last executing test programs:

2m22.301432951s ago: executing program 1 (id=799):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0)
pwrite64$auto(r0, 0x0, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0)
r1 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x141402, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000029, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0x81a0ae8c, 0x0)
read$auto_trace_clock_fops_trace(r1, &(0x7f00000000c0)=""/4096, 0x1000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/sequencer2\x00', 0x81083, 0x0)
ioctl$auto_SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000600)="5ba8d4")
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/loop6\x00', 0x101282, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c00, 0x0)
r6 = pidfd_open$auto(0x1, 0x0)
setns(r6, 0x60020000)
mknod$auto(0x0, 0x1081, 0x3)

2m21.078424204s ago: executing program 2 (id=801):
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0)
write$auto(0x3, 0x0, 0x5)
r0 = socket(0x5, 0x80000, 0x2)
setsockopt$auto(r0, 0x29, 0x2f, 0x0, 0x22)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = gettid()
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80102, 0x0)
write$auto(r2, 0x0, 0x40100000a3d5)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
read$auto(0xffffffffffffffff, 0x0, 0x8000)
mmap$auto(0x0, 0x4, 0x12, 0x40eb1, 0x401, 0x300000000000)
socket(0x2, 0x801, 0x106)
select$auto(0x5, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x2, 0x1, 0x84)
setsockopt$auto(r3, 0x84, 0x15, 0x0, 0x1)
write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x149b01, 0x0)
writev$auto(0x3, 0x0, 0x8)
ioctl$auto(0xc8, 0x8927, 0xe)
write$auto(r2, 0x0, 0xa10)
close_range$auto(0x2, 0x8, 0x0)
kill$auto(r1, 0x11)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000)
bpf$auto(0x1, 0x0, 0x100000cf)
r4 = socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
ioctl$auto(r4, 0x89f0, 0x24)

2m20.717083258s ago: executing program 32 (id=764):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="07031abd70250c00587b22"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x440008c3}, 0x50)
rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000240)='./file1\x00')
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r7, 0x1, 0x94d1)
ptrace$auto_PTRACE_GET_SYSCALL_USER_DISPATCH_CONFIG(0x4211, r7, 0x100, 0x100000001)
lstat$auto(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'})
close_range$auto(0xffffffffffffffff, r5, 0x4800000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/030/001\x00', 0x48000, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x106)
listen$auto(0x3, 0x81)
bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a)
r8 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0)
read$auto_proc_pid_maps_operations_internal(r8, &(0x7f00000020c0)=""/4093, 0xffd)

2m20.688035652s ago: executing program 2 (id=803):
r0 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size\x00', 0x302, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000)
r1 = fanotify_init$auto(0x65, 0x2)
splice$auto(r1, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x9)
close_range$auto(0x0, 0x5, 0x0)
socket(0x18, 0x2, 0x0)
clone$auto(0x20003b43, 0x4, 0x0, 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x140, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
fchmod$auto(r1, 0xfffb)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x2, 0x273)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0)
sendfile$auto(0x3, r2, 0x0, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
clock_nanosleep$auto(0xa, 0x9, 0x0, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xe4}, 0x3)
rseq$auto(&(0x7f0000000080)={0x40, 0x3, 0x7, 0x74800743, 0x6, 0x1, "9fea39c168ba0d7222242c1586ad1963d95acaf195964e53c9c812dc007e1eefb01339fb00d2124a6aa66652025e0bc7029ac352e99c4179a4f71e6c89541b84335a428e08403113db025bdd4d4ec7a78f42a6f52efa36d4f77bf99b2b592c8ce89fbf497bfa4d4253881e5e17b4892c509e86f15e85ab16dc851b524ac55f1e42f2a17a33f723c8832ba70eac5d4daed2529c"}, 0xfff, 0x0, 0x80000000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x3, 0x6)
socket(0x2, 0x5, 0x0)
getsockopt$auto(0x4, 0x6, 0x24, 0xfffffffffffffffc, 0x0)
select$auto(0x0, &(0x7f00000001c0)={[0x5, 0x10, 0x4, 0x3, 0x5, 0x7, 0x2, 0x902, 0x4, 0x10001, 0xffff, 0xe, 0x80000001, 0x6, 0x1, 0x3]}, &(0x7f00000002c0)={[0x2, 0xff8, 0x3, 0x4000000000000000, 0x0, 0x4, 0xfffffffffffffff1, 0xa, 0x80, 0x0, 0xd990, 0xfffffffffffffffc, 0xd40a, 0xf53, 0x9, 0x8000000000000000]}, &(0x7f0000000440)={[0x5, 0x800, 0x2, 0x9, 0x7, 0x9, 0x8000, 0xfffffffffffffff8, 0x3, 0xf, 0x6, 0x402, 0x9f, 0x81, 0x8, 0x2a5c]}, &(0x7f0000000400)={0x43f, 0x2})
read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000280)=""/40, 0x28)

2m18.199231574s ago: executing program 2 (id=805):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket(0x29, 0x5, 0x0)
write$auto(r3, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x15, 0x0, 0x1)

2m14.725281724s ago: executing program 4 (id=806):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0x2000000000007)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r0, &(0x7f0000000080)='1\x00\\\xa0\x06|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7d)
ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff)
open(&(0x7f0000000100)='.\x00', 0x595002, 0x408)
mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0)
read$auto(r1, 0x0, 0x39b8)
socketcall$auto_SYS_RECVMSG(0x11, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)

2m14.288226891s ago: executing program 4 (id=807):
r0 = socket(0x10, 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000004040)='/dev/ptyd0\x00', 0xc8000, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
close_range$auto(0x2, 0x8, 0x0)
r1 = io_uring_setup$auto(0x6, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, 0xfffffffffffffffc, 0x0)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xfffffffffffffff9, 0xe}, 0x7}, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250a0000000c00028008000a807b45aec0"], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x40)
clock_nanosleep$auto(0xfffffffe, 0x9771, &(0x7f0000013b80)={0x1ff, 0x6}, 0x0)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x6, 0x80b, 0x10001, 0x2}, 0x20, 0x2000000, 0x8000006)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
statmount$auto(0x0, 0x0, 0x1fe, 0x1)
r3 = socket(0x2, 0x3, 0xa)
connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54)
mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffa6}, 0x1, 0x0, 0x0, 0x20040000}, 0x880)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0)
ioctl$auto_RNDRESEEDCRNG(0xffffffffffffffff, 0x5207, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000240)="e769ffff91a9bccbf2a814c2b1c2da6a4642e71e42496c6bac2cd2cc3aa9633c36df13128be76976577ef8b494eb27dd7c5c300903663e1e87c15519219ff691bef8e8162e8a841e0b720ba4c432a0b5e1e6ce3fba9b6c4462c74f701a8daaf2a07cdcee8ef120a79f8ecfef3532373fcfc0602284e9ecfab10a02", 0x7b)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, 0xffffffffffffffff, 0x10000}, 0x10)
mmap$auto(0x0, 0x4020005, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)

2m14.205655499s ago: executing program 4 (id=808):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0x29, 0x5, 0x0)
write$auto(r4, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x0, 0x1)

2m12.809410477s ago: executing program 4 (id=809):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0x29, 0x5, 0x0)
write$auto(r4, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x0, 0x1)

2m7.247610935s ago: executing program 33 (id=799):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0)
pwrite64$auto(r0, 0x0, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0)
r1 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x141402, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000029, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0x81a0ae8c, 0x0)
read$auto_trace_clock_fops_trace(r1, &(0x7f00000000c0)=""/4096, 0x1000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/sequencer2\x00', 0x81083, 0x0)
ioctl$auto_SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000600)="5ba8d4")
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/loop6\x00', 0x101282, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c00, 0x0)
r6 = pidfd_open$auto(0x1, 0x0)
setns(r6, 0x60020000)
mknod$auto(0x0, 0x1081, 0x3)

2m3.368861179s ago: executing program 5 (id=813):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0x29, 0x5, 0x0)
write$auto(r4, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x0, 0x1)

2m3.200668817s ago: executing program 34 (id=804):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x147302, 0x1b0)
r1 = memfd_create$auto(&(0x7f0000000000)='\x00', 0x6)
read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, 0x0, 0x0)
bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000200)=@raw_tracepoint={0x6, 0xffffffffffffffff, 0x0, 0x81}, 0x9)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x408140, 0x11)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sched_setaffinity$auto(0x0, 0x5, 0x0)
setresuid$auto(0x2, 0xffffffffffffffff, 0x200)
keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c)
syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x400000000000021, 0xe, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xd)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
mmap$auto(0x0, 0x1, 0xfd5, 0x12, r2, 0x0)
mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0)
close_range$auto(r0, r0, 0x5)
syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), r0)
r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0)
ioctl$auto(r3, 0x64ea, 0x40)
r4 = socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
connect$auto(0x3, &(0x7f0000000080)=@phonet={0x23, 0x55, 0x3, 0x6}, 0x7)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x81, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.pressure\x00', 0x42802, 0x0)
mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, r4, 0x8000)

2m2.711390604s ago: executing program 35 (id=805):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket(0x29, 0x5, 0x0)
write$auto(r3, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x15, 0x0, 0x1)

2m0.502272401s ago: executing program 5 (id=816):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x15, 0x800, 0x9)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000)
munmap$auto(0x200000008000, 0xffffffff)
r2 = socket(0xa, 0x2, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon22\x00', 0x40200, 0x0)
mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe)
fstatfs$auto(r2, 0x0)
setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(r0, 0x2000001, 0x21, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vivid.0/video4linux/video16/power/runtime_active_time\x00', 0x301000, 0x0)
read$auto(r3, 0x0, 0x80000002)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240040, 0x0)
r5 = ioctl$auto_TUNSETLINK(r4, 0x400454cd, &(0x7f0000000080)=0x8)
mmap$auto(0xffffffffffffffff, 0x420005, 0x1ff, 0xeb5, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/erspan0/queues/tx-0/xps_cpus\x00', 0x8382, 0x0)
read$auto(0x3, 0x0, 0x8080)
write$auto_event_trigger_fops_trace(r5, &(0x7f00000002c0)="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", 0x17b)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x40000, 0x0)

1m57.670708957s ago: executing program 36 (id=809):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0x29, 0x5, 0x0)
write$auto(r4, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x0, 0x1)

1m45.191816953s ago: executing program 37 (id=816):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x15, 0x800, 0x9)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000)
munmap$auto(0x200000008000, 0xffffffff)
r2 = socket(0xa, 0x2, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon22\x00', 0x40200, 0x0)
mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe)
fstatfs$auto(r2, 0x0)
setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(r0, 0x2000001, 0x21, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vivid.0/video4linux/video16/power/runtime_active_time\x00', 0x301000, 0x0)
read$auto(r3, 0x0, 0x80000002)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240040, 0x0)
r5 = ioctl$auto_TUNSETLINK(r4, 0x400454cd, &(0x7f0000000080)=0x8)
mmap$auto(0xffffffffffffffff, 0x420005, 0x1ff, 0xeb5, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/erspan0/queues/tx-0/xps_cpus\x00', 0x8382, 0x0)
read$auto(0x3, 0x0, 0x8080)
write$auto_event_trigger_fops_trace(r5, &(0x7f00000002c0)="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", 0x17b)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x40000, 0x0)

1m35.70097103s ago: executing program 38 (id=823):
prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x480102, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f00000002c0)="2dc3f4be173a5f", 0x7)
mmap$auto(0x0, 0x10000202000c, 0x2, 0x800000000000ebf, 0xfffffffffffffffa, 0x8000)
r1 = pipe2$auto(0x0, 0x80)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x200, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001680), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000700)={0x38, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY_NAME={0x6, 0x2, '\'\x00'}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x40)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r7, 0x4, 0x7ff)
ptrace$auto_PTRACE_GET_RSEQ_CONFIGURATION(0x420f, r7, 0x0, 0x3)
ptrace$auto_PTRACE_SETREGSET(0x4205, r7, 0x3e, 0x9)
r8 = waitid$auto_P_PIDFD(0x3, r1, &(0x7f00000000c0)={@_si_pad}, 0x5, &(0x7f0000000140)={{0xa93, 0xff}, {0x1, 0x8143}, 0x7, 0x3, 0x3, 0x7, 0xab2, 0x0, 0x8, 0x2, 0x4, 0x8, 0x9, 0xa, 0x401, 0xb7d})
r9 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000005200), 0x40040, 0x0)
read$auto_safesetid_gid_file_fops_securityfs(r9, 0x0, 0x0)
sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)={0x324, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4854e292}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_SEC_KEY={0x2f0, 0x30, 0x0, 0x1, [@typed={0x8, 0x155, 0x0, 0x0, @pid=r8}, @nested={0xe7, 0x139, 0x0, 0x1, [@typed={0xe, 0x92, 0x0, 0x0, @str='^-\xd3\':(!@*\x00'}, @typed={0x4, 0xe8}, @generic="4d56deecee31bd86731ba08061e8b80aa9ebf636627364f2722085e9ce11e1d92753a238082b1c7096c6c84eadb88cc7c2d5793485621bc20bdb735e7e255d1a7be44c97c3c5e3261eaa586690f03bf5c2c9d887a150d97e7e65ff041321f4c828409846f1b06e851a4a56df744229a24f58c99da85f2b554f3fb9565f8d68462f81292ff99095caec107de1c824a375b23cbdbd239f1b4085122aec134a075a6c16a47662b93d92e38401d315af9dfc3739f7bcc6d25d26200932c57d60b8dc956cc418004ebd7ac8b14f25146dee"]}, @generic="4e1aba048c1ad821499ca483b8c007e441f1f46c3a359a2a1ce235bf13b5a70e61075d576e9759481d947421429935ab1f199fcfc5bf471803c8883881c765f3f5a09ebedd7972ff2dddfa5504ea8c1fb4be6a78e0cd3846d3d36c706f5b603176dd90980da24ede86a92f65", @typed={0x25, 0xdb, 0x0, 0x0, @binary="e8a35e280c963b1bb748c1e57318df8c3c1a4181cbca4986bec52b05c60b7030c2"}, @nested={0x165, 0x21, 0x0, 0x1, [@nested={0x4, 0x90}, @typed={0x8, 0x64, 0x0, 0x0, @u32=0xfffffffa}, @nested={0x4, 0xaa}, @generic="a0e82a880847c70475185cecee46404aac7e09e7412560b8d458afb7d256cde243565a75b8c04f7921e6a2c6f7d34648e4de06a5415e2d2d56f37ec598659abae74e0fa068eaf6f0f962276eac22c4d48b4f96cb926e4bac901a6fd71d24ed0293ef15c006336021ae0a508fdfcf93cfcdfdcbb5d67deb2d8af687415df898ea1dec", @typed={0x14, 0x3c, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="3bc6c86f81e63e7b3979b4715fe33d989b8dd3dc67f8ec64bf862759e2064bf136fa3c14fac8f9a22a636266d4009896e50637b82d3ead7930e6b1ee941d5209e9d95548b75d1dbbda9a9842ec4d64725a99acf71ff3959805fc2edd5c58de3a336b9a5bf683c2d56e431328f23dfd2e052c01808e8b5c1f6790870c5ae9f93d409c843537f1b83198533e2199a3e276a708816fff2c0d98a59a2f0f20dde1671623f026cdd6ddafcb1622232651d0cca6bb83568939d627d322ca"]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x40004}, 0x8001)
sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r6, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x6}, @NL802154_ATTR_WPAN_PHY_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20)
r10 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r10)
ioctl$auto_KVM_GET_MSRS(r3, 0x4004ae8b, 0x0)
write$auto(r2, 0x0, 0x80000000)

1m31.737099483s ago: executing program 39 (id=836):
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r1, 0x23, 0x70bd27, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008008}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x106)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3)
read$auto_stats_fops_(0xffffffffffffffff, 0x0, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xc, 0x940, 0x1ffde, 0x7, 0x6, 0x3ff, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3a]}, 0x200000000400, 0x81)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = getpgid(r4)
waitid$auto_P_PGID(0x2, r5, 0x0, 0x6, 0x0)
sendmsg$auto_TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={0x0, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
sched_setscheduler$auto(r5, 0x5, &(0x7f00000000c0)={0x7})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)

1m27.790640656s ago: executing program 40 (id=842):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
preadv$auto(0x40000000000003, 0x0, 0x6, 0x3, 0x5)
lseek$auto(0x3, 0x0, 0x1)
epoll_ctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/edid_override\x00', 0x228c41, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
close_range$auto(r0, r0, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
connect$auto(0x3, 0x0, 0x55)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0x0, 0x0)
listen$auto(r0, 0x40)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x7, 0x0)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
mmap$auto(0x0, 0x2, 0x80000000dd, 0x10010, 0x401, 0x80008000)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
r1 = epoll_create$auto(0x4)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0)
epoll_ctl$auto(r1, 0x1, r2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
fallocate$auto(0x8000000000000003, 0x40, 0x9, 0x4cbd5d)

1m27.745898215s ago: executing program 1 (id=845):
close_range$auto(0x2, 0x8, 0x0)
ioprio_set$auto(0x2, 0x800000000, 0x8)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x108100, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
sendmsg$auto_SMC_PNETID_ADD(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}, @SMC_PNETID_IBNAME={0xb, 0x3, '\'[\':]%\x00'}, @SMC_PNETID_ETHNAME={0x6, 0x2, '$\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x801)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0)
r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x500, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000005c0)=""/8, 0x8)
ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0)
madvise$auto(0x6, 0xeff, 0x15)
writev$auto(r3, &(0x7f00000001c0)={0x0, 0x1}, 0x7ff)
sendfile$auto(0x1, 0x3, 0x0, 0x400000)

1m27.415799846s ago: executing program 1 (id=849):
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0)
write$auto_console_fops_tty_io(r1, &(0x7f0000001240), 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000600)={{&(0x7f0000000400)="5cdd59f1a68d086a02a2cc1399c7b3f7410eb36cfbec7e7224eaf6de379d09771080b197b8057225ffa98bc9a7bd53a5aee9a2d48d74d149c199be3009d2d61af64942e106e9b586aabcd7ae4de8a0e87e02af7f6af674c2fc8d8a8a78916f9c23e6b8a8be7141ae87f2996f079bfcbadc2ef4a6a3e894ba7dd3d9f11bd4d055", 0x6, &(0x7f0000000540)={&(0x7f00000004c0)="35a4988620ed7f4ab66aa8948d2c0530bb25f6057ba29add8bbc1d2db5f8682804b365a0d809d366e189194941627ddf76d73565a6133f661519a99780edab37135a9058cfbea6f19ec9ad30287159ec1c6afd59583911a5239ff895b0871d32f098c6cfdef0b944fe"}, 0x2, &(0x7f0000000580)="6ea0838008f497d022b78e5e7eb7c80c499b948523cfff8c50f12ebc124c316e0b644f39bb8b55a743fb004e0ed1aec82d0b82794ab3801ad7705749f562a3d87256f1ec7ebea9a0fd16decd422f095cc3abfc2c4e7fcc9916d6a7139c731bdeed", 0x4, 0xc7b}, 0xfffffffe}, 0x6, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
keyctl$auto_KEYCTL_ASSUME_AUTHORITY(0x10, 0xe8ff, 0x7fffffffffffffff, 0x8, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x100)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)

1m26.354692848s ago: executing program 1 (id=850):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card2/id\x00', 0x200, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001280)=""/23, 0xfdfc)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043)
sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x24008810)
mmap$auto(0x1c1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7)
r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/security/tomoyo/query\x00', 0x2, 0x0)
write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000480)="f21a9a3c5c3e006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770dc8f745d1c76eed1672bb713aca465c9bbc23b50000000000000004c635fcd1410f37152ad1f7fa09270ce98f867fefbe147095e2928c0a", 0x58)
lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon40\x00', 0x40000, 0x0)
ioctl$auto_MON_IOCH_MFLUSH(r3, 0x9208, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xc3, 0x1a, "891379662d59702d0d61a5379450e7a46adb14be649062991d6589c0ebe074a168ee5f53b3cda95bff8f15efcd40a8b4ac5154d5e4132685d8d67328584af84790aed832222ff40841ecd76d592511b2ff551a4c9789f88fb134e57769e19af5796061504f100199c3ace289164e755f8c1c0e871df73bdc4b78eec460b0a642c41126f29c3c93d6b7b2f086ba6c2c62bb9627c3929e040d87e0dc19cb1c5899151e9ce63d5bb6acf31faaa0cb765fdbe0c8d54376279848793ae8c3e02a3a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x7}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x9}]}, 0xf4}, 0x1, 0x0, 0x0, 0x11}, 0x0)
pipe$auto(0x0)

1m24.998995707s ago: executing program 41 (id=843):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card2/id\x00', 0x200, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001280)=""/23, 0xfdfc)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043)
sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x24008810)
mmap$auto(0x1c1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7)
r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/security/tomoyo/query\x00', 0x2, 0x0)
write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000480)="f21a9a3c5c3e006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770dc8f745d1c76eed1672bb713aca465c9bbc23b50000000000000004c635fcd1410f37152ad1f7fa09270ce98f867fefbe147095e2928c0a", 0x58)
lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon40\x00', 0x40000, 0x0)
ioctl$auto_MON_IOCH_MFLUSH(r3, 0x9208, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
memfd_create$auto(0x0, 0x1a)
socket(0xa, 0x1, 0x84)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xc3, 0x1a, "891379662d59702d0d61a5379450e7a46adb14be649062991d6589c0ebe074a168ee5f53b3cda95bff8f15efcd40a8b4ac5154d5e4132685d8d67328584af84790aed832222ff40841ecd76d592511b2ff551a4c9789f88fb134e57769e19af5796061504f100199c3ace289164e755f8c1c0e871df73bdc4b78eec460b0a642c41126f29c3c93d6b7b2f086ba6c2c62bb9627c3929e040d87e0dc19cb1c5899151e9ce63d5bb6acf31faaa0cb765fdbe0c8d54376279848793ae8c3e02a3a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x7}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x9}]}, 0xf4}, 0x1, 0x0, 0x0, 0x11}, 0x0)
pipe$auto(0x0)

1m24.976850959s ago: executing program 1 (id=852):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0x29, 0x5, 0x0)
write$auto(r4, 0x0, 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x0, 0x1)

1m19.89548684s ago: executing program 1 (id=853):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
r1 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0)
close_range$auto(r1, r0, 0x9)
write$auto(r0, &(0x7f0000000000)='y\x8c', 0x2)
mmap$auto(0x0, 0x2020009, 0x7fffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
ioprio_set$auto(0x2, 0x800000000, 0x8)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x710f}, 0xa)

