last executing test programs:

12m49.106798743s ago: executing program 32 (id=175):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
socket(0xa, 0x801, 0x6)
mmap$auto(0x0, 0x2000a, 0x7e, 0xeb2, 0x401, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x10b802, 0x0)
mmap$auto(0x0, 0x2000000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0x29, 0x2, 0xa)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0xc0a82, 0x0)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
r1 = socket(0xa, 0x3, 0x3a)
getsockopt$auto(r1, 0x29, 0x35, 0x0, 0x0)
sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000850)
mmap$auto(0x0, 0x2020009, 0x3, 0x14, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
ioctl$auto(0xc8, 0x894c, 0x5c8d)
r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
ioctl$auto(r3, 0x4008af22, r2)
openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0)

4m18.065434567s ago: executing program 2 (id=1170):
r0 = socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001)
prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x8001, 0x3, 0xa53, 0x4)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r2 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00)
read$auto(r2, 0x0, 0x0)
ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x5, 0x6, 0x80, 0x2c1d3ca, 0x4, 0x1, 0x1800000, 0x8})
r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r4, 0x6, 0x31, 0x0, 0x2)
ioctl$auto(r1, 0x4b72, r3)
r5 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/psaux\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000000)={r5, 0x3, 0x4}, 0xb, 0x7)
read$auto_tracing_stats_fops_trace(r3, &(0x7f0000000000)=""/140, 0x8c)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4)
r6 = syz_open_procfs$namespace(0x0, 0x0)
fcntl$auto(r6, 0x402, 0xffffffffffffffff)
getpid()
r7 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x8c80, 0x0)
read$auto_vhci_fops_hci_vhci(r7, &(0x7f0000000100)=""/237, 0xed)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000002c0), 0x8040, 0x0)
epoll_create$auto(0x8)

4m13.586294033s ago: executing program 2 (id=1179):
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
read$auto(r0, &(0x7f0000000380)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\x03\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xcf\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>\x00\xff\xbb<\xccPV\xe5\xf2y\xcc\x15R\x9f\x90[\x89!\xc5\xd7I\xff\x91\xd1\x85$\xb1s-\xa6\x86$\x91\xd6:\xe27:;\x94\xd9\xe1\x86\xa6R\xff,\xb0\xf2\xc3\x11\x9d\xd9u\xfc\x85.\xce@LpA\xeb\xc5\xf0\xed\xe7\x03\xfb{?~R7,\xbbU$\x82h\xfc\xe3B \x86o\x1f\xe1^\xac\xa2Y.\xb3Je\xba;y\xba\xb4\xf4i\xfb+\x97`=\x9f6\xae0\xbdt\xaa}\xfa\x9b\x85{\x02\xad=\xc4x\xbd\x05\x80\xe4S\xca\xbb_\x9a\xda|\xee\xff77\x8e\xd4\xb8\xf450\x02\xd3\xdf_\x12I\x9a\x95\xeb\xfc\xb5\xc3\x11\xd2LY\xe1\xb08\x85\x7f\xff\xc6-\x1d\xd7Z\xcak\n\x10\xbf\xb7t\x1c\nK+\xbb\x04\x01\f0\x8f\x9f\x89\xaa\xd9\xfb\x88\xebH/k\x93Q\xc4\xda?\x0e\xcd\xd2 \x9d@\xb5\x97\x95O\xf8\x8cYx\xcd\xc9I\xbf5o\xe7(W\xba\xc1\xd3\xf3\xa9\xe0f\x03\xb9ijN\xf6U\xdb\xbb3\xc7%f,\xf6\x9c\x1c\xb4\xddMd\x91\x97\xe0\xe1\xe5\xf8\xa7\x8d0\xfe\x80I\xb2\xe2\x1e\x9a\xf5\xd9M\xdf\x02\x80\x1e\xe3\x1e\xb1\xf0\x1c\x11\xa2H\xdb\x8f\xff\'\x99\xf4C\x1e;\x81_\x1d\xf9\xcf7_\xca\t\xfe\xd55\x88d\xf8\b\xcc\xd35\xa8#\x18\xa2t\x92(\xd3\x1akF6\xf6\x1f/Z2\x80\xea]\x85\xebT:K=X\x19\xd3\x94\xdbI\xe9\x1f\xc0q,\x8b\xdd\x9fX\xfbp|\x92t\x8e7\x96R\xec\x80<\x0e3\xd5\xf9\x1fl\x9d\x0e\xc1\xf8c\x8ef\xbaD\x18b', 0x100000001)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130026bd7000fe13e47a9400000008000300", @ANYRES32=r3, @ANYBLOB="1c007a80"], 0x38}, 0x1, 0x0, 0x0, 0x4004080}, 0x80)
syz_clone(0x40020000, &(0x7f00000000c0)="af50d3026b4ac8084955c215e51d01f4ef4b7c57da7085beb623f5e7f6d1439e86b8c1afe39a3273e4cd9e7fb13f434fab8c8a40815c2bbd26a694afed14cd19ca9ec6836f3fb5b034fe8f70a89e8e384c4ce142284a31fd8330e5c0a376fccf48ce03fbffb61648d24957bcaf03f066c656a6613ac30d0e8bcc5971fc1794f5cfca97b15512834799b22557084769791ebc24374085d98fa70cf3d71f5a589defab20873ec9fb4e19c0c54cce9882e922e10d0e537f7252f03b5082349f90ad9ff1ecf6adfe47a2818b7b4f2f14194ec64cac95", 0xd4, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240))
capget$auto(0x0, 0xfffffffffffffffe)
ioctl$auto(0xc8, 0x800454cf, 0x200000000005c8d)
ioctl$auto(0xffffffffffffffff, 0x4bfa, 0xffffffffffffffff)
write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, &(0x7f0000000580)="b7a53caf1b305860206af11a0ec35e7e5c46caffe279de8e9945d6e37dfaf9058103dbe387321e23d5f21c271069baa482db442a5748c1fec17e92c29d2df967f9c1ce0bd79ec3d67c9f0aff55674e238d4b83e2372ae3a03950aaa641f736e6f9065e5b9af9e2de49f8a01693aa28b5e53dd7d970575e42c6720cff2f6f9bf902791bf83abd9acf9dc3968a36b1851ffc6497e410d51f340b92b74f972cd68de180f42bcfc5ac64a8977e242b9ca63c58d603fea4fad558f0071db6e24de9bda2b835957f69a06c0d0000000000000000d4b8db86be62388110e03ef34b1fadaffc761c3fa220dac9bf9e94d03a0fe70ca30710a7", 0xf5)
mmap$auto(0x0, 0x0, 0x2, 0x9b72, r0, 0x8000)
madvise$auto(0x2, 0x2000040080000004, 0xe)
r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0xfffffc96)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
mmap$auto(0x0, 0x400008, 0x36, 0x1009b74, r4, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x409, 0x5, 0xffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r6)
ioctl$auto_KVM_CREATE_VM(r5, 0xc048aeca, 0x0)

4m2.02985755s ago: executing program 2 (id=1188):
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x7, 0x12, 0x0, 0x2)
mmap$auto(0x51d, 0x2b, 0xdf, 0x9b73, r0, 0x28000)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
socket(0xa, 0x80000, 0x3b)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
write$auto(0x1, 0x0, 0x80000000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
unshare$auto(0x40000080)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/cec15/uevent\x00', 0x22e42, 0x0)
r2 = eventfd$auto(0x34b)
write$auto(r2, 0x0, 0x8)
read$auto_ptdump_fops_(r2, &(0x7f00000000c0)=""/32, 0x20)
sendfile$auto(0xffffffffffffffff, r1, 0x0, 0x40)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x5, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x0, 0x15f4da0a, 0x3, 0x402, 0x62, 0x80000000, 0x4, 0x6d41, 0x4, 0xa, 0xfffffffffffffdfa]}, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004001e"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
setpriority$auto(0x2, 0x0, 0x80002)
sendmmsg$auto(0x4, 0x0, 0x400, 0x7)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xec8, 0xdf, 0x100000000009b72, 0xffffffffffffffff, 0x28000)
madvise$auto(0x0, 0x3, 0x13)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/dev_snmp6/syz_tun\x00', 0x1cb422, 0x0)
pread64$auto(r4, 0x0, 0x800003, 0x270)

3m53.206968507s ago: executing program 2 (id=1198):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xc3b800003, 0xa, 0xeb1, 0xffffffffffffffff, 0xc)
ioctl$auto(0x4000000000000c8, 0x400454e2, 0x3)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
write$auto(0x3, 0x0, 0x800)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x6004000)
r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
landlock_restrict_self$auto(r0, 0x3)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
epoll_create$auto(0x3e)
mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
open(0x0, 0x14c1c2, 0x106)
io_uring_setup$auto(0x9, 0x0)
r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec3\x00', 0x0, 0x0)
ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0)

3m48.750153742s ago: executing program 2 (id=1207):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22641, 0x0)
lseek$auto(0x3, 0x2, 0x4)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
write$auto(0x3, 0x0, 0xfffffdef)
setsockopt$auto_SO_DEBUG(r0, 0x6, 0x1, &(0x7f0000000000)='$/&}-#)f-&D)[,\x00', 0xda3)
madvise$auto(0x0, 0x2003ec, 0x14)
getsockopt$auto_SO_DONTROUTE(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000140)='$/&}-#)f-&D)[,\x00', &(0x7f0000000180)=0x3)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/028/001\x00', 0x0, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x40d81, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
socket(0x10, 0x2, 0x4)
bpf$auto(0x6, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x10004, 0x0, 0x3d, 0x106, 0x0, 0x0, 0xfff, 0x800, 0x9, 0x0, 0x4, 0x7, 0x9, 0xfffeffff}, 0x1)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6)
write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000080), 0x0)

3m43.317504411s ago: executing program 2 (id=1214):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x80001, 0x0)
lseek$auto(0x3, 0x7ffffffffffffffb, 0x1)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1)
madvise$auto(0x0, 0x2003f2, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/pagemap\x00', 0x141980, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf250200000000000500ffff009c"], 0xffffffffffffffc7}, 0x1, 0x0, 0x0, 0x20040cc4}, 0x4004450)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0xa0740, 0x0)
pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001)

3m27.756982835s ago: executing program 33 (id=1214):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x80001, 0x0)
lseek$auto(0x3, 0x7ffffffffffffffb, 0x1)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1)
madvise$auto(0x0, 0x2003f2, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/pagemap\x00', 0x141980, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf250200000000000500ffff009c"], 0xffffffffffffffc7}, 0x1, 0x0, 0x0, 0x20040cc4}, 0x4004450)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0xa0740, 0x0)
pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001)

2m18.011436317s ago: executing program 5 (id=1362):
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081)
pkey_free$auto(0xfffffffd)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)={0x2, 0x80, 0x10001, 0x5, &(0x7f0000000000), 0x9, 0x3, 0x2, @stream_id=0x2, 0x7, 0x476, 0x0})
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x10, 0x2, 0x4)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), r1)
writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f00000000c0)="408b7c9edf7df40c2ae50378b259618ff7c59839640ef221285d4284f8b56fffad4be9b4b28f443ec87df8ab1f33b8db2e", 0x202}, 0x9)
lstat$auto(0x0, &(0x7f0000000180)={0xbf, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x9, 0x200, 0x800000000100002, 0x40000407, 0x2, 0xc, 0x3, 0x19, 0x20000000009, 0x200000000007})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x20, 0x0)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto(0x3, 0x541a, r2)

2m17.723154848s ago: executing program 5 (id=1363):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
read$auto(0x3, 0x0, 0x8080)
r1 = socket(0xa, 0x1, 0x100)
set_mempolicy$auto(0x1, &(0x7f0000000000)=0x4, 0x21)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
process_mrelease$auto(0xffffffffffffffff, 0xa)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="fbffffff", @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf25280000000500880009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c040)
mmap$auto(0x200, 0x4020007, 0x9, 0x100000000001ff, 0xffffffffffffffff, 0x8000)
getresgid$auto(&(0x7f00000001c0)=0xffff, &(0x7f00000000c0)=0x6, 0x0)
write$auto(0x3, 0x0, 0x100082)
connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x3fff}, 0x54)
mmap$auto(0x0, 0x8, 0x2, 0x9b75, 0x5, 0x0)
socketpair$auto(0x4000001e, 0x2d2c, 0xb30, 0x0)
r2 = socket(0x1f, 0x3, 0x2)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x8)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00')
ioctl$auto(r3, 0x8004b709, 0x1)
setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x8)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x2000000008000)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x20, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty18\x00', 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto(0x3, 0x5457, r4)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0xa7a, 0x9, &(0x7f0000000200)={0x9, 0xb})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x82783, 0x0)

2m15.934596848s ago: executing program 5 (id=1367):
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081)
pkey_free$auto(0xfffffffd)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)={0x2, 0x80, 0x10001, 0x5, &(0x7f0000000000), 0x9, 0x3, 0x2, @stream_id=0x2, 0x7, 0x476, 0x0})
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x10, 0x2, 0x4)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), r1)
writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f00000000c0)="408b7c9edf7df40c2ae50378b259618ff7c59839640ef221285d4284f8b56fffad4be9b4b28f443ec87df8ab1f33b8db2e", 0x202}, 0x9)
lstat$auto(0x0, &(0x7f0000000180)={0xbf, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x9, 0x200, 0x800000000100002, 0x40000407, 0x2, 0xc, 0x3, 0x19, 0x20000000009, 0x200000000007})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x20, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty19\x00', 0x40001, 0x0)
ioctl$auto(0x3, 0x541a, r2)

2m15.635364459s ago: executing program 5 (id=1370):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22641, 0x0)
lseek$auto(0x3, 0x2, 0x4)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
write$auto(0x3, 0x0, 0xfffffdef)
getsockopt$auto_SO_DONTROUTE(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000140)='$/&}-#)f-&D)[,\x00', &(0x7f0000000180)=0x3)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/028/001\x00', 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x40d81, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
socket(0x10, 0x2, 0x4)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6)

2m15.260875199s ago: executing program 5 (id=1372):
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000400"/17, 0x11)
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
r1 = open(&(0x7f0000000540)='./cgroup\x00', 0x80, 0x310)
fcntl$auto(0x3, 0x8, 0x0)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/7u\x00', 0x14340, 0x0)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$auto_VHOST_SET_FEATURES(r2, 0x8008af83, &(0x7f0000000140)=0x8000000000007)
mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0)
pread64$auto(r1, &(0x7f0000000400)='nlctrl\x00', 0x8000000000000001, 0x40000000004)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
r5 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}})
io_uring_enter$auto(r5, 0x9, 0x820e, 0x8b, 0x0, 0x18)
ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x102, 0xa8, 0x8, 0x6, 0x0})
r6 = socket(0xa, 0x1, 0x84)
setsockopt$auto(r6, 0x10000000084, 0xd, 0x0, 0x8)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, 0x0)
read$auto(r3, 0x0, 0x1)
r7 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x40002, 0x0)
pwrite64$auto(r7, 0x0, 0xa, 0x1)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x2300c0, 0x0)

2m14.127671942s ago: executing program 5 (id=1376):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
acct$auto(&(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc')
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
fallocate$auto(r0, 0x1, 0x820, 0x7fff)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28b42, 0x0)
writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000280)="8e8873b5f9dd39182ab801a9e417130ff346eab3d41f954d458b276ffab4f6d5b23e17c1", 0x7115}, 0x8)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
memfd_secret$auto(0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
bpf$auto(0x8, &(0x7f0000000280)=@bpf_attr_7={@btf_id=0x2, 0x6, 0x40000023, <r3=>0xffffffffffffffff}, 0x96)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, 0x0, 0x100000a3d9)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
r4 = socket(0x15, 0x5, 0x0)
write$auto(r4, 0x0, 0x8)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
r6 = setfsuid$auto(0x0)
r7 = setfsuid$auto(0xee01)
setresuid$auto(r6, r7, r6)
r8 = clone3$auto(&(0x7f0000000440)={0x2, 0xffffffffffffffff, 0x9, 0x0, 0xfffffffffffffffa, 0x8, 0x5, 0x4, 0xec1, 0x5, 0x100000001}, 0x6)
r9 = fcntl$getown(r3, 0x9)
sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r4, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r5, @ANYBLOB="100025bd7000fbdbdf259c000000b0017d8008000b007f0000013f00e780d6538cb54d12787683e633a2ecaf38ea95f9de2f84d9bc24032bfdc6bafb577575591de7dfe70c69856d7cdf7c8b3c1060ffb7e28ab92e0400628000620127800400698031280121daf2d12c21a0d711dc18db7e14dcbc7aa0975dc0088edc28039611b708000900", @ANYRES32=r7, @ANYBLOB="04006b800800ba00", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="040015000c00be00b97ba40300000000050013010300000068004e01729404d4736fd4cc2e17a3cb65c6dd531fd42e37bc0addda50b2bc682ad540f98104646038d6200e5fa0c8f8294138bc71efb4e2e381258bf4a3ab3db49a72efe1be9fc6dd416b5cbabbd97127075cfe7080d4d339aff4116926254b8584dba8f0af920c0400bf00"], 0x264}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/sound/ctl-led/speaker/card2/reset\x00', 0xa001, 0x0)
write$auto(r10, &(0x7f0000000140)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d\xbcs!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85C /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\x9bA\xac\x9c\x8e\r(\x1d\x98\x84\x98\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)

1m59.069619788s ago: executing program 34 (id=1376):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
acct$auto(&(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc')
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
fallocate$auto(r0, 0x1, 0x820, 0x7fff)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28b42, 0x0)
writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000280)="8e8873b5f9dd39182ab801a9e417130ff346eab3d41f954d458b276ffab4f6d5b23e17c1", 0x7115}, 0x8)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
memfd_secret$auto(0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
bpf$auto(0x8, &(0x7f0000000280)=@bpf_attr_7={@btf_id=0x2, 0x6, 0x40000023, <r3=>0xffffffffffffffff}, 0x96)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, 0x0, 0x100000a3d9)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
r4 = socket(0x15, 0x5, 0x0)
write$auto(r4, 0x0, 0x8)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
r6 = setfsuid$auto(0x0)
r7 = setfsuid$auto(0xee01)
setresuid$auto(r6, r7, r6)
r8 = clone3$auto(&(0x7f0000000440)={0x2, 0xffffffffffffffff, 0x9, 0x0, 0xfffffffffffffffa, 0x8, 0x5, 0x4, 0xec1, 0x5, 0x100000001}, 0x6)
r9 = fcntl$getown(r3, 0x9)
sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r4, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r5, @ANYBLOB="100025bd7000fbdbdf259c000000b0017d8008000b007f0000013f00e780d6538cb54d12787683e633a2ecaf38ea95f9de2f84d9bc24032bfdc6bafb577575591de7dfe70c69856d7cdf7c8b3c1060ffb7e28ab92e0400628000620127800400698031280121daf2d12c21a0d711dc18db7e14dcbc7aa0975dc0088edc28039611b708000900", @ANYRES32=r7, @ANYBLOB="04006b800800ba00", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="040015000c00be00b97ba40300000000050013010300000068004e01729404d4736fd4cc2e17a3cb65c6dd531fd42e37bc0addda50b2bc682ad540f98104646038d6200e5fa0c8f8294138bc71efb4e2e381258bf4a3ab3db49a72efe1be9fc6dd416b5cbabbd97127075cfe7080d4d339aff4116926254b8584dba8f0af920c0400bf00"], 0x264}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/sound/ctl-led/speaker/card2/reset\x00', 0xa001, 0x0)
write$auto(r10, &(0x7f0000000140)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d\xbcs!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85C /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\x9bA\xac\x9c\x8e\r(\x1d\x98\x84\x98\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)

1m49.498693125s ago: executing program 6 (id=1436):
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r0, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r0, 0x4, 0x6, 0x101, 0x1, <r1=>r0}, 0x6f3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto_tty_fops_tty_io(r1, &(0x7f0000000100)="bdcbae2e62a516dbaf53b74873919586a791fc16e1249ae9d4e2bc5ff44e330ef092dfbb4ccafa11dc65eeb9d86c844b261618357477743fa4fc555fc59229259777ec846439492539ac5e5cb76c528f8bc73a7aca9c82c46cdea12cf86239d7bf7ec7bd303d20cf8eceba8e176b0d266e67db", 0x73)
close_range$auto(0x2, 0x8, 0x0)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0)
close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2)
msgrcv$auto(0x8, 0x0, 0x1, 0x10000040000007fc, 0x8001)
openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/encoder-0/bridges\x00', 0x8040, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x5c006, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0)
ioctl$auto(r2, 0x1274, r2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x400008, 0x10001, 0x9b72, 0x2, 0x8000)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000180)=""/159, 0x9f)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0)
write$auto(r3, &(0x7f0000000340)='%]{\fZ', 0xffffffff)

1m47.601600108s ago: executing program 6 (id=1455):
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1c\x00', 0xa00, 0x0)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/version\x00', 0x400000, 0x0)
write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000140)="85d32867a50b170ecac684dc2f218b1964feeec49f1b35328acb140ad2a39c2adaf7d6fd0ca2dd39cb3e38af9c022841db97aee06e9f33b9afe50e0bc65fa9a6a725551a38a709224c421ef3b03c99903c4914184d1d0664138f51fb70a11c50fabef2cff63c8f75612caee060e6f44fdc2c1be5155fdf44ad6bf124572d4cdac7fbcb", 0x83)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/smbd_keep_alive_interval\x00', 0x1cb842, 0x0)
openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x444843, 0x0)
write$auto(r1, 0x0, 0x6)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0xffffffffffffffff, 0x8001)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r2 = prctl$auto(0xf, 0x0, 0x0, 0x4a3ae117, 0x800000000007)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r2, @ANYBLOB="000336bd7000fedbdfc3cd8cb2"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, r4, 0x1b, 0x70bd26, 0x25dfcbfc, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x11, 0x0, 0x1, [@nested={0x10, 0xf2, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xffffffffffffffff}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044}, 0xc800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="7201f084fc6b03874338ffc029572710191b61056fd79d", @ANYRESHEX=r2], 0x1ac}}, 0x800)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r5 = socket(0xa, 0x5, 0x84)
setsockopt$auto(r5, 0x10000000084, 0x20, 0x0, 0x7)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
getgroups$auto(0x7fd, 0x0)
r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0)
ioctl$auto_RTC_ALM_SET(r6, 0x40247007, &(0x7f00000000c0)={0x5, 0xfe8, 0xa, 0xa, 0xb828, 0x66, 0x7, 0x2, 0xfff})
r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0)
r8 = getpid()
fstat$auto(0xffffffffffffffff, &(0x7f0000001a40)={0x2, 0x3, 0xfffffffffffffffd, 0xfffffffe, 0x3, 0x0, 0x0, 0x6, 0x5, 0x7, 0x3, 0x400, 0x7ff, 0xffffffff80000000, 0x7, 0x7ff, 0x4000001})
r9 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
ioctl$auto(r9, 0x6, 0xffffffffffffffff)
process_vm_readv$auto(r8, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000580)={{@inferred=r8, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x966, 0x3, @inferred=r8, @integer={0x800000000000400e, 0x82000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})

1m47.085361998s ago: executing program 6 (id=1458):
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x789002, 0x0)
pidfd_open$auto(0x1, 0x0)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0xbe6, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0)
mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0x0, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x8000000000000007}, 0x3)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x401}, 0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0)
r3 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r3, 0x65, 0x1, 0x0, 0x800)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a)
mount$auto(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfs\x00\x00X\xca\xd8\xce\xc1\xfc\x9f\x9f?o;\xf7\xdf\x9f\x11\xc5\xea\xd9', 0x8, 0x0)

1m46.62641597s ago: executing program 6 (id=1460):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
setsockopt$auto_SO_DEBUG(r0, 0x6, 0x1, &(0x7f0000000000)='$/&}-#)f-&D)[,\x00', 0xda3)
getsockopt$auto_SO_DONTROUTE(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000140)='$/&}-#)f-&D)[,\x00', &(0x7f0000000180)=0x3)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/028/001\x00', 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x40d81, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
socket(0x10, 0x2, 0x4)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6)

1m46.467843475s ago: executing program 6 (id=1462):
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000080), r0)
sendmsg$auto_ILA_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000d76fa80f9aeede93a295293b5acd2a2cbfd833e098a3d7530b93feab319be58974f1170f4db4f7366e9fcf76ce8b9f279c107fa450c3fe1684c18183c837c8aa7991d191ff010000000000005f73e932faa2987f431c6a463cbc0d5cfe9867ec7e13f6ff93cf1885cbcce8db765959a090", @ANYRES16=r1, @ANYBLOB="09002dbd7000fbdbdf25030000000500080005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20048840)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0x8048ae66, 0x10000000000402)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x4)
clone3$auto(&(0x7f0000000000)={0x8, 0x5, 0x7, 0x2, 0x1, 0x86, 0x8, 0xb, 0x9, 0x402, 0xcb6}, 0xa7)
ioctl$auto_USB_RAW_IOCTL_EP0_READ(0xffffffffffffffff, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5})
socket(0x2, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/nbd6/hctx0/tags_bitmap\x00', 0x60000, 0x0)
read$auto(r3, 0x0, 0x3)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/uprobe/perf_event_mux_interval_ms\x00', 0x121102, 0x0)
write$auto(r4, 0x0, 0x800000)
listen$auto(0x3, 0x83)
accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0)

