T15045] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  657.931903][T15115] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  657.946034][T15115] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  657.966310][T15045] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  657.973664][T15115] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  657.987927][T15115] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  657.997924][T15045] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  658.012112][T15115] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  658.030523][T15115] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  658.036615][T15045] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  658.074135][T15115] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  658.135179][T15115] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  658.150173][T15115] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  658.224294][T15115] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  658.260267][T15115] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  658.286459][T15115] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  658.317616][T15115] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  658.594353][T15045] 8021q: adding VLAN 0 to HW filter on device bond0
[  658.687545][T15045] 8021q: adding VLAN 0 to HW filter on device team0
[  658.782385][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.789594][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  658.861813][T13035] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.868990][T13035] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.405841][T15127] FAULT_INJECTION: forcing a failure.
[  659.405841][T15127] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  659.522667][T15127] CPU: 0 UID: 0 PID: 15127 Comm: syz.1.1697 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  659.522701][T15127] Tainted: [L]=SOFTLOCKUP
[  659.522729][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  659.522742][T15127] Call Trace:
[  659.522749][T15127]  <TASK>
[  659.522756][T15127]  dump_stack_lvl+0x100/0x190
[  659.522784][T15127]  should_fail_ex.cold+0x5/0xa
[  659.522804][T15127]  ? prepare_alloc_pages+0x16d/0x5f0
[  659.522834][T15127]  should_fail_alloc_page+0xeb/0x140
[  659.522863][T15127]  prepare_alloc_pages+0x1f0/0x5f0
[  659.522896][T15127]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  659.522922][T15127]  ? stack_trace_save+0x8e/0xc0
[  659.522950][T15127]  ? __pfx_stack_trace_save+0x10/0x10
[  659.522977][T15127]  ? stack_depot_save_flags+0x27/0x9d0
[  659.523008][T15127]  ? __lock_acquire+0x49f/0x1a40
[  659.523043][T15127]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  659.523064][T15127]  ? __kasan_slab_alloc+0x89/0x90
[  659.523090][T15127]  ? __pmd_alloc+0xbf/0x950
[  659.523116][T15127]  ? handle_mm_fault+0x37b/0xa30
[  659.523147][T15127]  ? do_user_addr_fault+0x74c/0x12f0
[  659.523173][T15127]  ? exc_page_fault+0x6f/0xd0
[  659.523203][T15127]  ? asm_exc_page_fault+0x26/0x30
[  659.523224][T15127]  ? strncpy_from_user+0xfd/0x2d0
[  659.523249][T15127]  ? do_getname+0x78/0x390
[  659.523271][T15127]  ? do_sys_openat2+0xc7/0x1e0
[  659.523294][T15127]  ? __x64_sys_openat+0x12d/0x210
[  659.523318][T15127]  ? do_syscall_64+0x115/0x840
[  659.523350][T15127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.523383][T15127]  ? __lock_acquire+0x49f/0x1a40
[  659.523413][T15127]  ? __css_rstat_updated+0x1ce/0x5a0
[  659.523445][T15127]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  659.523475][T15127]  ? policy_nodemask+0xed/0x4f0
[  659.523505][T15127]  alloc_pages_mpol+0x1fb/0x540
[  659.523534][T15127]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  659.523561][T15127]  ? __thp_vma_allowable_orders+0x1d9/0xf00
[  659.523595][T15127]  ? do_raw_spin_lock+0x128/0x260
[  659.523618][T15127]  alloc_pages_noprof+0x1a/0x160
[  659.523650][T15127]  pte_alloc_one+0x1c/0x3d0
[  659.523681][T15127]  do_fault+0x86c/0x1750
[  659.523714][T15127]  ? __pmd_alloc+0x3fb/0x950
[  659.523744][T15127]  __handle_mm_fault+0x187d/0x2a00
[  659.523782][T15127]  ? mt_find+0x45e/0x8e0
[  659.523804][T15127]  ? __pfx___handle_mm_fault+0x10/0x10
[  659.523836][T15127]  ? __pfx_mt_find+0x10/0x10
[  659.523888][T15127]  ? find_vma+0xbf/0x140
[  659.523912][T15127]  ? __pfx_find_vma+0x10/0x10
[  659.523941][T15127]  handle_mm_fault+0x37b/0xa30
[  659.523981][T15127]  do_user_addr_fault+0x74c/0x12f0
[  659.524016][T15127]  exc_page_fault+0x6f/0xd0
[  659.524050][T15127]  asm_exc_page_fault+0x26/0x30
[  659.524073][T15127] RIP: 0010:strncpy_from_user+0xfd/0x2d0
[  659.524100][T15127] Code: 00 4d 89 64 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 b2 43 b9 fc 48 83 fd 07 0f 86 bb 00 00 00 e8 03 49 b9 fc <4d> 8b 24 1e e8 fa 48 b9 fc 4c 89 e2 31 ff 4d 8d 7c 1d 00 48 b8 ff
[  659.524122][T15127] RSP: 0018:ffffc90003e2fd00 EFLAGS: 00050283
[  659.524140][T15127] RAX: 0000000000000037 RBX: 0000000000000000 RCX: ffffc90007fa1000
[  659.524171][T15127] RDX: 0000000000080000 RSI: ffffffff854fe35d RDI: ffff88802659be00
[  659.524196][T15127] RBP: 00000000000000a8 R08: 0000000000000007 R09: 0000000000000007
[  659.524208][T15127] R10: 00000000000000a8 R11: 0000000000000000 R12: 0000000000000000
[  659.524220][T15127] R13: ffff88807fd19718 R14: 0000000000000000 R15: 00000000000000a8
[  659.524241][T15127]  ? strncpy_from_user+0xfd/0x2d0
[  659.524273][T15127]  do_getname+0x78/0x390
[  659.524299][T15127]  do_sys_openat2+0xc7/0x1e0
[  659.524324][T15127]  ? __pfx_do_sys_openat2+0x10/0x10
[  659.524349][T15127]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  659.524390][T15127]  __x64_sys_openat+0x12d/0x210
[  659.524416][T15127]  ? __pfx___x64_sys_openat+0x10/0x10
[  659.524470][T15127]  do_syscall_64+0x115/0x840
[  659.524504][T15127]  ? clear_bhb_loop+0x40/0x90
[  659.524530][T15127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.524553][T15127] RIP: 0033:0x7fae11f9de59
[  659.524571][T15127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  659.524592][T15127] RSP: 002b:00007fae12ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  659.524612][T15127] RAX: ffffffffffffffda RBX: 00007fae12226090 RCX: 00007fae11f9de59
[  659.524627][T15127] RDX: 0000000000000401 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  659.524640][T15127] RBP: 00007fae12033e6f R08: 0000000000000000 R09: 0000000000000000
[  659.524653][T15127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  659.524666][T15127] R13: 00007fae12226128 R14: 00007fae12226090 R15: 00007fffee5353c8
[  659.524694][T15127]  </TASK>
[  660.609776][T14781] Bluetooth: hci2: command 0x0406 tx timeout
[  660.615862][T14781] Bluetooth: hci1: command 0x0406 tx timeout
[  660.621900][T14781] Bluetooth: hci0: command 0x0c1a tx timeout
[  660.627904][T14781] Bluetooth: hci5: command 0x0c1a tx timeout
[  660.638021][T14781] Bluetooth: hci3: command 0x2016 tx timeout
[  660.644328][T14781] Bluetooth: hci4: command 0x0c1a tx timeout
[  660.650417][T14781] Bluetooth: hci6: command 0x0419 tx timeout
[  660.869271][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1699'.