1m17.37969806s ago: executing program 2 (id=851):
mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0xffffffffffffffff, 0x8000)
readahead$auto(0xffffffffffffffff, 0x2, 0x10001)
getrandom$auto(0x0, 0x6000004, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x40000, 0x0)
r1 = getpid()
r2 = gettid()
rt_tgsigqueueinfo$auto(r1, r2, 0x22, &(0x7f0000000400)={@siginfo_0_0={0x3, 0xfffffff5, 0xfffffffa, @_kill={r1}}})
ioctl$auto_FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=0x3)
setsockopt$auto(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x5)
r3 = socket(0x2b, 0x1, 0x0)
r4 = socket(0x10, 0x2, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00'})
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x200490c4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r7)
ioctl$auto_KVM_CREATE_VM(r6, 0xc048aeca, 0x0)
sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x2000c031)
sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830)

1m17.166628917s ago: executing program 2 (id=856):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0x29, 0x5, 0x0)
write$auto(r4, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x15, 0x0, 0x1)

1m15.695810598s ago: executing program 2 (id=858):
getrandom$auto(0x0, 0x6000000, 0x3)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r0, 0x400, 0x0)
flock$auto(r0, 0x8)
r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000001c0), 0x141f42, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x27ffe)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"})
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
socket(0x28, 0x5, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x8, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x203, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x4, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x81, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000500)={0x0, 0xfbf}, 0x2, 0x0, 0x7, 0xa505}, 0x3ff}, 0x7, 0x4008)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)
r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0)
ioctl$auto_CEC_S_MODE(r5, 0x40046109, &(0x7f0000002c40)=0x7)
ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40603d10, 0x0)

1m14.168372059s ago: executing program 42 (id=847):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x2000000000000eb1, 0x401, 0x8000)
set_mempolicy$auto(0xbb0a, &(0x7f0000000040)=0xffffffffffff8001, 0x6)
r0 = socket(0xa, 0x2, 0x73)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
r1 = socket(0x1d, 0x5, 0x1)
setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800)
io_uring_setup$auto(0x8, 0x0)
io_uring_register$auto(0x2, 0x10, 0x0, 0x7f)
sendto$auto(r0, 0x0, 0xfdef, 0xfe80, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0)
socket(0x10, 0x2, 0x4)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101000, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8881, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r2, 0x0)
r4 = socket(0x10, 0x2, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5)
read$auto(r5, &(0x7f0000000000)='\x00', 0x91e2)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x347fc2, 0x0)
r6 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r6, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050)
write$auto(r4, &(0x7f0000000000)='-\xd3', 0xfdef)
socket(0x22, 0xe, 0x20000)

1m8.264721435s ago: executing program 4 (id=863):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0x29, 0x5, 0x0)
write$auto(r4, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x15, 0x0, 0x1)

1m6.53664406s ago: executing program 4 (id=872):
r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x88900, 0x0)
readv$auto(r0, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)
socket(0x2, 0x801, 0x84)
r1 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000440)=@enable_stats={0xffffffff}, 0x80000001)
mmap$auto(0x100000000002b, 0xb, 0x80004000000000e5, 0x18, r1, 0xfffffffffffffff7)
r2 = socket(0x1d, 0x3, 0x1)
r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x101000, 0x0)
read$auto_nsim_dev_max_vfs_fops_dev(r3, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a)
setsockopt$auto(r2, 0x65, 0x1, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x4, 0x100000001, 0x0)
r4 = fsopen$auto(0x0, 0x1)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x7, 0xa, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x5, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0xa, 0x20000800001, 0x3, 0x1, 0x3, 0x6, 0x8, 0x0, 0x5, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, [0x18, 0x0, 0x0, 0x0, 0x33e, 0x0, 0x401, 0x5, 0x0, 0x3, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x80000002, 0x3, 0x0, 0x3, 0x0, 0x27, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x10004, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x100000000, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x43, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800)
r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000140), r4)
sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008008}, 0x4001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
lseek$auto(0xffffffffffffffff, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0)
io_uring_setup$auto(0x6, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0)

1m4.633007637s ago: executing program 43 (id=853):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
r1 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0)
close_range$auto(r1, r0, 0x9)
write$auto(r0, &(0x7f0000000000)='y\x8c', 0x2)
mmap$auto(0x0, 0x2020009, 0x7fffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
ioprio_set$auto(0x2, 0x800000000, 0x8)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x710f}, 0xa)

1m3.543900423s ago: executing program 3 (id=879):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card2/id\x00', 0x200, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001280)=""/23, 0xfdfc)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043)
sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x24008810)
mmap$auto(0x1c1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7)
r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/security/tomoyo/query\x00', 0x2, 0x0)
write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000480)="f21a9a3c5c3e006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770dc8f745d1c76eed1672bb713aca465c9bbc23b50000000000000004c635fcd1410f37152ad1f7fa09270ce98f867fefbe147095e2928c0a", 0x58)
lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon40\x00', 0x40000, 0x0)
ioctl$auto_MON_IOCH_MFLUSH(r3, 0x9208, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
memfd_create$auto(0x0, 0x1a)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xc3, 0x1a, "891379662d59702d0d61a5379450e7a46adb14be649062991d6589c0ebe074a168ee5f53b3cda95bff8f15efcd40a8b4ac5154d5e4132685d8d67328584af84790aed832222ff40841ecd76d592511b2ff551a4c9789f88fb134e57769e19af5796061504f100199c3ace289164e755f8c1c0e871df73bdc4b78eec460b0a642c41126f29c3c93d6b7b2f086ba6c2c62bb9627c3929e040d87e0dc19cb1c5899151e9ce63d5bb6acf31faaa0cb765fdbe0c8d54376279848793ae8c3e02a3a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x7}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x9}]}, 0xf4}, 0x1, 0x0, 0x0, 0x11}, 0x0)
pipe$auto(0x0)

1m2.13254292s ago: executing program 3 (id=880):
socket(0x4, 0x5, 0xf5e4)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x4, 0x0, 0x0)
ioctl$auto_I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, 0x0, 0x183400, 0x0)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
inotify_init1$auto(0x3000000000000)
r1 = setfsuid$auto(0xee00)
keyctl$auto(0x3, 0x0, r1, 0x0, 0x100000000)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, r1, 0x5, 0x9, 0x1000)
ioctl$auto(0x3, 0x541b, 0x10000000000402)
unshare$auto(0x40000080)
socket(0x23, 0x80805, 0x0)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6004}, 0x4040)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0)
madvise$auto(0x0, 0x1010001, 0x100000003)
madvise$auto(0x1000, 0x400050, 0x9)
openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0)

1m1.470647285s ago: executing program 3 (id=881):
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0)
pread64$auto(r0, 0x0, 0xf42f, 0x7f)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r1, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9effffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r4, 0x400, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x0, 0x154)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/swradio15\x00', 0x54002, 0x0)
shmctl$auto_SHM_UNLOCK(0x2, 0xc, &(0x7f0000000340)={{0x7, 0xee01, 0x0, 0x4, 0x6c3, 0x10001, 0x91d}, 0x6, 0x8, 0xfffffffffffffffd, 0x1000, @raw=0xfffffff8, @raw=0x2, 0x6a35, 0x0, &(0x7f0000000100), &(0x7f0000000240)="aeb15632e7d78be52d99dcc3daf132c248b3475ca57a341697061a22b618427485797ba061946a2fda913080a707ef4e9863848cfca9fccae6e833376afc50a3e7b8d8aaba722aadef32a4b70ad96ecbfb6c50c19c51d48d64eed9c24984f319cbe031ca3a863d8fb8b879434fd6733d55517feb0e3ebf0c79429eebfdafe1dbf4092ee75328497992ee34dbf8924f78d11395139906972da0f3a2d76c1f6a9f98eaea1b6886ca40588e86d5ad4ca197f392e6e4b84f70ee9f54e6bece7311395d4be27b448ee97f524f994b4cbf9f13065a178487e2694d595a43082067cebbf22cdbc4d1ed8a4b6065c6d4f41c886fc508f017"})
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, 0x0, 0x20004005)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/kernel/random/boot_id\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
lseek$auto(0x3, 0xfffffffffffffffe, 0x3)
io_uring_setup$auto(0x6, 0x0)
r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x0, 0x0, 0x1, 0x0)
write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x1)

1m1.121749971s ago: executing program 3 (id=882):
close_range$auto(0x2, 0x8, 0x0)
ioprio_set$auto(0x2, 0x800000000, 0x8)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x108100, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0)

1m0.907782537s ago: executing program 3 (id=883):
mmap$auto(0x1ff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mkdir$auto(&(0x7f0000000200)='}[,&*}\x00', 0x6)
mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xcf, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0c/sub0/xrun_injection\x00', 0x28102, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001880)=""/4101, 0x1005)
chmod$auto(&(0x7f0000000040)='}[,&*}\x00', 0xf3)
connect$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x4003, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0)
mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0)
r1 = socket(0x2, 0x3, 0x3b)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(r2, 0x0, 0x11000, 0x20111, 0x0)
io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, <r3=>r1, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x400, 0x5}})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0xa, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="deb50000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000080003000f000000080003000000000008000400be000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_TP_METER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044010}, 0x44800)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)
write$auto(r6, &(0x7f0000000040)='Fm_\xbd\xc3!\x00', 0x7)
mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0x401, 0x200008000)
socket(0x5, 0x1, 0x84)
ioctl$auto_ep0_operations_inode(r3, 0xd, &(0x7f0000000200))
r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x28641, 0x0)
write$auto(r7, 0x0, 0x101)
ioctl$auto_SG_GET_NUM_WAITING(r7, 0x227d, 0x0)

1m0.609537753s ago: executing program 44 (id=858):
getrandom$auto(0x0, 0x6000000, 0x3)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r0, 0x400, 0x0)
flock$auto(r0, 0x8)
r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000001c0), 0x141f42, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x27ffe)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"})
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
socket(0x28, 0x5, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x8, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x203, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x4, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x81, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000500)={0x0, 0xfbf}, 0x2, 0x0, 0x7, 0xa505}, 0x3ff}, 0x7, 0x4008)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)
r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0)
ioctl$auto_CEC_S_MODE(r5, 0x40046109, &(0x7f0000002c40)=0x7)
ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40603d10, 0x0)

1m0.451462162s ago: executing program 3 (id=885):
mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
mmap$auto(0x0, 0x4020009, 0x7ff, 0x1000000000ebe, 0x401, 0x8000)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x220500, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/92, 0x5c)
write$auto(0x3, 0x0, 0x1)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r2, 0x0, 0x400000000006)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80161, 0x0)
sysfs$auto(0x180, 0x3c, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
read$auto(0x3, 0x0, 0x80)

59.044508678s ago: executing program 5 (id=877):
r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x40002, 0x0)
pwrite64$auto(r0, 0x0, 0xae, 0x3)
r1 = socket(0x2, 0x801, 0x100)
setsockopt$auto_SO_TIMESTAMPING_OLD(r1, 0x6, 0x18, &(0x7f0000000140)='macsec\x00', 0x3ff)
fallocate$auto(r1, 0x8, 0x7, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket(0x28, 0x801, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51)
shutdown$auto(0x200000003, 0x1)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002280), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_KEY_FLUSH(r2, &(0x7f0000005240)={0x0, 0x0, &(0x7f0000005200)={&(0x7f0000002380)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000)

58.884861261s ago: executing program 5 (id=886):
arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x9)
r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82)
mmap$auto(0x1, 0x20009, 0x4000000000df, 0xeb1, r0, 0x10)
mmap$auto(0x6, 0xffffffffffffffe4, 0x0, 0x17, r0, 0x100)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
ioctl$auto(r1, 0x40246f4c, 0x38)

57.709694028s ago: executing program 5 (id=887):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
r4 = socket(0x29, 0x5, 0x0)
write$auto(r4, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x0, 0x1)

54.122340626s ago: executing program 5 (id=888):
mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
read$auto_userio_fops_userio(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e)
fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
close_range$auto(0x2, 0xa, 0x0)
rmdir$auto(&(0x7f0000000000)='}[,&*}\x00')
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto_def_blk_fops_fs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x50, r2, 0x8)
kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4)

52.814729594s ago: executing program 7 (id=889):
landlock_restrict_self$auto(0xffffffffffffffff, 0xc)
socket(0x21, 0x800, 0x10000)
mmap$auto(0x0, 0x1, 0x12, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x101002, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0)
r0 = prctl$auto_PR_SCHED_CORE_GET(0x8, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/inflight\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x4d, 0x0)
r1 = socket(0xa, 0x5, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x10000007ff, 0x2, 0x7ff, r1, 0x1)
close_range$auto(0x2, 0x8, 0x0)
prctl$auto(0x1e, 0x1, 0x0, 0x4, 0x3)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83)
setsockopt$auto_SO_MARK(r0, 0x4c561a7a, 0x24, &(0x7f0000000040)=').{,/\'{)(([}$,@\\*\\*\'-%(]&\x00', 0x7f)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x2)
open(&(0x7f0000001bc0)='./file0\x00', 0x4142, 0x1)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyeb\x00', 0x40741, 0x0)
ioctl$auto(0x3, 0x402c542d, r2)
write$auto(0x3, 0x0, 0xfffffdef)

51.559621707s ago: executing program 7 (id=890):
close_range$auto(0x2, 0x8, 0x0)
ioprio_set$auto(0x3, 0x0, 0x8)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram9\x00', 0x54fa03, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0)
ioctl$auto(r2, 0xab03, 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
write$auto(r4, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da)
sendmsg$auto_SMC_PNETID_ADD(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}, @SMC_PNETID_IBNAME={0xb, 0x3, '\'[\':]%\x00'}, @SMC_PNETID_NAME={0x7, 0x1, '\xf8/\x00'}, @SMC_PNETID_ETHNAME={0x6, 0x2, '$\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x801)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x40002, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x88004)
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd5100fbcbdf25010012ea03000180072e01"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x16e)
socket(0x2, 0x80802, 0x0)

51.104156212s ago: executing program 45 (id=872):
r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x88900, 0x0)
readv$auto(r0, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)
socket(0x2, 0x801, 0x84)
r1 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000440)=@enable_stats={0xffffffff}, 0x80000001)
mmap$auto(0x100000000002b, 0xb, 0x80004000000000e5, 0x18, r1, 0xfffffffffffffff7)
r2 = socket(0x1d, 0x3, 0x1)
r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x101000, 0x0)
read$auto_nsim_dev_max_vfs_fops_dev(r3, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a)
setsockopt$auto(r2, 0x65, 0x1, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x4, 0x100000001, 0x0)
r4 = fsopen$auto(0x0, 0x1)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x7, 0xa, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x5, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0xa, 0x20000800001, 0x3, 0x1, 0x3, 0x6, 0x8, 0x0, 0x5, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, [0x18, 0x0, 0x0, 0x0, 0x33e, 0x0, 0x401, 0x5, 0x0, 0x3, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x80000002, 0x3, 0x0, 0x3, 0x0, 0x27, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x10004, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x100000000, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x43, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800)
r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000140), r4)
sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008008}, 0x4001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
lseek$auto(0xffffffffffffffff, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0)
io_uring_setup$auto(0x6, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0)

50.459899443s ago: executing program 7 (id=892):
mmap$auto(0x0, 0x400008, 0x9, 0x1009b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x22002, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
read$auto(0x3, 0x0, 0xfdef)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto(0x3, 0x81484d11, 0x38)
r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x10, 0x2, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x891}, 0x4)
futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001500)=""/4094, 0xffe)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r3, 0x8000)
read$auto_bdi_debug_stats_fops_(r0, &(0x7f0000000040)=""/97, 0x61)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
socket(0x2c, 0x3, 0x0)

49.430727839s ago: executing program 7 (id=893):
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
mprotect$auto(0x200000000000, 0x806122, 0xc)
sched_setscheduler$auto(0xffffffffffffffff, 0x800005, &(0x7f0000000040)={0x80000000})
r0 = socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000000)=0x6)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00', <r2=>0x0})
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000180)={0x0, 0xfff0, 0xff, 0x5, 0x2, <r3=>0x0})
msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000240)={{0xf7, <r4=>0x0, 0x0, 0x2, 0x8, 0x0, 0x400}, &(0x7f00000001c0)=0x8, &(0x7f0000000200), 0x1000, 0xfffffffffffffe00, 0x8000, 0x414, 0x1, 0x4, 0xce62, 0x6, @inferred, @raw=0x4})
sendmsg$auto_NL80211_CMD_SET_BEACON(r0, &(0x7f00000017c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f00000002c0)={0x14b8, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}, @NL80211_ATTR_NAN_FUNC={0x12, 0xf0, 0x0, 0x1, [@generic="9e9fe852ada5344eb667e02d56c6"]}, @NL80211_ATTR_SAE_PASSWORD={0x33, 0x115, "bddc69b7abddb6e63831eb5a881eacd35cb80ba6dffc04e836dd663fd78d4ac449d341b2796bffbed138c1e7015a9d"}, @NL80211_ATTR_MLO_LINKS={0x144c, 0x138, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x7}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_ATTR_FTM_RESPONDER={0x348, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xf1, 0x3, "17279f4eef602f5699735b3309bb68aae5ead36e0ceeec91711a1e4393e0c26f529e34b62c6abc6487b3d633c64901321eee4e180fcf09561c8c0986f854c2aca105c92354502f04a383a4440855076f4307bf627c547990d83d0d52eab9f1bc04b1ba875b403e879995cec8a488f0cc3f3dc8b167fbf8866497ac90526740c9fb6bcb29f0ceca571411c03642c02d51fffb561df547ffef05f0cd5550fb26f1610d7264cb74e63d032acb04a0412c992ac71ea3d11544c109c3645baab4191215d78d8ce6e2e4f40b7ab1748d8ceeb4fed3805b97601271e236122ea85566464a803dfa3116ad948d20e1d27b"}, @NL80211_FTM_RESP_ATTR_LCI={0x54, 0x2, "cad3d4e8cfe88c2482530f363cc34e0cbbe8697212b18163bf9859bffe9ea9463d4448a932c43ceecfe6074c75352f2f8a818dd61439df79fc9b4ea4cd11ee0254256b90910a0366402d3965c836a9bb"}, @NL80211_FTM_RESP_ATTR_LCI={0xa6, 0x2, "51c9758dbac49afe90a391c4d070760e0ba9f5acedce53635a89569f17eda9a1a7f65230b9443532c7cc6c86d004e11a4b7c648337a2d48af79310fb234858bdcc8e07c850a9c75219853849fe8500d7cd23118dd785fb046c77600ede8abf155b3822d6eb04abb28736e8b8c482ebc56bae8fce23889ee9f02d860aa82f5fb16b36c287d9ac57a536c044b7af210f847bf69c2a8d9c5181258fe6167a52108dd817"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xa, 0x2, "1a03665dcfd5"}, @NL80211_FTM_RESP_ATTR_LCI={0xb8, 0x2, "e5d3d0c202e893e6c3868897dffc9be2dd126f539c81805a199c68e49d08c04f92a31a0353f82528a3ab322eb569f3b334c76bdfa8db0cf78c8597f1c18c3e9dbec650850c0789c2128319b102f9404ca46c0449714e62a4e263e8eef0d2e75e44cba918c6119f91d7a1c16f4876e711310cec3587b9c1835779eb5e3289d10e83da14e1947d96a226f0ed9ac79c6718b051dfb62150b4695673eba76ab53cec812a45df232a81d1de445e80c0f0f0e61b9812ff"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x37, 0x3, "0ec77570525a51b369f49f5c0e60505050ec260d6f40dbef03d3778b8345778096058a9cccc1e246c63c24ee2a89f26e766c8f"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4b, 0x3, "a65b2f008897f32d92f04d968278492f7b761bfaa8be51136f7ac3f1a75c8f86fddf8a357f2e9af70044af7aa386a4d1c359b93f6fa9e1a6644463fe80d31699e7e2f092e9e50a"}]}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_MBSSID_CONFIG={0x38, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xf9}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r2}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x1}]}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x50}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x5}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x597}]}, {0x106c, 0x0, 0x0, 0x1, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1041, 0x2c, 0x0, 0x1, [@typed={0x4, 0xfc}, @typed={0x8, 0xcd, 0x0, 0x0, @pid=r3}, @generic="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", @generic, @typed={0x8, 0xc, 0x0, 0x0, @uid=r4}, @generic="8c8640d8c67e5ee9351ed6f803e5e903b26f45874a0b25027f1f358d28a3a133fbd257dcb19c812252"]}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xb93}]}]}]}, 0x14b8}, 0x1, 0x0, 0x0, 0xc3fa4a2319d29811}, 0x41800)
ioprio_set$auto(0x2, 0x0, 0x8)
sendfile$auto(0x1, 0x3, 0x0, 0x74c)
madvise$auto(0x9, 0xd58, 0x4)

49.011479204s ago: executing program 7 (id=894):
mmap$auto(0x4, 0xc000000000000002, 0xc00000072, 0x10, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r1)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5)
r3 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0)
socket(0x0, 0x5, 0x0)
prctl$auto(0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0)
select$auto(0x4, &(0x7f0000000280)={[0xfffffffffffffffc, 0x3, 0x9, 0xdc, 0x17d, 0x2, 0x1, 0xa, 0x2, 0x0, 0x6, 0x0, 0x100000000, 0x9, 0xfffffffffffffa4b, 0x7fffffffffffffff]}, &(0x7f0000000200)={[0x49aa, 0xc39, 0x100000001, 0x3, 0x5, 0x5, 0x6, 0x6, 0xb1, 0x4, 0x6, 0x3, 0xffff, 0xcc9, 0xdf, 0x80]}, 0x0, &(0x7f0000000300)={0x1000000000009, 0x8})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0xb, 0xd, 0x808e8, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x400053, 0x9)
pread64$auto(r3, 0x0, 0x9, 0x7ffc)
getsockopt$auto_SO_PEERPIDFD(r3, 0x6, 0x4d, 0x0, &(0x7f0000000080)=0x47)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu3\x00', 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)

47.846855263s ago: executing program 7 (id=895):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0xa, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
mmap$auto(0x0, 0x40009, 0x0, 0x9b72, 0x7, 0x28000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
recvfrom$auto(r2, &(0x7f0000000600), 0x4, 0x4, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r4 = clone$auto(0xc9, 0x8, 0x0, 0x0, 0x4)
r5 = socket(0xa, 0x801, 0x84)
listen$auto(r5, 0x3)
setpriority$auto_PRIO_PGRP(0x1, r4, 0x1)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf25040000002d0011009b"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)

45.34673409s ago: executing program 46 (id=885):
mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
mmap$auto(0x0, 0x4020009, 0x7ff, 0x1000000000ebe, 0x401, 0x8000)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x220500, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/92, 0x5c)
write$auto(0x3, 0x0, 0x1)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r2, 0x0, 0x400000000006)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80161, 0x0)
sysfs$auto(0x180, 0x3c, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
read$auto(0x3, 0x0, 0x80)