1m46.121121755s ago: executing program 6 (id=1464):
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r0, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r0, 0x4, 0x6, 0x101, 0x1, <r1=>r0}, 0x6f3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto_tty_fops_tty_io(r1, &(0x7f0000000100)="bdcbae2e62a516dbaf53b74873919586a791fc16e1249ae9d4e2bc5ff44e330ef092dfbb4ccafa11dc65eeb9d86c844b261618357477743fa4fc555fc59229259777ec846439492539ac5e5cb76c528f8bc73a7aca9c82c46cdea12cf86239d7bf7ec7bd303d20cf8eceba8e176b0d266e67db", 0x73)
close_range$auto(0x2, 0x8, 0x0)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0)
close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2)
msgrcv$auto(0x8, 0x0, 0x1, 0x10000040000007fc, 0x8001)
openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/encoder-0/bridges\x00', 0x8040, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x5c006, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0)
ioctl$auto(r2, 0x1274, r2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x400008, 0x10001, 0x9b72, 0x2, 0x8000)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000180)=""/159, 0x9f)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0)
write$auto(r3, &(0x7f0000000340)='%]{\fZ', 0xffffffff)

1m36.614306309s ago: executing program 1 (id=1488):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x118)
r2 = open_by_handle_at$auto(r1, &(0x7f0000000140)={0x8fb1cb0b8c54d18d, 0x209, '\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x3f)
read$auto(r0, 0x0, 0x1f40)
r3 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x2)
r4 = openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x248e80, 0x0)
setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6})
close_range$auto(0x2, 0xa, 0x0)
r5 = socket(0xa, 0x2, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r6, r7, 0x4, 0x1ff, r5, @relative_fd, 0xe600}, 0xf)
io_submit$auto(0x8000000000000001, 0x8, 0x0)
writev$auto(r2, &(0x7f0000000100)={&(0x7f0000000240)="8a5cf7dd164573fd0bf5eeb7bc46b5c01c5f274ed0c28a77957cbc98bdb6f6d923c60429e907f7c69244b6f0cdc9914b699960af2682ebe54fa0fc8aa7b75f6e83435bd61187af0d1606ff206648d4705dba35c823716efb6d26842079621fa4a23924eee76ecb3dec4aa12c4ca4db105d1bc452846d8268d0f6e235eb92f2de668267b2c346c513a8b67ad8e766417acfc306826d37bc423f96b2e2f1ff74f2a6a094525c9e6c8170d10957650f3b4fa52d873c7e533f07d7acb0", 0x7}, 0x7f)
copy_file_range$auto(r4, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x4)
r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x100, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r8, 0x40045702, &(0x7f0000000080)=0x1fd)

1m36.437479705s ago: executing program 1 (id=1489):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
set_mempolicy$auto(0x6, 0x0, 0x21)
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x182, 0x70)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
bpf$auto(0x9, &(0x7f0000000a40)=@prog_bind_map={r2, r1, 0x2f}, 0x121)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x405b)
sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00', @ANYRES16=0x0, @ANYBLOB="110b27bd7000ffdbdf250900000800"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1000)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x6, 0xffffffffffffffff, 0x80000001, "7800000000df9f6e5f00", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x2}, 0x7)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000300)={0x5, 0x0, {0x6, @btrfs_balance_args_1_1={0x101, 0x4}, 0xffffffffffff0c3d, 0x8, 0x7c, 0x8, 0x5, 0x3, 0x1, @limit=0x8, 0x5f6b, 0xd}, {0x37, @usage=0xfffffffffffffffb, 0x8, 0x30000, 0x5, 0x4, 0x0, 0x8, 0x9, @limit=0x3, 0x0, 0x4}, {0x3, @btrfs_balance_args_1_1={0x3, 0x7}, 0x9, 0x8000000000000000, 0x9, 0x7, 0xd9e, 0xfffffffffffffffb, 0x8, @limit=0x7c, 0x5, 0x80000001}, {0x6, 0x4, 0x31}})
writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xa)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_expire_count\x00', 0xa0440, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)=""/64, 0x40)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
io_setup$auto(0xffff, &(0x7f0000000580))

1m34.220268885s ago: executing program 1 (id=1494):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x40201, 0x0)
socket(0x2c, 0x3, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x400)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x101202, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0)
r2 = prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x10, 0x0, 0x8, 0x0, 0x1, 0x10}, 0x801}, 0x5, 0x4048)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x5}, 0xa)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, r2, 0x300000000000)
bpf$auto(0x0, &(0x7f0000000440)=@bpf_attr_5={@target_fd=r1, 0xffffffffffffffff, 0x2, 0x7, r2, @relative_id=0x5, 0xc}, 0xf)
mknod$auto(&(0x7f0000000000)='./file0\x00', 0x7f, 0x6)
move_mount$auto(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x6)
bpf$auto(0x1a, 0x0, 0x96)
open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1, 0x948d, 0x1fc, 0x15f4da07, 0x3, 0x8002, 0x65, 0x8000001d, 0x1000, 0x100000000006d3f, 0x9, 0x1, 0x8]}, 0x0)
select$auto(0x9, &(0x7f00000000c0)={[0xeed9, 0x7, 0x6, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x0, 0x3, 0x4304, 0x1, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb})
msync$auto(0x7, 0x4, 0x8)
listen$auto(0x3, 0x81)

1m33.13886888s ago: executing program 1 (id=1497):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket(0x11, 0xa, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
r1 = socket(0x18, 0x5, 0x1)
connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x32)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x8800, 0x0)
socket(0xa, 0x2, 0x0)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082)
write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef)

1m32.831147255s ago: executing program 1 (id=1498):
r0 = syz_open_procfs$namespace(0x0, 0x0)
r1 = fcntl$auto(r0, 0x402, 0xffffffffffffffff)
getpid()
r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x8c80, 0x0)
read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000100)=""/237, 0xed)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb4, r1, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r4 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000002c0), 0x8040, 0x0)
epoll_create$auto(0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r5)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x880)
sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040026bd7000fedbdf25280000000800090000000008080005e306000000050003000100000008000900050000000800060800000000080006836f294d5d3d1b24c087e5967d188fb391ce19b8b431df1d4284b1262f31dede733cfaca210f6d79e83250c691a5fc17b56dc95c4dd516a593933bea26f6e5fd74f699518dabf83e7b06e28bb323ab9e41020000005738f0d9d84348d740c7d1de6f06d9c7527d000004"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r4, @ANYRES16, @ANYBLOB="bc6076310296a387df2501000000080002"], 0x34}, 0x1, 0x300, 0x0, 0x801}, 0x0)
sendmsg$auto_GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)
close_range$auto(0x0, r3, 0x4)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/usb/usbmon/21t\x00', 0x20100, 0x0)
r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0)
r8 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES8=r7], 0x18}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x2004c802)
write$auto(r8, &(0x7f0000000000)='-\x00', 0xfdef)
eventfd$auto(0x3)
select$auto(0x3, &(0x7f0000000440)={[0x5, 0x3, 0x1000, 0xdf, 0x8, 0x7, 0x10001, 0x8, 0x438c82bf, 0x4, 0x0, 0x4, 0x788, 0x6, 0x5, 0x8]}, 0x0, 0x0, 0x0)

1m31.98677398s ago: executing program 1 (id=1501):
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1c\x00', 0xa00, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/version\x00', 0x400000, 0x0)
write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000140)="85d32867a50b170ecac684dc2f218b1964feeec49f1b35328acb140ad2a39c2adaf7d6fd0ca2dd39cb3e38af9c022841db97aee06e9f33b9afe50e0bc65fa9a6a725551a38a709224c421ef3b03c99903c4914184d1d0664138f51fb70a11c50fabef2cff63c8f75612caee060e6f44fdc2c1be5155fdf44ad6bf124572d4cdac7fbcb", 0x83)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
prctl$auto(0xf, 0x0, 0x0, 0x4a3ae117, 0x800000000007)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
getgroups$auto(0x7fd, 0x0)
connect$auto(r0, &(0x7f0000000040)=@isdn={0x22, 0x28, 0x4, 0x2, 0x2}, 0x103)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
socket(0x10, 0x2, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000080)=':}\'*,\x00', &(0x7f00000000c0)=0xffffff89)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
memfd_create$auto(0x0, 0xe)
r3 = socket(0x2b, 0x1, 0x1)
getsockopt$auto(r3, 0x1, 0x81, 0x0, 0x0)
setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0xc0, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)='\x00', 0x1)

1m30.507975511s ago: executing program 35 (id=1464):
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r0, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r0, 0x4, 0x6, 0x101, 0x1, <r1=>r0}, 0x6f3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto_tty_fops_tty_io(r1, &(0x7f0000000100)="bdcbae2e62a516dbaf53b74873919586a791fc16e1249ae9d4e2bc5ff44e330ef092dfbb4ccafa11dc65eeb9d86c844b261618357477743fa4fc555fc59229259777ec846439492539ac5e5cb76c528f8bc73a7aca9c82c46cdea12cf86239d7bf7ec7bd303d20cf8eceba8e176b0d266e67db", 0x73)
close_range$auto(0x2, 0x8, 0x0)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0)
close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2)
msgrcv$auto(0x8, 0x0, 0x1, 0x10000040000007fc, 0x8001)
openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/encoder-0/bridges\x00', 0x8040, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x5c006, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0)
ioctl$auto(r2, 0x1274, r2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x400008, 0x10001, 0x9b72, 0x2, 0x8000)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000180)=""/159, 0x9f)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0)
write$auto(r3, &(0x7f0000000340)='%]{\fZ', 0xffffffff)

1m16.716770294s ago: executing program 36 (id=1501):
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1c\x00', 0xa00, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/version\x00', 0x400000, 0x0)
write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000140)="85d32867a50b170ecac684dc2f218b1964feeec49f1b35328acb140ad2a39c2adaf7d6fd0ca2dd39cb3e38af9c022841db97aee06e9f33b9afe50e0bc65fa9a6a725551a38a709224c421ef3b03c99903c4914184d1d0664138f51fb70a11c50fabef2cff63c8f75612caee060e6f44fdc2c1be5155fdf44ad6bf124572d4cdac7fbcb", 0x83)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
prctl$auto(0xf, 0x0, 0x0, 0x4a3ae117, 0x800000000007)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
getgroups$auto(0x7fd, 0x0)
connect$auto(r0, &(0x7f0000000040)=@isdn={0x22, 0x28, 0x4, 0x2, 0x2}, 0x103)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
socket(0x10, 0x2, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000080)=':}\'*,\x00', &(0x7f00000000c0)=0xffffff89)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
memfd_create$auto(0x0, 0xe)
r3 = socket(0x2b, 0x1, 0x1)
getsockopt$auto(r3, 0x1, 0x81, 0x0, 0x0)
setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0xc0, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)='\x00', 0x1)

1m12.230541843s ago: executing program 4 (id=1550):
mmap$auto(0x800000, 0x202000b, 0x4, 0x18, 0xfffffffffffffffa, 0x80000000)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8)
sysfs$auto(0x2, 0x23, 0x0)
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, 0x0, 0x3)
r1 = prctl$auto(0x3e, 0x3, 0x0, 0xb20, 0x0)
mlock$auto(0xffc, 0xde7f)
mmap$auto(0x1, 0x3, 0x10000000000e6, 0xebc, 0x8000000401, 0x0)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$auto_VHOST_SET_FEATURES(r2, 0x8008af83, &(0x7f0000000140)=0xea)
r3 = io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r4 = gettid()
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
kill$auto(r4, 0x11)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1ff, 0x20000000)
swapon$auto(&(0x7f0000000000)='\xeb\x00', 0x1000)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
lseek$auto(0x3, 0x20000, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000)
close_range$auto(0x2, r0, 0xfffffffa)
socket(0x2, 0x1, 0x106)
setsockopt$auto(r3, 0x1, 0x100000d, &(0x7f0000000200)='lp\x00h\x85M\xdf\\\x83\x8a\xa7\xe4]U(\x01\t?\x1e\x00\x00\x8b\x9e\x1d\x12WPNu\xb6\xb7@l\xc0\xc2\xb0\x9a\x06>\x17\x1c\xb8\xf22v\xa9\n\x00\x00\x00\x05j\xaa?ZR\x84\xc1\xfa^,],\xbd?\xd7\fi\x91\x1d\x91A\'\xb6&\x92\xac>\x9d5<\x04\x9e\xc9^\xc8\xd8\x04U\xcbf\x95m\xc9A\x92S\xed\x86\xfb-\xe8\a%\xf1Mu\xda\xb3\xd5\x1aQ\x1e\xde\x95k\xb0\x80\xbe\xa5\xcf\xa5\xa2\x18\x8e]\xf9\x80\x15/,\x9b\xafuq!\xfa\x05\x91\xd8oVh\x97\x97A\xdbK\xb5\xf7\xfa\xd0\xce3\x8e\xb2Y>P\x9b\xbe`\x93cc\xf0\x84\x12\xdb\x9f\xa0\xd5(\xa9\xde\xaf\xc8\xca\xf6\xfeW\xfe\x00\x00\x00\xaf\x95\xd7\x81c)\xde#+\xf4~b\x1d\xf5;\x9c\x15\x93\xbb\xbb\x1e_\x19\xf4\x1c', 0x3)
r5 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
ioctl$auto_TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000001c0)=0x18000)

1m10.411552046s ago: executing program 4 (id=1555):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket(0x11, 0xa, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
r1 = socket(0x18, 0x5, 0x1)
connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x32)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x8800, 0x0)
socket(0xa, 0x2, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082)
write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef)

1m9.471130389s ago: executing program 4 (id=1557):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4b2302, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101901, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x9d4, 0x6, 0x2, 0x17, r0, 0x7fffffff)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000280)='\t', 0x1)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/libceph/parameters/supported_features\x00', 0x40000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000003940)=""/4119, 0x1017)
setrlimit$auto(0x1000000007, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
getsockopt$auto(r3, 0x1, 0x5, 0xfffffffffffffffc, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x4, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
fcntl$auto_F_OFD_SETLKW(r4, 0x26, 0x1298)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.0/usb9/9-0:1.0/usb9-port6/connect_type\x00', 0x4a400, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x1, 0x0)
r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r6, &(0x7f0000000180)="976f29bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cda1b9fb125fbc752544c11d1640e59f86de019c613761b5d384219a3f53e519954888ce5cf54846c8e07", 0x7f)

1m8.328061653s ago: executing program 4 (id=1561):
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280001, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rxrpc/calls\x00', 0x40280, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
bind$auto(r0, 0x0, 0x13)
socket(0xa, 0x3, 0x100)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x2dc400, 0x0)
mmap$auto(0x100000000000000, 0xb7, 0x3, 0x16, r1, 0x7ffe)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
write$auto(0x3, 0x0, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe)
prctl$auto(0x7, 0x637b, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_generic(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kmsg\x00', 0xc2b17ef8abf7b7fb, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0)
select$auto(0xf, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0x5, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x400, 0x40000000000003, 0x462, 0x7ffffffd, 0x50a7, 0x6d3f, 0x5, 0x19, 0xfffffffffffffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x20a, 0x6, 0xfffffffffffffff6, 0x7, 0x9, 0x0, 0x6, 0x3, 0xfffffffffffffffe, 0x400000000000f]}, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0)
futex_wake$auto(0x0, 0x5, 0x4, 0xa)
mmap$auto(0x9, 0x2020003, 0x7, 0x100009000000ebe, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
creat$auto(0x0, 0x3ff)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0)
open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80a40, 0x9e)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

1m6.015571976s ago: executing program 4 (id=1569):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/028/001\x00', 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x40d81, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
socket(0x10, 0x2, 0x4)
bpf$auto(0x6, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x10004, 0x0, 0x3d, 0x106, 0x0, 0x0, 0xfff, 0x800, 0x9, 0x0, 0x4, 0x7, 0x9, 0xfffeffff}, 0x1)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6)

1m5.374186143s ago: executing program 4 (id=1571):
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1c\x00', 0xa00, 0x0)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/version\x00', 0x400000, 0x0)
write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000140)="85d32867a50b170ecac684dc2f218b1964feeec49f1b35328acb140ad2a39c2adaf7d6fd0ca2dd39cb3e38af9c022841db97aee06e9f33b9afe50e0bc65fa9a6a725551a38a709224c421ef3b03c99903c4914184d1d0664138f51fb70a11c50fabef2cff63c8f75612caee060e6f44fdc2c1be5155fdf44ad6bf124572d4cdac7fbcb", 0x83)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0xf, 0x0, 0x0, 0x4a3ae117, 0x800000000007)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x1e, 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x200, 0x1)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x2c, 0x3, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x101202, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
r2 = prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0)
r3 = prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x10, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4048)
capset$auto(&(0x7f0000000340)={0x39, <r4=>0x0}, &(0x7f0000000380)={0xfff, 0x7, 0x2})
ioctl$auto_XFS_IOC_FREESP(r2, 0x4030580b, &(0x7f00000003c0)={0x7, 0x1ff, 0x8000, 0x1, 0xd, <r5=>0xffffffffffffffff})
sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r1, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf25990000001c00e700c349e6a574c8ec9255b4c3a52de5bcb37c8d35d8382d3a4d0500e4007f0000000400d800ea017a80c5c136fe4a33f75c807cdf7abe5c7a85a82dd59d87a0e4fa1a78e65f502c004a8004001d800400f7808c663e167c24f83da1510cc5203c48aa040039000400378004004b8004005d8014009b80040011800400028008009c00", @ANYRES32=r3, @ANYBLOB="080058000600000014007000ff02000000000000000000000000000138de37be39fd5524a5a61c2996ed8b4c25f009635cfa3ae26b4c72ed6b4ba64ea005f5b7f6b9b7d960674916d0afcb1955bbe7e9745142917cf379a6c23bbf018d66a71bb5381690523247fe26d302a9a50f236002ea832a4b27274420be74a1b5edf29d842b7054e58adf69ec9656e971ee93b52343597c0574d87ead37333ef3245ce46f2cc54afc51d97a62da2df4f656890f336f127628b0d7af4df373c04f30a0e7ec61f533bfbfab3d82e2a5ca5c17897e32cabe726f5d1ee7870212379896bf62c0cf8c324c7648a9551accbbd6a03073f15a645d244f4ffafa4a5ddd64cc4bd4611449ca1308005700", @ANYRES32=r4, @ANYBLOB="79002f80", @ANYRES32=r5, @ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x4001}, 0x804)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0)
writev$auto(r6, 0x0, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)

51.574996242s ago: executing program 3 (id=1623):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/028/001\x00', 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x40d81, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
socket(0x10, 0x2, 0x4)
bpf$auto(0x6, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x10004, 0x0, 0x3d, 0x106, 0x0, 0x0, 0xfff, 0x800, 0x9, 0x0, 0x4, 0x7, 0x9, 0xfffeffff}, 0x1)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6)

51.317138401s ago: executing program 3 (id=1624):
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1c\x00', 0xa00, 0x0)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/version\x00', 0x400000, 0x0)
write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000140)="85d32867a50b170ecac684dc2f218b1964feeec49f1b35328acb140ad2a39c2adaf7d6fd0ca2dd39cb3e38af9c022841db97aee06e9f33b9afe50e0bc65fa9a6a725551a38a709224c421ef3b03c99903c4914184d1d0664138f51fb70a11c50fabef2cff63c8f75612caee060e6f44fdc2c1be5155fdf44ad6bf124572d4cdac7fbcb", 0x83)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0xf, 0x0, 0x0, 0x4a3ae117, 0x800000000007)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r3, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
keyctl$auto_KEYCTL_CAPABILITIES(0x1f, 0x3, 0x7, 0x7, 0xbe9)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x0)

49.943806151s ago: executing program 37 (id=1571):
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1c\x00', 0xa00, 0x0)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/version\x00', 0x400000, 0x0)
write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000140)="85d32867a50b170ecac684dc2f218b1964feeec49f1b35328acb140ad2a39c2adaf7d6fd0ca2dd39cb3e38af9c022841db97aee06e9f33b9afe50e0bc65fa9a6a725551a38a709224c421ef3b03c99903c4914184d1d0664138f51fb70a11c50fabef2cff63c8f75612caee060e6f44fdc2c1be5155fdf44ad6bf124572d4cdac7fbcb", 0x83)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0xf, 0x0, 0x0, 0x4a3ae117, 0x800000000007)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x1e, 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x200, 0x1)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x2c, 0x3, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x101202, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
r2 = prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0)
r3 = prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x10, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4048)
capset$auto(&(0x7f0000000340)={0x39, <r4=>0x0}, &(0x7f0000000380)={0xfff, 0x7, 0x2})
ioctl$auto_XFS_IOC_FREESP(r2, 0x4030580b, &(0x7f00000003c0)={0x7, 0x1ff, 0x8000, 0x1, 0xd, <r5=>0xffffffffffffffff})
sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r1, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf25990000001c00e700c349e6a574c8ec9255b4c3a52de5bcb37c8d35d8382d3a4d0500e4007f0000000400d800ea017a80c5c136fe4a33f75c807cdf7abe5c7a85a82dd59d87a0e4fa1a78e65f502c004a8004001d800400f7808c663e167c24f83da1510cc5203c48aa040039000400378004004b8004005d8014009b80040011800400028008009c00", @ANYRES32=r3, @ANYBLOB="080058000600000014007000ff02000000000000000000000000000138de37be39fd5524a5a61c2996ed8b4c25f009635cfa3ae26b4c72ed6b4ba64ea005f5b7f6b9b7d960674916d0afcb1955bbe7e9745142917cf379a6c23bbf018d66a71bb5381690523247fe26d302a9a50f236002ea832a4b27274420be74a1b5edf29d842b7054e58adf69ec9656e971ee93b52343597c0574d87ead37333ef3245ce46f2cc54afc51d97a62da2df4f656890f336f127628b0d7af4df373c04f30a0e7ec61f533bfbfab3d82e2a5ca5c17897e32cabe726f5d1ee7870212379896bf62c0cf8c324c7648a9551accbbd6a03073f15a645d244f4ffafa4a5ddd64cc4bd4611449ca1308005700", @ANYRES32=r4, @ANYBLOB="79002f80", @ANYRES32=r5, @ANYBLOB="040009804d4ab4c14a8315bd3aedca6455f8ff2923a717668846c7dbcb97d6dd60d621cbf411af17692dee0e1028901516c36bf85db1f180ce239fbe80390fd18089721f6da271414028b3bc8ffc0312db515388bff3d4b8c98a3eafe0798f6101000000000008000c010000000024000700bb24c143f8572248e6ec54be055d717bd3ead2d7f9397b652200002b4bbe6ab80400d800d600fa00c9ab68004c48eed31b99b0674e0cdfa5b6f5805a02f9978444ec13465a30f5e1c17d7659f030eaae41137912d930b924a9a966acf6a2605e73ce628c0521ddc90056e8b390658778ab8460dec158a721db07cc451cd98fab8fd5de59845f37f45d5c204bc19cf653c7768e86fc288a66e25ea744d9df2df67a120fdaf26bd98605e5452cf7fc3241b555165330e704b6cbb05e96e2dc61d5b4ae7f276dd066bbf17806d591e6cbbef37e33a03d66a72b334d10a1fe28c95dd7a22c0000000000000000000000000000000000000000080000000000000000000000007433de99456ecf8efe267100d3fcdf4e10247e9b82ecc9d22f8d05b6b36c03c17e4eae3e53bb024cfdd1f13a22a24927fa455ca31e"], 0x330}, 0x1, 0x0, 0x0, 0x4001}, 0x804)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0)
writev$auto(r6, 0x0, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)

48.040644616s ago: executing program 3 (id=1632):
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
r0 = socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
lstat$auto(0x0, &(0x7f0000000180)={0xb, 0x2, 0x100000001, 0x9, 0x0, 0x0, 0x0, 0xfa9a, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x8000000005, 0x0, 0x7, 0x4, 0x3})
semtimedop$auto(0x0, &(0x7f00000001c0)={0xb, 0x82, 0x1}, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x2a001, 0x0)
write$auto(r1, &(0x7f0000000040)='\xf3\xc1\xbf\xa0', 0x7)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_UPD_RXSC(0xffffffffffffffff, 0x0, 0x48010)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00)

47.528026356s ago: executing program 3 (id=1636):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0xa, 0x2, 0x88)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'team0\x00', <r4=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1, r2, @relative_id=0x13, 0xe600}, 0xf)
r5 = open(0x0, 0x221c2, 0x84)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xd, 0x40040000009, 0x63, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000000a, 0x0, 0x13, 0x9, 0xffffffff80000000, 0x2, 0x6, 0x400002})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc)
bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x7}, 0xc)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
timer_delete$auto(0x1)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8001)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x12b882, 0x0)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r8, 0x0, 0x20)
writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3)

