last executing test programs:

59.778834668s ago: executing program 1 (id=321):
r0 = fsmount$auto(0xffffffffffffffff, 0x5, 0x746e7087)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$auto_RTC_AIE_ON(r1, 0x7001, 0xe703)
ioctl$auto_UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x143080, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x204880, 0x0)
r2 = socketcall$auto(0x2a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0)
close_range$auto(r3, 0x8, 0x0)
r4 = socketcall$auto(0x100000a, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto(0x3, 0xae41, r2)
r5 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
landlock_restrict_self$auto(r5, 0x3)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r7)
ioctl$auto_KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x11e, 0x7, 0x1000}]})
pidfd_open$auto(0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

59.490544826s ago: executing program 0 (id=322):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x4800, 0x0)
unshare$auto(0x40000080)
ioctl$auto_BLKPG(0xffffffffffffffff, 0x1269, 0x300)
timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x2401, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0)
write$auto(r0, &(0x7f0000000080)='Y\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d)
keyctl$auto(0x8, 0x0, 0xffffffffffffffff, 0x0, 0x6)
write$auto(r0, &(0x7f0000000180), 0x1)
unshare$auto(0x40000080)
r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r1, &(0x7f0000000180)="b953e6ca6360e45b4fd8ecccc52782d28ddb740407f4571929f3c0f5962cf000e2d2cac4c602", 0x26)
mmap$auto(0x0, 0x800040009, 0x4000000000df, 0x9b74, 0xffffffffffffffff, 0x28000)
r2 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f00000006c0)={@siginfo_0_0={0x7, 0x8d8, 0x2}}, 0x0, &(0x7f0000000740)={{0x4, 0xfff}, {0xa10}, 0x1, 0x7fff, 0xe70, 0x6, 0x5, 0x6, 0x101, 0xca, 0x0, 0x968, 0x0, 0x3, 0x5, 0x5})
msgctl$auto(0xd, 0x5, &(0x7f0000000800)={{0x5, 0x0, 0x0, 0xa14c, 0x401, 0x9}, &(0x7f0000000200)=0x9, &(0x7f0000000280)=0x8, 0xcd, 0x7, 0x80000001, 0x8, 0xfffffffffffeffff, 0x5, 0x8, 0x4, @inferred, @inferred=r2})
r3 = socket(0x2, 0x800, 0x106)
ioctl$auto(0x3, 0x8902, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x20000a, 0x4)
r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/usbmon34\x00', 0x400, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='nfs4\x00', 0x8, &(0x7f0000000240)="4543de480d189a5d3b5e91cc59b5d9899ddc5a4c91609a7e5e670b0fa89000aa39733c4488c2b9c9781dbb5741267c3fd67c8e0a6e9f66d6d2")
ioctl$auto_TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)=0x3cc9)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bus/usb/006/001\x00', 0x400281, 0x0)
openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x4000, 0x0)
mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, r0, 0x6)
syz_genetlink_get_family_id$auto_ipvs(0x0, r3)

59.395555593s ago: executing program 1 (id=323):
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x210042, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x200, 0x1, 0x3, 0x411, r0, 0x28017)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, 0x0, 0x0)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
madvise$auto(0x0, 0x200007, 0x19)
madvise$auto(0x6, 0x8001, 0xffffffff)
io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x101, 0x1, 0x52, 0x5, 0x497, 0x40, 0x104, 0x8, 0x100000000}})
madvise$auto(0x0, 0x200007, 0x8)
r1 = getpid()
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x88800, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000040)={@inferred=r1, 0x555c, 0xffff, 0x1, "8f9638544ae4bbdf48e497dbb5a3760f9b6b2c854e493a712fcbb4034dde3ba72adae5bfa41dba811bf5488f", @inferred=r1})
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/net\x00')
madvise$auto(0x0, 0x200204, 0x15)
ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0)
madvise$auto(0x0, 0x1010001, 0x100000003)
madvise$auto(0x1000, 0x400050, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
munmap$auto(0x8000, 0xffffffff)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)

58.564014851s ago: executing program 0 (id=326):
r0 = socket(0x1d, 0xa, 0x8)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bind$auto(0xffffffffffffffff, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @host}, 0x4)
sendmsg$auto_NL80211_CMD_STOP_AP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0x60, 0xbb, "bebd45b5fe61ceb2a46232e6a7997964c003757bf38f4955e4ea69519e9b13691c8d6fb5243a80e2ec9f77b11f9fe4ef6cd73c1de0e918076219af38cd1df34a8f033f1750582f06775b2346a3f0b169ce2bcc6be95e29ceef94c901"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2c}, @NL80211_ATTR_MESH_ID={0x7, 0x18, "5c1241"}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
sigaltstack$auto(&(0x7f0000000040)={0x0, 0x80000000, 0x7fffffffffffffff}, 0x0)
sigaltstack$auto(0x0, &(0x7f00000001c0)={0x0, 0xfffffff9, 0x80000001})
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
r2 = socket(0x10, 0x4, 0xfffffffc)
close_range$auto(0x2, 0x8, 0x0)
write$auto(0xca, &(0x7f0000000380)='\x04\x0e\x06\xd5\x89|d\b\x00\x00\x00\x00\x00\x00\x00\x00\xf6\xe9\x19+\x04\xb4l\xdd\xea\x89\x9b\x8d\xd1\x1a\xae\x1dW!\x11\xdd\xc0\x9f\xb4q\x88c:%\xcb\xcc\n\xb9L\v\xd8\x85\xbe\x82rE\x10cr\x9a\x98\xbe\x02\xc4.\xd5\x1e?\x8c\x8b\xe5u_\x99\x1d\x98\xcc\xfem\x1e\xb6\xdf\xfcN\xdb\xad\x17R\x9d\xfa\x1dz\xc4\xfcK\xf7X\xde\x85\xbf\xe3\xbb\xe4\xfef0\xabD\xbf\xf0\"i\xd0Z\xb8\xc3\x852\xee\x91\xf8O\xbe\x05\x95X\xe4\x8e[a\xc2+R\xa5\xf0\xaf\xa4\xe0\xe0q\x95\xfag\xd12\xcc\xad\xcf\xc4\xe2@\x80\x05\xff\xd7\x02p\xbd\f\xe2\xd2\x1ay\xe7^t\xe9\x9c\x85\xee\x81\xc9\x92\xde`\x94)_\x96\xd8A\x06\x00\x00\x00\x00\x00\x00\x00\xfc\x98S\x92\x9b\xbfK\xe2.\xa1\x87\xd3>.\x8a\xfb\xdcP\x95\t\xa4\xfeP\xb5b\x86\xbd\xe7N\xc3\x88\xb6rw\xe5t\x7fP\xaeB6\xe7|\x8f\x06K\x06\xbf/\xf2r\x88\x9c\x9ea}5\xe3\xa3\x1d[\"`\x87\xe1\x94\x11\x7fKff\xb2\x10\xe5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\xfc\t\xb6\x01E\xfc\x9e6\x9f\x80\xd4\x1b\x89\xa5\xe5\x89\x8b\xbabvH\x94\xf0\x84k,\xd5,\xd8q\x86\xe56\xd7o&\x8d\x19o\x1a\n5\x82|\x8f\xa2\x1cO\xb0\x97d\x05\xf8\xe2\xd0%\xddjT\xd6\xda\x81\a\xb2XS\xe4\x93\xf3*5f\x9e\x0e\xbd\xa4\x92\xd0\xdc\xb5\xba\x9c\xfb\xd5\x99\r1\x7f\r', 0x10)
mmap$auto(0x0, 0x402000d, 0xa, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="06000000e83c3dc3327809dc81ef9f55e170", @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8a0)
socket(0x10, 0x2, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio1\x00', 0x6102, 0x0)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x8, 0x100009}, 0x283)
ioctl$auto(0xffffffffffffffff, 0x5419, 0x38)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity$auto(0x0, 0x1, &(0x7f0000000000)=0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'batadv0\x00', <r5=>0x0})
sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="3b3d2abd7000fddbdf250304000008000300", @ANYRES32=r5], 0x28}}, 0x80)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0)