[  660.983954][T15141] netlink: 'syz.6.1699': attribute type 22 has an invalid length.
[  661.000168][T15141] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1699'.
[  661.173027][T15045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  661.691448][T15155] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1700'.
[  661.781748][T15157] FAULT_INJECTION: forcing a failure.
[  661.781748][T15157] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  661.958552][T15157] CPU: 0 UID: 0 PID: 15157 Comm: syz.6.1700 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  661.958598][T15157] Tainted: [L]=SOFTLOCKUP
[  661.958606][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  661.958618][T15157] Call Trace:
[  661.958625][T15157]  <TASK>
[  661.958633][T15157]  dump_stack_lvl+0x100/0x190
[  661.958662][T15157]  should_fail_ex.cold+0x5/0xa
[  661.958682][T15157]  ? prepare_alloc_pages+0x16d/0x5f0
[  661.958712][T15157]  should_fail_alloc_page+0xeb/0x140
[  661.958741][T15157]  prepare_alloc_pages+0x1f0/0x5f0
[  661.958773][T15157]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  661.958799][T15157]  ? stack_trace_save+0x8e/0xc0
[  661.958826][T15157]  ? __pfx_stack_trace_save+0x10/0x10
[  661.958853][T15157]  ? stack_depot_save_flags+0x27/0x9d0
[  661.958884][T15157]  ? __lock_acquire+0x49f/0x1a40
[  661.958919][T15157]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  661.958939][T15157]  ? __kasan_slab_alloc+0x89/0x90
[  661.958964][T15157]  ? __pmd_alloc+0xbf/0x950
[  661.958991][T15157]  ? handle_mm_fault+0x37b/0xa30
[  661.959022][T15157]  ? do_user_addr_fault+0x74c/0x12f0
[  661.959048][T15157]  ? exc_page_fault+0x6f/0xd0
[  661.959077][T15157]  ? asm_exc_page_fault+0x26/0x30
[  661.959098][T15157]  ? strncpy_from_user+0xfd/0x2d0
[  661.959122][T15157]  ? do_getname+0x78/0x390
[  661.959144][T15157]  ? do_sys_openat2+0xc7/0x1e0
[  661.959167][T15157]  ? __x64_sys_openat+0x12d/0x210
[  661.959191][T15157]  ? do_syscall_64+0x115/0x840
[  661.959222][T15157]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.959255][T15157]  ? __lock_acquire+0x49f/0x1a40
[  661.959284][T15157]  ? __css_rstat_updated+0x1ce/0x5a0
[  661.959315][T15157]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  661.959345][T15157]  ? policy_nodemask+0xed/0x4f0
[  661.959374][T15157]  alloc_pages_mpol+0x1fb/0x540
[  661.959403][T15157]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  661.959439][T15157]  ? __thp_vma_allowable_orders+0x1d9/0xf00
[  661.959472][T15157]  ? do_raw_spin_lock+0x128/0x260
[  661.959496][T15157]  alloc_pages_noprof+0x1a/0x160
[  661.959529][T15157]  pte_alloc_one+0x1c/0x3d0
[  661.959560][T15157]  do_fault+0x86c/0x1750
[  661.959586][T15157]  ? __pmd_alloc+0x3fb/0x950
[  661.959617][T15157]  __handle_mm_fault+0x187d/0x2a00
[  661.959654][T15157]  ? mt_find+0x45e/0x8e0
[  661.959675][T15157]  ? __pfx___handle_mm_fault+0x10/0x10
[  661.959707][T15157]  ? __pfx_mt_find+0x10/0x10
[  661.959741][T15157]  ? find_vma+0xbf/0x140
[  661.959764][T15157]  ? __pfx_find_vma+0x10/0x10
[  661.959790][T15157]  handle_mm_fault+0x37b/0xa30
[  661.959828][T15157]  do_user_addr_fault+0x74c/0x12f0
[  661.959861][T15157]  exc_page_fault+0x6f/0xd0
[  661.959893][T15157]  asm_exc_page_fault+0x26/0x30
[  661.959914][T15157] RIP: 0010:strncpy_from_user+0xfd/0x2d0
[  661.959940][T15157] Code: 00 4d 89 64 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 b2 43 b9 fc 48 83 fd 07 0f 86 bb 00 00 00 e8 03 49 b9 fc <4d> 8b 24 1e e8 fa 48 b9 fc 4c 89 e2 31 ff 4d 8d 7c 1d 00 48 b8 ff
[  661.959962][T15157] RSP: 0018:ffffc9000348fd00 EFLAGS: 00050283
[  661.959979][T15157] RAX: 0000000000000037 RBX: 0000000000000000 RCX: ffffc9001c9c0000
[  661.959992][T15157] RDX: 0000000000080000 RSI: ffffffff854fe35d RDI: ffff888033240000
[  661.960005][T15157] RBP: 00000000000000a8 R08: 0000000000000007 R09: 0000000000000007
[  661.960017][T15157] R10: 00000000000000a8 R11: 0000000000000000 R12: 0000000000000000
[  661.960030][T15157] R13: ffff88805c1fec18 R14: 0000000000000000 R15: 00000000000000a8
[  661.960050][T15157]  ? strncpy_from_user+0xfd/0x2d0
[  661.960083][T15157]  do_getname+0x78/0x390
[  661.960109][T15157]  do_sys_openat2+0xc7/0x1e0
[  661.960134][T15157]  ? __pfx_do_sys_openat2+0x10/0x10
[  661.960160][T15157]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  661.960201][T15157]  __x64_sys_openat+0x12d/0x210
[  661.960227][T15157]  ? __pfx___x64_sys_openat+0x10/0x10
[  661.960262][T15157]  do_syscall_64+0x115/0x840
[  661.960293][T15157]  ? clear_bhb_loop+0x40/0x90
[  661.960319][T15157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.960340][T15157] RIP: 0033:0x7feda579de59
[  661.960357][T15157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  661.960377][T15157] RSP: 002b:00007feda66bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  661.960396][T15157] RAX: ffffffffffffffda RBX: 00007feda5a26090 RCX: 00007feda579de59
[  661.960409][T15157] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  661.960427][T15157] RBP: 00007feda5833e6f R08: 0000000000000000 R09: 0000000000000000
[  661.960440][T15157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  661.960453][T15157] R13: 00007feda5a26128 R14: 00007feda5a26090 R15: 00007ffc224ed348
[  661.960479][T15157]  </TASK>
[  662.714068][T15163] kvm: kvm [15162]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1000
[  662.943897][T14781] Bluetooth: hci6: command 0x0419 tx timeout
[  662.950062][T14781] Bluetooth: hci4: command 0x0c1a tx timeout
[  662.956078][T14781] Bluetooth: hci0: command 0x0c1a tx timeout
[  662.975204][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  663.048105][T15045] veth0_vlan: entered promiscuous mode
[  663.061521][T15045] veth1_vlan: entered promiscuous mode
[  663.103753][T15045] veth0_macvtap: entered promiscuous mode
[  663.128791][T15045] veth1_macvtap: entered promiscuous mode
[  663.154951][T15045] batman_adv: batadv0: Interface activated: batadv_slave_0
[  663.182964][T14781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  663.205460][T15045] batman_adv: batadv0: Interface activated: batadv_slave_1
[  663.289726][   T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  663.316602][T14781] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  663.431406][   T48] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  663.455670][   T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  663.545752][   T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  663.571465][T14781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  663.657095][ T9898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  663.680028][ T9898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  663.705473][ T9898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  663.721752][T14781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  663.739578][ T9898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  665.002945][T14781] Bluetooth: hci0: command 0x0c1a tx timeout
[  665.009049][ T4942] Bluetooth: hci4: command 0x0c1a tx timeout
[  665.015056][ T5625] Bluetooth: hci6: command 0x0419 tx timeout
[  665.881006][T14781] Bluetooth: hci7: command tx timeout
[  666.188405][T15160] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.217269][T15160] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.239802][T15215] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1707'.
