last executing test programs:

10m33.021042116s ago: executing program 32 (id=924):
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0)
ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{r0, &(0x7f0000000000)="5963a72e0fb3c20ad7e273ed7d0362", 0x4, &(0x7f0000000040)="1e230efc6df6d124e0b31d31637a205eaf4e89e71148de42425d45225fccf8a89e46255b1b8a65838fc4089a4cfc42177df67acf90318c4e95fe5df8f6636e99f1eb872e446a3786da6f8d5169c5e38d34e145b56f4abc27675264a319ab61de6d73f1f16741b284a68a1827c418d447ee3a56b291d8d346de2aa7", 0x2, &(0x7f0000000140)="d0507ce69fcd1afb0741a14185a8f73dd4675eff4ab883c8f980910ebeb49589d4047d206b3ae75b330f72eb", &(0x7f0000000180)=0x1ff}, 0x2, &(0x7f0000000300)={0x6, 0x7fff, &(0x7f00000001c0)="6811c59cddb917fd127970567b4ec6412b0a5cd26381a1c6239527f23c4ac289f64d4f509b80d03a20cb83111d41fe80c66a4015eba0c626f9c7a9fb22622f9cf29e1e341a53bdeaea4ae49ae531e23d52e36c89933d9cd7c9ccf76047b9652530dfc5a68a7db7f9bea64d78aeb670f3bc07a6ab937cee7bc141e094b86bd54db005e61ecbff562379ba564982c1a4d0f3267f4b15cdd47338d18855e0142d751da75d19645d116fdec716f5e68daaaa13a9344ce72cb22bdcfb5b3a828bab6c9d7d613eef5c021ba7618b490b6cfd70b23bcd55f71c38d2753854660e319134940963", &(0x7f00000002c0)="3fe90cafe87c27db66de6e568623cc7e1ffffbf70f7a00", 0xce, 0x8}})
r1 = open(&(0x7f00000003c0)='./file0/file0\x00', 0x261c2, 0x84)
bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000480)=@bpf_attr_4={0x400, 0xffffffffffffffff, 0x5, r1}, 0xc00000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x400053, 0x9)
prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4, 0xeb2, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
r2 = socket(0x1f, 0x800, 0x0)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
ioctl$sock_SIOCGIFINDEX(r2, 0x80047437, 0x0)
syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff)
socket(0x11, 0x80003, 0x300)
unshare$auto(0x4040000080)
socket(0xa, 0x2, 0x73)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x401, 0x8000)
brk$auto(0x7fffffffefff)

10m32.824177922s ago: executing program 3 (id=946):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x41, 0x0) (async, rerun: 64)
r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/stack\x00', 0x800, 0x0) (rerun: 64)
read$auto_proc_single_file_operations_base(r1, &(0x7f0000000280)=""/15, 0xf) (async)
r2 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1)
prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) (async)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000000)) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) (async)
unshare$auto(0x8) (async, rerun: 64)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async, rerun: 64)
madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
unshare$auto(0x40000080) (async)
ioctl$auto_SNDCTL_DSP_PROFILE(r3, 0x40045017, &(0x7f0000000180)="d145d0e91274995474c3f52da5506c2b5db017d54aec541e9c8eb418c73025c7e03b9bc8e20791b4ce1c4f4db3f48f0246d00a9d3d16546f77c531039b9187bc82b91c8cc22987ceb2006b062985d7cbf928bad56be8db05e3504b3912e23aee4ea963405c575980c60b64308e6c636b5157dbd1380c04bc0614aa7382cb4ff3cdd5bc7f112690d8640b830c68706ff3f04a0846eb48e1be4eb2f5d0b03ef92d53705b83531f22fa6af3aa740b1a6904b64cf750f0c6971b55fab357bc236143ef33d74124d97b2eb796885d9c1c19c1069f21d7c046ad33c1aaeb31f469e0851bd9254c78ec81b894a2bb3a0b8627b485de483bc9523201b20c5b01") (async, rerun: 32)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 64)
madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 64)
rseq$auto(&(0x7f0000000280)={0xe, 0x401, 0x0, 0x806, 0x7, 0x2, "a005e2079990dbea867d20f42a909da4bd862dd72f80af99f59d86b567b54339f9b0684def766e0ed26bb934a5d4f977ea74add42aecf45ef5799ce682dcaae1bdd579f1e0a2644be3281def8a948ab91137d0d6577a9e7efd2639688d2ae832b4947ab26e0d4e8b00572342e2a8ac0fb63464ea1ee16b46cbfec625d3d196532879"}, 0x8003, 0x0, 0x8000006)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)

10m18.459220703s ago: executing program 3 (id=965):
unshare$auto(0x8000400)
unshare$auto(0x4)

10m15.029923928s ago: executing program 3 (id=968):
prlimit64$auto(0x0, 0x1, &(0x7f0000000180)={0x6, 0x7}, &(0x7f0000000100)={0xfffffffffffffff8, 0x2e7})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x49, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x1)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbf4250200080008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)='+', 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0xa0800, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
preadv$auto(r1, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x5, 0xc, 0x1)
ioctl$auto_SNAPSHOT_FREE(r2, 0x3314, 0x0)

10m6.015086068s ago: executing program 3 (id=970):
syslog$auto_SYSLOG_ACTION_CONSOLE_OFF(0x9, &(0x7f0000000000)='!\x00', 0x8001)
syslog$auto_SYSLOG_ACTION_CONSOLE_OFF(0x9, &(0x7f0000000040)='(-\'&(:\x00', 0x4)
syslog$auto_SYSLOG_ACTION_CONSOLE_OFF(0x9, &(0x7f0000000080)='(-\'&(:\x00', 0x0)
syslog$auto_SYSLOG_ACTION_CONSOLE_OFF(0x9, &(0x7f00000000c0)='\x00', 0x2)
r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0)
ioctl$auto_VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000140)={0xee6, 0xfffffffc})
r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000180), 0x42100, 0x0)
ioctl$auto_rfkill_fops_core(r1, 0x3, &(0x7f00000001c0)="900fea37ac133cd1c251d5113fa9e9f58df82e47e07246ea3452d4fbffdd80a94dee070f57ce11c711d7aaa9b55963beac0749d67e3a31a9dede7a4fadf2193c055525b6c706153dd7caa75792fb374148845ae23f6c374b2f917127bc1c3e0b08d4d346d82bc1315e31f5aa5e668105489bc28b953e13ef4fb46982d74560f878ac25bb80a12d29531e43bb4279516cd3a6690beeeebf6536ca836a3c88ad78a602c309d0178a191b59e8813206")
syslog$auto_SYSLOG_ACTION_CONSOLE_OFF(0x9, &(0x7f0000000280)='[!}\x00', 0x2)
r2 = bpf$auto_BPF_OBJ_GET(0x7, &(0x7f00000002c0)=@bpf_attr_11={0x1, 0xe9f, 0xb01, 0x5, 0xfffffffb, 0x2b9c, 0x7, <r3=>r0}, 0x7)
fcntl$auto_F_SETPIPE_SZ(r2, 0x407, 0x5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r2)
sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_PMKR0_NAME={0x1e, 0x102, "9fe904cc8cbc6ec297a5a29e07dda6bfa44e4f31f70713038d1f"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080)
sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x80000001}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xf9}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_STA_FLAGS2={0x60, 0x43, "7d434fe0abaf22a093f07778b929a8f9e17be269922947a752a34c5602d8233021bc90a863014e824c5185469be2b5471167981ef7c8b4db766f67efa9bf43a461e7c95f4be93fe56253ba88aff02dbecfc8ae06860720083577b839"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xc3}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
syslog$auto_SYSLOG_ACTION_CONSOLE_OFF(0x9, &(0x7f0000000640)='#\x00', 0x3)
shutdown$auto(r2, 0x1)
syslog$auto_SYSLOG_ACTION_CONSOLE_OFF(0x9, &(0x7f0000000680)='/dev/rfkill\x00', 0x2)
r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sg0\x00', 0x121400, 0x0)
ioctl$auto_SG_SET_DEBUG(r6, 0x227e, &(0x7f0000000700)="580def2540846a403ab7ceea13178dcf16a37242e1b4d1a70def075b4d87b3ac8005a5d5384c59f16a765ffbce86572ffa07951f3ed37bd29754656dab20c8ae35e6ec4049e07e75f5765fa46712f61f6c1838d49ffa539a3429883f75ae12a059810614f5bf147cb43d37f46a311efcac1fedb39bc5032894a4d14ee6e3c7a6")
syslog$auto_SYSLOG_ACTION_CONSOLE_OFF(0x9, &(0x7f0000000780)='[]$$*\x00', 0x7f)
r7 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000800), r4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'vcan0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'veth0\x00', <r9=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(r4, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r8}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r9}, @NET_SHAPER_A_HANDLE={0x4c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3ffc0}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x7}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x101}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x9d14}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1ff}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x9}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x400}, @NET_SHAPER_A_HANDLE_ID={0x8}, @NET_SHAPER_A_HANDLE_ID={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x80)
mseal$auto(0x7d, 0x4, 0x1000)
syslog$auto_SYSLOG_ACTION_CONSOLE_OFF(0x9, &(0x7f00000009c0)='#\x00', 0x7)
syslog$auto_SYSLOG_ACTION_CONSOLE_OFF(0x9, &(0x7f0000000a00)='!\x00', 0xfffffff9)
syz_clone(0x200000, &(0x7f0000000a40)="fc43ca45570ccdac95dbd3fe6263040b2ecada4b95c25e3b33bd9fb262f789f1cd35f4a08208edeacda1b2f80a1603d736ac6da283887923b8e569ee3a3ff201ad7a8b0a53e56567772f840573434b0052d5fd3af9f0a2eb640e9ad89bf084e70d43389101aac4942e2c3ee4628e3883b93376bea99e483f9d52b769d85e0e2d10a839eaab15fcc4cd1e81bc7d510f8a058bfefe76c55b0539f1fdc977354c4e8f92281cbf03166d63be75407cc5", 0xae, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="d9f2eafd49d5bfa3e39771681d9b0d0d9f83b35b6c31433c2670325489e606dadcdbfc85ce23066892a034f2bf90be81007a3066c44fd78036d15f90541a3de5ec59bd3b149cf6018505e274164d619a57ff252a2c9a7f5dcf9d2450f748316d5384ccbbdf4def5dd91358231888e2081240fff47c37e0dd8d65febd8c1962d9c5ef68ecb4918a33ae97c86ff0db2450a3735057629debd7cc12224de46f768e47f754cb1e9ae2a17092c5486de2bdefdd2fa2f918e3c4cd450b8ae596ab8c08b0d6897617c3dae5cfa29ee22fa9494f6618d58f79cd151e8e6d2f4c4413b81355f0c7a2eb64703f0a7fceb3b8c970bc3f9adc214997")
io_uring_register$auto_IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000c80)="b2ed8a3bb26001f82a51222dead6777ffc9d9dcbd9a2b1d78fcd6901e29967609b57823def7f8a19116ef9c2dfe9940052e8f6879b132aa63704e3ba202fd50535a33b6cb0ca90dff42b83b667e41b3c0c12a3aa90683269b83e486c1efa3a9ade8857c54eadad6f556349e21db11c519f4340413aba587f79f6772428616af1ad1e", 0x6)

10m3.562156794s ago: executing program 3 (id=971):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
nanosleep$auto(0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x84)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(r0, 0x0, 0x400018)
ioctl$auto(0x3, 0x4020565a, 0x38)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000140)="ac42d463f1971417fb682e4df2bad2d03f1a585658c73b01dfdaa89cb523fc81cd49d02e36fccaa80c996a8121bd2344228256a3f3da16682b", 0x1ffffffff}, 0x6, 0x0)
ioctl$auto(0x3, 0x4020565b, 0x38)
semctl$auto_SEM_STAT_ANY(0x9, 0x3, 0x14, 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = gettid()
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/hugetlb.1GB.failcnt\x00', 0x1a3b02, 0x0)
write$auto(r3, &(0x7f00000000c0)=',.\\\x00', 0xd)
rt_tgsigqueueinfo$auto(r2, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x7, 0xcc, 0x2, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')
r4 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
write$auto_safesetid_gid_file_fops_securityfs(r4, &(0x7f0000000340)="19af2e0b9f7ce32d10ace0ba4774649d8425930a23f7860462f1e046c12e74b2b30500277eaf606f93b3f5273049f75e950bac5aab9e6e80234f215802241e25fde3601310d377617e46cb764d1c31e5c17a785c20d957ac6cbf0bb50ed4850ddd794e23908dc6639e9164bd0da5e63a742e66bbfb35f7a8d2f087d30445514586d5e499350e72645fded1", 0x8b)

9m58.914269137s ago: executing program 3 (id=974):
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a)
sendto$auto(r1, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, <r3=>0x0}, 0x36)
close_range$auto(0x2, 0x8, 0x0)
socket(0x3, 0x4, 0x80004)
r4 = socket(0x1d, 0x2, 0x7)
r5 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
bind$auto(r4, &(0x7f0000000000)=@can={0x1d, r6}, 0x6a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
connect$auto(0x3, &(0x7f00000018c0)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x18)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0x1ffcc}, 0x1, 0x0, 0x0, 0x6b6}, 0x7}, 0x3, 0xff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.8/usb26/26-0:1.0/usb26-port2/connect_type\x00', 0x82942, 0x0)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000480)=ANY=[@ANYBLOB="c078107a", @ANYRES16=0x0, @ANYRES32, @ANYRES64=r0, @ANYRESHEX=r3], 0x1ec}, 0x1, 0x0, 0x0, 0x4081}, 0x54881)
r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r8)
ioctl$auto_KVM_GET_MSRS(r8, 0x4400ae8f, &(0x7f00000000c0)={0xdd})

9m43.1053441s ago: executing program 33 (id=974):
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a)
sendto$auto(r1, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, <r3=>0x0}, 0x36)
close_range$auto(0x2, 0x8, 0x0)
socket(0x3, 0x4, 0x80004)
r4 = socket(0x1d, 0x2, 0x7)
r5 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
bind$auto(r4, &(0x7f0000000000)=@can={0x1d, r6}, 0x6a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
connect$auto(0x3, &(0x7f00000018c0)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x18)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0x1ffcc}, 0x1, 0x0, 0x0, 0x6b6}, 0x7}, 0x3, 0xff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.8/usb26/26-0:1.0/usb26-port2/connect_type\x00', 0x82942, 0x0)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000480)=ANY=[@ANYBLOB="c078107a", @ANYRES16=0x0, @ANYRES32, @ANYRES64=r0, @ANYRESHEX=r3], 0x1ec}, 0x1, 0x0, 0x0, 0x4081}, 0x54881)
r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r8)
ioctl$auto_KVM_GET_MSRS(r8, 0x4400ae8f, &(0x7f00000000c0)={0xdd})

2m41.582995528s ago: executing program 1 (id=1539):
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0x0, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x60142, 0x130)
mmap$auto(0x0, 0x2000d, 0x4000000000e3, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = open(0x0, 0x261c2, 0x84)
openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x40aa2, 0x0)
r2 = userfaultfd$auto(0x1)
statx$auto(r2, 0x0, 0x1000, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=r2, 0xffffffffffffffff, 0x8, 0x5, 0xffffffffffffffff, @relative_id=0x6, 0xe600}, 0xf)
bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x2}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff)
fchmod$auto(r0, 0x8)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'dummy0\x00'})
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3)
sendmsg$auto_NL80211_CMD_GET_MPP(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfff7}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x450481, 0x0)
sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x5b020f7d7a84fe6e)
unshare$auto(0x40000080)
socket(0x2, 0x3, 0x100)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, 0x0, 0x4008040)
pread64$auto(r6, 0x0, 0x201, 0xc000)
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)={0x18, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x4}]}, 0x18}, 0x1, 0x1000060}, 0x400c080)

2m38.699101434s ago: executing program 1 (id=1543):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x49, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x1)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)='+', 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
preadv$auto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x5, 0xc, 0x1)
sendfile$auto(r1, r1, 0x0, 0x2)

2m33.40840131s ago: executing program 1 (id=1547):
statmount$auto(0x0, 0x0, 0x200, 0x81)
r0 = setfsuid$auto(0xee00)
sysfs$auto(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
write$auto(0x3, 0x0, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r2, 0x0, 0x400000000006)
statmount$auto(&(0x7f0000000000)={0x154, @inferred=r1, 0x2, 0xfffffffffffffffd, 0x4}, &(0x7f0000000700)={0x8000, 0x456f, 0x0, 0x8001, 0x7, 0x2, 0x80000000, 0x0, 0x1, 0x1, 0x8, 0x4, 0x1a32, 0x5, 0x4, 0x4, 0xe3, 0x4, 0x1000, 0x80000001, 0x10000000, 0xff, 0x0, 0x8000, 0xe, 0x7, 0x7b, 0x5, 0x7, 0x3, 0x9, [0x100000000, 0x1000, 0xfff, 0x6, 0x10000, 0x7, 0x3ff, 0x1, 0x9, 0x10, 0x9, 0x8, 0x5, 0x100, 0x765, 0x6, 0x2, 0x7, 0x2, 0xeec, 0x10, 0xf, 0x0, 0x4, 0x7fff, 0x0, 0x3, 0x3, 0x8f37, 0x7fff, 0x6, 0x7ff, 0x2, 0x45a3, 0xbf2, 0xd53d, 0x8, 0xa, 0x9, 0x1, 0xf, 0x9, 0x134b], "0c7562bdc8d7ead5b2c895979e7a167086f637a07622caebb9e66be11625e1fd60fd821d0a21e17ad32faff93f70c9387778c92de6b1319d6f36c07369b427fcce9e68be603ca7bcf2eb"}, 0x9, 0x80)
r3 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x40800, 0x0)
ioctl$auto_FIONREAD(r3, 0x541b, 0x0)
r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r4, &(0x7f0000000140)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa95f757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce319330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0cc2dfe7bfe60f2c9fa95fc93cc906a80aec437a39cd0672a169c151550a062a76e472626", 0x90)
ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000740)="c79ad53322a093d01cf42feaa3cd13f155f08189295b3f1b0a632202b2faad35f145080e9e775fdb44acf87be27dc7829fe385367152b0e77a2ca00baf9c6255d2e960caa8151ce9a6e6432bd43371828e142ceaa267e251b7a0d0fa2665ca4e0bc1d48d401e2591a7d3c80814f66ace38b36b8308265636ec73f43baa714b8427d3f97d7b6a875f6dab3809ab19709aed0d02030464a231382c1a3f4d2ccc8c83d63c553db92768f436555336efa9265094eab1d3f0b1e9529c08e32c76db1d")
r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200025bd7000fb5bdf251a40000006000a00ff070000050026010800000014000400626174616c765f736c6108000bea07000000"], 0x40}, 0x1, 0x0, 0x0, 0x40400}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', <r7=>0x0})
sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r7, 0x2f}, 0x22)
sendmsg$auto_NL802154_CMD_DISASSOCIATE(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x264, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x212, 0x2f, 0x0, 0x1, [@generic="0bd6e5aa", @typed={0x8, 0x7f, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="28b77066df644b5b5d38c25f4e70b649dbd9adbb730faba5998416d72e6051ba36ce2a8f181174bc2b739f510129dbf79e6fac414d97be3fc8e91d4afd385d8bbd6f88dbd8e9c09e5ba56d0ca54a565d4bf56ce4c62c32f49f0597f8755d0f46638d6b24c7ec2a3eb08cb9408d81ee006df99d6348", @generic="bc79e40c35c49a997fb79135f9acb85ee2badccc362f1def02e4b376d18ed0350e332244bd573024b9994583318f4a54715a8eb3c871663474831453c97eeedcba5b54fb3241877e748b749972ec3f485ddcbbe83e9766f57c9963b51aa763cf3338d9d9d758a344ccc7871b5d5d4f57c2937416b7651f2735fea7bb696831e7cf1bc78164034650212bd20b083c36844b25abf4ce0d1596af41a371cf1138b697dacb0a1b8f94ac7651da1c8c4d15dfe433a91575913cc3fe351593396de34fc25ad4886c9e408829bcd377777762bea5ddf08b78031872d36f8c20c653070f931634f1bdb61b284c0a7dc95c5a40ad109beea1c4a1b5", @nested={0x8, 0x25, 0x0, 0x1, [@nested={0x4, 0x76}]}, @typed={0x14, 0xbf, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r0}, @generic="ea42d83414c25159c55f64fb19a83f9c3e6f46e73df61521f2d171837668f725d0c545bf4a9cdff2e51430eaf4cb1b948502e569af295ee4c527ff46b88724c034de2b2369a7ab95db63573adb48ecb715dce0d8d7599a2aa1b655588bc9f0d6c14c22736249d31530b67339a07ab6f1ea11"]}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0xd}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x264}, 0x1, 0x0, 0x0, 0x24004004}, 0x4001)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
unshare$auto(0x40000080)

2m29.821193979s ago: executing program 1 (id=1551):
mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x1010001, 0x100000003)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x20, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
close_range$auto(0x2, 0x8, 0x0)

2m28.141328132s ago: executing program 1 (id=1553):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x49, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x1)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
preadv$auto(r0, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x5, 0xc, 0x1)
sendfile$auto(r1, r1, 0x0, 0x2)

2m26.886568312s ago: executing program 2 (id=1556):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0)
readv$auto(r2, &(0x7f0000000100)={0x0, 0x3}, 0x1)
close_range$auto(0x2, r0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000)
setxattrat$auto(0xffffffffffffffff, 0x0, 0xc24, 0x0, 0x0, 0x20005b)
socket(0x10, 0x2, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77eeb07c, 0x0)
r4 = fanotify_init$auto(0x65, 0x2)
r5 = socket(0x22, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r7, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050)
io_cancel$auto(0x2, &(0x7f00000000c0)={0x9, 0x1, 0x8, 0xfc, 0x7, r6, 0xd, 0x2, 0x2, 0x0, 0x4, <r8=>r5}, &(0x7f0000000100)={0x7ff, 0xb, 0x7, 0x40000000000})
ioctl$auto_XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f0000000200)={r8, 0x0, 0x6, 0xffffffff, 0xdcb0a47, 0x1000002})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rpc/nfs4.nametoid/channel\x00', 0x24100, 0x0)

2m26.000323478s ago: executing program 2 (id=1557):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x49, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x1)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd965020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)='+', 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0xa0800, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
preadv$auto(r1, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x5, 0xc, 0x1)
sendfile$auto(r3, r3, 0x0, 0x2)
ioctl$auto_SNAPSHOT_FREE(r2, 0x3314, 0x0)

2m24.561024103s ago: executing program 5 (id=1558):
arch_prctl$auto_ARCH_SHSTK_ENABLE(0x5001, 0x3)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
setitimer$auto_ITIMER_REAL(0x0, &(0x7f00000001c0)={{0x1, 0x10001}, {0x7fffffffffffffff, 0x7}}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'dummy0\x00'})
socket(0x2, 0x1, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0x1)
futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5)
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x1000060}, 0x400c080)

2m23.671764241s ago: executing program 1 (id=1561):
statmount$auto(0x0, 0x0, 0x200, 0x81)
setfsuid$auto(0xee00)
sysfs$auto(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
write$auto(0x3, 0x0, 0x1)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
statmount$auto(&(0x7f0000000000)={0x154, @inferred=r0, 0x2, 0xfffffffffffffffd, 0x4}, &(0x7f0000000700)={0x8000, 0x456f, 0x0, 0x8001, 0x7, 0x2, 0x80000000, 0x0, 0x1, 0x1, 0x8, 0x4, 0x1a32, 0x5, 0x4, 0x4, 0xe3, 0x4, 0x1000, 0x80000001, 0x10000000, 0xff, 0x0, 0x8000, 0xe, 0x7, 0x7b, 0x5, 0x7, 0x3, 0x9, [0x100000000, 0x1000, 0xfff, 0x6, 0x10000, 0x7, 0x3ff, 0x1, 0x9, 0x10, 0x9, 0x8, 0x5, 0x100, 0x765, 0x6, 0x2, 0x7, 0x2, 0xeec, 0x10, 0xf, 0x0, 0x4, 0x7fff, 0x0, 0x3, 0x3, 0x8f37, 0x7fff, 0x6, 0x7ff, 0x2, 0x45a3, 0xbf2, 0xd53d, 0x8, 0xa, 0x9, 0x1, 0xf, 0x9, 0x134b], "0c7562bdc8d7ead5b2c895979e7a167086f637a07622caebb9e66be11625e1fd60fd821d0a21e17ad32faff93f70c9387778c92de6b1319d6f36c07369b427fcce9e68be603c"}, 0x9, 0x80)
r2 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x40800, 0x0)
ioctl$auto_FIONREAD(r2, 0x541b, 0x0)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000140)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa95f757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce319330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0cc2dfe7bfe60f2c9fa95fc93cc906a80aec437a39cd0672a169c151550a062a76e472626", 0x90)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r4, 0x0)
unshare$auto(0x40000080)

2m23.205267554s ago: executing program 5 (id=1562):
futex$auto(0x0, 0x89, 0x4, 0x0, 0x0, 0x100)
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0)
openat$auto_msft_opcode_fops_(0xffffffffffffff9c, 0x0, 0x420202, 0x0)
io_uring_setup$auto(0x401, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x180b03, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
close_range$auto(0x2, 0x8, 0x0)
writev$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xf5}, 0x9)

2m23.002656911s ago: executing program 2 (id=1563):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0xe)
r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto(0xffffffffffffffff, 0x4b40, 0x1)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
ioctl$auto(r1, 0x540a, 0x0)
ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000080))
fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x8, 0x327, 0x2)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x2, 0x84)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4)