45.778555523s ago: executing program 3 (id=1641):
socket(0x27, 0x2, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.12/usb34/power/wakeup_max_time_ms\x00', 0x44a700, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000010c0)=""/4090, 0xffa)
socket(0x2, 0x1, 0x106)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x4)
getpid()
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyud\x00', 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0xfffffffffffffffe, 0x948b, 0x3, 0x4, 0x3, 0x1000, 0x200000000000005e, 0x4000008000001f, 0x17, 0x6d3e, 0x0, 0x2, 0x8000000000820]}, 0x0)
write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x03\xa1\x19\x9a_\r\x00\x00X\xa6\x89L\x1e\x1b\x16/\xe8\xca\tL\xd9M\xf3_L\x00\x04\x00\x00\xa2\x00\x00', 0x101)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x23, 0x5, 0x0)
listen$auto(r3, 0x5ed)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop5\x00', 0x24040, 0x0)

44.357351764s ago: executing program 3 (id=1646):
unshare$auto(0x40000080) (async, rerun: 64)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) (rerun: 64)
pwrite64$auto(r0, &(0x7f0000000000)='/proc/sys/net/ipv6/coX\t/all/forwarding\x00', 0x4, 0x2) (async, rerun: 32)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64)
socket(0x2c, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20010800}, 0x24048004) (async)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x0, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async, rerun: 64)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64)
prctl$auto(0x1000000003b, 0x6, 0x0, 0x5, 0x3) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x802, 0x0) (async, rerun: 64)
r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/maps\x00', 0x40000, 0x0) (async, rerun: 64)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb72, 0x66a) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000020c0)=""/4093, 0xffd) (async, rerun: 64)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/writeback/max_active\x00', 0x1a2b02, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3) (async)
socketpair$auto(0x6, 0xffffffff, 0x6, 0x0) (async, rerun: 32)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) (rerun: 32)

28.882269826s ago: executing program 38 (id=1646):
unshare$auto(0x40000080) (async, rerun: 64)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) (rerun: 64)
pwrite64$auto(r0, &(0x7f0000000000)='/proc/sys/net/ipv6/coX\t/all/forwarding\x00', 0x4, 0x2) (async, rerun: 32)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64)
socket(0x2c, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20010800}, 0x24048004) (async)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x0, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async, rerun: 64)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64)
prctl$auto(0x1000000003b, 0x6, 0x0, 0x5, 0x3) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x802, 0x0) (async, rerun: 64)
r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/maps\x00', 0x40000, 0x0) (async, rerun: 64)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb72, 0x66a) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000020c0)=""/4093, 0xffd) (async, rerun: 64)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/writeback/max_active\x00', 0x1a2b02, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3) (async)
socketpair$auto(0x6, 0xffffffff, 0x6, 0x0) (async, rerun: 32)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) (rerun: 32)

11.228253255s ago: executing program 0 (id=1715):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x20, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty19\x00', 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto(0x3, 0x540b, r0)

10.690601979s ago: executing program 0 (id=1716):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
read$auto(0x3, 0x0, 0x8080)
socket(0xa, 0x1, 0x100)
set_mempolicy$auto(0x1, &(0x7f0000000000)=0x4, 0x21)
write$auto(0x3, 0x0, 0xffd8)
socket(0x11, 0x80003, 0x300)
r1 = socket(0x10, 0x2, 0x4)
io_uring_setup$auto(0x9, &(0x7f0000000000)={0xe4, 0x8, 0xfe, 0x6fb3, 0x8a, 0x4, 0xffffffffffffffff, [0x100, 0x9, 0xffff], {0x2, 0x7, 0x302d, 0xe, 0xf, 0x7, 0x7, 0x4, 0x4}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0x5, 0x9, 0x837}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
setresuid$auto(0x8, 0x8, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)

9.043818267s ago: executing program 0 (id=1723):
socket(0x27, 0x2, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.12/usb34/power/wakeup_max_time_ms\x00', 0x44a700, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000010c0)=""/4090, 0xffa)
socket(0x2, 0x1, 0x106)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x4)
getpid()
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyud\x00', 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0xfffffffffffffffe, 0x948b, 0x3, 0x4, 0x3, 0x1000, 0x200000000000005e, 0x4000008000001f, 0x17, 0x6d3e, 0x0, 0x2, 0x8000000000820]}, 0x0)
write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x03\xa1\x19\x9a_\r\x00\x00X\xa6\x89L\x1e\x1b\x16/\xe8\xca\tL\xd9M\xf3_L\x00\x04\x00\x00\xa2\x00\x00', 0x101)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)

7.305335499s ago: executing program 0 (id=1724):
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1c\x00', 0xa00, 0x0)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/version\x00', 0x400000, 0x0)
write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000140)="85d32867a50b170ecac684dc2f218b1964feeec49f1b35328acb140ad2a39c2adaf7d6fd0ca2dd39cb3e38af9c022841db97aee06e9f33b9afe50e0bc65fa9a6a725551a38a709224c421ef3b03c99903c4914184d1d0664138f51fb70a11c50fabef2cff63c8f75612caee060e6f44fdc2c1be5155fdf44ad6bf124572d4cdac7fbcb", 0x83)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0xf, 0x0, 0x0, 0x4a3ae117, 0x800000000007)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r3, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
keyctl$auto_KEYCTL_CAPABILITIES(0x1f, 0x3, 0x7, 0x7, 0xbe9)
ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4001af84, 0x0)
ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0)

7.281836171s ago: executing program 9 (id=1725):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x20, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty19\x00', 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto(0x3, 0x5411, r0)

6.845702466s ago: executing program 9 (id=1727):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
madvise$auto(0x1000, 0x400050, 0x9)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0xdb, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0)

6.54557016s ago: executing program 8 (id=1728):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
madvise$auto(0x1000, 0x400050, 0x9)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0xdb, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0)
write$auto(0x3, 0x0, 0x5c8)

6.482108539s ago: executing program 7 (id=1729):
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)

6.225888201s ago: executing program 7 (id=1730):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x9, 0x2, 0xb, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0)
ioctl$auto_TCFLSH2(r0, 0x80047437, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0x1, 0x5, 0x0)
bind$auto(0x3, 0x0, 0x6b)
connect$auto(0x3, 0x0, 0x6b)

5.731666506s ago: executing program 7 (id=1731):
r0 = socket(0x10, 0x3, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
r1 = socket(0x2d, 0x2, 0x0)
bind$auto(r1, &(0x7f0000000040)=@qipcrtr, 0x8)
sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000844}, 0x4) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) (async)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_freeze_timeout\x00', 0x200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/247, 0xe5) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r0)
r5 = getpgid(0x0)
r6 = setfsuid$auto(0xee00) (async)
r7 = setfsuid$auto(0xee01)
setresuid$auto(r6, r7, r6) (async)
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x278, r4, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x84, 0x1, 0x0, 0x1, [@nested={0x4, 0x9e}, @nested={0x1c, 0x109, 0x0, 0x1, [@nested={0x4, 0x11c}, @nested={0x4, 0x83}, @nested={0x4, 0x132}, @typed={0x4, 0x70}, @nested={0x4, 0x17}, @nested={0x4, 0x159}]}, @nested={0x5f, 0x28, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x26}, @generic="9d8a7f8bf217fe968f33a72770e417ecd8a1562d203b37716dcc676c2334e7f9e23627ded3f86c8ed62a05840721795e59d190a05650c4ccad713d", @typed={0x10, 0x128, 0x0, 0x0, @str='6/:]}][](}(\x00'}, @nested={0x4, 0xbe}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x16b, 0x1, 0x0, 0x1, [@nested={0xfb, 0xa2, 0x0, 0x1, [@nested={0x4, 0x133}, @typed={0x8, 0xb0, 0x0, 0x0, @uid=r7}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@remote}, @generic="be28ff860565346cd15164", @generic="326868803d9fd2f31dc73854c3f9a509feed38d703097afd149937b46ad3a88e0af6d31a75d1ddbfbf30098e83801bbaba6696193cb8a706cad877be6e0f709a76b475b1f9a23f5be311a6e8c7ec1d6170f6aad6eb86c679d364ddf921d997113733c6fcf87fc0916e500f7e64774683af8e28f6f6a4b4dc15bd68e3e7b2a507f45c24380c1ed01011d553784b3a4d9d534fa2cd4a637990edc89ecc7a598b98ba1a0a79cd48a64c72b73553ca3cd2250dc03493ae964276901286506c9236e7", @typed={0xc, 0x122, 0x0, 0x0, @str=',\xf9@}%,(\x00'}]}, @generic="134dfad798dfedc844147c1128de1fc0b2db185b28725920f24f5a47e700c49cb82489aeb57929405c44e8a88b20635fbc5ec0a05fcc480020ab60bac913f4028a9642c34aab603649312e0aa39b9969c2ef8d4b1002b352d7d6392806689eb5898c9db8e57fdd1f88efe3"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x74, 0x1, 0x0, 0x1, [@generic="c5c9d6fbfec96690e1b90279ca5667c7b9f78ad28335970be085e1cf78de2d67fc2eaf3b8c4a47f849b2dad7f99e6be44a74322102226bb69db38e7c8317dbe874da5ae3ad24cf8539602eb4f6dad24924a34701f6a7c5307adb2125b06b339280dfb5a4e4c2a3e2d59486d163228bcd"]}]}, 0x278}, 0x1, 0x0, 0x0, 0x80}, 0x80)

5.494366955s ago: executing program 8 (id=1732):
write$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffffff, &(0x7f0000000000)="706f3a82d9e5cc7c2ceda8d50bfc94be9fe6c22ffaf8493a38", 0x19)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1048)
r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TIPC_NL_MON_PEER_GET(r1, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x711, 0x70b52c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848)
read$auto_mISDN_fops_timerdev(0xffffffffffffffff, &(0x7f0000000080)=""/28, 0x1c)

5.353254446s ago: executing program 7 (id=1733):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x400000000001, 0x0) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81) (async, rerun: 64)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async, rerun: 64)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16) (async, rerun: 32)
mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0) (rerun: 32)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000080)=0x77) (async)
prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8)
mmap$auto(0x2, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x40002, 0x0) (async)
setrlimit$auto(0x9a, &(0x7f0000000240)={0x0, 0x10000})
r2 = socket(0xa, 0x2, 0x3a)
bind$auto(r2, &(0x7f0000000040)=@generic={0xa, "2c551d000019ff714e00"}, 0x66)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) (async)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) (async)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'veth0\x00'})
prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0)
r4 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0)
read$auto_proc_pid_cmdline_ops_base(r4, &(0x7f0000000040)=""/159, 0x9f) (async, rerun: 64)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/net/bonding_masters\x00', 0x82081, 0x0) (rerun: 64)

5.251220408s ago: executing program 9 (id=1734):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x1, 0x40000000001ff, 0x7, 0x3f, 0x7, 0x1ffe0, 0x7, 0x3, 0xd1, 0xd, 0x3, 0x6, 0x6, 0x8b4, 0x7, 0x4, 0x10003, 0x7, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x2, 0x7, 0x0, 0x0, 0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffeffe, 0xfffffffffffffffe, 0x2, 0x5, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x8, 0xd)
socket(0xa, 0x5, 0x84)
close_range$auto(0x2, 0x8, 0x0)
r2 = socketcall$auto(0x8000, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r2)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto(0x3, 0xae41, r4)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x101b00, 0x0)
ioctl$auto_RNDADDTOENTCNT2(r5, 0x40045201, 0x0)
unshare$auto(0x40000080)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff)
socket(0xa, 0x5, 0x0)
setsockopt$auto(0x3, 0x688, 0x40, 0x0, 0x100021)
getpid()
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0)
read$auto(r6, 0x0, 0x7)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3)
syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250100000004000480060003002a00000004000500080002000200000008000800", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x800)

5.251097002s ago: executing program 8 (id=1735):
socket(0x27, 0x2, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.12/usb34/power/wakeup_max_time_ms\x00', 0x44a700, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000010c0)=""/4090, 0xffa)
socket(0x2, 0x1, 0x106)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x4)
getpid()
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyud\x00', 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0xfffffffffffffffe, 0x948b, 0x3, 0x4, 0x3, 0x1000, 0x200000000000005e, 0x4000008000001f, 0x17, 0x6d3e, 0x0, 0x2, 0x8000000000820]}, 0x0)
write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x03\xa1\x19\x9a_\r\x00\x00X\xa6\x89L\x1e\x1b\x16/\xe8\xca\tL\xd9M\xf3_L\x00\x04\x00\x00\xa2\x00\x00', 0x101)
close_range$auto(0x2, 0x8, 0x0)

3.694144659s ago: executing program 9 (id=1736):
r0 = socket(0xa, 0x5, 0x0)
clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001)
prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x8001, 0x3, 0xa53, 0x4)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r2 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00)
read$auto(r2, 0x0, 0x0)
ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x5, 0x6, 0x80, 0x2c1d3ca, 0x4, 0x1, 0x1800000, 0x8})
r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r4, 0x6, 0x31, 0x0, 0x2)
ioctl$auto(r1, 0x4b72, r3)
r5 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/psaux\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000000)={r5, 0x3, 0x4}, 0xb, 0x7)
read$auto_tracing_stats_fops_trace(r3, &(0x7f0000000000)=""/140, 0x8c)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4)
r6 = syz_open_procfs$namespace(0x0, 0x0)
fcntl$auto(r6, 0x402, 0xffffffffffffffff)
getpid()
r7 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x8c80, 0x0)
read$auto_vhci_fops_hci_vhci(r7, &(0x7f0000000100)=""/237, 0xed)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000002c0), 0x8040, 0x0)
epoll_create$auto(0x8)

3.279876499s ago: executing program 8 (id=1737):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x20, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty19\x00', 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto(0x3, 0x541b, r0)

2.585189068s ago: executing program 9 (id=1738):
r0 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r1 = io_uring_setup$auto(0x1, 0x0)
setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3)
write$auto(r0, &(0x7f0000000000)='/dev/loop6\x00', 0x6)
write$auto_fops_init_pkru_pkeys(r1, &(0x7f0000000280), 0x0)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_prog_fd=r2, 0x4007, @old_prog_fd=0x13b}, 0xa3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)

2.226635799s ago: executing program 7 (id=1739):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0)
ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f0000000000)={r0, 0xf})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto(0x3, 0x540a, 0xffffffffffffffff)

2.217106895s ago: executing program 0 (id=1740):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
read$auto(0x3, 0x0, 0x8080)
socket(0xa, 0x1, 0x100)
socket(0x11, 0x80003, 0x300)
r1 = socket(0x10, 0x2, 0x4)
io_uring_setup$auto(0x9, &(0x7f0000000000)={0xe4, 0x8, 0xfe, 0x6fb3, 0x8a, 0x4, 0xffffffffffffffff, [0x100, 0x9, 0xffff], {0x2, 0x7, 0x302d, 0xe, 0xf, 0x7, 0x7, 0x4, 0x4}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0x5, 0x9, 0x837}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
setresuid$auto(0x8, 0x8, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)

2.184004256s ago: executing program 8 (id=1741):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/7, 0x7)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r2 = socket(0xa, 0x1, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000)
socket(0xa, 0x5, 0x1)
unshare$auto(0x40000080)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x5)
ioctl$auto_XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000540)={0x6, @inferred=r1, @raw=0xd, 0x3, 0x71, '\x00', {0xa8b, 0xfff9, 0x8, 0x0, 0x0, 0x81, 0x4, 0x6, {0x3f5f, 0x4be}, {}, {0x6}, 0xa, 0xce8, 0x8, 0x101, 0xffffffff, 0x6, 0x3, 0x5, 0x4, 0x0, '\x00', 0x101, 0x2, 0x6, 0x5b}})
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r5 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="1426c777", @ANYRES16=r5, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x14)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)

1.257761782s ago: executing program 9 (id=1742):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
madvise$auto(0x1000, 0x400050, 0x9)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0xdb, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0)

615.689453ms ago: executing program 7 (id=1743):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
mmap$auto(0x7fff, 0x100, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
readv$auto(r0, &(0x7f0000000240)={0x0, 0x4}, 0x6) (async)
r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2)
open_by_handle_at$auto(r1, &(0x7f0000000000)={0x8, 0x10002, "0200000000000000"}, 0x6)
mq_open$auto(&(0x7f0000000040)='/dev/ttyS0\x00', 0x7, 0x4, &(0x7f0000000080)={0x7fffffffffffffff, 0x8, 0x2, 0x400})
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x4a0842, 0x0)
r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) (async)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00')
ioctl$NS_GET_PARENT(r3, 0xb701, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
setsockopt$auto_SO_RCVLOWAT(r4, 0x2, 0x12, &(0x7f0000000400)='7\x00\x00\xec\x007\xfe(\xbd\x1c\xa4\b\x00\x00\x00\x86\xf6\xa3\x00kO\xb9\xcd\xb0\x86\xe0yK\xcf\xcf\x8d\xf2S6\x9e\x81\xcdc\xd7\x19-7\xc2\x89\x9d\x8cR`\xab6F\xd6O\x8b[\"\x80\xd0\xd2!\xc5\xdf\x8c&\xbd\x12\xb0\xa9v\vK\xfe+\xfb4\x02l\t5:e\xbf\xaf\xe3VX\x8d/l\f\xef\x1c\xc9\x13\xf6\x86\xb9N\xeeq\'\xbc\xb0\xa4\xd8\x94\xb8\xbc\b1\xc5\xb7\xca\x8e\x94\x0e\xc9\x99C\x97\xc2]\x80,\xaa\xf5\x17\xacnQ>\aH\xf6\xd6`/f\xcf', 0x1)
r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/040/001\x00', 0x802, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x2, 0x8, 0x7fa, &(0x7f0000001800)})
unshare$auto(0x40000080) (async)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0)
write$auto(r6, 0x0, 0x400000000003) (async)
bind$auto(r2, &(0x7f00000001c0)=@sco={0x1f, @none}, 0x8) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) (async)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) (async)
r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
fchmod$auto(r7, 0x2) (async)
r9 = syz_clone(0x11100, &(0x7f0000000200), 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000006c0)="3b1653b0adb2700d2bfd76b348caef1c74b03b10d97dfe0e9e74b6be9d87ae9c2381cc507657957a2e0aa31f58417ec3ca03ea7237e72e4f8a545c1942689a6a76db7b12041e2a9bf4d99e63c043c20d6910ac8d4733df51c5534074f7a8b4fa089744d19a9176bd3a6eae2e8d19fc1a1d5a06fd42652f4323739e5b6109176c7b8f022f0bfa4381cc6f215ac338e29ef0df2d67fc0000bc8108ae8b2386aed1ddd529fb42eeba3c272143bd0d6a8a7a6575a8494cd67ae41b56af6dfd5dd47a5529")
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e0000000000000000008000", @raw=0x1}, 0x4, 0x966, 0x3, @inferred=r9, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) (async)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000080)={{@raw=0x4, 0x7ff, 0xa, 0xb, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb"}, 0xfffffffc, 0xfffffffe, 0x2, @raw=0x31c7bc85, @reserved="d780cd0831772d961e41c9b82e8c2128a971977a24ac5032bc22427a602d8942581523a8e3a9454770bef7a15b6003815128a7f0cd875625eb2debb4d3c53710fe55ac5de3dfd7f697605139b00044e092aa6a6472fcf8e962c0061ba4458be4651a644f1873aee4dfe7fbadb980718f5ba5c440ba162cea3377e140abd2db9f", "18a817f26a5c7f8773b2dbc01ac4bd5359eeadc8357752b72fa176254d8797cdffd02539e383a07983eeddcd24b626f54ad9d763dcdc91a4af8b7c848ceb55a7"})

476.764723ms ago: executing program 0 (id=1744):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
dup3$auto(0x8000000000000001, 0x5, 0x800080000)
mbind$auto(0x200000, 0x48e, 0x100000000, 0x0, 0x20000000000006, 0x2)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r0, 0x0)
mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3)
setsockopt$auto_SO_TIMESTAMPING_NEW(r0, 0x401, 0x41, 0x0, 0x4)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x501, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
mprotect$auto(0xc000, 0x8, 0x8)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)

0s ago: executing program 8 (id=1745):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r0) (async)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x18)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
settimeofday$auto(&(0x7f0000000000)={0x3, 0x2}, 0x0)
madvise$auto(0xc969, 0xffffffffffff0003, 0x4)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x0, 0x0) (async)
prctl$auto(0x16, 0x1, 0x0, 0xfffffffffffffffe, 0x4)
mmap$auto(0x1, 0x2020009, 0x4d, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x0, 0x0)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) (async)
io_uring_setup$auto(0x87, 0x0) (async)
socket(0xa, 0x1, 0x84) (async)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0)
ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) (async)
statmount$auto(0x0, 0x0, 0x1fe, 0xb) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x2, 0x0) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x3, 0x9, 0x8, 0x2, 0x8001, 0x1, 0x9, 0x922, 0x7, 0x8005, 0x5, 0x3, 0x6, 0xfffffffc, 0x1fd, 0x0, 0x0, 0x7, 0x4, 0x0, 0x4, 0x0, [0xaf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x400, 0x8000000000000000, 0x0, 0x10, 0x0, 0x0, 0x1]}, 0x100000000, 0x83) (async)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
read$auto(0xffffffffffffffff, 0x0, 0x1ff) (async)
write$auto(0xffffffffffffffff, 0x0, 0x10080000006)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) (async)
socket(0x21, 0x2, 0x2) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

kernel console output (not intermixed with test programs):