[  666.253377][T15160] bridge_slave_0: entered allmulticast mode
[  666.304263][T15160] bridge_slave_0: entered promiscuous mode
[  666.331324][T15215] macvtap0: entered promiscuous mode
[  666.354982][T15217] netlink: 'syz.6.1707': attribute type 19 has an invalid length.
[  666.393852][T15215] macvtap0: entered allmulticast mode
[  666.429823][T15215] veth0_macvtap: entered allmulticast mode
[  666.452202][T15217] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1707'.
[  666.504426][T15160] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.547377][T15160] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.584437][T15160] bridge_slave_1: entered allmulticast mode
[  666.626213][T15160] bridge_slave_1: entered promiscuous mode
[  666.818524][T15160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  666.933455][T15160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.077128][T14781] Bluetooth: hci6: command 0x0419 tx timeout
[  667.162268][T15160] team0: Port device team_slave_0 added
[  667.202053][T15160] team0: Port device team_slave_1 added
[  667.410410][T15160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  667.440960][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.533597][T15160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  667.576835][T15160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.602623][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.692278][T15160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.963995][T14781] Bluetooth: hci7: command tx timeout
[  668.068124][T15160] hsr_slave_0: entered promiscuous mode
[  668.094140][T15160] hsr_slave_1: entered promiscuous mode
[  668.114137][T15160] debugfs: 'hsr0' already exists in 'hsr'
[  668.144679][T15160] Cannot create hsr debugfs directory
[  669.851946][T15160] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  669.906864][T15160] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  669.960907][T15160] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  670.021534][T15160] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  670.035294][T14781] Bluetooth: hci7: command tx timeout
[  670.067711][T15160] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  670.138663][T15160] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  670.179948][T15160] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  670.264725][T15160] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  671.429395][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'.
[  671.451009][T15160] 8021q: adding VLAN 0 to HW filter on device bond0
[  671.852200][T15160] 8021q: adding VLAN 0 to HW filter on device team0
[  671.961325][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.968619][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  672.067583][ T9898] bridge0: port 2(bridge_slave_1) entered blocking state
[  672.074759][ T9898] bridge0: port 2(bridge_slave_1) entered forwarding state
[  672.115297][T14781] Bluetooth: hci7: command tx timeout
[  672.978428][T15304] FAULT_INJECTION: forcing a failure.
[  672.978428][T15304] name failslab, interval 1, probability 0, space 0, times 0
[  673.011410][T15304] CPU: 0 UID: 0 PID: 15304 Comm: syz.6.1724 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  673.011445][T15304] Tainted: [L]=SOFTLOCKUP
[  673.011453][T15304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  673.011467][T15304] Call Trace:
[  673.011474][T15304]  <TASK>
[  673.011482][T15304]  dump_stack_lvl+0x100/0x190
[  673.011510][T15304]  should_fail_ex.cold+0x5/0xa
[  673.011541][T15304]  should_failslab+0xc2/0x120
[  673.011570][T15304]  kmem_cache_alloc_noprof+0x91/0x6a0
[  673.011596][T15304]  ? locks_get_lock_context+0x94/0x610
[  673.011719][T15304]  locks_get_lock_context+0x94/0x610
[  673.011754][T15304]  posix_lock_inode+0xcc/0x23f0
[  673.011798][T15304]  ? rcu_is_watching+0x12/0xc0
[  673.011823][T15304]  ? __pfx_posix_lock_inode+0x10/0x10
[  673.011866][T15304]  vfs_lock_file+0xfb/0x150
[  673.011903][T15304]  fcntl_setlk+0x757/0xe20
[  673.011928][T15304]  ? __pfx_fcntl_setlk+0x10/0x10
[  673.011953][T15304]  ? __might_fault+0xc5/0x140
[  673.011989][T15304]  ? __might_fault+0xc5/0x140
[  673.012035][T15304]  do_fcntl+0xf39/0x1670
[  673.012061][T15304]  ? __pfx_do_fcntl+0x10/0x10
[  673.012084][T15304]  ? __fget_files+0x215/0x3d0
[  673.012126][T15304]  ? tomoyo_file_fcntl+0x6c/0xc0
[  673.012165][T15304]  __x64_sys_fcntl+0x163/0x200
[  673.012194][T15304]  do_syscall_64+0x115/0x840
[  673.012229][T15304]  ? clear_bhb_loop+0x40/0x90
[  673.012257][T15304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.012282][T15304] RIP: 0033:0x7feda579de59
[  673.012301][T15304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  673.012324][T15304] RSP: 002b:00007feda66dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  673.012346][T15304] RAX: ffffffffffffffda RBX: 00007feda5a25fa0 RCX: 00007feda579de59
[  673.012361][T15304] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000003
[  673.012375][T15304] RBP: 00007feda5833e6f R08: 0000000000000000 R09: 0000000000000000
[  673.012389][T15304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  673.012402][T15304] R13: 00007feda5a26038 R14: 00007feda5a25fa0 R15: 00007ffc224ed348
[  673.012430][T15304]  </TASK>
[  673.252142][T15160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  673.262602][T15160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  675.119501][T15160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  675.589231][T15340] random: crng reseeded on system resumption
[  676.369709][T15160] veth0_vlan: entered promiscuous mode
[  676.439336][T15160] veth1_vlan: entered promiscuous mode
[  676.650328][T15160] veth0_macvtap: entered promiscuous mode
[  676.716223][T15160] veth1_macvtap: entered promiscuous mode
[  677.109527][T15160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  677.268258][T15160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  677.385367][   T48] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  677.437056][   T48] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  677.529645][   T48] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  677.604592][   T48] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  678.458909][ T9898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.497568][T15373] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  678.521638][ T9898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.618308][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1736'.
[  678.650575][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.712861][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  683.246231][T15437] random: crng reseeded on system resumption
[  684.194215][   T29] audit: type=1800 audit(4294967441.102:71): pid=15464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1750" name="version" dev="configfs" ino=62216 res=0 errno=0
[  685.135450][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1754'.
[  685.557573][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  685.565559][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  687.299737][T15522] device-mapper: ioctl: Unable to rename non-existent device,  to uuid „
[  687.876466][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1764'.