2m22.308484106s ago: executing program 5 (id=1564):
r0 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0)
bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r0}, 0x6f4)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
shmctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000300)={{0x9, <r2=>0x0, 0xffffffffffffffff, 0xcc, 0x4a1, 0x4c8}, 0x80000000, 0x7, 0x0, 0x7fffffff, @raw=0x3d26, @inferred, 0x8, 0x0, &(0x7f0000000200)="d8ba6c38cb6d94e447dfd3095b1534f75b905026a2c4bea13ab6c070a6f2d959e807581a2e296d", &(0x7f0000000240)="4e8128048f2f2cea15dd11084fef414d2cdfb9fcf95e1fc5626f48c35b86517993efd1fcde44186a4836834e3c05f0dda88fe82246c1fc1e0c3a6d8585bd5e4136539850ed6610ea366a962907c63b1fe403f8f011975ccce19efa6c0dd256cc3ce1e0cda4095d60c647cb7805369b9b10c648dd54200574bbfe11e1e8267f271cbf2695a5"})
shmctl$auto_SHM_INFO(0x81, 0xe, &(0x7f0000000580)={{0x9, <r3=>0xee01, 0xffffffffffffffff, 0x8, 0xc, 0xc, 0x8}, 0xbb6, 0x9, 0x9, 0x6, @inferred=0xffffffffffffffff, @raw=0xfffffffe, 0xfff, 0x0, &(0x7f0000000380)="d93c5e7ffec9ce23e1de8264eac29f87d19d48191100d4700ed394193331520c17a8524c0ac322d7dddbd4e7f9b591fc3955156925409351cc485f372def1d00d20d50140c8bf920d4034ae8a1fdca1b1527015ad3fdf420b1a1292705e0d59955a47fd60df4683560ed98c6452eb3f0d259e70ca99f172642937908c3a9b7582549c06a0310b65ac418bc6ea55681c22de8b6d65e62bc0649118a3333779049c14f4c2c3d3890125dfca3ba399fb3aa9f073bdd45c52920d567cc20650dc259033b1da93ccffb7c579537e6d96129", &(0x7f0000000480)="98b4bb2f3a8b4739dfc6bb2cd35579490f6a9b0c0ac871d9e9753debf86b6788981861453069f20a4cf7cf03e792115c04ed50103befe14fabb57705dcc4adfe878c4fcc57496bd44aeac52b01b1172f9a6fa07284ed1ff576cadc5581d947c20c14286195da9a5fac6d17c5b7cee78db8248ee8d9860569646f38f19927e86d67f298f4df95543609fba678f1236ce0d3c83c10946d9a128bfb122f5dfb03c2c23204258f1d6dc5901a83db233fbc40c19a343889581420a1b33f6a32f27ab4ac9b39fdf2e1b339083027b7dcdad0ff33d9947fee4bde4d0b0da83f6de415ce7fae8d62"})
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3bc, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x8, 0x131, 0x0, 0x1, [@NL80211_ATTR_TDLS_SUPPORT={0x4}]}, @NL80211_ATTR_MPATH_NEXT_HOP={0x62, 0x1a, "a901f7f0ab360ed9a33319bafe26f04fda705681b304cf530ba684dc72e05e0f10db0a9a515019f7f4e431f1efecc79420df2cc87561dd505a6010da06a24e5964ca856e8b35d175d2ac68903fb6a7ce8bc9b2116de67139c8d6147c5df1"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x334, 0x124, 0x0, 0x1, [@generic="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", @typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@broadcast}, @generic="894af58eba12663103066ca4899281e591d8c554e31f4b91c87fe26509c1c95ee81ff918afb231e2c79caa5f35437d863c2fdf466e7f33234aa3687167dcd5ba2bddb297ac447978e34a186547f5bb7b6170b09fc2c7ac40013335132d02d54bb06e6305bd1174533767fe05147bbd75e559a5b4bad16920fac593d8c6d2e22a484e455cbe6d93c785567d0a1331857dd0", @nested={0x19c, 0x55, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @u32=0xa}, @typed={0x8, 0xb, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x61}, @typed={0x8, 0xa2, 0x0, 0x0, @uid=r3}, @generic="f0a436ddb265425ac248bd19316cc3990103072e67d691e9e61db0c92060f298ad202da1411b344fcbf682689b5ae53b772be43762708f91b8cb315e168d0e993321b118fcb1220c22450b0b2b51eb31af33a17ee8a9824fb8c50d2e9b2c71e51bc2f067d24394b416af0cdee00c717d81d3e8ea378b20b0d0ebab2ee42bfceb276552736997c6247bccb966acbe", @typed={0x12, 0xb6, 0x0, 0x0, @str='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6'}, @nested={0x4, 0xd2}, @generic="037733b86de5691779f50929edd93ce4047b6da7a52f43826a12ac150f3dc84766fa48997813386c1f7912552bc074cbdb255c80d9e02e8833c58704c1a7c5f713b6b684f1d12481f7eff7018dad91730efd807732128814063aba4e56bc82cbc631ce988a52bca49508369971ebfada6f00adab758743b85c2d77284194f99d7874e1dcce98ef2fe35a8af7f193b287fdcc79258d18b30774a687ae9cccc949de8e5ab9474839e7cc511f388f67d14b65e173f871503e718ca5b90653bf1eb34164", @typed={0x14, 0x10b, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0xc0}, 0x11)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r4 = gettid()
rt_sigqueueinfo$auto(r4, 0x11, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0, @_trapno=0xfffffffe}}})
prctl$auto(0x8000002, 0x4, r4, 0x1, 0xbd63)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0)
write$auto(r5, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
readv$auto(0x3, 0x0, 0x1)
io_uring_setup$auto(0x59, 0x0)
clock_adjtime$auto(0x354d, 0x0)
syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28001)
rt_sigsuspend$auto(0x0, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r6, &(0x7f0000000040)='\xee\xff\xff\xff', 0x80000000)

2m22.05932567s ago: executing program 2 (id=1565):
socket(0xa, 0x801, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
ioctl$auto_BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, 0x0)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xc834, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x4000000, 0x8000000000000000, 0x15)
pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, 0x0, 0x100, 0x0)
prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40)
setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2)
write$auto(0x3, 0x0, 0xfffffdef)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
r3 = socket(0x18, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x40047459, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'dummy0\x00', <r4=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000006c0)={0x0, 0x700, &(0x7f00000001c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf252c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x1000060}, 0x400c080)

2m19.940634183s ago: executing program 5 (id=1568):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0)
readv$auto(r2, &(0x7f0000000100)={0x0, 0x3}, 0x1)
close_range$auto(0x2, r0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000)
setxattrat$auto(0xffffffffffffffff, 0x0, 0xc24, 0x0, 0x0, 0x20005b)
socket(0x10, 0x2, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77eeb07c, 0x0)
r4 = fanotify_init$auto(0x65, 0x2)
r5 = socket(0x22, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r7, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050)
io_cancel$auto(0x2, &(0x7f00000000c0)={0x9, 0x1, 0x8, 0xfc, 0x7, r6, 0xd, 0x2, 0x2, 0x0, 0x4, <r8=>r5}, &(0x7f0000000100)={0x7ff, 0xb, 0x7, 0x40000000000})
ioctl$auto_XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f0000000200)={r8, 0x0, 0x6, 0xffffffff, 0xdcb0a47, 0x1000002})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rpc/nfs4.nametoid/channel\x00', 0x24100, 0x0)

2m19.658296582s ago: executing program 2 (id=1569):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x49, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x1)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
preadv$auto(r0, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x5, 0xc, 0x1)
sendfile$auto(r1, r1, 0x0, 0x2)

2m18.708137204s ago: executing program 5 (id=1570):
pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe41\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39)

2m18.383391273s ago: executing program 5 (id=1572):
statmount$auto(0x0, 0x0, 0x200, 0x81)
setfsuid$auto(0xee00)
sysfs$auto(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
statmount$auto(&(0x7f0000000000)={0x154, @inferred=r0, 0x2, 0xfffffffffffffffd, 0x4}, &(0x7f0000000700)={0x8000, 0x456f, 0x0, 0x8001, 0x7, 0x2, 0x80000000, 0x0, 0x1, 0x1, 0x8, 0x4, 0x1a32, 0x5, 0x4, 0x4, 0xe3, 0x4, 0x1000, 0x80000001, 0x10000000, 0xff, 0x0, 0x8000, 0xe, 0x7, 0x7b, 0x5, 0x7, 0x3, 0x9, [0x100000000, 0x1000, 0xfff, 0x6, 0x10000, 0x7, 0x3ff, 0x1, 0x9, 0x10, 0x9, 0x8, 0x5, 0x100, 0x765, 0x6, 0x2, 0x7, 0x2, 0xeec, 0x10, 0xf, 0x0, 0x4, 0x7fff, 0x0, 0x3, 0x3, 0x8f37, 0x7fff, 0x6, 0x7ff, 0x2, 0x45a3, 0xbf2, 0xd53d, 0x8, 0xa, 0x9, 0x1, 0xf, 0x9, 0x134b], "0c7562bdc8d7ead5b2c895979e7a167086f637a07622caebb9e66be11625e1fd60fd821d0a21e17ad32faff93f70c9387778c92de6b1319d6f36c07369b427fcce9e68be603c"}, 0x9, 0x80)
r2 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x40800, 0x0)
ioctl$auto_FIONREAD(r2, 0x541b, 0x0)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000140)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa95f757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce319330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0cc2dfe7bfe60f2c9fa95fc93cc906a80aec437a39cd0672a169c151550a062a76e472626", 0x90)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r4, 0x0)
unshare$auto(0x40000080)

2m17.798061176s ago: executing program 2 (id=1574):
statmount$auto(0x0, 0x0, 0x200, 0x81)
setfsuid$auto(0xee00)
sysfs$auto(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
statmount$auto(&(0x7f0000000000)={0x154, @inferred=r0, 0x2, 0xfffffffffffffffd, 0x4}, &(0x7f0000000700)={0x8000, 0x456f, 0x0, 0x8001, 0x7, 0x2, 0x80000000, 0x0, 0x1, 0x1, 0x8, 0x4, 0x1a32, 0x5, 0x4, 0x4, 0xe3, 0x4, 0x1000, 0x80000001, 0x10000000, 0xff, 0x0, 0x8000, 0xe, 0x7, 0x7b, 0x5, 0x7, 0x3, 0x9, [0x100000000, 0x1000, 0xfff, 0x6, 0x10000, 0x7, 0x3ff, 0x1, 0x9, 0x10, 0x9, 0x8, 0x5, 0x100, 0x765, 0x6, 0x2, 0x7, 0x2, 0xeec, 0x10, 0xf, 0x0, 0x4, 0x7fff, 0x0, 0x3, 0x3, 0x8f37, 0x7fff, 0x6, 0x7ff, 0x2, 0x45a3, 0xbf2, 0xd53d, 0x8, 0xa, 0x9, 0x1, 0xf, 0x9, 0x134b], "0c7562bdc8d7ead5b2c895979e7a167086f637a07622caebb9e66be11625e1fd60fd821d0a21e17ad32faff93f70c9387778c92de6b1319d6f36c07369b427fcce9e68be603c"}, 0x9, 0x80)
r2 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x40800, 0x0)
ioctl$auto_FIONREAD(r2, 0x541b, 0x0)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000140)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa95f757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce319330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0cc2dfe7bfe60f2c9fa95fc93cc906a80aec437a39cd0672a169c151550a062a76e472626", 0x90)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r4, 0x0)
unshare$auto(0x40000080)

2m8.40160913s ago: executing program 34 (id=1561):
statmount$auto(0x0, 0x0, 0x200, 0x81)
setfsuid$auto(0xee00)
sysfs$auto(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
write$auto(0x3, 0x0, 0x1)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
statmount$auto(&(0x7f0000000000)={0x154, @inferred=r0, 0x2, 0xfffffffffffffffd, 0x4}, &(0x7f0000000700)={0x8000, 0x456f, 0x0, 0x8001, 0x7, 0x2, 0x80000000, 0x0, 0x1, 0x1, 0x8, 0x4, 0x1a32, 0x5, 0x4, 0x4, 0xe3, 0x4, 0x1000, 0x80000001, 0x10000000, 0xff, 0x0, 0x8000, 0xe, 0x7, 0x7b, 0x5, 0x7, 0x3, 0x9, [0x100000000, 0x1000, 0xfff, 0x6, 0x10000, 0x7, 0x3ff, 0x1, 0x9, 0x10, 0x9, 0x8, 0x5, 0x100, 0x765, 0x6, 0x2, 0x7, 0x2, 0xeec, 0x10, 0xf, 0x0, 0x4, 0x7fff, 0x0, 0x3, 0x3, 0x8f37, 0x7fff, 0x6, 0x7ff, 0x2, 0x45a3, 0xbf2, 0xd53d, 0x8, 0xa, 0x9, 0x1, 0xf, 0x9, 0x134b], "0c7562bdc8d7ead5b2c895979e7a167086f637a07622caebb9e66be11625e1fd60fd821d0a21e17ad32faff93f70c9387778c92de6b1319d6f36c07369b427fcce9e68be603c"}, 0x9, 0x80)
r2 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x40800, 0x0)
ioctl$auto_FIONREAD(r2, 0x541b, 0x0)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000140)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa95f757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce319330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0cc2dfe7bfe60f2c9fa95fc93cc906a80aec437a39cd0672a169c151550a062a76e472626", 0x90)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r4, 0x0)
unshare$auto(0x40000080)

2m3.667638471s ago: executing program 6 (id=1584):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x49, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x1)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd965020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)='+', 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0xa0800, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
preadv$auto(r1, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x5, 0xc, 0x1)
sendfile$auto(r3, r3, 0x0, 0x2)
ioctl$auto_SNAPSHOT_FREE(r2, 0x3314, 0x0)

2m2.86851078s ago: executing program 35 (id=1572):
statmount$auto(0x0, 0x0, 0x200, 0x81)
setfsuid$auto(0xee00)
sysfs$auto(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
statmount$auto(&(0x7f0000000000)={0x154, @inferred=r0, 0x2, 0xfffffffffffffffd, 0x4}, &(0x7f0000000700)={0x8000, 0x456f, 0x0, 0x8001, 0x7, 0x2, 0x80000000, 0x0, 0x1, 0x1, 0x8, 0x4, 0x1a32, 0x5, 0x4, 0x4, 0xe3, 0x4, 0x1000, 0x80000001, 0x10000000, 0xff, 0x0, 0x8000, 0xe, 0x7, 0x7b, 0x5, 0x7, 0x3, 0x9, [0x100000000, 0x1000, 0xfff, 0x6, 0x10000, 0x7, 0x3ff, 0x1, 0x9, 0x10, 0x9, 0x8, 0x5, 0x100, 0x765, 0x6, 0x2, 0x7, 0x2, 0xeec, 0x10, 0xf, 0x0, 0x4, 0x7fff, 0x0, 0x3, 0x3, 0x8f37, 0x7fff, 0x6, 0x7ff, 0x2, 0x45a3, 0xbf2, 0xd53d, 0x8, 0xa, 0x9, 0x1, 0xf, 0x9, 0x134b], "0c7562bdc8d7ead5b2c895979e7a167086f637a07622caebb9e66be11625e1fd60fd821d0a21e17ad32faff93f70c9387778c92de6b1319d6f36c07369b427fcce9e68be603c"}, 0x9, 0x80)
r2 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x40800, 0x0)
ioctl$auto_FIONREAD(r2, 0x541b, 0x0)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000140)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa95f757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce319330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0cc2dfe7bfe60f2c9fa95fc93cc906a80aec437a39cd0672a169c151550a062a76e472626", 0x90)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r4, 0x0)
unshare$auto(0x40000080)

2m2.401765135s ago: executing program 36 (id=1574):
statmount$auto(0x0, 0x0, 0x200, 0x81)
setfsuid$auto(0xee00)
sysfs$auto(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
statmount$auto(&(0x7f0000000000)={0x154, @inferred=r0, 0x2, 0xfffffffffffffffd, 0x4}, &(0x7f0000000700)={0x8000, 0x456f, 0x0, 0x8001, 0x7, 0x2, 0x80000000, 0x0, 0x1, 0x1, 0x8, 0x4, 0x1a32, 0x5, 0x4, 0x4, 0xe3, 0x4, 0x1000, 0x80000001, 0x10000000, 0xff, 0x0, 0x8000, 0xe, 0x7, 0x7b, 0x5, 0x7, 0x3, 0x9, [0x100000000, 0x1000, 0xfff, 0x6, 0x10000, 0x7, 0x3ff, 0x1, 0x9, 0x10, 0x9, 0x8, 0x5, 0x100, 0x765, 0x6, 0x2, 0x7, 0x2, 0xeec, 0x10, 0xf, 0x0, 0x4, 0x7fff, 0x0, 0x3, 0x3, 0x8f37, 0x7fff, 0x6, 0x7ff, 0x2, 0x45a3, 0xbf2, 0xd53d, 0x8, 0xa, 0x9, 0x1, 0xf, 0x9, 0x134b], "0c7562bdc8d7ead5b2c895979e7a167086f637a07622caebb9e66be11625e1fd60fd821d0a21e17ad32faff93f70c9387778c92de6b1319d6f36c07369b427fcce9e68be603c"}, 0x9, 0x80)
r2 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x40800, 0x0)
ioctl$auto_FIONREAD(r2, 0x541b, 0x0)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000140)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa95f757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce319330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0cc2dfe7bfe60f2c9fa95fc93cc906a80aec437a39cd0672a169c151550a062a76e472626", 0x90)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r4, 0x0)
unshare$auto(0x40000080)

2m0.972324745s ago: executing program 6 (id=1588):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'dummy0\x00', <r2=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000006c0)={0x0, 0x700, &(0x7f00000001c0)={&(0x7f0000000e80)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x1000060, 0x0, 0x700}, 0x400c080)

2m0.743307472s ago: executing program 6 (id=1589):
pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x010\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39)

2m0.488370488s ago: executing program 6 (id=1590):
r0 = bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xae30, 0x8, 0xfff, 0xffffffffffffffff, 0x9, 0x7ff}, 0x6f4)
fadvise64$auto_POSIX_FADV_NORMAL(r0, 0x401, 0x2c, 0x0)
socket(0x2, 0x80802, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r1)
sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST_EXT(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000090)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103281, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0x7, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.7/usb8/authorized_default\x00', 0x20582, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
open(0x0, 0x261c2, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x0, 0x0)
ioctl$auto(r4, 0x401870cb, r4)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)

1m59.155517142s ago: executing program 6 (id=1591):
statmount$auto(0x0, 0x0, 0x200, 0x400007f)
setfsuid$auto(0xee00)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x11, 0x2, 0x2)
r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5)
ioctl$auto(r0, 0x4008af03, 0x0)
ioctl$auto_VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)
sysfs$auto(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
write$auto(0x3, 0x0, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
bpf$auto(0x0, 0x0, 0x14)
timerfd_settime$auto(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x2, 0x8000000000000000}, {0x2, 0x80}}, 0x0)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r3, 0x0, 0x400000000006)
statmount$auto(&(0x7f0000000000)={0x154, @inferred=r1, 0x2, 0xfffffffffffffffd, 0x4}, &(0x7f0000000700)={0x8000, 0x456f, 0x200, 0x8001, 0x7, 0x2, 0x80000000, 0x0, 0x1, 0x1, 0x8, 0x4, 0x1a32, 0x5, 0x4, 0x4, 0xe3, 0x4, 0x1000, 0x80000001, 0x10000000, 0xff, 0x0, 0x8000, 0xe, 0x7, 0x7b, 0x5, 0x7, 0x3, 0x9, [0x100000000, 0x1000, 0xfff, 0x6, 0x10000, 0x7, 0x3ff, 0x1, 0x9, 0x10, 0x9, 0x8, 0x5, 0x103, 0x767, 0x6, 0x2, 0x7, 0x2, 0xeec, 0x10, 0xf, 0x0, 0x4, 0x7fff, 0x0, 0x9, 0x3, 0x8f37, 0x7fff, 0x6, 0x7ff, 0x2, 0x45a4, 0xbf2, 0xd53d, 0x5de, 0xa, 0x9, 0x1, 0xf, 0x9, 0x134b], "0c7562bdc8d7ead5b2c895979e7a167086f637a07622caebb9e66be11625e1fd60fd821d0a21e17ad32faff93f70c9387778c92de6b1319d6f36c07369b427fcce9e68be603ca7bcf2eb"}, 0x9, 0x80)
r4 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x40800, 0x0)
ioctl$auto_FIONREAD(r4, 0x541b, 0x0)
r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r5, &(0x7f0000000140)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa95f757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce319330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0cc2dfe7bfe60f2c9fa95fc93cc906a80aec437a39cd0672a169c151550a062a76e472626", 0x90)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb2, 0xffffffffffffffff, 0x8000)

1m58.165787478s ago: executing program 6 (id=1592):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r0 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000100)={@_si_pad}, 0x9, &(0x7f0000000180)={{0x7}, {0x10000, 0x91}, 0x4, 0x0, 0xd33, 0x83, 0x100000001, 0x6, 0x7, 0x1, 0x6b1, 0x9, 0x3, 0x4, 0x8, 0x6})
mmap$auto(0x0, 0x100000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2a, 0x80002, 0x73)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
open(0x0, 0x64842, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
mprotect$auto(0x200000000000, 0x1f, 0x5)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0)
statmount$auto(&(0x7f00000000c0)={0x5, @inferred=r1, 0x93c8, 0x8, 0x1}, &(0x7f0000000400)={0x8, 0xc, 0xffffffffffff6a0f, 0x4, 0x4, 0x559, 0x3, 0x9, 0x7, 0xffffffff, 0x0, 0x7fffffff, 0x32, 0x40, 0x4, 0x3, 0x1, 0x2, 0x200, 0x0, 0x3, 0x0, 0x5, 0x2, 0x2, 0x3, 0x22b, 0x7, 0xc, 0x6, 0x4b4a, [0x3, 0x401, 0x4, 0x2, 0x4, 0x3, 0xd1, 0x3, 0x6, 0x7fffffff, 0x9, 0x400, 0x6053, 0x1, 0x2, 0x7, 0x8, 0x80000000, 0x2b970f48, 0x9, 0x2, 0xfffffffffffffc01, 0x5, 0x9, 0xfffffffffffffff7, 0x7, 0xffffffff, 0x3, 0x4, 0x1, 0x8, 0x67, 0xefa5, 0x100, 0x7, 0x0, 0x766, 0x7f, 0x8580, 0xf, 0x3, 0xffffffffffff7fff, 0xfffffffffffffffc], "70b04fc1a188144bdf8be358f7cd5cd20fb1410d50398bb3b6c46a6b3d90d4391162f3f296fc8dab530a23dc86fb13fb2c73b9239ec2378d320e98de00b9625ba31174b925fc74e6531a982c738403609a6b7987b1e51be031bf94dc7e636bcf4161141cc0cc4e66c4c836fa174f9c750ec73e47fd52063eb101fae1e5fa5f71a788e768ad558de0af7b15bf2fe21ab09aa9d238a7ab0a96cc9fc223b3b4e672e49d0197fc9810622f142042759468"}, 0x0, 0xff)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000003c0)='4', 0x1)
unshare$auto(0x40000080)
r5 = socket(0xa, 0x3, 0x3a)
socket(0x3, 0x5, 0x0)
ioctl$auto(r5, 0x8982, 0x1)
r6 = prctl$auto(0x3a, 0x2, r0, 0x5, 0x800007)
ioctl$auto_TIOCVHANGUP2(r2, 0x5437, &(0x7f0000000240)="eb29a1bdf837a9089d75759dba050ece00cfc568ca90b9f728918c5d1fcdfe837c6fd37541f6e3c83488d07f7a2cbf0996968f58c7071986ce8bdebe378d9ede0075d82a3a09c426029f114826ab430a5b633c2204835b6c283e11c6539e3e1861b5519fc797413ac9324fbfa678ec1501453c13695a7486d94b")
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r6)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0)
write$auto(r7, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
io_setup$auto(0xe, &(0x7f0000000080))

1m42.632813869s ago: executing program 37 (id=1592):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r0 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000100)={@_si_pad}, 0x9, &(0x7f0000000180)={{0x7}, {0x10000, 0x91}, 0x4, 0x0, 0xd33, 0x83, 0x100000001, 0x6, 0x7, 0x1, 0x6b1, 0x9, 0x3, 0x4, 0x8, 0x6})
mmap$auto(0x0, 0x100000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2a, 0x80002, 0x73)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
open(0x0, 0x64842, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
mprotect$auto(0x200000000000, 0x1f, 0x5)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0)
statmount$auto(&(0x7f00000000c0)={0x5, @inferred=r1, 0x93c8, 0x8, 0x1}, &(0x7f0000000400)={0x8, 0xc, 0xffffffffffff6a0f, 0x4, 0x4, 0x559, 0x3, 0x9, 0x7, 0xffffffff, 0x0, 0x7fffffff, 0x32, 0x40, 0x4, 0x3, 0x1, 0x2, 0x200, 0x0, 0x3, 0x0, 0x5, 0x2, 0x2, 0x3, 0x22b, 0x7, 0xc, 0x6, 0x4b4a, [0x3, 0x401, 0x4, 0x2, 0x4, 0x3, 0xd1, 0x3, 0x6, 0x7fffffff, 0x9, 0x400, 0x6053, 0x1, 0x2, 0x7, 0x8, 0x80000000, 0x2b970f48, 0x9, 0x2, 0xfffffffffffffc01, 0x5, 0x9, 0xfffffffffffffff7, 0x7, 0xffffffff, 0x3, 0x4, 0x1, 0x8, 0x67, 0xefa5, 0x100, 0x7, 0x0, 0x766, 0x7f, 0x8580, 0xf, 0x3, 0xffffffffffff7fff, 0xfffffffffffffffc], "70b04fc1a188144bdf8be358f7cd5cd20fb1410d50398bb3b6c46a6b3d90d4391162f3f296fc8dab530a23dc86fb13fb2c73b9239ec2378d320e98de00b9625ba31174b925fc74e6531a982c738403609a6b7987b1e51be031bf94dc7e636bcf4161141cc0cc4e66c4c836fa174f9c750ec73e47fd52063eb101fae1e5fa5f71a788e768ad558de0af7b15bf2fe21ab09aa9d238a7ab0a96cc9fc223b3b4e672e49d0197fc9810622f142042759468"}, 0x0, 0xff)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000003c0)='4', 0x1)
unshare$auto(0x40000080)
r5 = socket(0xa, 0x3, 0x3a)
socket(0x3, 0x5, 0x0)
ioctl$auto(r5, 0x8982, 0x1)
r6 = prctl$auto(0x3a, 0x2, r0, 0x5, 0x800007)
ioctl$auto_TIOCVHANGUP2(r2, 0x5437, &(0x7f0000000240)="eb29a1bdf837a9089d75759dba050ece00cfc568ca90b9f728918c5d1fcdfe837c6fd37541f6e3c83488d07f7a2cbf0996968f58c7071986ce8bdebe378d9ede0075d82a3a09c426029f114826ab430a5b633c2204835b6c283e11c6539e3e1861b5519fc797413ac9324fbfa678ec1501453c13695a7486d94b")
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r6)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0)
write$auto(r7, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
io_setup$auto(0xe, &(0x7f0000000080))

1m11.398250525s ago: executing program 9 (id=1680):
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0)
r2 = getpgid$auto(0x0)
r3 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x8000101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x80003}})
io_uring_register$auto(r3, 0x15, 0x0, 0x9)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0)
capget$auto(&(0x7f0000000100)={0x6, <r5=>0x0}, &(0x7f0000000140)={0x8000, 0x3, 0x9})
r6 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/clk/clk_orphan_dump\x00', 0x400, 0x0)
sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3cc, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x6c, 0x30, 0x0, 0x1, [@nested={0x65, 0x61, 0x0, 0x1, [@nested={0x4, 0xe8}, @nested={0x4, 0x45}, @generic="5dbf6c2b84f735969d422178b0c8b2d5fdf4c4dd675b3156e666fcc8d7d13d73eb4eed4e9bd0bff843517ef4b1bfe4b2791e1e2c3b3b2fb21e754b8ea8b7bcde7aa19e22ec11cf1668316d1f3345c3a48fbb9b33cc7febac7d"]}]}, @NL802154_ATTR_SEC_LEVEL={0x21f, 0x2d, 0x0, 0x1, [@nested={0xe8, 0x24, 0x0, 0x1, [@nested={0x4, 0x29}, @generic="6fc4e658e7877309ad610c7ff033c2b9e43733a4eb69a9ff8642be4a4685ed04d5d0a5c09a9ccee2ff8e494478481903d6b237573c3d61718f59ef96663e1acff480a644725a603d9de25aa031e6303bb585d7cc780573eafd4b5e0fc9b013a6eea3eaab7195b17abe3da3d902817c67da4440214c948288d794462253d5c2daff5028df90b0268d4340d00bca55c708b9d794b92b007ae471da8b2792d3318f71a5e423867ac7d6679bf56fa07c1c3d7d5df3ed2d1e997e7b4b6f265554e314ff8f6c218406dc79ec5216160ca4eb67a8523407786dc723ef37bdbfb96020ae"]}, @generic="f878d6f7894a9dc08a3a49a2f42d6aba6fb42a613da3434e9da37bc9ea0daf1369a41fc83e4342626658939a3351eecc75289d186d19a686", @typed={0x8, 0x158, 0x0, 0x0, @pid=r2}, @typed={0xc, 0xe4, 0x0, 0x0, @str='\x00%-#z&-\x00'}, @generic="d21579195c140954822d027c9611e5c65bd761c07fec6a4892189ed001305efc9f2394f6b25a51ac4450f9848ec484b44da1f649ed5980f0e5b622b5d2149d0113a1fa94a0d8f51de65e1638a5ede76272a1db84a33b9abf9ae4c9f075925dc8c244d6a9457477310761c631ae02d5dbfc4c8ebecb9f81fe07993b23b090b8d5", @generic="8276d81711e87d4df72aeb3d585545f98746e5b900ab4ed3ec4d28051bbb903009f0f5428cac2715af2af1de1e5c9cbe1b690261d24d5699e75c6f7e9e960bb1107ee09783310718ba0c3c939718b4471799b59a910a4d33d39f0a44effea074daec1f9e68b060"]}, @NL802154_ATTR_SEC_DEVKEY={0x123, 0x2f, 0x0, 0x1, [@generic="375c549b121e8959cd4f2d8a8f2fb9ba61f9cbdf0a2d5a4cb05fe194f2cd650a481e05c5bd09dac5ec4dc21bffea9c2c7c215a1cba4c472162e249494961d2525aec33f0bbc33b9e4090ebccde53a8ce473abb48babe8dc710c3e6b945d8b79878c60da64ce01b", @nested={0x4, 0xdf}, @typed={0x4, 0xe}, @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xa6, 0x53, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @fd=r3}, @generic="9999b0d5bac176f7fd6439657f5de58a561a7a4e98279f1a9f3ecfc74fa526b3c54054c48bb12009f5278aa87cc1584de2cafebc729390584ce728012055512d51a973bcdb54e4d1055152ebb50cec8223206f8d864008f6b68e17ad", @typed={0x8, 0x107, 0x0, 0x0, @pid=r4}, @nested={0x4, 0xbd}, @typed={0x8, 0x113, 0x0, 0x0, @pid=r5}, @generic="03f3f96b0d5fce15e066c317fff21502f105a1f1c282", @nested={0x4, 0x147}, @typed={0x8, 0x14b, 0x0, 0x0, @fd=r6}, @nested={0x4, 0x12d}, @typed={0x4, 0x3a}]}]}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x9}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040045)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
r8 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
read$auto(r8, 0x0, 0x80000000006)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r9, &(0x7f0000000200)='5', 0x1)
signalfd$auto(r8, 0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
r10 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r10)
ioctl$auto_KVM_GET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x2ff, 0x2, 0x40001}]})