38.588260818s ago: executing program 47 (id=888):
mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
read$auto_userio_fops_userio(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e)
fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
close_range$auto(0x2, 0xa, 0x0)
rmdir$auto(&(0x7f0000000000)='}[,&*}\x00')
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto_def_blk_fops_fs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x50, r2, 0x8)
kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4)

32.563338672s ago: executing program 48 (id=895):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0xa, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
mmap$auto(0x0, 0x40009, 0x0, 0x9b72, 0x7, 0x28000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
recvfrom$auto(r2, &(0x7f0000000600), 0x4, 0x4, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r4 = clone$auto(0xc9, 0x8, 0x0, 0x0, 0x4)
r5 = socket(0xa, 0x801, 0x84)
listen$auto(r5, 0x3)
setpriority$auto_PRIO_PGRP(0x1, r4, 0x1)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf25040000002d0011009b"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)

27.604164748s ago: executing program 6 (id=917):
mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mount_setattr$auto(0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x20)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}})
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/snmp6\x00', 0x400, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x6, 0xd847, 0x3, 0x5, 0x4, 0x15f4da12, 0x8, 0x9, 0x100000000000000e, 0xff, 0x5, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x1, 0x22, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x7f)
gettid()
socket(0x10, 0x2, 0x0)
futex$auto(0x0, 0x7, 0x8, 0x0, 0x0, 0x0)
fchdir$auto(0xffffffffffffffff)
prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b4d, 0x1)

27.246469393s ago: executing program 6 (id=919):
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000020", @ANYRES16=r0, @ANYBLOB="8b0029bd700002dcdf25030000000400080004000800"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x4, 0x9, 0x80100, 0xffffffffffffffff, 0x2, 0x9}, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x29, 0x2, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000)
recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
ioctl$auto(r2, 0x89f1, 0x24)
sendmsg$auto_NL80211_CMD_COLOR_CHANGE_REQUEST(r1, &(0x7f0000002b40)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000001240)={0x1888, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_PMKR0_NAME={0xe8, 0x102, "263951b4f9f8085c50f45ef0aa384a4ab90b71f43fc5a79c1cf59d5a55a289b5d0256e0cbda06bc5fbb42f889083e6c1be9e7476a22b8dd2d29c39a5243ab536e942bd34a749667eefdda7640dc6a33988980795e9b512fbb1e3fcd8ddc6cf74021f6c0cbec9894b9ae2af810cb0f4f120389b99f810ac4e91bbf599f5928ea75c561c6432efd64e3b47e93340ec25eedf2f3bc401e954d793f47c722b9812446173109a4a8930d6d1a4daec7ffd279a2d89b9281b3d53ab9a56d4d95b0befd05cb6ffff94d16bc528790257972ef90d9cc7662ce8fa86d6f3d6a9e812a2bc0f79e711b4"}, @NL80211_ATTR_PMKID={0x1004, 0x55, "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"}, @NL80211_ATTR_SAR_SPEC={0x15c, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS={0x34, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10000}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}]}]}, @NL80211_SAR_ATTR_SPECS={0x10c, 0x2, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x50000000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfe}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xc}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xfffffffe}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x663b}, @NL80211_ATTR_IE={0x597, 0x2a, "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"}, @NL80211_ATTR_PMKID={0x8c, 0x55, "ee5f1f31a1f07f5e9ffac042421111670ae5ec3cc23a6c5b9cb8019d365738ca66eb68b6699f9564872b5e262d387ffbfdea94c6f1ac1915c87729816c27768d245f6313f87be1a5ea5738754d632805ce29a9a22ae9eb535c898d35be11325317f67f3a48f66623311ee7d2867a41c866622f4fa48e9e509e4b3439267aa6f16cf2a40014b4d768"}]}, 0x1888}, 0x1, 0x0, 0x0, 0x60008004}, 0x8801)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x6, 0xfff, 0x9b72, 0x2, 0x8000)
r4 = socket(0x1d, 0x3, 0x1)
getsockopt$auto(r4, 0x65, 0x1, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000040)=""/4096, 0x1000)
r7 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r7, &(0x7f0000000180)="213a2d75b4214607bd4ce3e3e92f", 0xe)
write$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0)
r8 = openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/free_buffer\x00', 0x0, 0x0)
ioctl$auto_FIDEDUPERANGE(r8, 0xc0189436, 0x253)
syslog$auto_SYSLOG_ACTION_READ(0x2, &(0x7f0000000080)='#}\x00', 0x7)
select$auto(0xffffffff, &(0x7f0000001080)={[0xd, 0xfffffffffffffff9, 0x8, 0x2, 0x0, 0x146f, 0x80, 0x7, 0x3, 0xff, 0x3, 0xfffe, 0x1, 0x7, 0x6, 0x7]}, &(0x7f0000001100)={[0x6, 0xe89, 0xee, 0x7, 0x1, 0x0, 0x0, 0x10000, 0x6, 0x80000001, 0x8000000000000000, 0x1, 0x6, 0x0, 0x3, 0x5]}, &(0x7f0000001180)={[0xf417, 0x80, 0x2, 0x4, 0x7ff, 0x3, 0x43, 0x4, 0xffffffffc162659a, 0x6, 0x7, 0x8, 0x9, 0x9, 0x1, 0x80]}, &(0x7f0000001200)={0x7, 0x8000000000000000})
getegid()

25.195479389s ago: executing program 6 (id=922):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(0x0, 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0x29, 0x5, 0x0)
write$auto(r4, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x15, 0x0, 0x1)

25.111152705s ago: executing program 9 (id=923):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2a001, 0x0)
r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0)
write$auto(r0, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x20000003)

24.721085474s ago: executing program 9 (id=925):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0xa, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/kernel/random/boot_id\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
readv$auto(0x3, 0x0, 0x1)
mmap$auto(0x0, 0x40009, 0x0, 0x9b72, 0x7, 0x28000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
recvfrom$auto(r2, &(0x7f0000000600), 0x4, 0x4, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r4 = clone$auto(0xc9, 0x8, 0x0, 0x0, 0x4)
r5 = socket(0xa, 0x801, 0x84)
listen$auto(r5, 0x3)
setpriority$auto_PRIO_PGRP(0x1, r4, 0x1)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf25040000002d0011009b"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)

24.416610386s ago: executing program 9 (id=926):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/udp6\x00', 0x100, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="78100000", @ANYRES16=r0, @ANYBLOB="00082dbd7000fcdbdf254b00000004004a010500ee000a0000000400080120102280d91b6643a338661779076751b3d7db40dd32ca768bd5a8babcd4e0df26d257b023d05a77a2c1927fb7e013569954c7e649ddb68fb37ae6aeea73fa61393ae717956e895075285bbdd3d4a992e064b7bfad6ef2dee9332249427d3c8b02d9490db99177e17fb96474ea50574cdc33b4026319bd15e54687c3cba16512368ec0e0af2b2acaf6e3fdbc9ba898b22e1489cf81973f40012467d1cf043249ffde422a546f1e54bb8ccb495d4bb6360803a7796f62ed9f824d55d20a9cda408ac68f5a82f76a533ce3745399cc7bbcabe529acea00eb93078daf13fe26c3e7edf298f82ac835279916c14ef3092840856e3fd7592425e4d1b67c510444ee8ed027cd1b7701bf6c62ba1f4dd52929602d981534a47939fa64685c5b5b771829866184b31007a996f997ee061caf8abe504a82b4809e5ebd632f52f74034588d591c61c42c12381b88096ef8f2f228229e339673dc4e639b8ccb9b035585f8f1552cf489f3649ea7335a2a0adee31e2c5a555b056597e94b74f71c2a4c1dc2d46f37c28d031108441644bff818b16a3da4b3aeda1bb7bcbedaaf4029f666eea16dd109745fcd6ac227506b0360840e2e38858f06279094d03a7ddbee201a6fddc5affd86ea5c450d325bfff41745ae1b0f60780838902d1ca8548d866510ddc74102e3a268c9bd19a4ad230ab07a66cc71feb879a904d08a37d9a6d19267b0a5b6c5dd9772634d0db76d28c2de2f5945f533538c882312b80c181b3c54fc0a270a3fffababc7a43fa4f3d6cd9970e20863c08487c4f856e200d5c9f5679db375b7784a1b19d01c426508c7f1e9efb41604dd3268e6e45c263e3dec50f2d060c9054ce5708f439107d4f3e3140bbcd6acc8306dd1bbbddb297cdb14e7dfbfc245feb1057ed6c00e8c0c0676d30a5f735b28361d0c6bb9a0bbbefcf3a96c1313a3778bca4348a40831e6366d13fea0f9ce052591b6e351ab54f54a9aae809c0f1107829248989f7114899ef2c53f77674b117ab1619fa8712b54ba1eca957d57e5a9d0402833625b24ffa510292ffec20cdbcbd2653aa809be3e0c7ff20fe2c365aab3290de8c7598c160323031c489db9a95d3f4df96002d05b0c40325eb96fe40c858dd683f2774f9c806bb509d0b8b60c34ece9ab975babcd5407d5f35d57d0fbfbb8ae50fa20f0f8c223bdff8fde38e3f750a4403fb4edf8e259cb35d87e843ed2f9aa69a650bee15e8ac17a1b318d621b8189e9c83df66f314e3e8b23e65d0d4de37ed86454d4c16be23197697d128f8065861d347d72bb5ffeb70863edcd788afb491ea3d529c52cf5e59c9535b2d60effa691ac4094fd8139c299f7914efbfaae841b82f9dfae1f5578919fc969666287f8e082eae60ba5c93ee3014bd682d308b472a8ec886f13b2377c00bbfb9857ab5cdff02036d340cf078f1d9f30dde4403132a46a300faa0fdf771d10fceb3aba509d7d989309f2f1431e8c266368a6e42aa93f6e352c5a0157780dd47f44858dc666b10e1fa32907d1c5e697fab9efd754b368b00059f15eb74f5a2ac9cfb37462b3208457ca9f93b624b03594fec08ec3078e4c6b5a21a438fb8e1e74b7915e81ce7c5f5cd6fc9adfbe85433ccc61c72c518d08e2ea46fee8af6e2b491d92d4a8762f4754aa8b604ace4ade358bd99c7f563976e37b8350e7a6bc79f2ababf3e12e7aca1366b17de7b6fd5e3bfebc7e8ee923b41487e196447f70a35a7e69cb6941f7ab75bbc307343854e4c71b6ce15db9ef0ef7ec8179d49e565d730da0e0736d1364aa8463bd1f4a8fa33387629bf401e722076c4054cea788eca5566f9b2383def85f7ba959907c862e177e7d8352f00f912132fbb730ba86d737dd1a0884d21a6ac2ef4b2597d5cff27e5085adc028c1d60ec5b45336cf88f373c58b5511fcbc27ef0cd8e36d9913c0d47cf8c05d2a0cad9b5aeda2b0fec169dff23d0e88240a5ea8789a5403f16a732afa4567e27345cbfcdc42b2a3b0773b5070b84b72c4ac38d636f11cf245073f2745d64124a297203f16cd485fdaac82c22cdc7eddbe0b266fc5d44f85c02540b7c4a4565c887e39ab71f173f703e78ac15680456757271a2446d61f226865cdb1a762e7a4ce96cc6de19df49e9eb567734881f2fe913762ca57ea3881378c24d5fe08eafe17433c29d779485ab47f41794186092da0417c1f88a603edc539d6e79f04f3b7a57cbea77fd022ea3045f0957a067664d5dbf59dc7fb3a9a32055c5a0ae6ce7a2cbfa2dad5a282a19790cb8ad6fbe18cb149f8aa4e95bbe2546fb9d05806bd87b667ed36991cb75a8ba90fab0f37495edac2a0b68d4c31c13d2424d286d668b7c7923f8a0279f2cc10c5eab7af870bce9482656e25e413788a4771f540480dfedb75ac91c795a86b4c70d00edbba38f44527eeeadeaa836c0f10418183bba0856b0b7681906a0d4a14de9af849232625d8e8da0fa80cd1317c472357221ead96f56009046a44becf9094afeb437b0a5ed415ea76f941e8c2e87ceaf24de5004938081add4da7d2df3db07ecf81f1ea1879e156a3da5461fe5712bb4036bf15f250555603001feb825e699355516b6e35af51f2796a86045a3f140d0c015b632f53e3d3e21e40d0d8f18f796afbeb5a3c8d9069273d92c1cd313ac352ed71efe374d35064eba263636b40140f3ff4294066afc668dff2ac34e1bac08d29938a396e6ce4d2b2457deb47145c02ec8e5b3ad232542fd62810c89b02443a3c5c4834906a902a22791ae3007ebb3781955a0abb0264b96aab03427f0c454d069c186201f2c248d8815a822e78ef33bf9143c48fcab3ef1ce46dfeb58708943db105996aa4e4b7525ab081a8b897940f6e9071432d373ff5873604d6cfbbf4c184a0adf5f455014441a0c26f6b3f17cfcbc2bf545f77e0b29d2d92057d684374d74e7297b28dc8944e4c65e6e1d411c07b276d196a799cd9204153e72b1a3ab7380f3ccb7bbfd3165f24a310a688558df45af567b6ad2acc57c1076515647872e6e9717fcaba41a185ec754d73b405d9f69e9025f0f2d80aee90289c4128b41433abcfbd2456463901dddc79d2503b949ff85f156409abceeddfaff1a46f67e8ba0987f9750c29d158cad3034765a9db32a759678d1a351ee9f97d8814debfde5b6f53ba4e133d3e1d1071a838fdd522068eeb8eb754844ffbf325a1a94f940a4297a7534b760a27490b56cf54b6680fb07dc49f3fb81b497f991bd0130a9b66d23bc91aadd7dc1d6d6ce6efbfffd49ef28274a6dd97aff979e6d4e4df34abc7aeb0d2b0ecc2d26f512dcacbe1084bbfe74270a075b1669afc275b71c235d4667fc8ac0938f62f6e121dcd236fe4e198efd1e796175db6c297e352b5f1b814fe210d20fb99d63b8e3d92fd8193fbd19f37feb8e3e5e6695dff6253d56e94960384438808b4eac5eee8efe57bf4f3f7f670ee913096791f82685a21af9dc1cd3e5b1cf186df5196f7cf4c43e84628ec9ec6d13e6b0e6b5243f69718639d4abc9225fce21dba7a8c25025ecccdecff812242c6b067c98e07677f83c0381117f08256e849ac1ce1e80f89695f09745c9411f68aac0356370465621b3eaafe2adf79d74c8008d97c15647d0f04acfa3583b649d3b984512e6d3727286e4aa929aad8e0728fb9f4e433c75c7ad9962cb8b5064adc29c2e4ab531633e1f77ebafdecb8bd9dc97934b3626b3467cb3f29148f84e72880449d4865c0df554b0562656b189dc6a1a38bd8e2576f8dd7a7b635fab5c191785f1268a1fd4d92f175624598ff313c7c202759bdb8d09614e09d03e2e2696a255c1a7566ed5b025a5e18ce133949581aac6a4eb22fbe33d5e083b420f2e16cc37adc6c46f0ed3602f012137faea62be7a3e381523bb47661d2a53fd0a907726f962293702ab5274fbfa6f7ee114bde08d81cddc2b3363ca8177f4a19cd5fd0bb99e7b081e06e9ecd69b5424a74c1e72e1c6a3ff20ded5c914ad4cf83a92131b30d230f9bff5dfa98188aba14df259c8d08988f6d8a4899d0a6487e4cb166cc00460e78332eba821b83e6c1c2f89ef1307438eed29d218ab04c35230d9d36813c083250fce2054f37de49c47a62c0b0422d1b7a65d22cc5450a0437035e9b116d7f3a3bd25b3d4371b7db62fda86594426521e4d8f32b185dd37dad048041a2ddf2d28df4badf2b08d616726962aa15745e524ae3790a2925c942fa67030a30ef310921104a1211e9c79998b342ff01675d5018fa8483ebb895ebe4b2b7ac5e0fcd894dde519e084bd0673b4354ec8f7b2481e78259199ba243b29eed5e00dd0e9f523b5f2a0d57ec46d84c8875ea51579aeb7da8502cb1861391a2e11046ff533d88bc82e9a406bf2e959062a9a5044e6d87af349d5d2ac785180bdd56a5d60457979ff6ec0e08d2e2be3801a29ab0781c27f688bd981a8c8fe07ad3b8824af486ab3d5435b85f34ae77149de5e9b68a168547b47af209fc3214cc7bc4357934935c88b18dfa9b10ee34af0fe4d02acb61636d032fd517da9e6f916847858f56261075fb0cd4239618d06a66c11d0a1b11a535f92821ab6a32eba6f7508a2b5912a7b80ac2cf552e882ead1304c9acd47a09ec787fd7eab99ffd934e74d3786079c6f216481675611bda83e3e3f4297f36264705aee8b3e8e9d34a1dacbf12eb9599e8d4de5c74f9bb12c6d737b71a8979ed046b1e5de33870faf93e69e1aecb3407326e96872ea299261150883b2da336bedaf8365f06d8656e6539691c159a7101f7daeac4ade96e7d071d2835aeae203559522d29b71f512dd8066072554960cda9d7f75b658442d22aef94a0b1675fc59d4a42914aaa097efbbdbe169dc4ad25204712748a2286ec29aba160c281cd23c913f927cb42596d806076b0d071dada979cbeb1f19bc05f318a0638b5038f15e3121d968470cc3cdd079c4359134e62a217ff78598ab3f76508b701cc58758c0d8a3788156033bf320bae16362b0eb6dc47b6c348a19402fb3bb40816dd825e9ee541607448dec8de032485d11b52c41b01e5daf18afe5b3cacc8c133713edf7d61df07813d3cb679cae268a64c939afe4f7d2f47abd108ae3c3e6b480b1b4c02b6f18140c38d7dd9c8fde74bfa2c849d2c963eabd640a0b1ba26f9973a1c598350f48567f09c0c6b661d06444e005c9483608515fdf89db54df1b1c9f034de75f903a9e27915e4b43b3594f3eeef1b4786ef4851783f9ae0a463c2650b4b5d5abda53d3c0f3b92ca805177651a186c19b52102f9ae00916f23fa2629ed99d0625434d83d807b3b32ea0d512d3caecc6a18cb7dcb33e8e0d9c2f153cd6f9995161c0908748c9e8072293e303660b5fe3e9a85d2990394e3cf16dbd9e1988e7bb90b1dcd9ee611266a42c1435f3ceef759aab965f78d18492fa0212fa1e2c087be432390442375a4538d37f41b4618f6ea403034360a6ce9c9", @ANYRES32, @ANYBLOB="0600b3000900000021"], 0x1078}, 0x1, 0x0, 0x0, 0x20080001}, 0x20004410)
r1 = socket(0x11, 0x80003, 0xf)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, r1, 0x8000)
mmap$auto(0x0, 0x4020006, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0)
sendmsg$auto_NL80211_CMD_DEL_KEY(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x401}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x7}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x4a}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1ff}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x200840c1}, 0x4000)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket(0x1d, 0xa, 0x7fff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x1)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x1, 0x0)
syz_genetlink_get_family_id$auto_batadv(0x0, r4)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0)
write$auto(r6, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e)
setsockopt$auto_SO_ERROR(r6, 0x7ff, 0x4, 0x0, 0x7f)
mremap$auto(0x200001001000, 0x4, 0x4, 0x3, 0x100000000)
r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r7, 0x8000)
mremap$auto(0x7fffffffffffffff, 0xf, 0xffffffffffffffff, 0x3ff, 0x828f)

21.173604226s ago: executing program 6 (id=927):
mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x4)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xa3)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0)
mmap$auto(0x0, 0xa, 0x5, 0x100000010, r1, 0x0)
r2 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000200), r0)
sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x330, 0x70bd2a, 0x25dfdbff, {}, [@VDPA_ATTR_DEV_NET_CFG_MAX_VQP={0x6, 0xc, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40008)
syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
read$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffffff, &(0x7f0000000080)=""/175, 0xaf)
r3 = socket(0xa, 0x3, 0x87)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r4)
mq_notify$auto(0x5cf5, &(0x7f00000006c0)={@sival_ptr=0x0, @inferred=r3, 0x2})
write$auto(r1, 0x0, 0x0)
timerfd_settime$auto(0xffffffffffffffff, 0x4, 0x0, 0x0)
madvise$auto(0x110c230000, 0x1fffffe, 0x9)
openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/projid_map\x00', 0x101002, 0x0)
write$auto(0x3, 0x0, 0xfdef)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000001bc0)='./file0\x00', 0x4142, 0x1)

20.745680982s ago: executing program 9 (id=928):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/index\x00', 0xaa340, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/43, 0x2b)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r1 = io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0)
openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x41, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x1, 0x4, 0xfffffff8, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x5]}, 0x1fe, 0xb)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004)
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x20, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r3 = io_uring_setup$auto(0x406, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46)
io_uring_enter$auto(r3, 0xf777, 0x7ffffffa, 0x3, 0x0, 0x3)
move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x11e, 0x1, 0x8000000000000000, 0x0)
r4 = socket(0x11, 0x3, 0xfffff958)
ioctl$sock_SIOCGIFINDEX(r4, 0x8954, 0x0)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000091}, 0x90)

19.656414077s ago: executing program 9 (id=930):
close_range$auto(0x2, 0x8, 0x0)
r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
select$auto(0x6, 0x0, &(0x7f0000000100)={[0x9, 0x202, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x1, 0xddf, 0x3, 0x200, 0x6, 0xe]}, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x10a, 0x0, 0x9, 0x3fb}, 0x4}, 0x200, 0x0)
mmap$auto(0x6, 0x1002020009, 0x0, 0xeb4, 0xfffffffffffffffa, 0x8001)
close_range$auto(0x0, 0x5, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sysfs$auto(0x2, 0x49, 0x0)
r1 = fsopen$auto(0x0, 0x1)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/fcloop/ctl/del_remote_port\x00', 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty34\x00', 0x1, 0x0)
ioctl$auto_TCFLSH2(r0, 0x5453, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
read$auto(r1, &(0x7f0000000180)=')[(/)\x00', 0x95)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/version\x00', 0x200, 0x0)
pread64$auto(r4, 0x0, 0x800003, 0x2e6c)
close_range$auto(0xffffffffffffffff, r0, 0x7fffffff)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xc048aec8, r2)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyt6\x00', 0x111102, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/udp_hash_entries\x00', 0x8000, 0x0)
read$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0)
ioctl$auto(0xffffffffffffffff, 0x9, r4)
ioctl$auto(r5, 0x541c, r6)