58.39400334s ago: executing program 0 (id=327):
r0 = socket(0xa, 0x3, 0xff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000)
syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
unshare$auto(0x40000080)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socket(0x11, 0x5, 0x100)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(0x0, 0x7f)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0)
select$auto(0xd, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0x1000000000a2f9, 0x1, 0x9, 0x8, 0x4, 0x1, 0x5, 0xa, 0x7]}, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
getsockopt$auto_SO_PRIORITY(r1, 0x8, 0xc, &(0x7f00000002c0)='\'(#[#\x00', &(0x7f0000000300)=0x5)
mbind$auto(0x0, 0x2091d2, 0x10, 0x0, 0x3, 0xffff)
r3 = wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0xa91, 0x6, &(0x7f00000000c0)={{0x0, 0x9}, {0x7, 0xfffffffffffffff9}, 0x9, 0x2, 0xffff, 0x0, 0x6, 0x10, 0x6, 0x4, 0x5, 0xd13, 0x8840, 0x3de564aa, 0xc5f7, 0x45})
r4 = syz_open_procfs$namespace(r3, &(0x7f00000003c0)='ns/user\x00')
poll$auto(&(0x7f0000000340)={r4, 0x5, 0x3}, 0x4, 0x101)
mlock$auto(0x7c88, 0x7fff)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0)
write$auto(r5, &(0x7f0000000440)='1\x00\\\xa0\x04|\x9d$\xdc\x9d\xe6\x162\x06\xfc\xd7M)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xb5\x0f\xc2\xc2o\xf8~\x92\xc1]\xf8\xc5\xac\xd8c\xd8\xc3eR\xe0\x10\xfd$\xb1.\x1a\x87\xb6gT5%\x83\xfbI\x96\xc1\xdc\x888\xba\x8b\x05\xa9q\xb1\xf8\xfe\xe4U\xbac\x9fB%\x00H}\t\xd9\x93\xf6\xc0\xd9,Rd=\xedT+\xb0\xc7Y8\xd6\a{hk\xbe\x15Y\xce\xf5\xe8X\xf3\xfb\xa3\x9ca\xce\x86~?#\xe1\xda\x89\xb9<\x13\x9f\xaa\x86\x1a\xaa\a\x17\xec\x1d\x90SA\xd0\x0e\x99u\x9d\xd2\xee\x1b%\xff4\x97N\xdb\nc\xa9\xad\x98\xc4\n/\xb1\xb2[\'\x12\x9a>c\xc27\xb7\xb5\xd5\xbe\xc9\x00\n\xfb\xf7y\xe7\x81\' \x9f\x15\x1b\xff\xe0\xf8\f\x1f\x00\xb8\x8e\x9d\xa0\x12n\xd2~\xab\xaf\xb0\x06\xf1\x17#\x1bs\x85\xccL\x02X\'w\x97\xff\xe4T\xe4\x9c\xe3r\xaf\a\xd3\x01\x14p=\x98m\xf3_\xea#3_?\x9d\x7f3~\xab\xd7\x1e@\x0e>[\x0f\xac\xd6\xc4>\x87\xa2(\xb7\xef}\b5q\xc3\xb8\x95\xa3\xd2\x8b\"\x9eE\xa1\x9a\x06\xa0\x98\x90c\xbc`D\x9bQ`t\xf5\x85\xa2HD\x8a\x01\x00\x00\x00\x01\x00\x00\x00\x88\xe7K\x95\xdf\n.k/\xe4\x91_\x91*\xe7\xda\xc3\x88\xab/%~\x92\x00\xd4\xd9\xb0\x05\xb8\x82\v t\xb7\xdc\x00%\x04\x8f\x86\xd9\xc4\x1b\xdc\xe8\xceu\x94\xc2\v\xc8\x1bN(~\x01I\x93\xd6\xa9\xf5\xbf\xe3`\x97\xe6%\x12\x94:F\xe9', 0x8)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
signalfd4$auto(0xffffffffffffffff, 0x0, 0x6, 0xa)

57.575861583s ago: executing program 1 (id=329):
r0 = socket(0xa, 0x3, 0xff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000)
syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
unshare$auto(0x40000080)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socket(0x11, 0x5, 0x100)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(0x0, 0x7f)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0)
select$auto(0xd, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0x1000000000a2f9, 0x1, 0x9, 0x8, 0x4, 0x1, 0x5, 0xa, 0x7]}, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
getsockopt$auto_SO_PRIORITY(r1, 0x8, 0xc, &(0x7f00000002c0)='\'(#[#\x00', &(0x7f0000000300)=0x5)
mbind$auto(0x0, 0x2091d2, 0x10, 0x0, 0x3, 0xffff)
r3 = wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0xa91, 0x6, &(0x7f00000000c0)={{0x0, 0x9}, {0x7, 0xfffffffffffffff9}, 0x9, 0x2, 0xffff, 0x0, 0x6, 0x10, 0x6, 0x4, 0x5, 0xd13, 0x8840, 0x3de564aa, 0xc5f7, 0x45})
r4 = syz_open_procfs$namespace(r3, &(0x7f00000003c0)='ns/user\x00')
poll$auto(&(0x7f0000000340)={r4, 0x5, 0x3}, 0x4, 0x101)
mlock$auto(0x7c88, 0x7fff)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0)
write$auto(r5, &(0x7f0000000440)='1\x00\\\xa0\x04|\x9d$\xdc\x9d\xe6\x162\x06\xfc\xd7M)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xb5\x0f\xc2\xc2o\xf8~\x92\xc1]\xf8\xc5\xac\xd8c\xd8\xc3eR\xe0\x10\xfd$\xb1.\x1a\x87\xb6gT5%\x83\xfbI\x96\xc1\xdc\x888\xba\x8b\x05\xa9q\xb1\xf8\xfe\xe4U\xbac\x9fB%\x00H}\t\xd9\x93\xf6\xc0\xd9,Rd=\xedT+\xb0\xc7Y8\xd6\a{hk\xbe\x15Y\xce\xf5\xe8X\xf3\xfb\xa3\x9ca\xce\x86~?#\xe1\xda\x89\xb9<\x13\x9f\xaa\x86\x1a\xaa\a\x17\xec\x1d\x90SA\xd0\x0e\x99u\x9d\xd2\xee\x1b%\xff4\x97N\xdb\nc\xa9\xad\x98\xc4\n/\xb1\xb2[\'\x12\x9a>c\xc27\xb7\xb5\xd5\xbe\xc9\x00\n\xfb\xf7y\xe7\x81\' \x9f\x15\x1b\xff\xe0\xf8\f\x1f\x00\xb8\x8e\x9d\xa0\x12n\xd2~\xab\xaf\xb0\x06\xf1\x17#\x1bs\x85\xccL\x02X\'w\x97\xff\xe4T\xe4\x9c\xe3r\xaf\a\xd3\x01\x14p=\x98m\xf3_\xea#3_?\x9d\x7f3~\xab\xd7\x1e@\x0e>[\x0f\xac\xd6\xc4>\x87\xa2(\xb7\xef}\b5q\xc3\xb8\x95\xa3\xd2\x8b\"\x9eE\xa1\x9a\x06\xa0\x98\x90c\xbc`D\x9bQ`t\xf5\x85\xa2HD\x8a\x01\x00\x00\x00\x01\x00\x00\x00\x88\xe7K\x95\xdf\n.k/\xe4\x91_\x91*\xe7\xda\xc3\x88\xab/%~\x92\x00\xd4\xd9\xb0\x05\xb8\x82\v t\xb7\xdc\x00%\x04\x8f\x86\xd9\xc4\x1b\xdc\xe8\xceu\x94\xc2\v\xc8\x1bN(~\x01I\x93\xd6\xa9\xf5\xbf\xe3`\x97\xe6%\x12\x94:F\xe9', 0x8)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

56.348329884s ago: executing program 0 (id=331):
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/macsec0/bc_forwarding\x00', 0x101201, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0)
fsconfig$auto_SHMEM_HUGE_NEVER(0xffffffffffffffff, 0x4, &(0x7f0000000000)='/dev/ptyr5\x00', &(0x7f0000000040)="befe514777ef8cebdddaddea2998cbcacb80a09c10242b0df90e2033ce182890e95ad5de00a20eedd64769729e7d44190ede18e89a35522eecc99fb8aed945eda0bdbb285850f92a035296c1e11dff8252e4f10c7a79fca0d06732e7b4c903d636a7f8dc", 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x2b, 0x1, 0x1)
getsockopt$auto(r2, 0x11e, 0x1, 0xfffffffffffffffe, 0x0)
getsockopt$auto(r1, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="ee7a7724db50b58ee0015b5e623104cd84241059735990d721ea95f8bf74fe1d4491dbc070e3a309b69633dcc96c44b6696dee94e485ef1053e607b99bb08e3e1ee2c74749dfd518862a86e2c8337216fe7926a434093b410574b7c659485a20244f6e8b3da61e7b11c69c1ddcbc9f06015b79", @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x24048044}, 0x4008040)
openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
unshare$auto(0x40000080)
r3 = socket(0xa, 0x5, 0x0)
mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, r3, 0x7ffe)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0p/sub1/xrun_injection\x00', 0x701000, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x101862, 0x0)
sendfile$auto(r7, r6, 0x0, 0x800)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9)
ioctl$auto(0xffffffffffffffff, 0x540a, 0x0)
close_range$auto(0x2, r5, 0x7)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x9814}, 0x3, 0x7)
r8 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
ioctl$auto_UBI_IOCDET(r8, 0x40046f41, 0x0)