[  687.979418][T15533] MTRR 1 not used
[  688.258156][   T29] audit: type=1800 audit(4294967445.164:72): pid=15544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1767" name="dbroot" dev="configfs" ino=62538 res=0 errno=0
[  690.782053][   T29] audit: type=1800 audit(4294967447.695:73): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1768" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  691.850684][T15575] kafs: addr_prefs: Invalid Command
[  692.311236][T15577] zswap: compressor  not available
[  692.607676][T15604] FAULT_INJECTION: forcing a failure.
[  692.607676][T15604] name failslab, interval 1, probability 0, space 0, times 0
[  692.637844][T15604] CPU: 0 UID: 0 PID: 15604 Comm: syz.1.1777 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  692.637884][T15604] Tainted: [L]=SOFTLOCKUP
[  692.637893][T15604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  692.637908][T15604] Call Trace:
[  692.637916][T15604]  <TASK>
[  692.637925][T15604]  dump_stack_lvl+0x100/0x190
[  692.637957][T15604]  should_fail_ex.cold+0x5/0xa
[  692.637985][T15604]  should_failslab+0xc2/0x120
[  692.638016][T15604]  __kmalloc_noprof+0xfc/0x820
[  692.638043][T15604]  ? sk_prot_alloc+0x10b/0x2a0
[  692.638083][T15604]  sk_prot_alloc+0x10b/0x2a0
[  692.638118][T15604]  sk_alloc+0x36/0xe80
[  692.638144][T15604]  __netlink_create+0x5e/0x2c0
[  692.638174][T15604]  ? __wake_up+0x3f/0x60
[  692.638206][T15604]  netlink_create+0x29b/0x610
[  692.638250][T15604]  ? __pfx_genl_bind+0x10/0x10
[  692.638286][T15604]  ? __pfx_genl_unbind+0x10/0x10
[  692.638322][T15604]  ? __pfx_genl_release+0x10/0x10
[  692.638346][T15604]  __sock_create+0x339/0x860
[  692.638387][T15604]  __sys_socket+0x14d/0x260
[  692.638424][T15604]  ? __pfx___sys_socket+0x10/0x10
[  692.638471][T15604]  __x64_sys_socket+0x72/0xb0
[  692.638507][T15604]  ? lockdep_hardirqs_on+0x78/0x100
[  692.638543][T15604]  do_syscall_64+0x115/0x840
[  692.638579][T15604]  ? clear_bhb_loop+0x40/0x90
[  692.638609][T15604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.638633][T15604] RIP: 0033:0x7fae11f9de59
[  692.638659][T15604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  692.638683][T15604] RSP: 002b:00007fae12ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  692.638705][T15604] RAX: ffffffffffffffda RBX: 00007fae12225fa0 RCX: 00007fae11f9de59
[  692.638722][T15604] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  692.638736][T15604] RBP: 00007fae12033e6f R08: 0000000000000000 R09: 0000000000000000
[  692.638768][T15604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  692.638783][T15604] R13: 00007fae12226038 R14: 00007fae12225fa0 R15: 00007fffee5353c8
[  692.638814][T15604]  </TASK>
[  692.877279][T15604] FAULT_INJECTION: forcing a failure.
[  692.877279][T15604] name fail_futex, interval 1, probability 0, space 0, times 0
[  692.890875][T15604] CPU: 0 UID: 0 PID: 15604 Comm: syz.1.1777 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  692.890907][T15604] Tainted: [L]=SOFTLOCKUP
[  692.890915][T15604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  692.890928][T15604] Call Trace:
[  692.890934][T15604]  <TASK>
[  692.890942][T15604]  dump_stack_lvl+0x100/0x190
[  692.890969][T15604]  should_fail_ex.cold+0x5/0xa
[  692.891011][T15604]  get_futex_key+0x1d2/0x14f0
[  692.891049][T15604]  ? __pfx_get_futex_key+0x10/0x10
[  692.891086][T15604]  ? locks_remove_posix+0xff/0x4d0
[  692.891124][T15604]  ? __pfx_locks_remove_posix+0x10/0x10
[  692.891165][T15604]  futex_wake+0xf4/0x5e0
[  692.891193][T15604]  ? __pfx_futex_wake+0x10/0x10
[  692.891223][T15604]  ? __lock_acquire+0x49f/0x1a40
[  692.891262][T15604]  do_futex+0x2b2/0x440
[  692.891284][T15604]  ? __pfx_do_futex+0x10/0x10
[  692.891304][T15604]  ? do_raw_spin_lock+0x128/0x260
[  692.891325][T15604]  ? find_held_lock+0x2b/0x80
[  692.891349][T15604]  ? __x64_sys_close_range+0x2d9/0x5d0
[  692.891390][T15604]  __x64_sys_futex+0x34f/0x4d0
[  692.891414][T15604]  ? __x64_sys_close_range+0x30f/0x5d0
[  692.891450][T15604]  ? __pfx___x64_sys_futex+0x10/0x10
[  692.891473][T15604]  ? __pfx___x64_sys_close_range+0x10/0x10
[  692.891518][T15604]  do_syscall_64+0x115/0x840
[  692.891552][T15604]  ? clear_bhb_loop+0x40/0x90
[  692.891579][T15604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.891607][T15604] RIP: 0033:0x7fae11f9de59
[  692.891625][T15604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  692.891647][T15604] RSP: 002b:00007fae12ef70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  692.891667][T15604] RAX: ffffffffffffffda RBX: 00007fae12225fa8 RCX: 00007fae11f9de59
[  692.891682][T15604] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fae12225fac
[  692.891696][T15604] RBP: 00007fae12225fa0 R08: 0000000000000001 R09: 0000000000000000
[  692.891710][T15604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  692.891724][T15604] R13: 00007fae12226038 R14: 00007fffee5352e0 R15: 00007fffee5353c8
[  692.891752][T15604]  </TASK>
[  693.501028][T15594] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  693.537738][T15594] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  693.559497][T15594] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  693.572260][T15594] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  693.585182][T15594] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  693.598340][T15594] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  693.610997][T15594] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  693.627993][T15594] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  693.640393][T15594] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  693.659105][T15594] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  694.422936][T14781] Bluetooth: hci1: command 0x0406 tx timeout
[  695.542342][ T4942] Bluetooth: hci2: command 0x0406 tx timeout
[  695.623669][ T4942] Bluetooth: hci6: command 0x0419 tx timeout
[  695.629780][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout
[  695.635986][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout
[  695.642052][ T5625] Bluetooth: hci5: command 0x0c1a tx timeout
[  695.648288][ T4942] Bluetooth: hci3: command 0x2016 tx timeout
[  695.702553][T15645] Bluetooth: hci7: command 0x0c1a tx timeout
[  697.217639][T15656] zswap: compressor  not available
[  697.392170][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'.
[  697.428175][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'.
[  697.541887][T14781] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  697.781298][T14781] Bluetooth: hci7: command 0x0c1a tx timeout
[  699.862453][T14781] Bluetooth: hci7: command 0x0c1a tx timeout
[  700.115047][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'.
[  700.604653][T15714] zswap: compressor  not available
[  702.451951][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1799'.