19.526798252s ago: executing program 6 (id=931):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x7, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
r4 = socket(0x11, 0x2, 0x3)
capset$auto(0x0, &(0x7f0000000000)={0x5, 0x37, 0x10000})
sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket(0x29, 0x5, 0x0)
write$auto(r5, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x15, 0x0, 0x1)

19.012631701s ago: executing program 9 (id=933):
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0)
ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3)
pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = socket(0x2, 0x1, 0x106)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r6 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
open(0x0, 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r6, 0x401c5820, 0x0)
fstat$auto(r5, 0x0)
sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bda6, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0)

16.600884891s ago: executing program 6 (id=937):
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="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")
mmap$auto(0x0, 0x7ffffffb, 0x3e2, 0x17, r0, 0x4800000000000000)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x4)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socket(0x10, 0x2, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
write$auto(r1, &(0x7f0000000080)='/dev/audio\x00', 0x80000000)
open(&(0x7f0000000140)='./file0\x00', 0x22240, 0x147)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000180))
ioctl$auto(0xc8, 0x800454e1, 0x5c8d)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
read$auto(0x3, 0x0, 0x8080)
sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40015}, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x9, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af0510a00658a20d8dc6b36c83ce63f", <r3=>0x0, 0xffffffffffffffff, 0x4005, 0x7, 0x7, 0x6}, 0xf)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd=r2, @target_ifindex=r3, 0x2, 0x7, @netfilter={0x81, 0xa4d8, 0x8001, 0x80000000}}, 0x96)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
write$auto(0xffffffffffffffff, 0x0, 0x81)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8)
write$auto(0x3, 0x0, 0x4)

6.378605651s ago: executing program 8 (id=957):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
inotify_rm_watch$auto(r0, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0xe, 0x6, 0x7fffffff, 0x13, r0, 0x1)
r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0)
sysfs$auto(0x2, 0x1, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x6f29, 0x0)
r2 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
fstat$auto(r1, &(0x7f0000000240)={0xffffffff, 0x7, 0x8, 0x6, 0xee01, 0xee00, 0x0, 0x6, 0x0, 0x129, 0x200, 0x9, 0x403, 0x7fffffff, 0x3, 0xdb, 0x7})
r3 = openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/free_buffer\x00', 0x200200, 0x0)
sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x18c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x178, 0x3, 0x0, 0x1, [@nested={0x173, 0xcd, 0x0, 0x1, [@generic="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", @nested={0x6a, 0xa3, 0x0, 0x1, [@generic="968a5562eb2be0dbdb8c9dc6d656ecfe5ce4e36f4a4d349caf740bed57f9694d0195f7e1aeecd0924b51be0885dc4c53252d958079a24c44ecabec7ba3920045b905bddf09bc27656d81", @nested={0x14, 0xd5, 0x0, 0x1, [@nested={0x10, 0x33, 0x0, 0x1, [@nested={0x4, 0x84}, @nested={0x4, 0xee}, @nested={0x4, 0x12c}]}]}, @typed={0x8, 0x79, 0x0, 0x0, @fd=r3}]}, @nested={0x4, 0x23}]}]}]}, 0x18c}}, 0x10)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.kmem.tcp.limit_in_bytes\x00', 0xc2481, 0x0)
sendmsg$auto_NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT], 0x3c}}, 0x0)
writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r7 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x3b72, 0x0)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r6, 0x1, 0x70bd26, 0x25dfdbf7, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c840)
adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4e1d, 0x4009, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffe, 0xbfd, 0xd, 0x90, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4})
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
timerfd_create$auto(0x9, 0x7)
setfsuid$auto(0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000005f80)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x800, 0x0)

6.035836543s ago: executing program 8 (id=960):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vlan1\x00'})
write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x604001, 0x0)
write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d1X\xf9\\3.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xc4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x8d\t=\x95\xe28\x99\xbc\n\xcf&\x05Q\xf1rQ\xbbw\xd5Z\xc0\x1bQ\xecP\xb7\xe7\x19z\xebkG\x1e>\x94\xb2\x7f\xc3\x91\xf3\xa2X\xb6 )$\x17f\x19\xaa\x88\xf9\xed\x992\xb9\xa4?\xf8A\t\xf3\x7f|\x0f\x9d;\x7f\t&\x1a\x18\xf8\xd7\x0e\xcf\b\xe8\x91\xd7\xe2/:>y0\xe4\"\"\x9a1\xf0\\\xed\xce$\xa4\xd1\xd3\x1fJ\x85\x86\xaf\xe0\xc8\x84:#\xe5\xaf0R\xc0\v\xd3\xde43x\xb7\x8fQ\r|{\xf5\x14k\xeeL\xcf\xbd\x03\xaa7\xe82}{\xde\x80\xd9', 0x100000a3d9)
mmap$auto(0x1, 0x55, 0xfffffffffffffff7, 0x18, r0, 0x4)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
close_range$auto(r1, r1, 0x5)
unshare$auto(0xf)
r2 = getpgrp(0x0)
ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={"066d3970917268f77ce910cc79bac67915f7f5439753e9d53263c6412d09fa6a", 0x8, 0x1, 0x80000000, 0xff, 0xffff, r2})
prctl$auto(0x4000003d, 0x5, r2, 0x5, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
close$auto(0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008045}, 0x24048084)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop15\x00', 0x2543, 0x0)
ioctl$auto_BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000001240)={0xfffffffffffffff8, 0x3, 0x1})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8aa182, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
unshare$auto(0x40000080)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
mmap$auto(0x8b, 0x810004, 0x100000002, 0x8002000008011, 0x3, 0xffff)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x161342, 0x130)

5.693717172s ago: executing program 0 (id=962):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
ioctl$auto(r0, 0x5522, 0xf15)
ioctl$auto(r0, 0x5523, r0)
r1 = landlock_create_ruleset$auto(&(0x7f0000000140)={0x4, 0x1, 0x9}, 0xe, 0x0)
landlock_restrict_self$auto(r1, 0xb)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
ioctl$auto_TUNSETVNETHDRSZ2(r1, 0x400454d8, &(0x7f0000000000)=0x6)
unshare$auto(0x40000080)

5.250933533s ago: executing program 0 (id=963):
write$auto(0xffffffffffffffff, 0x0, 0x81)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x40400, 0xd8)
fchmod$auto(r0, 0x9)
setreuid$auto(0x4, 0x8)
mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd)
r1 = socket(0xa, 0x2, 0xfffffffc)
socket(0x15, 0x5, 0x0)
socket(0x1d, 0x2, 0x7)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}})
io_uring_register$auto(0x2, 0x21, &(0x7f0000000240), 0x1)
r2 = socket(0x2c, 0x3, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0)
fcntl$auto(r3, 0x400, 0x1)
ioctl$auto_UBI_IOCATT(r3, 0x40186f40, &(0x7f0000000000)={0x9, 0xfff, 0x1, 0xffff, 0x2, 0x7f})
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES16=r1, @ANYBLOB="000326bd7017fddbdf250200000008002700080000000a001800aaaa8aaaaabb0000", @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000)
fanotify_init$auto(0x7f, 0x1)

5.142438456s ago: executing program 0 (id=964):
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9)
mmap$auto(0x200000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
io_uring_setup$auto(0x401, 0x0)
bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@enable_stats={0x7}, 0x6)
mlockall$auto(0x7)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy2/fragmentation_threshold\x00', 0x40100, 0x0)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
io_uring_setup$auto(0x9, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)

4.959898845s ago: executing program 8 (id=965):
mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0xffffffffffffffff, 0x8000)
readahead$auto(0xffffffffffffffff, 0x2, 0x10001)
getrandom$auto(0x0, 0x6000004, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x40000, 0x0)
r1 = getpid()
r2 = gettid()
rt_tgsigqueueinfo$auto(r1, r2, 0x22, &(0x7f0000000400)={@siginfo_0_0={0x3, 0xfffffff5, 0xfffffffa, @_kill={r1}}})
ioctl$auto_FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=0x3)
setsockopt$auto(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x5)
r3 = socket(0x2b, 0x1, 0x0)
r4 = socket(0x10, 0x2, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00'})
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x200490c4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r7)
ioctl$auto_KVM_CREATE_VM(r6, 0xc048aeca, 0x0)
sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x28000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c031)
sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830)

4.370615479s ago: executing program 8 (id=966):
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0)
pread64$auto(r0, 0x0, 0xf42f, 0x7f)

3.978773737s ago: executing program 8 (id=967):
mmap$auto(0x0, 0x400008, 0x9, 0x1009b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
write$auto(0x3, 0x0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
read$auto(0x3, 0x0, 0xfdef)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto(0x3, 0x81484d11, 0x38)
r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x10, 0x2, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x891}, 0x4)
futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001500)=""/4094, 0xffe)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r3, 0x8000)
read$auto_bdi_debug_stats_fops_(r0, &(0x7f0000000040)=""/97, 0x61)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
socket(0x2c, 0x3, 0x0)

3.893206523s ago: executing program 49 (id=933):
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0)
ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3)
pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = socket(0x2, 0x1, 0x106)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r6 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
open(0x0, 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r6, 0x401c5820, 0x0)
fstat$auto(r5, 0x0)
sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bda6, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0)

3.585048364s ago: executing program 0 (id=969):
r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x381800, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0xc, 0x0)
fsopen$auto(0x0, 0x1)
ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)="3b32441a514c35de2379c2763c7fd45d4a99905d2c1c5aa87032e425fdb1ac39ad50c181bdc2c648a00fdc223d7e3e77dd6433b39384f147d8bd980528d26da1c6b1d44acd056775ceb86f46b16d57930ed948881ec32ef410149ae723d0b7505c7e0c5b657bdc059aedd987283cce05d5b2f7904ffb8f27b7b5f7d20dfc078e54244adfa0fe34b52038aba3c5dabd5a32af")
r1 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0)
pread64$auto(r1, 0x0, 0x7ff, 0x800)

3.409567925s ago: executing program 0 (id=970):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(0x0, 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0x29, 0x5, 0x0)
write$auto(r4, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x15, 0x0, 0x1)

1.508549652s ago: executing program 50 (id=937):
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="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")
mmap$auto(0x0, 0x7ffffffb, 0x3e2, 0x17, r0, 0x4800000000000000)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x4)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socket(0x10, 0x2, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
write$auto(r1, &(0x7f0000000080)='/dev/audio\x00', 0x80000000)
open(&(0x7f0000000140)='./file0\x00', 0x22240, 0x147)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000180))
ioctl$auto(0xc8, 0x800454e1, 0x5c8d)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
read$auto(0x3, 0x0, 0x8080)
sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40015}, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x9, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af0510a00658a20d8dc6b36c83ce63f", <r3=>0x0, 0xffffffffffffffff, 0x4005, 0x7, 0x7, 0x6}, 0xf)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd=r2, @target_ifindex=r3, 0x2, 0x7, @netfilter={0x81, 0xa4d8, 0x8001, 0x80000000}}, 0x96)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
write$auto(0xffffffffffffffff, 0x0, 0x81)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8)
write$auto(0x3, 0x0, 0x4)

945.42617ms ago: executing program 8 (id=972):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0x29, 0x5, 0x0)
write$auto(r4, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x15, 0x0, 0x1)

0s ago: executing program 0 (id=973):
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, 0x0, 0x73, 0x0, 0x0, 0x29}, 0x7}, 0x400003, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0)
r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r1, 0x4b67, r2)
r3 = fcntl$auto_F_GETOWN(r1, 0x9, 0xc8fd)
prctl$auto_PR_SET_MM_ARG_START(0x1, 0x8, r3, 0x1, 0x22e2f12f)
r4 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x801, 0x0)
r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40043d04, 0x0)
write$auto_aoe_fops_aoechr(r4, 0x0, 0x0)

kernel console output (not intermixed with test programs):