55.875740553s ago: executing program 1 (id=332):
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa01, 0x0)
ioctl$auto_TIOCGDEV2(r0, 0x5429, 0x0)
process_mrelease$auto(0xffffffffffffffff, 0xa)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x4, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x24000, 0x0)
symlink$auto(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00')
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)="2dfc", 0x2)
unshare$auto(0x1)
prctl$auto(0xf, 0x800001, 0x0, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)

55.168914304s ago: executing program 0 (id=334):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
fallocate$auto(r0, 0x0, 0x5, 0x8)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
socket(0x10, 0x2, 0x14)
sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x4080)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
select$auto(0x5, 0x0, 0x0, 0x0, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00<\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t+\xe4\xc2\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x48102, 0x0)
ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000240)={"22073cedd81028b0527d61fec20b83adc692bae3864ba0e4511f1429dc2d2d2ab4ac311a72ece8a56580c64dd8793e389eeed21b092aa44519f7ea117b30a356e5e2794784226ecc10739aea79c9d6aaff2cc36eae1c15d730a5d277581646265dc12e283b42d657c5f3096c4f4d26d7284348be11634733074df9a9ea4ee1bb", "efbf193e370ae952af16aca7f72c72dd573d5c0441729aa6cd23a7d03198076f2873a0fb149b784422ef058885dd5673fdc4f38995e7756ca8937249b4208f75853ce4ca622c1d60f147382f1ba1d3fdf0fcbcf34895a0ccd39a91b306c0c993f004d13516dc3094cabd41ae6ecb9252bbd42903fa58531ab7ce14693696245f", 0xf6})
write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef)
getsockopt$auto(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = socket(0x23, 0x5, 0x0)
ioctl$auto(r3, 0x89ef, 0x74)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
fremovexattr$auto(r1, &(0x7f0000000000)='system.posix_acl_access\x00')

54.836521538s ago: executing program 1 (id=336):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
write$auto(0xffffffffffffffff, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x14)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, 0x0, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
socket(0xf, 0x3, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/nfs/parameters/delay_retrans\x00', 0x102, 0x0)
sendfile$auto(r1, r1, 0x0, 0x1000000000001)
exit$auto(0x5eb)
close_range$auto(0x2, 0x8, 0x0)

53.893720618s ago: executing program 0 (id=338):
mmap$auto(0x0, 0x2020009, 0x3, 0x1e, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xfffffffffffffffd, 0x7, 0xe0, 0x810, 0x2, 0x8002)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x50, 0x1d, 0xa9, 0x8, 0x6, 0x9, 0x9, 0x0, 0x6}, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x80040, 0x0)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/projid_map\x00', 0x2, 0x0)
mkdir$auto(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x2)
r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000840), 0xc0000, 0x0)
ioctl$auto_RNDADDTOENTCNT2(r1, 0x40045201, &(0x7f0000000880)=0x80000001)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000031, 0x0)
fsopen$auto(0x0, 0x1)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0xa, 0x20009, 0x4000000000df, 0xffffffffffffc27d, r0, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r2 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video46\x00', 0x20200, 0x0)
ioctl$auto(r3, 0xc0285628, r3)
write$auto(0xffffffffffffffff, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x410)
getsockopt$auto(r2, 0x8, 0x270d, 0xfffffffffffffffc, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45)
setsockopt$auto_SO_INCOMING_CPU(r0, 0x4, 0x31, &(0x7f0000000100)='[\x00\xa8\xde_\x1c\x8aM\x81\x1f\x90\xe0\xec\x85)\x83\xdb\xab\x05\xc3i\x19\xaa\x1f\x05\xd2w', 0x5)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x282, 0x0)

53.880449111s ago: executing program 1 (id=339):
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0)
arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x5)
fsconfig$auto_SHMEM_HUGE_NEVER(0xffffffffffffffff, 0x0, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0)
symlink$auto(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
getpgrp(0x0)
r1 = setfsuid$auto(0xee00)
r2 = setfsuid$auto(0xee01)
setresuid$auto(r1, r2, r1)
mmap$auto(0xdd28, 0x20009, 0x4000000000df, 0x19, 0xffffffffffffffff, 0x8000)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, 0x0, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r3 = socket(0x2, 0x1, 0x0)
setsockopt$auto(r3, 0x6, 0x13, 0x0, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime$auto(0x1, 0x0)
fcntl$auto(r4, 0x40f, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x11, 0x2, 0x8000)

38.785211092s ago: executing program 32 (id=338):
mmap$auto(0x0, 0x2020009, 0x3, 0x1e, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xfffffffffffffffd, 0x7, 0xe0, 0x810, 0x2, 0x8002)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x50, 0x1d, 0xa9, 0x8, 0x6, 0x9, 0x9, 0x0, 0x6}, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x80040, 0x0)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/projid_map\x00', 0x2, 0x0)
mkdir$auto(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x2)
r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000840), 0xc0000, 0x0)
ioctl$auto_RNDADDTOENTCNT2(r1, 0x40045201, &(0x7f0000000880)=0x80000001)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000031, 0x0)
fsopen$auto(0x0, 0x1)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0xa, 0x20009, 0x4000000000df, 0xffffffffffffc27d, r0, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r2 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video46\x00', 0x20200, 0x0)
ioctl$auto(r3, 0xc0285628, r3)
write$auto(0xffffffffffffffff, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x410)
getsockopt$auto(r2, 0x8, 0x270d, 0xfffffffffffffffc, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45)
setsockopt$auto_SO_INCOMING_CPU(r0, 0x4, 0x31, &(0x7f0000000100)='[\x00\xa8\xde_\x1c\x8aM\x81\x1f\x90\xe0\xec\x85)\x83\xdb\xab\x05\xc3i\x19\xaa\x1f\x05\xd2w', 0x5)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x282, 0x0)

38.72547499s ago: executing program 33 (id=339):
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0)
arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x5)
fsconfig$auto_SHMEM_HUGE_NEVER(0xffffffffffffffff, 0x0, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0)
symlink$auto(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
getpgrp(0x0)
r1 = setfsuid$auto(0xee00)
r2 = setfsuid$auto(0xee01)
setresuid$auto(r1, r2, r1)
mmap$auto(0xdd28, 0x20009, 0x4000000000df, 0x19, 0xffffffffffffffff, 0x8000)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, 0x0, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r3 = socket(0x2, 0x1, 0x0)
setsockopt$auto(r3, 0x6, 0x13, 0x0, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime$auto(0x1, 0x0)
fcntl$auto(r4, 0x40f, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x11, 0x2, 0x8000)