head+0x414/0x770
[  521.151492][ T5827]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  521.151564][ T5827]  ? get_vma_policy+0x23f/0x3b0
[  521.151604][ T5827]  swapin_readahead+0x14b/0x12e0
[  521.151671][ T5827]  ? __pfx_swapin_readahead+0x10/0x10
[  521.151716][ T5827]  ? find_held_lock+0x2b/0x80
[  521.151754][ T5827]  ? swap_cache_get_folio+0x272/0x920
[  521.151803][ T5827]  ? swap_cache_get_folio+0x272/0x920
[  521.151842][ T5827]  ? swap_cache_get_folio+0x1f/0x920
[  521.151880][ T5827]  ? swap_cache_get_folio+0x2a2/0x920
[  521.151924][ T5827]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  521.151964][ T5827]  ? __pfx_get_swap_device+0x10/0x10
[  521.151997][ T5827]  ? folio_xchg_last_cpupid+0xc4/0x130
[  521.152043][ T5827]  ? do_swap_page+0x9ba/0x6810
[  521.152081][ T5827]  do_swap_page+0x9ba/0x6810
[  521.152128][ T5827]  ? __lock_acquire+0x4a5/0x2630
[  521.152162][ T5827]  ? do_wp_page+0x18d9/0x4c10
[  521.152198][ T5827]  ? __pfx_do_swap_page+0x10/0x10
[  521.152244][ T5827]  ? __pfx_default_wake_function+0x10/0x10
[  521.152290][ T5827]  ? do_raw_spin_lock+0x128/0x260
[  521.152325][ T5827]  ? rcu_is_watching+0x12/0xc0
[  521.152359][ T5827]  ? __pte_offset_map+0x179/0x310
[  521.152397][ T5827]  __handle_mm_fault+0x18b9/0x2b50
[  521.152448][ T5827]  ? reacquire_held_locks+0xce/0x1e0
[  521.152476][ T5827]  ? __pfx___handle_mm_fault+0x10/0x10
[  521.152524][ T5827]  ? lock_vma_under_rcu+0x17c/0x5a0
[  521.152592][ T5827]  handle_mm_fault+0x36d/0xa20
[  521.152645][ T5827]  do_user_addr_fault+0x5a3/0x12f0
[  521.152705][ T5827]  exc_page_fault+0x6f/0xd0
[  521.152747][ T5827]  asm_exc_page_fault+0x26/0x30
[  521.152774][ T5827] RIP: 0033:0x7ff638756717
[  521.152799][ T5827] Code: 00 66 90 48 8b 47 68 c3 66 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d 41 4e 29 00 00 <48> 8b 05 aa 1f df 00 53 64 48 8b 1c 25 10 00 00 00 74 05 48 85 c0
[  521.152826][ T5827] RSP: 002b:00007ffcd9bfb608 EFLAGS: 00010246
[  521.152849][ T5827] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000001388
[  521.152867][ T5827] RDX: 0000000000000001 RSI: 0000000000068506 RDI: 00007ffcd9bfb620
[  521.152885][ T5827] RBP: 00007ffcd9bfb76c R08: 0000000000000001 R09: 0000000000000001
[  521.152902][ T5827] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
[  521.152916][ T5827] R13: 00000000000927c0 R14: 000000000007ef04 R15: 00007ffcd9bfb7c0
[  521.152957][ T5827]  </TASK>
[  521.152968][ T5827] memory: usage 3072kB, limit 3072kB, failcnt 110196
[  521.890299][ T5827] memory+swap: usage 105360kB, limit 9007199254740988kB, failcnt 0
[  521.930269][ T5827] kmem: usage 1624kB, limit 9007199254740988kB, failcnt 0
[  521.963794][ T5827] Memory cgroup stats for /syz3:
[  521.963924][ T5827] cache 0
[  521.999822][ T5827] rss 0
[  522.002693][ T5827] rss_huge 0
[  522.019818][ T5827] shmem 0
[  522.022826][ T5827] mapped_file 0
[  522.026546][ T5827] dirty 0
[  522.029648][ T5827] writeback 0
[  522.033341][ T5827] workingset_refault_anon 9672
[  522.095402][ T5827] workingset_refault_file 21062
[  522.119220][ T5827] swap 104742912
[  522.145185][ T5827] swapcached 1282048
[  522.179247][ T5827] pgpgin 204070
[  522.209589][ T5827] pgpgout 204779
[  522.213200][ T5827] pgfault 206758
[  522.216857][ T5827] pgmajfault 4066
[  522.308566][ T5827] inactive_anon 540672
[  522.312714][ T5827] active_anon 741376
[  522.371348][ T5827] inactive_file 0
[  522.375055][ T5827] active_file 0
[  522.428099][ T5827] unevictable 0
[  522.431668][ T5827] hierarchical_memory_limit 3145728
[  522.436903][ T5827] hierarchical_memsw_limit 9223372036854771712
[  522.477646][ T5827] total_cache 0
[  522.481176][ T5827] total_rss 0
[  522.510361][ T5827] total_rss_huge 0
[  522.514153][ T5827] total_shmem 0
[  522.568445][ T5827] total_mapped_file 0
[  522.573775][ T5827] total_dirty 0
[  522.581338][ T5827] total_writeback 0
[  522.595882][ T5827] total_workingset_refault_anon 9672
[  522.616073][ T5827] total_workingset_refault_file 21062
[  522.651177][ T5827] total_swap 104742912
[  522.655336][ T5827] total_swapcached 1282048
[  522.706616][ T5827] total_pgpgin 204070
[  522.710754][ T5827] total_pgpgout 204779
[  522.744320][ T5827] total_pgfault 206758
[  522.775218][ T5827] total_pgmajfault 4066
[  522.796396][ T5827] total_inactive_anon 540672
[  522.820090][ T5827] total_active_anon 741376
[  522.849562][ T5827] total_inactive_file 0
[  522.853785][ T5827] total_active_file 0
[  522.889067][ T5827] total_unevictable 0
[  522.893152][ T5827] anon_cost 77
[  522.927688][ T5827] file_cost 0
[  522.931145][ T5827] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.780,pid=9823,uid=0
[  523.000217][ T5827] Memory cgroup out of memory: Killed process 9823 (syz.3.780) total-vm:141668kB, anon-rss:1244kB, file-rss:51468kB, shmem-rss:128kB, UID:0 pgtables:292kB oom_score_adj:1000
[  523.499137][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  523.525638][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  528.490170][T10669] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  528.574666][T10669] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  530.773415][T10687] zswap: compressor  not available
[  531.198473][T10701] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22
[  535.266406][T10735] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  535.697334][T10740] netlink: 25 bytes leftover after parsing attributes in process `syz.1.950'.
[  542.239230][   T29] audit: type=1804 audit(1770956796.079:10): pid=10804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.964" name="/newroot/220/file0" dev="tmpfs" ino=1172 res=1 errno=0
[  544.059187][T10819] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  544.348757][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'.
[  546.715564][T10859] netlink: 25 bytes leftover after parsing attributes in process `syz.4.975'.
[  547.251734][T10862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.976'.
[  548.289144][T10869] FAULT_INJECTION: forcing a failure.
[  548.289144][T10869] name failslab, interval 1, probability 0, space 0, times 0
[  548.427630][T10869] CPU: 1 UID: 0 PID: 10869 Comm: syz.4.978 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  548.427688][T10869] Tainted: [L]=SOFTLOCKUP
[  548.427699][T10869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  548.427715][T10869] Call Trace:
[  548.427725][T10869]  <TASK>
[  548.427736][T10869]  dump_stack_lvl+0x100/0x190
[  548.427780][T10869]  should_fail_ex.cold+0x5/0xa
[  548.427812][T10869]  should_failslab+0xc2/0x120
[  548.427847][T10869]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  548.427874][T10869]  ? vm_area_dup+0x27/0x8e0
[  548.427914][T10869]  ? percpu_counter_add_batch+0xb9/0x230
[  548.427950][T10869]  vm_area_dup+0x27/0x8e0
[  548.427996][T10869]  dup_mmap+0x6a4/0x1e20
[  548.428073][T10869]  ? __pfx_dup_mmap+0x10/0x10
[  548.428137][T10869]  copy_process+0x7371/0x79b0
[  548.428186][T10869]  ? __pfx_copy_process+0x10/0x10
[  548.428213][T10869]  ? find_held_lock+0x2b/0x80
[  548.428268][T10869]  kernel_clone+0xfc/0x930
[  548.428292][T10869]  ? __pfx_futex_wait+0x10/0x10
[  548.428328][T10869]  ? __pfx_kernel_clone+0x10/0x10
[  548.428380][T10869]  __do_sys_clone+0xd9/0x120
[  548.428407][T10869]  ? __pfx___do_sys_clone+0x10/0x10
[  548.428456][T10869]  ? rcu_is_watching+0x12/0xc0
[  548.428505][T10869]  ? xfd_validate_state+0x129/0x190
[  548.428565][T10869]  do_syscall_64+0x106/0xf80
[  548.428605][T10869]  ? clear_bhb_loop+0x40/0x90
[  548.428641][T10869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.428668][T10869] RIP: 0033:0x7fa0ae19bf79
[  548.428692][T10869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  548.428720][T10869] RSP: 002b:00007fa0af045fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  548.428748][T10869] RAX: ffffffffffffffda RBX: 00007fa0ae416180 RCX: 00007fa0ae19bf79
[  548.428767][T10869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  548.428783][T10869] RBP: 00007fa0ae2327e0 R08: 0000000000000000 R09: 0000000000000000
[  548.428801][T10869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  548.428818][T10869] R13: 00007fa0ae416218 R14: 00007fa0ae416180 R15: 00007ffc15194d68
[  548.428860][T10869]  </TASK>
[  548.830090][   T29] audit: type=1804 audit(1770956802.589:11): pid=10868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.978" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=24 res=1 errno=0
[  548.987082][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'.
[  554.613760][T10911] zswap: compressor  not available
[  557.427002][T10934] FAULT_INJECTION: forcing a failure.
[  557.427002][T10934] name failslab, interval 1, probability 0, space 0, times 0
[  557.661176][T10934] CPU: 0 UID: 0 PID: 10934 Comm: syz.3.990 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  557.661229][T10934] Tainted: [L]=SOFTLOCKUP
[  557.661240][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  557.661258][T10934] Call Trace:
[  557.661268][T10934]  <TASK>
[  557.661280][T10934]  dump_stack_lvl+0x100/0x190
[  557.661326][T10934]  should_fail_ex.cold+0x5/0xa
[  557.661361][T10934]  should_failslab+0xc2/0x120
[  557.661406][T10934]  __kmalloc_cache_noprof+0x7a/0x6f0
[  557.661449][T10934]  ? trace_pid_list_alloc+0x232/0x480
[  557.661484][T10934]  ? lockdep_init_map_type+0x5c/0x250
[  557.661523][T10934]  trace_pid_list_alloc+0x232/0x480
[  557.661565][T10934]  trace_pid_write+0x110/0x480
[  557.661611][T10934]  ? __pfx_trace_pid_write+0x10/0x10
[  557.661658][T10934]  ? update_last_data+0xaa/0x510
[  557.661724][T10934]  event_pid_write.isra.0+0x1e4/0x7f0
[  557.661767][T10934]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  557.661820][T10934]  vfs_write+0x2aa/0x1070
[  557.661851][T10934]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  557.661893][T10934]  ? __pfx_vfs_write+0x10/0x10
[  557.661924][T10934]  ? __fget_files+0x215/0x3d0
[  557.661966][T10934]  ? __fget_files+0x21f/0x3d0
[  557.662009][T10934]  ksys_write+0x12a/0x250
[  557.662044][T10934]  ? __pfx_ksys_write+0x10/0x10
[  557.662072][T10934]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  557.662110][T10934]  ? syscall_user_dispatch+0x76/0x130
[  557.662149][T10934]  do_syscall_64+0x106/0xf80
[  557.662193][T10934]  ? clear_bhb_loop+0x40/0x90
[  557.662231][T10934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.662263][T10934] RIP: 0033:0x7ff246f9bf79
[  557.662289][T10934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  557.662319][T10934] RSP: 002b:00007ff247dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  557.662349][T10934] RAX: ffffffffffffffda RBX: 00007ff247215fa0 RCX: 00007ff246f9bf79
[  557.662369][T10934] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  557.662386][T10934] RBP: 00007ff2470327e0 R08: 0000000000000000 R09: 0000000000000000
[  557.662413][T10934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  557.662430][T10934] R13: 00007ff247216038 R14: 00007ff247215fa0 R15: 00007fffd63bdbd8
[  557.662471][T10934]  </TASK>
[  558.815700][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'.
[  559.035283][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'.
[  563.675527][T10975] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  564.003662][T10970] zswap: compressor  not available
[  564.242408][T10981] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  566.510300][T10997] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1003'.
[  568.038724][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  568.052282][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  570.106019][T11013] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23
[  573.039288][T11026] FAULT_INJECTION: forcing a failure.
[  573.039288][T11026] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  573.131287][T11026] CPU: 1 UID: 0 PID: 11026 Comm: syz.1.1009 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  573.131340][T11026] Tainted: [L]=SOFTLOCKUP
[  573.131353][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  573.131372][T11026] Call Trace:
[  573.131383][T11026]  <TASK>
[  573.131396][T11026]  dump_stack_lvl+0x100/0x190
[  573.131443][T11026]  should_fail_ex.cold+0x5/0xa
[  573.131478][T11026]  _copy_from_user+0x2e/0xd0
[  573.131513][T11026]  io_uring_setup+0xc0/0x160
[  573.131551][T11026]  ? ksys_write+0x190/0x250
[  573.131585][T11026]  ? __pfx_io_uring_setup+0x10/0x10
[  573.131627][T11026]  ? do_futex+0x192/0x350
[  573.131658][T11026]  ? __pfx_do_futex+0x10/0x10
[  573.131686][T11026]  ? __fget_files+0x215/0x3d0
[  573.131737][T11026]  ? xfd_validate_state+0x129/0x190
[  573.131786][T11026]  __x64_sys_io_uring_setup+0xc2/0x170
[  573.131827][T11026]  do_syscall_64+0x106/0xf80
[  573.131870][T11026]  ? clear_bhb_loop+0x40/0x90
[  573.131907][T11026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.131938][T11026] RIP: 0033:0x7fb8e679bf79
[  573.131962][T11026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.132003][T11026] RSP: 002b:00007fb8e75ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  573.132034][T11026] RAX: ffffffffffffffda RBX: 00007fb8e6a16090 RCX: 00007fb8e679bf79
[  573.132055][T11026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000003ff
[  573.132073][T11026] RBP: 00007fb8e68327e0 R08: 0000000000000000 R09: 0000000000000000
[  573.132092][T11026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  573.132110][T11026] R13: 00007fb8e6a16128 R14: 00007fb8e6a16090 R15: 00007ffe82697e38
[  573.132153][T11026]  </TASK>
[  574.401348][T11033] futex_wake_op: syz.2.1011 tries to shift op by -2048; fix this program
[  575.000195][   T29] audit: type=1800 audit(1770956828.993:12): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1013" name="members" dev="configfs" ino=210136 res=0 errno=0
[  576.011451][T11052] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  576.113578][T11046] warning: `syz.1.1014' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  582.635349][T11087] zswap: compressor  not available
[  584.595787][T11101] zswap: compressor  not available
[  585.141225][T11096] Invalid ELF header magic: != ELF
[  585.610758][T11110] FAULT_INJECTION: forcing a failure.
[  585.610758][T11110] name fail_futex, interval 1, probability 0, space 0, times 0
[  585.710803][T11110] CPU: 0 UID: 0 PID: 11110 Comm: syz.2.1024 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  585.710850][T11110] Tainted: [L]=SOFTLOCKUP
[  585.710861][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  585.710878][T11110] Call Trace:
[  585.710888][T11110]  <TASK>
[  585.710900][T11110]  dump_stack_lvl+0x100/0x190
[  585.710946][T11110]  should_fail_ex.cold+0x5/0xa
[  585.710980][T11110]  get_futex_key+0x1d2/0x1620
[  585.711030][T11110]  ? __pfx_get_futex_key+0x10/0x10
[  585.711076][T11110]  ? lock_acquire+0x17c/0x330
[  585.711113][T11110]  futex_wait_setup+0x81/0x500
[  585.711159][T11110]  __futex_wait+0x19f/0x300
[  585.711197][T11110]  ? __pfx___futex_wait+0x10/0x10
[  585.711238][T11110]  ? __pfx_futex_wake_mark+0x10/0x10
[  585.711279][T11110]  ? __hrtimer_setup+0x178/0x280
[  585.711323][T11110]  ? ktime_add_safe+0x60/0x70
[  585.711364][T11110]  futex_wait+0xed/0x380
[  585.711397][T11110]  ? __pfx_futex_wait+0x10/0x10
[  585.711428][T11110]  ? __lock_acquire+0x4a5/0x2630
[  585.711461][T11110]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  585.711505][T11110]  do_futex+0x1ef/0x350
[  585.711534][T11110]  ? __pfx_do_futex+0x10/0x10
[  585.711558][T11110]  ? rcu_is_watching+0x12/0xc0
[  585.711593][T11110]  ? ktime_get+0x200/0x300
[  585.711631][T11110]  ? lockdep_hardirqs_on+0x78/0x100
[  585.711671][T11110]  ? read_tsc+0x9/0x20
[  585.711703][T11110]  __x64_sys_futex+0x34f/0x4d0
[  585.711736][T11110]  ? __pfx___x64_sys_futex+0x10/0x10
[  585.711763][T11110]  ? xfd_validate_state+0x129/0x190
[  585.711810][T11110]  do_syscall_64+0x106/0xf80
[  585.711849][T11110]  ? clear_bhb_loop+0x40/0x90
[  585.711892][T11110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.711923][T11110] RIP: 0033:0x7ff63879bf79
[  585.711948][T11110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  585.711977][T11110] RSP: 002b:00007ffcd9bfb528 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  585.712007][T11110] RAX: ffffffffffffffda RBX: 000000000008f08e RCX: 00007ff63879bf79
[  585.712027][T11110] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff638a15fac
[  585.712045][T11110] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000
[  585.712062][T11110] R10: 00007ffcd9bfb630 R11: 0000000000000246 R12: 00007ffcd9bfb650
[  585.712080][T11110] R13: 00007ff638a15fac R14: 000000000008f0c0 R15: 00007ffcd9bfb630
[  585.712121][T11110]  </TASK>
[  591.672243][   T29] audit: type=1804 audit(1770956845.731:13): pid=11128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1027" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0
[  592.321506][T11153] FAULT_INJECTION: forcing a failure.
[  592.321506][T11153] name failslab, interval 1, probability 0, space 0, times 0
[  592.500025][T11153] CPU: 1 UID: 0 PID: 11153 Comm: syz.2.1031 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  592.500077][T11153] Tainted: [L]=SOFTLOCKUP
[  592.500089][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  592.500107][T11153] Call Trace:
[  592.500118][T11153]  <TASK>
[  592.500131][T11153]  dump_stack_lvl+0x100/0x190
[  592.500180][T11153]  should_fail_ex.cold+0x5/0xa
[  592.500217][T11153]  should_failslab+0xc2/0x120
[  592.500254][T11153]  __kmalloc_cache_noprof+0x7a/0x6f0
[  592.500299][T11153]  ? alloc_bprm+0x86/0x710
[  592.500355][T11153]  alloc_bprm+0x86/0x710
[  592.500408][T11153]  do_execveat_common.isra.0+0x19c/0x580
[  592.500459][T11153]  ? do_getname+0x191/0x390
[  592.500502][T11153]  __x64_sys_execve+0x93/0xd0
[  592.500535][T11153]  do_syscall_64+0x106/0xf80
[  592.500580][T11153]  ? clear_bhb_loop+0x40/0x90
[  592.500617][T11153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.500647][T11153] RIP: 0033:0x7ff63879bf79
[  592.500674][T11153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  592.500704][T11153] RSP: 002b:00007ff63966b028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  592.500734][T11153] RAX: ffffffffffffffda RBX: 00007ff638a16090 RCX: 00007ff63879bf79
[  592.500756][T11153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0
[  592.500775][T11153] RBP: 00007ff6388327e0 R08: 0000000000000000 R09: 0000000000000000
[  592.500793][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.500811][T11153] R13: 00007ff638a16128 R14: 00007ff638a16090 R15: 00007ffcd9bfb3c8
[  592.500852][T11153]  </TASK>
[  593.817959][T11161] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  597.136997][T11184] random: crng reseeded on system resumption
[  597.585572][T11184] hub 1-0:1.0: USB hub found
[  597.668958][T11184] hub 1-0:1.0: 1 port detected
[  598.504122][T11190] zswap: compressor  not available
[  599.704666][T11197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1041'.
[  600.068249][ T5139] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  600.635875][T11203] netlink: 'syz.2.1043': attribute type 1 has an invalid length.
[  600.660273][T11203] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1043'.
[  602.438016][T11221] zswap: compressor  not available
[  602.906571][T11231] FAULT_INJECTION: forcing a failure.
[  602.906571][T11231] name failslab, interval 1, probability 0, space 0, times 0
[  602.959358][T11231] CPU: 0 UID: 0 PID: 11231 Comm: syz.2.1047 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  602.959408][T11231] Tainted: [L]=SOFTLOCKUP
[  602.959420][T11231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  602.959436][T11231] Call Trace:
[  602.959447][T11231]  <TASK>
[  602.959459][T11231]  dump_stack_lvl+0x100/0x190
[  602.959503][T11231]  should_fail_ex.cold+0x5/0xa
[  602.959535][T11231]  should_failslab+0xc2/0x120
[  602.959570][T11231]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  602.959598][T11231]  ? mas_alloc_nodes+0x280/0x390
[  602.959641][T11231]  mas_alloc_nodes+0x280/0x390
[  602.959684][T11231]  mas_preallocate+0x39c/0xf10
[  602.959730][T11231]  ? __memcg_slab_post_alloc_hook+0x4b0/0x9a0
[  602.959774][T11231]  ? __pfx_mas_preallocate+0x10/0x10
[  602.959832][T11231]  ? anon_vma_name+0x81/0x2c0
[  602.959877][T11231]  __split_vma+0x33d/0xe30
[  602.959928][T11231]  ? __pfx___split_vma+0x10/0x10
[  602.959994][T11231]  vms_gather_munmap_vmas+0x3aa/0x1320
[  602.960048][T11231]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  602.960100][T11231]  ? mas_walk+0x6ef/0x9b0
[  602.960151][T11231]  __mmap_region+0x46e/0x2820
[  602.960204][T11231]  ? __pfx___mmap_region+0x10/0x10
[  602.960274][T11231]  ? lock_acquire+0x17c/0x330
[  602.960301][T11231]  ? find_held_lock+0x2b/0x80
[  602.960337][T11231]  ? finish_task_switch.isra.0+0x200/0xb80
[  602.960378][T11231]  ? finish_task_switch.isra.0+0x200/0xb80
[  602.960420][T11231]  ? rcu_is_watching+0x12/0xc0
[  602.960454][T11231]  ? finish_task_switch.isra.0+0x205/0xb80
[  602.960494][T11231]  ? lockdep_hardirqs_on+0x78/0x100
[  602.960535][T11231]  ? finish_task_switch.isra.0+0x205/0xb80
[  602.960648][T11231]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[  602.960688][T11231]  ? rcu_is_watching+0x12/0xc0
[  602.960732][T11231]  mmap_region+0x180/0x3e0
[  602.960769][T11231]  do_mmap+0xc63/0x12f0
[  602.960815][T11231]  ? __pfx_do_mmap+0x10/0x10
[  602.960852][T11231]  ? __pfx_down_write_killable+0x10/0x10
[  602.960890][T11231]  vm_mmap_pgoff+0x29e/0x470
[  602.960935][T11231]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  602.960973][T11231]  ? find_held_lock+0x2b/0x80
[  602.961016][T11231]  ? __x64_sys_futex+0x34f/0x4d0
[  602.961041][T11231]  ? __x64_sys_futex+0x358/0x4d0
[  602.961075][T11231]  ksys_mmap_pgoff+0x7d/0x5b0
[  602.961117][T11231]  __x64_sys_mmap+0x125/0x190
[  602.961158][T11231]  do_syscall_64+0x106/0xf80
[  602.961198][T11231]  ? clear_bhb_loop+0x40/0x90
[  602.961242][T11231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.961272][T11231] RIP: 0033:0x7ff63879bf79
[  602.961297][T11231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  602.961325][T11231] RSP: 002b:00007ff63964a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  602.961353][T11231] RAX: ffffffffffffffda RBX: 00007ff638a16180 RCX: 00007ff63879bf79
[  602.961374][T11231] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000
[  602.961408][T11231] RBP: 00007ff6388327e0 R08: fffffffffffffffa R09: 0000000000008000
[  602.961428][T11231] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  602.961446][T11231] R13: 00007ff638a16218 R14: 00007ff638a16180 R15: 00007ffcd9bfb3c8
[  602.961488][T11231]  </TASK>
[  603.578036][T11227] zswap: compressor  not available
[  605.973252][T11262] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1055'.
[  606.025977][T11252] zswap: compressor  not available
[  606.309058][T11264] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  617.333007][ T5139] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  617.865810][T11396] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  618.596139][T11406] random: crng reseeded on system resumption
[  623.041160][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'.
[  624.509053][T11458] zswap: compressor  not available
[  627.175731][T11481] random: crng reseeded on system resumption
[  629.195173][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  629.202031][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  629.332054][T10899] syz.3.980 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  629.526422][T10899] CPU: 0 UID: 0 PID: 10899 Comm: syz.3.980 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  629.526471][T10899] Tainted: [L]=SOFTLOCKUP
[  629.526482][T10899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  629.526499][T10899] Call Trace:
[  629.526509][T10899]  <TASK>
[  629.526521][T10899]  dump_stack_lvl+0x100/0x190
[  629.526568][T10899]  dump_header+0xfb/0x606
[  629.526601][T10899]  oom_kill_process.cold+0xd/0x321
[  629.526635][T10899]  out_of_memory+0x340/0x14f0
[  629.526676][T10899]  ? __pfx_out_of_memory+0x10/0x10
[  629.526720][T10899]  mem_cgroup_out_of_memory+0xc6/0x130
[  629.526774][T10899]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  629.526817][T10899]  ? find_held_lock+0x2b/0x80
[  629.526863][T10899]  ? do_raw_spin_unlock+0x145/0x1e0
[  629.526899][T10899]  ? _raw_spin_unlock+0x28/0x50
[  629.526942][T10899]  try_charge_memcg+0x652/0xc90
[  629.526986][T10899]  ? __pfx_try_charge_memcg+0x10/0x10
[  629.527020][T10899]  ? find_held_lock+0x2b/0x80
[  629.527055][T10899]  ? rcu_read_unlock+0x17/0x60
[  629.527089][T10899]  ? rcu_read_unlock+0x17/0x60
[  629.527138][T10899]  charge_memcg+0xa6/0x280
[  629.527173][T10899]  __mem_cgroup_charge+0x2b/0x1e0
[  629.527214][T10899]  shmem_alloc_and_add_folio+0x451/0xd40
[  629.527256][T10899]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  629.527290][T10899]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  629.527331][T10899]  shmem_get_folio_gfp+0x6ab/0x1900
[  629.527371][T10899]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  629.527420][T10899]  shmem_write_begin+0x1a4/0x420
[  629.527455][T10899]  ? __pfx_shmem_write_begin+0x10/0x10
[  629.527488][T10899]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[  629.527528][T10899]  ? lockdep_hardirqs_on+0x78/0x100
[  629.527598][T10899]  generic_perform_write+0x292/0xa40
[  629.527643][T10899]  ? __pfx_generic_perform_write+0x10/0x10
[  629.527681][T10899]  ? file_update_time_flags+0x373/0x500
[  629.527724][T10899]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  629.527773][T10899]  shmem_file_write_iter+0x10e/0x140
[  629.527813][T10899]  __kernel_write_iter+0x2ac/0x920