1m10.271745054s ago: executing program 9 (id=1683):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0)
r1 = socket(0x29, 0x2, 0x0)
ioctl$auto(r1, 0x89f0, 0x24)
socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000080)=0x9b)
io_uring_setup$auto(0x100, &(0x7f0000000000)={0x77, 0x0, 0x4e, 0x9, 0x10, 0xffff7fff, 0xffffffffffffffff, [0x80, 0x3, 0xc3], {0x3, 0x7, 0x0, 0x5, 0x5, 0x52, 0x6, 0x8}, {0x7ff, 0xffff120d, 0x3, 0x5, 0x3e, 0xf, 0x9, 0x400, 0x1}})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)

1m9.142081347s ago: executing program 9 (id=1686):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0xa0840, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa201, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x60581, 0x0)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
msync$auto(0x110c230000, 0x200001, 0x6)

1m7.892628034s ago: executing program 9 (id=1689):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x49, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x1)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
preadv$auto(r0, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x5, 0xc, 0x1)
sendfile$auto(r1, r1, 0x0, 0x2)

1m5.709467618s ago: executing program 9 (id=1693):
mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf25140000000c0001c008000100", @ANYRES32=r3, @ANYBLOB="05000c000a00000020001e801c00018008000200010000000800020080430000080003"], 0x48}, 0x1, 0x0, 0x0, 0x44845}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0)
memfd_secret$auto(0x0)
setsockopt$auto_SO_RCVBUFFORCE(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)='&+#\x00', 0x4)
mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nullb0/queue/write_cache\x00', 0x10b142, 0x0)
write$auto_dfs_sched_itmt_fops_itmt(r4, &(0x7f0000000000)="9c28ac6f0fd5", 0x6)
mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70)
mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d)
close_range$auto(0x2, 0x8, 0x0)
mkdir$auto(&(0x7f0000000000)='./file0/file1\x00', 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto_proc_uid_map_operations_base(0xffffffffffffffff, &(0x7f0000000080)="0ddcadb296709f760352414b2598b4ed161acd8e12657f02147952c253419f4377d4f186291e2659dc096d7193", 0x2d)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)

1m4.193713371s ago: executing program 9 (id=1695):
statmount$auto(0x0, 0x0, 0x200, 0x81)
setfsuid$auto(0xee00)
sysfs$auto(0x2, 0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
write$auto(0x3, 0x0, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
statmount$auto(&(0x7f0000000000)={0x154, @inferred=r0, 0x2, 0xfffffffffffffffd, 0x4}, &(0x7f0000000700)={0x8000, 0x456f, 0x0, 0x8001, 0x7, 0x2, 0x80000000, 0x0, 0x1, 0x1, 0x8, 0x4, 0x1a32, 0x5, 0x4, 0x4, 0xe3, 0x4, 0x1000, 0x80000001, 0x10000000, 0xff, 0x0, 0x8000, 0xe, 0x7, 0x7b, 0x5, 0x7, 0x3, 0x9, [0x100000000, 0x1000, 0xfff, 0x6, 0x10000, 0x7, 0x3ff, 0x1, 0x9, 0x10, 0x9, 0x8, 0x5, 0x100, 0x765, 0x6, 0x2, 0x7, 0x2, 0xeec, 0x10, 0xf, 0x0, 0x4, 0x7fff, 0x0, 0x3, 0x3, 0x8f37, 0x7fff, 0x6, 0x7ff, 0x2, 0x45a3, 0xbf2, 0xd53d, 0x8, 0xa, 0x9, 0x1, 0xf, 0x9, 0x134b], "0c7562bdc8d7ead5b2c895979e7a167086f637a07622caebb9e66be11625e1fd60fd821d0a21e17ad32faff93f70c9387778c92de6b1319d6f36c07369b427fcce9e68be603ca7bcf2eb"}, 0x9, 0x80)
r2 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x40800, 0x0)
ioctl$auto_FIONREAD(r2, 0x541b, 0x0)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x100, 0x0)
pread64$auto(r4, 0x0, 0x0, 0x3)
setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x90)
write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000140)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa958befca9295fc16f1ea608c6cf757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce311330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0cc2dfe7bfe60f2c9fa95fc93cc906a80aec437a39cd0672a", 0x90)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000)
r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r5, 0x0)
unshare$auto(0x40000080)

48.811161515s ago: executing program 38 (id=1695):
statmount$auto(0x0, 0x0, 0x200, 0x81)
setfsuid$auto(0xee00)
sysfs$auto(0x2, 0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
write$auto(0x3, 0x0, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
statmount$auto(&(0x7f0000000000)={0x154, @inferred=r0, 0x2, 0xfffffffffffffffd, 0x4}, &(0x7f0000000700)={0x8000, 0x456f, 0x0, 0x8001, 0x7, 0x2, 0x80000000, 0x0, 0x1, 0x1, 0x8, 0x4, 0x1a32, 0x5, 0x4, 0x4, 0xe3, 0x4, 0x1000, 0x80000001, 0x10000000, 0xff, 0x0, 0x8000, 0xe, 0x7, 0x7b, 0x5, 0x7, 0x3, 0x9, [0x100000000, 0x1000, 0xfff, 0x6, 0x10000, 0x7, 0x3ff, 0x1, 0x9, 0x10, 0x9, 0x8, 0x5, 0x100, 0x765, 0x6, 0x2, 0x7, 0x2, 0xeec, 0x10, 0xf, 0x0, 0x4, 0x7fff, 0x0, 0x3, 0x3, 0x8f37, 0x7fff, 0x6, 0x7ff, 0x2, 0x45a3, 0xbf2, 0xd53d, 0x8, 0xa, 0x9, 0x1, 0xf, 0x9, 0x134b], "0c7562bdc8d7ead5b2c895979e7a167086f637a07622caebb9e66be11625e1fd60fd821d0a21e17ad32faff93f70c9387778c92de6b1319d6f36c07369b427fcce9e68be603ca7bcf2eb"}, 0x9, 0x80)
r2 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x40800, 0x0)
ioctl$auto_FIONREAD(r2, 0x541b, 0x0)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x100, 0x0)
pread64$auto(r4, 0x0, 0x0, 0x3)
setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x90)
write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000140)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa958befca9295fc16f1ea608c6cf757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce311330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0cc2dfe7bfe60f2c9fa95fc93cc906a80aec437a39cd0672a", 0x90)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000)
r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r5, 0x0)
unshare$auto(0x40000080)

11.046114569s ago: executing program 4 (id=1775):
r0 = open(&(0x7f0000001380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103040, 0xd1)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x28000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c01, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r3, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c)
ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR322(r1, 0xc0844123, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x601, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socket(0xa, 0x5, 0x0)
ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x20002, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x1d7)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$auto(0x3, 0x80106f53, 0xffffffffffffffff)

10.536438077s ago: executing program 4 (id=1768):
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7)
futimesat$auto(r0, 0x0, 0x0) (async)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vgem/gem_names\x00', 0x62000, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x22, 0x2, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) (async)
r1 = socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c000980"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf25020000000800030000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r3, 0x0, 0x20) (async)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x3}, 0x3)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syz_tun\x00', <r4=>0x0}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100cda4429629bd7100f9db5f250200000000", @ANYRESOCT=r5], 0x24}, 0x1, 0x0, 0x0, 0x2c0080c0}, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'pimreg\x00', <r7=>0x0})
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="70010000", @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf251c00000034000180140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d30000000000000000000000030000180080003000a00000008000100", @ANYRES32=0x0, @ANYBLOB="00000100", @ANYRES32=r7, @ANYBLOB="08000300090000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d3672656700000000000000000058fd02007663616e3000000000000000000000000c00018008000300090000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="1c000180880001801400020062617461647630000000000000000000140002007866726d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="140002007465616d5f736c6176655f480000000008000100", @ANYRES32=r6, @ANYBLOB="00000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="140002006970766c616e30000000000000000000"], 0x170}, 0x1, 0x0, 0x0, 0x80001}, 0x4000) (async)
accept$auto(r3, 0x0, 0x0)
mount$auto(&(0x7f0000000180)='pim6reg\x00', 0x0, &(0x7f0000000240)='/proc/thr^Id-3elf/fail-nth\x00', 0x4, &(0x7f0000000280)) (async)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r3], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

9.698857101s ago: executing program 4 (id=1770):
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
writev$auto(0xc8, &(0x7f00000028c0)={0x0, 0xffffffff}, 0x9)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
write$auto(0xffffffffffffffff, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x4a)
prctl$auto_PR_SET_TSC(0x1a, 0x2f, 0xf, 0x9, 0x9)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/021/001\x00', 0x80802, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/tty44\x00', 0x282080, 0x0)
r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
read$auto(r2, 0x0, 0x80000000006)
signalfd$auto(r2, 0x0, 0x8)
mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
ioctl$auto_USBDEVFS_DISCSIGNAL32(r1, 0x8008550e, &(0x7f0000000040)={0xfffffff7})
ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x40103d02, 0x0)
ppoll$auto(&(0x7f0000000200)={0xffffffffffffffff, 0x23ff, 0x104}, 0xd9, 0x0, 0x0, 0x8)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r5, r5, 0x0, 0x3)

9.179352767s ago: executing program 7 (id=1773):
pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00?\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39)

8.89388605s ago: executing program 7 (id=1774):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x49, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x1)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
preadv$auto(r0, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x5, 0xc, 0x1)
sendfile$auto(r1, r1, 0x0, 0x2)

8.247461863s ago: executing program 8 (id=1776):
r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0)
read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x0)
ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0x0)

7.155923981s ago: executing program 8 (id=1778):
r0 = open(&(0x7f0000001380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103040, 0xd1)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x28000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c01, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r3, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c)
ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR322(r1, 0xc0844123, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x601, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socket(0xa, 0x5, 0x0)
ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x20002, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x1d7)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$auto(0x3, 0x80106f53, 0xffffffffffffffff)

7.155080902s ago: executing program 4 (id=1786):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x8001, 0x1, 0x0, 0x1, 0x1)
write$auto(r0, &(0x7f0000000440)='\fE8\xdc\xd7[\xbd\xfbev/audi\x03\x00\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffHP\x97)\xcf\a\xfb\\j\x89C:\x84D\x1du\xb4\x9ab\xda\xa7tU\x14\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2c, 0x1, 0x0)
listen$auto(0x3, 0x81)
socket(0x2c, 0x6, 0xfffffffd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
r3 = fsopen$auto(0x0, 0x1)
prctl$auto(0x1000000003b, 0x3, 0x0, 0x7, 0x20007)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r4 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
shutdown$auto(0x200000003, 0x2)
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0)
madvise$auto(0x0, 0x2003f2, 0x15)
ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000040)=[{0x5, 0xc, 0x800}, {0x6, 0x1, 0xf9fe}, {0x8, 0x8, 0xc39}])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000001c0), r5)
sendmsg$auto_NET_SHAPER_CMD_GET(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x19ad8aee87c48d7e}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00,', @ANYRES16=r7, @ANYBLOB="000425bd7000fddbdf25010000002c00018008000200010000000800020009000000080001000100008008000200040000000800020009000000"], 0x40}}, 0x4000010)
statx$auto(r4, &(0x7f00000002c0)='./file0\x00', 0x5f, 0xfffffffb, &(0x7f0000000300)={0x3, 0x9c3, 0x8, 0x7, 0x0, 0x0, 0x6, 0x9, 0x1, 0xffffffffffffff01, 0x9b, 0x7ff, {0x4b, 0x1}, {0xffffffff, 0x10}, {0x4, 0x5}, {0x70, 0x2}, 0x10, 0x5b9, 0x7, 0x0, 0x8c, 0x5, 0x65, 0x4, 0x4, 0x87, 0x7, 0x2, [0x80000001, 0x9, 0x4, 0x6c45, 0x2, 0x1, 0x0, 0x80000000, 0x5]})
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
mmap$auto(0x2, 0xffffffbffffffffd, 0x4000000000df, 0x1c, r1, 0x300000000000)
socket(0x1d, 0x3, 0x9fc)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r8, r8, 0x0, 0x3)
close_range$auto(0x2, 0x8, 0x0)

6.702760116s ago: executing program 8 (id=1779):
r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
waitid$auto(0x400, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0xff, 0xfffff3ad, 0x4, @_rt={<r1=>0xffffffffffffffff, 0xee01, @sival_ptr=&(0x7f0000000040)="fb93dcbfe92993d45f89dc3cfc83bf944cd2318fe9e1b82ec41b4864e9ebf872294082eb13d500be37b87289f093dcb45c19be8d25428664de05599e3a96d1e699527f22ef247461724ccca70f22095799dfc2229d10af49f265af8567f7b6abbdc4373690f2aef36b13f7611e086182642cd6f6a3991067e0df142899c9edba048b513c92668216577aa8bf6205f0192fbfcb020f5c5231fc1aa0d8f681446be79a860569fe4fc2ae0c3be4bd968e6cd2"}}}, 0x4, &(0x7f0000000180)={{0x80}, {0x9, 0x7fffffff}, 0x40, 0x100, 0x6, 0x6, 0x8, 0x76e7a56a, 0x6, 0x4, 0x80000000, 0x80, 0x64, 0xd06c, 0x8, 0x6})
bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f0000000240)=@link_create={@prog_fd=<r2=>0xffffffffffffffff, @target_fd=<r3=>r0, 0x0, 0x4, @uprobe_multi={0x5, 0x188, 0x1, 0x4, 0x0, 0x894, r1}}, 0x12a8)
getsockopt$auto_SO_TXREHASH(r0, 0x8, 0x4a, &(0x7f0000000300)='/dev/rfkill\x00', &(0x7f0000000340)=0x6)
write$auto(r0, &(0x7f0000000380)='/dev/rfkill\x00', 0x1)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x400000, 0x0)
r5 = epoll_create$auto(0x8)
r6 = openat2$auto(r5, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x5, 0x80, 0x7}, 0xfffffffffffffff9)
ioctl$auto_XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000001600)={<r7=>0xffffffffffffffff, &(0x7f0000000480)="37212394d4ab5105c5930d70e7bd34f1c28af9666bdc985d6f928edd7c5cb8210a91e9aceae14fa23b18957e705ac098f633be3faf6f9770d21f7b78bdd5a609aaae", 0x3, &(0x7f0000000500)="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", 0x581, &(0x7f0000001500)="480e0d0f22642a1e33bd660da4631868c36a44d09afe342b707e4fe6ea8b3d92cf975111120cd863d1b73a04fa22cd76891d1c0ec58f4bc1db7291c22f74db3e06483faf9f60c0eb75c35ea1341114830e52adacbdaad2429c56d0b10af23137c39fd27f5abdb6e1e9a91cd45c56d2f9b5bdd6e25eddd448fa2b4b9668f5a6f3daedf311f00a6e08f3042270eae85d692b3c26a30b38803f3a029567a900ffc4bc3e53", &(0x7f00000015c0)=0x3})
getsockopt$auto_SO_ERROR(r7, 0x10000, 0x4, &(0x7f0000001640)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', &(0x7f0000001680)=0x95)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto_SO_RESERVE_MEM(r5, 0x3ff, 0x49, &(0x7f00000016c0)='\x00', 0x5)
waitid$auto_P_ALL(0x0, 0x0, &(0x7f0000001700)={@_si_pad}, 0x3, &(0x7f0000001780)={{0x4, 0x8000000000000001}, {0x4, 0x100000000}, 0xffffffffffffffff, 0x3, 0x949, 0x3, 0x2, 0x0, 0x71b2, 0x2b33, 0xfd5, 0x5, 0x34f, 0x2, 0x5, 0xffffffffffffffff})
getcwd$auto(&(0x7f0000001840)='%\x00', 0x1e7f)
r9 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000018c0), r5)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000001980)={&(0x7f0000001880), 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r9, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044080}, 0x40000)
fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r6, 0x2a0c, &(0x7f00000019c0)='/dev/rfkill\x00', &(0x7f0000001a00)="73bcbded7fbf37bfe666ce3e5344c1e877ac04b328b4cc974a0966eaa2153e37a9cee72e4f2a1983b56fa4b9480b7953aa1d55f7f439d44a", 0x5)
write$auto_vhost_net_fops_net(r3, &(0x7f0000001a40), 0x0)
recvmmsg$auto(r2, &(0x7f0000002b80)={{&(0x7f0000001a80)="ae9b2d0ee42a", 0x8, &(0x7f0000001b40)={&(0x7f0000001ac0)="67b1f4a5e26526df7c1bef515202e3cddc8b8faa0773ec884de711803b0627a3b06d845b97d96ad07b6582a196863e6f07cdce77f4a23e3d34aea8a86e2538b96f005b63a1dc2aaae1124a9cc6326c6c4ebc42a25a6be3e8d9e8ecebfedcfd430259463bc449a3ba51b23b25b67f27", 0x7}, 0x5, &(0x7f0000001b80)="309aba6e0393caf8d8de4b54e12ef5c3d77dc35207ac8fd3b159145005d2ac44b80925740c8b351087311b30fb68933fad09d1efa67bafc110efaa201d50920b64f750f969b6e60749905ecc970ec6a53d16ea1b394e8d4217dfeeae8af0f8940b6063077b131c0a0167951a5f373b792692a172bec7d15dfe660f9952faf868dddf806cb26318f61e7bce20c9557f6e2403840ee1786410d67269e417dc328f44106d90d2f8378e65a0d4fce7e71b3bed070c0d59e01a6424143de552486d67c511d01759407466b2ef251792ceb557c80995b7fa74b1e70a98bffd846a739b5523d74f28252d70c1d6193e4d9394281f9a98d873ff666fb12165f17bfa2ee3265d3a075437d87bc2319c9c2f2ec445d5579e496c859e47b029cb62665c288077fd11ccce0cb42e33f96f869fd1a1897d05bca79cf33faea55bf8987c66640956cc70568b540e8555bcc68780cdd27f072828a0270cbe1248ab4055febb13c40fd268b5c263e212fa1112c6a611d21f5ba397a643604fb6bd3dbc0ad3b1f2325a0bcb142f7cb4501d3525f6ff21384cad9ec8f718b71740abeb12182a303f2283633b2dddc8a7b33af0f61f53bc957b9abe6417ad28ef2bc739eb3b63864cafb7cc1f0111a13b0d3519ad521183022e0750c8661e08dca275971981c5bd9d2ef207b119266225a68cecfde5dc008562eca825bb1c05b1bd1bc84905c79a7aa6a85ba1bf7c246debcb48facfc1f760b184bde479775b04a6f2b6d3dad963dd6ded447cd703dc85f9aa5106f60d476f721d3d2f7e381dc8f7d18e64526f79b98d757ce2b9eb9e4d86ea6aa49c52ce18a02f0d4c98c79dc600fd1c7bb1e7eecf021ac1962b33f10597f093002184f37eea42d32470625237946c0f61189852558b288018a4317970d6e8d96eb77367f19f3b2cfa7290de3dc440c7564347912c9d43fd9731aefebe60d00ab7a927f1d57d396e7f747b6a0bbe93299e80104b51a1dbfec6df2ac932f1935c534a739e007242583fddc9e3fe397345b2ff4c0aecdf0d87bd7bca36fffb1d43b8e3d6452bc232761692928a73fb19f6d015c20f90ca725a38f7b35393165defc430ece2d667adb568faa0968991ff092e4d172f5e26c254d43eb9ebc1b79517ce66a88fbba57683fb764bb4c390926a4f8a6080e3c495f58d58a4668d8acdeaccb1e504a1d9280e5456b9520effa7505b209781b13ffe6915a0cf9f18893199b8aae0ac34a55ab90b03b0d238b5c1bcf6667ead74f5e7539ff37d16816b8ddb9601e93adcd391e528b49871281632e171eb1dd770486bac8386c79f649281074ed710191134c56c9ebe3e6d11060c115fb6653ab6e44fa12441d85e7d06d0a5f04491e36aac4473a4093f7a7fef2e4f6727fc65d15b7e0e6d6e597e341c6f993bb1208556997dd57fd532e177abe6305ce3131567af266da4f35b393eaeeb0f1524d2578a2a89d672e51fa37f5a4f482a28b739928d34ccb7799cdca3beaaac5b3fd0195d65768bbbf347968e374faf98932346bdadad289c22d9715a4f7d904f2c8be6e3d06dbbb0a95d5523a85217f0944c60aa4a34c9cdd17b263eda47a21f1d18f73235fce2e28cfbd4460b400574920ebe1a22e9d6900edf36cce307c7b203aeed1f923317d2d810450e52f9f22d057aa3c7524f749f1453e5f71380d77dc3b936779f56b8444a248e9f62affdb936c6df1c2bf65b97d2b04304029a0c33e4aae325f8b8731286940ff2ea1531bd8997e76f932c5c18d583b05168c89d06da8eee040c887980fe4d974374e4c6dc82434d229a9614072ed4f14147b59eda84d4e893a01da5e21f5e66f8d1d78a90266f23f8662950b69cae529412b7a3939ec7b8abd5e574aa805d9b1517035daca849bdf96bed340685294691ab7a07926fd84e09ef24c3bb2fac4c6d73454ea5113b1bb1552aa6b264fdf06b80981748dd7622c857009cc46e6704b73de375ef374c761df48ad1219b78bd8cdb230e6b1d21c96391a5e54ddbc2a3c75e4d5652128391b2b587c06f773e9dd0db3dc6a4130a1c7cef60a4ca586762e49e63dcf814446b7675086b5814ea3d17d0fb67a79ae3fb8476e5015f48a4e8f8c6be9073b1911ed80d4b57668f9c157a7fc5ab33a7c374bb01785511b046abc78349398824b1ff3770b80bff489db22ac57c329eec9c5481e70635d3459be6f84d5915543fbf8acde24141e7ba7ddb6cc877c7cf2209dacf3ddace59f6172e41c3621ecb900398132ae353e204ff91b785b03f0ecd2da05676416d093967a0f178dbd7eba5853ffd2f5dc8b71668ebfb59835b727869c6463a2c9c8bd2077d4bbbc9c340ff1609affd24b716604a0bc262ea3fb5c051aadc948045c5683206f4db8bbca18e63de7610b94207264d1df244ee9d82def8666120713869cccd614523f32d5af074b466b1b92e75457ea53d2c4182f9110c77a17258ebf754e8304857d670f9b658fe1d6e4d750f3f7e70cb008d7193219fb1b10b241e3076d4ab687472f3b1ad4a8ac60a75176a64963dbe485bc7fc415b299f8d28fd5624d63c14d9c2356964cbb98078439d078388a0e9925a8cf9fe22e482855653c77cca6fc582f934516709796dfc9af2a3dca668970a6168f9597f08a49ca36451309b42069b4c8cc2521a4f3aed8b489bde2ba8e8a617b65bbf8e18e01bd53fe7157d60bcd2e41381e19b622c708ae3393a249c8f035e5c6107b8c1de9571ce3874fc6023c6bf97e7ff7e4a16cac987cbeeafc4b26fe31e2b7add6dce9ad47471b473ba91389294aebef9a9bc8cc6239c67bd39e2dd3a3b0ad1123c0c664e7e9cdd4936e321a230b946872a6c2b447a876f12750c6c65418d1b7fbb8fc3539a51d2e245cf1956e08317b2526738cc93966e14a587a63b1607bbcac77a26ae3f70d2c77bdc212454db41add19fa8f981114161ed0d10416acf4d5f50306579a3e5ac6c8166a822cd3d8b1dfbf1ceddbde3649145ef8b2d2cdc14dbc47ae652aba2ea886eece143e98dab59b6785da8a2adeee3c60782ceea795ea69c3740225f8e37c424f641bc6cf51b4a5bfb225dbdf965f0e928339ab3368bbb6b9f063ee4d950696660f12229ed649fccebc2e854d33705b3e5d305ce64159fd4c15737d2c1328fa03c8e46cec4b0badb9d2b638b8bda9f6e141594050c188440e4e92852f6a4e409f4aba07b3a20dac239301e65dfe6e80b98ce6058f10bf164bfec7009e2b9760750982807d0f1f9f5cc49055bc19eefd58abdb6d9be7c7e1472d870355f63cf59c87ad496067b70317834542485ef7704a81da41e65e8b84e44f793f0d5fa71aa45e3803b20284b7dbe7dda88e2641c3881f419b6eedd3dce0715ed0d34b70ffab9617fdfda269fa1cfeffebc10382846b647a8402be9d4f844a15bfec7832af7a0c9b8384f451827147bde2ae217d8adb650ceb66b18ffcde151762439c3d4b66b2268eb1b3f0429683af9e2c180b80170c15a1b836c6c44688f2739846f7a0b4f3160c7207e64dac24ca0d3b1ecdb78475444a28e52c99af6726b4aa0083a5c41f82915e6a87ab1b06fcd628d1b40740d52070283f3e2b957aaff56d9db470bd2586548576f55072f88733cf8927d287634b65482ae5ec890a0be77103559810e1c516597b8263aa038fc0d9d1d9cb13703b5de6719b87d97c6b2f101ce255b254a4e5e64ed12247989711a60e86f7e16aa250e569fe3db4012182c5ac5aaec51d8d49dcda12fa507d3a9837b485c96a0f577869ba5ed1ac87e2f6e8ed8b40567da9c8482d8ba73a13d236c4028713808e1348785af95488d8d1fc4d64e983f56d91e0c418813f19cbe0e5989ca09c341994f4400f6047e0fbae69bcd49eea4e2b4aae8c6dd23e5a21031d4276735818e1d1bd926c71b9c1ae5ab2e0b7510d1ba03c03abdd9aec4bc532f64b091f26390dcac5fa1a2131ab8ef53a6b2f782a0652f7cf46622bfce7c3ffed28ede8f2cdfd726c95df744165e675b356e8732bab6bd027a053c89fbf4f42b4951b0a46d97a2215e7d1bf80b24c98af3b18127905dd87ef0ff42dbf1aeb62b91d8e9dabe2986a340695652d211ea9254d3d7efc0163fb1f6ff5095b024466edaca4a9b34aa08b192194bb6a17e780909e64ba22510748b7d020bd6664e1da2b55d06dc5c230cf8016d3b26ff6b342ef967b2d2b61c891c54afd12c54c668160128f3861a336f900ce97f571a078acb421098c5c324c0782a6ba098d46e0e77f6d4f58fa4ec8bf4d5d19bd56887fe0ff958525fd54b46566a1f3eee2f18f90f8e46e323c72288b92b52bda68f153378682884475e86f9c7c79fa5cc7b54b1d115276bf8f361c04a0061d367275da479834108eade5e3f9f4648c2d10763ff3a0c2149007a0efb6091cdced77f6d5f3fcc528c0ce565c0b80806f7cda97af12b180ff2f534e364da01e3e2fc329cad0c056c1ff5ac168fcefbb0be5d815a85268be651ff66f4cc9334a45d182550e3bd7e0f24cca951fb6e484b3f8657da7a85a62682fdd928c653f296ba886e2d000fa384836202a7716a5dee7f60a088dd4e8fe1d630e960429773f393ac6c66de9471c7d2dfd8f2080c5dae18245feeb00d478b6d2f65b89b4713cf59ba61529e7c06cf88fbf77f880f77ae8c0e77a5ab6b4f21c98b68b77fcedb19b4877cbd37bde5dddf2279a14094fbb465af434e248c0133314789f7d63ec8bea424dc363a4c9e5e160fdaa70ca911dd84b90a388f78a1eb778a78fc7a19c50e635eecec0f2d4582321bba7ece351e6a7c9394d39dc4ef5d44f09dc1121f59ab1a128598ce98de0f91925b635f594124a2b178729b809be4fb4cd4843c582bf2f5d5bce8b5ba9413190cb623f74799702e580c1a7c2c0f2eb392634b735aeb64444aaa20656e37274e135ab2a6b6533572ac36245991e78d5e418c884ab2d3b34051718a1b322266d0964729123996c38844d1b3d4b85fbc620689e1a39b26a964baa2d7f7baf4922d9240da4319491fa5bf087ef553d90cace51e0478897cb2d48b7aabd4a4d202f47fa7f1d4d37eac46094ee4d439e6d964f956e9314d7e7b0c80b7cd19679d9af9f46c497000a968567893eaad312194eebbfc659ce27bacb3ec41084788d1f44b4dd5bf52e53804fd9377e5fc9d7429a5fa3e4338fa87db110ba9c74b06ed73a4a3779689d9bfff779666366ae3bf490784f41cae60bb148cca0f1dec1ec2a3cedaaa142383a0edc3fc38bb23c2dcde13941ab18488156748aec66c59487f9c3b98f824037b61e331edc59c4c7d7d291c82f6bf8ca7993532a448e4315efe07830b581b5645639210c2acf7b0a7187465368a14bc46ddf3dbae95b47053c883890b58854fece66530bb941d5d9de1779007bb062d36b004a714ec098e99d75d6fae8c906ed578fc12741457fa6386a832dee0e98847c71258b3702d784500b8b83cec5ff58ffb97a06b6f68db60f20aca5fad089184d00223b8cb3266b300aa8fe63a8475139007bb2a92ec7397aa9a7fb304558d2effed8c7950aea3e27b534c1f9b7fd734aeed8b5559cd534d3a1ebb2d9b4dd45197632353cca1830841d559e22b00c5bf3d40ce96029e958d093a2d47d6242de991044cafe848e968440ef9ce13e9e6a2f391fadc81643048a5c48dd85a0a435d277bf6b68693342a8c0ebc78e65619cdcc3ce7ab17e365cc42f9535890947382375867ccaa62b145ba32801c5a825b55b70c4ce8c811e180817b15ec57cbdf3b512ab0dbdcfa8b94c52f8aeab961bd816b22b0de38459b", 0x3, 0x7fff}, 0x8001}, 0x61d2d355, 0xc, &(0x7f0000002bc0)={0xb417, 0x4})
io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r8, 0xa, &(0x7f0000002c00)="f022dba376c22c37c08540c0ac8fadeab20ef2c6659335d5679146999e1a27a4d8290cda45f6da5d24e889bbdf4ca308cccc55afbb6e422273", 0x400)
r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002c80), r8)
sendmsg$auto_NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x28, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SSID={0x11, 0x34, "4a67046fe3e3035c9e125cedf0"}]}, 0x28}, 0x1, 0x0, 0x0, 0x2f5ce99379a120fe}, 0x20008000)
io_submit$auto(0x4, 0x7fff, &(0x7f0000002dc0)=&(0x7f0000002d80)={0x5, 0x3d, 0x9, 0x6, 0x9, r0, 0x8, 0x100000000, 0x3, 0x0, 0x5, <r11=>r4})
mmap$auto(0x4, 0xd4c, 0x101, 0x15, r11, 0xc17f)
bind$auto(r2, &(0x7f0000002e00)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x5)
r12 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000002e40)='/sys/kernel/debug/kvm/remote_tlb_flush\x00', 0x2, 0x0)
read$auto_stat_fops_per_vm_kvm_main(r12, &(0x7f0000002e80)=""/45, 0x2d)
r13 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f00), r6)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002f40)={'team_slave_0\x00', <r14=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r6, &(0x7f0000003080)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003040)={&(0x7f0000002fc0)={0x78, r13, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x78}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x9}, @ETHTOOL_A_MODULE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_MODULE_HEADER={0x4}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x3}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x4b}, @ETHTOOL_A_MODULE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10001}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40010)