17.905504019s ago: executing program 3 (id=428):
r0 = socket(0x1d, 0xa, 0x8)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket(0x2a, 0x2, 0x6)
bind$auto(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @host}, 0x4)
sendmsg$auto_NL80211_CMD_STOP_AP(r0, 0x0, 0x1)
sigaltstack$auto(&(0x7f0000000040)={0x0, 0x80000000, 0x7fffffffffffffff}, 0x0)
sigaltstack$auto(0x0, &(0x7f00000001c0)={0x0, 0xfffffff9, 0x80000001})
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
r2 = socket(0x10, 0x4, 0xfffffffc)
close_range$auto(0x2, 0x8, 0x0)
write$auto(0xca, &(0x7f0000000380)='\x04\x0e\x06\xd5\x89|d\b\x00\x00\x00\x00\x00\x00\x00\x00\xf6\xe9\x19+\x04\xb4l\xdd\xea\x89\x9b\x8d\xd1\x1a\xae\x1dW!\x11\xdd\xc0\x9f\xb4q\x88c:%\xcb\xcc\n\xb9L\v\xd8\x85\xbe\x82rE\x10cr\x9a\x98\xbe\x02\xc4.\xd5\x1e?\x8c\x8b\xe5u_\x99\x1d\x98\xcc\xfem\x1e\xb6\xdf\xfcN\xdb\xad\x17R\x9d\xfa\x1dz\xc4\xfcK\xf7X\xde\x85\xbf\xe3\xbb\xe4\xfef0\xabD\xbf\xf0\"i\xd0Z\xb8\xc3\x852\xee\x91\xf8O\xbe\x05\x95X\xe4\x8e[a\xc2+R\xa5\xf0\xaf\xa4\xe0\xe0q\x95\xfag\xd12\xcc\xad\xcf\xc4\xe2@\x80\x05\xff\xd7\x02p\xbd\f\xe2\xd2\x1ay\xe7^t\xe9\x9c\x85\xee\x81\xc9\x92\xde`\x94)_\x96\xd8A\x06\x00\x00\x00\x00\x00\x00\x00\xfc\x98S\x92\x9b\xbfK\xe2.\xa1\x87\xd3>.\x8a\xfb\xdcP\x95\t\xa4\xfeP\xb5b\x86\xbd\xe7N\xc3\x88\xb6rw\xe5t\x7fP\xaeB6\xe7|\x8f\x06K\x06\xbf/\xf2r\x88\x9c\x9ea}5\xe3\xa3\x1d[\"`\x87\xe1\x94\x11\x7fKff\xb2\x10\xe5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\xfc\t\xb6\x01E\xfc\x9e6\x9f\x80\xd4\x1b\x89\xa5\xe5\x89\x8b\xbabvH\x94\xf0\x84k,\xd5,\xd8q\x86\xe56\xd7o&\x8d\x19o\x1a\n5\x82|\x8f\xa2\x1cO\xb0\x97d\x05\xf8\xe2\xd0%\xddjT\xd6\xda\x81\a\xb2XS\xe4\x93\xf3*5f\x9e\x0e\xbd\xa4\x92\xd0\xdc\xb5\xba\x9c\xfb\xd5\x99\r1\x7f\r', 0x10)
mmap$auto(0x0, 0x402000d, 0xa, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="06000000e83c3dc3327809dc81ef9f55e170", @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8a0)
socket(0x10, 0x2, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio1\x00', 0x6102, 0x0)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x8, 0x100009}, 0x283)
ioctl$auto(0xffffffffffffffff, 0x5419, 0x38)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity$auto(0x0, 0x1, &(0x7f0000000000)=0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'batadv0\x00', <r5=>0x0})
sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="3b3d2abd7000fddbdf250304000008000300", @ANYRES32=r5], 0x28}}, 0x80)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0)

17.763701897s ago: executing program 3 (id=429):
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa01, 0x0)
ioctl$auto_TIOCGDEV2(r0, 0x5429, 0x0)
process_mrelease$auto(0xffffffffffffffff, 0xa)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x4, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x24000, 0x0)
symlink$auto(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00')
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080), 0x0)
unshare$auto(0x1)
prctl$auto(0xf, 0x800001, 0x0, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)

17.348433928s ago: executing program 3 (id=431):
socket(0xa, 0x5, 0x0)
sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x100000000000038, 0x0)
fsopen$auto(0x0, 0x1)
r0 = socket(0xa, 0x1, 0x100)
accept$auto(r0, 0x0, 0x0)
mmap$auto(0x1, 0x1, 0x1, 0xebd, r0, 0x8000)
pidfd_open$auto(0x0, 0x5)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1cb603, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket(0xa, 0x6, 0x7)
r4 = getsockopt$auto(r3, 0x6, 0x5, 0x0, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="01002bbd7400fcdbdf25040000b3fa63b8"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x18000)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r5)
ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x8, 0x0, [{0x1c4, 0x804097, 0xa7e}]})

17.024182584s ago: executing program 3 (id=432):
r0 = socket(0xa, 0x801, 0x106)
recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x5, 0x2, 0x3, 0xa, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x4, 0x0, 0x2003, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x10000000000, 0x0, 0x8000000000000000, 0xb8a0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe]}, 0x1fe, 0x200c)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'})
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vivid.0/video4linux/vbi12/index\x00', 0x88282, 0x0)
sendfile$auto(r2, r2, 0x0, 0x1)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0)
write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f0000000500), 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0xe, 0x3ff}, {0x10, 0xd}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
open(0x0, 0x22240, 0x155)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)

15.917201037s ago: executing program 3 (id=434):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x4800, 0x0)
unshare$auto(0x40000080)
ioctl$auto_BLKPG(0xffffffffffffffff, 0x1269, 0x300)
timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x2401, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0)
write$auto(r0, &(0x7f0000000080)='Y\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d)
keyctl$auto(0x8, 0x0, 0xffffffffffffffff, 0x0, 0x6)
write$auto(r0, &(0x7f0000000180), 0x1)
unshare$auto(0x40000080)
r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r1, &(0x7f0000000180)="b953e6ca6360e45b4fd8ecccc52782d28ddb740407f4571929f3c0f5962cf000e2d2cac4c602", 0x26)
mmap$auto(0x0, 0x800040009, 0x4000000000df, 0x9b74, 0xffffffffffffffff, 0x28000)
r2 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f00000006c0)={@siginfo_0_0={0x7, 0x8d8, 0x2}}, 0x0, &(0x7f0000000740)={{0x4, 0xfff}, {0xa10}, 0x1, 0x7fff, 0xe70, 0x6, 0x5, 0x6, 0x101, 0xca, 0x0, 0x968, 0x0, 0x3, 0x5, 0x5})
msgctl$auto(0xd, 0x5, &(0x7f0000000800)={{0x5, 0x0, 0x0, 0xa14c, 0x401, 0x9}, &(0x7f0000000200)=0x9, &(0x7f0000000280)=0x8, 0xcd, 0x7, 0x80000001, 0x8, 0xfffffffffffeffff, 0x5, 0x8, 0x4, @inferred, @inferred=r2})
r3 = socket(0x2, 0x800, 0x106)
ioctl$auto(0x3, 0x8902, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x20000a, 0x4)
r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/usbmon34\x00', 0x400, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x4000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ipvs(0x0, r3)

15.033262064s ago: executing program 3 (id=436):
setsockopt$auto_SO_DEVMEM_DONTNEED(0xffffffffffffffff, 0xf, 0x50, &(0x7f0000000140)='\'!:+^\x00', 0xbb1)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/syscall\x00', 0x0, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x9}, 0x7)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/vbi26/dev\x00', 0x5bb600, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000040))
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x2c, 0x1, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80802, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
madvise$auto(0x0, 0x2003f2, 0x15)
connect$auto(r1, &(0x7f0000000040)=@generic={0x8, "00010100"}, 0x5c)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x3, 0x1a, 0x940, 0x1ffe0, 0x7f, 0x6, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x20, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x478, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2.54962761s ago: executing program 2 (id=452):
r0 = pidfd_open$auto(0x1, 0x0)
ftruncate$auto(r0, 0x2000000700)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000380)={{&(0x7f00000001c0)="a36d3fa58cc14c483eaeefbda25ed11e6584b0e06b6f7d2a0920bb3dac705aa384572b6a4be4e53907a7b258", 0x7fff, 0x0, 0x9, 0x0, 0x2, 0x9}, 0x2}, 0xfffffffd, 0x3, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x551841, 0x0)
mmap$auto(0x0, 0x10005, 0xd7, 0xeb1, 0x40000000000a5, 0x8000)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x5}, 0x3)
ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x5408, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
syz_genetlink_get_family_id$auto_ethtool(0x0, r3)
r4 = socket(0x10, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_DEL_DEST(r4, &(0x7f0000000000)={0x0, 0x3b, &(0x7f0000004f40)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a95f28040000fcdbdfa24800000008000080"], 0x20}, 0x1, 0x0, 0x0, 0x20008801}, 0x14)
sendmsg$auto_IPVS_CMD_SET_SERVICE(r3, &(0x7f0000002d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002cc0)={0x0, 0x286c}, 0x1, 0x0, 0x0, 0x40}, 0x800)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r6 = socket(0x29, 0x2, 0x0)
ioctl$auto(r6, 0x89f2, 0x24)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r3)
sendmsg$auto_NL80211_CMD_GET_MPATH(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r7, 0x20, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x40000c5)