375.848900][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout
[  375.946961][ T8361] netlink: 330 bytes leftover after parsing attributes in process `syz.2.573'.
[  376.421639][ T8370] netlink: 25 bytes leftover after parsing attributes in process `syz.0.577'.
[  376.715930][ T8370] Process accounting resumed
[  377.946494][ T8401] netlink: 338 bytes leftover after parsing attributes in process `syz.2.585'.
[  378.895690][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  378.903596][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  379.557998][ T8419] netlink: 25 bytes leftover after parsing attributes in process `syz.3.588'.
[  381.762527][ T8463] random: crng reseeded on system resumption
[  381.937381][ T8441] kexec: Could not allocate control_code_buffer
[  381.996536][ T8465] FAULT_INJECTION: forcing a failure.
[  381.996536][ T8465] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  382.065949][ T8465] CPU: 1 UID: 0 PID: 8465 Comm: syz.0.599 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  382.066013][ T8465] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  382.066031][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  382.066054][ T8465] Call Trace:
[  382.066067][ T8465]  <TASK>
[  382.066082][ T8465]  dump_stack_lvl+0x100/0x190
[  382.066127][ T8465]  should_fail_ex.cold+0x5/0xa
[  382.066167][ T8465]  ? prepare_alloc_pages+0x16d/0x5f0
[  382.066219][ T8465]  should_fail_alloc_page+0xeb/0x140
[  382.066264][ T8465]  prepare_alloc_pages+0x1f0/0x5f0
[  382.066315][ T8465]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  382.066376][ T8465]  ? lru_gen_add_folio+0x20f/0x13d0
[  382.066422][ T8465]  ? folios_put_refs+0x716/0xa90
[  382.066464][ T8465]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  382.066529][ T8465]  ? __lock_acquire+0x4a5/0x2630
[  382.066563][ T8465]  ? __lock_acquire+0x4a5/0x2630
[  382.066595][ T8465]  ? css_rstat_updated+0x1ce/0x5a0
[  382.066669][ T8465]  ? lock_acquire+0x1b1/0x370
[  382.066702][ T8465]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  382.066757][ T8465]  ? policy_nodemask+0xed/0x4f0
[  382.066801][ T8465]  alloc_pages_mpol+0x1fb/0x540
[  382.066846][ T8465]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  382.066891][ T8465]  ? __lock_acquire+0x4a5/0x2630
[  382.066939][ T8465]  folio_alloc_mpol_noprof+0x36/0x260
[  382.066990][ T8465]  vma_alloc_folio_noprof+0xed/0x1d0
[  382.067038][ T8465]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  382.067099][ T8465]  do_anonymous_page+0xb46/0x2050
[  382.067153][ T8465]  ? rcu_read_unlock+0x2d/0xb0
[  382.067216][ T8465]  __handle_mm_fault+0x1d2c/0x2a00
[  382.067273][ T8465]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  382.067320][ T8465]  ? __pfx___handle_mm_fault+0x10/0x10
[  382.067377][ T8465]  ? pte_offset_map_lock+0x174/0x320
[  382.067417][ T8465]  ? find_held_lock+0x2b/0x80
[  382.067475][ T8465]  ? follow_page_pte+0x4d0/0x13f0
[  382.067526][ T8465]  handle_mm_fault+0x36d/0xa20
[  382.067585][ T8465]  __get_user_pages+0x1178/0x32a0
[  382.067643][ T8465]  ? __pfx___get_user_pages+0x10/0x10
[  382.067700][ T8465]  populate_vma_page_range+0x267/0x3f0
[  382.067749][ T8465]  ? __pfx_populate_vma_page_range+0x10/0x10
[  382.067794][ T8465]  ? __pfx_find_vma_intersection+0x10/0x10
[  382.067840][ T8465]  ? do_mmap+0x93f/0x12f0
[  382.067888][ T8465]  __mm_populate+0x107/0x3a0
[  382.067944][ T8465]  ? __pfx___mm_populate+0x10/0x10
[  382.067995][ T8465]  ? up_write+0x28c/0x4f0
[  382.068040][ T8465]  vm_mmap_pgoff+0x37f/0x470
[  382.068092][ T8465]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  382.068146][ T8465]  ? find_held_lock+0x2b/0x80
[  382.068193][ T8465]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  382.068241][ T8465]  ksys_mmap_pgoff+0xe4/0x610
[  382.068286][ T8465]  ? find_held_lock+0x2b/0x80
[  382.068333][ T8465]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  382.068374][ T8465]  ? exc_page_fault+0x6f/0xd0
[  382.068438][ T8465]  __x64_sys_mmap+0x125/0x190
[  382.068485][ T8465]  do_syscall_64+0x10b/0xf80
[  382.068536][ T8465]  ? clear_bhb_loop+0x40/0x90
[  382.068579][ T8465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.068614][ T8465] RIP: 0033:0x7ffb3c99cdd9
[  382.068642][ T8465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  382.068678][ T8465] RSP: 002b:00007ffb3d86b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  382.068712][ T8465] RAX: ffffffffffffffda RBX: 00007ffb3cc16090 RCX: 00007ffb3c99cdd9
[  382.068734][ T8465] RDX: 00000000000000df RSI: 0000000000400009 RDI: 0000000000000000
[  382.068754][ T8465] RBP: 00007ffb3ca32d69 R08: 8000000000000003 R09: 0000000000008000
[  382.068775][ T8465] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  382.068795][ T8465] R13: 00007ffb3cc16128 R14: 00007ffb3cc16090 R15: 00007ffebbfb6338
[  382.068837][ T8465]  </TASK>
[  382.609021][ T5638] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9
[  385.196540][ T8506] futex_wake_op: syz.3.608 tries to shift op by -2048; fix this program
[  385.699587][ T8516] [U] 0�="­/�
[  385.714155][ T8516] [U] 
[  385.725378][ T8516] [U] EÇeÅQ‰Í@’
[  385.742835][ T8516] random: crng reseeded on system resumption
[  387.282154][ T8518] [U] 
[  391.154964][ T8579] FAULT_INJECTION: forcing a failure.
[  391.154964][ T8579] name fail_futex, interval 1, probability 0, space 0, times 1
[  391.197747][ T8579] CPU: 1 UID: 0 PID: 8579 Comm: syz.3.624 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  391.197815][ T8579] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  391.197834][ T8579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  391.197856][ T8579] Call Trace:
[  391.197869][ T8579]  <TASK>
[  391.197882][ T8579]  dump_stack_lvl+0x100/0x190
[  391.197929][ T8579]  should_fail_ex.cold+0x5/0xa
[  391.197976][ T8579]  get_futex_key+0x1d2/0x1510
[  391.198020][ T8579]  ? __pfx_get_futex_key+0x10/0x10
[  391.198056][ T8579]  ? __pfx___might_resched+0x10/0x10
[  391.198096][ T8579]  ? trace_kmem_cache_alloc+0xd5/0x100
[  391.198139][ T8579]  ? __kasan_slab_alloc+0x89/0x90
[  391.198178][ T8579]  ? lockdep_init_map_type+0x5c/0x250
[  391.198229][ T8579]  futex_wake+0xea/0x530
[  391.198281][ T8579]  ? __pfx_futex_wake+0x10/0x10
[  391.198325][ T8579]  ? file_init_path+0x48e/0x670
[  391.198387][ T8579]  ? lock_acquire+0x1b1/0x370
[  391.198426][ T8579]  do_futex+0x32b/0x350
[  391.198465][ T8579]  ? __pfx_do_futex+0x10/0x10
[  391.198507][ T8579]  ? fd_install+0x24f/0x580
[  391.198555][ T8579]  __x64_sys_futex+0x34f/0x4d0
[  391.198597][ T8579]  ? __do_sys_landlock_create_ruleset+0x2b2/0x4b0
[  391.198656][ T8579]  ? __pfx___x64_sys_futex+0x10/0x10
[  391.198704][ T8579]  ? rcu_is_watching+0x12/0xc0
[  391.198754][ T8579]  do_syscall_64+0x10b/0xf80
[  391.198807][ T8579]  ? clear_bhb_loop+0x40/0x90
[  391.198850][ T8579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.198886][ T8579] RIP: 0033:0x7f118cb9cdd9
[  391.198917][ T8579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  391.198954][ T8579] RSP: 002b:00007f118da9b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  391.198987][ T8579] RAX: ffffffffffffffda RBX: 00007f118ce16098 RCX: 00007f118cb9cdd9
[  391.199012][ T8579] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f118ce1609c
[  391.199034][ T8579] RBP: 00007f118ce16090 R08: 0000000000000001 R09: 0000000000000000
[  391.199057][ T8579] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[  391.199079][ T8579] R13: 00007f118ce16128 R14: 00007ffd64d86e50 R15: 00007ffd64d86f38
[  391.199124][ T8579]  </TASK>
[  391.307434][ T8583] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  392.697100][ T8604] netlink: 25 bytes leftover after parsing attributes in process `syz.0.632'.
[  392.918554][ T8603] net_ratelimit: 21 callbacks suppressed
[  392.918575][ T8603] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  392.955616][ T8603] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  393.593861][ T8621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.638'.
[  396.524512][ T8669] futex_wake_op: syz.2.649 tries to shift op by -2048; fix this program
[  402.827764][ T8749] CIFS: VFS: Invalid SecurityFlags: 
[  402.915947][ T8751] i2c i2c-0: delete_device: Extra parameters
[  403.698208][ T8763] Line length is too long: Should be less than 4094
[  405.944087][ T8798] netlink: 330 bytes leftover after parsing attributes in process `syz.2.685'.
[  406.775860][ T8799] Process accounting paused
[  407.253194][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'.
[  407.311024][ T8831] FAULT_INJECTION: forcing a failure.
[  407.311024][ T8831] name failslab, interval 1, probability 0, space 0, times 0
[  407.327154][ T8831] CPU: 0 UID: 0 PID: 8831 Comm: syz.1.693 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  407.327212][ T8831] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  407.327235][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  407.327255][ T8831] Call Trace:
[  407.327266][ T8831]  <TASK>
[  407.327279][ T8831]  dump_stack_lvl+0x100/0x190
[  407.327318][ T8831]  should_fail_ex.cold+0x5/0xa
[  407.327355][ T8831]  ? br_add_if+0x281/0x1b40
[  407.327393][ T8831]  should_failslab+0xc2/0x120
[  407.327431][ T8831]  __kmalloc_noprof+0xe0/0x850
[  407.327470][ T8831]  br_add_if+0x281/0x1b40
[  407.327507][ T8831]  ? bpf_lsm_capable+0x9/0x10
[  407.327546][ T8831]  ? security_capable+0x80/0x260
[  407.327599][ T8831]  add_del_if+0x114/0x160
[  407.327637][ T8831]  br_dev_siocdevprivate+0x8ac/0x1650
[  407.327681][ T8831]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  407.327717][ T8831]  ? __lock_acquire+0x4a5/0x2630
[  407.327760][ T8831]  ? lock_acquire+0x1b1/0x370
[  407.327803][ T8831]  ? netdev_name_node_lookup+0x107/0x150
[  407.327864][ T8831]  dev_ifsioc+0xc2f/0x1f10
[  407.327905][ T8831]  ? __pfx_dev_ifsioc+0x10/0x10
[  407.327937][ T8831]  ? __pfx___mutex_lock+0x10/0x10
[  407.327999][ T8831]  ? dev_load+0x8e/0x240
[  407.328026][ T8831]  ? dev_load+0x8e/0x240
[  407.328064][ T8831]  dev_ioctl+0x70e/0x1070
[  407.328100][ T8831]  sock_ioctl+0x494/0x6b0
[  407.328150][ T8831]  ? __pfx_sock_ioctl+0x10/0x10
[  407.328200][ T8831]  ? hook_file_ioctl_common+0x149/0x410
[  407.328238][ T8831]  ? __fget_files+0x21f/0x3d0
[  407.328271][ T8831]  ? __pfx_sock_ioctl+0x10/0x10
[  407.328307][ T8831]  __x64_sys_ioctl+0x18e/0x210
[  407.328333][ T8831]  do_syscall_64+0x10b/0xf80
[  407.328367][ T8831]  ? clear_bhb_loop+0x40/0x90
[  407.328396][ T8831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.328420][ T8831] RIP: 0033:0x7fb104d9cdd9
[  407.328440][ T8831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.328465][ T8831] RSP: 002b:00007fb105cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  407.328495][ T8831] RAX: ffffffffffffffda RBX: 00007fb105015fa0 RCX: 00007fb104d9cdd9
[  407.328511][ T8831] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000004
[  407.328526][ T8831] RBP: 00007fb105cf5090 R08: 0000000000000000 R09: 0000000000000000
[  407.328541][ T8831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.328555][ T8831] R13: 00007fb105016038 R14: 00007fb105015fa0 R15: 00007ffef4b749e8
[  407.328586][ T8831]  </TASK>
[  408.029079][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  408.815517][ T8862] netlink: 25 bytes leftover after parsing attributes in process `syz.1.703'.
[  410.133543][ T8895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.710'.
[  410.684103][ T8903] random: crng reseeded on system resumption
[  411.734027][   T78] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.003654][ T8942] openvswitch: netlink: Message has 4 unknown bytes.
[  413.364378][ T8947] FAULT_INJECTION: forcing a failure.
[  413.364378][ T8947] name failslab, interval 1, probability 0, space 0, times 0
[  413.396307][ T8947] CPU: 1 UID: 0 PID: 8947 Comm: syz.0.724 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  413.396363][ T8947] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  413.396378][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  413.396398][ T8947] Call Trace:
[  413.396409][ T8947]  <TASK>
[  413.396422][ T8947]  dump_stack_lvl+0x100/0x190
[  413.396465][ T8947]  should_fail_ex.cold+0x5/0xa
[  413.396507][ T8947]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  413.396553][ T8947]  should_failslab+0xc2/0x120
[  413.396591][ T8947]  __kmalloc_noprof+0xe0/0x850
[  413.396631][ T8947]  kernfs_fop_write_iter+0x26a/0x5f0
[  413.396690][ T8947]  vfs_write+0x6ac/0x1070
[  413.396730][ T8947]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  413.396784][ T8947]  ? __pfx_vfs_write+0x10/0x10
[  413.396848][ T8947]  ksys_write+0x12a/0x250
[  413.396895][ T8947]  ? __pfx_ksys_write+0x10/0x10
[  413.396938][ T8947]  ? rcu_is_watching+0x12/0xc0
[  413.396985][ T8947]  do_syscall_64+0x10b/0xf80
[  413.397034][ T8947]  ? clear_bhb_loop+0x40/0x90
[  413.397076][ T8947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.397112][ T8947] RIP: 0033:0x7ffb3c99cdd9
[  413.397139][ T8947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.397172][ T8947] RSP: 002b:00007ffb3d88c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  413.397204][ T8947] RAX: ffffffffffffffda RBX: 00007ffb3cc15fa0 RCX: 00007ffb3c99cdd9
[  413.397225][ T8947] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[  413.397245][ T8947] RBP: 00007ffb3d88c090 R08: 0000000000000000 R09: 0000000000000000
[  413.397265][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  413.397285][ T8947] R13: 00007ffb3cc16038 R14: 00007ffb3cc15fa0 R15: 00007ffebbfb6338
[  413.397340][ T8947]  </TASK>
[  417.667523][ T5638] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  418.586216][ T9002] netlink: 330 bytes leftover after parsing attributes in process `syz.2.735'.
[  422.257435][ T9068] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  422.514634][ T9080] netlink: 'syz.2.753': attribute type 11 has an invalid length.
[  422.530276][ T9080] netlink: 'syz.2.753': attribute type 11 has an invalid length.
[  422.559030][ T9080] netlink: 'syz.2.753': attribute type 11 has an invalid length.
[  423.284960][ T9095] netlink: 342 bytes leftover after parsing attributes in process `syz.0.756'.
[  423.549252][ T5638] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260
[  423.549300][ T5638] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15
[  423.565508][ T5638] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f
[  423.717336][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.758'.
[  425.204637][ T9135] random: crng reseeded on system resumption
[  429.479629][ T9202] netlink: 342 bytes leftover after parsing attributes in process `syz.1.780'.
[  429.526488][ T9202] netlink: 342 bytes leftover after parsing attributes in process `syz.1.780'.
[  429.571416][ T9202] netlink: 342 bytes leftover after parsing attributes in process `syz.1.780'.
[  439.528295][ T5626] Process accounting resumed
[  439.844361][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  439.859403][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  439.871518][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  439.887399][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  439.895492][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  440.333644][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  440.347089][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  440.844635][ T9400] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.852721][ T9400] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.860355][ T9400] bridge_slave_0: entered allmulticast mode
[  440.869494][ T9400] bridge_slave_0: entered promiscuous mode
[  440.880102][ T9400] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.887443][ T9400] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.895684][ T9400] bridge_slave_1: entered allmulticast mode
[  440.918534][ T9400] bridge_slave_1: entered promiscuous mode
[  440.984588][ T9400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  441.020381][ T9400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  441.117898][ T9400] team0: Port device team_slave_0 added
[  441.142560][ T9400] team0: Port device team_slave_1 added
[  441.239354][ T9400] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.250065][ T9400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.310927][ T9400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.334510][ T9400] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.343909][ T9400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.405604][ T9400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.503573][ T9400] hsr_slave_0: entered promiscuous mode
[  441.510585][ T9400] hsr_slave_1: entered promiscuous mode
[  441.517027][ T9400] debugfs: 'hsr0' already exists in 'hsr'
[  441.523803][ T9400] Cannot create hsr debugfs directory
[  441.939742][ T5642] Bluetooth: hci4: command tx timeout
[  442.016945][ T9400] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  442.043066][ T9400] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  442.052080][ T9400] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  442.063240][ T9400] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  442.080079][ T9400] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  442.092680][ T9400] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  442.102050][ T9400] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  442.114354][ T9400] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  442.293005][ T9400] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.337411][ T9400] 8021q: adding VLAN 0 to HW filter on device team0
[  442.368052][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.375291][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.412130][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.419465][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.295388][ T9400] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.680325][ T9400] veth0_vlan: entered promiscuous mode
[  443.712461][ T9400] veth1_vlan: entered promiscuous mode
[  443.756202][ T9400] veth0_macvtap: entered promiscuous mode
[  443.768514][ T9400] veth1_macvtap: entered promiscuous mode
[  443.802942][ T9400] batman_adv: batadv0: Interface activated: batadv_slave_0
[  443.828876][ T9400] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.856935][   T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.878590][   T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.905441][   T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.947932][   T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.009232][ T5642] Bluetooth: hci4: command tx timeout
[  444.074877][  T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.098783][  T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.151743][  T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.162530][  T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.975961][ T9459] block2mtd: illegal erase size
[  446.089254][ T5642] Bluetooth: hci4: command tx timeout
[  448.168994][ T5642] Bluetooth: hci4: command tx timeout
[  453.069241][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  453.080899][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  453.095263][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  453.105497][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  453.116636][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  453.701579][ T9485] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.709301][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.717037][ T9485] bridge_slave_0: entered allmulticast mode
[  453.726057][ T9485] bridge_slave_0: entered promiscuous mode
[  453.735657][ T9485] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.743843][ T9485] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.751755][ T9485] bridge_slave_1: entered allmulticast mode
[  453.759511][ T9485] bridge_slave_1: entered promiscuous mode
[  453.798274][ T9485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.811210][ T9485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.847683][ T9485] team0: Port device team_slave_0 added
[  453.857801][ T9485] team0: Port device team_slave_1 added
[  453.889948][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.898522][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.925427][ T9485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.944815][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.952055][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.979289][ T9485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.032269][ T9485] hsr_slave_0: entered promiscuous mode
[  454.039433][ T9485] hsr_slave_1: entered promiscuous mode
[  454.045830][ T9485] debugfs: 'hsr0' already exists in 'hsr'
[  454.053504][ T9485] Cannot create hsr debugfs directory
[  454.246582][ T9485] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  454.259884][ T9485] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  454.269845][ T9485] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  454.281102][ T9485] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  454.291680][ T9485] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  454.305667][ T9485] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  454.315521][ T9485] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  454.325878][ T9485] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  454.359448][ T9485] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.367987][ T9485] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.376112][ T9485] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.383700][ T9485] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.457215][ T9485] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.483289][  T780] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.493123][  T780] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.513021][ T9485] 8021q: adding VLAN 0 to HW filter on device team0
[  454.530914][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.538427][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.555077][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.562351][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.039964][ T9485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.210049][ T5642] Bluetooth: hci5: command tx timeout
[  455.327191][ T9485] veth0_vlan: entered promiscuous mode
[  455.341740][ T9485] veth1_vlan: entered promiscuous mode
[  455.376914][ T9485] veth0_macvtap: entered promiscuous mode
[  455.387566][ T9485] veth1_macvtap: entered promiscuous mode
[  455.408005][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  455.430538][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  455.445208][   T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  455.458212][   T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  455.470649][   T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  455.481141][   T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  455.602858][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  455.611957][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.659850][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  455.667797][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.763693][ T9526] FAULT_INJECTION: forcing a failure.
[  455.763693][ T9526] name failslab, interval 1, probability 0, space 0, times 0
[  455.776907][ T9526] CPU: 1 UID: 0 PID: 9526 Comm: syz.5.810 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  455.776963][ T9526] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  455.776978][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  455.776996][ T9526] Call Trace:
[  455.777007][ T9526]  <TASK>
[  455.777018][ T9526]  dump_stack_lvl+0x100/0x190
[  455.777059][ T9526]  should_fail_ex.cold+0x5/0xa
[  455.777099][ T9526]  should_failslab+0xc2/0x120
[  455.777139][ T9526]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  455.777194][ T9526]  ? __alloc_skb+0x140/0x710
[  455.777227][ T9526]  ? __alloc_skb+0x5b7/0x710
[  455.777279][ T9526]  __alloc_skb+0x140/0x710
[  455.777311][ T9526]  ? __alloc_skb+0x5b7/0x710
[  455.777343][ T9526]  ? __pfx___alloc_skb+0x10/0x10
[  455.777377][ T9526]  ? __pfx___might_resched+0x10/0x10
[  455.777414][ T9526]  ? __lock_acquire+0x4a5/0x2630
[  455.777454][ T9526]  netlink_alloc_large_skb+0x69/0x150
[  455.777506][ T9526]  netlink_sendmsg+0x680/0xda0
[  455.777560][ T9526]  ? __pfx_netlink_sendmsg+0x10/0x10
[  455.777606][ T9526]  ? __import_iovec+0x1d2/0x640
[  455.777646][ T9526]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  455.777706][ T9526]  ____sys_sendmsg+0x9e1/0xb70
[  455.777752][ T9526]  ? __pfx_netlink_sendmsg+0x10/0x10
[  455.777800][ T9526]  ? __pfx_____sys_sendmsg+0x10/0x10
[  455.777850][ T9526]  ? rcu_is_watching+0x12/0xc0
[  455.777885][ T9526]  ? ___sys_sendmsg+0x19d/0x1e0
[  455.777931][ T9526]  ? kfree+0x1dd/0x6c0
[  455.777990][ T9526]  ___sys_sendmsg+0x190/0x1e0
[  455.778041][ T9526]  ? __pfx____sys_sendmsg+0x10/0x10
[  455.778124][ T9526]  ? __pfx___might_resched+0x10/0x10
[  455.778170][ T9526]  __sys_sendmmsg+0x205/0x430
[  455.778213][ T9526]  ? __pfx___sys_sendmmsg+0x10/0x10
[  455.778280][ T9526]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  455.778350][ T9526]  ? fput+0x79/0x100
[  455.778396][ T9526]  ? ksys_write+0x1ac/0x250
[  455.778434][ T9526]  ? __pfx_ksys_write+0x10/0x10
[  455.778479][ T9526]  __x64_sys_sendmmsg+0x9c/0x100
[  455.778586][ T9526]  ? lockdep_hardirqs_on+0x78/0x100
[  455.778636][ T9526]  do_syscall_64+0x10b/0xf80
[  455.778683][ T9526]  ? clear_bhb_loop+0x40/0x90
[  455.778721][ T9526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.778755][ T9526] RIP: 0033:0x7f6f4b99cdd9
[  455.778782][ T9526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.778815][ T9526] RSP: 002b:00007f6f4c832028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  455.778846][ T9526] RAX: ffffffffffffffda RBX: 00007f6f4bc15fa0 RCX: 00007f6f4b99cdd9
[  455.778868][ T9526] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  455.778888][ T9526] RBP: 00007f6f4c832090 R08: 0000000000000000 R09: 0000000000000000
[  455.778908][ T9526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  455.778927][ T9526] R13: 00007f6f4bc16038 R14: 00007f6f4bc15fa0 R15: 00007ffd7070e568
[  455.778970][ T9526]  </TASK>
[  457.285813][ T5638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  457.300499][ T5638] Bluetooth: hci5: command tx timeout
[  457.311364][ T5638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  457.320044][ T5638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  457.331983][ T5638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  457.340241][ T5638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  457.929505][ T5642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  457.946523][ T5642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  457.963254][ T5642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  457.979714][ T5642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  457.990977][ T5642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  459.171760][ T9546] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.190815][ T9546] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.199995][ T9546] bridge_slave_0: entered allmulticast mode
[  459.228951][ T9546] bridge_slave_0: entered promiscuous mode
[  459.259815][ T9546] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.291918][ T9546] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.324676][ T9546] bridge_slave_1: entered allmulticast mode
[  459.336360][ T9546] bridge_slave_1: entered promiscuous mode
[  459.369376][ T5642] Bluetooth: hci5: command tx timeout
[  459.375079][ T5638] Bluetooth: hci6: command tx timeout
[  459.471458][ T9546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.525758][ T9546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.705893][ T9546] team0: Port device team_slave_0 added
[  459.725422][ T9546] team0: Port device team_slave_1 added
[  459.791356][ T9556] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.798970][ T9556] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.806507][ T9556] bridge_slave_0: entered allmulticast mode
[  459.814717][ T9556] bridge_slave_0: entered promiscuous mode
[  459.826575][ T9546] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.834116][ T9546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.862138][ T9546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.873799][ T9556] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.881665][ T9556] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.889618][ T9556] bridge_slave_1: entered allmulticast mode
[  459.897530][ T9556] bridge_slave_1: entered promiscuous mode
[  459.905616][ T9546] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.914348][ T9546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.943305][ T9546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.990563][ T9556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  460.003251][ T9556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  460.071850][ T9546] hsr_slave_0: entered promiscuous mode
[  460.078460][ T9546] hsr_slave_1: entered promiscuous mode
[  460.085925][ T9546] debugfs: 'hsr0' already exists in 'hsr'
[  460.091812][ T5638] Bluetooth: hci7: command tx timeout
[  460.098624][ T9546] Cannot create hsr debugfs directory
[  460.106833][ T9556] team0: Port device team_slave_0 added
[  460.116110][ T9556] team0: Port device team_slave_1 added
[  460.171985][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.179346][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.206032][ T9556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.231879][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.242232][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.271046][ T9556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.371111][ T9556] hsr_slave_0: entered promiscuous mode
[  460.377940][ T9556] hsr_slave_1: entered promiscuous mode
[  460.385604][ T9556] debugfs: 'hsr0' already exists in 'hsr'
[  460.391625][ T9556] Cannot create hsr debugfs directory
[  460.665269][ T9546] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  460.688559][ T9546] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  460.699700][ T9546] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  460.723925][ T9546] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  460.743616][ T9546] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  460.761694][ T9546] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  460.770313][ T9546] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  460.785775][ T9546] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  460.976359][ T9556] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  460.989374][ T9556] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  461.000733][ T9556] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  461.012159][ T9556] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  461.025138][ T9556] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  461.040668][ T9556] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  461.058260][ T9556] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  461.072973][ T9556] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  461.174961][ T9546] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.237930][ T9546] 8021q: adding VLAN 0 to HW filter on device team0
[  461.262883][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.270141][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.313152][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.320376][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.403277][ T9556] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.415702][ T9546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  461.449693][ T5638] Bluetooth: hci6: command tx timeout
[  461.449745][ T5642] Bluetooth: hci5: command tx timeout
[  461.483592][ T9556] 8021q: adding VLAN 0 to HW filter on device team0
[  461.500826][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.508105][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.533645][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.540874][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  462.073386][ T9546] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.168998][ T5642] Bluetooth: hci7: command tx timeout
[  462.309464][ T9556] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.568186][ T9546] veth0_vlan: entered promiscuous mode