6.301379294s ago: executing program 8 (id=1780):
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r0, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x80, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x10006, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x4, 0x52, 0x1000, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}})
bind$auto(0xffffffffffffffff, 0x0, 0x66)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, <r1=>0xffffffffffffffff, 0xa, 0x6}, 0xcf)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008)
r2 = socket(0x29, 0x2, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000)
recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r2, 0x89f0, 0x24)
r4 = socket(0x29, 0x2, 0x0)
ioctl$auto(r4, 0x89f3, 0x24)
r5 = userfaultfd$auto(0x5)
ioctl$auto_BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f00000001c0)={@inferred=r1, 0x7, &(0x7f00000000c0)=0x1, 0x3, 0x4, 0x800, "a4fcfe3019e7636e18d10fd026cae1180ba1931e6f8611be0a0c6ebe"})

6.271553006s ago: executing program 0 (id=1781):
bpf$auto(0x0, &(0x7f0000000040)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x5}, 0x92)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/sem\x00', 0x88882, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
ioctl$auto(r2, 0x40084d02, r2)
getdents$auto(r1, 0x0, 0x3f1)
r3 = socket(0x10, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r4)
r6 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r6, 0x0, 0x0)
sendmsg$auto_TIPC_NL_MEDIA_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7caaf711", @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf250c0000000c00058008000100e0000001"], 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
r7 = wait4$auto(0x0, &(0x7f0000000340)=0x5, 0x6a, &(0x7f0000000540)={{0x2, 0x8}, {0x4, 0xfffffffffffffff8}, 0x9, 0x7ff, 0x2, 0x4, 0xcaa, 0x7, 0x1b9, 0xffffffffffffffff, 0x200, 0x7, 0x6d760678, 0x8, 0xf2, 0x400})
move_pages$auto(r7, 0x2, &(0x7f0000000380)=&(0x7f0000000600)="916ad9d3b08a07d606730fb661284e4c5989820fb0a2d26c4ab737874bb387e9d5ff6b8c3de3c6930fdc1f49dd0d7de17c49bc78044c02a8deee5fb81ff9dc196c436fc5c6f20dc5fbc1ea8062fcb58ef86e19e5865cb724e5e3a702e72fe8adf7f91d9e59f530a373d4aae256070e1c54e86c0a3cabcd9890bce6b0679719b0ed8293107ce0157041a1c417b21e16568b00ef4ca17570ad", &(0x7f00000006c0)=0x3, &(0x7f0000000700)=0x6, 0x4c1)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00)
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0xfff8, 0x3}, 0xb3, &(0x7f0000000180)={0x5, 0x4}, 0x0, 0x8)
fstat$auto(r0, &(0x7f0000000000)={0x9, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff94, 0x2, 0x2, 0xec, 0x4, 0x100000000, 0x6, 0x8000000000000000, 0xfffffffffffffff8, 0x1})
r8 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0)
writev$auto(r8, &(0x7f0000000280)={&(0x7f0000000440)="8e2588b506f60fc33c76d9e12061ef516d344eadcb10271787535320dcdce232b4722338882ed9efb589921eaa08ada3a217bbc437141f0394c325ba83cb7ddf79eac354ef8719b9917567ea5420b2ea9d29d4ac2d12e860e7e22077e710da19549bb98258b5608dbdee8597624ed06e9e0c117b680c6f56592660b8e55f9343c6a99ae07d067c568ac5f8f2d681c9169ed031f7886288e91ca84d088429ff55e23d1fdbb088c3affc4722603a1731e0827623d928f71965c3a9db2b92f764922ecf5c9401dee6dc02f9c9", 0x4}, 0x1ff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r9)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="07031abd70250c00587b22"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800)
writev$auto(r3, &(0x7f0000000140)={&(0x7f00000001c0), 0x6}, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x1ac}}, 0x24040041)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x10007}, 0x3, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0)
getdents$auto(r1, 0x0, 0xa2b0)

5.53129865s ago: executing program 0 (id=1782):
r0 = open(&(0x7f0000001380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103040, 0xd1)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x28000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c01, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r3, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c)
ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR322(r1, 0xc0844123, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x601, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socket(0xa, 0x5, 0x0)
ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x20002, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x1d7)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x80106f53, r4)

5.092996474s ago: executing program 0 (id=1783):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
sysfs$auto(0x2, 0x49, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x1)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
preadv$auto(r0, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x5, 0xc, 0x1)
sendfile$auto(r1, r1, 0x0, 0x2)

5.00984686s ago: executing program 8 (id=1784):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x49, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x1)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
preadv$auto(r0, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x5, 0xc, 0x1)
sendfile$auto(r1, r1, 0x0, 0x2)

4.369529784s ago: executing program 7 (id=1785):
acct$auto(&(0x7f00000000c0)='/dev/input/event1\x00')
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r0 = socket(0x25, 0x1, 0x0)
sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mbind$auto(0x80000000, 0x100000000, 0x100000000, 0x0, 0x2000000006, 0xb)
prctl$auto(0x43, 0xe, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r2 = epoll_create$auto(0x3e)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108)
epoll_ctl$auto(r2, 0x1, r1, 0x0)
ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0)

3.475530586s ago: executing program 4 (id=1787):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0)
r1 = socket(0x29, 0x2, 0x0)
ioctl$auto(r1, 0x89f0, 0x24)
socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000080)=0x9b)
io_uring_setup$auto(0x100, &(0x7f0000000000)={0x77, 0x0, 0x4e, 0x9, 0x10, 0xffff7fff, 0xffffffffffffffff, [0x80, 0x3, 0xc3], {0x3, 0x7, 0x0, 0x5, 0x5, 0x52, 0x6, 0x8}, {0x7ff, 0xffff120d, 0x3, 0x5, 0x3e, 0xf, 0x9, 0x400, 0x1}})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)

3.021396644s ago: executing program 7 (id=1788):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x11, 0x3, 0x2)
openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x15, 0x5, 0x0)
recvfrom$auto(0x3, 0x0, 0x80800000000e, 0x48, 0x0, 0xfffffffffffffffd)
socket(0x2c, 0x3, 0x0)
socket(0x11, 0x2, 0x73)
mmap$auto(0x10000000, 0x5, 0x95, 0x9b72, 0x2, 0x8000)
modify_ldt$auto(0x1, 0x0, 0x10)
pipe2$auto(0x0, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
fanotify_init$auto(0x5, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400009, 0x4000000000000df, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r0, 0x400c4d01, r0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x40401, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8932, &(0x7f0000000780)={'dummy0\x00'})
ioctl$auto_TCFLSH2(r1, 0x540b, 0x0)

2.598059353s ago: executing program 0 (id=1789):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x49, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x1)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd965020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)='+', 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0xa0800, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
preadv$auto(r1, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x5, 0xc, 0x1)
sendfile$auto(r3, r3, 0x0, 0x2)
ioctl$auto_SNAPSHOT_FREE(r2, 0x3314, 0x0)

2.368970672s ago: executing program 4 (id=1790):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x49, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x1)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd965020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)='+', 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0xa0800, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
preadv$auto(r1, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x5, 0xc, 0x1)
sendfile$auto(r3, r3, 0x0, 0x2)
ioctl$auto_SNAPSHOT_FREE(r2, 0x3314, 0x0)

2.135803564s ago: executing program 7 (id=1791):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x49, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x1)
clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
preadv$auto(r0, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x5, 0xc, 0x1)
sendfile$auto(r1, r1, 0x0, 0x2)

1.274458273s ago: executing program 8 (id=1792):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0xfc000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000300)=@bpf_attr_3={0x5, 0x3, 0x3, 0x6, 0xe, 0xff, 0x6, 0xfffffff9, 0x1, "83f0a89606174163a17af57e0aabb0e9", r4, 0x6, r0, 0x4, 0x5, 0x7fff, 0xe, 0x0, 0x2, 0x6337, @attach_btf_obj_fd=r3, 0x7, 0x9, 0x8, 0x98, 0xa59, r1, r3}, 0xe971)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)

388.639281ms ago: executing program 0 (id=1793):
r0 = open(&(0x7f0000001380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103040, 0xd1)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x28000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c01, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r3, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c)
ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR322(r1, 0xc0844123, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x601, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socket(0xa, 0x5, 0x0)
ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x20002, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x1d7)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x80106f53, r4)

296.352611ms ago: executing program 7 (id=1794):
mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x100000000) (async, rerun: 32)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0xc40, 0x0) (async, rerun: 32)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/can/rcvlist_all\x00', 0x121000, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) (async)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000200)=""/222, 0xde) (async)
socket(0x11, 0x3, 0x5)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) (async)
mmap$auto(0x4, 0x20009, 0x10000000e5, 0xeb1, 0x401, 0x2000008000)
close_range$auto(0x2, 0xa, 0x0) (async)
r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x40881, 0x0) (async, rerun: 32)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) (async, rerun: 32)
writev$auto(r1, &(0x7f0000000080)={0x0, 0x1}, 0x3) (async, rerun: 64)
futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) (async, rerun: 64)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x4d8182, 0x46) (rerun: 64)
fcntl$auto(r4, 0x40a, 0x0) (async)
r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x20000, 0x0)
ioctl$auto_SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000040)) (async, rerun: 64)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) (async, rerun: 64)
write$auto(r3, 0x0, 0x10007c) (async)
setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x28) (async)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f00000003c0)="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", 0xfffffffc, 0x0, 0x9, 0x0, 0x52, 0x1000}, 0x80000023}, 0xb, 0x200) (async)
read$auto(r0, 0x0, 0xb4d3) (async)
syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
getsockopt$auto_SO_SNDBUF(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180)='/dev/dvb/adapter0/demux0\x00', 0x0)

0s ago: executing program 0 (id=1795):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd700002dcdf250300000004000800100001800c00108005000b0016000000f01b591ef9795dfcff75d994ef8f8dc84af76ca83b59c155702fa5373715b67d89fd52d929d2185ace18cc81475699e745033f358e0bd8508eb259a772480e09d46bda6e6d2e6ac0eb69f44ec2492fbeb603705cd5c92f5cf90800c4471de4eb7bf1b7d342a161db"], 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x40044) (async)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8044)
close_range$auto(0x2, 0x8, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6a) (async)
socket(0x2b, 0x1, 0x0) (async)
select$auto(0x804, 0x0, &(0x7f0000000100)={[0x9, 0x0, 0x0, 0x80000300, 0x1, 0x10000000, 0x2, 0x3, 0x81, 0x10000005e58296b, 0x1e, 0x9, 0x7ff, 0x200, 0x20000000008, 0x4000000000006]}, 0x0, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x2)
r4 = socket(0x10, 0x2, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x100000004, 0x3, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x9, 0x400, 0xfffffffffffffffb, 0x9, 0xffffffff80000000, 0x1, 0x65, 0x103}) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080), 0xfc6}, 0x2, &(0x7f0000000480)="10317e6ce0fb4021fd9c09fab22faa20e5b51d0bf7ed08d012269d0ee5729609e9fade3e390aafdbe41f5b24c010342be97647f4b6aa2162738e6e7b336c84e70e4f5d5464000000000000000000000000e97342fa658c798decfdb1ea32adc5d64a2fde4a993964246d4ae83770c2bd8106b24e001a4ecd9df883f2b6d330a9b75ec5cc985db212ff599536fc613b8abc8b8c1355100013d3fd863f53237491e69151222d4bcc122cba2427dd56c7377423", 0x7, 0xa505}, 0x800}, 0x7, 0x8) (async)
r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0)
sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010329bd7000fedbdf250c0000000800010037cf"], 0x1c}, 0x1, 0x0, 0x0, 0x2080}, 0xc000) (async)
ioctl$auto_TCFLSH2(r3, 0x540b, &(0x7f0000000280)="d0ca8d0a5edd38c5ea975d993434dedf861a0e782fcc4fe8bcc93b8591dc884e501bd0a93b85170a29cdd96f160f00c70425649fae629c06a1da69c97d73f985")

kernel console output (not intermixed with test programs):