2.221852039s ago: executing program 2 (id=453):
r0 = socket(0xa, 0x3, 0xff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000)
syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
unshare$auto(0x40000080)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socket(0x11, 0x5, 0x100)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(0x0, 0x7f)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0)
select$auto(0xd, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0x1000000000a2f9, 0x1, 0x9, 0x8, 0x4, 0x1, 0x5, 0xa, 0x7]}, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
getsockopt$auto_SO_PRIORITY(r1, 0x8, 0xc, &(0x7f00000002c0)='\'(#[#\x00', &(0x7f0000000300)=0x5)
mbind$auto(0x0, 0x2091d2, 0x10, 0x0, 0x3, 0xffff)
r3 = wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0xa91, 0x6, &(0x7f00000000c0)={{0x0, 0x9}, {0x7, 0xfffffffffffffff9}, 0x9, 0x2, 0xffff, 0x0, 0x6, 0x10, 0x6, 0x4, 0x5, 0xd13, 0x8840, 0x3de564aa, 0xc5f7, 0x45})
r4 = syz_open_procfs$namespace(r3, &(0x7f00000003c0)='ns/user\x00')
poll$auto(&(0x7f0000000340)={r4, 0x5, 0x3}, 0x4, 0x101)
mlock$auto(0x7c88, 0x7fff)
write$auto(0xffffffffffffffff, &(0x7f0000000440)='1\x00\\\xa0\x04|\x9d$\xdc\x9d\xe6\x162\x06\xfc\xd7M)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xb5\x0f\xc2\xc2o\xf8~\x92\xc1]\xf8\xc5\xac\xd8c\xd8\xc3eR\xe0\x10\xfd$\xb1.\x1a\x87\xb6gT5%\x83\xfbI\x96\xc1\xdc\x888\xba\x8b\x05\xa9q\xb1\xf8\xfe\xe4U\xbac\x9fB%\x00H}\t\xd9\x93\xf6\xc0\xd9,Rd=\xedT+\xb0\xc7Y8\xd6\a{hk\xbe\x15Y\xce\xf5\xe8X\xf3\xfb\xa3\x9ca\xce\x86~?#\xe1\xda\x89\xb9<\x13\x9f\xaa\x86\x1a\xaa\a\x17\xec\x1d\x90SA\xd0\x0e\x99u\x9d\xd2\xee\x1b%\xff4\x97N\xdb\nc\xa9\xad\x98\xc4\n/\xb1\xb2[\'\x12\x9a>c\xc27\xb7\xb5\xd5\xbe\xc9\x00\n\xfb\xf7y\xe7\x81\' \x9f\x15\x1b\xff\xe0\xf8\f\x1f\x00\xb8\x8e\x9d\xa0\x12n\xd2~\xab\xaf\xb0\x06\xf1\x17#\x1bs\x85\xccL\x02X\'w\x97\xff\xe4T\xe4\x9c\xe3r\xaf\a\xd3\x01\x14p=\x98m\xf3_\xea#3_?\x9d\x7f3~\xab\xd7\x1e@\x0e>[\x0f\xac\xd6\xc4>\x87\xa2(\xb7\xef}\b5q\xc3\xb8\x95\xa3\xd2\x8b\"\x9eE\xa1\x9a\x06\xa0\x98\x90c\xbc`D\x9bQ`t\xf5\x85\xa2HD\x8a\x01\x00\x00\x00\x01\x00\x00\x00\x88\xe7K\x95\xdf\n.k/\xe4\x91_\x91*\xe7\xda\xc3\x88\xab/%~\x92\x00\xd4\xd9\xb0\x05\xb8\x82\v t\xb7\xdc\x00%\x04\x8f\x86\xd9\xc4\x1b\xdc\xe8\xceu\x94\xc2\v\xc8\x1bN(~\x01I\x93\xd6\xa9\xf5\xbf\xe3`\x97\xe6%\x12\x94:F\xe9', 0x8)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
signalfd4$auto(0xffffffffffffffff, 0x0, 0x6, 0xa)

1.290628544s ago: executing program 2 (id=454):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000200)=""/8, 0x8)
fanotify_init$auto(0x5, 0x0)
io_uring_setup$auto(0xf00, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r2 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x4)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x0, 0x3, 0x5, 0x10001, 0x400000000003, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r3)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_RINGS_TX_PUSH={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'pimreg0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_batadv\x00', <r8=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x98, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_EEPROM_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd24}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5, 0x4, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x8800)

984.884293ms ago: executing program 2 (id=455):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400408, 0x10001, 0xe9b5, 0xffffffffffffffff, 0x8000)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
read$auto_proc_timers_operations_base(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup$auto(0xf00, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80402, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0xa, 0x801, 0x84)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x200, 0xd7e, 0x1, 0x948b, 0x3, 0x73, 0x8000000000000003, 0xe05, 0x8000000000008001, 0x80000001, 0x7, 0x6d3f, 0x9, 0x800, 0x4]}, 0x0)
ioctl$auto(0xffffffffffffffff, 0x8000450a, 0x10000000000402)
ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0)
r1 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r1, 0x4, 0x100000000)
msgctl$auto_MSG_STAT(0x4, 0xb, &(0x7f00000002c0)={{0x9, 0x0, 0x0, 0x9, 0xf, 0xde, 0xb}, &(0x7f0000000040)=0x27, 0x0, 0xda99, 0x7, 0x1, 0x10000007, 0x3ff, 0x9, 0x6, 0x10, @inferred=r1, @raw=0x3})
r2 = getpid()
process_vm_readv$auto(r2, 0x0, 0x1, 0x0, 0x6, 0x0)
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
r3 = socket(0x1d, 0x2, 0x6)
getsockopt$auto(r3, 0x6a, 0x1, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000)

583.931947ms ago: executing program 2 (id=456):
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
write$auto(0xffffffffffffffff, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
r0 = inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(r0, 0x0, 0x81000002)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80002, 0x73)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000040)={0x7b})
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/fs/cifs/rdma_readwrite_threshold\x00', 0x8041, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x14)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb8, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", <r4=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x9, 0x3}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
socket(0xf, 0x3, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)

191.562085ms ago: executing program 2 (id=457):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800)
timer_create$auto(0x9, 0x0, 0x0)
shmctl$auto_SHM_STAT_ANY(0xfffffffd, 0xf, &(0x7f0000000440)={{0xade, 0xee01, <r1=>0xee01, 0x7, 0x8, 0x0, 0x1601}, 0x8, 0x6000000000, 0x4, 0x4, @raw=0x3, @raw=0x7, 0x1, 0x0, &(0x7f0000000100)="0977b20d5258eca826a4544a5db3bfa5deebdf9b9919b9debef90d4b64633f0eb8162aa93f55d0d56687a5be1110194fbd", &(0x7f0000000340)="5f9fe49db3b478eb5aa112d00517c1aa957d9e0f2852dad7f5c236bf8371d3b0f6d518edeaa6493a608fb25d5e4ef247c283343a661cf945418dfa1d90930d85eb4cde61cfe640e7f1d181f7939b2f542198986127b4853ed7e3309866acb8cd226f097b6b0469e947ae99d1fe614f2f7d0972073a12204d10f259ae7c3e05bc290d17e2460cdc91ea9f95b5a74077d7861c8b9c4b44d916a186054543c18576525484367482cb2e8aa1c6b42c5d1d2699904715cfce7fea171e426b886b482af2d6098cf74c3c4e"})
fsconfig$auto(r0, 0x8, &(0x7f0000000080)='[\x00', &(0x7f00000000c0)="7cc7218f60cf6b6c6ecd41b9ff6d831ea118f07fb6024b67301d9be695", r1)
read$auto(0x3, 0x0, 0x8080)
socket(0xa, 0x1, 0x100)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
ioctl$auto_TIOCGDEV2(r2, 0x5429, 0x0)
process_mrelease$auto(0xffffffffffffffff, 0xa)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe)
write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r4, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68)
ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080))

136.096248ms ago: executing program 34 (id=457):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800)
timer_create$auto(0x9, 0x0, 0x0)
shmctl$auto_SHM_STAT_ANY(0xfffffffd, 0xf, &(0x7f0000000440)={{0xade, 0xee01, <r1=>0xee01, 0x7, 0x8, 0x0, 0x1601}, 0x8, 0x6000000000, 0x4, 0x4, @raw=0x3, @raw=0x7, 0x1, 0x0, &(0x7f0000000100)="0977b20d5258eca826a4544a5db3bfa5deebdf9b9919b9debef90d4b64633f0eb8162aa93f55d0d56687a5be1110194fbd", &(0x7f0000000340)="5f9fe49db3b478eb5aa112d00517c1aa957d9e0f2852dad7f5c236bf8371d3b0f6d518edeaa6493a608fb25d5e4ef247c283343a661cf945418dfa1d90930d85eb4cde61cfe640e7f1d181f7939b2f542198986127b4853ed7e3309866acb8cd226f097b6b0469e947ae99d1fe614f2f7d0972073a12204d10f259ae7c3e05bc290d17e2460cdc91ea9f95b5a74077d7861c8b9c4b44d916a186054543c18576525484367482cb2e8aa1c6b42c5d1d2699904715cfce7fea171e426b886b482af2d6098cf74c3c4e"})
fsconfig$auto(r0, 0x8, &(0x7f0000000080)='[\x00', &(0x7f00000000c0)="7cc7218f60cf6b6c6ecd41b9ff6d831ea118f07fb6024b67301d9be695", r1)
read$auto(0x3, 0x0, 0x8080)
socket(0xa, 0x1, 0x100)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
ioctl$auto_TIOCGDEV2(r2, 0x5429, 0x0)
process_mrelease$auto(0xffffffffffffffff, 0xa)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe)
write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r4, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68)
ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080))