[  462.595937][ T9546] veth1_vlan: entered promiscuous mode
[  462.685992][ T9546] veth0_macvtap: entered promiscuous mode
[  462.716836][ T9546] veth1_macvtap: entered promiscuous mode
[  462.781310][ T9546] batman_adv: batadv0: Interface activated: batadv_slave_0
[  462.806381][ T9546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  462.855857][ T5638] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  462.869457][ T5638] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  462.879186][ T5638] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  462.889398][ T5638] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  462.903857][ T5638] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  462.930644][ T7902] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.956279][ T7902] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.965982][ T7902] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.008546][ T7902] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.042579][ T9556] veth0_vlan: entered promiscuous mode
[  463.192213][ T9556] veth1_vlan: entered promiscuous mode
[  463.236883][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.249662][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.334110][ T7902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.343150][ T7902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.396976][ T9556] veth0_macvtap: entered promiscuous mode
[  463.423623][ T9556] veth1_macvtap: entered promiscuous mode
[  463.472513][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.502246][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.532163][ T5638] Bluetooth: hci6: command tx timeout
[  463.540286][ T7902] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.562940][ T7902] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.593999][ T7902] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.633752][ T7902] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.857987][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.876143][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.967869][ T7902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.976630][ T7902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.249606][ T5638] Bluetooth: hci7: command tx timeout
[  464.775394][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.783456][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.791385][ T9629] bridge_slave_0: entered allmulticast mode
[  464.800493][ T9629] bridge_slave_0: entered promiscuous mode
[  464.810049][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.817479][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.825112][ T9629] bridge_slave_1: entered allmulticast mode
[  464.833384][ T9629] bridge_slave_1: entered promiscuous mode
[  464.886873][ T9629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.912387][ T9629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.967072][ T9629] team0: Port device team_slave_0 added
[  464.981516][ T5638] Bluetooth: hci8: command tx timeout
[  464.992553][ T9629] team0: Port device team_slave_1 added
[  465.040247][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.052957][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  465.082899][ T9629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  465.104808][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  465.112592][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  465.141521][ T9629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.290400][ T9629] hsr_slave_0: entered promiscuous mode
[  465.306120][ T9629] hsr_slave_1: entered promiscuous mode
[  465.321813][ T9629] debugfs: 'hsr0' already exists in 'hsr'
[  465.327633][ T9629] Cannot create hsr debugfs directory
[  465.608911][ T5638] Bluetooth: hci6: command tx timeout
[  466.020073][ T9664] netlink: 28 bytes leftover after parsing attributes in process `syz.7.818'.
[  466.264157][ T9629] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  466.287099][ T9629] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  466.310388][ T9629] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  466.326994][ T9629] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  466.334284][ T5638] Bluetooth: hci7: command tx timeout
[  466.347925][ T9629] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  466.367379][ T9629] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  466.386058][ T9629] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  466.410275][ T9629] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  466.504920][ T9666] ubi31: attaching mtd0
[  466.513706][ T9666] ubi31: scanning is finished
[  466.518559][ T9666] ubi31 error: ubi_read_volume_table: the layout volume was not found
[  466.658279][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.694319][ T9666] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  466.716889][ T9629] 8021q: adding VLAN 0 to HW filter on device team0
[  466.741714][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.748986][ T7902] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.785181][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.792566][ T7902] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.049847][ T5638] Bluetooth: hci8: command tx timeout
[  467.869376][ T9629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.479479][ T9629] veth0_vlan: entered promiscuous mode
[  468.516430][ T9629] veth1_vlan: entered promiscuous mode
[  468.670502][ T9629] veth0_macvtap: entered promiscuous mode
[  468.694684][ T9629] veth1_macvtap: entered promiscuous mode
[  468.751394][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.795177][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.861180][   T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.882876][   T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.916190][   T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.943113][   T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.107258][  T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.127592][  T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.138622][ T5638] Bluetooth: hci8: command tx timeout
[  469.208338][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.218277][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.385525][ T9706] netlink: 28 bytes leftover after parsing attributes in process `syz.8.817'.
[  469.417452][ T9706] bond0: (slave bond_slave_0): Releasing backup interface
[  470.366789][ T9716] netlink: 28 bytes leftover after parsing attributes in process `syz.8.825'.
[  471.209034][ T5638] Bluetooth: hci8: command tx timeout
[  471.985517][ T9727] Process accounting resumed
[  475.208319][ T5642] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  475.222879][ T5642] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  475.234764][ T5642] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  475.246561][ T5642] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  475.259980][ T5642] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  475.305791][ T9761] netlink: 330 bytes leftover after parsing attributes in process `syz.8.839'.
[  475.813575][ T9770] netlink: 346 bytes leftover after parsing attributes in process `syz.8.840'.
[  475.843308][ T9770] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  476.706597][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.718924][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.739018][ T9759] bridge_slave_0: entered allmulticast mode
[  476.752848][ T9759] bridge_slave_0: entered promiscuous mode
[  476.771409][ T9759] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.788934][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.799697][ T9759] bridge_slave_1: entered allmulticast mode
[  476.820016][ T9759] bridge_slave_1: entered promiscuous mode
[  476.892612][ T9759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.913725][ T9759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  476.985479][ T9759] team0: Port device team_slave_0 added
[  477.003752][ T9759] team0: Port device team_slave_1 added
[  477.068359][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_0
[  477.076591][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  477.106459][ T9759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.120211][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_1
[  477.127315][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  477.158293][ T9759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  477.207207][ T9759] hsr_slave_0: entered promiscuous mode
[  477.214674][ T9759] hsr_slave_1: entered promiscuous mode
[  477.221413][ T9759] debugfs: 'hsr0' already exists in 'hsr'
[  477.227258][ T9759] Cannot create hsr debugfs directory
[  477.369840][ T5642] Bluetooth: hci9: command tx timeout
[  477.427480][ T9759] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  477.442430][ T9759] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  477.456941][ T9759] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  477.472298][ T9759] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  477.481875][ T9759] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  477.492035][ T9759] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  477.501985][ T9759] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  477.512579][ T9759] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  477.605215][ T9759] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.629194][ T9759] 8021q: adding VLAN 0 to HW filter on device team0
[  477.650445][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.657791][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.668340][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.675549][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  478.160338][ T9759] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.434010][ T9759] veth0_vlan: entered promiscuous mode
[  478.447092][ T9759] veth1_vlan: entered promiscuous mode
[  478.493211][ T9759] veth0_macvtap: entered promiscuous mode
[  478.504204][ T9759] veth1_macvtap: entered promiscuous mode
[  478.525186][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_0
[  478.544478][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_1
[  478.559956][ T1029] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.576220][ T1029] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.594176][ T1029] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.603440][ T1029] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.727086][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.743038][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.791234][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.799761][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.448812][ T5642] Bluetooth: hci9: command tx timeout
[  481.528967][ T5642] Bluetooth: hci9: command tx timeout
[  483.610135][ T5642] Bluetooth: hci9: command tx timeout
[  484.624435][ T5638] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  484.633420][ T5638] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  484.642267][ T5638] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  484.653850][ T5638] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  484.664110][ T5638] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  485.279242][ T9816] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.287349][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.299235][ T9816] bridge_slave_0: entered allmulticast mode
[  485.307187][ T9816] bridge_slave_0: entered promiscuous mode
[  485.315724][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.327091][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.334663][ T9816] bridge_slave_1: entered allmulticast mode
[  485.342263][ T9816] bridge_slave_1: entered promiscuous mode
[  485.379473][ T9816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.392045][ T9816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.431838][ T9816] team0: Port device team_slave_0 added
[  485.441390][ T9816] team0: Port device team_slave_1 added
[  485.472392][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  485.479709][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  485.505810][ T9816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  485.519925][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  485.530689][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  485.556883][ T9816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  485.605806][ T9816] hsr_slave_0: entered promiscuous mode
[  485.612908][ T9816] hsr_slave_1: entered promiscuous mode
[  485.620229][ T9816] debugfs: 'hsr0' already exists in 'hsr'
[  485.626061][ T9816] Cannot create hsr debugfs directory
[  485.794808][ T9816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.881856][ T9816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.966934][ T9816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.047053][ T9816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.229815][ T9816] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  486.241742][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  486.253968][ T9816] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  486.265950][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  486.274119][ T9816] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  486.286754][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  486.294998][ T9816] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  486.306308][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  486.403483][ T9816] 8021q: adding VLAN 0 to HW filter on device bond0
[  486.436467][ T9816] 8021q: adding VLAN 0 to HW filter on device team0
[  486.454655][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.461869][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  486.479962][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.487251][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  486.729127][ T5642] Bluetooth: hci10: command tx timeout
[  486.953252][ T9816] 8021q: adding VLAN 0 to HW filter on device batadv0
[  487.015859][ T9816] veth0_vlan: entered promiscuous mode
[  487.030721][ T9816] veth1_vlan: entered promiscuous mode
[  487.076882][ T9816] veth0_macvtap: entered promiscuous mode
[  487.091352][ T9816] veth1_macvtap: entered promiscuous mode
[  487.113900][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_0
[  487.133204][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_1
[  487.153743][ T1029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  487.163177][ T1029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  487.182188][ T1029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  487.192817][ T1029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  487.309986][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.317975][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.363530][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.384551][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.665085][ T5638] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  488.680705][ T5638] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  488.692473][ T5638] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  488.711402][ T5638] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  488.719991][ T5638] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  488.809159][ T5642] Bluetooth: hci10: command tx timeout
[  489.888245][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.895819][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.903530][ T9857] bridge_slave_0: entered allmulticast mode
[  489.911870][ T9857] bridge_slave_0: entered promiscuous mode
[  489.921784][ T9857] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.931702][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.939459][ T9857] bridge_slave_1: entered allmulticast mode
[  489.948483][ T9857] bridge_slave_1: entered promiscuous mode
[  489.985607][ T9857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  489.997827][ T9857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.047858][ T9857] team0: Port device team_slave_0 added
[  490.065387][ T9857] team0: Port device team_slave_1 added
[  490.136293][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  490.144644][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  490.171268][ T9857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  490.189929][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  490.205135][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  490.265906][ T9857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  490.320798][ T9857] hsr_slave_0: entered promiscuous mode
[  490.327743][ T9857] hsr_slave_1: entered promiscuous mode
[  490.336254][ T9857] debugfs: 'hsr0' already exists in 'hsr'
[  490.344368][ T9857] Cannot create hsr debugfs directory
[  490.708388][ T9857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.787704][ T9857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.811384][ T5642] Bluetooth: hci11: command tx timeout
[  490.901146][ T5642] Bluetooth: hci10: command tx timeout
[  490.912987][ T9857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.997300][ T9857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.176709][ T9857] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  491.187330][ T9857] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  491.196197][ T9857] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  491.207139][ T9857] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  491.216028][ T9857] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  491.230454][ T9857] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  491.238909][ T9857] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  491.249536][ T9857] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  491.338264][ T9857] 8021q: adding VLAN 0 to HW filter on device bond0
[  491.365304][ T9857] 8021q: adding VLAN 0 to HW filter on device team0
[  491.385400][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.392599][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  491.411375][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.418547][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  491.906425][ T9857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  491.958536][ T9857] veth0_vlan: entered promiscuous mode
[  491.975059][ T9857] veth1_vlan: entered promiscuous mode
[  492.013302][ T9857] veth0_macvtap: entered promiscuous mode
[  492.024988][ T9857] veth1_macvtap: entered promiscuous mode
[  492.048002][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  492.064386][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  492.085048][  T780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  492.095981][  T780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  492.107344][  T780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  492.116391][  T780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  492.266873][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.276130][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.325865][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.334856][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.462128][   T29] audit: type=1800 audit(1778606004.700:7): pid=9897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.845" name="dbroot" dev="configfs" ino=31377 res=0 errno=0
[  492.618229][ T5638] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  492.637402][ T5638] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  492.647327][ T5638] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  492.656818][ T5638] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  492.664987][ T5638] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  492.889539][ T5638] Bluetooth: hci11: command tx timeout
[  492.969398][ T5638] Bluetooth: hci10: command tx timeout
[  493.910409][ T9899] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.917727][ T9899] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.929395][ T9899] bridge_slave_0: entered allmulticast mode
[  493.950495][ T9899] bridge_slave_0: entered promiscuous mode
[  493.962920][ T9899] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.977042][ T9899] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.985557][ T9899] bridge_slave_1: entered allmulticast mode
[  493.995301][ T9899] bridge_slave_1: entered promiscuous mode
[  494.059077][ T9899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  494.083717][ T9899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  494.141850][ T9899] team0: Port device team_slave_0 added
[  494.152842][ T9899] team0: Port device team_slave_1 added
[  494.213450][ T9899] batman_adv: batadv0: Adding interface: batadv_slave_0
[  494.220990][ T9899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  494.268821][ T9899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  494.295720][ T9899] batman_adv: batadv0: Adding interface: batadv_slave_1
[  494.303995][ T9899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  494.330983][ T9899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.425015][ T9899] hsr_slave_0: entered promiscuous mode
[  494.432610][ T9899] hsr_slave_1: entered promiscuous mode
[  494.444563][ T9899] debugfs: 'hsr0' already exists in 'hsr'
[  494.453094][ T9899] Cannot create hsr debugfs directory
[  494.731862][ T5638] Bluetooth: hci12: command tx timeout
[  494.884576][ T9899] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.970184][ T5638] Bluetooth: hci11: command tx timeout
[  495.040090][ T9899] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.142686][ T9899] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.301587][ T9899] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.571793][ T5642] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  495.586148][ T5642] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  495.594950][ T5642] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  495.605497][ T5642] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  495.620625][ T5642] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  496.055068][ T9899] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  496.118466][ T9899] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  496.137922][ T9899] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  496.171298][ T9899] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  496.200439][ T9899] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  496.222069][ T9899] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  496.233881][ T9899] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  496.287758][ T9899] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  496.564760][ T9899] 8021q: adding VLAN 0 to HW filter on device bond0
[  496.699430][ T9899] 8021q: adding VLAN 0 to HW filter on device team0
[  496.765798][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.773051][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.801290][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.808484][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  496.818095][ T5638] Bluetooth: hci12: command tx timeout
[  497.048957][ T5638] Bluetooth: hci11: command tx timeout
[  497.585344][ T9931] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.592924][ T9931] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.601172][ T9931] bridge_slave_0: entered allmulticast mode
[  497.613721][ T9931] bridge_slave_0: entered promiscuous mode
[  497.624054][ T9931] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.632301][ T9931] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.640387][ T9931] bridge_slave_1: entered allmulticast mode
[  497.651952][ T9931] bridge_slave_1: entered promiscuous mode
[  497.690325][ T5638] Bluetooth: hci13: command tx timeout
[  497.758233][ T9931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  497.836463][ T9931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  497.913785][ T9931] team0: Port device team_slave_0 added
[  497.953672][ T9931] team0: Port device team_slave_1 added
[  498.036936][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_0
[  498.044110][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  498.071400][ T9931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  498.087370][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_1
[  498.094958][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  498.165393][ T9931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  498.220596][ T9899] 8021q: adding VLAN 0 to HW filter on device batadv0
[  498.315136][ T9931] hsr_slave_0: entered promiscuous mode
[  498.339328][ T9931] hsr_slave_1: entered promiscuous mode
[  498.350115][ T9931] debugfs: 'hsr0' already exists in 'hsr'
[  498.360621][ T9931] Cannot create hsr debugfs directory
[  498.685517][ T9899] veth0_vlan: entered promiscuous mode
[  498.783533][ T9899] veth1_vlan: entered promiscuous mode
[  498.842791][ T9931] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.889651][ T5638] Bluetooth: hci12: command tx timeout
[  498.996643][ T9899] veth0_macvtap: entered promiscuous mode
[  499.119644][ T9931] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.153947][ T9899] veth1_macvtap: entered promiscuous mode
[  499.251378][ T9931] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.304662][ T9899] batman_adv: batadv0: Interface activated: batadv_slave_0
[  499.325745][ T9899] batman_adv: batadv0: Interface activated: batadv_slave_1
[  499.372224][   T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.393357][   T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.440327][ T9931] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.474605][   T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.502619][   T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.576398][ T9931] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.769149][ T5638] Bluetooth: hci13: command tx timeout
[  499.915800][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  499.945696][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.084771][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.112445][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.390836][ T9931] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  500.401427][ T9931] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  500.411147][ T9931] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  500.421615][ T9931] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  500.430075][ T9931] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  500.445602][ T9931] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  500.457014][ T9931] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  500.480056][ T9931] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  500.686209][ T9931] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.733902][ T9931] 8021q: adding VLAN 0 to HW filter on device team0
[  500.766414][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.773868][ T7902] bridge0: port 1(bridge_slave_0) entered forwarding state
[  500.823433][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.830697][ T7902] bridge0: port 2(bridge_slave_1) entered forwarding state
[  500.969860][ T5638] Bluetooth: hci12: command tx timeout
[  501.582879][ T9987] futex_wake_op: syz.3.854 tries to shift op by -2048; fix this program
[  501.596699][ T9987] 0x000000000001-0x000000020000 : ""
[  501.628465][ T9987] ftl_cs: FTL header corrupt!
[  501.777640][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  501.784150][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  501.849924][ T5638] Bluetooth: hci13: command tx timeout
[  501.892565][ T9931] 8021q: adding VLAN 0 to HW filter on device batadv0
[  502.075440][ T9931] veth0_vlan: entered promiscuous mode
[  502.102175][ T9931] veth1_vlan: entered promiscuous mode
[  502.180893][ T9931] veth0_macvtap: entered promiscuous mode
[  502.202216][ T9931] veth1_macvtap: entered promiscuous mode
[  502.244675][ T9931] batman_adv: batadv0: Interface activated: batadv_slave_0
[  502.282422][ T9931] batman_adv: batadv0: Interface activated: batadv_slave_1
[  502.307029][ T7902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.327805][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.354912][   T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.373132][   T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  502.593468][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  502.614359][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.720119][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  502.737543][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.803940][ T9998] &#$@\]\-: entered promiscuous mode
[  502.881256][ T9998] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26)
[  503.557163][ T9997] ima: policy update failed
[  503.566382][   T29] audit: type=1802 audit(1778606015.800:8): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.855" res=0 errno=0
[  503.929856][ T5638] Bluetooth: hci13: command tx timeout
[  504.750420][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'.
[  506.154287][ T5642] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  506.169169][ T5642] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  506.182405][ T5642] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  506.194554][ T5642] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  506.204549][ T5642] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  506.860666][T10041] Format for adding new device is "id port_count num_queues" (uint uint uint).
[  506.884122][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'.
[  507.207378][T10025] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.222901][T10025] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.243746][T10025] bridge_slave_0: entered allmulticast mode
[  507.259507][T10025] bridge_slave_0: entered promiscuous mode
[  507.280213][T10025] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.294025][T10025] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.309937][T10025] bridge_slave_1: entered allmulticast mode
[  507.332947][T10025] bridge_slave_1: entered promiscuous mode
[  507.474086][T10025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  507.525506][T10025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  507.655669][T10025] team0: Port device team_slave_0 added
[  507.665264][T10025] team0: Port device team_slave_1 added
[  507.713071][T10025] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.720163][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.749316][T10025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.764376][T10025] batman_adv: batadv0: Adding interface: batadv_slave_1
[  507.773206][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.803923][T10025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  508.008398][T10025] hsr_slave_0: entered promiscuous mode
[  508.017644][T10025] hsr_slave_1: entered promiscuous mode
[  508.043743][T10025] debugfs: 'hsr0' already exists in 'hsr'
[  508.051550][T10025] Cannot create hsr debugfs directory
[  508.250129][ T5642] Bluetooth: hci14: command tx timeout
[  508.394671][T10025] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.524470][T10025] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.626527][T10025] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.754814][T10025] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.123353][T10025] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  509.143808][T10025] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  509.152384][T10025] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  509.171566][T10025] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  509.200386][T10025] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  509.217259][T10025] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  509.225946][T10025] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  509.237917][T10025] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  509.345979][T10025] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.483152][T10025] 8021q: adding VLAN 0 to HW filter on device team0
[  509.534327][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.541700][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[  509.594700][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.601972][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  510.329065][ T5642] Bluetooth: hci14: command tx timeout