[  629.527846][T10899]  ? __pfx___kernel_write_iter+0x10/0x10
[  629.527876][T10899]  ? __up_read+0x2c5/0x700
[  629.527913][T10899]  ? dump_user_range+0x73b/0xb50
[  629.527952][T10899]  dump_user_range+0x3f9/0xb50
[  629.527991][T10899]  ? __pfx_dump_user_range+0x10/0x10
[  629.528034][T10899]  ? __pfx_writenote+0x10/0x10
[  629.528078][T10899]  elf_core_dump+0x2d16/0x3c60
[  629.528134][T10899]  ? __pfx_elf_core_dump+0x10/0x10
[  629.528169][T10899]  ? kasan_save_stack+0x3f/0x50
[  629.528198][T10899]  ? kasan_save_track+0x14/0x30
[  629.528225][T10899]  ? __kasan_kmalloc+0xaa/0xb0
[  629.528252][T10899]  ? __kvmalloc_node_noprof+0x360/0xa00
[  629.528285][T10899]  ? irqentry_exit+0x1f8/0x670
[  629.528324][T10899]  ? asm_exc_page_fault+0x26/0x30
[  629.528357][T10899]  ? 0xffffffffff600000
[  629.528450][T10899]  ? vfs_coredump+0x27b4/0x5570
[  629.528477][T10899]  vfs_coredump+0x27b4/0x5570
[  629.528523][T10899]  ? __pfx_vfs_coredump+0x10/0x10
[  629.528555][T10899]  ? __lock_acquire+0x4a5/0x2630
[  629.528601][T10899]  ? lock_acquire+0x17c/0x330
[  629.528647][T10899]  ? is_bpf_text_address+0x8a/0x1a0
[  629.528682][T10899]  ? bpf_ksym_find+0x124/0x1c0
[  629.528736][T10899]  ? __kernel_text_address+0xd/0x30
[  629.528777][T10899]  ? unwind_get_return_address+0x59/0xa0
[  629.528821][T10899]  ? arch_stack_walk+0xa6/0xf0
[  629.528876][T10899]  ? __sigqueue_free+0xbe/0x2a0
[  629.528907][T10899]  ? stack_trace_save+0x8e/0xc0
[  629.528945][T10899]  ? __pfx_stack_trace_save+0x10/0x10
[  629.528985][T10899]  ? stack_depot_save_flags+0x27/0x9d0
[  629.529020][T10899]  ? __lock_acquire+0x4a5/0x2630
[  629.529119][T10899]  ? proc_coredump_connector+0x2d3/0x4f0
[  629.529154][T10899]  ? __pfx_proc_coredump_connector+0x10/0x10
[  629.529198][T10899]  ? rcu_is_watching+0x12/0xc0
[  629.529239][T10899]  get_signal+0x1f2a/0x21e0
[  629.529298][T10899]  ? __pfx_get_signal+0x10/0x10
[  629.529352][T10899]  arch_do_signal_or_restart+0x91/0x770
[  629.529386][T10899]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  629.529428][T10899]  ? do_user_addr_fault+0x8d6/0x12f0
[  629.529479][T10899]  irqentry_exit+0x1f8/0x670
[  629.529524][T10899]  asm_exc_page_fault+0x26/0x30
[  629.529551][T10899] RIP: 0033:0x95ac4cc6
[  629.529581][T10899] Code: Unable to access opcode bytes at 0x95ac4c9c.
[  629.529594][T10899] RSP: 002b:0000200000000198 EFLAGS: 00010217
[  629.529618][T10899] RAX: 0000000000000000 RBX: 00007ff247216180 RCX: 00007ff246f9bf79
[  629.529637][T10899] RDX: 00002000000001c0 RSI: 0000200000000190 RDI: 0000000040020000
[  629.529655][T10899] RBP: 00007ff2470327e0 R08: 0000200000000240 R09: 0000200000000240
[  629.529673][T10899] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000
[  629.529690][T10899] R13: 00007ff247216218 R14: 00007ff247216180 R15: 00007fffd63bdbd8
[  629.529732][T10899]  </TASK>
[  630.330703][T10899] memory: usage 3072kB, limit 3072kB, failcnt 137370
[  630.337457][T10899] memory+swap: usage 69892kB, limit 9007199254740988kB, failcnt 0
[  630.421638][   T31] oom_reaper: reaped process 11450 (syz.1.1090), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[  630.509734][T10899] kmem: usage 1596kB, limit 9007199254740988kB, failcnt 0
[  630.517017][T10899] Memory cgroup stats for /syz3:
[  630.517219][T10899] cache 0
[  630.527978][T10899] rss 0
[  630.534682][T10899] rss_huge 0
[  630.537925][T10899] shmem 0
[  630.541332][T10899] mapped_file 0
[  630.545080][T10899] dirty 0
[  630.548040][T10899] writeback 0
[  630.551974][T10899] workingset_refault_anon 11517
[  630.556953][T10899] workingset_refault_file 30807
[  630.844200][T10899] swap 68423680
[  630.847751][T10899] swapcached 1511424
[  630.889405][T10899] pgpgin 246962
[  630.893027][T10899] pgpgout 247615
[  630.896584][T10899] pgfault 228501
[  631.003436][T10899] pgmajfault 4829
[  631.014098][T10899] inactive_anon 638976
[  631.071647][T10899] active_anon 741376
[  631.075647][T10899] inactive_file 0
[  631.166398][T10899] active_file 0
[  631.225013][T10899] unevictable 0
[  631.286215][T10899] hierarchical_memory_limit 3145728
[  631.291736][T10899] hierarchical_memsw_limit 9223372036854771712
[  631.457613][T10899] total_cache 0
[  631.497400][T10899] total_rss 0
[  631.563073][T10899] total_rss_huge 0
[  631.605178][T10899] total_shmem 0
[  631.634435][T10899] total_mapped_file 0
[  631.686606][T10899] total_dirty 0
[  631.717976][T10899] total_writeback 0
[  631.788772][T10899] total_workingset_refault_anon 11517
[  631.890482][T10899] total_workingset_refault_file 30807
[  631.938133][T10899] total_swap 68423680
[  631.982921][T10899] total_swapcached 1511424
[  632.064932][T10899] total_pgpgin 246962
[  632.138978][T10899] total_pgpgout 247615
[  632.162030][T10899] total_pgfault 228501
[  632.212949][T10899] total_pgmajfault 4829
[  632.223979][T10899] total_inactive_anon 638976
[  632.228638][T10899] total_active_anon 741376
[  632.281377][T10899] total_inactive_file 0
[  632.287929][T10899] total_active_file 0
[  632.321248][T10899] total_unevictable 0
[  632.335946][T10899] anon_cost 72
[  632.365836][T10899] file_cost 0
[  632.375848][T10899] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.980,pid=10899,uid=0
[  632.613787][T10899] Memory cgroup out of memory: Killed process 10899 (syz.3.980) total-vm:104532kB, anon-rss:1204kB, file-rss:56568kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000
[  632.722512][T11507] tipc: Can't bind to reserved service type 0
[  632.742198][T11507] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  636.181246][T11521] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1102'.
[  637.776102][T11539] random: crng reseeded on system resumption
[  639.244709][ T7062] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 3445 with max blocks 139 with error 74
[  639.321148][ T7062] EXT4-fs (sda1): This should not happen!! Data will be lost
[  639.321148][ T7062] 
[  646.437815][T11584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1115'.
[  646.471386][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'.
[  646.480908][T11584] ipvlan0: entered promiscuous mode
[  646.504920][T11584] ipvlan0: entered allmulticast mode
[  646.530493][T11584] veth0_vlan: entered allmulticast mode
[  647.203080][T11594] random: crng reseeded on system resumption
[  648.011061][T11596] zswap: compressor  not available
[  650.703231][T11625] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  652.569840][T11634] vivid-007: =================  START STATUS  =================
[  652.586267][T11634] vivid-007: Generate PTS: true
[  652.592100][T11634] vivid-007: Generate SCR: true
[  652.655724][T11634] tpg source WxH: 320x240 (Y'CbCr)
[  652.661005][T11634] tpg field: 1
[  652.664423][T11634] tpg crop: (0,0)/320x240
[  652.735650][T11634] tpg compose: (0,0)/320x240
[  652.740439][T11634] tpg colorspace: 8
[  652.744640][T11634] tpg transfer function: 0/0
[  652.835304][T11634] tpg Y'CbCr encoding: 0/0
[  652.839927][T11634] tpg quantization: 0/0
[  652.844124][T11634] tpg RGB range: 0/2
[  652.949820][T11634] vivid-007: ==================  END STATUS  ==================
[  653.763281][T11636] zswap: compressor  not available
[  656.735894][T11662] zswap: compressor  not available
[  656.994230][T11668] Invalid ELF header magic: != ELF
[  660.261518][T11681] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1135'.
[  665.683165][T11721] zswap: compressor  not available
[  666.454566][T11729] block2mtd: parameter too long
[  667.817364][T11731] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  667.870151][T11731] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  667.877354][T11731] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  667.883806][T11731] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  667.890491][T11731] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  668.671182][T11741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1148'.
[  668.841049][ T5139] Bluetooth: hci0: command 0x0c1a tx timeout
[  669.436494][T11741] ipvlan0: entered promiscuous mode
[  669.451100][T11741] ipvlan0: entered allmulticast mode
[  669.477871][T11741] veth0_vlan: entered allmulticast mode
[  669.746604][ T6762] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1361 with max blocks 18 with error 74
[  669.829749][ T6762] EXT4-fs (sda1): This should not happen!! Data will be lost
[  669.829749][ T6762] 
[  669.874960][ T5139] Bluetooth: hci3: command 0x0c1a tx timeout
[  669.881146][ T5139] Bluetooth: hci2: command 0x0c1a tx timeout
[  669.889289][T11191] Bluetooth: hci1: command 0x0c1a tx timeout
[  669.980681][ T5139] Bluetooth: hci4: command 0x0c1a tx timeout
[  673.833217][T11763] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  673.990619][T11763] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  674.026629][T11765] random: crng reseeded on system resumption
[  676.115961][ T5139] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260
[  676.116011][ T5139] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260
[  676.132667][ T5139] Bluetooth: hci1: Dropping invalid advertising data
[  676.141983][ T5139] Bluetooth: hci1: unknown advertising packet type: 0xe9
[  676.142029][ T5139] Bluetooth: hci1: Dropping invalid advertising data
[  676.157079][ T5139] Bluetooth: hci1: Malformed LE Event: 0x02
[  682.358044][T11811] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  682.475866][T11801] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  683.427475][T11820] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24
[  685.521739][T11823] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25
[  689.564110][T11854] random: crng reseeded on system resumption
[  690.348986][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  690.356125][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  694.392456][T11900] blktrace: Concurrent blktraces are not allowed on loop2
[  697.037576][T11926] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  698.762357][T11934] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26
[  700.309016][T11935] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27
[  709.409708][T11975] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  714.433325][T12016] FAULT_INJECTION: forcing a failure.
[  714.433325][T12016] name fail_futex, interval 1, probability 0, space 0, times 0
[  714.455193][T12016] CPU: 1 UID: 0 PID: 12016 Comm: syz.4.1199 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  714.455247][T12016] Tainted: [L]=SOFTLOCKUP
[  714.455259][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  714.455276][T12016] Call Trace:
[  714.455286][T12016]  <TASK>
[  714.455299][T12016]  dump_stack_lvl+0x100/0x190
[  714.455347][T12016]  should_fail_ex.cold+0x5/0xa
[  714.455381][T12016]  get_futex_key+0x1d2/0x1620
[  714.455429][T12016]  ? __pfx_get_futex_key+0x10/0x10
[  714.455468][T12016]  ? futex_hash+0x2c5/0x380
[  714.455512][T12016]  ? __lock_acquire+0x4a5/0x2630
[  714.455556][T12016]  futex_wake+0xea/0x530
[  714.455593][T12016]  ? __pfx_futex_wake+0x10/0x10
[  714.455632][T12016]  ? __fget_files+0x215/0x3d0
[  714.455674][T12016]  do_futex+0x32b/0x350
[  714.455703][T12016]  ? __pfx_do_futex+0x10/0x10
[  714.455731][T12016]  ? fdget+0x18b/0x210
[  714.455761][T12016]  ? __sys_sendmsg+0x18f/0x220
[  714.455805][T12016]  __x64_sys_futex+0x34f/0x4d0
[  714.455841][T12016]  ? __pfx___x64_sys_futex+0x10/0x10
[  714.455885][T12016]  do_syscall_64+0x106/0xf80
[  714.455925][T12016]  ? clear_bhb_loop+0x40/0x90
[  714.455961][T12016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.455991][T12016] RIP: 0033:0x7fa0ae19bf79
[  714.456016][T12016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.456043][T12016] RSP: 002b:00007fa0af0880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  714.456071][T12016] RAX: ffffffffffffffda RBX: 00007fa0ae415fa8 RCX: 00007fa0ae19bf79
[  714.456091][T12016] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa0ae415fac
[  714.456109][T12016] RBP: 00007fa0ae415fa0 R08: 0000000000000000 R09: 0000000000000000
[  714.456128][T12016] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  714.456145][T12016] R13: 00007fa0ae416038 R14: 00007ffc15194c80 R15: 00007ffc15194d68
[  714.456184][T12016]  </TASK>
[  715.263354][ T6765] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 7 with max blocks 13 with error 117
[  715.364602][ T6765] EXT4-fs (sda1): This should not happen!! Data will be lost
[  715.364602][ T6765] 
[  715.683421][T12025] futex_wake_op: syz.1.1201 tries to shift op by -2048; fix this program
[  716.260137][T12018] binder: 12011:12018 ioctl c018620c 0 returned -1
[  717.611025][T12048] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1203'.
[  720.142178][   T29] audit: type=1800 audit(1770956974.815:14): pid=12079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1210" name="members" dev="configfs" ino=310820 res=0 errno=0
[  723.102084][T12090] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  723.662600][T12102] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  724.400851][T12107] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1215'.
[  726.492388][ T5139] Bluetooth: hci0: command 0x0c1a tx timeout
[  726.508489][T12104] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  728.482269][T12104] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  728.501590][T12104] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  728.507726][T12104] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  728.524663][T12104] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  728.559326][ T5139] Bluetooth: hci1: command 0x0c1a tx timeout
[  730.404934][T12150] FAULT_INJECTION: forcing a failure.
[  730.404934][T12150] name fail_futex, interval 1, probability 0, space 0, times 0
[  730.502800][T12150] CPU: 0 UID: 0 PID: 12150 Comm: syz.4.1222 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  730.502850][T12150] Tainted: [L]=SOFTLOCKUP
[  730.502861][T12150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  730.502878][T12150] Call Trace:
[  730.502888][T12150]  <TASK>
[  730.502901][T12150]  dump_stack_lvl+0x100/0x190
[  730.502946][T12150]  should_fail_ex.cold+0x5/0xa
[  730.502979][T12150]  get_futex_key+0x1d2/0x1620
[  730.503025][T12150]  ? __pfx_get_futex_key+0x10/0x10
[  730.503082][T12150]  futex_wait_setup+0x81/0x500
[  730.503137][T12150]  __futex_wait+0x19f/0x300
[  730.503175][T12150]  ? __pfx___futex_wait+0x10/0x10
[  730.503218][T12150]  ? __pfx_futex_wake_mark+0x10/0x10
[  730.503258][T12150]  ? __hrtimer_setup+0x178/0x280
[  730.503295][T12150]  ? ktime_add_safe+0x60/0x70
[  730.503332][T12150]  futex_wait+0xed/0x380
[  730.503365][T12150]  ? __pfx_futex_wait+0x10/0x10
[  730.503395][T12150]  ? __lock_acquire+0x4a5/0x2630
[  730.503427][T12150]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  730.503472][T12150]  do_futex+0x1ef/0x350
[  730.503502][T12150]  ? __pfx_do_futex+0x10/0x10
[  730.503527][T12150]  ? rcu_is_watching+0x12/0xc0
[  730.503561][T12150]  ? ktime_get+0x200/0x300
[  730.503598][T12150]  ? lockdep_hardirqs_on+0x78/0x100
[  730.503640][T12150]  ? read_tsc+0x9/0x20
[  730.503672][T12150]  __x64_sys_futex+0x34f/0x4d0
[  730.503705][T12150]  ? __pfx___x64_sys_futex+0x10/0x10
[  730.503732][T12150]  ? xfd_validate_state+0x129/0x190
[  730.503781][T12150]  do_syscall_64+0x106/0xf80
[  730.503823][T12150]  ? clear_bhb_loop+0x40/0x90
[  730.503858][T12150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  730.503887][T12150] RIP: 0033:0x7fa0ae19bf79
[  730.503911][T12150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  730.503939][T12150] RSP: 002b:00007ffc15194ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  730.503968][T12150] RAX: ffffffffffffffda RBX: 00000000000b28d0 RCX: 00007fa0ae19bf79
[  730.503988][T12150] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0ae415fac
[  730.504006][T12150] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000
[  730.504024][T12150] R10: 00007ffc15194fd0 R11: 0000000000000246 R12: 00007ffc15194ff0
[  730.504043][T12150] R13: 00007fa0ae415fac R14: 00000000000b2902 R15: 00007ffc15194fd0
[  730.504083][T12150]  </TASK>
[  730.549788][ T5139] Bluetooth: hci4: command 0x0c1a tx timeout
[  730.697076][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout
[  730.706002][ T5139] Bluetooth: hci2: command 0x0c1a tx timeout
[  731.624700][T12170] random: crng reseeded on system resumption
[  731.648387][T12154] vhci_hcd vhci_hcd.2: invalid port number 135
[  731.668888][T12154] vhci_hcd vhci_hcd.2: invalid port number 135
[  733.568937][T12180] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0
[  736.283973][ T5139] Bluetooth: hci0: command 0x0c1a tx timeout
[  736.290600][T12183] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  736.822016][T12183] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  736.971968][T12183] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  737.006724][T12183] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  737.018336][T12183] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  738.443711][ T5139] Bluetooth: hci1: command 0x0c1a tx timeout
[  739.000107][ T5139] Bluetooth: hci2: command 0x0c1a tx timeout
[  739.069928][ T5139] Bluetooth: hci4: command 0x0c1a tx timeout
[  739.077754][ T5139] Bluetooth: hci3: command 0x0c1a tx timeout
[  740.554007][T12156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  740.572941][T12156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  740.582196][T12156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  740.597851][T12156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  740.611867][T12156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  741.738116][T12235] FAULT_INJECTION: forcing a failure.
[  741.738116][T12235] name failslab, interval 1, probability 0, space 0, times 0
[  741.996243][T12235] CPU: 1 UID: 0 PID: 12235 Comm: syz.3.1239 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  741.996297][T12235] Tainted: [L]=SOFTLOCKUP
[  741.996309][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  741.996327][T12235] Call Trace:
[  741.996338][T12235]  <TASK>
[  741.996350][T12235]  dump_stack_lvl+0x100/0x190
[  741.996399][T12235]  should_fail_ex.cold+0x5/0xa
[  741.996434][T12235]  should_failslab+0xc2/0x120
[  741.996472][T12235]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  741.996502][T12235]  ? mm_alloc+0x1c/0xd0
[  741.996556][T12235]  mm_alloc+0x1c/0xd0
[  741.996599][T12235]  alloc_bprm+0x2af/0x710
[  741.996650][T12235]  do_execveat_common.isra.0+0x19c/0x580
[  741.996701][T12235]  ? do_getname+0x191/0x390
[  741.996743][T12235]  __x64_sys_execve+0x93/0xd0
[  741.996775][T12235]  do_syscall_64+0x106/0xf80
[  741.996817][T12235]  ? clear_bhb_loop+0x40/0x90
[  741.996853][T12235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.996880][T12235] RIP: 0033:0x7ff246f9bf79
[  741.996905][T12235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  741.996932][T12235] RSP: 002b:00007ff247d9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  741.996963][T12235] RAX: ffffffffffffffda RBX: 00007ff247216090 RCX: 00007ff246f9bf79
[  741.996983][T12235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0
[  741.997002][T12235] RBP: 00007ff2470327e0 R08: 0000000000000000 R09: 0000000000000000
[  741.997020][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  741.997038][T12235] R13: 00007ff247216128 R14: 00007ff247216090 R15: 00007fffd63bdbd8
[  741.997089][T12235]  </TASK>
[  742.457354][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'.
[  742.601815][T12225] chnl_net:caif_netlink_parms(): no params data found
[  742.664764][T12156] Bluetooth: hci5: command tx timeout
[  743.535553][T12225] bridge0: port 1(bridge_slave_0) entered blocking state
[  743.579592][T12225] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.586998][T12225] bridge_slave_0: entered allmulticast mode
[  743.661917][T12225] bridge_slave_0: entered promiscuous mode
[  743.691847][T12225] bridge0: port 2(bridge_slave_1) entered blocking state
[  743.768319][T12225] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.775641][T12225] bridge_slave_1: entered allmulticast mode
[  743.873404][T12225] bridge_slave_1: entered promiscuous mode
[  744.723347][T12156] Bluetooth: hci5: command tx timeout
[  744.848616][T12225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  744.973756][T12225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  745.662515][ T6762] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.427027][ T6762] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.480998][T12225] team0: Port device team_slave_0 added
[  746.508329][T12225] team0: Port device team_slave_1 added
[  746.798124][T12156] Bluetooth: hci5: command tx timeout
[  747.005224][ T6762] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.132398][T12225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  747.191353][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.280830][T12225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  747.320857][T12225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  747.358312][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.510804][T12225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  747.897460][ T6762] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.043488][T12263] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0
[  748.289400][T12225] hsr_slave_0: entered promiscuous mode
[  748.366727][T12225] hsr_slave_1: entered promiscuous mode
[  748.373372][T12225] debugfs: 'hsr0' already exists in 'hsr'
[  748.395782][T12225] Cannot create hsr debugfs directory
[  748.873481][T12156] Bluetooth: hci5: command tx timeout
[  749.694387][ T6762] bridge_slave_0: left allmulticast mode
[  749.736708][ T6762] bridge_slave_0: left promiscuous mode
[  749.752812][ T6762] bridge0: port 1(bridge_slave_0) entered disabled state
[  750.138487][T12268] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  751.495261][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  751.505271][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  753.306338][ T6762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  753.547979][ T6762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  753.650187][ T6762] bond0 (unregistering): Released all slaves
[  754.166708][T12225] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  754.394498][T12225] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  754.544012][T12225] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  755.335980][T12225] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  757.605441][ T6762] hsr_slave_0: left promiscuous mode
[  757.660423][ T6762] hsr_slave_1: left promiscuous mode
[  757.711382][ T6762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  757.771759][ T6762] batman_adv: batadv0: Removing interface: batadv_slave_0
[  757.806275][ T6762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  757.861330][ T6762] batman_adv: batadv0: Removing interface: batadv_slave_1
[  758.073302][ T6762] veth1_macvtap: left promiscuous mode
[  758.079437][ T6762] veth0_macvtap: left promiscuous mode
[  758.161187][ T6762] veth1_vlan: left promiscuous mode
[  758.166731][ T6762] veth0_vlan: left promiscuous mode
[  761.751625][ T6762] team0 (unregistering): Port device team_slave_1 removed
[  761.945721][ T6762] team0 (unregistering): Port device team_slave_0 removed
[  763.788561][T12225] 8021q: adding VLAN 0 to HW filter on device bond0
[  763.975277][T12225] 8021q: adding VLAN 0 to HW filter on device team0
[  764.130399][ T7066] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.137761][ T7066] bridge0: port 1(bridge_slave_0) entered forwarding state
[  764.255510][ T7066] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.262977][ T7066] bridge0: port 2(bridge_slave_1) entered forwarding state
[  764.619566][T12225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  766.354819][T12225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  766.436985][T12367] zswap: compressor  not available
[  767.825660][T12225] veth0_vlan: entered promiscuous mode
[  767.933950][T12225] veth1_vlan: entered promiscuous mode
[  767.975092][T12388] zswap: compressor  not available
[  768.162356][T12225] veth0_macvtap: entered promiscuous mode
[  768.228019][T12225] veth1_macvtap: entered promiscuous mode
[  768.554109][T12225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  768.883028][T12225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  769.301419][ T6757] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  769.405391][ T7066] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  769.455837][ T7066] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  769.617501][ T7066] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  769.772050][ T7066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  769.781436][ T7066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  770.077492][  T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  770.146134][  T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  770.678431][T12431] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  776.815469][T12497] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  777.235184][T12509] kAFS: unparsable volume name
[  779.041894][T12156] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  780.530782][T12530] zswap: compressor  not available
[  781.122387][T12540] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  782.002427][T12550] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1288'.
[  782.268535][T12551] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1287'.
[  783.166316][T12559] FAULT_INJECTION: forcing a failure.