[  703.647640][T15645] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  703.661645][T15645] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  703.679820][T15645] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  703.694151][T15645] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  703.704336][T15645] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  705.518188][T15791] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  705.659893][T15791] CIFS mount error: No usable UNC path provided in device string!
[  705.659893][T15791] 
[  705.721988][T15791] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  705.857441][T15645] Bluetooth: hci8: command tx timeout
[  706.939040][T15813] netlink: 350 bytes leftover after parsing attributes in process `syz.7.1812'.
[  707.201851][T15815] FAULT_INJECTION: forcing a failure.
[  707.201851][T15815] name failslab, interval 1, probability 0, space 0, times 0
[  707.215209][T15816] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  707.354741][T15815] CPU: 0 UID: 0 PID: 15815 Comm: syz.6.1813 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  707.354775][T15815] Tainted: [L]=SOFTLOCKUP
[  707.354783][T15815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  707.354796][T15815] Call Trace:
[  707.354803][T15815]  <TASK>
[  707.354811][T15815]  dump_stack_lvl+0x100/0x190
[  707.354839][T15815]  should_fail_ex.cold+0x5/0xa
[  707.354863][T15815]  should_failslab+0xc2/0x120
[  707.354889][T15815]  __kmalloc_noprof+0xfc/0x820
[  707.354913][T15815]  ? xfrm_hash_alloc+0xcf/0x100
[  707.354950][T15815]  ? __pfx_xfrm_net_init+0x10/0x10
[  707.354970][T15815]  xfrm_hash_alloc+0xcf/0x100
[  707.355004][T15815]  xfrm_state_init+0xd7/0x570
[  707.355042][T15815]  ? __pfx_xfrm_net_init+0x10/0x10
[  707.355061][T15815]  xfrm_net_init+0x20e/0xcf0
[  707.355086][T15815]  ? __pfx_xfrm_net_init+0x10/0x10
[  707.355107][T15815]  ops_init+0x1e2/0x5f0
[  707.355133][T15815]  setup_net+0x118/0x3a0
[  707.355159][T15815]  ? __pfx_setup_net+0x10/0x10
[  707.355183][T15815]  ? mutex_init_lockdep+0xf1/0x120
[  707.355221][T15815]  copy_net_ns+0x46f/0x7c0
[  707.355250][T15815]  create_new_namespaces+0x3ea/0xac0
[  707.355291][T15815]  unshare_nsproxy_namespaces+0xf2/0x220
[  707.355329][T15815]  ksys_unshare+0x438/0xab0
[  707.355356][T15815]  ? __pfx_ksys_unshare+0x10/0x10
[  707.355389][T15815]  __x64_sys_unshare+0x31/0x40
[  707.355414][T15815]  do_syscall_64+0x115/0x840
[  707.355447][T15815]  ? clear_bhb_loop+0x40/0x90
[  707.355478][T15815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.355500][T15815] RIP: 0033:0x7feda579de59
[  707.355517][T15815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.355538][T15815] RSP: 002b:00007feda66dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  707.355558][T15815] RAX: ffffffffffffffda RBX: 00007feda5a25fa0 RCX: 00007feda579de59
[  707.355572][T15815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  707.355585][T15815] RBP: 00007feda5833e6f R08: 0000000000000000 R09: 0000000000000000
[  707.355598][T15815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  707.355610][T15815] R13: 00007feda5a26038 R14: 00007feda5a25fa0 R15: 00007ffc224ed348
[  707.355637][T15815]  </TASK>
[  708.008218][T15645] Bluetooth: hci8: command tx timeout
[  708.429624][T15820] FAULT_INJECTION: forcing a failure.
[  708.429624][T15820] name failslab, interval 1, probability 0, space 0, times 0
[  708.501735][T15820] CPU: 0 UID: 0 PID: 15820 Comm: syz.6.1813 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  708.501779][T15820] Tainted: [L]=SOFTLOCKUP
[  708.501789][T15820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  708.501803][T15820] Call Trace:
[  708.501810][T15820]  <TASK>
[  708.501818][T15820]  dump_stack_lvl+0x100/0x190
[  708.501847][T15820]  should_fail_ex.cold+0x5/0xa
[  708.501872][T15820]  should_failslab+0xc2/0x120
[  708.501901][T15820]  __kmalloc_noprof+0xfc/0x820
[  708.501925][T15820]  ? cache_create_net+0x2b/0x1f0
[  708.501950][T15820]  ? cache_create_net+0xa2/0x1f0
[  708.501979][T15820]  cache_create_net+0xa2/0x1f0
[  708.502003][T15820]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[  708.502029][T15820]  gss_svc_init_net+0x69/0x640
[  708.502052][T15820]  ? __pfx_canbcm_pernet_init+0x10/0x10
[  708.502077][T15820]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[  708.502102][T15820]  ops_init+0x1e2/0x5f0
[  708.502132][T15820]  setup_net+0x118/0x3a0
[  708.502159][T15820]  ? __pfx_setup_net+0x10/0x10
[  708.502192][T15820]  ? mutex_init_lockdep+0xf1/0x120
[  708.502233][T15820]  copy_net_ns+0x46f/0x7c0
[  708.502264][T15820]  create_new_namespaces+0x3ea/0xac0
[  708.502308][T15820]  unshare_nsproxy_namespaces+0xf2/0x220
[  708.502349][T15820]  ksys_unshare+0x438/0xab0
[  708.502376][T15820]  ? __pfx_ksys_unshare+0x10/0x10
[  708.502412][T15820]  __x64_sys_unshare+0x31/0x40
[  708.502438][T15820]  do_syscall_64+0x115/0x840
[  708.502472][T15820]  ? clear_bhb_loop+0x40/0x90
[  708.502499][T15820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.502522][T15820] RIP: 0033:0x7feda579de59
[  708.502540][T15820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  708.502563][T15820] RSP: 002b:00007feda669a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  708.502584][T15820] RAX: ffffffffffffffda RBX: 00007feda5a26180 RCX: 00007feda579de59
[  708.502599][T15820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  708.502613][T15820] RBP: 00007feda5833e6f R08: 0000000000000000 R09: 0000000000000000
[  708.502626][T15820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  708.502640][T15820] R13: 00007feda5a26218 R14: 00007feda5a26180 R15: 00007ffc224ed348
[  708.502668][T15820]  </TASK>
[  708.768432][T15753] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.775555][T15753] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.782787][T15753] bridge_slave_0: entered allmulticast mode
[  708.790192][T15753] bridge_slave_0: entered promiscuous mode
[  708.797964][T15753] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.805069][T15753] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.812351][T15753] bridge_slave_1: entered allmulticast mode
[  708.819655][T15753] bridge_slave_1: entered promiscuous mode
[  708.849154][T15753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  708.861231][T15753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  708.893666][T15753] team0: Port device team_slave_0 added
[  708.901412][T15753] team0: Port device team_slave_1 added
[  708.928502][T15753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  708.935486][T15753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  708.961474][T15753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  708.976445][T15753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  708.983407][T15753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  709.009382][T15753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  709.097186][T15753] hsr_slave_0: entered promiscuous mode
[  709.103601][T15753] hsr_slave_1: entered promiscuous mode
[  709.110445][T15753] debugfs: 'hsr0' already exists in 'hsr'
[  709.116678][T15753] Cannot create hsr debugfs directory
[  709.803817][T15828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1815'.