[  510.629024][T10025] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.160619][T10025] veth0_vlan: entered promiscuous mode
[  511.185193][T10025] veth1_vlan: entered promiscuous mode
[  511.269446][T10025] veth0_macvtap: entered promiscuous mode
[  511.292186][T10025] veth1_macvtap: entered promiscuous mode
[  511.337665][T10025] batman_adv: batadv0: Interface activated: batadv_slave_0
[  511.374901][T10025] batman_adv: batadv0: Interface activated: batadv_slave_1
[  511.425857][   T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  511.448350][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  511.471526][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  511.494221][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.749756][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.768944][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.838225][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.868610][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.409100][ T5642] Bluetooth: hci14: command tx timeout
[  514.499298][ T5642] Bluetooth: hci14: command tx timeout
[  515.762032][ T5638] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  515.773707][ T5638] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  515.788452][ T5638] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  515.800955][ T5638] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  515.811760][ T5638] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  516.836106][T10128] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.844786][T10128] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.853762][T10128] bridge_slave_0: entered allmulticast mode
[  516.872263][T10128] bridge_slave_0: entered promiscuous mode
[  516.882039][T10128] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.899948][T10128] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.916259][T10128] bridge_slave_1: entered allmulticast mode
[  516.928427][T10128] bridge_slave_1: entered promiscuous mode
[  516.997251][T10128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  517.025115][T10128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  517.110849][T10128] team0: Port device team_slave_0 added
[  517.128309][T10128] team0: Port device team_slave_1 added
[  517.210127][T10128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  517.217180][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  517.258844][T10128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  517.281306][T10128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  517.288325][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  517.328816][T10128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  517.433457][T10128] hsr_slave_0: entered promiscuous mode
[  517.451262][T10128] hsr_slave_1: entered promiscuous mode
[  517.458066][T10128] debugfs: 'hsr0' already exists in 'hsr'
[  517.464193][T10128] Cannot create hsr debugfs directory
[  517.825498][T10128] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.930599][ T5642] Bluetooth: hci15: command tx timeout
[  517.943050][T10128] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.064909][T10128] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.146473][T10128] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.506077][T10128] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  518.536642][T10128] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  518.546713][T10128] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  518.559160][T10128] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  518.567617][T10128] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  518.586512][T10128] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  518.596710][T10128] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  518.597421][T10156] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  518.631775][T10128] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  518.944837][T10128] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.987081][T10128] 8021q: adding VLAN 0 to HW filter on device team0
[  519.028616][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.035895][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  519.055691][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.062960][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  519.106194][   T29] audit: type=1800 audit(1778606031.340:9): pid=10169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.882" name="dbroot" dev="configfs" ino=34662 res=0 errno=0
[  519.340283][T10174] =======================================================
[  519.340283][T10174] WARNING: The mand mount option has been deprecated and
[  519.340283][T10174]          and is ignored by this kernel. Remove the mand
[  519.340283][T10174]          option from the mount to silence this warning.
[  519.340283][T10174] =======================================================
[  519.909999][ T5638] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  519.922715][ T5638] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  519.940822][ T5638] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  519.956183][ T5638] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  519.964429][ T5638] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  520.005367][T10128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  520.012727][ T5638] Bluetooth: hci15: command tx timeout
[  520.437624][T10128] veth0_vlan: entered promiscuous mode
[  520.463970][T10128] veth1_vlan: entered promiscuous mode
[  520.531795][T10128] veth0_macvtap: entered promiscuous mode
[  520.554979][T10128] veth1_macvtap: entered promiscuous mode
[  520.594207][T10128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.628169][T10128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.684769][ T1029] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.694358][ T1029] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.704112][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.731246][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.985967][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  521.012502][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.072004][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  521.083740][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.249162][T10185] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.256600][T10185] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.270637][T10185] bridge_slave_0: entered allmulticast mode
[  521.279644][T10185] bridge_slave_0: entered promiscuous mode
[  521.292606][T10185] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.305219][T10185] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.314139][T10185] bridge_slave_1: entered allmulticast mode
[  521.322764][T10185] bridge_slave_1: entered promiscuous mode
[  521.390913][T10185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  521.405853][T10185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  521.496853][T10185] team0: Port device team_slave_0 added
[  521.507990][T10185] team0: Port device team_slave_1 added
[  521.584404][T10185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  521.599309][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.658801][T10185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.689818][T10185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.700877][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.750733][T10185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  521.893737][T10185] hsr_slave_0: entered promiscuous mode
[  521.902989][T10185] hsr_slave_1: entered promiscuous mode
[  521.910241][T10185] debugfs: 'hsr0' already exists in 'hsr'
[  521.916099][T10185] Cannot create hsr debugfs directory
[  522.010138][ T5638] Bluetooth: hci16: command tx timeout
[  522.089279][ T5638] Bluetooth: hci15: command tx timeout
[  522.587046][T10185] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.846811][T10185] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.029253][T10185] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.172824][T10185] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.550506][T10185] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  523.565215][T10185] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  523.576653][T10185] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  523.597075][T10185] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  523.622969][T10185] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  523.655575][T10185] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  523.664212][T10185] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  523.733366][T10185] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  523.957851][T10185] 8021q: adding VLAN 0 to HW filter on device bond0
[  523.997395][T10185] 8021q: adding VLAN 0 to HW filter on device team0
[  524.040002][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.047171][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.073910][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.081220][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.089035][ T5638] Bluetooth: hci16: command tx timeout
[  524.195910][ T5638] Bluetooth: hci15: command tx timeout
[  524.883391][T10185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.312924][T10185] veth0_vlan: entered promiscuous mode
[  525.341125][T10185] veth1_vlan: entered promiscuous mode
[  525.388355][T10185] veth0_macvtap: entered promiscuous mode
[  525.405496][T10185] veth1_macvtap: entered promiscuous mode
[  525.438548][T10185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.497336][T10185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  525.527574][  T780] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  525.549525][  T780] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  525.581729][   T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  525.591059][   T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  525.847943][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.864137][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.962397][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.971664][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.170884][ T5638] Bluetooth: hci16: command tx timeout
[  527.446796][T10249] random: crng reseeded on system resumption
[  528.258857][ T5638] Bluetooth: hci16: command tx timeout
[  528.799521][   T29] audit: type=1800 audit(1778606041.030:10): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.890" name="dbroot" dev="configfs" ino=37051 res=0 errno=0
[  529.279907][ T5642] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  529.340177][ T5642] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  529.349080][ T5642] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  529.367050][ T5642] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  529.380142][ T5642] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  530.017424][T10272] netlink: 330 bytes leftover after parsing attributes in process `syz.7.892'.
[  530.397056][T10258] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.404565][T10258] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.414627][T10258] bridge_slave_0: entered allmulticast mode
[  530.423495][T10258] bridge_slave_0: entered promiscuous mode
[  530.436079][T10258] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.445753][T10258] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.453280][T10258] bridge_slave_1: entered allmulticast mode
[  530.464741][T10258] bridge_slave_1: entered promiscuous mode
[  530.512914][T10258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.526213][T10258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.585595][T10258] team0: Port device team_slave_0 added
[  530.597839][T10258] team0: Port device team_slave_1 added
[  530.631375][T10258] batman_adv: batadv0: Adding interface: batadv_slave_0
[  530.642624][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.674307][T10258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  530.821304][T10258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  530.835688][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.870560][T10258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  530.875018][   T29] audit: type=1800 audit(1778606043.110:11): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.893" name="members" dev="configfs" ino=37115 res=0 errno=0
[  531.000441][T10258] hsr_slave_0: entered promiscuous mode
[  531.010948][T10258] hsr_slave_1: entered promiscuous mode
[  531.025072][T10258] debugfs: 'hsr0' already exists in 'hsr'
[  531.044727][T10258] Cannot create hsr debugfs directory
[  531.458237][T10258] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.470396][ T5638] Bluetooth: hci17: command tx timeout
[  531.668004][T10258] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.797289][T10258] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.900232][T10258] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.289546][T10258] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  532.305737][T10258] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  532.320279][T10258] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  532.345079][T10258] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  532.354040][T10258] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  532.364302][T10258] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  532.373019][T10258] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  532.384231][T10258] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  532.481048][T10258] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.512913][T10258] 8021q: adding VLAN 0 to HW filter on device team0
[  532.543090][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.550294][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.565806][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.572985][ T7902] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.078076][T10258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  533.386813][T10258] veth0_vlan: entered promiscuous mode
[  533.399793][T10258] veth1_vlan: entered promiscuous mode
[  533.438056][T10258] veth0_macvtap: entered promiscuous mode
[  533.452943][T10258] veth1_macvtap: entered promiscuous mode
[  533.481142][T10258] batman_adv: batadv0: Interface activated: batadv_slave_0
[  533.499104][T10258] batman_adv: batadv0: Interface activated: batadv_slave_1
[  533.514867][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  533.526773][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  533.537489][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.548020][ T5638] Bluetooth: hci17: command tx timeout
[  533.572747][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.715029][  T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.723231][  T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.793646][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.805115][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.067036][ T5642] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  535.083992][ T5642] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  535.106190][ T5642] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  535.117704][T10323] netlink: 330 bytes leftover after parsing attributes in process `syz.6.897'.
[  535.118021][ T5642] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  535.141183][ T5642] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  535.610144][ T5642] Bluetooth: hci17: command tx timeout
[  535.775981][T10332] netlink: 28 bytes leftover after parsing attributes in process `syz.6.898'.
[  535.834341][T10332] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.007561][T10332] batman_adv: batadv0: Removing interface: batadv_slave_1
[  537.209738][ T5642] Bluetooth: hci18: command tx timeout
[  537.689622][ T5642] Bluetooth: hci17: command tx timeout
[  537.867326][T10321] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.889621][T10321] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.902956][T10321] bridge_slave_0: entered allmulticast mode
[  537.920840][T10321] bridge_slave_0: entered promiscuous mode
[  537.951206][T10321] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.990187][T10321] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.001601][T10321] bridge_slave_1: entered allmulticast mode
[  538.031176][T10321] bridge_slave_1: entered promiscuous mode
[  538.131719][T10321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  538.181539][T10321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  538.284362][T10321] team0: Port device team_slave_0 added
[  538.321726][T10321] team0: Port device team_slave_1 added
[  538.461921][T10321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.483944][T10321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  538.529656][T10321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.558563][T10321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.574902][T10321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  538.601328][T10321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  538.991291][T10321] hsr_slave_0: entered promiscuous mode
[  538.998600][T10321] hsr_slave_1: entered promiscuous mode
[  539.034014][T10321] debugfs: 'hsr0' already exists in 'hsr'
[  539.055826][T10321] Cannot create hsr debugfs directory
[  539.155186][T10361] netlink: 330 bytes leftover after parsing attributes in process `syz.6.902'.
[  539.295095][ T5642] Bluetooth: hci18: command tx timeout
[  539.523701][T10321] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.786110][T10321] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.951679][T10321] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.070318][T10321] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.227773][   T29] audit: type=1800 audit(1778606052.460:12): pid=10369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.904" name="dbroot" dev="configfs" ino=37450 res=0 errno=0
[  540.442617][T10321] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  540.463277][T10321] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  540.476495][T10321] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  540.492535][T10321] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  540.501741][T10321] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  540.526462][T10321] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  540.539498][T10321] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  540.560977][T10321] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  540.853854][T10321] 8021q: adding VLAN 0 to HW filter on device bond0
[  540.916037][T10321] 8021q: adding VLAN 0 to HW filter on device team0
[  540.954815][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[  540.962101][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[  540.992262][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.999556][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.094783][T10321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  541.370155][ T5642] Bluetooth: hci18: command tx timeout
[  542.135621][ T5638] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  542.152399][ T5638] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  542.175854][ T5638] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  542.201197][ T5638] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  542.212468][ T5638] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  542.546973][T10321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  543.399014][T10398] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.417134][T10398] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.434082][T10398] bridge_slave_0: entered allmulticast mode
[  543.449058][T10398] bridge_slave_0: entered promiscuous mode
[  543.459220][ T5638] Bluetooth: hci18: command tx timeout
[  543.469110][T10398] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.478929][T10398] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.515522][T10398] bridge_slave_1: entered allmulticast mode
[  543.546312][T10398] bridge_slave_1: entered promiscuous mode
[  543.671767][T10398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  543.699914][T10398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  543.820269][T10398] team0: Port device team_slave_0 added
[  543.926493][T10398] team0: Port device team_slave_1 added
[  544.128321][T10398] batman_adv: batadv0: Adding interface: batadv_slave_0
[  544.142900][T10398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  544.170168][T10398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  544.192281][T10398] batman_adv: batadv0: Adding interface: batadv_slave_1
[  544.205854][T10398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  544.239524][T10398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  544.250475][ T5638] Bluetooth: hci19: command tx timeout
[  544.339806][T10398] hsr_slave_0: entered promiscuous mode
[  544.349705][T10398] hsr_slave_1: entered promiscuous mode
[  544.356554][T10398] debugfs: 'hsr0' already exists in 'hsr'
[  544.368942][T10398] Cannot create hsr debugfs directory
[  544.380983][T10321] veth0_vlan: entered promiscuous mode
[  544.550162][T10321] veth1_vlan: entered promiscuous mode
[  544.902996][T10398] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.060868][T10321] veth0_macvtap: entered promiscuous mode
[  545.157074][T10398] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.187224][T10321] veth1_macvtap: entered promiscuous mode
[  545.275174][T10398] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.326101][T10321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  545.354725][T10321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  545.387770][   T48] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.427730][T10398] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.459059][   T48] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.467991][   T48] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  545.506633][   T48] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  545.871772][ T7902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.905525][ T7902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.105756][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.126578][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.204045][T10398] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  546.231781][T10398] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  546.245942][T10398] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  546.277626][T10398] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  546.329232][ T5638] Bluetooth: hci19: command tx timeout
[  546.418396][T10398] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  546.433331][T10398] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  546.450158][T10398] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  546.481588][T10398] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  546.673343][T10398] 8021q: adding VLAN 0 to HW filter on device bond0
[  546.750828][T10398] 8021q: adding VLAN 0 to HW filter on device team0
[  546.796669][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.803983][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  546.824028][T10441] futex_wake_op: syz.6.910 tries to shift op by -2048; fix this program
[  546.853676][T10441] 0x000000000001-0x000000020000 : ""
[  546.877813][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.885131][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.961924][T10441] ftl_cs: FTL header corrupt!
[  548.203234][ T5642] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[  548.222446][ T5642] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[  548.240796][ T5642] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[  548.254557][ T5642] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[  548.262619][ T5642] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[  548.409604][ T5638] Bluetooth: hci19: command tx timeout
[  548.636171][T10398] 8021q: adding VLAN 0 to HW filter on device batadv0
[  549.697918][T10398] veth0_vlan: entered promiscuous mode
[  549.805802][T10398] veth1_vlan: entered promiscuous mode
[  550.066318][T10398] veth0_macvtap: entered promiscuous mode
[  550.103938][T10398] veth1_macvtap: entered promiscuous mode
[  550.329032][ T5638] Bluetooth: hci20: command tx timeout
[  550.334263][T10398] batman_adv: batadv0: Interface activated: batadv_slave_0
[  550.489812][ T5638] Bluetooth: hci19: command tx timeout
[  550.505196][T10398] batman_adv: batadv0: Interface activated: batadv_slave_1
[  550.513157][T10463] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.522436][T10463] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.530755][T10463] bridge_slave_0: entered allmulticast mode
[  550.540191][T10463] bridge_slave_0: entered promiscuous mode
[  550.557483][T10463] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.564977][T10463] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.575769][T10463] bridge_slave_1: entered allmulticast mode
[  550.584989][T10463] bridge_slave_1: entered promiscuous mode
[  550.691856][  T780] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  550.704300][  T780] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  550.724174][T10463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.763940][T10463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.783658][  T780] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  550.805332][  T780] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  550.937266][T10463] team0: Port device team_slave_0 added
[  550.952365][T10463] team0: Port device team_slave_1 added
[  551.076879][T10463] batman_adv: batadv0: Adding interface: batadv_slave_0
[  551.091290][T10463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  551.145329][T10463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.211079][T10463] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.241760][T10463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  551.326941][T10463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.635940][T10463] hsr_slave_0: entered promiscuous mode
[  551.653545][T10463] hsr_slave_1: entered promiscuous mode
[  551.665360][T10463] debugfs: 'hsr0' already exists in 'hsr'
[  551.685539][T10463] Cannot create hsr debugfs directory
[  551.859481][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.892308][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.077091][   T29] audit: type=1800 audit(1778606064.310:13): pid=10507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.916" name="dbroot" dev="configfs" ino=38770 res=0 errno=0
[  552.139181][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.157993][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.419042][ T5638] Bluetooth: hci20: command tx timeout
[  552.666398][T10512] __vm_enough_memory: pid: 10512, comm: syz.6.917, bytes: 4398046511104 not enough memory for the allocation
[  552.779231][T10463] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.374213][T10463] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.807487][T10463] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.265541][T10463] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.492095][ T5638] Bluetooth: hci20: command tx timeout
[  555.890475][T10463] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  555.954172][T10463] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  556.033822][T10463] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  556.113096][T10463] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  556.176857][T10463] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  556.270218][T10463] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  556.310479][T10463] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  556.335898][T10463] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  556.579041][ T5638] Bluetooth: hci20: command tx timeout
[  557.039589][T10463] 8021q: adding VLAN 0 to HW filter on device bond0
[  557.245939][T10463] 8021q: adding VLAN 0 to HW filter on device team0
[  557.334562][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.342207][ T7902] bridge0: port 1(bridge_slave_0) entered forwarding state
[  557.433647][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.440955][ T7902] bridge0: port 2(bridge_slave_1) entered forwarding state
[  557.905624][T10583] FAULT_INJECTION: forcing a failure.
[  557.905624][T10583] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  558.060801][T10583] CPU: 1 UID: 0 PID: 10583 Comm: syz.9.926 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  558.060872][T10583] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  558.060889][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  558.060911][T10583] Call Trace:
[  558.060922][T10583]  <TASK>
[  558.060936][T10583]  dump_stack_lvl+0x100/0x190
[  558.060986][T10583]  should_fail_ex.cold+0x5/0xa
[  558.061031][T10583]  strncpy_from_user+0x3b/0x2d0
[  558.061076][T10583]  do_getname+0x78/0x390
[  558.061133][T10583]  do_sys_openat2+0xc5/0x1e0
[  558.061188][T10583]  ? __pfx_do_sys_openat2+0x10/0x10
[  558.061259][T10583]  __x64_sys_openat+0x12d/0x210
[  558.061317][T10583]  ? __pfx___x64_sys_openat+0x10/0x10
[  558.061381][T10583]  ? rcu_is_watching+0x12/0xc0
[  558.061431][T10583]  do_syscall_64+0x10b/0xf80
[  558.061482][T10583]  ? clear_bhb_loop+0x40/0x90
[  558.061526][T10583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.061561][T10583] RIP: 0033:0x7ff7a619cdd9
[  558.061588][T10583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  558.061623][T10583] RSP: 002b:00007ff7a6f8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  558.061655][T10583] RAX: ffffffffffffffda RBX: 00007ff7a6416180 RCX: 00007ff7a619cdd9
[  558.061678][T10583] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  558.061700][T10583] RBP: 00007ff7a6232d69 R08: 0000000000000000 R09: 0000000000000000
[  558.061727][T10583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  558.061751][T10583] R13: 00007ff7a6416218 R14: 00007ff7a6416180 R15: 00007ffef59f53c8
[  558.061797][T10583]  </TASK>
[  559.625473][T10463] 8021q: adding VLAN 0 to HW filter on device batadv0
[  559.736611][T10463] veth0_vlan: entered promiscuous mode
[  559.755154][T10463] veth1_vlan: entered promiscuous mode
[  559.846384][T10463] veth0_macvtap: entered promiscuous mode
[  559.863698][T10463] veth1_macvtap: entered promiscuous mode
[  559.908605][T10463] batman_adv: batadv0: Interface activated: batadv_slave_0
[  559.936420][T10463] batman_adv: batadv0: Interface activated: batadv_slave_1
[  559.963599][  T780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  559.984345][  T780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  559.997057][  T780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  560.007886][  T780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  560.311556][T10417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.359842][T10417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.602132][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.647401][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.221384][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  563.231503][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  565.294137][ T5642] Bluetooth: hci4: command 0x0406 tx timeout
[  567.060277][T10690] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  567.340666][T10697] FAULT_INJECTION: forcing a failure.
[  567.340666][T10697] name failslab, interval 1, probability 0, space 0, times 0
[  567.387596][T10697] CPU: 1 UID: 0 PID: 10697 Comm: syz.0.945 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  567.387663][T10697] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  567.387692][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  567.387714][T10697] Call Trace:
[  567.387726][T10697]  <TASK>
[  567.387741][T10697]  dump_stack_lvl+0x100/0x190
[  567.387787][T10697]  should_fail_ex.cold+0x5/0xa
[  567.387835][T10697]  should_failslab+0xc2/0x120
[  567.387879][T10697]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  567.387918][T10697]  ? __kthread_create_on_node+0x186/0x3f0
[  567.387980][T10697]  kvasprintf+0xbc/0x150
[  567.388017][T10697]  ? __pfx_kvasprintf+0x10/0x10
[  567.388076][T10697]  ? __pfx_rescuer_thread+0x10/0x10