[  783.166316][T12559] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  783.292345][T12559] CPU: 0 UID: 0 PID: 12559 Comm: syz.4.1290 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  783.292393][T12559] Tainted: [L]=SOFTLOCKUP
[  783.292403][T12559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  783.292420][T12559] Call Trace:
[  783.292430][T12559]  <TASK>
[  783.292443][T12559]  dump_stack_lvl+0x100/0x190
[  783.292489][T12559]  should_fail_ex.cold+0x5/0xa
[  783.292522][T12559]  _copy_from_user+0x2e/0xd0
[  783.292557][T12559]  get_bitmap+0x6d/0x110
[  783.292589][T12559]  get_nodes+0x1df/0x210
[  783.292620][T12559]  ? __pfx_get_nodes+0x10/0x10
[  783.292648][T12559]  ? __fget_files+0x21f/0x3d0
[  783.292688][T12559]  kernel_set_mempolicy+0xe8/0x1e0
[  783.292724][T12559]  ? ksys_write+0x1ac/0x250
[  783.292753][T12559]  ? __pfx_kernel_set_mempolicy+0x10/0x10
[  783.292800][T12559]  do_syscall_64+0x106/0xf80
[  783.292842][T12559]  ? clear_bhb_loop+0x40/0x90
[  783.292887][T12559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.292916][T12559] RIP: 0033:0x7fa0ae19bf79
[  783.292941][T12559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  783.292969][T12559] RSP: 002b:00007fa0af088028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee
[  783.292999][T12559] RAX: ffffffffffffffda RBX: 00007fa0ae415fa0 RCX: 00007fa0ae19bf79
[  783.293019][T12559] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000002
[  783.293036][T12559] RBP: 00007fa0af088090 R08: 0000000000000000 R09: 0000000000000000
[  783.293054][T12559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  783.293072][T12559] R13: 00007fa0ae416038 R14: 00007fa0ae415fa0 R15: 00007ffc15194d68
[  783.293112][T12559]  </TASK>
[  784.677814][T12561] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1292'.
[  789.776618][T12639] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  791.907739][T12658] zswap: compressor  not available
[  793.092222][T12687] zswap: compressor  not available
[  793.553358][   T29] audit: type=1800 audit(1770957048.570:15): pid=12713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1317" name="lu_gp_id" dev="configfs" ino=363461 res=0 errno=0
[  793.615709][T12717] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  793.846315][T12719] ALUA LU Group already has a valid ID, ignoring request
[  794.326353][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'.
[  795.321584][T12746] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30
[  795.858943][T12747] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31
[  798.073973][T12771] zswap: compressor  not available
[  799.111881][T12787] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1332'.
[  799.760816][T12767] kexec: Could not allocate control_code_buffer
[  801.528502][T12809] netlink: 322 bytes leftover after parsing attributes in process `syz.5.1337'.
[  802.104696][T12819] zswap: compressor  not available
[  806.566305][   T29] audit: type=1800 audit(1770957061.651:16): pid=12881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1354" name="dbroot" dev="configfs" ino=363772 res=0 errno=0
[  811.477952][T12949] random: crng reseeded on system resumption
[  811.709507][T12956] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  812.652190][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  812.660149][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  814.244462][T12985] Invalid ELF header magic: != ELF
[  814.893601][T12997] FAULT_INJECTION: forcing a failure.
[  814.893601][T12997] name failslab, interval 1, probability 0, space 0, times 0
[  814.919310][T12997] CPU: 0 UID: 0 PID: 12997 Comm: syz.1.1377 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  814.919345][T12997] Tainted: [L]=SOFTLOCKUP
[  814.919352][T12997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  814.919364][T12997] Call Trace:
[  814.919370][T12997]  <TASK>
[  814.919378][T12997]  dump_stack_lvl+0x100/0x190
[  814.919409][T12997]  should_fail_ex.cold+0x5/0xa
[  814.919430][T12997]  should_failslab+0xc2/0x120
[  814.919452][T12997]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  814.919470][T12997]  ? security_file_alloc+0x34/0x2c0
[  814.919496][T12997]  security_file_alloc+0x34/0x2c0
[  814.919517][T12997]  init_file+0x95/0x480
[  814.919540][T12997]  alloc_empty_file+0x73/0x1c0
[  814.919565][T12997]  path_openat+0xe8/0x31a0
[  814.919584][T12997]  ? kasan_save_stack+0x3f/0x50
[  814.919601][T12997]  ? kasan_save_stack+0x30/0x50
[  814.919618][T12997]  ? kasan_save_track+0x14/0x30
[  814.919643][T12997]  ? __kasan_slab_alloc+0x89/0x90
[  814.919662][T12997]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  814.919679][T12997]  ? do_getname+0x35/0x390
[  814.919700][T12997]  ? do_sys_openat2+0xc5/0x1e0
[  814.919724][T12997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  814.919745][T12997]  ? __pfx_path_openat+0x10/0x10
[  814.919773][T12997]  do_file_open+0x20e/0x430
[  814.919795][T12997]  ? __pfx_do_file_open+0x10/0x10
[  814.919831][T12997]  ? alloc_fd+0x476/0x790
[  814.919852][T12997]  ? do_getname+0x191/0x390
[  814.919879][T12997]  do_sys_openat2+0x10d/0x1e0
[  814.919905][T12997]  ? __pfx_do_sys_openat2+0x10/0x10
[  814.919930][T12997]  ? find_held_lock+0x2b/0x80
[  814.919953][T12997]  ? __fget_files+0x215/0x3d0
[  814.919975][T12997]  __x64_sys_openat+0x12d/0x210
[  814.920001][T12997]  ? __pfx___x64_sys_openat+0x10/0x10
[  814.920026][T12997]  ? xfd_validate_state+0x129/0x190
[  814.920054][T12997]  do_syscall_64+0x106/0xf80
[  814.920080][T12997]  ? clear_bhb_loop+0x40/0x90
[  814.920101][T12997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  814.920119][T12997] RIP: 0033:0x7fb8e679bf79
[  814.920135][T12997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  814.920152][T12997] RSP: 002b:00007fb8e75ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  814.920171][T12997] RAX: ffffffffffffffda RBX: 00007fb8e6a16090 RCX: 00007fb8e679bf79
[  814.920183][T12997] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  814.920194][T12997] RBP: 00007fb8e68327e0 R08: 0000000000000000 R09: 0000000000000000
[  814.920205][T12997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  814.920216][T12997] R13: 00007fb8e6a16128 R14: 00007fb8e6a16090 R15: 00007ffe82697e38
[  814.920239][T12997]  </TASK>
[  815.841660][T13001] random: crng reseeded on system resumption
[  816.647593][T13008] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1380'.
[  816.683747][T12999] random: crng reseeded on system resumption
[  817.552903][T13027] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  817.613442][T13024] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  817.623124][T13027] FAULT_INJECTION: forcing a failure.
[  817.623124][T13027] name failslab, interval 1, probability 0, space 0, times 0
[  817.651080][T13027] CPU: 0 UID: 0 PID: 13027 Comm:  Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  817.651138][T13027] Tainted: [L]=SOFTLOCKUP
[  817.651149][T13027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  817.651166][T13027] Call Trace:
[  817.651177][T13027]  <TASK>
[  817.651189][T13027]  dump_stack_lvl+0x100/0x190
[  817.651234][T13027]  should_fail_ex.cold+0x5/0xa
[  817.651271][T13027]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  817.651316][T13027]  should_failslab+0xc2/0x120
[  817.651350][T13027]  __kmalloc_noprof+0xe0/0x850
[  817.651387][T13027]  kernfs_fop_write_iter+0x26a/0x5f0
[  817.651438][T13027]  vfs_write+0x6ac/0x1070
[  817.651468][T13027]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  817.651518][T13027]  ? __pfx_vfs_write+0x10/0x10
[  817.651571][T13027]  ksys_write+0x12a/0x250
[  817.651601][T13027]  ? __pfx_ksys_write+0x10/0x10
[  817.651629][T13027]  ? do_user_addr_fault+0x8d6/0x12f0
[  817.651678][T13027]  do_syscall_64+0x106/0xf80
[  817.651720][T13027]  ? clear_bhb_loop+0x40/0x90
[  817.651755][T13027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.651783][T13027] RIP: 0033:0x7ff246f9bf79
[  817.651816][T13027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  817.651843][T13027] RSP: 002b:00007ff247dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  817.651872][T13027] RAX: ffffffffffffffda RBX: 00007ff247215fa0 RCX: 00007ff246f9bf79
[  817.651891][T13027] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[  817.651908][T13027] RBP: 00007ff247dbd090 R08: 0000000000000000 R09: 0000000000000000
[  817.651925][T13027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  817.651942][T13027] R13: 00007ff247216038 R14: 00007ff247215fa0 R15: 00007fffd63bdbd8
[  817.651982][T13027]  </TASK>
[  819.710504][T13061] random: crng reseeded on system resumption
[  819.713662][T13062] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  820.713267][T13081] Invalid ELF header magic: != ELF
[  820.955599][T13086] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  821.148292][T13086] FAULT_INJECTION: forcing a failure.
[  821.148292][T13086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  821.187611][T13086] CPU: 1 UID: 0 PID: 13086 Comm:  Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  821.187662][T13086] Tainted: [L]=SOFTLOCKUP
[  821.187676][T13086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  821.187698][T13086] Call Trace:
[  821.187711][T13086]  <TASK>
[  821.187723][T13086]  dump_stack_lvl+0x100/0x190
[  821.187769][T13086]  should_fail_ex.cold+0x5/0xa
[  821.187800][T13086]  _copy_from_iter+0x1f4/0x1690
[  821.187841][T13086]  ? __pfx__copy_from_iter+0x10/0x10
[  821.187876][T13086]  ? rcu_is_watching+0x12/0xc0
[  821.187911][T13086]  ? trace_kmalloc+0x83/0xb0
[  821.187942][T13086]  ? __kmalloc_noprof+0x320/0x850
[  821.187978][T13086]  kernfs_fop_write_iter+0x186/0x5f0
[  821.188031][T13086]  vfs_write+0x6ac/0x1070
[  821.188061][T13086]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  821.188111][T13086]  ? __pfx_vfs_write+0x10/0x10
[  821.188166][T13086]  ksys_write+0x12a/0x250
[  821.188193][T13086]  ? __pfx_ksys_write+0x10/0x10
[  821.188222][T13086]  ? do_user_addr_fault+0x8d6/0x12f0
[  821.188270][T13086]  do_syscall_64+0x106/0xf80
[  821.188311][T13086]  ? clear_bhb_loop+0x40/0x90
[  821.188346][T13086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.188374][T13086] RIP: 0033:0x7ff246f9bf79
[  821.188397][T13086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  821.188424][T13086] RSP: 002b:00007ff247dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  821.188452][T13086] RAX: ffffffffffffffda RBX: 00007ff247215fa0 RCX: 00007ff246f9bf79
[  821.188472][T13086] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[  821.188489][T13086] RBP: 00007ff247dbd090 R08: 0000000000000000 R09: 0000000000000000
[  821.188507][T13086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  821.188535][T13086] R13: 00007ff247216038 R14: 00007ff247215fa0 R15: 00007fffd63bdbd8
[  821.188577][T13086]  </TASK>
[  822.546859][T13101] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  822.973006][T13113] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  824.729264][T13144] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  825.303378][T13144] program syz.1.1418 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  825.313505][T13144] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  826.802717][T13178] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1429'.
[  827.407703][T13173] random: crng reseeded on system resumption
[  828.358624][T13204] random: crng reseeded on system resumption
[  828.876091][T13212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  828.891266][T13212] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  828.900482][T13212] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  828.937757][T13212] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  828.953030][T13212] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  829.557458][T13220] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  829.895414][T13211] chnl_net:caif_netlink_parms(): no params data found
[  830.542555][T13211] bridge0: port 1(bridge_slave_0) entered blocking state
[  830.619452][T13211] bridge0: port 1(bridge_slave_0) entered disabled state
[  830.639685][T13211] bridge_slave_0: entered allmulticast mode
[  830.669050][T13211] bridge_slave_0: entered promiscuous mode
[  830.687999][T13211] bridge0: port 2(bridge_slave_1) entered blocking state
[  830.704406][T13211] bridge0: port 2(bridge_slave_1) entered disabled state
[  830.765194][T13211] bridge_slave_1: entered allmulticast mode
[  830.779773][T13211] bridge_slave_1: entered promiscuous mode
[  830.860931][T13211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  830.922544][T13211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  831.038772][T13212] Bluetooth: hci2: command tx timeout
[  831.096262][T13211] team0: Port device team_slave_0 added
[  831.140550][T13211] team0: Port device team_slave_1 added
[  831.300179][T13211] batman_adv: batadv0: Adding interface: batadv_slave_0
[  831.335729][T13211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  831.427019][T13211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  831.486379][T13211] batman_adv: batadv0: Adding interface: batadv_slave_1
[  831.505399][T13211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  831.594505][T13211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  831.732559][T13249] futex_wake_op: syz.3.1445 tries to shift op by -2048; fix this program
[  831.761596][T13249] futex_wake_op: syz.3.1445 tries to shift op by -2048; fix this program
[  831.783450][T13249] 0x000000000001-0x000000020000 : ""
[  831.817892][T13211] hsr_slave_0: entered promiscuous mode
[  831.874838][T13211] hsr_slave_1: entered promiscuous mode
[  831.881430][T13211] debugfs: 'hsr0' already exists in 'hsr'
[  831.913474][T13211] Cannot create hsr debugfs directory
[  831.961158][T13249] ftl_cs: FTL header corrupt!
[  832.487050][T13247] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  832.601207][T13247] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  832.607623][T13247] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  832.719541][T13247] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  832.849076][T13247] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  832.855315][T13247] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  833.109003][T13212] Bluetooth: hci2: command tx timeout
[  833.207415][T13247] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  833.431534][T13247] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  833.493152][T13247] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  833.638451][T13211] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  833.762974][T13211] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  833.772676][T13247] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  833.808423][T13211] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  833.825459][T13212] Bluetooth: hci0: command 0x0c1a tx timeout
[  833.880651][T13211] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  834.392795][T13211] 8021q: adding VLAN 0 to HW filter on device bond0
[  834.497100][T13211] 8021q: adding VLAN 0 to HW filter on device team0
[  834.543401][T12777] bridge0: port 1(bridge_slave_0) entered blocking state
[  834.550823][T12777] bridge0: port 1(bridge_slave_0) entered forwarding state
[  834.593658][T12777] bridge0: port 2(bridge_slave_1) entered blocking state
[  834.600906][T12777] bridge0: port 2(bridge_slave_1) entered forwarding state
[  834.620924][T13212] Bluetooth: hci3: command 0x0c1a tx timeout
[  834.627006][T13212] Bluetooth: hci1: command 0x0c1a tx timeout
[  834.800103][T13212] Bluetooth: hci4: command 0x0c1a tx timeout
[  834.872766][T13212] Bluetooth: hci5: command 0x0c1a tx timeout
[  835.338498][T13211] 8021q: adding VLAN 0 to HW filter on device batadv0
[  835.510174][T13212] Bluetooth: hci2: command 0x0419 tx timeout
[  836.114388][T13211] veth0_vlan: entered promiscuous mode
[  836.150615][T13211] veth1_vlan: entered promiscuous mode
[  836.299588][T13211] veth0_macvtap: entered promiscuous mode
[  836.355160][T13211] veth1_macvtap: entered promiscuous mode
[  836.456886][T13211] batman_adv: batadv0: Interface activated: batadv_slave_0
[  836.527246][T13211] batman_adv: batadv0: Interface activated: batadv_slave_1
[  836.677283][T12699] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  836.704624][T12699] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  836.745889][T12699] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  836.760493][T12699] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  836.929871][T13212] Bluetooth: hci5: command 0x0c1a tx timeout
[  837.180605][T12699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.189157][T12699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.405859][T12699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.416885][T12699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.576784][T13212] Bluetooth: hci2: command 0x0419 tx timeout
[  838.881584][T13311] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  838.999988][T13212] Bluetooth: hci5: command 0x0c1a tx timeout
[  839.638682][T13212] Bluetooth: hci2: command 0x0419 tx timeout
[  839.772286][T13317] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  840.027213][T13317] program syz.6.1455 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  840.047920][T13317] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  840.424418][T13326] nfs: Bad value for 'source'
[  841.720757][T13212] Bluetooth: hci2: command 0x0419 tx timeout
[  841.957170][T13341] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  842.455866][T13360] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  845.958384][T13393] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1473'.
[  846.171309][T13395] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  846.525712][T13400] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  848.050289][T12684] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1326 with max blocks 8 with error 117
[  848.063570][T12684] EXT4-fs (sda1): This should not happen!! Data will be lost
[  848.063570][T12684] 
[  848.248868][T13416] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  848.298794][T13416] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  848.351097][T13416] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  848.405836][T13416] page_type: f5(slab)
[  848.409900][T13416] raw: 00fff00000000040 ffff88813ff2e140 dead000000000100 dead000000000122
[  848.465038][T13416] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  848.503137][T13416] head: 00fff00000000040 ffff88813ff2e140 dead000000000100 dead000000000122
[  848.540285][T13422] zswap: compressor  not available
[  848.545853][T13416] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  848.614690][T13416] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  848.664323][T13416] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  848.714305][T13416] page dumped because: unmovable page
[  848.719744][T13416] page_owner tracks the page as allocated
[  848.843441][T13416] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6755, tgid 6755 (kworker/u8:12), ts 163140881196, free_ts 162916386490
[  848.920074][T13416]  post_alloc_hook+0x1e1/0x250
[  848.971412][T13416]  get_page_from_freelist+0x111d/0x3140
[  849.012821][T13416]  __alloc_frozen_pages_noprof+0x26c/0x2410
[  849.076139][T13416]  alloc_pages_mpol+0x1fb/0x550
[  849.081085][T13416]  new_slab+0x44a/0x6e0
[  849.153295][T13416]  ___slab_alloc+0x31b/0x8d0
[  849.157985][T13416]  __kmalloc_node_track_caller_noprof+0x45c/0x850
[  849.241549][T13416]  kmalloc_reserve+0xe8/0x350
[  849.289546][T13416]  __alloc_skb+0x185/0x710
[  849.313442][T13416]  nsim_dev_trap_report_work+0x2af/0xd10
[  849.354397][T13416]  process_one_work+0x9c2/0x1840
[  849.359432][T13416]  worker_thread+0x5da/0xe40
[  849.390958][T13416]  kthread+0x370/0x450
[  849.397807][T13416]  ret_from_fork+0x754/0xd80
[  849.407578][T13416]  ret_from_fork_asm+0x1a/0x30
[  849.420705][T13416] page last free pid 6778 tgid 6777 stack trace:
[  849.437391][T13416]  __free_frozen_pages+0x822/0x1130
[  849.443178][T13416]  qlist_free_all+0x47/0xe0
[  849.458047][T13416]  kasan_quarantine_reduce+0x1a0/0x1f0
[  849.464348][T13416]  __kasan_slab_alloc+0x69/0x90
[  849.479146][T13416]  kmem_cache_alloc_noprof+0x241/0x6e0
[  849.485104][T13416]  vm_area_dup+0x27/0x8e0
[  849.495276][T13416]  __split_vma+0x18c/0xe30
[  849.505087][T13416]  vms_gather_munmap_vmas+0x3aa/0x1320
[  849.520277][T13416]  __mmap_region+0x46e/0x2820
[  849.530519][T13416]  mmap_region+0x180/0x3e0
[  849.534998][T13416]  do_mmap+0xc63/0x12f0
[  849.549930][T13416]  vm_mmap_pgoff+0x29e/0x470
[  849.555768][T13416]  ksys_mmap_pgoff+0x7d/0x5b0
[  849.568886][T13416]  __x64_sys_mmap+0x125/0x190
[  849.573795][T13416]  do_syscall_64+0x106/0xf80
[  849.578461][T13416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.604851][T13420] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  849.639805][T13420] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  849.648907][T13420] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  849.699498][T13420] page_type: f5(slab)
[  849.703705][T13420] raw: 00fff00000000040 ffff88813ff2e140 dead000000000100 dead000000000122
[  849.729367][T13420] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  849.750932][T13420] head: 00fff00000000040 ffff88813ff2e140 dead000000000100 dead000000000122
[  849.761262][T13420] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  849.771155][T13420] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  849.780616][T13420] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  849.790139][T13420] page dumped because: unmovable page
[  849.795798][T13420] page_owner tracks the page as allocated
[  849.803242][T13420] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6755, tgid 6755 (kworker/u8:12), ts 163140881196, free_ts 162916386490
[  849.845363][T13420]  post_alloc_hook+0x1e1/0x250
[  849.855460][T13420]  get_page_from_freelist+0x111d/0x3140
[  849.868584][T13420]  __alloc_frozen_pages_noprof+0x26c/0x2410
[  849.874558][T13420]  alloc_pages_mpol+0x1fb/0x550
[  849.892367][T13420]  new_slab+0x44a/0x6e0
[  849.896600][T13420]  ___slab_alloc+0x31b/0x8d0
[  849.918830][T13420]  __kmalloc_node_track_caller_noprof+0x45c/0x850
[  849.925500][T13420]  kmalloc_reserve+0xe8/0x350
[  849.958307][T13420]  __alloc_skb+0x185/0x710
[  849.963727][T13420]  nsim_dev_trap_report_work+0x2af/0xd10
[  849.975411][T13420]  process_one_work+0x9c2/0x1840
[  849.980852][T13420]  worker_thread+0x5da/0xe40
[  849.985665][T13420]  kthread+0x370/0x450
[  849.991463][T13420]  ret_from_fork+0x754/0xd80
[  849.997258][T13420]  ret_from_fork_asm+0x1a/0x30
[  850.002805][T13420] page last free pid 6778 tgid 6777 stack trace:
[  850.021009][T13420]  __free_frozen_pages+0x822/0x1130
[  850.026722][T13420]  qlist_free_all+0x47/0xe0
[  850.033859][T13420]  kasan_quarantine_reduce+0x1a0/0x1f0
[  850.041957][T13420]  __kasan_slab_alloc+0x69/0x90
[  850.044232][T13439] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  850.049345][T13420]  kmem_cache_alloc_noprof+0x241/0x6e0
[  850.061738][T13420]  vm_area_dup+0x27/0x8e0
[  850.066549][T13420]  __split_vma+0x18c/0xe30
[  850.081494][T13420]  vms_gather_munmap_vmas+0x3aa/0x1320
[  850.087844][T13420]  __mmap_region+0x46e/0x2820
[  850.090564][T13439] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  850.098506][T13420]  mmap_region+0x180/0x3e0
[  850.138949][T13420]  do_mmap+0xc63/0x12f0
[  850.139002][T13420]  vm_mmap_pgoff+0x29e/0x470
[  850.139041][T13420]  ksys_mmap_pgoff+0x7d/0x5b0
[  850.139076][T13420]  __x64_sys_mmap+0x125/0x190
[  850.139114][T13420]  do_syscall_64+0x106/0xf80
[  850.139159][T13420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.382181][T13446] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1484'.
[  851.554353][T13212] Bluetooth: hci1: unexpected subevent 0x03 length: 253 > 9
[  854.370899][T13494] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1497'.
[  854.415068][T13492] FAULT_INJECTION: forcing a failure.
[  854.415068][T13492] name failslab, interval 1, probability 0, space 0, times 0
[  854.516902][T13492] CPU: 0 UID: 0 PID: 13492 Comm: syz.4.1496 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  854.516949][T13492] Tainted: [L]=SOFTLOCKUP
[  854.516959][T13492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  854.516975][T13492] Call Trace:
[  854.516985][T13492]  <TASK>
[  854.516996][T13492]  dump_stack_lvl+0x100/0x190
[  854.517041][T13492]  should_fail_ex.cold+0x5/0xa
[  854.517074][T13492]  should_failslab+0xc2/0x120
[  854.517108][T13492]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  854.517137][T13492]  ? __proc_create+0x2cb/0x8c0
[  854.517187][T13492]  __proc_create+0x2cb/0x8c0
[  854.517230][T13492]  ? __pfx___proc_create+0x10/0x10
[  854.517285][T13492]  proc_mkdir+0x81/0x170
[  854.517326][T13492]  ? __pfx_proc_mkdir+0x10/0x10
[  854.517364][T13492]  ? cache_register_net+0x137/0x5e0
[  854.517392][T13492]  ? cache_register_net+0x137/0x5e0
[  854.517423][T13492]  cache_register_net+0x18f/0x5e0
[  854.517453][T13492]  nfsd_export_init+0xb6/0x250
[  854.517501][T13492]  ? __pfx_nfsd_net_init+0x10/0x10
[  854.517540][T13492]  nfsd_net_init+0x33/0x3d0
[  854.517580][T13492]  ? __pfx_nfsd_net_init+0x10/0x10
[  854.517619][T13492]  ops_init+0x1e2/0x5f0
[  854.517674][T13492]  setup_net+0x118/0x3a0
[  854.517718][T13492]  ? __pfx_setup_net+0x10/0x10
[  854.517758][T13492]  ? lockdep_init_map_type+0x5c/0x250
[  854.517789][T13492]  ? mutex_init_lockep+0x110/0x150
[  854.517827][T13492]  copy_net_ns+0x46f/0x7c0
[  854.517860][T13492]  create_new_namespaces+0x3ea/0xac0
[  854.517910][T13492]  copy_namespaces+0x468/0x5e0
[  854.517951][T13492]  copy_process+0x3226/0x79b0