[  710.017335][T15645] Bluetooth: hci8: command tx timeout
[  710.164575][T15753] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  710.201316][T15753] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  710.267227][T15753] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  710.302435][T15753] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  710.347578][T15753] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  710.393907][T15753] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  710.456511][T15753] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  710.510683][T15829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  710.526483][T15753] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  711.979960][T15753] 8021q: adding VLAN 0 to HW filter on device bond0
[  712.094151][T15645] Bluetooth: hci8: command tx timeout
[  712.294736][T15753] 8021q: adding VLAN 0 to HW filter on device team0
[  712.360755][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  712.367989][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  712.436461][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.443681][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  712.971903][T15859] Process accounting resumed
[  714.753605][T15753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  716.107806][T15753] veth0_vlan: entered promiscuous mode
[  716.195302][T15753] veth1_vlan: entered promiscuous mode
[  716.759469][T15753] veth0_macvtap: entered promiscuous mode
[  716.873524][T15910] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  716.901094][T15911] zswap: compressor  not available
[  716.930413][T15910] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  716.965767][T15910] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  716.996667][T15910] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  717.017458][T15910] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  717.048726][T15910] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  717.066251][T15753] veth1_macvtap: entered promiscuous mode
[  717.085265][T15910] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  717.111388][T15910] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  717.130246][T15910] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  717.175911][T15910] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  717.206767][T15753] batman_adv: batadv0: Interface activated: batadv_slave_0
[  717.236276][T15910] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  717.272749][T15753] batman_adv: batadv0: Interface activated: batadv_slave_1
[  717.340843][   T48] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  717.412613][   T48] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  717.455152][   T48] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  717.532720][T15645] Bluetooth: hci1: command 0x0406 tx timeout
[  717.548889][   T48] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  717.979402][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.996806][T15934] openvswitch: HfR: Dropping previously announced user features
[  718.035427][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  718.197673][ T9898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  718.245637][ T9898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  718.970784][T15645] Bluetooth: hci3: command 0x2016 tx timeout
[  718.977447][T14781] Bluetooth: hci2: command 0x0406 tx timeout
[  719.050640][T15645] Bluetooth: hci0: command 0x0c1a tx timeout
[  719.057516][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout
[  719.064425][T14781] Bluetooth: hci4: command 0x0c1a tx timeout
[  719.131032][ T5637] Bluetooth: hci6: command 0x0419 tx timeout
[  719.138204][T15645] Bluetooth: hci7: command 0x0c1a tx timeout
[  719.144924][T14781] Bluetooth: hci8: command 0x0c1a tx timeout
[  720.215268][T15955] futex_wake_op: syz.9.1832 tries to shift op by -2048; fix this program
[  720.349616][T15955] futex_wake_op: syz.9.1832 tries to shift op by -2048; fix this program
[  721.210208][T14781] Bluetooth: hci8: command 0x0c1a tx timeout
[  723.293229][T14781] Bluetooth: hci8: command 0x0c1a tx timeout
[  725.378207][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1843'.
[  726.652880][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1846'.
[  728.074103][T16031] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  728.100011][T16031] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  728.132910][T16031] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  728.162985][T16031] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  728.189829][T16031] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  728.234480][T16031] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  728.274554][T16031] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  728.305648][T16031] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  728.348199][T16031] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  728.438303][T16049] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  728.500487][T16049] File: /dev/mtdblock0 PID: 16049 Comm: syz.6.1850
[  729.289461][T14781] Bluetooth: hci1: command 0x0406 tx timeout
[  729.547899][T16077] bond0: invalid ARP target specified
[  730.165087][T14781] Bluetooth: hci5: command 0x0c1a tx timeout
[  730.172383][T15645] Bluetooth: hci3: command 0x2016 tx timeout
[  730.178533][ T5637] Bluetooth: hci2: command 0x0406 tx timeout
[  730.245236][ T5637] Bluetooth: hci4: command 0x0c1a tx timeout
[  730.251394][T15645] Bluetooth: hci0: command 0x0c1a tx timeout
[  730.326420][ T5637] Bluetooth: hci7: command 0x0c1a tx timeout
[  730.332956][T15645] Bluetooth: hci6: command 0x0419 tx timeout
[  730.405064][ T5637] Bluetooth: hci8: command 0x0c1a tx timeout
[  732.326820][ T5637] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260
[  735.403133][T16114] FAULT_INJECTION: forcing a failure.
[  735.403133][T16114] name failslab, interval 1, probability 0, space 0, times 0
[  735.484081][T16114] CPU: 0 UID: 0 PID: 16114 Comm: syz.6.1864 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  735.484118][T16114] Tainted: [L]=SOFTLOCKUP
[  735.484125][T16114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  735.484139][T16114] Call Trace:
[  735.484146][T16114]  <TASK>
[  735.484154][T16114]  dump_stack_lvl+0x100/0x190
[  735.484182][T16114]  should_fail_ex.cold+0x5/0xa
[  735.484207][T16114]  should_failslab+0xc2/0x120
[  735.484237][T16114]  __kmalloc_cache_noprof+0x91/0x6c0
[  735.484273][T16114]  ? mutex_init_lockdep+0xf1/0x120
[  735.484308][T16114]  ? single_open+0x4d/0x1d0
[  735.484351][T16114]  ? __pfx_blk_mq_debugfs_show+0x10/0x10
[  735.484468][T16114]  single_open+0x4d/0x1d0
[  735.484496][T16114]  blk_mq_debugfs_open+0xde/0x1b0
[  735.484531][T16114]  ? __pfx_blk_mq_debugfs_open+0x10/0x10
[  735.484563][T16114]  full_proxy_open_regular+0x1b6/0x370
[  735.484612][T16114]  do_dentry_open+0x6ab/0x14d0
[  735.484646][T16114]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  735.484674][T16114]  vfs_open+0x82/0x3f0
[  735.484701][T16114]  path_openat+0x2873/0x4280
[  735.484751][T16114]  ? __pfx_path_openat+0x10/0x10
[  735.484791][T16114]  do_file_open+0x20e/0x430
[  735.484845][T16114]  ? __pfx_do_file_open+0x10/0x10
[  735.484899][T16114]  ? alloc_fd+0x471/0x7a0
[  735.484936][T16114]  ? do_getname+0x191/0x390
[  735.484963][T16114]  do_sys_openat2+0x10f/0x1e0
[  735.484990][T16114]  ? __pfx_do_sys_openat2+0x10/0x10
[  735.485018][T16114]  ? __fget_files+0x21f/0x3d0
[  735.485057][T16114]  __x64_sys_openat+0x12d/0x210
[  735.485085][T16114]  ? __pfx___x64_sys_openat+0x10/0x10
[  735.485122][T16114]  do_syscall_64+0x115/0x840
[  735.485157][T16114]  ? clear_bhb_loop+0x40/0x90
[  735.485183][T16114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.485206][T16114] RIP: 0033:0x7feda579de59
[  735.485225][T16114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  735.485247][T16114] RSP: 002b:00007feda66dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  735.485269][T16114] RAX: ffffffffffffffda RBX: 00007feda5a25fa0 RCX: 00007feda579de59
[  735.485284][T16114] RDX: 0000000000143000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  735.485299][T16114] RBP: 00007feda5833e6f R08: 0000000000000000 R09: 0000000000000000
[  735.485313][T16114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  735.485326][T16114] R13: 00007feda5a26038 R14: 00007feda5a25fa0 R15: 00007ffc224ed348
[  735.485355][T16114]  </TASK>
[  737.340411][ T5637] Bluetooth: hci4: unexpected event 0x02 length: 1021 > 260
[  737.585033][T16136] random: crng reseeded on system resumption
[  741.899922][T16162] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  744.005011][T16191] ecryptfs_miscdev_write: Invalid packet size [0]
[  746.044361][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1883'.