[  567.388113][T10697]  __kthread_create_on_node+0x186/0x3f0
[  567.388168][T10697]  ? __pfx___kthread_create_on_node+0x10/0x10
[  567.388231][T10697]  ? __pfx_vsnprintf+0x10/0x10
[  567.388285][T10697]  ? __pfx_rescuer_thread+0x10/0x10
[  567.388322][T10697]  kthread_create_on_node+0xc7/0x100
[  567.388370][T10697]  ? __pfx_kthread_create_on_node+0x10/0x10
[  567.388417][T10697]  ? __pfx_scnprintf+0x10/0x10
[  567.388483][T10697]  init_rescuer+0x321/0x550
[  567.388516][T10697]  ? __pfx_init_rescuer+0x10/0x10
[  567.388559][T10697]  ? wq_adjust_max_active+0x352/0x4a0
[  567.388601][T10697]  __alloc_workqueue+0xc8b/0x19f0
[  567.388669][T10697]  alloc_workqueue_noprof+0xc7/0x130
[  567.388720][T10697]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  567.388784][T10697]  ? __pfx___debug_object_init+0x10/0x10
[  567.388848][T10697]  nci_register_device+0x394/0xb80
[  567.388893][T10697]  ? __pfx_nci_register_device+0x10/0x10
[  567.388950][T10697]  ? lockdep_init_map_type+0x5c/0x250
[  567.388990][T10697]  virtual_ncidev_open+0x141/0x220
[  567.389042][T10697]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  567.389097][T10697]  misc_open+0x26d/0x450
[  567.389140][T10697]  ? __pfx_misc_open+0x10/0x10
[  567.389178][T10697]  chrdev_open+0x234/0x6a0
[  567.389217][T10697]  ? __pfx_apparmor_file_open+0x10/0x10
[  567.389267][T10697]  ? __pfx_chrdev_open+0x10/0x10
[  567.389310][T10697]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  567.389359][T10697]  do_dentry_open+0x6d8/0x1660
[  567.389396][T10697]  ? __pfx_chrdev_open+0x10/0x10
[  567.389444][T10697]  vfs_open+0x82/0x3f0
[  567.389495][T10697]  path_openat+0x208c/0x31a0
[  567.389547][T10697]  ? __pfx_path_openat+0x10/0x10
[  567.389600][T10697]  do_file_open+0x20e/0x430
[  567.389642][T10697]  ? __pfx_do_file_open+0x10/0x10
[  567.389708][T10697]  ? alloc_fd+0x476/0x790
[  567.389750][T10697]  ? do_getname+0x191/0x390
[  567.389800][T10697]  do_sys_openat2+0x10d/0x1e0
[  567.389855][T10697]  ? __pfx_do_sys_openat2+0x10/0x10
[  567.389927][T10697]  __x64_sys_openat+0x12d/0x210
[  567.389980][T10697]  ? __pfx___x64_sys_openat+0x10/0x10
[  567.390038][T10697]  ? rcu_is_watching+0x12/0xc0
[  567.390095][T10697]  do_syscall_64+0x10b/0xf80
[  567.390147][T10697]  ? clear_bhb_loop+0x40/0x90
[  567.390191][T10697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.390228][T10697] RIP: 0033:0x7f4ee1d9cdd9
[  567.390259][T10697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  567.390295][T10697] RSP: 002b:00007f4ee2bc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  567.390330][T10697] RAX: ffffffffffffffda RBX: 00007f4ee2016090 RCX: 00007f4ee1d9cdd9
[  567.390353][T10697] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  567.390376][T10697] RBP: 00007f4ee1e32d69 R08: 0000000000000000 R09: 0000000000000000
[  567.390399][T10697] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000
[  567.390419][T10697] R13: 00007f4ee2016128 R14: 00007f4ee2016090 R15: 00007ffe39c3cd48
[  567.390466][T10697]  </TASK>
[  567.819800][T10697] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -ENOMEM
[  570.104840][T10722] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  570.286555][T10722] debugfs: '211!phy1!netdev:wlan1!rc_rateidx_mcs_mask' already exists in 'ieee80211'
[  570.486281][T10723] sysfs: cannot create duplicate filename '/class/ieee80211/211!phy1!netdev:wlan1!rc_rateidx_mcs_mask'
[  570.562410][T10723] CPU: 1 UID: 0 PID: 10723 Comm: syz.0.951 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  570.562473][T10723] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  570.562488][T10723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  570.562504][T10723] Call Trace:
[  570.562512][T10723]  <TASK>
[  570.562522][T10723]  dump_stack_lvl+0x100/0x190
[  570.562554][T10723]  sysfs_warn_dup.cold+0x1c/0x28
[  570.562592][T10723]  sysfs_do_create_link_sd+0x113/0x140
[  570.562624][T10723]  sysfs_create_link+0x61/0xc0
[  570.562651][T10723]  device_add+0x675/0x1950
[  570.562687][T10723]  ? __pfx_device_add+0x10/0x10
[  570.562719][T10723]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  570.562855][T10723]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[  570.562890][T10723]  wiphy_register+0x1edd/0x2d90
[  570.562934][T10723]  ? __rtnl_unlock+0xb9/0xf0
[  570.562974][T10723]  ? __pfx_wiphy_register+0x10/0x10
[  570.563010][T10723]  ? __asan_memset+0x23/0x50
[  570.563051][T10723]  ? minstrel_ht_alloc+0x5e6/0x7f0
[  570.563088][T10723]  ieee80211_register_hw+0x3055/0x4570
[  570.563146][T10723]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  570.563189][T10723]  ? __pfx___debug_object_init+0x10/0x10
[  570.563237][T10723]  ? find_held_lock+0x2b/0x80
[  570.563273][T10723]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  570.563312][T10723]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  570.563349][T10723]  ? __hrtimer_setup+0x208/0x330
[  570.563381][T10723]  mac80211_hwsim_new_radio+0x2a01/0x5aa0
[  570.563430][T10723]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  570.563472][T10723]  ? __asan_memcpy+0x3c/0x60
[  570.563519][T10723]  hwsim_new_radio_nl+0xc5f/0x1370
[  570.563548][T10723]  ? rcu_is_watching+0x12/0xc0
[  570.563580][T10723]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  570.563617][T10723]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  570.563662][T10723]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  570.563713][T10723]  genl_family_rcv_msg_doit+0x214/0x300
[  570.563767][T10723]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  570.563810][T10723]  ? genl_get_cmd+0x3e7/0x760
[  570.563856][T10723]  ? bpf_lsm_capable+0x9/0x10
[  570.563886][T10723]  ? security_capable+0x80/0x260
[  570.563927][T10723]  ? ns_capable+0xd2/0xf0
[  570.563961][T10723]  genl_rcv_msg+0x560/0x800
[  570.564006][T10723]  ? __pfx_genl_rcv_msg+0x10/0x10
[  570.564049][T10723]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  570.564089][T10723]  netlink_rcv_skb+0x159/0x420
[  570.564126][T10723]  ? __pfx_genl_rcv_msg+0x10/0x10
[  570.564169][T10723]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  570.564217][T10723]  ? netlink_deliver_tap+0x1ae/0xcc0
[  570.564257][T10723]  genl_rcv+0x28/0x40
[  570.564293][T10723]  netlink_unicast+0x585/0x850
[  570.564335][T10723]  ? __pfx_netlink_unicast+0x10/0x10
[  570.564380][T10723]  netlink_sendmsg+0x8b0/0xda0
[  570.564422][T10723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  570.564457][T10723]  ? __import_iovec+0x1d2/0x640
[  570.564486][T10723]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  570.564532][T10723]  ____sys_sendmsg+0x9e1/0xb70
[  570.564567][T10723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  570.564606][T10723]  ? __pfx_____sys_sendmsg+0x10/0x10
[  570.564646][T10723]  ? rcu_is_watching+0x12/0xc0
[  570.564676][T10723]  ? ___sys_sendmsg+0x19d/0x1e0
[  570.564712][T10723]  ? kfree+0x1dd/0x6c0
[  570.564759][T10723]  ___sys_sendmsg+0x190/0x1e0
[  570.564800][T10723]  ? __pfx____sys_sendmsg+0x10/0x10
[  570.564865][T10723]  ? __pfx___might_resched+0x10/0x10
[  570.564901][T10723]  __sys_sendmmsg+0x205/0x430
[  570.564934][T10723]  ? __pfx___sys_sendmmsg+0x10/0x10
[  570.564971][T10723]  ? __pfx_do_futex+0x10/0x10
[  570.564997][T10723]  ? __pfx_do_sys_openat2+0x10/0x10
[  570.565049][T10723]  ? xfd_validate_state+0x129/0x190
[  570.565084][T10723]  __x64_sys_sendmmsg+0x9c/0x100
[  570.565112][T10723]  ? lockdep_hardirqs_on+0x78/0x100
[  570.565150][T10723]  do_syscall_64+0x10b/0xf80
[  570.565185][T10723]  ? clear_bhb_loop+0x40/0x90
[  570.565217][T10723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.565242][T10723] RIP: 0033:0x7f4ee1d9cdd9
[  570.565266][T10723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  570.565292][T10723] RSP: 002b:00007f4ee2bc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  570.565359][T10723] RAX: ffffffffffffffda RBX: 00007f4ee2016090 RCX: 00007f4ee1d9cdd9
[  570.565381][T10723] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  570.565403][T10723] RBP: 00007f4ee1e32d69 R08: 0000000000000000 R09: 0000000000000000
[  570.565423][T10723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  570.565444][T10723] R13: 00007f4ee2016128 R14: 00007f4ee2016090 R15: 00007ffe39c3cd48
[  570.565487][T10723]  </TASK>
[  571.289197][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  575.529041][ T9548] Bluetooth: hci5: command 0x0406 tx timeout
[  576.773059][ T5642] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[  576.787903][ T5642] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[  576.802083][ T5642] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[  576.823640][ T5642] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[  576.836263][ T5642] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[  577.004427][T10779] netlink: 330 bytes leftover after parsing attributes in process `syz.8.967'.
[  578.889209][ T5642] Bluetooth: hci21: command tx timeout
[  579.093598][   T50] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1
[  579.105048][   T50] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9
[  579.113592][   T50] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9
[  579.138869][   T50] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4
[  579.150462][   T50] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2
[  579.581506][T10782] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.603699][T10782] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.624439][T10782] bridge_slave_0: entered allmulticast mode
[  579.653625][T10782] bridge_slave_0: entered promiscuous mode
[  579.731953][T10782] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.752950][T10782] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.776511][T10782] bridge_slave_1: entered allmulticast mode
[  579.799877][T10782] bridge_slave_1: entered promiscuous mode
[  579.970320][T10782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  580.031787][T10782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  580.202216][T10782] team0: Port device team_slave_0 added
[  580.219651][T10782] team0: Port device team_slave_1 added
[  580.338969][T10782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  580.346204][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  580.398617][T10782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  580.422110][T10782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  580.467200][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  580.532253][T10782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  580.668087][ T5642] Bluetooth: hci7: command 0x0406 tx timeout
[  580.668104][   T50] Bluetooth: hci6: command 0x0406 tx timeout
[  580.745543][T10782] hsr_slave_0: entered promiscuous mode
[  580.793207][T10782] hsr_slave_1: entered promiscuous mode
[  580.806661][T10782] debugfs: 'hsr0' already exists in 'hsr'
[  580.824382][T10782] Cannot create hsr debugfs directory
[  580.968931][ T5638] Bluetooth: hci21: command tx timeout
[  581.210450][ T5638] Bluetooth: hci22: command tx timeout
[  581.519687][T10782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.771710][   T30] INFO: task syz-executor:5625 blocked for more than 143 seconds.
[  581.797518][   T30]       Tainted: G     U    I  L      syzkaller #0
[  581.807811][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  581.830325][   T30] task:syz-executor    state:D stack:22600 pid:5625  tgid:5625  ppid:1      task_flags:0x400140 flags:0x00080002
[  581.866464][   T30] Call Trace:
[  581.877890][   T30]  <TASK>
[  581.896971][   T30]  __schedule+0x1295/0x67a0
[  581.912290][   T30]  ? __pfx___schedule+0x10/0x10
[  581.923753][   T30]  ? find_held_lock+0x2b/0x80
[  581.940381][   T30]  ? schedule+0x2bf/0x390
[  581.958957][   T30]  schedule+0xdd/0x390
[  581.966405][   T30]  schedule_preempt_disabled+0x13/0x30
[  581.981748][   T30]  __mutex_lock+0xced/0x1b10
[  582.013459][   T30]  ? nfsd_shutdown_threads+0x5b/0xf0
[  582.028737][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  582.035543][   T30]  ? net_generic+0xea/0x2a0
[  582.041609][   T30]  ? net_generic+0xea/0x2a0
[  582.046267][   T30]  ? nfsd_shutdown_threads+0x5b/0xf0
[  582.056500][   T30]  nfsd_shutdown_threads+0x5b/0xf0
[  582.070311][   T30]  nfsd_umount+0x3b/0x60
[  582.078944][   T30]  deactivate_locked_super+0xc1/0x1b0
[  582.097856][   T30]  deactivate_super+0xe7/0x110
[  582.108401][   T30]  cleanup_mnt+0x21f/0x450
[  582.113074][   T30]  task_work_run+0x150/0x240
[  582.117765][   T30]  ? __pfx_task_work_run+0x10/0x10
[  582.123151][   T30]  ? rcu_is_watching+0x12/0xc0
[  582.128017][   T30]  exit_to_user_mode_loop+0x107/0x4f0
[  582.133545][   T30]  ? rcu_is_watching+0x12/0xc0
[  582.138415][   T30]  do_syscall_64+0x6f2/0xf80
[  582.143240][   T30]  ? clear_bhb_loop+0x40/0x90
[  582.148017][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.154081][   T30] RIP: 0033:0x7fb104d9e017
[  582.158551][   T30] RSP: 002b:00007ffef4b73c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  582.167333][   T30] RAX: 0000000000000000 RBX: 00007fb104e32120 RCX: 00007fb104d9e017
[  582.176454][   T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef4b73d10
[  582.185335][   T30] RBP: 00007ffef4b73d10 R08: 00007ffef4b74d10 R09: 00000000ffffffff
[  582.205470][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef4b74da0
[  582.214083][   T30] R13: 00007fb104e32120 R14: 000000000006ad5c R15: 00007ffef4b74de0
[  582.222612][   T30]  </TASK>
[  582.225859][   T30] INFO: task syz.0.764:9120 blocked for more than 143 seconds.
[  582.230545][T10782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.250941][   T30]       Tainted: G     U    I  L      syzkaller #0
[  582.257815][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  582.266702][   T30] task:syz.0.764       state:D stack:26312 pid:9120  tgid:9118  ppid:5626   task_flags:0x400040 flags:0x00080002
[  582.287571][   T30] Call Trace:
[  582.291206][   T30]  <TASK>
[  582.300497][   T30]  __schedule+0x1295/0x67a0
[  582.305232][   T30]  ? __pfx___schedule+0x10/0x10
[  582.312369][   T30]  ? find_held_lock+0x2b/0x80
[  582.317291][   T30]  ? schedule+0x2bf/0x390
[  582.321854][   T30]  schedule+0xdd/0x390
[  582.326015][   T30]  schedule_preempt_disabled+0x13/0x30
[  582.331676][   T30]  __mutex_lock+0xced/0x1b10
[  582.336376][   T30]  ? nfsd_nl_listener_get_doit+0x13e/0x7b0
[  582.342352][   T30]  ? __kmalloc_node_track_caller_noprof+0x321/0x850
[  582.349112][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  582.354272][   T30]  ? kmalloc_reserve+0xf9/0x350
[  582.359369][   T30]  ? skb_put+0x138/0x180
[  582.363689][   T30]  ? __nlmsg_put+0x152/0x1c0
[  582.368375][   T30]  ? nfsd_nl_listener_get_doit+0x13e/0x7b0
[  582.374416][   T30]  nfsd_nl_listener_get_doit+0x13e/0x7b0
[  582.380188][   T30]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  582.387237][   T30]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  582.394393][   T30]  genl_family_rcv_msg_doit+0x214/0x300
[  582.406540][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  582.414832][   T30]  ? genl_get_cmd+0x3e7/0x760
[  582.419751][   T30]  ? __dev_queue_xmit+0xa10/0x4950
[  582.424938][   T30]  ? __radix_tree_lookup+0x217/0x2b0
[  582.431039][   T30]  genl_rcv_msg+0x560/0x800
[  582.435683][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  582.440891][   T30]  ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10
[  582.447221][   T30]  netlink_rcv_skb+0x159/0x420
[  582.452873][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  582.458020][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  582.463504][   T30]  ? netlink_deliver_tap+0x1ae/0xcc0
[  582.469180][   T30]  genl_rcv+0x28/0x40
[  582.473475][   T30]  netlink_unicast+0x585/0x850
[  582.478370][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  582.483892][   T30]  netlink_sendmsg+0x8b0/0xda0
[  582.489869][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  582.495265][   T30]  ? __import_iovec+0x1d2/0x640
[  582.506771][   T30]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  582.515423][   T30]  ____sys_sendmsg+0x9e1/0xb70
[  582.520471][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  582.525846][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  582.531309][   T30]  ? __pfx_futex_wake_mark+0x10/0x10
[  582.536746][   T30]  ___sys_sendmsg+0x190/0x1e0
[  582.541611][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  582.546921][   T30]  __sys_sendmsg+0x170/0x220
[  582.551787][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  582.556990][   T30]  ? __x64_sys_futex+0x34f/0x4d0
[  582.562141][   T30]  ? rcu_is_watching+0x12/0xc0
[  582.566986][   T30]  do_syscall_64+0x10b/0xf80
[  582.573190][   T30]  ? clear_bhb_loop+0x40/0x90
[  582.577996][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.584084][   T30] RIP: 0033:0x7ffb3c99cdd9
[  582.588582][   T30] RSP: 002b:00007ffb3d88c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  582.597211][   T30] RAX: ffffffffffffffda RBX: 00007ffb3cc15fa0 RCX: 00007ffb3c99cdd9
[  582.614343][   T30] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 0000000000000004
[  582.622683][   T30] RBP: 00007ffb3ca32d69 R08: 0000000000000000 R09: 0000000000000000
[  582.630801][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  582.638897][   T30] R13: 00007ffb3cc16038 R14: 00007ffb3cc15fa0 R15: 00007ffebbfb6338
[  582.646934][   T30]  </TASK>
[  582.673324][   T30] 
[  582.673324][   T30] Showing all locks held in the system:
[  582.688786][   T30] 1 lock held by khungtaskd/30:
[  582.693745][   T30]  #0: ffffffff8e7e52e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  582.721225][   T30] 2 locks held by kworker/u8:4/57:
[  582.726482][   T30] 2 locks held by syz-executor/5624:
[  582.732238][   T30]  #0: ffff888059c120d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  582.743335][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  582.753204][   T30] 2 locks held by syz-executor/5625:
[  582.758740][   T30]  #0: ffff88802bf8e0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  582.769290][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  582.779189][   T30] 2 locks held by getty/7427:
[  582.783918][   T30]  #0: ffff8880388590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  582.793911][   T30]  #1: ffffc900036ed2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0
[  582.804827][   T30] 2 locks held by syz.0.764/9120:
[  582.816390][   T30]  #0: ffffffff906bd588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  582.824919][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13e/0x7b0
[  582.835280][   T30] 2 locks held by syz.0.764/9121:
[  582.840600][   T30]  #0: ffffffff906bd588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  582.849034][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[  582.859312][   T30] 2 locks held by syz-executor/9400:
[  582.864618][   T30]  #0: ffff8880227d80d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  582.875190][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  582.885047][   T30] 2 locks held by syz.2.805/9422:
[  582.890798][   T30]  #0: ffff8880584920d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  582.901280][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  582.917759][   T30] 2 locks held by syz-executor/9485:
[  582.923322][   T30]  #0: ffff8880374f60d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  582.936470][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  582.946830][   T30] 2 locks held by syz-executor/9546:
[  582.952759][   T30]  #0: ffff88802179e0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  582.963771][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  582.974689][   T30] 2 locks held by syz-executor/9556:
[  582.981991][   T30]  #0: ffff88807961c0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  582.992986][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  583.002921][   T30] 2 locks held by syz-executor/9629:
[  583.008262][   T30]  #0: ffff888030ec80d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  583.029964][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  583.040431][   T30] 2 locks held by syz-executor/9759:
[  583.045783][   T30]  #0: ffff88807d35e0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  583.064442][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  583.074422][   T30] 2 locks held by syz-executor/9816:
[  583.074866][ T5638] Bluetooth: hci21: command tx timeout
[  583.079865][   T30]  #0: ffff88805ada60d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  583.079976][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  583.108715][   T30] 2 locks held by syz-executor/9857:
[  583.123344][   T30]  #0: ffff8880268d80d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  583.134327][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  583.144257][   T30] 2 locks held by syz-executor/9899:
[  583.149700][   T30]  #0: ffff8880592e40d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  583.160248][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  583.170027][   T30] 2 locks held by syz-executor/9931:
[  583.175406][   T30]  #0: ffff8880592580d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  583.185913][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  583.195857][   T30] 2 locks held by syz-executor/10025:
[  583.201517][   T30]  #0: ffff8880371420d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  583.213917][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  583.228514][   T30] 2 locks held by syz-executor/10128:
[  583.234091][   T30]  #0: ffff88805b6360d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  583.244715][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  583.255476][   T30] 2 locks held by syz-executor/10185:
[  583.261073][   T30]  #0: ffff8880383d20d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  583.271504][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  583.281279][   T30] 2 locks held by syz-executor/10258:
[  583.286698][   T30]  #0: ffff8880587fc0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  583.297313][ T5638] Bluetooth: hci22: command tx timeout
[  583.303248][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  583.313025][   T30] 2 locks held by syz-executor/10321:
[  583.323451][   T30]  #0: ffff8880344760d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  583.334089][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  583.343912][   T30] 3 locks held by kworker/u8:9/10417:
[  583.349490][   T30] 2 locks held by syz-executor/10463:
[  583.354920][   T30]  #0: ffff888028c480d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  583.365445][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  583.375243][   T30] 2 locks held by syz.9.933/10641:
[  583.380627][   T30]  #0: ffffffff906bd588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  583.389054][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[  583.399434][   T30] 2 locks held by syz.9.933/10644:
[  583.404574][   T30]  #0: ffffffff906bd588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  583.413293][   T30]  #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[  583.428407][   T30] 7 locks held by syz-executor/10782:
[  583.434015][   T30]  #0: ffff888031914410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  583.444340][   T30]  #1: ffff88807aa21c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  583.455531][   T30]  #2: ffff88802777c008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  583.465781][   T30]  #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  583.476321][   T30]  #4: ffff888078444128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[  583.487473][   T30]  #5: ffff8880361fc258 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0
[  583.498073][   T30]  #6: ffffffff8e7f0cf8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0
[  583.508566][   T30] 1 lock held by syz-executor/10808:
[  583.514055][   T30]  #0: ffffffff8e7f0e28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[  583.529727][   T30] 
[  583.532157][   T30] =============================================
[  583.532157][   T30] 
[  583.540904][   T30] NMI backtrace for cpu 1
[  583.540935][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  583.540985][   T30] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  583.541000][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  583.541019][   T30] Call Trace:
[  583.541030][   T30]  <TASK>
[  583.541042][   T30]  dump_stack_lvl+0x100/0x190
[  583.541083][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[  583.541123][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  583.541169][   T30]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  583.541211][   T30]  sys_info+0x141/0x190
[  583.541242][   T30]  watchdog+0xcb1/0x1030
[  583.541295][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  583.541339][   T30]  ? __pfx_watchdog+0x10/0x10
[  583.541381][   T30]  ? __kthread_parkme+0x18c/0x230
[  583.541425][   T30]  ? kthread+0x13a/0x450
[  583.541451][   T30]  ? __pfx_watchdog+0x10/0x10
[  583.541492][   T30]  kthread+0x370/0x450
[  583.541518][   T30]  ? __pfx_kthread+0x10/0x10
[  583.541547][   T30]  ret_from_fork+0x72b/0xd50
[  583.541578][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  583.541611][   T30]  ? __switch_to+0x800/0x1100
[  583.541651][   T30]  ? __switch_to_asm+0x39/0x70
[  583.541689][   T30]  ? __pfx_kthread+0x10/0x10
[  583.541717][   T30]  ret_from_fork_asm+0x1a/0x30
[  583.541778][   T30]  </TASK>
[  583.541798][   T30] Sending NMI from CPU 1 to CPUs 0:
[  583.702141][    C0] NMI backtrace for cpu 0
[  583.702168][    C0] CPU: 0 UID: 0 PID: 48 Comm: kworker/u8:3 Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  583.702211][    C0] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  583.702223][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  583.702246][    C0] Workqueue: events_unbound toggle_allocation_gate
[  583.702282][    C0] RIP: 0010:__run_timers+0x6bc/0xaf0
[  583.702326][    C0] Code: e8 03 42 80 3c 28 00 0f 85 c9 02 00 00 49 89 2e 48 85 ed 74 1f e8 b4 9c 14 00 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 80 3c 28 00 <0f> 85 e6 02 00 00 4c 89 75 08 e8 95 9c 14 00 48 8d 7b 18 48 b8 22
[  583.702354][    C0] RSP: 0018:ffffc90000007d40 EFLAGS: 00000046
[  583.702375][    C0] RAX: 1ffff1101242a4e1 RBX: ffff88805b0bf390 RCX: ffffffff81f36801
[  583.702402][    C0] RDX: ffff888021ef9ec0 RSI: ffffffff81f3660c RDI: ffff888092152708
[  583.702422][    C0] RBP: ffff888092152700 R08: 0000000000000001 R09: 0000000000000000
[  583.702441][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90000007e10
[  583.702458][    C0] R13: dffffc0000000000 R14: ffffc90000007e10 R15: ffff8880b8426340
[  583.702477][    C0] FS:  0000000000000000(0000) GS:ffff888124377000(0000) knlGS:0000000000000000
[  583.702504][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  583.702525][    C0] CR2: 000055f076c9bee8 CR3: 000000000e596000 CR4: 00000000003526f0
[  583.702545][    C0] Call Trace:
[  583.702554][    C0]  <IRQ>
[  583.702573][    C0]  ? __pfx___run_timers+0x10/0x10
[  583.702625][    C0]  ? _raw_spin_lock_irq+0x45/0x50
[  583.702667][    C0]  run_timer_base+0x114/0x190
[  583.702711][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  583.702753][    C0]  run_timer_softirq+0x1a/0x50
[  583.702796][    C0]  handle_softirqs+0x1ea/0xa00
[  583.702838][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  583.702876][    C0]  ? _raw_spin_unlock+0x28/0x50
[  583.702913][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x740
[  583.702953][    C0]  __irq_exit_rcu+0x162/0x210
[  583.702989][    C0]  irq_exit_rcu+0x9/0x30
[  583.703024][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  583.703067][    C0]  </IRQ>
[  583.703077][    C0]  <TASK>
[  583.703088][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  583.703120][    C0] RIP: 0010:smp_call_function_many_cond+0x582/0x1700
[  583.703166][    C0] Code: 00 45 85 e4 74 54 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 <e8> 09 7a 0c 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63
[  583.703193][    C0] RSP: 0018:ffffc90000b87870 EFLAGS: 00000202
[  583.703216][    C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fb88dd
[  583.703235][    C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888021ef9ec0
[  583.703254][    C0] RBP: ffff8880b8541080 R08: 0000000000000005 R09: 0000000000000000
[  583.703273][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
[  583.703291][    C0] R13: ffffed10170a8211 R14: 0000000000000001 R15: ffff8880b843c700
[  583.703315][    C0]  ? smp_call_function_many_cond+0x5ad/0x1700
[  583.703367][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  583.703417][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  583.703462][    C0]  ? perf_event_text_poke+0x132/0x180
[  583.703493][    C0]  ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190
[  583.703530][    C0]  ? __pfx_perf_event_text_poke+0x10/0x10
[  583.703566][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  583.703603][    C0]  on_each_cpu_cond_mask+0x40/0x90
[  583.703649][    C0]  smp_text_poke_batch_finish+0x976/0xc60
[  583.703695][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  583.703737][    C0]  ? arch_jump_label_transform_queue+0xc0/0x120
[  583.703789][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  583.703834][    C0]  jump_label_update+0x37a/0x550
[  583.703872][    C0]  static_key_disable_cpuslocked+0x162/0x1c0
[  583.703911][    C0]  static_key_disable+0x1a/0x20
[  583.703943][    C0]  toggle_allocation_gate+0x149/0x2d0
[  583.703973][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  583.704007][    C0]  ? rcu_is_watching+0x12/0xc0
[  583.704043][    C0]  process_one_work+0xa0e/0x1980
[  583.704082][    C0]  ? __pfx_process_one_work+0x10/0x10
[  583.704117][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  583.704150][    C0]  worker_thread+0x5ef/0xe50
[  583.704188][    C0]  ? kthread+0x13a/0x450
[  583.704211][    C0]  ? __pfx_worker_thread+0x10/0x10
[  583.704240][    C0]  kthread+0x370/0x450
[  583.704263][    C0]  ? __pfx_kthread+0x10/0x10
[  583.704290][    C0]  ret_from_fork+0x72b/0xd50
[  583.704323][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  583.704355][    C0]  ? __switch_to+0x800/0x1100
[  583.704402][    C0]  ? __switch_to_asm+0x39/0x70
[  583.704439][    C0]  ? __pfx_kthread+0x10/0x10
[  583.704466][    C0]  ret_from_fork_asm+0x1a/0x30
[  583.704515][    C0]  </TASK>
[  584.219103][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  584.226487][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G     U    I  L      syzkaller #0 PREEMPT(full) 
[  584.237362][   T30] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP
[  584.244873][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  584.255077][   T30] Call Trace:
[  584.258407][   T30]  <TASK>
[  584.261484][   T30]  dump_stack_lvl+0x100/0x190
[  584.266238][   T30]  vpanic+0x552/0x970
[  584.270287][   T30]  ? __pfx_vpanic+0x10/0x10
[  584.274847][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  584.281155][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  584.287471][   T30]  panic+0xd1/0xe0
[  584.291266][   T30]  ? __pfx_panic+0x10/0x10
[  584.295757][   T30]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  584.302248][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  584.308513][   T30]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  584.314840][   T30]  ? watchdog.cold+0x1ec/0x234
[  584.319679][   T30]  ? watchdog+0xcc1/0x1030
[  584.324180][   T30]  watchdog.cold+0x1fd/0x234
[  584.328848][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  584.334728][   T30]  ? __pfx_watchdog+0x10/0x10
[  584.339517][   T30]  ? __kthread_parkme+0x18c/0x230
[  584.344634][   T30]  ? kthread+0x13a/0x450
[  584.348939][   T30]  ? __pfx_watchdog+0x10/0x10
[  584.353694][   T30]  kthread+0x370/0x450
[  584.357994][   T30]  ? __pfx_kthread+0x10/0x10
[  584.362657][   T30]  ret_from_fork+0x72b/0xd50
[  584.367326][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  584.372518][   T30]  ? __switch_to+0x800/0x1100
[  584.377285][   T30]  ? __switch_to_asm+0x39/0x70
[  584.382156][   T30]  ? __pfx_kthread+0x10/0x10
[  584.386820][   T30]  ret_from_fork_asm+0x1a/0x30
[  584.391660][   T30]  </TASK>
[  584.395624][   T30] Kernel Offset: disabled
[  584.400080][   T30] Rebooting in 86400 seconds..