2414] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001
[  740.289463][T12414] R13: 00007fda1a016038 R14: 00007fda1a015fa0 R15: 00007ffc4b0d3458
[  740.289493][T12414]  </TASK>
[  741.319468][T12415] CPU: 0 UID: 0 PID: 12415 Comm: syz.5.1280 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  741.319510][T12415] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  741.319519][T12415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  741.319534][T12415] Call Trace:
[  741.319542][T12415]  <TASK>
[  741.319551][T12415]  dump_stack_lvl+0x100/0x190
[  741.319593][T12415]  should_fail_ex.cold+0x5/0xa
[  741.319617][T12415]  ? prepare_alloc_pages+0x16d/0x5f0
[  741.319648][T12415]  should_fail_alloc_page+0xeb/0x140
[  741.319675][T12415]  prepare_alloc_pages+0x1f0/0x5f0
[  741.319708][T12415]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  741.319747][T12415]  ? rcu_is_watching+0x12/0xc0
[  741.319788][T12415]  ? __lock_acquire+0x4a5/0x2630
[  741.319827][T12415]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  741.319868][T12415]  ? do_raw_spin_lock+0x128/0x260
[  741.319907][T12415]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  741.319943][T12415]  ? find_held_lock+0x2b/0x80
[  741.319973][T12415]  ? __lock_acquire+0x4a5/0x2630
[  741.320003][T12415]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  741.320046][T12415]  ? policy_nodemask+0xed/0x4f0
[  741.320073][T12415]  alloc_pages_mpol+0x1fb/0x550
[  741.320099][T12415]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  741.320125][T12415]  ? __folio_batch_add_and_move+0x5e5/0xc60
[  741.320163][T12415]  ? __folio_batch_add_and_move+0x5e5/0xc60
[  741.320207][T12415]  folio_alloc_mpol_noprof+0x36/0x340
[  741.320239][T12415]  shmem_alloc_folio+0x135/0x160
[  741.320270][T12415]  shmem_alloc_and_add_folio+0x371/0xd40
[  741.320315][T12415]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  741.320354][T12415]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  741.320407][T12415]  shmem_get_folio_gfp+0x6ab/0x1900
[  741.320449][T12415]  ? find_held_lock+0x2b/0x80
[  741.320492][T12415]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  741.320533][T12415]  ? ktime_get_coarse_real_ts64_mg+0x235/0x300
[  741.320593][T12415]  ? lockdep_hardirqs_on+0x78/0x100
[  741.320628][T12415]  shmem_fault+0x1f9/0xa20
[  741.320665][T12415]  ? __lock_acquire+0x4a5/0x2630
[  741.320694][T12415]  ? __pfx_shmem_fault+0x10/0x10
[  741.320733][T12415]  ? __up_read+0x2c5/0x700
[  741.320778][T12415]  ? __pfx_filemap_map_pages+0x10/0x10
[  741.320814][T12415]  __do_fault+0x10d/0x550
[  741.320839][T12415]  ? __pfx_filemap_map_pages+0x10/0x10
[  741.320874][T12415]  do_fault+0x2db/0x1990
[  741.320908][T12415]  __handle_mm_fault+0x180f/0x2b60
[  741.320956][T12415]  ? __pfx___handle_mm_fault+0x10/0x10
[  741.320990][T12415]  ? pte_offset_map_lock+0x174/0x320
[  741.321016][T12415]  ? find_held_lock+0x2b/0x80
[  741.321048][T12415]  ? follow_page_pte+0x5b3/0x1400
[  741.321081][T12415]  handle_mm_fault+0x36d/0xa20
[  741.321120][T12415]  __get_user_pages+0xf9c/0x34d0
[  741.321154][T12415]  ? down_read_killable+0x30e/0x4c0
[  741.321191][T12415]  ? __pfx___get_user_pages+0x10/0x10
[  741.321226][T12415]  faultin_page_range+0x1f1/0x9e0
[  741.321261][T12415]  madvise_do_behavior+0x354/0x510
[  741.321296][T12415]  ? __pfx_madvise_do_behavior+0x10/0x10
[  741.321334][T12415]  ? fdget_pos+0x2aa/0x380
[  741.321365][T12415]  do_madvise+0x195/0x240
[  741.321398][T12415]  ? __pfx_do_madvise+0x10/0x10
[  741.321426][T12415]  ? do_futex+0x192/0x350
[  741.321485][T12415]  __x64_sys_madvise+0xa9/0x110
[  741.321514][T12415]  ? lockdep_hardirqs_on+0x78/0x100
[  741.321543][T12415]  do_syscall_64+0x106/0xf80
[  741.321572][T12415]  ? clear_bhb_loop+0x40/0x90
[  741.321603][T12415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.321628][T12415] RIP: 0033:0x7f1aa9d9c799
[  741.321649][T12415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  741.321672][T12415] RSP: 002b:00007f1aaacb5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  741.321696][T12415] RAX: ffffffffffffffda RBX: 00007f1aaa016180 RCX: 00007f1aa9d9c799
[  741.321712][T12415] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000
[  741.321728][T12415] RBP: 00007f1aa9e32c99 R08: 0000000000000000 R09: 0000000000000000
[  741.321742][T12415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  741.321757][T12415] R13: 00007f1aaa016218 R14: 00007f1aaa016180 R15: 00007fff3df04818
[  741.321788][T12415]  </TASK>
[  745.834844][T12433] FAULT_INJECTION: forcing a failure.
[  745.834844][T12433] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  745.999830][T12433] CPU: 0 UID: 0 PID: 12433 Comm: syz.4.1289 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  745.999870][T12433] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  745.999879][T12433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  745.999893][T12433] Call Trace:
[  745.999900][T12433]  <TASK>
[  745.999910][T12433]  dump_stack_lvl+0x100/0x190
[  745.999956][T12433]  should_fail_ex.cold+0x5/0xa
[  745.999984][T12433]  strncpy_from_user+0x3b/0x2d0
[  746.000024][T12433]  do_getname+0x78/0x390
[  746.000057][T12433]  path_removexattrat+0x39e/0x5f0
[  746.000081][T12433]  ? __pfx_path_removexattrat+0x10/0x10
[  746.000136][T12433]  ? ksys_write+0x1ac/0x250
[  746.000156][T12433]  ? __pfx_ksys_write+0x10/0x10
[  746.000183][T12433]  __x64_sys_lremovexattr+0x5e/0x80
[  746.000212][T12433]  do_syscall_64+0x106/0xf80
[  746.000241][T12433]  ? clear_bhb_loop+0x40/0x90
[  746.000277][T12433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.000305][T12433] RIP: 0033:0x7f505879c799
[  746.000324][T12433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  746.000347][T12433] RSP: 002b:00007f5059636028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6
[  746.000369][T12433] RAX: ffffffffffffffda RBX: 00007f5058a15fa0 RCX: 00007f505879c799
[  746.000385][T12433] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040
[  746.000399][T12433] RBP: 00007f5059636090 R08: 0000000000000000 R09: 0000000000000000
[  746.000413][T12433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  746.000430][T12433] R13: 00007f5058a16038 R14: 00007f5058a15fa0 R15: 00007fff90f17c68
[  746.000460][T12433]  </TASK>
[  748.248753][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  748.263362][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  754.156653][T12482] hub 1-0:1.0: USB hub found
[  754.340217][T12482] hub 1-0:1.0: 1 port detected
[  754.504753][T12464] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  754.616017][T12464] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  754.706748][T12464] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  754.772096][T12464] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  755.639714][T12475] hub 1-0:1.0: USB hub found
[  755.800525][T12475] hub 1-0:1.0: 1 port detected
[  756.007602][T12488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1301'.
[  756.252923][T10752] Bluetooth: hci1: command 0x0c1a tx timeout
[  756.647390][T10752] Bluetooth: hci4: command 0x0c1a tx timeout
[  756.655309][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  756.727377][T10752] Bluetooth: hci5: command 0x0419 tx timeout
[  761.213898][T12530] FAULT_INJECTION: forcing a failure.
[  761.213898][T12530] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  761.350841][T12530] CPU: 0 UID: 0 PID: 12530 Comm: syz.4.1309 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  761.350889][T12530] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  761.350899][T12530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  761.350915][T12530] Call Trace:
[  761.350930][T12530]  <TASK>
[  761.350941][T12530]  dump_stack_lvl+0x100/0x190
[  761.350995][T12530]  should_fail_ex.cold+0x5/0xa
[  761.351021][T12530]  ? prepare_alloc_pages+0x16d/0x5f0
[  761.351056][T12530]  should_fail_alloc_page+0xeb/0x140
[  761.351087][T12530]  prepare_alloc_pages+0x1f0/0x5f0
[  761.351123][T12530]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  761.351167][T12530]  ? ima_match_policy+0x8c4/0x2350
[  761.351261][T12530]  ? ima_match_policy+0x8c4/0x2350
[  761.351292][T12530]  ? __lock_acquire+0x4a5/0x2630
[  761.351336][T12530]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  761.351379][T12530]  ? __lock_acquire+0x4a5/0x2630
[  761.351414][T12530]  ? look_up_lock_class+0x55/0x120
[  761.351450][T12530]  ? register_lock_class+0x40/0x560
[  761.351492][T12530]  ? lock_acquire+0x1cf/0x380
[  761.351531][T12530]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  761.351579][T12530]  ? policy_nodemask+0xed/0x4f0
[  761.351610][T12530]  alloc_pages_mpol+0x1fb/0x550
[  761.351640][T12530]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  761.351668][T12530]  ? __pfx___pollwait+0x10/0x10
[  761.351709][T12530]  ? mark_held_locks+0x40/0x70
[  761.351746][T12530]  alloc_pages_noprof+0x131/0x390
[  761.351776][T12530]  ? __pfx___pollwait+0x10/0x10
[  761.351815][T12530]  get_free_pages_noprof+0x10/0xb0
[  761.351843][T12530]  __pollwait+0x29a/0x470
[  761.351882][T12530]  ? __pfx___pollwait+0x10/0x10
[  761.351925][T12530]  ? __pfx___pollwait+0x10/0x10
[  761.351972][T12530]  vb2_poll+0x8c/0xe0
[  761.352068][T12530]  vb2_fop_poll+0x10e/0x350
[  761.352109][T12530]  ? __pfx_vb2_fop_poll+0x10/0x10
[  761.352148][T12530]  v4l2_poll+0x15f/0x220
[  761.352212][T12530]  ? __pfx_v4l2_poll+0x10/0x10
[  761.352247][T12530]  do_sys_poll+0x6e5/0xeb0
[  761.352301][T12530]  ? __pfx_do_sys_poll+0x10/0x10
[  761.352343][T12530]  ? __lock_acquire+0x4a5/0x2630
[  761.352405][T12530]  ? futex_unqueue+0x13d/0x2c0
[  761.352438][T12530]  ? __pfx___pollwait+0x10/0x10
[  761.352486][T12530]  ? __pfx_pollwake+0x10/0x10
[  761.352531][T12530]  ? __pfx_pollwake+0x10/0x10
[  761.352574][T12530]  ? __pfx_pollwake+0x10/0x10
[  761.352619][T12530]  ? __pfx_pollwake+0x10/0x10
[  761.352663][T12530]  ? __pfx_pollwake+0x10/0x10
[  761.352734][T12530]  ? __pfx_pollwake+0x10/0x10
[  761.352779][T12530]  ? __pfx_pollwake+0x10/0x10
[  761.352835][T12530]  ? __pfx_pollwake+0x10/0x10
[  761.352880][T12530]  ? __pfx_pollwake+0x10/0x10
[  761.352923][T12530]  ? do_futex+0x192/0x350
[  761.352963][T12530]  ? set_user_sigmask+0x1e1/0x270
[  761.353008][T12530]  ? __pfx_set_user_sigmask+0x10/0x10
[  761.353051][T12530]  ? __pfx___might_resched+0x10/0x10
[  761.353092][T12530]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[  761.353180][T12530]  __x64_sys_ppoll+0x2b5/0x350
[  761.353210][T12530]  ? __pfx___x64_sys_ppoll+0x10/0x10
[  761.353250][T12530]  do_syscall_64+0x106/0xf80
[  761.353283][T12530]  ? clear_bhb_loop+0x40/0x90
[  761.353317][T12530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  761.353346][T12530] RIP: 0033:0x7f505879c799
[  761.353369][T12530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  761.353395][T12530] RSP: 002b:00007f5059636028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  761.353421][T12530] RAX: ffffffffffffffda RBX: 00007f5058a15fa0 RCX: 00007f505879c799
[  761.353439][T12530] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000200
[  761.353458][T12530] RBP: 00007f5058832c99 R08: 0000000000000008 R09: 0000000000000000
[  761.353475][T12530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  761.353491][T12530] R13: 00007f5058a16038 R14: 00007f5058a15fa0 R15: 00007fff90f17c68
[  761.353526][T12530]  </TASK>
[  764.022158][T12544] sp0: Synchronizing with TNC
[  767.569142][T12551] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26)
[  768.112278][T12550] ima: policy update failed
[  768.516389][   T30] audit: type=1802 audit(4295033071.199:9): pid=12550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1313" res=0 errno=0
[  768.995238][T12564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1316'.
[  769.286646][T12574] FAULT_INJECTION: forcing a failure.
[  769.286646][T12574] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  769.483913][T12574] CPU: 0 UID: 0 PID: 12574 Comm: syz.5.1319 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  769.483955][T12574] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  769.483964][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  769.483978][T12574] Call Trace:
[  769.483986][T12574]  <TASK>
[  769.483996][T12574]  dump_stack_lvl+0x100/0x190
[  769.484040][T12574]  should_fail_ex.cold+0x5/0xa
[  769.484066][T12574]  ? prepare_alloc_pages+0x16d/0x5f0
[  769.484098][T12574]  should_fail_alloc_page+0xeb/0x140
[  769.484127][T12574]  prepare_alloc_pages+0x1f0/0x5f0
[  769.484160][T12574]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  769.484200][T12574]  ? ima_match_policy+0x8c4/0x2350
[  769.484225][T12574]  ? ima_match_policy+0x8c4/0x2350
[  769.484252][T12574]  ? __lock_acquire+0x4a5/0x2630
[  769.484289][T12574]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  769.484326][T12574]  ? __lock_acquire+0x4a5/0x2630
[  769.484365][T12574]  ? look_up_lock_class+0x55/0x120
[  769.484400][T12574]  ? register_lock_class+0x40/0x560
[  769.484437][T12574]  ? lock_acquire+0x1cf/0x380
[  769.484472][T12574]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  769.484516][T12574]  ? policy_nodemask+0xed/0x4f0
[  769.484543][T12574]  alloc_pages_mpol+0x1fb/0x550
[  769.484570][T12574]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  769.484596][T12574]  ? __pfx___pollwait+0x10/0x10
[  769.484632][T12574]  ? mark_held_locks+0x40/0x70
[  769.484666][T12574]  alloc_pages_noprof+0x131/0x390
[  769.484692][T12574]  ? __pfx___pollwait+0x10/0x10
[  769.484727][T12574]  get_free_pages_noprof+0x10/0xb0
[  769.484750][T12574]  __pollwait+0x29a/0x470
[  769.484786][T12574]  ? __pfx___pollwait+0x10/0x10
[  769.484823][T12574]  ? __pfx___pollwait+0x10/0x10
[  769.484861][T12574]  vb2_poll+0x8c/0xe0
[  769.484897][T12574]  vb2_fop_poll+0x10e/0x350
[  769.484934][T12574]  ? __pfx_vb2_fop_poll+0x10/0x10
[  769.484968][T12574]  v4l2_poll+0x15f/0x220
[  769.485001][T12574]  ? __pfx_v4l2_poll+0x10/0x10
[  769.485032][T12574]  do_sys_poll+0x6e5/0xeb0
[  769.485068][T12574]  ? lockdep_hardirqs_on+0x78/0x100
[  769.485107][T12574]  ? __pfx_do_sys_poll+0x10/0x10
[  769.485144][T12574]  ? __lock_acquire+0x4a5/0x2630
[  769.485199][T12574]  ? futex_unqueue+0x13d/0x2c0
[  769.485229][T12574]  ? __pfx___pollwait+0x10/0x10
[  769.485269][T12574]  ? __pfx_pollwake+0x10/0x10
[  769.485309][T12574]  ? __pfx_pollwake+0x10/0x10
[  769.485357][T12574]  ? __pfx_pollwake+0x10/0x10
[  769.485397][T12574]  ? __pfx_pollwake+0x10/0x10
[  769.485436][T12574]  ? __pfx_pollwake+0x10/0x10
[  769.485476][T12574]  ? __pfx_pollwake+0x10/0x10
[  769.485514][T12574]  ? __pfx_pollwake+0x10/0x10
[  769.485554][T12574]  ? __pfx_pollwake+0x10/0x10
[  769.485593][T12574]  ? __pfx_pollwake+0x10/0x10
[  769.485632][T12574]  ? do_futex+0x192/0x350
[  769.485662][T12574]  ? set_user_sigmask+0x1e1/0x270
[  769.485701][T12574]  ? __pfx_set_user_sigmask+0x10/0x10
[  769.485739][T12574]  ? __pfx___might_resched+0x10/0x10
[  769.485777][T12574]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[  769.485815][T12574]  __x64_sys_ppoll+0x2b5/0x350
[  769.485841][T12574]  ? __pfx___x64_sys_ppoll+0x10/0x10
[  769.485878][T12574]  do_syscall_64+0x106/0xf80
[  769.485907][T12574]  ? clear_bhb_loop+0x40/0x90
[  769.485938][T12574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.485963][T12574] RIP: 0033:0x7f1aa9d9c799
[  769.485984][T12574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  769.486008][T12574] RSP: 002b:00007f1aaacf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  769.486032][T12574] RAX: ffffffffffffffda RBX: 00007f1aaa015fa0 RCX: 00007f1aa9d9c799
[  769.486047][T12574] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000200
[  769.486062][T12574] RBP: 00007f1aa9e32c99 R08: 0000000000000008 R09: 0000000000000000
[  769.486077][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  769.486091][T12574] R13: 00007f1aaa016038 R14: 00007f1aaa015fa0 R15: 00007fff3df04818
[  769.486122][T12574]  </TASK>
[  770.574722][T12561] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  770.605024][T12572] hub 1-0:1.0: USB hub found
[  770.635385][T12561] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  770.654439][T12572] hub 1-0:1.0: 1 port detected
[  770.686072][T12561] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  770.706273][T12561] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  771.461641][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  772.734615][T12592] openvswitch: netlink: Tunnel attr 3081 out of range max 16
[  772.961506][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  772.969125][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  772.980767][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  773.300634][T12584] hub 1-0:1.0: USB hub found
[  773.349243][T12584] hub 1-0:1.0: 1 port detected
[  773.809286][T12582] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  773.888016][T12582] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  773.970095][T12582] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  774.096207][T12582] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  775.951201][T10752] Bluetooth: hci3: command 0x0c1a tx timeout
[  775.960450][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  776.032225][T10752] Bluetooth: hci4: command 0x0c1a tx timeout
[  776.185384][T10752] Bluetooth: hci5: command 0x0419 tx timeout
[  783.500989][T12662] openvswitch: netlink: Tunnel attr 3081 out of range max 16
[  783.607467][T12671] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  785.245680][T12670] hub 1-0:1.0: USB hub found
[  785.253266][T12670] hub 1-0:1.0: 1 port detected
[  785.386414][T12666] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  785.481956][T12666] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  785.489708][T12666] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  785.662455][T12666] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  786.126013][T12695] FAULT_INJECTION: forcing a failure.
[  786.126013][T12695] name failslab, interval 1, probability 0, space 0, times 0
[  786.521221][T12695] CPU: 0 UID: 0 PID: 12695 Comm: syz.5.1346 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  786.521274][T12695] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  786.521283][T12695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  786.521298][T12695] Call Trace:
[  786.521306][T12695]  <TASK>
[  786.521317][T12695]  dump_stack_lvl+0x100/0x190
[  786.521361][T12695]  should_fail_ex.cold+0x5/0xa
[  786.521389][T12695]  ? memcg_list_lru_alloc+0x4ec/0x740
[  786.521427][T12695]  should_failslab+0xc2/0x120
[  786.521453][T12695]  __kmalloc_noprof+0xe0/0x850
[  786.521495][T12695]  memcg_list_lru_alloc+0x4ec/0x740
[  786.521540][T12695]  ? __pfx_memcg_list_lru_alloc+0x10/0x10
[  786.521577][T12695]  ? rcu_read_unlock+0x17/0x60
[  786.521611][T12695]  ? get_mem_cgroup_from_objcg+0xd3/0x330
[  786.521650][T12695]  __memcg_slab_post_alloc_hook+0x130/0x990
[  786.521685][T12695]  ? kasan_save_track+0x14/0x30
[  786.521726][T12695]  kmem_cache_alloc_lru_noprof+0x592/0x6e0
[  786.521784][T12695]  ? alloc_inode+0x183/0x250
[  786.521817][T12695]  ? ioctx_alloc+0x427/0x21d0
[  786.521852][T12695]  alloc_inode+0x183/0x250
[  786.521884][T12695]  alloc_anon_inode+0x2a/0x3e0
[  786.521911][T12695]  ioctx_alloc+0x4dc/0x21d0
[  786.521948][T12695]  ? find_held_lock+0x2b/0x80
[  786.521971][T12695]  ? __pfx_ioctx_alloc+0x10/0x10
[  786.522005][T12695]  __x64_sys_io_setup+0xc9/0x220
[  786.522041][T12695]  do_syscall_64+0x106/0xf80
[  786.522071][T12695]  ? clear_bhb_loop+0x40/0x90
[  786.522100][T12695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.522126][T12695] RIP: 0033:0x7f1aa9d9c799
[  786.522147][T12695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  786.522170][T12695] RSP: 002b:00007f1aaacb5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  786.522193][T12695] RAX: ffffffffffffffda RBX: 00007f1aaa016180 RCX: 00007f1aa9d9c799
[  786.522209][T12695] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e
[  786.522224][T12695] RBP: 00007f1aa9e32c99 R08: 0000000000000000 R09: 0000000000000000
[  786.522239][T12695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  786.522253][T12695] R13: 00007f1aaa016218 R14: 00007f1aaa016180 R15: 00007fff3df04818
[  786.522292][T12695]  </TASK>
[  787.382624][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  787.652679][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  787.661443][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  787.704442][T10752] Bluetooth: hci5: command 0x0419 tx timeout
[  800.094062][T12767] hub 1-0:1.0: USB hub found
[  800.249930][T12767] hub 1-0:1.0: 1 port detected
[  800.400444][T12772] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  800.518239][T12772] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  800.586608][T12772] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  800.681369][T12772] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  801.154855][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  802.598792][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  802.607393][T10752] Bluetooth: hci3: command 0x0c1a tx timeout
[  802.750182][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  807.320672][T12839] hub 1-0:1.0: USB hub found
[  807.462515][T12839] hub 1-0:1.0: 1 port detected
[  808.676284][T12808] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  808.762321][T12808] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  808.854084][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  808.861373][T12808] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  808.934886][T12808] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  809.738531][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  809.746120][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  810.834241][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  810.906754][T12860] hub 1-0:1.0: USB hub found
[  810.914420][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  810.995896][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  811.004828][T12860] hub 1-0:1.0: 1 port detected
[  812.560858][T12859] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  812.595121][T10752] Bluetooth: hci1: command 0x0c1a tx timeout
[  812.695886][T12859] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  812.815341][T12859] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  812.822160][T12859] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  814.760052][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  814.863157][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  814.871116][T10752] Bluetooth: hci4: command 0x0c1a tx timeout
[  815.141814][T12888] hub 1-0:1.0: USB hub found
[  815.445107][T12888] hub 1-0:1.0: 1 port detected
[  815.853920][T12880] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  815.946977][T12880] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  815.987040][T12880] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  816.059756][T12880] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  816.680872][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  817.961247][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  818.038474][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  818.045312][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  818.151206][T12906] hub 1-0:1.0: USB hub found
[  818.314100][T12906] hub 1-0:1.0: 1 port detected
[  818.998822][T12914] hub 1-0:1.0: USB hub found
[  819.191243][T12914] hub 1-0:1.0: 1 port detected
[  819.273675][T12907] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  819.354730][T12907] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  819.443850][T12907] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  819.529984][T12907] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  819.808585][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  820.257126][T12921] FAULT_INJECTION: forcing a failure.
[  820.257126][T12921] name failslab, interval 1, probability 0, space 0, times 0
[  820.334019][T12923] hub 1-0:1.0: USB hub found
[  820.541188][T12923] hub 1-0:1.0: 1 port detected
[  820.590673][T12927] vcan0: tx drop: invalid sa for name 0x00000000000000fd
[  820.701496][T12921] CPU: 0 UID: 0 PID: 12921 Comm: syz.5.1394 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  820.701538][T12921] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  820.701547][T12921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  820.701561][T12921] Call Trace:
[  820.701569][T12921]  <TASK>
[  820.701578][T12921]  dump_stack_lvl+0x100/0x190
[  820.701619][T12921]  should_fail_ex.cold+0x5/0xa
[  820.701648][T12921]  should_failslab+0xc2/0x120
[  820.701673][T12921]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  820.701714][T12921]  ? __kthread_create_on_node+0x186/0x3f0
[  820.701750][T12921]  kvasprintf+0xbc/0x150
[  820.701848][T12921]  ? __pfx_kvasprintf+0x10/0x10
[  820.701884][T12921]  ? __pfx_rescuer_thread+0x10/0x10
[  820.701925][T12921]  __kthread_create_on_node+0x186/0x3f0
[  820.701955][T12921]  ? vsnprintf+0x4ee/0x1240
[  820.701981][T12921]  ? __pfx___kthread_create_on_node+0x10/0x10
[  820.702025][T12921]  ? __pfx_rescuer_thread+0x10/0x10
[  820.702060][T12921]  kthread_create_on_node+0xc7/0x100
[  820.702089][T12921]  ? __pfx_kthread_create_on_node+0x10/0x10
[  820.702117][T12921]  ? __pfx_scnprintf+0x10/0x10
[  820.702158][T12921]  init_rescuer+0x31b/0x540
[  820.702190][T12921]  ? __pfx_init_rescuer+0x10/0x10
[  820.702230][T12921]  ? wq_adjust_max_active+0x352/0x4a0
[  820.702269][T12921]  __alloc_workqueue+0xc90/0x1880
[  820.702308][T12921]  alloc_workqueue_noprof+0xd2/0x200
[  820.702337][T12921]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  820.702370][T12921]  ? kobject_init+0x159/0x1b0
[  820.702441][T12921]  ? __alloc_disk_node+0x4d8/0x6b0
[  820.702518][T12921]  nbd_dev_add+0x51a/0xb10
[  820.702604][T12921]  ? find_held_lock+0x2b/0x80
[  820.702627][T12921]  ? __pfx_nbd_dev_add+0x10/0x10
[  820.702665][T12921]  ? nbd_genl_connect+0x131a/0x1a40
[  820.702720][T12921]  ? bpf_lsm_capable+0x9/0x10
[  820.702747][T12921]  ? __radix_tree_lookup+0x217/0x2b0
[  820.702778][T12921]  nbd_genl_connect+0xb8d/0x1a40
[  820.702814][T12921]  ? rcu_is_watching+0x12/0xc0
[  820.702855][T12921]  ? __pfx_nbd_genl_connect+0x10/0x10
[  820.702893][T12921]  ? __nla_parse+0x40/0x60
[  820.702935][T12921]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[  820.702977][T12921]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[  820.703022][T12921]  genl_family_rcv_msg_doit+0x214/0x300
[  820.703063][T12921]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  820.703101][T12921]  ? genl_get_cmd+0x3ef/0x720
[  820.703144][T12921]  ? __dev_queue_xmit+0x5af/0x4800
[  820.703206][T12921]  ? __radix_tree_lookup+0x217/0x2b0
[  820.703236][T12921]  genl_rcv_msg+0x560/0x800
[  820.703277][T12921]  ? __pfx_genl_rcv_msg+0x10/0x10
[  820.703315][T12921]  ? __pfx_nbd_genl_connect+0x10/0x10
[  820.703364][T12921]  netlink_rcv_skb+0x159/0x420
[  820.703397][T12921]  ? __pfx_genl_rcv_msg+0x10/0x10
[  820.703436][T12921]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  820.703480][T12921]  ? netlink_deliver_tap+0x1ae/0xcc0
[  820.703516][T12921]  genl_rcv+0x28/0x40
[  820.703548][T12921]  netlink_unicast+0x5aa/0x870
[  820.703585][T12921]  ? __pfx_netlink_unicast+0x10/0x10
[  820.703630][T12921]  netlink_sendmsg+0x8b0/0xda0
[  820.703668][T12921]  ? __pfx_netlink_sendmsg+0x10/0x10
[  820.703699][T12921]  ? __import_iovec+0x1d2/0x640
[  820.703749][T12921]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  820.703790][T12921]  ____sys_sendmsg+0x9e1/0xb70
[  820.703826][T12921]  ? __pfx_netlink_sendmsg+0x10/0x10
[  820.703863][T12921]  ? __pfx_____sys_sendmsg+0x10/0x10
[  820.703906][T12921]  ? __pfx_futex_wake_mark+0x10/0x10
[  820.703953][T12921]  ___sys_sendmsg+0x190/0x1e0
[  820.703995][T12921]  ? __pfx____sys_sendmsg+0x10/0x10
[  820.704071][T12921]  __sys_sendmsg+0x170/0x220
[  820.704102][T12921]  ? __pfx___sys_sendmsg+0x10/0x10
[  820.704132][T12921]  ? __x64_sys_futex+0x34f/0x4d0
[  820.704181][T12921]  do_syscall_64+0x106/0xf80
[  820.704210][T12921]  ? clear_bhb_loop+0x40/0x90
[  820.704241][T12921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.704266][T12921] RIP: 0033:0x7f1aa9d9c799
[  820.704287][T12921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  820.704311][T12921] RSP: 002b:00007f1aaacd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  820.704334][T12921] RAX: ffffffffffffffda RBX: 00007f1aaa016090 RCX: 00007f1aa9d9c799
[  820.704350][T12921] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005
[  820.704365][T12921] RBP: 00007f1aa9e32c99 R08: 0000000000000000 R09: 0000000000000000
[  820.704380][T12921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  820.704394][T12921] R13: 00007f1aaa016128 R14: 00007f1aaa016090 R15: 00007fff3df04818
[  820.704425][T12921]  </TASK>
[  820.704466][T12921] workqueue: Failed to create a rescuer kthread for wq "nbd1024-recv": -ENOMEM
[  821.653276][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  821.669179][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  821.678935][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  822.980443][T12940] hub 1-0:1.0: USB hub found
[  823.072420][T12940] hub 1-0:1.0: 1 port detected
[  823.912047][T12933] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  823.995605][T12933] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  824.025149][T12921] block (null): Could not allocate knbd recv work queue.
[  824.045075][T12933] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  824.086387][T12933] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  824.253050][T12921] nbd: failed to add new device
[  826.042050][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  826.050031][T10752] Bluetooth: hci1: command 0x0c1a tx timeout
[  826.131725][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  826.138122][T10752] Bluetooth: hci4: command 0x0c1a tx timeout
[  828.374550][T12947] hub 1-0:1.0: USB hub found
[  828.456123][T12947] hub 1-0:1.0: 1 port detected
[  828.625059][T12976] vhci_hcd vhci_hcd.1: invalid port number 19
[  828.631926][T12976] vhci_hcd vhci_hcd.1: default hub control req: c902 v76bf i0013 l27950
[  828.641646][T12960] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  828.704514][T12960] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  828.787211][T12960] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  828.839231][T12960] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  829.164065][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  830.779073][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  830.854877][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  830.861464][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  834.874360][T13008] hub 1-0:1.0: USB hub found
[  835.069076][T13008] hub 1-0:1.0: 1 port detected
[  835.187328][T13000] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  835.276804][T13000] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  835.366518][T13000] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  835.416769][T13000] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  836.466494][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  837.247418][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  837.407531][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  837.490450][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  837.951168][T13029] hub 1-0:1.0: USB hub found
[  838.188093][T13029] hub 1-0:1.0: 1 port detected
[  839.131715][T13027] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  839.205986][T13027] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  839.278623][T13027] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  839.340859][T13027] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  840.212647][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  841.249532][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  841.329394][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  841.414708][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  842.087024][T13038] hub 1-0:1.0: USB hub found
[  842.161714][T13038] hub 1-0:1.0: 1 port detected
[  843.321579][T13043] [U]  
[  843.324936][T13043] [U] 
[  843.327704][T13043] [U] 
[  843.330624][T13043] [U] 
[  843.479319][T13043] [U] 
[  843.482580][T13043] [U] 
[  843.485578][T13043] [U] 
[  843.488606][T13043] [U] 
[  843.763413][T13043] [U] 
[  843.766347][T13043] [U] 
[  843.769485][T13043] [U] 
[  843.772616][T13043] [U] 
[  843.910912][T13043] [U] 
[  850.168631][T13104] hub 1-0:1.0: USB hub found
[  850.264579][T13104] hub 1-0:1.0: 1 port detected
[  851.355186][T13095] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.36.1), cmd(2)
[  852.808932][T13101] hub 1-0:1.0: USB hub found
[  852.925366][T13101] hub 1-0:1.0: 1 port detected
[  853.190126][T13090] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  853.299841][T13090] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  853.374767][T13090] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  853.412632][   T30] audit: type=1804 audit(4295045432.066:10): pid=13110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1434" name="/newroot/373/file0" dev="tmpfs" ino=1931 res=1 errno=0
[  853.472649][T13090] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  855.016247][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  855.338170][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  855.430864][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  855.576773][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  856.510544][T13121] hub 1-0:1.0: USB hub found