[  746.967833][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  746.978981][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  747.147410][T15645] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  747.166448][T15645] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  747.182474][T15645] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  747.194508][T15645] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  747.203962][T15645] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  749.276780][ T5637] Bluetooth: hci9: command tx timeout
[  750.114547][T16229] bridge0: port 1(bridge_slave_0) entered blocking state
[  750.152445][T16229] bridge0: port 1(bridge_slave_0) entered disabled state
[  750.186892][T16229] bridge_slave_0: entered allmulticast mode
[  750.231264][T16229] bridge_slave_0: entered promiscuous mode
[  750.275365][T16229] bridge0: port 2(bridge_slave_1) entered blocking state
[  750.319484][T16229] bridge0: port 2(bridge_slave_1) entered disabled state
[  750.361031][T16229] bridge_slave_1: entered allmulticast mode
[  750.397031][T16229] bridge_slave_1: entered promiscuous mode
[  750.548068][T16229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  750.601094][T16229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  750.807870][T16229] team0: Port device team_slave_0 added
[  750.856733][T16229] team0: Port device team_slave_1 added
[  751.000643][T16229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  751.038456][T16229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  751.163058][T16229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  751.219952][T16229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  751.255973][T16229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  751.360471][ T5637] Bluetooth: hci9: command tx timeout
[  751.391328][T16229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  751.689976][T16229] hsr_slave_0: entered promiscuous mode
[  751.720631][T16229] hsr_slave_1: entered promiscuous mode
[  751.762513][T16229] debugfs: 'hsr0' already exists in 'hsr'
[  751.790326][T16229] Cannot create hsr debugfs directory
[  753.434431][ T5637] Bluetooth: hci9: command tx timeout
[  754.454254][ T5637] Bluetooth: hci4: unexpected event 0x02 length: 1021 > 260
[  755.524308][ T5637] Bluetooth: hci9: command tx timeout
[  756.663838][T16229] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  756.758562][T16229] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  756.828998][T16229] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  756.929270][T16229] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  757.017344][T16229] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  757.149735][T16229] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  757.230343][T16229] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  757.316927][T16229] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  757.596897][T16347] zswap: compressor  not available
[  758.415651][T16376] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1905'.
[  758.789223][T16376] bond0: (slave bond_slave_0): Releasing backup interface
[  758.936342][T16229] 8021q: adding VLAN 0 to HW filter on device bond0
[  759.073325][T16229] 8021q: adding VLAN 0 to HW filter on device team0
[  759.195782][T13298] bridge0: port 1(bridge_slave_0) entered blocking state
[  759.202965][T13298] bridge0: port 1(bridge_slave_0) entered forwarding state
[  759.339664][T13298] bridge0: port 2(bridge_slave_1) entered blocking state
[  759.346834][T13298] bridge0: port 2(bridge_slave_1) entered forwarding state
[  762.532223][T16229] 8021q: adding VLAN 0 to HW filter on device batadv0
[  763.867383][T16229] veth0_vlan: entered promiscuous mode
[  763.950897][T16229] veth1_vlan: entered promiscuous mode
[  764.192448][T16229] veth0_macvtap: entered promiscuous mode
[  764.279894][T16229] veth1_macvtap: entered promiscuous mode
[  764.432281][T16229] batman_adv: batadv0: Interface activated: batadv_slave_0
[  764.563426][T16229] batman_adv: batadv0: Interface activated: batadv_slave_1
[  764.691813][   T74] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  764.740537][   T74] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  764.852064][   T74] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  764.933273][   T74] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  765.346707][T16481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1915'.
[  765.622811][T16481] bond0: (slave bond_slave_0): Releasing backup interface
[  766.262276][T13035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  766.348314][T13035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  766.681815][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  766.739878][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  767.246963][T16515] snd_virmidi snd_virmidi.0: control 53842:9:2:yª:0 is already present
[  769.171271][T16515] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.624404][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'.
[  776.505533][T16617] Process accounting resumed
[  776.797023][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  777.304640][T16655] zswap: compressor  not available
[  777.864427][T16669] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1935'.
[  778.604623][T16683] vivid-007: =================  START STATUS  =================
[  778.668173][T16683] vivid-007: Generate PTS: true
[  778.743280][T16683] vivid-007: Generate SCR: true
[  778.823010][T16683] tpg source WxH: 320x240 (Y'CbCr)
[  778.885227][T16683] tpg field: 1
[  778.913162][T16683] tpg crop: (0,0)/320x240
[  778.948050][T16683] tpg compose: (0,0)/320x240
[  778.995426][T16683] tpg colorspace: 8
[  779.041937][T16683] tpg transfer function: 0/0
[  779.076880][T16683] tpg Y'CbCr encoding: 0/0
[  779.109454][T16683] tpg quantization: 0/0
[  779.135837][T16683] tpg RGB range: 0/2
[  779.166798][T16683] vivid-007: ==================  END STATUS  ==================
[  780.221119][   T30] INFO: task syz.2.1625:14655 blocked for more than 143 seconds.