0s ago: executing program 35 (id=436):
setsockopt$auto_SO_DEVMEM_DONTNEED(0xffffffffffffffff, 0xf, 0x50, &(0x7f0000000140)='\'!:+^\x00', 0xbb1)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/syscall\x00', 0x0, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x9}, 0x7)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/vbi26/dev\x00', 0x5bb600, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000040))
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x2c, 0x1, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80802, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
madvise$auto(0x0, 0x2003f2, 0x15)
connect$auto(r1, &(0x7f0000000040)=@generic={0x8, "00010100"}, 0x5c)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x3, 0x1a, 0x940, 0x1ffe0, 0x7f, 0x6, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x20, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x478, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts.
[   73.283958][ T5608] cgroup: Unknown subsys name 'net'
[   73.390487][ T5608] cgroup: Unknown subsys name 'cpuset'
[   73.398571][ T5608] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   74.808833][ T5608] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.359572][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.367192][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.374617][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.384014][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.391616][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.462817][ T4937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.470460][ T4937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.477914][ T4937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.488059][ T4937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.495610][ T4937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.552254][ T4937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.561094][ T4937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.568417][ T4937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.577726][ T4937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.587047][ T4937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.606945][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.615861][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.623475][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.632734][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.640489][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.439436][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.446721][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.456894][ T5619] bridge_slave_0: entered allmulticast mode
[   77.464613][ T5619] bridge_slave_0: entered promiscuous mode
[   77.482017][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.489372][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.496620][ T5619] bridge_slave_1: entered allmulticast mode
[   77.504853][ T5619] bridge_slave_1: entered promiscuous mode
[   77.539229][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.561914][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.639889][ T5619] team0: Port device team_slave_0 added
[   77.661230][ T5619] team0: Port device team_slave_1 added
[   77.738574][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.746365][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.774103][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.792660][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.800075][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.807317][ T5628] bridge_slave_0: entered allmulticast mode
[   77.814308][ T5628] bridge_slave_0: entered promiscuous mode
[   77.823670][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.830778][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.856815][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.878109][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.885417][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.892869][ T5628] bridge_slave_1: entered allmulticast mode
[   77.899750][ T5628] bridge_slave_1: entered promiscuous mode
[   77.953594][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.978799][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.025898][ T5619] hsr_slave_0: entered promiscuous mode
[   78.032221][ T5619] hsr_slave_1: entered promiscuous mode
[   78.051973][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.059349][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.066877][ T5624] bridge_slave_0: entered allmulticast mode
[   78.073900][ T5624] bridge_slave_0: entered promiscuous mode
[   78.081674][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.088858][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.096012][ T5624] bridge_slave_1: entered allmulticast mode
[   78.103038][ T5624] bridge_slave_1: entered promiscuous mode
[   78.111128][ T5628] team0: Port device team_slave_0 added
[   78.124072][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.131343][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.138599][ T5630] bridge_slave_0: entered allmulticast mode
[   78.145381][ T5630] bridge_slave_0: entered promiscuous mode
[   78.160327][ T5628] team0: Port device team_slave_1 added
[   78.172839][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.180227][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.187416][ T5630] bridge_slave_1: entered allmulticast mode
[   78.194392][ T5630] bridge_slave_1: entered promiscuous mode
[   78.226704][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.260111][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.274270][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.281364][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.307425][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.324101][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.340768][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.347916][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.373986][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.395925][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.427762][ T5624] team0: Port device team_slave_0 added
[   78.435837][ T5624] team0: Port device team_slave_1 added
[   78.454200][ T5630] team0: Port device team_slave_0 added
[   78.467920][ T4937] Bluetooth: hci0: command tx timeout
[   78.482054][ T5630] team0: Port device team_slave_1 added
[   78.513439][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.520520][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.546557][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.557899][ T4937] Bluetooth: hci1: command tx timeout
[   78.578862][ T5628] hsr_slave_0: entered promiscuous mode
[   78.585346][ T5628] hsr_slave_1: entered promiscuous mode
[   78.591568][ T5628] debugfs: 'hsr0' already exists in 'hsr'
[   78.597348][ T5628] Cannot create hsr debugfs directory
[   78.610457][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.618139][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.645010][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.655752][ T4937] Bluetooth: hci2: command tx timeout
[   78.668578][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.675659][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.701893][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.712778][ T4937] Bluetooth: hci3: command tx timeout
[   78.718251][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.718273][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.718312][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.774119][ T5630] hsr_slave_0: entered promiscuous mode
[   78.780643][ T5630] hsr_slave_1: entered promiscuous mode
[   78.786918][ T5630] debugfs: 'hsr0' already exists in 'hsr'
[   78.792885][ T5630] Cannot create hsr debugfs directory
[   78.869452][ T5624] hsr_slave_0: entered promiscuous mode
[   78.875706][ T5624] hsr_slave_1: entered promiscuous mode
[   78.881930][ T5624] debugfs: 'hsr0' already exists in 'hsr'
[   78.887675][ T5624] Cannot create hsr debugfs directory
[   79.010466][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.019894][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.038818][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.048043][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   79.068410][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.077264][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   79.103320][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.112306][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.160410][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.171965][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.187065][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.196515][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   79.204674][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.213848][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   79.221890][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.231641][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.281459][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.291823][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.304402][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.314451][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   79.322428][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.331760][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   79.349651][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.358938][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.396240][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.406877][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.425485][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.440075][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   79.458050][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.467196][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   79.475154][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.485658][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.535753][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.577029][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.585584][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   79.609215][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.616381][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.632166][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.639327][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.667105][ T5628] 8021q: adding VLAN 0 to HW filter on device team0