[  856.589346][T13121] hub 1-0:1.0: 1 port detected
[  856.689398][T13123] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  856.778193][T13123] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  856.835707][T13123] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  856.931193][T13123] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  858.539213][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  858.779869][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  858.858851][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  858.948356][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  861.742107][T13168] [U]  
[  861.745160][T13168] [U] 
[  861.747890][T13168] [U] 
[  861.750631][T13168] [U] 
[  861.873183][T13168] [U] 
[  861.876217][T13168] [U] 
[  861.879119][T13168] [U] 
[  861.882131][T13168] [U] 
[  861.981914][T13168] [U] 
[  861.984968][T13168] [U] 
[  861.987799][T13168] [U] 
[  861.990811][T13168] [U] 
[  862.086759][T13168] [U] 
[  862.089543][T13168] [U] 
[  862.092474][T13168] [U] 
[  862.095286][T13168] [U] 
[  862.195244][T13168] [U] 
[  862.198029][T13168] [U] 
[  862.200762][T13168] [U] 
[  862.203484][T13168] [U] 
[  862.297858][T13168] [U] 
[  862.533304][T13174] hub 1-0:1.0: USB hub found
[  862.720129][T13174] hub 1-0:1.0: 1 port detected
[  863.763891][T13162] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  863.886083][T13162] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  863.986632][T13162] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  864.040921][T13162] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  864.224530][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  865.348763][T13184] hub 1-0:1.0: USB hub found
[  865.582620][T13189] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  865.645221][T13189] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  865.751795][T13184] hub 1-0:1.0: 1 port detected
[  865.801867][T13189] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  865.864977][T13189] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  865.943166][T13180] hub 1-0:1.0: USB hub found
[  866.044337][T13180] hub 1-0:1.0: 1 port detected
[  867.103723][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  867.662538][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  867.824974][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  867.903330][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  869.047181][T13198] hub 1-0:1.0: USB hub found
[  869.176008][T13210] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  869.246896][T13198] hub 1-0:1.0: 1 port detected
[  869.321394][T13210] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  869.397483][T13210] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  869.474192][T13210] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  870.473902][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  871.189263][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  871.205108][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  871.344368][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  871.436559][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  871.504427][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  873.648813][T13231] hub 1-0:1.0: USB hub found
[  873.844738][T13231] hub 1-0:1.0: 1 port detected
[  874.563004][T13225] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  874.611167][T13225] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  874.688629][T13225] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  874.754406][T13225] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  874.866137][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  876.628385][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  876.712575][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  876.807187][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  879.080586][T13264] FAULT_INJECTION: forcing a failure.
[  879.080586][T13264] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  879.232331][T13264] CPU: 0 UID: 0 PID: 13264 Comm: syz.2.1463 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  879.232406][T13264] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  879.232415][T13264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  879.232429][T13264] Call Trace:
[  879.232436][T13264]  <TASK>
[  879.232445][T13264]  dump_stack_lvl+0x100/0x190
[  879.232486][T13264]  should_fail_ex.cold+0x5/0xa
[  879.232517][T13264]  _copy_from_user+0x2e/0xd0
[  879.232542][T13264]  copy_msghdr_from_user+0x9f/0x4f0
[  879.232583][T13264]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  879.232634][T13264]  ___sys_sendmsg+0x106/0x1e0
[  879.232678][T13264]  ? __pfx____sys_sendmsg+0x10/0x10
[  879.232749][T13264]  __sys_sendmsg+0x170/0x220
[  879.232778][T13264]  ? __pfx___sys_sendmsg+0x10/0x10
[  879.232825][T13264]  do_syscall_64+0x106/0xf80
[  879.232854][T13264]  ? clear_bhb_loop+0x40/0x90
[  879.232882][T13264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  879.232906][T13264] RIP: 0033:0x7f3406b9c799
[  879.232925][T13264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  879.232953][T13264] RSP: 002b:00007f34079df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  879.232975][T13264] RAX: ffffffffffffffda RBX: 00007f3406e15fa0 RCX: 00007f3406b9c799
[  879.232991][T13264] RDX: 000000000400c080 RSI: 00002000000006c0 RDI: 0000000000000003
[  879.233006][T13264] RBP: 00007f34079df090 R08: 0000000000000000 R09: 0000000000000000
[  879.233020][T13264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  879.233034][T13264] R13: 00007f3406e16038 R14: 00007f3406e15fa0 R15: 00007ffd198a9e58
[  879.233064][T13264]  </TASK>
[  880.004717][T13271] hub 1-0:1.0: USB hub found
[  880.051424][T13271] hub 1-0:1.0: 1 port detected
[  880.699127][T13252] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  880.750654][T13252] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  880.794181][T13252] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  880.854954][T13252] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  881.989787][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  882.795802][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  882.876924][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  882.959012][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  886.806981][T13305] hub 1-0:1.0: USB hub found
[  887.032436][T13305] hub 1-0:1.0: 1 port detected
[  887.948630][T13301] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  888.046222][T13301] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  888.101029][T13301] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  888.261284][T13301] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  888.793404][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  890.025082][T13308] hub 1-0:1.0: USB hub found
[  890.081583][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  890.105335][T13308] hub 1-0:1.0: 1 port detected
[  890.153940][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  890.260723][T13317] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  890.313908][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  890.374691][T13317] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  890.381323][T13317] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  890.515933][T13317] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  891.194473][T10752] Bluetooth: hci1: command 0x0c1a tx timeout
[  891.832007][T13329] hub 1-0:1.0: USB hub found
[  891.984826][T13329] hub 1-0:1.0: 1 port detected
[  892.319026][T13326] hub 1-0:1.0: USB hub found
[  892.375424][T13326] hub 1-0:1.0: 1 port detected
[  892.475160][T10752] Bluetooth: hci4: command 0x0c1a tx timeout
[  892.481977][T10752] Bluetooth: hci3: command 0x0c1a tx timeout
[  892.545221][T13332] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  892.555055][T10752] Bluetooth: hci5: command 0x0419 tx timeout
[  892.618460][T13332] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  892.689300][T13332] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  892.765546][T13332] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  893.437746][T10752] Bluetooth: hci1: command 0x0c1a tx timeout
[  894.640649][T10752] Bluetooth: hci3: command 0x0c1a tx timeout
[  894.721611][T10752] Bluetooth: hci4: command 0x0c1a tx timeout
[  894.879537][T10752] Bluetooth: hci5: command 0x0419 tx timeout
[  896.710707][T13348] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  896.755483][T13348] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  896.822081][T13348] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  896.923726][T13348] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  898.798020][T10752] Bluetooth: hci3: command 0x0c1a tx timeout
[  898.878099][T10752] Bluetooth: hci4: command 0x0c1a tx timeout
[  898.911557][T13364] hub 1-0:1.0: USB hub found
[  898.978141][T10752] Bluetooth: hci5: command 0x0419 tx timeout
[  899.001226][T13364] hub 1-0:1.0: 1 port detected
[  899.124828][T13361] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  899.234014][T13361] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  899.318460][T13361] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  899.381811][T13361] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  899.658849][T13377] hub 1-0:1.0: USB hub found
[  900.087137][T13377] hub 1-0:1.0: 1 port detected
[  900.489203][T10752] Bluetooth: hci1: command 0x0c1a tx timeout
[  901.281503][T10752] Bluetooth: hci3: command 0x0c1a tx timeout
[  901.369578][T10752] Bluetooth: hci4: command 0x0c1a tx timeout
[  901.439484][T10752] Bluetooth: hci5: command 0x0419 tx timeout
[  901.913361][T13399] hub 1-0:1.0: USB hub found
[  902.090365][T13399] hub 1-0:1.0: 1 port detected
[  902.707899][T13405] hub 1-0:1.0: USB hub found
[  902.884836][T13396] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  902.912424][T13405] hub 1-0:1.0: 1 port detected
[  902.973233][T13396] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  903.060440][T13396] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  903.067053][T13396] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  903.765741][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  905.061250][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  905.123997][ T5838] Bluetooth: hci5: command 0x0419 tx timeout
[  905.132667][T10752] Bluetooth: hci4: command 0x0c1a tx timeout
[  906.427814][T13407] hub 1-0:1.0: USB hub found
[  906.502905][T13407] hub 1-0:1.0: 1 port detected
[  906.672537][T13426] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  906.773560][T13426] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  906.832991][T13426] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  906.841321][T13426] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  907.448185][T10752] Bluetooth: hci1: command 0x0c1a tx timeout
[  908.803206][T10752] Bluetooth: hci3: command 0x0c1a tx timeout
[  908.888649][T10752] Bluetooth: hci5: command 0x0419 tx timeout
[  908.897105][T10752] Bluetooth: hci4: command 0x0c1a tx timeout
[  913.045580][T13464] hub 1-0:1.0: USB hub found
[  913.327821][T13464] hub 1-0:1.0: 1 port detected
[  916.098467][T13463] hub 1-0:1.0: USB hub found
[  916.172441][T13463] hub 1-0:1.0: 1 port detected
[  918.651152][T13500] bridge0: port 3(gretap0) entered blocking state
[  918.889875][T13500] bridge0: port 3(gretap0) entered disabled state
[  918.998814][T13500] gretap0: entered allmulticast mode
[  919.146272][T13500] FAULT_INJECTION: forcing a failure.
[  919.146272][T13500] name failslab, interval 1, probability 0, space 0, times 0
[  919.448167][T13500] CPU: 0 UID: 0 PID: 13500 Comm: syz.5.1505 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  919.448214][T13500] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  919.448224][T13500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  919.448240][T13500] Call Trace:
[  919.448249][T13500]  <TASK>
[  919.448259][T13500]  dump_stack_lvl+0x100/0x190
[  919.448316][T13500]  should_fail_ex.cold+0x5/0xa
[  919.448349][T13500]  should_failslab+0xc2/0x120
[  919.448380][T13500]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  919.448422][T13500]  ? __kernfs_new_node+0xd2/0x960
[  919.448469][T13500]  __kernfs_new_node+0xd2/0x960
[  919.448511][T13500]  ? __pfx___kernfs_new_node+0x10/0x10
[  919.448558][T13500]  ? find_held_lock+0x2b/0x80
[  919.448584][T13500]  ? kernfs_root+0xee/0x2a0
[  919.448619][T13500]  ? kernfs_root+0xee/0x2a0
[  919.448664][T13500]  kernfs_new_node+0x11b/0x1a0
[  919.448712][T13500]  __kernfs_create_file+0x53/0x350
[  919.448748][T13500]  sysfs_add_file_mode_ns+0x207/0x3c0
[  919.448792][T13500]  sysfs_create_file_ns+0x145/0x1e0
[  919.448828][T13500]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  919.448864][T13500]  ? kernfs_create_link+0x1bd/0x240
[  919.448896][T13500]  ? kernfs_put+0x3f/0x60
[  919.448940][T13500]  ? sysfs_do_create_link_sd+0xbb/0x140
[  919.448982][T13500]  br_sysfs_addif+0xe4/0x210
[  919.449194][T13500]  br_add_if+0x701/0x1b40
[  919.449250][T13500]  ? security_capable+0x80/0x260
[  919.449294][T13500]  add_del_if+0x114/0x160
[  919.449332][T13500]  br_dev_siocdevprivate+0x8ac/0x1650
[  919.449366][T13500]  ? __lock_acquire+0x4a5/0x2630
[  919.449401][T13500]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  919.449445][T13500]  ? do_raw_spin_lock+0x128/0x260
[  919.449491][T13500]  ? mark_held_locks+0x40/0x70
[  919.449530][T13500]  ? netdev_name_node_lookup+0x107/0x150
[  919.449560][T13500]  ? __mutex_lock+0x26a/0x1b90
[  919.449600][T13500]  dev_ifsioc+0xc1e/0x1e90
[  919.449661][T13500]  ? __pfx_dev_ifsioc+0x10/0x10
[  919.449688][T13500]  ? __pfx___mutex_lock+0x10/0x10
[  919.449734][T13500]  ? dev_load+0x8e/0x240
[  919.449759][T13500]  ? dev_load+0x8e/0x240
[  919.449794][T13500]  dev_ioctl+0x70e/0x1070
[  919.449826][T13500]  sock_ioctl+0x494/0x6b0
[  919.449872][T13500]  ? __pfx_sock_ioctl+0x10/0x10
[  919.449913][T13500]  ? hook_file_ioctl_common+0x146/0x410
[  919.449966][T13500]  ? __fget_files+0x21f/0x3d0
[  919.449996][T13500]  ? __pfx_sock_ioctl+0x10/0x10
[  919.450041][T13500]  __x64_sys_ioctl+0x18e/0x210
[  919.450083][T13500]  do_syscall_64+0x106/0xf80
[  919.450115][T13500]  ? clear_bhb_loop+0x40/0x90
[  919.450149][T13500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  919.450177][T13500] RIP: 0033:0x7f1aa9d9c799
[  919.450200][T13500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  919.450227][T13500] RSP: 002b:00007f1aaacd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  919.450253][T13500] RAX: ffffffffffffffda RBX: 00007f1aaa016090 RCX: 00007f1aa9d9c799
[  919.450271][T13500] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000009
[  919.450287][T13500] RBP: 00007f1aa9e32c99 R08: 0000000000000000 R09: 0000000000000000
[  919.450310][T13500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  919.450327][T13500] R13: 00007f1aaa016128 R14: 00007f1aaa016090 R15: 00007fff3df04818
[  919.450361][T13500]  </TASK>
[  924.575223][T13500] gretap0: left allmulticast mode
[  930.095917][T13548] hub 1-0:1.0: USB hub found
[  930.293898][T13548] hub 1-0:1.0: 1 port detected
[  930.479824][T13535] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  930.553754][T13535] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  930.624679][T13535] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  930.688328][T13535] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  931.295303][T13440] Bluetooth: hci1: command 0x0c1a tx timeout
[  931.365261][T13542] hub 1-0:1.0: USB hub found
[  931.516076][T13542] hub 1-0:1.0: 1 port detected
[  932.020187][T13528] hub 1-0:1.0: USB hub found
[  932.175202][T13528] hub 1-0:1.0: 1 port detected
[  932.575613][T13440] Bluetooth: hci3: command 0x0c1a tx timeout
[  932.667507][T13440] Bluetooth: hci4: command 0x0c1a tx timeout
[  932.674653][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  932.689805][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  932.736110][T13440] Bluetooth: hci5: command 0x0419 tx timeout
[  934.586998][T13562] hub 1-0:1.0: USB hub found
[  934.751315][T13562] hub 1-0:1.0: 1 port detected
[  941.755381][T13589] hub 1-0:1.0: USB hub found
[  941.854881][T13589] hub 1-0:1.0: 1 port detected
[  946.103582][T13629] hub 1-0:1.0: USB hub found
[  946.172019][T13629] hub 1-0:1.0: 1 port detected
[  946.314460][T13617] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  946.457110][T13617] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  946.533049][T13617] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  946.599424][T13617] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  947.048181][T13616] hub 1-0:1.0: USB hub found
[  947.093694][T13616] hub 1-0:1.0: 1 port detected
[  947.152266][T13440] Bluetooth: hci1: command 0x0c1a tx timeout
[  947.894112][T13636] warning: `syz.2.1527' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  948.503355][T13440] Bluetooth: hci3: command 0x0c1a tx timeout
[  948.586423][T13440] Bluetooth: hci4: command 0x0c1a tx timeout
[  948.666668][T13440] Bluetooth: hci5: command 0x0419 tx timeout
[  951.530487][T13644] hub 1-0:1.0: USB hub found
[  951.687630][T13644] hub 1-0:1.0: 1 port detected
[  956.487707][T13670] hub 1-0:1.0: USB hub found
[  956.599259][T13670] hub 1-0:1.0: 1 port detected
[  957.307317][T13667] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  957.377457][T13667] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  957.434003][T13667] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  957.511020][T13667] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  957.797477][T13440] Bluetooth: hci1: command 0x0c1a tx timeout
[  959.388921][T13440] Bluetooth: hci3: command 0x0c1a tx timeout
[  959.475129][T13440] Bluetooth: hci4: command 0x0c1a tx timeout
[  959.568601][T13440] Bluetooth: hci5: command 0x0419 tx timeout
[  965.451531][T13718] hub 1-0:1.0: USB hub found
[  965.901668][T13718] hub 1-0:1.0: 1 port detected
[  966.016368][T13699] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  966.152302][T13699] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  966.352557][T13699] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  966.463312][T13699] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  967.072566][T13440] Bluetooth: hci1: command 0x0c1a tx timeout
[  967.707161][T13709] hub 1-0:1.0: USB hub found
[  967.926348][T13709] hub 1-0:1.0: 1 port detected
[  968.194307][T13440] Bluetooth: hci3: command 0x0c1a tx timeout
[  968.354662][T13440] Bluetooth: hci4: command 0x0c1a tx timeout
[  968.515148][T13440] Bluetooth: hci5: command 0x0419 tx timeout
[  971.898367][T13752] hub 1-0:1.0: USB hub found
[  972.015784][T13752] hub 1-0:1.0: 1 port detected
[  972.118557][T13749] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  972.205593][T13749] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  972.285016][T13749] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  972.291731][T13749] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  973.482122][T13758] [U]  
[  973.485021][T13758] [U] 
[  973.488221][T13758] [U] 
[  973.491137][T13758] [U] 
[  973.746004][T13758] [U] 
[  973.748904][T13758] [U] 
[  973.751818][T13758] [U] 
[  973.754589][T13758] [U] 
[  973.904145][T13758] [U] 
[  974.041134][T13767] Bluetooth: hci1: command 0x0c1a tx timeout
[  974.278397][T13774] Bluetooth: hci3: command 0x0c1a tx timeout
[  974.345549][T13778] hub 1-0:1.0: USB hub found
[  974.356577][T13774] Bluetooth: hci5: command 0x0419 tx timeout
[  974.365453][T13774] Bluetooth: hci4: command 0x0c1a tx timeout
[  974.495945][T13778] hub 1-0:1.0: 1 port detected
[  974.912663][T13763] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  974.962431][T13763] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  975.017916][T13763] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  975.067713][T13763] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  975.267712][T13784] zswap: compressor  not available
[  976.052313][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1556'.
[  976.196393][T13779] hub 1-0:1.0: USB hub found
[  976.206668][T13780] Bluetooth: hci1: command 0x0c1a tx timeout
[  976.377467][T13779] hub 1-0:1.0: 1 port detected
[  977.000627][T13767] Bluetooth: hci3: command 0x0c1a tx timeout
[  977.077282][T13767] Bluetooth: hci5: command 0x0419 tx timeout
[  977.084182][T13767] Bluetooth: hci4: command 0x0c1a tx timeout
[  977.656309][T13816] hub 1-0:1.0: USB hub found
[  977.729403][T13816] hub 1-0:1.0: 1 port detected
[  978.314198][T13807] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  978.338436][T13807] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  978.387288][T13807] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  978.419097][T13807] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  979.297911][T13833] random: crng reseeded on system resumption
[  979.449949][T13841] [U] ^@
[  979.538736][T13826] hub 1-0:1.0: USB hub found
[  979.595017][T13826] hub 1-0:1.0: 1 port detected
[  979.879015][T13767] Bluetooth: hci1: command 0x0c1a tx timeout
[  980.362835][T13767] Bluetooth: hci3: command 0x0c1a tx timeout
[  980.439387][T13767] Bluetooth: hci5: command 0x0419 tx timeout
[  980.446488][T13780] Bluetooth: hci4: command 0x0c1a tx timeout
[  983.283854][T13867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1568'.
[  983.428550][T13876] hub 1-0:1.0: USB hub found
[  983.543856][T13876] hub 1-0:1.0: 1 port detected
[  984.395045][T13888] [U]  
[  984.398337][T13888] [U] 
[  984.401784][T13888] [U] 
[  984.405336][T13888] [U] 
[  984.452484][T13888] [U] 
[  984.456772][T13888] [U] 
[  984.460123][T13888] [U] 
[  984.462910][T13888] [U] 
[  984.501778][T13888] [U] 
[  993.982029][T13780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  993.993778][T13780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  994.003081][T13780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  994.016250][T13780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  994.026145][T13780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  994.174775][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  994.181601][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  994.330837][T13907] chnl_net:caif_netlink_parms(): no params data found
[  994.425469][T13907] bridge0: port 1(bridge_slave_0) entered blocking state
[  994.434880][T13907] bridge0: port 1(bridge_slave_0) entered disabled state
[  994.444200][T13907] bridge_slave_0: entered allmulticast mode
[  994.456714][T13907] bridge_slave_0: entered promiscuous mode
[  994.466358][T13907] bridge0: port 2(bridge_slave_1) entered blocking state
[  994.474200][T13907] bridge0: port 2(bridge_slave_1) entered disabled state
[  994.483618][T13907] bridge_slave_1: entered allmulticast mode
[  994.491953][T13907] bridge_slave_1: entered promiscuous mode
[  994.531398][T13907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  994.547509][T13907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  994.589588][T13907] team0: Port device team_slave_0 added
[  994.599394][T13907] team0: Port device team_slave_1 added
[  994.634775][T13907] batman_adv: batadv0: Adding interface: batadv_slave_0
[  994.643544][T13907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  994.676971][T13907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  994.691378][T13907] batman_adv: batadv0: Adding interface: batadv_slave_1
[  994.699557][T13907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  994.732218][T13907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  994.792437][T13907] hsr_slave_0: entered promiscuous mode
[  994.799965][T13907] hsr_slave_1: entered promiscuous mode
[  994.808691][T13907] debugfs: 'hsr0' already exists in 'hsr'
[  994.815481][T13907] Cannot create hsr debugfs directory
[  994.894447][T13918] random: crng reseeded on system resumption
[  995.256637][T13924] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1578'.
[  995.282947][T13907] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  995.299992][T13924] bond_slave_0: entered allmulticast mode
[  995.309118][T13907] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  995.340582][T13907] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  995.366042][T13907] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  995.578768][T13907] 8021q: adding VLAN 0 to HW filter on device bond0
[  995.628691][T13907] 8021q: adding VLAN 0 to HW filter on device team0
[  995.669379][T13790] bridge0: port 1(bridge_slave_0) entered blocking state
[  995.677857][T13790] bridge0: port 1(bridge_slave_0) entered forwarding state
[  995.729324][T13790] bridge0: port 2(bridge_slave_1) entered blocking state
[  995.737484][T13790] bridge0: port 2(bridge_slave_1) entered forwarding state
[  995.793617][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1579'.
[  996.057875][T13767] Bluetooth: hci0: command tx timeout
[  996.257507][T13907] 8021q: adding VLAN 0 to HW filter on device batadv0
[  996.811609][T13907] veth0_vlan: entered promiscuous mode
[  996.842910][T13907] veth1_vlan: entered promiscuous mode
[  996.920727][T13907] veth0_macvtap: entered promiscuous mode
[  996.958446][T13907] veth1_macvtap: entered promiscuous mode
[  997.004477][T13907] batman_adv: batadv0: Interface activated: batadv_slave_0
[  997.059845][T13907] batman_adv: batadv0: Interface activated: batadv_slave_1
[  997.090007][T13790] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  997.121894][T13790] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  997.139125][T13790] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  997.192316][T13790] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  997.324706][T13765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  997.354847][T13765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  997.431310][T13798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  997.448631][T13798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  998.128418][T13780] Bluetooth: hci0: command tx timeout
[  998.310285][T13962] hub 1-0:1.0: USB hub found
[  998.348855][T13962] hub 1-0:1.0: 1 port detected
[  999.785795][T13966] hub 1-0:1.0: USB hub found
[  999.810767][T13966] hub 1-0:1.0: 1 port detected
[  999.983475][T13965] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1000.029182][T13965] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1000.036134][T13965] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1000.080283][T13965] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1000.118868][T13965] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1000.158665][T13965] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1000.202862][T13965] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1000.239837][T13780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1000.259107][T13780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1000.270639][T13780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1000.295204][T13780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1000.303990][T13780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1000.502898][T13767] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1000.518335][T13767] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1000.534987][T13767] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1000.546007][T13767] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1000.555385][T13767] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1001.326663][T13972] chnl_net:caif_netlink_parms(): no params data found
[ 1001.479153][T13978] chnl_net:caif_netlink_parms(): no params data found
[ 1001.731034][T13780] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1001.866374][T13972] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1001.895224][T13972] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1001.919843][T13972] bridge_slave_0: entered allmulticast mode
[ 1001.949857][T13972] bridge_slave_0: entered promiscuous mode
[ 1002.002036][T13980] hub 1-0:1.0: USB hub found
[ 1002.045372][T13972] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1002.055343][T13780] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1002.062679][T13780] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1002.087509][T13972] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1002.107731][T13980] hub 1-0:1.0: 1 port detected
[ 1002.118805][T13972] bridge_slave_1: entered allmulticast mode
[ 1002.130111][T13780] Bluetooth: hci0: command 0x0419 tx timeout
[ 1002.137362][T13767] Bluetooth: hci5: command 0x0419 tx timeout
[ 1002.163540][T13972] bridge_slave_1: entered promiscuous mode
[ 1002.169979][T14002] sd 0:0:1:0: PR command failed: 1026
[ 1002.175548][T14002] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1002.259788][T13971] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1002.313214][T13978] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1002.337038][T14002] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1002.346441][T13971] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1002.354322][T13978] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1002.371136][T13780] Bluetooth: hci2: command tx timeout
[ 1002.390304][T13978] bridge_slave_0: entered allmulticast mode
[ 1002.402872][T13971] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1002.409055][T13971] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1002.442233][T13978] bridge_slave_0: entered promiscuous mode
[ 1002.483211][T13972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1002.497421][T13971] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1002.524328][T13978] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1002.557144][T13978] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1002.569100][T13971] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1002.584294][T13978] bridge_slave_1: entered allmulticast mode
[ 1002.610960][T13767] Bluetooth: hci6: command tx timeout
[ 1002.629624][T13978] bridge_slave_1: entered promiscuous mode
[ 1002.647009][T13971] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1002.671655][T13972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1002.727993][T13971] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1002.837014][T13971] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1002.891122][T13972] team0: Port device team_slave_0 added
[ 1002.903526][T13971] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1002.911045][T13978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1002.954318][T13978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1003.007989][T13972] team0: Port device team_slave_1 added
[ 1003.017919][T13971] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1003.232514][T13978] team0: Port device team_slave_0 added
[ 1003.244135][T13972] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1003.288038][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1003.393352][T13972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1003.440758][T13978] team0: Port device team_slave_1 added
[ 1003.468396][T13972] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1003.490823][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1003.603818][T13972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1003.807851][T13978] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1003.840536][T13978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1003.950705][T13978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1004.007120][T13978] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1004.056056][T13767] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1004.081835][T13978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1004.221442][T13978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1004.319382][T13972] hsr_slave_0: entered promiscuous mode
[ 1004.347327][T13972] hsr_slave_1: entered promiscuous mode
[ 1004.369852][T13972] debugfs: 'hsr0' already exists in 'hsr'
[ 1004.427965][T13767] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1004.450953][T13767] Bluetooth: hci5: command 0x0419 tx timeout
[ 1004.457771][T13780] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1004.475041][T13972] Cannot create hsr debugfs directory
[ 1004.531177][T13767] Bluetooth: hci0: command 0x0419 tx timeout
[ 1004.611206][T13767] Bluetooth: hci2: command 0x040f tx timeout
[ 1004.759377][T14010] mkiss: ax0: crc mode is auto.
[ 1004.851330][T13767] Bluetooth: hci6: command 0x040f tx timeout
[ 1004.942383][T13978] hsr_slave_0: entered promiscuous mode
[ 1004.991198][T13978] hsr_slave_1: entered promiscuous mode
[ 1005.032761][T13978] debugfs: 'hsr0' already exists in 'hsr'
[ 1005.039364][T13978] Cannot create hsr debugfs directory
[ 1006.141716][T13972] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1006.180020][T14020] FAULT_INJECTION: forcing a failure.
[ 1006.180020][T14020] name failslab, interval 1, probability 0, space 0, times 0
[ 1006.217586][T14020] CPU: 0 UID: 0 PID: 14020 Comm: syz.4.1594 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1006.217628][T14020] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1006.217637][T14020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1006.217652][T14020] Call Trace:
[ 1006.217660][T14020]  <TASK>
[ 1006.217669][T14020]  dump_stack_lvl+0x100/0x190
[ 1006.217714][T14020]  should_fail_ex.cold+0x5/0xa
[ 1006.217744][T14020]  should_failslab+0xc2/0x120
[ 1006.217771][T14020]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1006.217809][T14020]  ? security_file_alloc+0x34/0x2c0
[ 1006.217835][T14020]  ? trace_kmem_cache_alloc+0xf3/0x120
[ 1006.217869][T14020]  security_file_alloc+0x34/0x2c0
[ 1006.217895][T14020]  init_file+0x95/0x480