[  780.245887][   T30]       Tainted: G             L      syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  780.312679][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  780.393651][   T30] task:syz.2.1625      state:D stack:28296 pid:14655 tgid:14649 ppid:5633   task_flags:0x400140 flags:0x00080002
[  780.447248][T16713] zram0: detected capacity change from 0 to 16
[  780.506905][   T30] Call Trace:
[  780.536223][   T30]  <TASK>
[  780.569140][   T30]  __schedule+0x125c/0x6730
[  780.607186][   T30]  ? do_raw_spin_lock+0x128/0x260
[  780.658058][   T30]  ? __pfx___schedule+0x10/0x10
[  780.692514][   T30]  ? find_held_lock+0x2b/0x80
[  780.734644][   T30]  ? schedule+0x225/0x2c0
[  780.759732][   T30]  schedule+0xdd/0x2c0
[  780.783739][   T30]  schedule_preempt_disabled+0x13/0x30
[  780.807026][   T30]  __mutex_lock+0xccc/0x1bd0
[  780.835500][   T30]  ? nfsd_shutdown_threads+0x5b/0xf0
[  780.859064][   T30]  ? __lock_acquire+0x49f/0x1a40
[  780.932682][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  781.001755][   T30]  ? net_generic+0xea/0x2a0
[  781.056249][   T30]  ? net_generic+0xea/0x2a0
[  781.105426][   T30]  ? nfsd_shutdown_threads+0x5b/0xf0
[  781.155905][   T30]  nfsd_shutdown_threads+0x5b/0xf0
[  781.201601][   T30]  nfsd_umount+0x3b/0x60
[  781.234184][   T30]  deactivate_locked_super+0xc1/0x1b0
[  781.278159][   T30]  deactivate_super+0xe7/0x110
[  781.316653][   T30]  cleanup_mnt+0x21f/0x450
[  781.352304][   T30]  task_work_run+0x150/0x240
[  781.377283][   T30]  ? __pfx_task_work_run+0x10/0x10
[  781.404083][   T30]  exit_to_user_mode_loop+0x1d8/0x6f0
[  781.432565][   T30]  ? rcu_is_watching+0x12/0xc0
[  781.456582][   T30]  do_syscall_64+0x652/0x840
[  781.475595][   T30]  ? clear_bhb_loop+0x40/0x90
[  781.495961][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.539048][   T30] RIP: 0033:0x7f970f39de59
[  781.567274][   T30] RSP: 002b:00007f971030d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  781.613919][   T30] RAX: 0000000000000000 RBX: 00007f970f626180 RCX: 00007f970f39de59
[  781.654193][   T30] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000000
[  781.691426][   T30] RBP: 00007f970f433e6f R08: 0000000000000000 R09: 0000000000000000
[  781.727628][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  781.764520][   T30] R13: 00007f970f626218 R14: 00007f970f626180 R15: 00007ffebd2c7bf8
[  781.801322][   T30]  </TASK>
[  781.815460][   T30] 
[  781.815460][   T30] Showing all locks held in the system:
[  781.969129][   T30] 1 lock held by khungtaskd/30:
[  782.003264][   T30]  #0: ffffffff8ebe5f00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  782.051764][   T30] 4 locks held by kworker/u8:4/74:
[  782.083308][   T30]  #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[  782.116520][   T30]  #1: ffffc900015f7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[  782.159854][   T30]  #2: ffffffff90a851e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[  782.193228][   T30]  #3: ffffffff8ebf19a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  782.230285][   T30] 2 locks held by getty/5386:
[  782.250643][   T30]  #0: ffff888037b180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  782.268865][   T30]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  782.288200][   T30] 2 locks held by kworker/0:4/5709:
[  782.302397][   T30]  #0: ffff88801bc07140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[  782.330046][   T30]  #1: ffffc90003b0fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[  782.348827][   T30] 2 locks held by syz.3.1613/14589:
[  782.361560][   T30]  #0: ffffffff90b4c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  782.383281][   T30]  #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[  782.408792][   T30] 2 locks held by syz.2.1625/14655:
[  782.415488][   T30]  #0: ffff888037b720d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  782.440142][   T30]  #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  782.465960][   T30] 2 locks held by syz.4.1661/14834:
[  782.475581][   T30]  #0: ffffffff90b4c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  782.498786][   T30]  #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0
[  782.519010][   T30] 2 locks held by syz-executor/14889:
[  782.528947][   T30]  #0: ffff8880265400d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  782.550288][   T30]  #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  782.578905][   T30] 2 locks held by syz.5.1663/14971:
[  782.594015][   T30]  #0: ffffffff90b4c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  782.619087][   T30]  #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[  782.631333][   T30] 2 locks held by syz-executor/15160:
[  782.648986][   T30]  #0: ffff888035f6c0d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  782.670012][   T30]  #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  782.693505][   T30] 2 locks held by syz-executor/15753:
[  782.707075][   T30]  #0: ffff8880298600d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  782.728612][   T30]  #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  782.748621][   T30] 2 locks held by syz-executor/16229:
[  782.758858][   T30]  #0: ffff888032f0a0d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  782.798635][   T30]  #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  782.818983][   T30] 2 locks held by sed/16739:
[  782.940029][   T30] 
[  782.953250][   T30] =============================================
[  782.953250][   T30] 
[  783.022920][   T30] NMI backtrace for cpu 0
[  783.022941][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  783.022971][   T30] Tainted: [L]=SOFTLOCKUP
[  783.022979][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  783.022996][   T30] Call Trace:
[  783.023003][   T30]  <TASK>
[  783.023011][   T30]  dump_stack_lvl+0x100/0x190
[  783.023037][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[  783.023063][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  783.023088][   T30]  nmi_trigger_cpumask_backtrace+0x21c/0x2a0
[  783.023119][   T30]  sys_info+0x141/0x190
[  783.023141][   T30]  watchdog+0xcb1/0x1030
[  783.023175][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  783.023206][   T30]  ? __pfx_watchdog+0x10/0x10
[  783.023234][   T30]  ? __kthread_parkme+0x18c/0x230
[  783.023258][   T30]  ? kthread+0x13a/0x450
[  783.023282][   T30]  ? __pfx_watchdog+0x10/0x10
[  783.023308][   T30]  kthread+0x370/0x450
[  783.023344][   T30]  ? __pfx_kthread+0x10/0x10
[  783.023369][   T30]  ret_from_fork+0x72b/0xd50
[  783.023396][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  783.023420][   T30]  ? __switch_to+0x800/0x10f0
[  783.023448][   T30]  ? __switch_to_asm+0x39/0x70
[  783.023473][   T30]  ? __pfx_kthread+0x10/0x10
[  783.023499][   T30]  ret_from_fork_asm+0x1a/0x30
[  783.023536][   T30]  </TASK>
[  783.411284][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  783.418183][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  783.428872][   T30] Tainted: [L]=SOFTLOCKUP
[  783.433190][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  783.443240][   T30] Call Trace:
[  783.446538][   T30]  <TASK>
[  783.449477][   T30]  dump_stack_lvl+0x100/0x190
[  783.454166][   T30]  vpanic+0x552/0x970
[  783.458150][   T30]  ? __pfx_vpanic+0x10/0x10
[  783.462669][   T30]  ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0
[  783.468849][   T30]  panic+0xd1/0xe0
[  783.472574][   T30]  ? __pfx_panic+0x10/0x10
[  783.477012][   T30]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0
[  783.483180][   T30]  ? nmi_trigger_cpumask_backtrace+0x260/0x2a0
[  783.489346][   T30]  ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0
[  783.495503][   T30]  ? watchdog.cold+0x1ec/0x234
[  783.500268][   T30]  ? watchdog+0xcc1/0x1030
[  783.504695][   T30]  watchdog.cold+0x1fd/0x234
[  783.509291][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  783.515137][   T30]  ? __pfx_watchdog+0x10/0x10
[  783.519846][   T30]  ? __kthread_parkme+0x18c/0x230
[  783.524885][   T30]  ? kthread+0x13a/0x450
[  783.529142][   T30]  ? __pfx_watchdog+0x10/0x10
[  783.533829][   T30]  kthread+0x370/0x450
[  783.537904][   T30]  ? __pfx_kthread+0x10/0x10
[  783.542507][   T30]  ret_from_fork+0x72b/0xd50
[  783.547106][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  783.552237][   T30]  ? __switch_to+0x800/0x10f0
[  783.556927][   T30]  ? __switch_to_asm+0x39/0x70
[  783.561699][   T30]  ? __pfx_kthread+0x10/0x10
[  783.566300][   T30]  ret_from_fork_asm+0x1a/0x30
[  783.571093][   T30]  </TASK>
[  783.574186][   T30] Kernel Offset: disabled
[  783.578517][   T30] Rebooting in 86400 seconds..