[   79.681156][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.688339][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.707268][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.714415][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.734216][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.784806][ T5630] 8021q: adding VLAN 0 to HW filter on device team0
[   79.801295][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.808480][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.825754][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.832956][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.867260][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.910764][ T5624] 8021q: adding VLAN 0 to HW filter on device team0
[   79.947525][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.954748][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.992167][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.999404][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.487720][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.548915][ T4937] Bluetooth: hci0: command tx timeout
[   80.609871][ T5619] veth0_vlan: entered promiscuous mode
[   80.634143][ T4937] Bluetooth: hci1: command tx timeout
[   80.650978][ T5619] veth1_vlan: entered promiscuous mode
[   80.704972][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.708986][ T4937] Bluetooth: hci2: command tx timeout
[   80.743877][ T5619] veth0_macvtap: entered promiscuous mode
[   80.755540][ T5619] veth1_macvtap: entered promiscuous mode
[   80.788174][ T4937] Bluetooth: hci3: command tx timeout
[   80.822322][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.847452][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.861882][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.881367][ T5628] veth0_vlan: entered promiscuous mode
[   80.894844][   T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.903837][   T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.917353][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.926579][   T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.935870][   T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.955543][ T5628] veth1_vlan: entered promiscuous mode
[   81.041544][ T5628] veth0_macvtap: entered promiscuous mode
[   81.051450][ T5630] veth0_vlan: entered promiscuous mode
[   81.054413][  T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.069515][ T5630] veth1_vlan: entered promiscuous mode
[   81.076618][  T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.093837][ T5628] veth1_macvtap: entered promiscuous mode
[   81.121552][ T5624] veth0_vlan: entered promiscuous mode
[   81.133686][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.142744][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.143490][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.173150][ T5624] veth1_vlan: entered promiscuous mode
[   81.183692][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.204269][ T5619] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   81.232530][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.241831][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.266537][ T5630] veth0_macvtap: entered promiscuous mode
[   81.276789][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.295217][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.311092][ T5630] veth1_macvtap: entered promiscuous mode
[   81.343966][ T5624] veth0_macvtap: entered promiscuous mode
[   81.376679][ T5624] veth1_macvtap: entered promiscuous mode
[   81.397644][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.434587][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.452718][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.462715][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.472573][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.494216][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.502152][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.525383][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.539364][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.551123][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.583337][ T5767] Zero length message leads to an empty skb
[   81.590243][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.608385][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.616635][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.630391][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.641515][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.663872][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.824154][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.846542][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.970269][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.004237][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.051520][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.094853][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.136811][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.155907][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.386567][ T5779] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   82.628276][ T4937] Bluetooth: hci0: command tx timeout
[   82.707937][ T4937] Bluetooth: hci1: command tx timeout
[   82.787983][ T4937] Bluetooth: hci2: command tx timeout
[   82.867935][ T4937] Bluetooth: hci3: command tx timeout
[   84.708308][ T4937] Bluetooth: hci0: command tx timeout
[   84.788171][ T4937] Bluetooth: hci1: command tx timeout
[   84.869619][ T4937] Bluetooth: hci2: command tx timeout
[   87.115239][    T9] cfg80211: failed to load regulatory.db
[   88.902572][ T5912] serio: Serial port pty37
[   90.560938][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'.
[   90.729045][ T4937] Bluetooth: hci0: unexpected event 0x31 length: 19 > 6
[   92.282331][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.49'.
[   92.888922][ T5972] block nbd0: NBD_DISCONNECT
[   93.786255][ T6002] serio: Serial port pty37
[   94.656298][ T4937] Bluetooth: hci2: unexpected event 0x31 length: 19 > 6
[   96.432163][ T6045] ima: policy update failed
[   96.474855][   T29] audit: type=1802 audit(1781745083.236:2): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.66" res=0 errno=0
[   96.623214][ T6048] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   97.076073][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'.
[   99.097630][ T6099] FAULT_INJECTION: forcing a failure.
[   99.097630][ T6099] name failslab, interval 1, probability 0, space 0, times 1
[   99.147528][ T6099] CPU: 1 UID: 0 PID: 6099 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(full) 
[   99.147560][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   99.147581][ T6099] Call Trace:
[   99.147588][ T6099]  <TASK>
[   99.147596][ T6099]  dump_stack_lvl+0x100/0x190
[   99.147641][ T6099]  should_fail_ex.cold+0x5/0xa
[   99.147664][ T6099]  ? fs_reclaim_acquire+0x70/0x100
[   99.147688][ T6099]  ? tomoyo_encode2+0xfb/0x3c0
[   99.147717][ T6099]  should_failslab+0xc2/0x120
[   99.147753][ T6099]  __kmalloc_noprof+0xe0/0x840
[   99.147778][ T6099]  ? d_absolute_path+0x136/0x1b0
[   99.147844][ T6099]  tomoyo_encode2+0xfb/0x3c0
[   99.147883][ T6099]  tomoyo_encode+0x29/0x50
[   99.147924][ T6099]  tomoyo_realpath_from_path+0x18c/0x690
[   99.147958][ T6099]  tomoyo_path_number_perm+0x23c/0x580
[   99.147982][ T6099]  ? tomoyo_path_number_perm+0x22e/0x580
[   99.148007][ T6099]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   99.148036][ T6099]  ? preempt_count_add+0x76/0x150
[   99.148073][ T6099]  ? rcu_is_watching+0x12/0xc0
[   99.148095][ T6099]  ? __fget_files+0x215/0x3d0
[   99.148135][ T6099]  ? hook_file_ioctl_common+0x149/0x410
[   99.148161][ T6099]  ? lock_release+0x24d/0x310
[   99.148203][ T6099]  ? __fget_files+0x21f/0x3d0
[   99.148239][ T6099]  security_file_ioctl+0xd3/0x230
[   99.148264][ T6099]  __x64_sys_ioctl+0xb7/0x210
[   99.148295][ T6099]  do_syscall_64+0x115/0x840
[   99.148325][ T6099]  ? clear_bhb_loop+0x40/0x90
[   99.148376][ T6099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.148408][ T6099] RIP: 0033:0x7fd53c39ce59
[   99.148439][ T6099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.148473][ T6099] RSP: 002b:00007fd53d2e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   99.148504][ T6099] RAX: ffffffffffffffda RBX: 00007fd53c615fa0 RCX: 00007fd53c39ce59
[   99.148525][ T6099] RDX: 0000200000000000 RSI: 00000000c0386105 RDI: 0000000000000003
[   99.148544][ T6099] RBP: 00007fd53d2e8090 R08: 0000000000000000 R09: 0000000000000000
[   99.148563][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.148582][ T6099] R13: 00007fd53c616038 R14: 00007fd53c615fa0 R15: 00007ffd5a442628
[   99.148611][ T6099]  </TASK>
[   99.411738][ T6099] ERROR: Out of memory at tomoyo_realpath_from_path.
[   99.569209][ T6106] ubi31: attaching mtd0
[   99.585265][ T6106] ubi31: scanning is finished
[   99.585310][ T6106] ubi31: empty MTD device detected
[   99.988013][ T6106] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   99.988066][ T6106] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes
[   99.988097][ T6106] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   99.988124][ T6106] ubi31: VID header offset: 514 (aligned 514), data offset: 578
[   99.988152][ T6106] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   99.988178][ T6106] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20
[   99.988206][ T6106] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 729408243