[ 1006.217924][T14020]  alloc_empty_file+0x73/0x1c0
[ 1006.217956][T14020]  dentry_open+0x46/0xd0
[ 1006.217987][T14020]  ima_calc_file_hash+0x2ad/0x480
[ 1006.218027][T14020]  ima_collect_measurement+0x887/0xa40
[ 1006.218074][T14020]  ? __pfx_ima_collect_measurement+0x10/0x10
[ 1006.218133][T14020]  ? lock_acquire+0x1cf/0x380
[ 1006.218180][T14020]  ? process_measurement+0x5ab/0x2350
[ 1006.218214][T14020]  ? is_bad_inode+0xd/0x40
[ 1006.218251][T14020]  ? xattr_resolve_name+0x27d/0x3f0
[ 1006.218295][T14020]  ? vfs_getxattr_alloc+0xec/0x350
[ 1006.218326][T14020]  ? ima_get_hash_algo+0x22d/0x400
[ 1006.218391][T14020]  ? __pfx_ima_get_hash_algo+0x10/0x10
[ 1006.218429][T14020]  ? process_measurement+0xdfe/0x2350
[ 1006.218461][T14020]  process_measurement+0xdfe/0x2350
[ 1006.218506][T14020]  ? __pfx_process_measurement+0x10/0x10
[ 1006.218577][T14020]  ? mutex_init_lockep+0x110/0x150
[ 1006.218612][T14020]  ? seq_open+0x116/0x170
[ 1006.218643][T14020]  ? inode_to_bdi+0x9e/0x160
[ 1006.218669][T14020]  ima_file_check+0xcc/0x120
[ 1006.218704][T14020]  ? __pfx_ima_file_check+0x10/0x10
[ 1006.218746][T14020]  security_file_post_open+0xc4/0x210
[ 1006.218832][T14020]  path_openat+0x1418/0x31a0
[ 1006.218870][T14020]  ? __pfx_path_openat+0x10/0x10
[ 1006.218906][T14020]  do_file_open+0x20e/0x430
[ 1006.218933][T14020]  ? __pfx_do_file_open+0x10/0x10
[ 1006.218979][T14020]  ? alloc_fd+0x476/0x790
[ 1006.219005][T14020]  ? do_getname+0x191/0x390
[ 1006.219038][T14020]  do_sys_openat2+0x10d/0x1e0
[ 1006.219070][T14020]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1006.219113][T14020]  __x64_sys_openat+0x12d/0x210
[ 1006.219146][T14020]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1006.219206][T14020]  do_syscall_64+0x106/0xf80
[ 1006.219240][T14020]  ? clear_bhb_loop+0x40/0x90
[ 1006.219271][T14020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1006.219297][T14020] RIP: 0033:0x7f505879c799
[ 1006.219329][T14020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1006.219360][T14020] RSP: 002b:00007f5059636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1006.219383][T14020] RAX: ffffffffffffffda RBX: 00007f5058a15fa0 RCX: 00007f505879c799
[ 1006.219399][T14020] RDX: 0000000000020803 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 1006.219415][T14020] RBP: 00007f5058832c99 R08: 0000000000000000 R09: 0000000000000000
[ 1006.219429][T14020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1006.219444][T14020] R13: 00007f5058a16038 R14: 00007f5058a15fa0 R15: 00007fff90f17c68
[ 1006.219475][T14020]  </TASK>
[ 1006.219687][   T30] audit: type=1800 audit(4295087527.798:11): pid=14020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1594" name="set_event_notrace_pid" dev="tracefs" ino=32 res=0 errno=0
[ 1006.653601][T14021] netlink: 314 bytes leftover after parsing attributes in process `syz.4.1594'.
[ 1006.742163][T13767] Bluetooth: hci0: command 0x0419 tx timeout
[ 1006.748840][T13767] Bluetooth: hci2: command 0x040f tx timeout
[ 1007.022337][T13780] Bluetooth: hci6: command 0x040f tx timeout
[ 1007.187357][T13978] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1007.295661][T13972] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1007.372052][T13972] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1007.484161][T13978] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1007.585909][T13978] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1007.646531][T13972] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1007.686748][T14032] hub 1-0:1.0: USB hub found
[ 1007.713913][T14032] hub 1-0:1.0: 1 port detected
[ 1007.973620][T13978] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1008.189646][T14031] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1008.210540][T14031] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1008.267695][T14031] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1008.312213][T14031] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1008.342984][T14031] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1008.378115][T14031] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1008.405618][T13978] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1008.415070][T14031] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1008.448706][T13972] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1008.526045][T13978] 8021q: adding VLAN 0 to HW filter on device team0
[ 1008.589561][T13798] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1008.597671][T13798] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1008.673674][T13798] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1008.681947][T13798] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1008.778610][T13972] 8021q: adding VLAN 0 to HW filter on device team0
[ 1008.826708][T13798] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1008.834523][T13798] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1008.927003][T13798] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1008.935078][T13798] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1009.195568][T13972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1009.970420][T13978] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1010.068790][T13972] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1010.137507][T13780] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1010.215423][T13780] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1010.297839][T13780] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1010.376465][T13780] Bluetooth: hci2: command 0x040f tx timeout
[ 1010.383550][T13780] Bluetooth: hci0: command 0x0419 tx timeout
[ 1010.390792][T13767] Bluetooth: hci5: command 0x0419 tx timeout
[ 1010.460095][T14064] Bluetooth: hci6: command 0x040f tx timeout
[ 1011.022388][T13972] veth0_vlan: entered promiscuous mode
[ 1011.052316][T13978] veth0_vlan: entered promiscuous mode
[ 1011.080498][T13972] veth1_vlan: entered promiscuous mode
[ 1011.105182][T13978] veth1_vlan: entered promiscuous mode
[ 1011.209651][T13972] veth0_macvtap: entered promiscuous mode
[ 1011.237476][T13978] veth0_macvtap: entered promiscuous mode
[ 1011.262007][T13972] veth1_macvtap: entered promiscuous mode
[ 1011.278505][T13978] veth1_macvtap: entered promiscuous mode
[ 1011.330697][T13972] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1011.362811][T13978] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1011.394153][T13972] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1011.425346][T13978] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1011.468748][T13765] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.507880][T13765] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.535304][T13765] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.595103][T13765] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.616032][T13765] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.702848][T13765] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.738232][T13765] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.801098][T13765] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.949892][T14078] binder: 14077:14078 ioctl c0306201 200000000400 returned -14
[ 1011.973901][T13770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1012.018577][T13770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1012.034928][T14030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1012.054143][T14030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1012.166161][T14028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1012.192462][T14028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1012.204684][T13790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1012.259129][T13790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1012.456012][T14064] Bluetooth: hci2: command 0x040f tx timeout
[ 1012.539243][T14064] Bluetooth: hci6: command 0x040f tx timeout
[ 1014.410250][T14112] hub 1-0:1.0: USB hub found
[ 1014.464001][T14112] hub 1-0:1.0: 1 port detected
[ 1014.539819][T14064] Bluetooth: hci2: command 0x040f tx timeout
[ 1014.655393][T14064] Bluetooth: hci6: command 0x040f tx timeout
[ 1016.176400][T14129] [U]  
[ 1016.179427][T14129] [U] 
[ 1016.182415][T14129] [U] 
[ 1016.185230][T14129] [U] 
[ 1016.275004][T14129] [U] 
[ 1016.277870][T14129] [U] 
[ 1016.280815][T14129] [U] 
[ 1016.283536][T14129] [U] 
[ 1016.396486][T14129] [U] 
[ 1016.427628][T14132] FAULT_INJECTION: forcing a failure.
[ 1016.427628][T14132] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1016.477351][T14132] CPU: 0 UID: 0 PID: 14132 Comm: syz.7.1607 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1016.477392][T14132] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1016.477401][T14132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1016.477415][T14132] Call Trace:
[ 1016.477422][T14132]  <TASK>
[ 1016.477431][T14132]  dump_stack_lvl+0x100/0x190
[ 1016.477471][T14132]  should_fail_ex.cold+0x5/0xa
[ 1016.477500][T14132]  _copy_from_iter+0x1f4/0x1690
[ 1016.477531][T14132]  ? __pfx__copy_from_iter+0x10/0x10
[ 1016.477725][T14132]  ? trace_kmalloc+0x101/0x130
[ 1016.477749][T14132]  ? __kasan_kmalloc+0xaa/0xb0
[ 1016.477785][T14132]  ? file_tty_write.isra.0+0x694/0x890
[ 1016.477900][T14132]  ? rcu_is_watching+0x12/0xc0
[ 1016.477936][T14132]  ? file_tty_write.isra.0+0x694/0x890
[ 1016.477964][T14132]  ? kfree+0x2ec/0x6b0
[ 1016.477998][T14132]  file_tty_write.isra.0+0x45b/0x890
[ 1016.478036][T14132]  vfs_write+0x6ac/0x1070
[ 1016.478079][T14132]  ? __pfx_tty_write+0x10/0x10
[ 1016.478110][T14132]  ? __pfx_vfs_write+0x10/0x10
[ 1016.478145][T14132]  ? find_held_lock+0x2b/0x80
[ 1016.478185][T14132]  ksys_write+0x12a/0x250
[ 1016.478206][T14132]  ? __pfx_ksys_write+0x10/0x10
[ 1016.478235][T14132]  do_syscall_64+0x106/0xf80
[ 1016.478264][T14132]  ? clear_bhb_loop+0x40/0x90
[ 1016.478300][T14132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1016.478325][T14132] RIP: 0033:0x7f56ffd9c799
[ 1016.478345][T14132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1016.478368][T14132] RSP: 002b:00007f5700cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1016.478390][T14132] RAX: ffffffffffffffda RBX: 00007f5700015fa0 RCX: 00007f56ffd9c799
[ 1016.478406][T14132] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003
[ 1016.478420][T14132] RBP: 00007f5700cdd090 R08: 0000000000000000 R09: 0000000000000000
[ 1016.478434][T14132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1016.478447][T14132] R13: 00007f5700016038 R14: 00007f5700015fa0 R15: 00007fff72d2a158
[ 1016.478478][T14132]  </TASK>
[ 1017.360816][T14138] bonding: no command found in bonding_masters - use +ifname or -ifname
[ 1017.597361][   T30] audit: type=1800 audit(4295090608.169:12): pid=14142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1611" name="members" dev="configfs" ino=410104 res=0 errno=0
[ 1017.649588][T14115] hub 1-0:1.0: USB hub found
[ 1017.675054][T14115] hub 1-0:1.0: 1 port detected
[ 1017.802546][T14118] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1017.813665][T14118] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1017.841638][T14118] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1017.864904][T14118] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1017.889173][T14118] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1017.918527][T14118] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1017.938286][T14118] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1018.301126][T14064] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1019.823788][T14064] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1019.904172][T14064] Bluetooth: hci0: command 0x0419 tx timeout
[ 1019.910737][T13774] Bluetooth: hci5: command 0x0419 tx timeout
[ 1019.918810][T13780] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1019.984011][T14064] Bluetooth: hci6: command 0x040f tx timeout
[ 1019.991606][T13774] Bluetooth: hci2: command 0x040f tx timeout
[ 1020.010446][T14165] [U]  
[ 1020.013406][T14165] [U] 
[ 1020.016654][T14165] [U] 
[ 1020.019596][T14165] [U] 
[ 1020.128096][T14164] hub 1-0:1.0: USB hub found
[ 1020.159985][T14165] FAULT_INJECTION: forcing a failure.
[ 1020.159985][T14165] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1020.291007][T14164] hub 1-0:1.0: 1 port detected
[ 1020.298577][T14165] CPU: 0 UID: 0 PID: 14165 Comm: syz.7.1617 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1020.298619][T14165] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1020.298627][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1020.298641][T14165] Call Trace:
[ 1020.298648][T14165]  <TASK>
[ 1020.298657][T14165]  dump_stack_lvl+0x100/0x190
[ 1020.298708][T14165]  should_fail_ex.cold+0x5/0xa
[ 1020.298741][T14165]  _copy_from_iter+0x1f4/0x1690
[ 1020.298772][T14165]  ? __pfx__copy_from_iter+0x10/0x10
[ 1020.298801][T14165]  ? __pfx___might_resched+0x10/0x10
[ 1020.298841][T14165]  file_tty_write.isra.0+0x45b/0x890
[ 1020.298880][T14165]  vfs_write+0x6ac/0x1070
[ 1020.298942][T14165]  ? __pfx_tty_write+0x10/0x10
[ 1020.298973][T14165]  ? __pfx_vfs_write+0x10/0x10
[ 1020.299007][T14165]  ? find_held_lock+0x2b/0x80
[ 1020.299047][T14165]  ksys_write+0x12a/0x250
[ 1020.299067][T14165]  ? __pfx_ksys_write+0x10/0x10
[ 1020.299096][T14165]  do_syscall_64+0x106/0xf80
[ 1020.299124][T14165]  ? clear_bhb_loop+0x40/0x90
[ 1020.299153][T14165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1020.299177][T14165] RIP: 0033:0x7f56ffd9c799
[ 1020.299196][T14165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1020.299218][T14165] RSP: 002b:00007f5700cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1020.299240][T14165] RAX: ffffffffffffffda RBX: 00007f5700015fa0 RCX: 00007f56ffd9c799
[ 1020.299255][T14165] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003
[ 1020.299268][T14165] RBP: 00007f5700cdd090 R08: 0000000000000000 R09: 0000000000000000
[ 1020.299283][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1020.299296][T14165] R13: 00007f5700016038 R14: 00007f5700015fa0 R15: 00007fff72d2a158
[ 1020.299326][T14165]  </TASK>
[ 1020.836872][T14171] hub 1-0:1.0: USB hub found
[ 1020.870496][T14171] hub 1-0:1.0: 1 port detected
[ 1021.182900][T14156] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1021.193355][T14156] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1021.200458][T14156] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1021.225707][T14156] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1021.263230][T14156] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1021.289668][T14156] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1021.319498][T14156] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1021.343126][T13774] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1021.355812][T13774] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1021.372224][T13774] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1021.384328][T13774] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1021.393578][T13774] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1022.182214][T14169] chnl_net:caif_netlink_parms(): no params data found
[ 1022.207476][T14165] [U] 
[ 1022.696627][T14169] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1022.771484][T14169] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1022.779082][T14169] bridge_slave_0: entered allmulticast mode
[ 1022.850842][T14169] bridge_slave_0: entered promiscuous mode
[ 1022.860631][T13774] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1022.904759][T14169] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1022.960623][T14169] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1022.968391][T14169] bridge_slave_1: entered allmulticast mode
[ 1023.026358][T14169] bridge_slave_1: entered promiscuous mode
[ 1023.181804][T14169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1023.256478][T14169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1023.272557][T13774] Bluetooth: hci5: command 0x0419 tx timeout
[ 1023.279964][T13774] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1023.286742][T14064] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1023.341029][T13774] Bluetooth: hci6: command 0x040f tx timeout
[ 1023.347693][T14064] Bluetooth: hci2: command 0x040f tx timeout
[ 1023.354786][T13780] Bluetooth: hci0: command 0x0419 tx timeout
[ 1023.490027][T14169] team0: Port device team_slave_0 added
[ 1023.506718][T13774] Bluetooth: hci7: command tx timeout
[ 1023.614735][T14169] team0: Port device team_slave_1 added
[ 1023.931933][T14169] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1023.969017][T14169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1024.120845][T14169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1024.442083][T14169] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1024.449265][T14169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1024.640889][T14169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1025.130375][T14169] hsr_slave_0: entered promiscuous mode
[ 1025.157499][T14169] hsr_slave_1: entered promiscuous mode
[ 1025.191683][T14169] debugfs: 'hsr0' already exists in 'hsr'
[ 1025.213159][T14169] Cannot create hsr debugfs directory
[ 1025.581816][T13774] Bluetooth: hci7: command tx timeout
[ 1026.122144][T14225] hub 1-0:1.0: USB hub found
[ 1026.209823][T14225] hub 1-0:1.0: 1 port detected
[ 1026.494260][T14169] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1026.618417][T14169] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1026.765653][T14169] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1026.831139][T14169] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1027.010507][T14231] Console: switching to colour VGA+ 80x25
[ 1027.140252][T14237] binder: 14227:14237 ioctl c018620c 0 returned -1
[ 1027.163399][T14219] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1027.207171][T14169] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1027.229872][T14219] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1027.305736][T14169] 8021q: adding VLAN 0 to HW filter on device team0
[ 1027.328015][T14219] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1027.380346][T14028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1027.388486][T14028] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1027.412553][T14219] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1027.495566][T14219] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1027.511695][T14028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1027.520264][T14028] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1027.571209][T14219] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1027.654342][T14219] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1027.667796][T13774] Bluetooth: hci7: command tx timeout
[ 1027.708842][T14169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1027.735308][T14219] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1027.787660][T14219] Bluetooth: hci7: Opcode 0x0406 failed: -4
[ 1027.980827][T14219] Bluetooth: hci7: Opcode 0x0406 failed: -4
[ 1028.145366][T13774] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1028.601564][T14169] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1029.263378][T13774] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1029.351356][T13774] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1029.423682][T13774] Bluetooth: hci5: command 0x0419 tx timeout
[ 1029.504268][T13774] Bluetooth: hci0: command 0x0419 tx timeout
[ 1029.584144][T13774] Bluetooth: hci2: command 0x040f tx timeout
[ 1029.664523][T13774] Bluetooth: hci6: command 0x040f tx timeout
[ 1029.747676][T13774] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1029.836172][T14169] veth0_vlan: entered promiscuous mode
[ 1029.908964][T14169] veth1_vlan: entered promiscuous mode
[ 1030.151258][T14169] veth0_macvtap: entered promiscuous mode
[ 1030.212330][T14169] veth1_macvtap: entered promiscuous mode
[ 1030.315990][T14169] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1030.393083][T14169] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1030.487956][T14028] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1030.541823][T14028] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1030.645076][T14028] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1030.683965][T14028] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1031.133939][T14267] hub 1-0:1.0: USB hub found
[ 1031.174918][T13790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1031.236355][T13790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1031.267838][T14267] hub 1-0:1.0: 1 port detected
[ 1031.367008][T13790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1031.401161][T13790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1031.824566][T13774] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1033.606345][T14296] [U] ^@
[ 1033.908119][T13774] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1034.025943][T14301] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1642'.
[ 1034.250470][T14305] netlink: 'syz.9.1642': attribute type 23 has an invalid length.
[ 1034.309576][T14276] hub 1-0:1.0: USB hub found
[ 1034.362760][T14276] hub 1-0:1.0: 1 port detected
[ 1036.530460][T14329] hub 1-0:1.0: USB hub found
[ 1036.561540][T14329] hub 1-0:1.0: 1 port detected
[ 1036.796458][T14332] hub 1-0:1.0: USB hub found
[ 1036.824196][T14332] hub 1-0:1.0: 1 port detected
[ 1037.343142][T14323] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1037.377984][T14323] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1037.421668][T14323] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1037.472891][T14323] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1037.536927][T14323] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1037.571602][T14323] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1037.625292][T14323] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1037.681446][T14323] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1037.710839][T14349] [U] ^@
[ 1038.707968][T13774] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1039.442338][T13774] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1039.450924][T14064] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1039.518783][T13774] Bluetooth: hci5: command 0x0419 tx timeout
[ 1039.592871][T13774] Bluetooth: hci2: command 0x040f tx timeout
[ 1039.599626][T14064] Bluetooth: hci0: command 0x0419 tx timeout
[ 1039.669271][T13774] Bluetooth: hci6: command 0x040f tx timeout
[ 1039.751573][T13774] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1040.738190][T14352] hub 1-0:1.0: USB hub found
[ 1040.796937][T14390] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1040.904906][T14352] hub 1-0:1.0: 1 port detected
[ 1041.000344][T14338] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1041.093905][T14338] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1041.155098][T14338] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1041.197674][T14383] hub 1-0:1.0: USB hub found
[ 1041.223916][T14338] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1041.262530][T14383] hub 1-0:1.0: 1 port detected
[ 1041.269408][T14338] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1041.320239][T14338] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1041.374929][T14338] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1041.434977][T14338] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1041.610083][T14398] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1660'.
[ 1042.015324][T14407] [U] ^@
[ 1042.632659][T13774] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1043.114179][T13774] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1043.190478][T13774] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1043.270511][T13774] Bluetooth: hci5: command 0x0419 tx timeout
[ 1043.355899][T13774] Bluetooth: hci2: command 0x040f tx timeout
[ 1043.362503][T14064] Bluetooth: hci0: command 0x0419 tx timeout
[ 1043.441712][T14064] Bluetooth: hci6: command 0x040f tx timeout
[ 1043.514142][T14064] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1043.851145][T14415] hub 1-0:1.0: USB hub found
[ 1043.885797][T14415] hub 1-0:1.0: 1 port detected
[ 1043.986937][T14414] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1044.019155][T14414] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1044.068638][T14414] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1044.121742][T14414] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1044.181432][T14414] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1044.220941][T14414] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1044.261740][T14414] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1044.268936][T14414] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1044.774780][T14422] hub 1-0:1.0: USB hub found
[ 1044.821410][T14422] hub 1-0:1.0: 1 port detected
[ 1044.924677][T14418] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1044.962541][T14418] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1045.001289][T14418] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1045.028861][T14418] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1045.074092][T14418] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1045.100070][T14418] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1045.139585][T14418] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1045.174258][T14418] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1046.173228][T14448] FAULT_INJECTION: forcing a failure.
[ 1046.173228][T14448] name failslab, interval 1, probability 0, space 0, times 0
[ 1046.227787][T14440] hub 1-0:1.0: USB hub found
[ 1046.254325][T14448] CPU: 0 UID: 0 PID: 14448 Comm: syz.7.1671 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1046.254367][T14448] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1046.254376][T14448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1046.254391][T14448] Call Trace:
[ 1046.254398][T14448]  <TASK>
[ 1046.254407][T14448]  dump_stack_lvl+0x100/0x190
[ 1046.254450][T14448]  should_fail_ex.cold+0x5/0xa
[ 1046.254479][T14448]  should_failslab+0xc2/0x120
[ 1046.254504][T14448]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1046.254541][T14448]  ? create_new_namespaces+0x30/0xac0
[ 1046.254567][T14448]  ? rcu_is_watching+0x12/0xc0
[ 1046.254609][T14448]  create_new_namespaces+0x30/0xac0
[ 1046.254633][T14448]  ? bpf_lsm_capable+0x9/0x10
[ 1046.254775][T14448]  ? security_capable+0x80/0x260
[ 1046.254814][T14448]  unshare_nsproxy_namespaces+0xc3/0x1f0
[ 1046.254843][T14448]  ksys_unshare+0x473/0xad0
[ 1046.254876][T14448]  ? __pfx_ksys_unshare+0x10/0x10
[ 1046.254917][T14448]  __x64_sys_unshare+0x31/0x40
[ 1046.254946][T14448]  do_syscall_64+0x106/0xf80
[ 1046.254976][T14448]  ? clear_bhb_loop+0x40/0x90
[ 1046.255005][T14448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1046.255031][T14448] RIP: 0033:0x7f56ffd9c799
[ 1046.255051][T14448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1046.255075][T14448] RSP: 002b:00007f5700cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1046.255098][T14448] RAX: ffffffffffffffda RBX: 00007f5700015fa0 RCX: 00007f56ffd9c799
[ 1046.255114][T14448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1046.255128][T14448] RBP: 00007f56ffe32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1046.255142][T14448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1046.255157][T14448] R13: 00007f5700016038 R14: 00007f5700015fa0 R15: 00007fff72d2a158
[ 1046.255187][T14448]  </TASK>
[ 1046.604682][T14440] hub 1-0:1.0: 1 port detected
[ 1046.753994][T13774] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1047.069894][T14064] Bluetooth: hci5: command 0x0419 tx timeout
[ 1047.077085][T14064] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1047.084337][T14064] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1047.112421][T13774] Bluetooth: hci2: command 0x040f tx timeout
[ 1047.119071][T13774] Bluetooth: hci0: command 0x0419 tx timeout
[ 1047.227427][T14064] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1047.234528][T14064] Bluetooth: hci6: command 0x040f tx timeout
[ 1047.244251][T14459] [U] ^@
[ 1048.894130][T14478] [U]  
[ 1048.897108][T14478] [U] 
[ 1048.900115][T14478] [U] 
[ 1048.902915][T14478] [U] 
[ 1048.988594][T14478] [U] 
[ 1048.991708][T14478] [U] 
[ 1048.994992][T14478] [U] 
[ 1048.998442][T14478] [U] 
[ 1049.080786][T14478] [U] 
[ 1050.231314][T14483] hub 1-0:1.0: USB hub found
[ 1050.333902][T14492] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1050.365402][T14483] hub 1-0:1.0: 1 port detected
[ 1050.405542][T14492] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1050.451470][T14492] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1050.493525][T14492] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1050.525615][T14492] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1050.554624][T14492] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1050.573674][T14481] hub 1-0:1.0: USB hub found
[ 1050.581564][T14492] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1050.613600][T14481] hub 1-0:1.0: 1 port detected
[ 1050.623597][T14492] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1051.415926][T14508] hub 1-0:1.0: USB hub found
[ 1051.454982][T14508] hub 1-0:1.0: 1 port detected
[ 1051.994863][T13774] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1052.161845][T14515] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78300
[ 1052.353525][T14515] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1052.476280][T13774] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1052.482999][T14064] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1052.554954][T13774] Bluetooth: hci0: command 0x0419 tx timeout
[ 1052.561439][T14064] Bluetooth: hci5: command 0x0419 tx timeout
[ 1052.624383][T14515] memcg:ffff888078300811
[ 1052.635338][T13774] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1052.641995][T14064] Bluetooth: hci6: command 0x040f tx timeout
[ 1052.653864][T13780] Bluetooth: hci2: command 0x040f tx timeout
[ 1052.717990][T14515] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1052.858136][T14515] page_type: f5(slab)
[ 1052.908621][T14515] raw: 00fff00000000040 ffff88813fe543c0 dead000000000100 dead000000000122
[ 1053.089381][T14515] raw: 0000000000000000 0000100000080008 00000000f5000000 ffff888078300811
[ 1053.144638][T14515] head: 00fff00000000040 ffff88813fe543c0 dead000000000100 dead000000000122
[ 1053.299931][T14515] head: 0000000000000000 0000100000080008 00000000f5000000 ffff888078300811
[ 1053.370875][T14515] head: 00fff00000000003 ffffea0001e0c001 00000000ffffffff 00000000ffffffff
[ 1053.476871][T14515] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1053.527527][T14515] page dumped because: unmovable page
[ 1053.593800][T14515] page_owner tracks the page as allocated
[ 1053.626431][T14515] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13907, tgid 13907 (syz-executor), ts 994405941058, free_ts 994119735572
[ 1053.806324][T14515]  post_alloc_hook+0x153/0x170
[ 1053.821716][T14515]  get_page_from_freelist+0x111d/0x3140
[ 1053.868964][T14515]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 1053.919902][T14515]  new_slab+0xa6/0x6c0
[ 1053.957485][T14515]  refill_objects+0x26b/0x400
[ 1053.987127][T14515]  __pcs_replace_empty_main+0x1ab/0x600
[ 1054.025035][T14515]  __kmalloc_node_track_caller_noprof+0x694/0x850
[ 1054.087349][T14515]  kmemdup_noprof+0x29/0x60
[ 1054.132702][T14515]  __devinet_sysctl_register+0xbc/0x360
[ 1054.152287][T14515]  devinet_sysctl_register+0x17b/0x210
[ 1054.232246][T14515]  inetdev_init+0x2b8/0x570
[ 1054.261617][T14515]  inetdev_event+0x7fa/0x17f0
[ 1054.298343][T14515]  notifier_call_chain+0x99/0x420
[ 1054.303813][T14515]  call_netdevice_notifiers_info+0xbe/0x110
[ 1054.391533][T14515]  register_netdevice+0x16e6/0x2210
[ 1054.428645][T14515]  veth_newlink+0x316/0xa00
[ 1054.434486][T14515] page last free pid 13907 tgid 13907 stack trace:
[ 1054.506568][T14515]  __free_frozen_pages+0x7e1/0x10d0
[ 1054.512144][T14515]  qlist_free_all+0x47/0xe0
[ 1054.578710][T14515]  kasan_quarantine_reduce+0x1a0/0x1f0
[ 1054.638103][T14515]  __kasan_slab_alloc+0x69/0x90
[ 1054.643245][T14515]  __kmalloc_cache_noprof+0x243/0x6f0
[ 1054.713053][T14515]  device_add+0xd3a/0x1950
[ 1054.740292][T14515]  netdev_register_kobject+0x1a9/0x3d0
[ 1054.768856][T14515]  register_netdevice+0x12e0/0x2210
[ 1054.791376][T13790] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow.
[ 1054.829078][T14515]  register_netdev+0x34/0x50
[ 1054.849293][T14515]  vti6_init_net+0x2c7/0x440
[ 1054.872162][T14515]  ops_init+0x1e2/0x5f0
[ 1054.906160][T14515]  setup_net+0x118/0x3a0
[ 1054.955276][T14515]  copy_net_ns+0x46f/0x7c0
[ 1054.990757][T14515]  create_new_namespaces+0x3ea/0xac0
[ 1055.056110][T14515]  unshare_nsproxy_namespaces+0xc3/0x1f0
[ 1055.106358][T14515]  ksys_unshare+0x473/0xad0
[ 1055.238075][T14552] Setting dangerous option i915.mitigations - tainting kernel
[ 1055.494572][T14552] Bad "i915.mitigations=Î×ÚCmâUQüF\§Þ	", 'Î×ÚCmâUQüF\§Þ' is unknown
[ 1055.623986][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.637015][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.183901][T14556] hub 1-0:1.0: USB hub found
[ 1056.314093][T14556] hub 1-0:1.0: 1 port detected
[ 1059.503323][T14601] hub 1-0:1.0: USB hub found
[ 1059.646275][T14601] hub 1-0:1.0: 1 port detected