[  854.518001][T13492]  ? __pfx_copy_process+0x10/0x10
[  854.518027][T13492]  ? find_held_lock+0x2b/0x80
[  854.518069][T13492]  ? futex_private_hash_put+0x107/0x1c0
[  854.518119][T13492]  kernel_clone+0xfc/0x930
[  854.518147][T13492]  ? __pfx_kernel_clone+0x10/0x10
[  854.518197][T13492]  __do_sys_clone+0xd9/0x120
[  854.518225][T13492]  ? __pfx___do_sys_clone+0x10/0x10
[  854.518253][T13492]  ? __fget_files+0x21f/0x3d0
[  854.518296][T13492]  ? xfd_validate_state+0x129/0x190
[  854.518346][T13492]  do_syscall_64+0x106/0xf80
[  854.518387][T13492]  ? clear_bhb_loop+0x40/0x90
[  854.518422][T13492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.518452][T13492] RIP: 0033:0x7fa0ae19bf79
[  854.518477][T13492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  854.518506][T13492] RSP: 002b:00007fa0af066fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  854.518535][T13492] RAX: ffffffffffffffda RBX: 00007fa0ae416090 RCX: 00007fa0ae19bf79
[  854.518556][T13492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211
[  854.518572][T13492] RBP: 00007fa0ae2327e0 R08: 0000000000000000 R09: 0000000000000000
[  854.518589][T13492] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  854.518607][T13492] R13: 00007fa0ae416128 R14: 00007fa0ae416090 R15: 00007ffc15194d68
[  854.518647][T13492]  </TASK>
[  855.384342][T13513] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  857.282763][T12697] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  857.295677][T12697] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  857.308143][T12697] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  857.315921][T12697] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  857.323665][T12697] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  858.253920][T13533] chnl_net:caif_netlink_parms(): no params data found
[  858.631805][T13533] bridge0: port 1(bridge_slave_0) entered blocking state
[  858.662650][T13533] bridge0: port 1(bridge_slave_0) entered disabled state
[  858.687504][T13533] bridge_slave_0: entered allmulticast mode
[  858.695983][T13533] bridge_slave_0: entered promiscuous mode
[  858.758687][T13533] bridge0: port 2(bridge_slave_1) entered blocking state
[  858.765887][T13533] bridge0: port 2(bridge_slave_1) entered disabled state
[  858.787716][T13533] bridge_slave_1: entered allmulticast mode
[  858.796071][T13533] bridge_slave_1: entered promiscuous mode
[  858.903732][T13533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  858.941321][T13533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  859.056222][T13533] team0: Port device team_slave_0 added
[  859.080310][T13533] team0: Port device team_slave_1 added
[  859.202494][T13533] batman_adv: batadv0: Adding interface: batadv_slave_0
[  859.262543][T13533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  859.329451][T13533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  859.350124][T13533] batman_adv: batadv0: Adding interface: batadv_slave_1
[  859.358875][T13533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  859.395249][T13533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  859.397966][T12697] Bluetooth: hci6: command tx timeout
[  859.597209][T13533] hsr_slave_0: entered promiscuous mode
[  859.619253][T13533] hsr_slave_1: entered promiscuous mode
[  859.635227][T13533] debugfs: 'hsr0' already exists in 'hsr'
[  859.652178][T13533] Cannot create hsr debugfs directory
[  860.377971][T13533] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  860.465589][T13533] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  860.506195][T13533] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  860.529189][T13533] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  860.729937][T13567] zswap: compressor  not available
[  861.244310][T13533] 8021q: adding VLAN 0 to HW filter on device bond0
[  861.321922][T13533] 8021q: adding VLAN 0 to HW filter on device team0
[  861.362481][T12776] bridge0: port 1(bridge_slave_0) entered blocking state
[  861.369750][T12776] bridge0: port 1(bridge_slave_0) entered forwarding state
[  861.431457][T12684] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.438708][T12684] bridge0: port 2(bridge_slave_1) entered forwarding state
[  861.468613][T12697] Bluetooth: hci6: command tx timeout
[  862.313901][T13533] 8021q: adding VLAN 0 to HW filter on device batadv0
[  863.046972][T13533] veth0_vlan: entered promiscuous mode
[  863.184119][T13533] veth1_vlan: entered promiscuous mode
[  863.383099][T13533] veth0_macvtap: entered promiscuous mode
[  863.412021][T13610] zswap: compressor  not available
[  863.525339][T12697] Bluetooth: hci6: command tx timeout
[  863.599740][T13533] veth1_macvtap: entered promiscuous mode
[  863.670355][T13533] batman_adv: batadv0: Interface activated: batadv_slave_0
[  863.700166][T13533] batman_adv: batadv0: Interface activated: batadv_slave_1
[  863.796577][T12691] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  863.827333][T13618] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1522'.
[  863.853017][T12691] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  863.861809][T12691] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  863.968937][T12691] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  864.300205][T12702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  864.345689][T12702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  864.417176][T12699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  864.428909][T12699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  864.653872][T13621] netlink: 'syz.3.1523': attribute type 1 has an invalid length.
[  865.488203][T13638] zswap: compressor  not available
[  865.603341][T12697] Bluetooth: hci6: command tx timeout
[  865.701709][T13647] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  867.223637][T13671] FAULT_INJECTION: forcing a failure.
[  867.223637][T13671] name failslab, interval 1, probability 0, space 0, times 0
[  867.306855][T13671] CPU: 0 UID: 0 PID: 13671 Comm: syz.3.1533 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  867.306908][T13671] Tainted: [L]=SOFTLOCKUP
[  867.306921][T13671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  867.306941][T13671] Call Trace:
[  867.306952][T13671]  <TASK>
[  867.306965][T13671]  dump_stack_lvl+0x100/0x190
[  867.307013][T13671]  should_fail_ex.cold+0x5/0xa
[  867.307046][T13671]  should_failslab+0xc2/0x120
[  867.307085][T13671]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  867.307116][T13671]  ? __d_alloc+0x34/0xa80
[  867.307160][T13671]  __d_alloc+0x34/0xa80
[  867.307198][T13671]  d_alloc_pseudo+0x1c/0xc0
[  867.307243][T13671]  alloc_file_pseudo+0xcf/0x230
[  867.307287][T13671]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  867.307328][T13671]  ? alloc_fd+0x476/0x790
[  867.307366][T13671]  sock_alloc_file+0x50/0x210
[  867.307431][T13671]  __sys_socket+0x1c0/0x260
[  867.307465][T13671]  ? fput+0x79/0x100
[  867.307501][T13671]  ? __pfx___sys_socket+0x10/0x10
[  867.307535][T13671]  ? xfd_validate_state+0x129/0x190
[  867.307592][T13671]  __x64_sys_socket+0x72/0xb0
[  867.307625][T13671]  ? lockdep_hardirqs_on+0x78/0x100
[  867.307670][T13671]  do_syscall_64+0x106/0xf80
[  867.307712][T13671]  ? clear_bhb_loop+0x40/0x90
[  867.307751][T13671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.307783][T13671] RIP: 0033:0x7ff246f9bf79
[  867.307807][T13671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  867.307835][T13671] RSP: 002b:00007ff247dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  867.307864][T13671] RAX: ffffffffffffffda RBX: 00007ff247215fa0 RCX: 00007ff246f9bf79
[  867.307884][T13671] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d
[  867.307902][T13671] RBP: 00007ff2470327e0 R08: 0000000000000000 R09: 0000000000000000
[  867.307920][T13671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  867.307938][T13671] R13: 00007ff247216038 R14: 00007ff247215fa0 R15: 00007fffd63bdbd8
[  867.307978][T13671]  </TASK>
[  867.875430][T12697] Bluetooth: hci4: unexpected subevent 0x03 length: 253 > 9
[  867.964285][T13677] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  868.295021][   T29] audit: type=1326 audit(1770957123.671:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.7.1534" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a38f9bf79 code=0x0
[  871.068467][T13212] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  871.082345][T13212] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  871.095052][T13212] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  871.104371][T13212] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  871.112413][T13212] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  871.986834][T13701] chnl_net:caif_netlink_parms(): no params data found
[  872.256251][T13701] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.273601][T13701] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.354269][T13701] bridge_slave_0: entered allmulticast mode
[  872.418843][T13701] bridge_slave_0: entered promiscuous mode
[  872.449131][T13701] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.471906][T13701] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.512634][T13701] bridge_slave_1: entered allmulticast mode
[  872.520993][T13701] bridge_slave_1: entered promiscuous mode
[  872.901319][T13701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  872.933221][T13701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  873.161004][T13212] Bluetooth: hci7: command tx timeout
[  873.182669][T13701] team0: Port device team_slave_0 added
[  873.214933][T13701] team0: Port device team_slave_1 added
[  873.341392][T13701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  873.364404][T13701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  873.450532][T13701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  873.484172][T13701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  873.502900][T13701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  873.599478][T13701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  873.814653][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  873.821364][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  873.905983][T13701] hsr_slave_0: entered promiscuous mode
[  873.927243][T13701] hsr_slave_1: entered promiscuous mode
[  873.936149][T13701] debugfs: 'hsr0' already exists in 'hsr'
[  873.941974][T13701] Cannot create hsr debugfs directory
[  875.003194][T13701] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  875.055552][T13701] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  875.104618][T13701] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  875.144022][T13701] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  875.229683][T13212] Bluetooth: hci7: command tx timeout
[  875.544831][T13701] 8021q: adding VLAN 0 to HW filter on device bond0
[  875.605499][T13701] 8021q: adding VLAN 0 to HW filter on device team0
[  875.636503][T12684] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.643872][T12684] bridge0: port 1(bridge_slave_0) entered forwarding state
[  875.702219][T12691] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.709540][T12691] bridge0: port 2(bridge_slave_1) entered forwarding state
[  876.481303][T13701] 8021q: adding VLAN 0 to HW filter on device batadv0
[  877.298341][T13701] veth0_vlan: entered promiscuous mode
[  877.309961][T13212] Bluetooth: hci7: command tx timeout
[  877.331745][T13797] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1555'.
[  877.488327][T13701] veth1_vlan: entered promiscuous mode
[  877.546719][T13701] veth0_macvtap: entered promiscuous mode
[  877.566238][T13701] veth1_macvtap: entered promiscuous mode
[  877.612825][T13701] batman_adv: batadv0: Interface activated: batadv_slave_0
[  877.696393][T13701] batman_adv: batadv0: Interface activated: batadv_slave_1
[  877.733441][T12684] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  877.779865][T12684] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  877.820914][T12684] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  877.832002][T12684] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  878.056188][T12684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  878.064230][T12684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  878.224057][T12691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  878.271522][T12691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  878.311975][T13751] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1326 with max blocks 1 with error 117
[  878.312106][T13751] EXT4-fs (sda1): This should not happen!! Data will be lost
[  878.312106][T13751] 
[  878.796381][T13807] zswap: compressor  not available
[  879.153465][T13816] zswap: compressor  not available
[  879.338364][T13820] zswap: compressor  not available
[  879.371914][T13212] Bluetooth: hci7: command tx timeout
[  879.956159][T13835] FAULT_INJECTION: forcing a failure.
[  879.956159][T13835] name failslab, interval 1, probability 0, space 0, times 0
[  879.969306][T13835] CPU: 1 UID: 0 PID: 13835 Comm: syz.3.1563 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  879.969337][T13835] Tainted: [L]=SOFTLOCKUP
[  879.969344][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  879.969355][T13835] Call Trace:
[  879.969362][T13835]  <TASK>
[  879.969370][T13835]  dump_stack_lvl+0x100/0x190
[  879.969401][T13835]  should_fail_ex.cold+0x5/0xa
[  879.969421][T13835]  should_failslab+0xc2/0x120
[  879.969444][T13835]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  879.969462][T13835]  ? sk_prot_alloc+0x60/0x2a0
[  879.969484][T13835]  sk_prot_alloc+0x60/0x2a0
[  879.969510][T13835]  sk_alloc+0x36/0xe80
[  879.969536][T13835]  inet6_create+0x385/0x12b0
[  879.969564][T13835]  ? inet6_create+0x7f/0x12b0
[  879.969593][T13835]  __sock_create+0x339/0x860
[  879.969617][T13835]  __sys_socket+0x14d/0x260
[  879.969638][T13835]  ? __pfx___sys_socket+0x10/0x10
[  879.969658][T13835]  ? xfd_validate_state+0x129/0x190
[  879.969686][T13835]  __x64_sys_socket+0x72/0xb0
[  879.969706][T13835]  ? lockdep_hardirqs_on+0x78/0x100
[  879.969732][T13835]  do_syscall_64+0x106/0xf80
[  879.969758][T13835]  ? clear_bhb_loop+0x40/0x90
[  879.969779][T13835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  879.969797][T13835] RIP: 0033:0x7ff246f9bf79
[  879.969813][T13835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  879.969831][T13835] RSP: 002b:00007ff247dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  879.969850][T13835] RAX: ffffffffffffffda RBX: 00007ff247215fa0 RCX: 00007ff246f9bf79
[  879.969862][T13835] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a
[  879.969873][T13835] RBP: 00007ff2470327e0 R08: 0000000000000000 R09: 0000000000000000
[  879.969883][T13835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  879.969894][T13835] R13: 00007ff247216038 R14: 00007ff247215fa0 R15: 00007fffd63bdbd8
[  879.969917][T13835]  </TASK>
[  880.848222][T13846] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  882.388728][T13877] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  882.737485][T13882] binder: 13881:13882 ioctl c018620c 0 returned -1
[  882.914123][T13886] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  883.162896][T13889] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  883.676959][T13891] netlink: 25 bytes leftover after parsing attributes in process `syz.8.1576'.
[  885.595871][T13925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1585'.
[  885.699014][T13928] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  885.920127][T13935] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff
[  888.005324][T13968] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  888.570537][T13979] FAULT_INJECTION: forcing a failure.
[  888.570537][T13979] name failslab, interval 1, probability 0, space 0, times 0
[  888.610595][T13979] CPU: 0 UID: 0 PID: 13979 Comm: syz.3.1598 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  888.610647][T13979] Tainted: [L]=SOFTLOCKUP
[  888.610659][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  888.610678][T13979] Call Trace:
[  888.610689][T13979]  <TASK>
[  888.610701][T13979]  dump_stack_lvl+0x100/0x190
[  888.610749][T13979]  should_fail_ex.cold+0x5/0xa
[  888.610782][T13979]  should_failslab+0xc2/0x120
[  888.610819][T13979]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  888.610850][T13979]  ? __d_alloc+0x34/0xa80
[  888.610893][T13979]  __d_alloc+0x34/0xa80
[  888.610933][T13979]  d_alloc_pseudo+0x1c/0xc0
[  888.610979][T13979]  alloc_file_pseudo+0xcf/0x230
[  888.611023][T13979]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  888.611064][T13979]  ? alloc_fd+0x476/0x790
[  888.611102][T13979]  sock_alloc_file+0x50/0x210
[  888.611148][T13979]  __sys_socket+0x1c0/0x260
[  888.611181][T13979]  ? fput+0x79/0x100
[  888.611216][T13979]  ? __pfx___sys_socket+0x10/0x10
[  888.611249][T13979]  ? xfd_validate_state+0x129/0x190
[  888.611297][T13979]  __x64_sys_socket+0x72/0xb0
[  888.611330][T13979]  ? lockdep_hardirqs_on+0x78/0x100
[  888.611387][T13979]  do_syscall_64+0x106/0xf80
[  888.611430][T13979]  ? clear_bhb_loop+0x40/0x90
[  888.611467][T13979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  888.611498][T13979] RIP: 0033:0x7ff246f9bf79
[  888.611523][T13979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  888.611552][T13979] RSP: 002b:00007ff247dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  888.611582][T13979] RAX: ffffffffffffffda RBX: 00007ff247215fa0 RCX: 00007ff246f9bf79
[  888.611609][T13979] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029
[  888.611627][T13979] RBP: 00007ff2470327e0 R08: 0000000000000000 R09: 0000000000000000
[  888.611645][T13979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  888.611664][T13979] R13: 00007ff247216038 R14: 00007ff247215fa0 R15: 00007fffd63bdbd8
[  888.611705][T13979]  </TASK>
[  889.905204][T13212] Bluetooth: hci7: unexpected subevent 0x03 length: 253 > 9
[  890.127656][T13997] zswap: compressor  not available
[  890.265478][T14005] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1603'.
[  891.081977][T14023] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  893.217505][T14046] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  893.452545][T14049] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1613'.
[  893.998660][T13212] Bluetooth: hci7: unexpected subevent 0x03 length: 253 > 9
[  895.750765][T14097] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  896.035350][T14104] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  897.949574][T12697] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  897.963052][T12697] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  897.977832][T12697] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  898.004308][T12697] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  898.014158][T12697] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  898.952257][T14134] chnl_net:caif_netlink_parms(): no params data found
[  899.442732][   T29] audit: type=1800 audit(1770957154.957:18): pid=14152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1633" name="lu_gp_id" dev="configfs" ino=372623 res=0 errno=0
[  899.468594][T14152] kstrtoul() returned -22 for lu_gp_id
[  899.517006][T14134] bridge0: port 1(bridge_slave_0) entered blocking state
[  899.545348][T14134] bridge0: port 1(bridge_slave_0) entered disabled state
[  899.573281][T14134] bridge_slave_0: entered allmulticast mode
[  899.600756][T14134] bridge_slave_0: entered promiscuous mode
[  899.632031][T14134] bridge0: port 2(bridge_slave_1) entered blocking state
[  899.656530][T14134] bridge0: port 2(bridge_slave_1) entered disabled state
[  899.714736][T14134] bridge_slave_1: entered allmulticast mode
[  899.723768][T14134] bridge_slave_1: entered promiscuous mode
[  899.964492][T14134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  900.019476][T14134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  900.074222][T12697] Bluetooth: hci8: command tx timeout
[  900.097344][T14170] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  900.179008][T14134] team0: Port device team_slave_0 added
[  900.197339][T14134] team0: Port device team_slave_1 added
[  900.266626][T14134] batman_adv: batadv0: Adding interface: batadv_slave_0
[  900.286169][T14134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  900.370284][T14134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  900.426411][T14134] batman_adv: batadv0: Adding interface: batadv_slave_1
[  900.446175][T14134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  900.521073][T14134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  900.754977][T14134] hsr_slave_0: entered promiscuous mode
[  900.771100][T14134] hsr_slave_1: entered promiscuous mode
[  900.777794][T14134] debugfs: 'hsr0' already exists in 'hsr'
[  900.790878][T14134] Cannot create hsr debugfs directory
[  901.760616][T14185] zswap: compressor  not available
[  901.954422][T12697] Bluetooth: hci1: unexpected subevent 0x03 length: 253 > 9
[  901.956662][T14134] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  902.047909][T14134] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  902.098604][T14134] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  902.150671][T14134] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  902.157645][T12697] Bluetooth: hci8: command tx timeout
[  902.618399][T14134] 8021q: adding VLAN 0 to HW filter on device bond0
[  902.885174][T14134] 8021q: adding VLAN 0 to HW filter on device team0
[  902.901552][T12777] bridge0: port 1(bridge_slave_0) entered blocking state
[  902.908832][T12777] bridge0: port 1(bridge_slave_0) entered forwarding state
[  902.952042][T12777] bridge0: port 2(bridge_slave_1) entered blocking state
[  902.959386][T12777] bridge0: port 2(bridge_slave_1) entered forwarding state
[  903.769069][T14134] 8021q: adding VLAN 0 to HW filter on device batadv0
[  904.191291][T14231] zswap: compressor  not available
[  904.214478][T12697] Bluetooth: hci8: command tx timeout
[  904.585018][T14134] veth0_vlan: entered promiscuous mode
[  904.696491][T12697] Bluetooth: hci6: unexpected subevent 0x03 length: 253 > 9
[  904.805967][T14134] veth1_vlan: entered promiscuous mode
[  904.845569][T14134] veth0_macvtap: entered promiscuous mode
[  904.890331][T14134] veth1_macvtap: entered promiscuous mode
[  905.116245][T14134] batman_adv: batadv0: Interface activated: batadv_slave_0
[  905.138225][T14134] batman_adv: batadv0: Interface activated: batadv_slave_1
[  905.189708][T12699] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  905.224794][T12699] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  905.310128][T12699] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  905.357269][T12699] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  905.677181][T12777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  905.685094][T12777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.828115][T12699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  905.846233][T12699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  906.296180][T13212] Bluetooth: hci8: command tx timeout
[  907.133020][T14261] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  909.345425][T14286] netlink: 25 bytes leftover after parsing attributes in process `syz.8.1656'.
[  911.198866][T14301] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  912.344129][T12697] Bluetooth: hci8: unexpected subevent 0x03 length: 253 > 9
[  913.269283][T14319] zswap: compressor  not available
[  914.825788][T12697] Bluetooth: hci8: unexpected subevent 0x03 length: 253 > 9
[  915.878889][T14357] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  917.327402][T14372] program syz.8.1676 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  918.525042][T14387] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  918.914802][T13212] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  918.926589][T13212] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  918.936757][T13212] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  918.950075][T13212] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  918.961847][T13212] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  919.376858][T14398] netlink: 25 bytes leftover after parsing attributes in process `syz.7.1680'.
[  919.695816][T14399] FAULT_INJECTION: forcing a failure.
[  919.695816][T14399] name failslab, interval 1, probability 0, space 0, times 0
[  919.903466][T14399] CPU: 0 UID: 0 PID: 14399 Comm: syz.8.1677 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  919.903499][T14399] Tainted: [L]=SOFTLOCKUP
[  919.903507][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  919.903518][T14399] Call Trace:
[  919.903525][T14399]  <TASK>
[  919.903533][T14399]  dump_stack_lvl+0x100/0x190
[  919.903565][T14399]  should_fail_ex.cold+0x5/0xa
[  919.903586][T14399]  should_failslab+0xc2/0x120
[  919.903609][T14399]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  919.903629][T14399]  ? kstrdup_const+0x63/0x80
[  919.903654][T14399]  kstrdup+0x51/0xe0
[  919.903677][T14399]  kstrdup_const+0x63/0x80
[  919.903700][T14399]  alloc_vfsmnt+0xe5/0x6a0
[  919.903724][T14399]  ? __pfx___might_resched+0x10/0x10
[  919.903747][T14399]  clone_mnt+0x4b/0x930
[  919.903776][T14399]  copy_tree+0xfc/0xbf0
[  919.903794][T14399]  ? __pfx_down_write+0x10/0x10
[  919.903817][T14399]  copy_mnt_ns+0x2bd/0xc30
[  919.903838][T14399]  ? trace_kmem_cache_alloc+0x80/0xb0
[  919.903860][T14399]  ? create_new_namespaces+0x30/0xac0
[  919.903890][T14399]  create_new_namespaces+0xd3/0xac0
[  919.903915][T14399]  ? bpf_lsm_capable+0x9/0x10