[ 1059.877425][T14580] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1060.003829][T14580] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1060.063578][T14580] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1060.160550][T14580] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1060.231256][T14580] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1060.330935][T14580] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1060.382278][T14580] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1060.433353][T14580] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1061.120536][T13774] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1062.080721][T13774] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1062.086830][T13774] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1062.240088][T13780] Bluetooth: hci5: command 0x0419 tx timeout
[ 1062.246508][T13774] Bluetooth: hci0: command 0x0419 tx timeout
[ 1062.400238][T13774] Bluetooth: hci6: command 0x040f tx timeout
[ 1062.407991][T13774] Bluetooth: hci2: command 0x040f tx timeout
[ 1062.480101][T13774] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1073.594901][T14631] FAULT_INJECTION: forcing a failure.
[ 1073.594901][T14631] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1073.622641][T14630] random: crng reseeded on system resumption
[ 1073.673753][T14631] CPU: 0 UID: 0 PID: 14631 Comm: syz.8.1704 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1073.673794][T14631] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1073.673803][T14631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1073.673818][T14631] Call Trace:
[ 1073.673826][T14631]  <TASK>
[ 1073.673835][T14631]  dump_stack_lvl+0x100/0x190
[ 1073.673885][T14631]  should_fail_ex.cold+0x5/0xa
[ 1073.673909][T14631]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1073.673940][T14631]  should_fail_alloc_page+0xeb/0x140
[ 1073.673966][T14631]  prepare_alloc_pages+0x1f0/0x5f0
[ 1073.673995][T14631]  ? rcu_is_watching+0x12/0xc0
[ 1073.674035][T14631]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[ 1073.674073][T14631]  ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0
[ 1073.674111][T14631]  ? __pfx_css_rstat_updated+0x10/0x10
[ 1073.674148][T14631]  ? find_held_lock+0x2b/0x80
[ 1073.674169][T14631]  ? rcu_read_unlock+0x17/0x60
[ 1073.674195][T14631]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1073.674231][T14631]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1073.674268][T14631]  ? page_counter_charge+0x1d2/0x240
[ 1073.674300][T14631]  ? rcu_is_watching+0x12/0xc0
[ 1073.674336][T14631]  ? trace_mm_page_alloc+0x17a/0x1d0
[ 1073.674374][T14631]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1073.674422][T14631]  ? policy_nodemask+0xed/0x4f0
[ 1073.674450][T14631]  alloc_pages_mpol+0x1fb/0x550
[ 1073.674477][T14631]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1073.674503][T14631]  ? do_raw_spin_lock+0x128/0x260
[ 1073.674538][T14631]  ? find_held_lock+0x2b/0x80
[ 1073.674560][T14631]  ? __pud_alloc+0x529/0x6e0
[ 1073.674590][T14631]  alloc_pages_noprof+0x131/0x390
[ 1073.674617][T14631]  __pmd_alloc+0x3b/0x950
[ 1073.674643][T14631]  ? __pud_alloc+0x52e/0x6e0
[ 1073.674672][T14631]  walk_to_pmd+0x3a3/0x4c0
[ 1073.674702][T14631]  get_locked_pte+0x25/0xc0
[ 1073.674732][T14631]  map_ldt_struct+0x3c1/0xa70
[ 1073.674764][T14631]  ? __pfx_map_ldt_struct+0x10/0x10
[ 1073.674787][T14631]  ? alloc_pages_noprof+0x233/0x390
[ 1073.674818][T14631]  write_ldt+0x6d3/0xd40
[ 1073.674851][T14631]  ? __pfx_write_ldt+0x10/0x10
[ 1073.674876][T14631]  ? xfd_validate_state+0x129/0x190
[ 1073.674919][T14631]  __x64_sys_modify_ldt+0xb1/0x170
[ 1073.674945][T14631]  do_syscall_64+0x106/0xf80
[ 1073.674975][T14631]  ? clear_bhb_loop+0x40/0x90
[ 1073.675005][T14631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1073.675030][T14631] RIP: 0033:0x7f382ad9c799
[ 1073.675050][T14631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1073.675074][T14631] RSP: 002b:00007f382bb7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[ 1073.675097][T14631] RAX: ffffffffffffffda RBX: 00007f382b015fa0 RCX: 00007f382ad9c799
[ 1073.675114][T14631] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001
[ 1073.675129][T14631] RBP: 00007f382ae32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1073.675144][T14631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1073.675158][T14631] R13: 00007f382b016038 R14: 00007f382b015fa0 R15: 00007ffd9219cfa8
[ 1073.675188][T14631]  </TASK>
[ 1074.683034][T13780] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1074.821009][T13780] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1074.836442][T13780] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1075.012018][T14064] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1075.061899][T14064] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1076.051938][   T30] audit: type=1800 audit(4295107034.592:13): pid=14655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1704" name="trace_marker" dev="tracefs" ino=510 res=0 errno=0
[ 1076.171737][T14634] chnl_net:caif_netlink_parms(): no params data found
[ 1077.287414][T13780] Bluetooth: hci8: command tx timeout
[ 1078.286608][T14634] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1078.638000][T14634] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1078.998177][T14634] bridge_slave_0: entered allmulticast mode
[ 1079.368487][T13780] Bluetooth: hci8: command tx timeout
[ 1079.697567][T14634] bridge_slave_0: entered promiscuous mode
[ 1080.230647][T14634] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1080.265527][T14634] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1080.294875][T14634] bridge_slave_1: entered allmulticast mode
[ 1080.322749][T14634] bridge_slave_1: entered promiscuous mode
[ 1080.620860][T14634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1080.667927][T14634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1080.933145][T14634] team0: Port device team_slave_0 added
[ 1080.940716][T14681] hub 1-0:1.0: USB hub found
[ 1080.966652][T14634] team0: Port device team_slave_1 added
[ 1080.977133][T14681] hub 1-0:1.0: 1 port detected
[ 1081.116024][T14634] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1081.172512][T14634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1081.342230][T14634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1081.411223][T14634] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1081.462615][T13780] Bluetooth: hci8: command tx timeout
[ 1081.499387][T14634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1081.671081][T14634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1081.983672][T14634] hsr_slave_0: entered promiscuous mode
[ 1082.073385][T14634] hsr_slave_1: entered promiscuous mode
[ 1082.110613][T14634] debugfs: 'hsr0' already exists in 'hsr'
[ 1082.147269][T14634] Cannot create hsr debugfs directory
[ 1082.615600][T14693] hub 1-0:1.0: USB hub found
[ 1082.674234][T14693] hub 1-0:1.0: 1 port detected
[ 1083.020728][T14688] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1083.055310][T14688] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1083.093851][T14688] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1083.126852][T14688] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1083.180171][T14688] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1083.229011][T14688] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1083.283582][T14688] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1083.355142][T14688] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1083.417143][T14688] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 1083.460431][T14688] Bluetooth: hci8: Opcode 0x0406 failed: -4
[ 1083.549116][T14688] Bluetooth: hci8: Opcode 0x0406 failed: -4
[ 1083.822584][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1718'.
[ 1084.403582][T14725] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1085.073073][T13780] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1085.133069][T13774] Bluetooth: hci5: command 0x0419 tx timeout
[ 1085.141243][T13780] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1085.148459][T14064] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1085.211693][T13774] Bluetooth: hci0: command 0x0419 tx timeout
[ 1085.284493][T14732] hub 1-0:1.0: USB hub found
[ 1085.291805][T13774] Bluetooth: hci2: command 0x040f tx timeout
[ 1085.375815][T13774] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1085.385149][T13780] Bluetooth: hci6: command 0x040f tx timeout
[ 1085.453754][T13774] Bluetooth: hci8: command 0x0c1a tx timeout
[ 1085.486539][T14634] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1085.514518][T14732] hub 1-0:1.0: 1 port detected
[ 1085.772622][T14634] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1085.834856][T14634] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1086.052836][T14634] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1086.560756][T14634] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1086.724353][T14634] 8021q: adding VLAN 0 to HW filter on device team0
[ 1086.886551][T13790] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1086.894261][T13790] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1086.985333][T13790] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1086.993418][T13790] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1087.561048][T13774] Bluetooth: hci8: command 0x0c1a tx timeout
[ 1088.801497][T14634] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1089.045457][T14782] hub 1-0:1.0: USB hub found
[ 1089.171076][T14782] hub 1-0:1.0: 1 port detected
[ 1089.622010][T13774] Bluetooth: hci8: command 0x0c1a tx timeout
[ 1089.668143][T14770] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1089.704118][T14770] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1089.757144][T14770] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1089.784314][T14770] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1089.824600][T14770] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1089.833301][T14770] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1089.893768][T14770] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1089.947422][T14770] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1089.997759][T14770] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 1090.145887][T14634] veth0_vlan: entered promiscuous mode
[ 1090.231612][T14634] veth1_vlan: entered promiscuous mode
[ 1090.397565][T14634] veth0_macvtap: entered promiscuous mode
[ 1090.486954][T14634] veth1_macvtap: entered promiscuous mode
[ 1090.628441][T14634] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1090.659748][T13780] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1090.747515][T14634] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1090.841866][T14028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.951320][T14028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1091.028164][T14028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1091.414615][T14030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1091.505373][T14030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1091.687962][T14030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1091.776060][T13780] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1091.782726][T13774] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1091.835044][T14030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1091.858303][T13780] Bluetooth: hci2: command 0x040f tx timeout
[ 1091.867270][T13774] Bluetooth: hci0: command 0x0419 tx timeout
[ 1091.879376][T14064] Bluetooth: hci5: command 0x0419 tx timeout
[ 1091.935730][T13780] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1091.944303][T14064] Bluetooth: hci6: command 0x040f tx timeout
[ 1092.015636][T13780] Bluetooth: hci8: command 0x0c1a tx timeout
[ 1094.051940][T14856] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1095.416309][T14859] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1095.519397][T14859] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1095.571811][T14859] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1095.657160][T14859] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1095.720847][T14859] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1095.778083][T14859] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1095.784406][T14859] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1095.869880][T14859] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1095.907388][T14859] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 1097.458397][T14064] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1097.540059][T14064] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1097.619366][T14064] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1097.697740][T14064] Bluetooth: hci5: command 0x0419 tx timeout
[ 1097.779074][T14064] Bluetooth: hci0: command 0x0419 tx timeout
[ 1097.859382][T14064] Bluetooth: hci6: command 0x040f tx timeout
[ 1097.866156][T13780] Bluetooth: hci2: command 0x040f tx timeout
[ 1097.941389][T14064] Bluetooth: hci8: command 0x0c1a tx timeout
[ 1097.948304][T13780] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1098.605064][T14917] hub 1-0:1.0: USB hub found
[ 1098.702333][T14917] hub 1-0:1.0: 1 port detected
[ 1099.407266][T14891] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1099.504232][T14891] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1099.547913][T14891] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1099.614388][T14891] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1099.647393][T14891] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1099.707733][T14891] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1099.754838][T14891] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1099.812446][T14891] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1099.862888][T14891] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 1100.260617][T14064] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1100.363570][T14914] hub 1-0:1.0: USB hub found
[ 1100.414003][T14914] hub 1-0:1.0: 1 port detected
[ 1100.645949][T14922] hub 1-0:1.0: USB hub found
[ 1100.698857][T14922] hub 1-0:1.0: 1 port detected
[ 1100.801372][T14918] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1100.830786][T14918] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1100.882270][T14918] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1100.909515][T14918] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1100.969284][T14918] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1101.028167][T14918] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1101.083675][T14918] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1101.162261][T14918] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1101.229235][T14918] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 1102.360279][T14944] hub 1-0:1.0: USB hub found
[ 1102.408701][T14944] hub 1-0:1.0: 1 port detected
[ 1102.497528][T14953] hub 1-0:1.0: USB hub found
[ 1102.513462][T14956] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1102.537943][T14953] hub 1-0:1.0: 1 port detected
[ 1102.562705][T14956] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1102.598524][T14956] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1102.661922][T14956] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1102.690225][T14956] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1102.727564][T14956] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1102.785112][T14956] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1102.817602][T14956] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1102.870326][T14956] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 1103.453280][T14987] [U] ^@
[ 1103.701821][T14064] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1104.580946][T14064] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1104.661094][T14064] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1104.741370][T14064] Bluetooth: hci2: command 0x040f tx timeout
[ 1104.749052][T13780] Bluetooth: hci0: command 0x0419 tx timeout
[ 1104.762343][T13774] Bluetooth: hci5: command 0x0419 tx timeout
[ 1104.823097][T14064] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1104.830368][T13780] Bluetooth: hci6: command 0x040f tx timeout
[ 1104.918862][T14064] Bluetooth: hci8: command 0x0c1a tx timeout
[ 1104.991647][T15002] hub 1-0:1.0: USB hub found
[ 1105.052157][T15002] hub 1-0:1.0: 1 port detected
[ 1105.162283][T14983] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1105.226230][T14983] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1105.343420][T14983] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1105.349876][T14983] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1105.426506][T14983] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1105.463651][T14983] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1105.521457][T14983] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1105.563158][T14983] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1105.614002][T14983] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 1105.844399][T14991] hub 1-0:1.0: USB hub found
[ 1105.906140][T14991] hub 1-0:1.0: 1 port detected
[ 1106.536330][T15004] hub 1-0:1.0: USB hub found
[ 1106.609002][T15004] hub 1-0:1.0: 1 port detected
[ 1106.743593][T13780] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1107.222636][T13780] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1107.389110][T13780] Bluetooth: hci5: command 0x0419 tx timeout
[ 1107.396706][T14064] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1107.463681][T13780] Bluetooth: hci0: command 0x0419 tx timeout
[ 1107.542587][T13780] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1107.550302][T13780] Bluetooth: hci6: command 0x040f tx timeout
[ 1107.557222][T14064] Bluetooth: hci2: command 0x040f tx timeout
[ 1107.624202][T13780] Bluetooth: hci8: command 0x0c1a tx timeout
[ 1108.470802][T15071] hub 1-0:1.0: USB hub found
[ 1108.619852][T15071] hub 1-0:1.0: 1 port detected
[ 1110.284769][T15113] hub 1-0:1.0: USB hub found
[ 1110.354742][T15113] hub 1-0:1.0: 1 port detected
[ 1110.581602][T15083] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1110.626991][T15083] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1110.694650][T15083] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1110.743091][T15083] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1110.806977][T15083] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1110.817569][T15085] hub 1-0:1.0: USB hub found
[ 1110.844390][T15083] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1110.856555][T15085] hub 1-0:1.0: 1 port detected
[ 1110.892764][T15083] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1110.941352][T15083] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1110.981776][T15083] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 1111.891347][T15136] FAULT_INJECTION: forcing a failure.
[ 1111.891347][T15136] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1112.011921][T15136] CPU: 0 UID: 0 PID: 15136 Comm: syz.4.1768 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1112.011961][T15136] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1112.011970][T15136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1112.011984][T15136] Call Trace:
[ 1112.011991][T15136]  <TASK>
[ 1112.011999][T15136]  dump_stack_lvl+0x100/0x190
[ 1112.012039][T15136]  should_fail_ex.cold+0x5/0xa
[ 1112.012066][T15136]  get_futex_key+0x1d2/0x1620
[ 1112.012098][T15136]  ? __pfx_get_futex_key+0x10/0x10
[ 1112.012125][T15136]  ? find_held_lock+0x2b/0x80
[ 1112.012147][T15136]  ? futex_wake+0x456/0x530
[ 1112.012200][T15136]  futex_wake+0xea/0x530
[ 1112.012232][T15136]  ? __lock_acquire+0x4a5/0x2630
[ 1112.012264][T15136]  ? __pfx_futex_wake+0x10/0x10
[ 1112.012301][T15136]  ? do_accept+0x3e3/0x530
[ 1112.012326][T15136]  ? do_raw_spin_lock+0x128/0x260
[ 1112.012366][T15136]  do_futex+0x32b/0x350
[ 1112.012396][T15136]  ? __pfx_do_futex+0x10/0x10
[ 1112.012425][T15136]  ? find_held_lock+0x2b/0x80
[ 1112.012445][T15136]  ? __sys_accept4+0x1cb/0x200
[ 1112.012466][T15136]  ? __sys_accept4+0x1cb/0x200
[ 1112.012492][T15136]  __x64_sys_futex+0x34f/0x4d0
[ 1112.012525][T15136]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1112.012567][T15136]  do_syscall_64+0x106/0xf80
[ 1112.012594][T15136]  ? clear_bhb_loop+0x40/0x90
[ 1112.012628][T15136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1112.012651][T15136] RIP: 0033:0x7f505879c799
[ 1112.012670][T15136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1112.012693][T15136] RSP: 002b:00007f50596150e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1112.012714][T15136] RAX: ffffffffffffffda RBX: 00007f5058a16098 RCX: 00007f505879c799
[ 1112.012732][T15136] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5058a1609c
[ 1112.012750][T15136] RBP: 00007f5058a16090 R08: 0000000000000000 R09: 0000000000000000
[ 1112.012764][T15136] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1112.012778][T15136] R13: 00007f5058a16128 R14: 00007fff90f17b80 R15: 00007fff90f17c68
[ 1112.012808][T15136]  </TASK>
[ 1112.602298][T13780] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1112.743932][T13774] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1112.756016][T13774] Bluetooth: hci5: command 0x0419 tx timeout
[ 1112.763011][T13774] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1112.894544][T13780] Bluetooth: hci0: command 0x0419 tx timeout
[ 1112.964185][T13780] Bluetooth: hci6: command 0x040f tx timeout
[ 1112.983082][T13780] Bluetooth: hci2: command 0x040f tx timeout
[ 1112.991509][T13780] Bluetooth: hci8: command 0x0c1a tx timeout
[ 1112.999434][T13780] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1115.277073][T15189] hub 1-0:1.0: USB hub found
[ 1115.449151][T15189] hub 1-0:1.0: 1 port detected
[ 1116.107013][T15207] FAULT_INJECTION: forcing a failure.
[ 1116.107013][T15207] name failslab, interval 1, probability 0, space 0, times 0
[ 1116.188000][T15207] CPU: 0 UID: 0 PID: 15207 Comm: syz.8.1780 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1116.188043][T15207] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1116.188052][T15207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1116.188067][T15207] Call Trace:
[ 1116.188075][T15207]  <TASK>
[ 1116.188085][T15207]  dump_stack_lvl+0x100/0x190
[ 1116.188127][T15207]  should_fail_ex.cold+0x5/0xa
[ 1116.188155][T15207]  should_failslab+0xc2/0x120
[ 1116.188181][T15207]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1116.188213][T15207]  ? io_uring_setup.cold+0x6c/0x1d09
[ 1116.188255][T15207]  io_uring_setup.cold+0x6c/0x1d09
[ 1116.188295][T15207]  ? __pfx_io_uring_setup+0x10/0x10
[ 1116.188326][T15207]  ? do_futex+0x192/0x350
[ 1116.188358][T15207]  ? __pfx_do_futex+0x10/0x10
[ 1116.188402][T15207]  ? xfd_validate_state+0x129/0x190
[ 1116.188445][T15207]  __x64_sys_io_uring_setup+0xc2/0x170
[ 1116.188476][T15207]  do_syscall_64+0x106/0xf80
[ 1116.188505][T15207]  ? clear_bhb_loop+0x40/0x90
[ 1116.188534][T15207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.188559][T15207] RIP: 0033:0x7f382ad9c799
[ 1116.188578][T15207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1116.188602][T15207] RSP: 002b:00007f382bb7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[ 1116.188625][T15207] RAX: ffffffffffffffda RBX: 00007f382b015fa0 RCX: 00007f382ad9c799
[ 1116.188641][T15207] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059
[ 1116.188655][T15207] RBP: 00007f382ae32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1116.188670][T15207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1116.188684][T15207] R13: 00007f382b016038 R14: 00007f382b015fa0 R15: 00007ffd9219cfa8
[ 1116.188714][T15207]  </TASK>
[ 1117.177786][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1117.188031][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1118.861881][T15238] hub 1-0:1.0: USB hub found
[ 1119.028148][T15238] hub 1-0:1.0: 1 port detected
[ 1119.300659][T15247] hub 1-0:1.0: USB hub found
[ 1119.427394][T15247] hub 1-0:1.0: 1 port detected
[ 1119.641845][T15251] mtrr: base(0x1000) is not aligned on a size(0x0000) boundary
[ 1121.208119][T15256] hub 1-0:1.0: USB hub found
[ 1121.243412][T15256] hub 1-0:1.0: 1 port detected
[ 1121.351005][T15255] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1121.399848][T15255] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1121.426902][T15255] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1121.454275][T15255] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1121.497602][T15255] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1121.530295][T15255] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1121.562796][T15255] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1121.603669][T15255] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1121.616079][T15261] hub 1-0:1.0: USB hub found
[ 1121.638602][T15261] hub 1-0:1.0: 1 port detected
[ 1121.648648][T15255] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 1121.790652][T15262] hub 1-0:1.0: USB hub found
[ 1121.875797][T15262] hub 1-0:1.0: 1 port detected
[ 1122.203173][   T31] INFO: task kworker/u10:3:13772 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1122.260472][   T31]       Tainted: G     U       L      syzkaller #0
[ 1122.320505][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1122.397295][   T31] task:kworker/u10:3   state:D stack:26888 pid:13772 tgid:13772 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1122.447694][T15287] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[ 1122.515614][   T31] Workqueue: netns cleanup_net
[ 1122.559224][   T31] Call Trace:
[ 1122.594931][   T31]  <TASK>
[ 1122.629131][   T31]  __schedule+0xfee/0x6120
[ 1122.655414][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1122.693276][   T31]  ? __pfx___schedule+0x10/0x10
[ 1122.739955][   T31]  ? find_held_lock+0x2b/0x80
[ 1122.745040][   T31]  ? schedule+0x2bf/0x390
[ 1122.774984][   T31]  schedule+0xdd/0x390
[ 1122.813484][   T31]  schedule_timeout+0x1b2/0x280
[ 1122.839190][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1122.855155][   T31]  ? mark_held_locks+0x40/0x70
[ 1122.879919][   T31]  __wait_for_common+0x2e7/0x4c0
[ 1122.885392][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1122.941452][   T31]  ? __pfx___wait_for_common+0x10/0x10
[ 1122.947681][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1123.076595][T13774] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1123.110916][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[ 1123.190604][   T31]  __flush_workqueue+0x3f7/0x1200
[ 1123.195938][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1123.246433][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1123.280706][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[ 1123.300924][   T31]  ? reacquire_held_locks+0xce/0x1e0
[ 1123.323732][   T31]  ? __pfx_sock_def_readable+0x10/0x10
[ 1123.350264][   T31]  ? __pfx_sock_def_readable+0x10/0x10
[ 1123.357629][   T31]  rds_tcp_listen_stop+0x104/0x160
[ 1123.400230][   T31]  rds_tcp_exit_net+0xe0/0x870
[ 1123.407238][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[ 1123.450305][   T31]  ? __pfx___might_resched+0x10/0x10
[ 1123.456910][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[ 1123.471918][T13774] Bluetooth: hci5: command 0x0419 tx timeout
[ 1123.478701][T13774] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1123.494213][T13780] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1123.511320][   T31]  ops_undo_list+0x2ee/0xab0
[ 1123.517363][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[ 1123.541419][   T31]  ? cleanup_net+0x332/0x920
[ 1123.546807][   T31]  ? idr_destroy+0x62/0x2e0
[ 1123.551910][T13774] Bluetooth: hci2: command 0x040f tx timeout
[ 1123.558779][T13774] Bluetooth: hci0: command 0x0419 tx timeout
[ 1123.580652][   T31]  cleanup_net+0x499/0x920
[ 1123.586149][   T31]  ? __pfx_cleanup_net+0x10/0x10
[ 1123.606908][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1123.614769][   T31]  process_one_work+0x9d7/0x1920
[ 1123.620853][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 1123.630442][T13780] Bluetooth: hci6: command 0x040f tx timeout
[ 1123.638017][T13774] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1123.647175][   T31]  ? __pfx_cleanup_net+0x10/0x10
[ 1123.653874][   T31]  worker_thread+0x5da/0xe40
[ 1123.659258][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1123.671872][   T31]  ? kthread+0x13a/0x450
[ 1123.676498][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1123.683826][   T31]  kthread+0x370/0x450
[ 1123.689176][   T31]  ? __pfx_kthread+0x10/0x10
[ 1123.695703][   T31]  ret_from_fork+0x754/0xd80
[ 1123.705588][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1123.714723][T13774] Bluetooth: hci8: command 0x0c1a tx timeout
[ 1123.723393][   T31]  ? __switch_to+0x7b4/0x1120
[ 1123.729896][   T31]  ? __pfx_kthread+0x10/0x10
[ 1123.737755][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1123.743119][   T31]  </TASK>
[ 1123.890737][   T31] 
[ 1123.890737][   T31] Showing all locks held in the system:
[ 1123.959307][   T31] 1 lock held by khungtaskd/31:
[ 1124.004328][   T31]  #0: ffffffff8e7e7460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1124.100001][   T31] 4 locks held by kworker/0:3/5895:
[ 1124.135195][   T31] 1 lock held by syz-executor/10470:
[ 1124.213418][   T31] 3 locks held by kworker/u10:3/13772:
[ 1124.219527][   T31]  #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1124.322554][   T31]  #1: ffffc90003517d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1124.420776][   T31]  #2: ffffffff905fac50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[ 1124.516678][   T31] 1 lock held by syz.1.1561/13829:
[ 1124.555187][   T31]  #0: ffffffff905fac50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1124.614064][   T31] 1 lock held by syz.5.1572/13897:
[ 1124.671203][   T31]  #0: ffffffff905fac50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1124.740167][   T31] 1 lock held by syz.2.1574/13900:
[ 1124.780948][   T31]  #0: ffffffff905fac50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1124.851262][   T31] 1 lock held by syz.6.1592/14011:
[ 1124.896928][   T31]  #0: ffffffff905fac50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1124.948406][   T31] 2 locks held by getty/14311:
[ 1124.966825][   T31]  #0: ffff88803841b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1124.984263][   T31]  #1: ffffc900038512f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 1125.005294][   T31] 1 lock held by syz.9.1695/14579:
[ 1125.011376][   T31]  #0: ffffffff905fac50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1125.023336][   T31] 1 lock held by syz-executor/14634:
[ 1125.029153][   T31]  #0: ffffffff906134a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1125.039541][   T31] 1 lock held by syz.7.1794/15293:
[ 1125.045243][   T31]  #0: ffffffff906134a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1125.093563][   T31] 
[ 1125.096237][   T31] =============================================
[ 1125.096237][   T31] 
[ 1125.136125][   T31] NMI backtrace for cpu 0
[ 1125.136153][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1125.136194][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1125.136205][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1125.136221][   T31] Call Trace:
[ 1125.136229][   T31]  <TASK>
[ 1125.136238][   T31]  dump_stack_lvl+0x100/0x190
[ 1125.136280][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1125.136318][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1125.136378][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1125.136422][   T31]  sys_info+0x141/0x190
[ 1125.136454][   T31]  watchdog+0xd25/0x1050
[ 1125.136485][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1125.136508][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1125.136537][   T31]  ? kthread+0x13a/0x450
[ 1125.136565][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1125.136584][   T31]  kthread+0x370/0x450
[ 1125.136612][   T31]  ? __pfx_kthread+0x10/0x10
[ 1125.136644][   T31]  ret_from_fork+0x754/0xd80
[ 1125.136680][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1125.136716][   T31]  ? __switch_to+0x7b4/0x1120
[ 1125.136741][   T31]  ? __pfx_kthread+0x10/0x10
[ 1125.136773][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1125.136810][   T31]  </TASK>
[ 1125.426704][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1125.434614][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1125.446435][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1125.451992][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1125.462810][   T31] Call Trace:
[ 1125.467209][   T31]  <TASK>
[ 1125.470639][   T31]  dump_stack_lvl+0x100/0x190
[ 1125.475941][   T31]  vpanic+0x552/0x970
[ 1125.480665][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1125.486957][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1125.495626][   T31]  panic+0xd1/0xe0
[ 1125.500202][   T31]  ? __pfx_panic+0x10/0x10
[ 1125.506686][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1125.515332][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1125.523538][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1125.531177][   T31]  ? watchdog.cold+0x198/0x1ca
[ 1125.536347][   T31]  ? watchdog+0xd35/0x1050
[ 1125.541400][   T31]  watchdog.cold+0x1a9/0x1ca
[ 1125.546231][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1125.551339][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1125.556684][   T31]  ? kthread+0x13a/0x450
[ 1125.561405][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1125.566607][   T31]  kthread+0x370/0x450
[ 1125.571168][   T31]  ? __pfx_kthread+0x10/0x10
[ 1125.576088][   T31]  ret_from_fork+0x754/0xd80
[ 1125.581281][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1125.586907][   T31]  ? __switch_to+0x7b4/0x1120
[ 1125.592789][   T31]  ? __pfx_kthread+0x10/0x10
[ 1125.598315][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1125.603622][   T31]  </TASK>
[ 1125.608454][   T31] Kernel Offset: disabled
[ 1125.613977][   T31] Rebooting in 86400 seconds..