[  919.903938][T14399]  ? security_capable+0x80/0x260
[  919.903976][T14399]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  919.904005][T14399]  ksys_unshare+0x455/0xab0
[  919.904026][T14399]  ? __pfx_ksys_unshare+0x10/0x10
[  919.904051][T14399]  ? xfd_validate_state+0x129/0x190
[  919.904080][T14399]  __x64_sys_unshare+0x31/0x40
[  919.904098][T14399]  do_syscall_64+0x106/0xf80
[  919.904123][T14399]  ? clear_bhb_loop+0x40/0x90
[  919.904145][T14399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  919.904169][T14399] RIP: 0033:0x7f582579bf79
[  919.904185][T14399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  919.904206][T14399] RSP: 002b:00007f5826627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  919.904225][T14399] RAX: ffffffffffffffda RBX: 00007f5825a16270 RCX: 00007f582579bf79
[  919.904239][T14399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000
[  919.904250][T14399] RBP: 00007f58258327e0 R08: 0000000000000000 R09: 0000000000000000
[  919.904262][T14399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  919.904273][T14399] R13: 00007f5825a16308 R14: 00007f5825a16270 R15: 00007ffcbad613e8
[  919.904300][T14399]  </TASK>
[  920.571802][T14395] chnl_net:caif_netlink_parms(): no params data found
[  920.837416][T14416] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  920.918715][T14409] zswap: compressor  not available
[  920.960937][T14395] bridge0: port 1(bridge_slave_0) entered blocking state
[  920.968399][T14395] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.978104][T14395] bridge_slave_0: entered allmulticast mode
[  920.988787][T14395] bridge_slave_0: entered promiscuous mode
[  921.005032][T14395] bridge0: port 2(bridge_slave_1) entered blocking state
[  921.013425][T14395] bridge0: port 2(bridge_slave_1) entered disabled state
[  921.029393][T14395] bridge_slave_1: entered allmulticast mode
[  921.045571][T14395] bridge_slave_1: entered promiscuous mode
[  921.086508][T13212] Bluetooth: hci4: command tx timeout
[  921.197173][T14420] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  921.214429][T14395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  921.258475][T14395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  921.431299][T14395] team0: Port device team_slave_0 added
[  921.461758][T14395] team0: Port device team_slave_1 added
[  921.678980][T14395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  921.690290][T14395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  921.822040][T14395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  921.953620][T14395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  922.032011][T14395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  922.124880][T14395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  922.382650][T14395] hsr_slave_0: entered promiscuous mode
[  922.402791][T14395] hsr_slave_1: entered promiscuous mode
[  922.439781][T14395] debugfs: 'hsr0' already exists in 'hsr'
[  922.445584][T14395] Cannot create hsr debugfs directory
[  923.158051][T13212] Bluetooth: hci4: command tx timeout
[  923.987488][T14395] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  924.292296][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1689'.
[  924.392299][T14395] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  924.519736][T14437] FAULT_INJECTION: forcing a failure.
[  924.519736][T14437] name failslab, interval 1, probability 0, space 0, times 0
[  924.665147][T14437] CPU: 1 UID: 0 PID: 14437 Comm: syz.8.1687 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  924.665202][T14437] Tainted: [L]=SOFTLOCKUP
[  924.665214][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  924.665233][T14437] Call Trace:
[  924.665245][T14437]  <TASK>
[  924.665257][T14437]  dump_stack_lvl+0x100/0x190
[  924.665307][T14437]  should_fail_ex.cold+0x5/0xa
[  924.665341][T14437]  ? kobject_get_path+0xcf/0x2c0
[  924.665386][T14437]  should_failslab+0xc2/0x120
[  924.665424][T14437]  __kmalloc_noprof+0xe0/0x850
[  924.665465][T14437]  kobject_get_path+0xcf/0x2c0
[  924.665523][T14437]  kobject_uevent_env+0x287/0x18b0
[  924.665581][T14437]  nfs_netns_sysfs_setup+0x173/0x200
[  924.665624][T14437]  nfs_net_init+0x10a/0x340
[  924.665664][T14437]  ? __pfx_nfs_net_init+0x10/0x10
[  924.665700][T14437]  ops_init+0x1e2/0x5f0
[  924.665752][T14437]  setup_net+0x118/0x3a0
[  924.665820][T14437]  ? __pfx_setup_net+0x10/0x10
[  924.665864][T14437]  ? lockdep_init_map_type+0x5c/0x250
[  924.665901][T14437]  ? mutex_init_lockep+0x110/0x150
[  924.665943][T14437]  copy_net_ns+0x46f/0x7c0
[  924.665985][T14437]  create_new_namespaces+0x3ea/0xac0
[  924.666039][T14437]  copy_namespaces+0x468/0x5e0
[  924.666086][T14437]  copy_process+0x3226/0x79b0
[  924.666139][T14437]  ? __pfx_copy_process+0x10/0x10
[  924.666171][T14437]  ? find_held_lock+0x2b/0x80
[  924.666230][T14437]  kernel_clone+0xfc/0x930
[  924.666256][T14437]  ? __pfx_futex_wait+0x10/0x10
[  924.666295][T14437]  ? __pfx_kernel_clone+0x10/0x10
[  924.666349][T14437]  __do_sys_clone+0xd9/0x120
[  924.666381][T14437]  ? __pfx___do_sys_clone+0x10/0x10
[  924.666411][T14437]  ? __fget_files+0x21f/0x3d0
[  924.666457][T14437]  ? xfd_validate_state+0x129/0x190
[  924.666512][T14437]  do_syscall_64+0x106/0xf80
[  924.666555][T14437]  ? clear_bhb_loop+0x40/0x90
[  924.666593][T14437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  924.666624][T14437] RIP: 0033:0x7f582579bf79
[  924.666652][T14437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  924.666682][T14437] RSP: 002b:00007f5826689fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  924.666714][T14437] RAX: ffffffffffffffda RBX: 00007f5825a15fa0 RCX: 00007f582579bf79
[  924.666735][T14437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211
[  924.666753][T14437] RBP: 00007f58258327e0 R08: 0000000000000000 R09: 0000000000000000
[  924.666773][T14437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  924.666791][T14437] R13: 00007f5825a16038 R14: 00007f5825a15fa0 R15: 00007ffcbad613e8
[  924.666834][T14437]  </TASK>
[  925.239691][T13212] Bluetooth: hci4: command tx timeout
[  925.447068][T14395] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.183515][T14395] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  927.109407][T14395] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  927.179716][T14395] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  927.248425][T14395] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  927.287595][T14395] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  927.298408][T13212] Bluetooth: hci4: command tx timeout
[  927.749039][T14395] 8021q: adding VLAN 0 to HW filter on device bond0
[  927.831166][T14477] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  927.843652][T14395] 8021q: adding VLAN 0 to HW filter on device team0
[  927.888808][T12691] bridge0: port 1(bridge_slave_0) entered blocking state
[  927.896106][T12691] bridge0: port 1(bridge_slave_0) entered forwarding state
[  927.953978][T12776] bridge0: port 2(bridge_slave_1) entered blocking state
[  927.961274][T12776] bridge0: port 2(bridge_slave_1) entered forwarding state
[  928.900452][T14395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  929.123021][T14395] veth0_vlan: entered promiscuous mode
[  929.229440][T14395] veth1_vlan: entered promiscuous mode
[  929.376606][T14395] veth0_macvtap: entered promiscuous mode
[  929.430980][T14395] veth1_macvtap: entered promiscuous mode
[  929.462135][T12697] Bluetooth: hci7: unexpected subevent 0x03 length: 253 > 9
[  929.529177][T12697] Bluetooth: hci8: unexpected subevent 0x03 length: 253 > 9
[  929.611313][T14501] zswap: compressor  not available
[  929.645704][T14395] batman_adv: batadv0: Interface activated: batadv_slave_0
[  929.665947][T14395] batman_adv: batadv0: Interface activated: batadv_slave_1
[  929.682155][T12776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  929.746040][T12776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  929.783117][T12776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  929.809236][T12776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  930.422318][T12777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.451322][T12777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  930.611231][T14518] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1700'.
[  930.717409][T12776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.725288][T12776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  933.852396][T12697] Bluetooth: hci6: unexpected subevent 0x03 length: 253 > 9
[  934.868255][T12697] Bluetooth: hci8: unexpected subevent 0x03 length: 253 > 9
[  934.942101][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  934.949583][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  937.082282][T14594] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  937.794900][T14600] netlink: 'syz.8.1718': attribute type 8 has an invalid length.
[  938.849432][T12697] Bluetooth: hci4: unexpected subevent 0x03 length: 253 > 9
[  939.212756][T14622] FAULT_INJECTION: forcing a failure.
[  939.212756][T14622] name failslab, interval 1, probability 0, space 0, times 0
[  939.239561][T12697] Bluetooth: hci7: unexpected subevent 0x03 length: 253 > 9
[  939.351737][T14622] CPU: 1 UID: 0 PID: 14622 Comm: syz.7.1721 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  939.351791][T14622] Tainted: [L]=SOFTLOCKUP
[  939.351802][T14622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  939.351821][T14622] Call Trace:
[  939.351832][T14622]  <TASK>
[  939.351845][T14622]  dump_stack_lvl+0x100/0x190
[  939.351893][T14622]  should_fail_ex.cold+0x5/0xa
[  939.351929][T14622]  should_failslab+0xc2/0x120
[  939.351966][T14622]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  939.351999][T14622]  ? kstrdup_const+0x63/0x80
[  939.352041][T14622]  kstrdup+0x51/0xe0
[  939.352085][T14622]  kstrdup_const+0x63/0x80
[  939.352118][T14622]  alloc_vfsmnt+0xe5/0x6a0
[  939.352158][T14622]  ? __pfx___might_resched+0x10/0x10
[  939.352198][T14622]  clone_mnt+0x4b/0x930
[  939.352249][T14622]  copy_tree+0xfc/0xbf0
[  939.352280][T14622]  ? __pfx_down_write+0x10/0x10
[  939.352321][T14622]  copy_mnt_ns+0x2bd/0xc30
[  939.352357][T14622]  ? trace_kmem_cache_alloc+0x80/0xb0
[  939.352393][T14622]  ? create_new_namespaces+0x30/0xac0
[  939.352448][T14622]  create_new_namespaces+0xd3/0xac0
[  939.352490][T14622]  ? bpf_lsm_capable+0x9/0x10
[  939.352529][T14622]  ? security_capable+0x80/0x260
[  939.352579][T14622]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  939.352629][T14622]  ksys_unshare+0x455/0xab0
[  939.352663][T14622]  ? __pfx_ksys_unshare+0x10/0x10
[  939.352691][T14622]  ? xfd_validate_state+0x129/0x190
[  939.352740][T14622]  __x64_sys_unshare+0x31/0x40
[  939.352771][T14622]  do_syscall_64+0x106/0xf80
[  939.352814][T14622]  ? clear_bhb_loop+0x40/0x90
[  939.352850][T14622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.352885][T14622] RIP: 0033:0x7f9a38f9bf79
[  939.352910][T14622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  939.352939][T14622] RSP: 002b:00007f9a39dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  939.352970][T14622] RAX: ffffffffffffffda RBX: 00007f9a39216270 RCX: 00007f9a38f9bf79
[  939.352991][T14622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000
[  939.353010][T14622] RBP: 00007f9a390327e0 R08: 0000000000000000 R09: 0000000000000000
[  939.353029][T14622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  939.353047][T14622] R13: 00007f9a39216308 R14: 00007f9a39216270 R15: 00007ffec689e098
[  939.353101][T14622]  </TASK>
[  940.266035][T14629] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  941.755928][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1731'.
[  942.629607][T14664] FAULT_INJECTION: forcing a failure.
[  942.629607][T14664] name failslab, interval 1, probability 0, space 0, times 0
[  942.686486][T14664] CPU: 0 UID: 0 PID: 14664 Comm: syz.9.1734 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  942.686534][T14664] Tainted: [L]=SOFTLOCKUP
[  942.686541][T14664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  942.686553][T14664] Call Trace:
[  942.686561][T14664]  <TASK>
[  942.686569][T14664]  dump_stack_lvl+0x100/0x190
[  942.686599][T14664]  should_fail_ex.cold+0x5/0xa
[  942.686619][T14664]  should_failslab+0xc2/0x120
[  942.686642][T14664]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  942.686661][T14664]  ? __proc_create+0x2cb/0x8c0
[  942.686692][T14664]  __proc_create+0x2cb/0x8c0
[  942.686720][T14664]  ? __pfx___proc_create+0x10/0x10
[  942.686750][T14664]  ? _raw_write_unlock+0x28/0x50
[  942.686775][T14664]  ? proc_register+0x559/0x8a0
[  942.686805][T14664]  proc_create_reg+0x75/0x170
[  942.686838][T14664]  proc_create_data+0x86/0x110
[  942.686866][T14664]  ? __pfx_proc_create_data+0x10/0x10
[  942.686894][T14664]  ? cache_register_net+0x137/0x5e0
[  942.686910][T14664]  ? cache_register_net+0x137/0x5e0
[  942.686932][T14664]  cache_register_net+0x2d6/0x5e0
[  942.686951][T14664]  nfsd_export_init+0xb6/0x250
[  942.686978][T14664]  ? __pfx_nfsd_net_init+0x10/0x10
[  942.687004][T14664]  nfsd_net_init+0x33/0x3d0
[  942.687030][T14664]  ? __pfx_nfsd_net_init+0x10/0x10
[  942.687055][T14664]  ops_init+0x1e2/0x5f0
[  942.687093][T14664]  setup_net+0x118/0x3a0
[  942.687121][T14664]  ? __pfx_setup_net+0x10/0x10
[  942.687147][T14664]  ? lockdep_init_map_type+0x5c/0x250
[  942.687167][T14664]  ? mutex_init_lockep+0x110/0x150
[  942.687196][T14664]  copy_net_ns+0x46f/0x7c0
[  942.687216][T14664]  create_new_namespaces+0x3ea/0xac0
[  942.687249][T14664]  copy_namespaces+0x468/0x5e0
[  942.687276][T14664]  copy_process+0x3226/0x79b0
[  942.687305][T14664]  ? __pfx_copy_process+0x10/0x10
[  942.687333][T14664]  kernel_clone+0xfc/0x930
[  942.687348][T14664]  ? __pfx_futex_wait+0x10/0x10
[  942.687371][T14664]  ? __pfx_kernel_clone+0x10/0x10
[  942.687401][T14664]  __do_sys_clone+0xd9/0x120
[  942.687418][T14664]  ? __pfx___do_sys_clone+0x10/0x10
[  942.687436][T14664]  ? __fget_files+0x21f/0x3d0
[  942.687462][T14664]  ? xfd_validate_state+0x129/0x190
[  942.687493][T14664]  do_syscall_64+0x106/0xf80
[  942.687518][T14664]  ? clear_bhb_loop+0x40/0x90
[  942.687540][T14664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.687558][T14664] RIP: 0033:0x7fdd7359bf79
[  942.687573][T14664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  942.687591][T14664] RSP: 002b:00007fdd74419fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  942.687609][T14664] RAX: ffffffffffffffda RBX: 00007fdd73815fa0 RCX: 00007fdd7359bf79
[  942.687621][T14664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211
[  942.687632][T14664] RBP: 00007fdd736327e0 R08: 0000000000000000 R09: 0000000000000000
[  942.687642][T14664] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  942.687653][T14664] R13: 00007fdd73816038 R14: 00007fdd73815fa0 R15: 00007ffe346f3668
[  942.687677][T14664]  </TASK>
[  943.502315][T12697] Bluetooth: hci7: unexpected subevent 0x03 length: 253 > 9
[  947.407119][T14711] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  947.668801][   T30] INFO: task kworker/u10:2:12692 blocked for more than 143 seconds.
[  947.688295][   T30]       Tainted: G             L      syzkaller #0
[  947.694883][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  947.751163][   T30] task:kworker/u10:2   state:D stack:26904 pid:12692 tgid:12692 ppid:2      task_flags:0x4208060 flags:0x00080000
[  947.807636][   T30] Workqueue: netns cleanup_net
[  947.812492][   T30] Call Trace:
[  947.815802][   T30]  <TASK>
[  947.867333][   T30]  __schedule+0x1023/0x6000
[  947.872027][   T30]  ? __lock_acquire+0x4a5/0x2630
[  947.917014][   T30]  ? __pfx___schedule+0x10/0x10
[  947.922064][   T30]  ? find_held_lock+0x2b/0x80
[  947.926805][   T30]  ? schedule+0x2bf/0x390
[  947.932505][   T30]  schedule+0xdd/0x390
[  947.936647][   T30]  schedule_timeout+0x1b2/0x280
[  947.986912][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  948.006501][   T30]  ? mark_held_locks+0x40/0x70
[  948.011453][   T30]  __wait_for_common+0x2e7/0x4c0
[  948.046485][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  948.052049][   T30]  ? __pfx___wait_for_common+0x10/0x10
[  948.086079][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  948.092148][   T30]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  948.118467][   T30]  __flush_workqueue+0x3f7/0x1200
[  948.155775][   T30]  ? __lock_acquire+0x4a5/0x2630
[  948.160904][   T30]  ? __pfx___flush_workqueue+0x10/0x10
[  948.229326][   T30]  ? reacquire_held_locks+0xce/0x1e0
[  948.234717][   T30]  ? release_sock+0x21/0x220
[  948.264196][   T30]  ? __pfx_sock_def_readable+0x10/0x10
[  948.315507][   T30]  ? __local_bh_enable_ip+0x9e/0x120
[  948.321085][   T30]  ? __pfx_sock_def_readable+0x10/0x10
[  948.364646][   T30]  rds_tcp_listen_stop+0x104/0x160
[  948.369868][   T30]  rds_tcp_exit_net+0xe0/0x870
[  948.382494][   T30]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[  948.394743][   T30]  ? __pfx___might_resched+0x10/0x10
[  948.400448][   T30]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[  948.454176][   T30]  ops_undo_list+0x2ee/0xab0
[  948.458964][   T30]  ? __pfx_ops_undo_list+0x10/0x10
[  948.503903][   T30]  ? cleanup_net+0x332/0x920
[  948.508582][   T30]  ? idr_destroy+0x62/0x2e0
[  948.513140][   T30]  cleanup_net+0x499/0x920
[  948.573611][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  948.593443][   T30]  ? rcu_is_watching+0x12/0xc0
[  948.599059][   T30]  process_one_work+0x9c2/0x1840
[  948.623434][   T30]  ? __pfx_process_one_work+0x10/0x10
[  948.628914][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  948.653150][   T30]  worker_thread+0x5da/0xe40
[  948.657843][   T30]  ? __pfx_worker_thread+0x10/0x10
[  948.683007][   T30]  ? kthread+0x13a/0x450
[  948.687412][   T30]  ? __pfx_worker_thread+0x10/0x10
[  948.692570][   T30]  kthread+0x370/0x450
[  948.732734][   T30]  ? __pfx_kthread+0x10/0x10
[  948.737510][   T30]  ret_from_fork+0x754/0xd80
[  948.742335][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  948.772891][   T30]  ? __switch_to+0x7b4/0x10c0
[  948.778377][   T30]  ? __pfx_kthread+0x10/0x10
[  948.797629][   T30]  ret_from_fork_asm+0x1a/0x30
[  948.803360][   T30]  </TASK>
[  948.806694][   T30] 
[  948.806694][   T30] Showing all locks held in the system:
[  948.815088][   T30] 1 lock held by khungtaskd/30:
[  948.820246][   T30]  #0: ffffffff8e5e7060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  948.830448][   T30] 2 locks held by kworker/0:5/5909:
[  948.836171][   T30]  #0: ffff88813fe17548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[  948.872267][   T30]  #1: ffffc90004987d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[  948.911798][   T30] 2 locks held by syz.0.175/6795:
[  948.916986][   T30] 4 locks held by kworker/0:1/11582:
[  948.951607][   T30] 3 locks held by kworker/u10:2/12692:
[  948.957131][   T30]  #0: ffff88801c2de948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[  949.051083][   T30]  #1: ffffc90003f1fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[  949.090901][   T30]  #2: ffffffff903e9470 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[  949.100364][   T30] 1 lock held by syz.5.1376/12982:
[  949.133241][   T30]  #0: ffffffff903e9470 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  949.150497][   T30] 1 lock held by syz.6.1464/13344:
[  949.155797][   T30]  #0: ffffffff903e9470 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  949.181525][   T30] 1 lock held by syz.1.1501/13521:
[  949.186788][   T30]  #0: ffffffff903e9470 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  949.200230][   T30] 2 locks held by getty/13654:
[  949.205067][   T30]  #0: ffff8880333990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  949.233890][   T30]  #1: ffffc900176462f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[  949.268659][   T30] 1 lock held by /13877:
[  949.280119][   T30]  #0: ffffffff903e9470 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  949.299993][   T30] 1 lock held by syz.3.1646/14215:
[  949.305277][   T30]  #0: ffffffff903e9470 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  949.339521][   T30] 1 lock held by syz.8.1710/14583:
[  949.344818][   T30] 1 lock held by syz.0.1744/14715:
[  949.373546][   T30]  #0: ffffffff8e5f2c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  949.399304][   T30] 
[  949.401973][   T30] =============================================
[  949.401973][   T30] 
[  949.438991][   T30] NMI backtrace for cpu 0
[  949.439020][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  949.439062][   T30] Tainted: [L]=SOFTLOCKUP
[  949.439073][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  949.439089][   T30] Call Trace:
[  949.439100][   T30]  <TASK>
[  949.439111][   T30]  dump_stack_lvl+0x100/0x190
[  949.439156][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[  949.439199][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  949.439236][   T30]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  949.439274][   T30]  sys_info+0x141/0x190
[  949.439301][   T30]  watchdog+0xcc3/0xfe0
[  949.439349][   T30]  ? __pfx_watchdog+0x10/0x10
[  949.439386][   T30]  ? __kthread_parkme+0x18c/0x230
[  949.439434][   T30]  ? kthread+0x13a/0x450
[  949.439461][   T30]  ? __pfx_watchdog+0x10/0x10
[  949.439494][   T30]  kthread+0x370/0x450
[  949.439522][   T30]  ? __pfx_kthread+0x10/0x10
[  949.439554][   T30]  ret_from_fork+0x754/0xd80
[  949.439592][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  949.439631][   T30]  ? __switch_to+0x7b4/0x10c0
[  949.439656][   T30]  ? __pfx_kthread+0x10/0x10
[  949.439688][   T30]  ret_from_fork_asm+0x1a/0x30
[  949.439736][   T30]  </TASK>
[  949.439761][   T30] Sending NMI from CPU 0 to CPUs 1:
[  949.575744][    C1] NMI backtrace for cpu 1
[  949.575769][    C1] CPU: 1 UID: 0 PID: 13120 Comm: kworker/1:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  949.575803][    C1] Tainted: [L]=SOFTLOCKUP
[  949.575811][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  949.575826][    C1] Workqueue: rcu_gp process_srcu
[  949.575855][    C1] RIP: 0010:mark_held_locks+0x25/0x70
[  949.575879][    C1] Code: 90 90 90 90 90 8b 87 00 0b 00 00 85 c0 7e 5a 41 55 49 89 fd 41 54 41 89 f4 55 31 ed 53 48 8d 9f 08 0b 00 00 0f b6 43 22 89 c2 <83> e2 03 80 fa 01 44 89 e2 83 da ff a8 04 74 0f 48 89 de 4c 89 ef
[  949.575901][    C1] RSP: 0018:ffffc90002ec7bd8 EFLAGS: 00000046
[  949.575919][    C1] RAX: 0000000000000004 RBX: ffff88802ab54788 RCX: 0000000000000000
[  949.575934][    C1] RDX: 0000000000000004 RSI: 0000000000000002 RDI: ffff88802ab53c80
[  949.575949][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  949.575962][    C1] R10: 0000000000000001 R11: 00000000000075b9 R12: 0000000000000002
[  949.575976][    C1] R13: ffff88802ab53c80 R14: 0000000000000000 R15: ffff88813fec4800
[  949.575992][    C1] FS:  0000000000000000(0000) GS:ffff8881246a5000(0000) knlGS:0000000000000000
[  949.576014][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  949.576029][    C1] CR2: 00005569a97f5ee8 CR3: 0000000037af4000 CR4: 00000000003526f0
[  949.576045][    C1] Call Trace:
[  949.576059][    C1]  <TASK>
[  949.576069][    C1]  lockdep_hardirqs_on_prepare+0xb4/0x1b0
[  949.576092][    C1]  trace_hardirqs_on+0x36/0x40
[  949.576120][    C1]  queue_delayed_work_on+0x122/0x1e0
[  949.576149][    C1]  process_one_work+0x9c2/0x1840
[  949.576178][    C1]  ? __pfx_process_one_work+0x10/0x10
[  949.576206][    C1]  ? __pfx_process_srcu+0x10/0x10
[  949.576230][    C1]  worker_thread+0x5da/0xe40
[  949.576258][    C1]  ? __pfx_worker_thread+0x10/0x10
[  949.576283][    C1]  ? kthread+0x13a/0x450
[  949.576305][    C1]  ? __pfx_worker_thread+0x10/0x10
[  949.576329][    C1]  kthread+0x370/0x450
[  949.576350][    C1]  ? __pfx_kthread+0x10/0x10
[  949.576372][    C1]  ret_from_fork+0x754/0xd80
[  949.576400][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  949.576427][    C1]  ? __switch_to+0x7b4/0x10c0
[  949.576448][    C1]  ? __pfx_kthread+0x10/0x10
[  949.576471][    C1]  ret_from_fork_asm+0x1a/0x30
[  949.576499][    C1]  </TASK>
[  949.868357][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  949.875463][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  949.886279][   T30] Tainted: [L]=SOFTLOCKUP
[  949.890672][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  949.900763][   T30] Call Trace:
[  949.904084][   T30]  <TASK>
[  949.907054][   T30]  dump_stack_lvl+0x100/0x190
[  949.911845][   T30]  vpanic+0x20d/0x630
[  949.915972][   T30]  panic+0xd1/0xd1
[  949.919765][   T30]  ? __pfx_panic+0x10/0x10
[  949.924233][   T30]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  949.930517][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  949.936811][   T30]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  949.943008][   T30]  ? watchdog.cold+0x198/0x1ca
[  949.948239][   T30]  ? watchdog+0xcd3/0xfe0
[  949.952890][   T30]  watchdog.cold+0x1a9/0x1ca
[  949.957529][   T30]  ? __pfx_watchdog+0x10/0x10
[  949.962333][   T30]  ? __kthread_parkme+0x18c/0x230
[  949.967589][   T30]  ? kthread+0x13a/0x450
[  949.971916][   T30]  ? __pfx_watchdog+0x10/0x10
[  949.976988][   T30]  kthread+0x370/0x450
[  949.981392][   T30]  ? __pfx_kthread+0x10/0x10
[  949.986057][   T30]  ret_from_fork+0x754/0xd80
[  949.990884][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  949.996054][   T30]  ? __switch_to+0x7b4/0x10c0
[  950.000856][   T30]  ? __pfx_kthread+0x10/0x10
[  950.005574][   T30]  ret_from_fork_asm+0x1a/0x30
[  950.010406][   T30]  </TASK>
[  950.013727][   T30] Kernel Offset: disabled
[  950.018055][   T30] Rebooting in 86400 seconds..