[   99.988238][ T6106] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   99.997086][ T6123] ubi31: background thread "ubi_bgt31d" started, PID 6123
[  101.229155][ T6159] FAULT_INJECTION: forcing a failure.
[  101.229155][ T6159] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  101.278903][ T6159] CPU: 0 UID: 0 PID: 6159 Comm: syz.1.90 Not tainted syzkaller #0 PREEMPT(full) 
[  101.278944][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  101.278963][ T6159] Call Trace:
[  101.278972][ T6159]  <TASK>
[  101.278983][ T6159]  dump_stack_lvl+0x100/0x190
[  101.279041][ T6159]  should_fail_ex.cold+0x5/0xa
[  101.279082][ T6159]  strncpy_from_user+0x3b/0x2d0
[  101.279123][ T6159]  do_getname+0x78/0x390
[  101.279161][ T6159]  do_sys_openat2+0xc7/0x1e0
[  101.279198][ T6159]  ? __pfx_do_sys_openat2+0x10/0x10
[  101.279237][ T6159]  ? __fget_files+0x21f/0x3d0
[  101.279288][ T6159]  __x64_sys_open+0xfe/0x1d0
[  101.279326][ T6159]  ? __pfx___x64_sys_open+0x10/0x10
[  101.279371][ T6159]  ? ksys_write+0x1ac/0x250
[  101.279421][ T6159]  ? rcu_is_watching+0x12/0xc0
[  101.279452][ T6159]  do_syscall_64+0x115/0x840
[  101.279493][ T6159]  ? clear_bhb_loop+0x40/0x90
[  101.279529][ T6159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.279560][ T6159] RIP: 0033:0x7fd53c39ce59
[  101.279584][ T6159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.279614][ T6159] RSP: 002b:00007fd53d285028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  101.279644][ T6159] RAX: ffffffffffffffda RBX: 00007fd53c616270 RCX: 00007fd53c39ce59
[  101.279664][ T6159] RDX: 0000000000000031 RSI: 0000000000040300 RDI: 00002000000000c0
[  101.279683][ T6159] RBP: 00007fd53d285090 R08: 0000000000000000 R09: 0000000000000000
[  101.279701][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.279720][ T6159] R13: 00007fd53c616308 R14: 00007fd53c616270 R15: 00007ffd5a442628
[  101.279750][ T6159]  </TASK>
[  102.302000][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'.
[  104.471131][ T6229] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off
[  104.486482][ T6229] pci 0000:00:01.3: PCI INT A: no GSI
[  104.674655][ T6234] netlink: 286 bytes leftover after parsing attributes in process `syz.3.106'.
[  105.982123][ T6273] netlink: 186 bytes leftover after parsing attributes in process `syz.3.117'.
[  106.129136][ T6275] FAULT_INJECTION: forcing a failure.
[  106.129136][ T6275] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  106.154948][ T6275] CPU: 1 UID: 0 PID: 6275 Comm: syz.3.118 Not tainted syzkaller #0 PREEMPT(full) 
[  106.154995][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  106.155015][ T6275] Call Trace:
[  106.155024][ T6275]  <TASK>
[  106.155036][ T6275]  dump_stack_lvl+0x100/0x190
[  106.155094][ T6275]  should_fail_ex.cold+0x5/0xa
[  106.155129][ T6275]  _copy_from_user+0x2e/0xd0
[  106.155167][ T6275]  cec_ioctl+0xccd/0x29b0
[  106.155204][ T6275]  ? lock_release+0x1d0/0x310
[  106.155248][ T6275]  ? __pfx_cec_ioctl+0x10/0x10
[  106.155288][ T6275]  ? tomoyo_path_number_perm+0x188/0x580
[  106.155324][ T6275]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  106.155365][ T6275]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  106.155410][ T6275]  ? do_vfs_ioctl+0x226/0x13e0
[  106.155452][ T6275]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  106.155498][ T6275]  ? rcu_is_watching+0x12/0xc0
[  106.155529][ T6275]  ? __fget_files+0x215/0x3d0
[  106.155577][ T6275]  ? hook_file_ioctl_common+0x149/0x410
[  106.155618][ T6275]  ? __fget_files+0x21f/0x3d0
[  106.155668][ T6275]  ? __pfx_cec_ioctl+0x10/0x10
[  106.155706][ T6275]  __x64_sys_ioctl+0x18e/0x210
[  106.155749][ T6275]  do_syscall_64+0x115/0x840
[  106.155790][ T6275]  ? clear_bhb_loop+0x40/0x90
[  106.155826][ T6275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.155858][ T6275] RIP: 0033:0x7fe799b9ce59
[  106.155904][ T6275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.155934][ T6275] RSP: 002b:00007fe79aa82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  106.155964][ T6275] RAX: ffffffffffffffda RBX: 00007fe799e15fa0 RCX: 00007fe799b9ce59
[  106.155990][ T6275] RDX: 0000200000000000 RSI: 00000000c0386105 RDI: 0000000000000003
[  106.156010][ T6275] RBP: 00007fe79aa82090 R08: 0000000000000000 R09: 0000000000000000
[  106.156029][ T6275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.156047][ T6275] R13: 00007fe799e16038 R14: 00007fe799e15fa0 R15: 00007ffe5e353548
[  106.156078][ T6275]  </TASK>
[  106.821693][ T6289] futex_wake_op: syz.3.124 tries to shift op by -2048; fix this program
[  106.843369][ T6289] 0x000000000001-0x000000020000 : ""
[  106.862525][ T6289] ftl_cs: FTL header corrupt!
[  107.072845][ T6301] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  107.482853][ T6300] block nbd0: NBD_DISCONNECT
[  109.616540][   T29] audit: type=1800 audit(1781745096.376:3): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.137" name="version" dev="configfs" ino=12932 res=0 errno=0
[  110.941470][ T4937] Bluetooth: hci3: unexpected event 0x2c length: 1022 > 17
[  110.941511][ T4937] Bluetooth: hci3: Ignoring connect complete event for invalid link type
[  112.375521][ T6395] sg_write: process 113 (syz.3.145) changed security contexts after opening file descriptor, this is not allowed.
[  113.627674][ T6412] netlink: 286 bytes leftover after parsing attributes in process `syz.0.149'.
[  116.176649][ T6438] Process accounting resumed
[  116.268402][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'.
[  117.543171][ T6499] Device name cannot be null; rc = [-22]
[  118.774885][ T6526] WARNING! power/level is deprecated; use power/control instead
[  119.050045][ T6516] nfs4: Unknown parameter 'EC�H�];^��Y�ى��ZL�`�~^g��'
[  119.398448][ T6533] FAULT_INJECTION: forcing a failure.
[  119.398448][ T6533] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.427184][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz.0.175 Not tainted syzkaller #0 PREEMPT(full) 
[  119.427225][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  119.427239][ T6533] Call Trace:
[  119.427246][ T6533]  <TASK>
[  119.427254][ T6533]  dump_stack_lvl+0x100/0x190
[  119.427338][ T6533]  should_fail_ex.cold+0x5/0xa
[  119.427374][ T6533]  _copy_from_user+0x2e/0xd0
[  119.427403][ T6533]  generic_map_update_batch+0x452/0x800
[  119.427436][ T6533]  ? _parse_integer_limit+0x17f/0x1d0
[  119.427473][ T6533]  ? __pfx_generic_map_update_batch+0x10/0x10
[  119.427512][ T6533]  ? rcu_is_watching+0x12/0xc0
[  119.427533][ T6533]  ? __might_fault+0xc5/0x140
[  119.427560][ T6533]  ? lock_release+0x24d/0x310
[  119.427591][ T6533]  ? __pfx_generic_map_update_batch+0x10/0x10
[  119.427624][ T6533]  bpf_map_do_batch+0x66f/0x6d0
[  119.427650][ T6533]  __sys_bpf+0x4ce/0x4e80
[  119.427686][ T6533]  ? kstrtouint_from_user+0x80/0x1d0
[  119.427720][ T6533]  ? __pfx___sys_bpf+0x10/0x10
[  119.427751][ T6533]  ? rcu_is_watching+0x12/0xc0
[  119.427772][ T6533]  ? get_pid_task+0xfc/0x250
[  119.427816][ T6533]  ? rcu_is_watching+0x12/0xc0
[  119.427843][ T6533]  ? get_pid_task+0xfc/0x250
[  119.427871][ T6533]  ? lock_release+0x24d/0x310
[  119.427916][ T6533]  ? ksys_write+0x12a/0x250
[  119.427963][ T6533]  ? rcu_is_watching+0x12/0xc0
[  119.427994][ T6533]  ? preempt_count_add+0x76/0x150
[  119.428035][ T6533]  ? vfs_write+0x15d/0x1050
[  119.428082][ T6533]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  119.428144][ T6533]  ? __x64_sys_bpf+0xce/0x140
[  119.428190][ T6533]  __x64_sys_bpf+0xce/0x140
[  119.428237][ T6533]  ? trace_irq_enable.constprop.0+0x122/0x160
[  119.428281][ T6533]  do_syscall_64+0x115/0x840
[  119.428321][ T6533]  ? clear_bhb_loop+0x40/0x90
[  119.428357][ T6533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.428389][ T6533] RIP: 0033:0x7f05a3f9ce59
[  119.428420][ T6533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.428450][ T6533] RSP: 002b:00007f05a4e6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  119.428480][ T6533] RAX: ffffffffffffffda RBX: 00007f05a4215fa0 RCX: 00007f05a3f9ce59
[  119.428508][ T6533] RDX: 0000000000000092 RSI: 0000200000000380 RDI: 000000000000001a
[  119.428527][ T6533] RBP: 00007f05a4e6b090 R08: 0000000000000000 R09: 0000000000000000
[  119.428546][ T6533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.428565][ T6533] R13: 00007f05a4216038 R14: 00007f05a4215fa0 R15: 00007ffe257c4688
[  119.428595][ T6533]  </TASK>
[  119.844597][ T6545] netlink: 306 bytes leftover after parsing attributes in process `syz.1.180'.
[  119.862088][ T6541] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[6541]
[  119.879712][ T6537] openvswitch: netlink: Flow key attr not present in new flow.
[  120.144410][ T6553] netlink: 342 bytes leftover after parsing attributes in process `syz.1.182'.
[  120.171396][ T6555] FAULT_INJECTION: forcing a failure.
[  120.171396][ T6555] name failslab, interval 1, probability 0, space 0, times 0
[  120.208911][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.3.183 Not tainted syzkaller #0 PREEMPT(full) 
[  120.208957][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  120.208978][ T6555] Call Trace:
[  120.208988][ T6555]  <TASK>
[  120.209000][ T6555]  dump_stack_lvl+0x100/0x190
[  120.209066][ T6555]  should_fail_ex.cold+0x5/0xa
[  120.209099][ T6555]  ? __kmalloc_cache_noprof+0x53/0x6e0
[  120.209142][ T6555]  should_failslab+0xc2/0x120
[  120.209196][ T6555]  __kmalloc_cache_noprof+0x7a/0x6e0
[  120.209236][ T6555]  ? snd_seq_timer_new+0x44/0x1a0
[  120.209293][ T6555]  snd_seq_timer_new+0x44/0x1a0
[  120.209346][ T6555]  snd_seq_queue_alloc+0x177/0x540
[  120.209395][ T6555]  snd_seq_ioctl_create_queue+0xa9/0x370
[  120.209454][ T6555]  call_seq_client_ctl+0xa3/0x130
[  120.209498][ T6555]  snd_seq_kernel_client_ctl+0x77/0xd0
[  120.209536][ T6555]  alloc_seq_queue+0xdb/0x180
[  120.209573][ T6555]  ? __pfx_alloc_seq_queue+0x10/0x10
[  120.209620][ T6555]  ? snd_seq_oss_open+0x1fd/0xa10
[  120.209657][ T6555]  ? rcu_is_watching+0x12/0xc0
[  120.209691][ T6555]  ? rcu_is_watching+0x12/0xc0
[  120.209728][ T6555]  snd_seq_oss_open+0x2b2/0xa10
[  120.209771][ T6555]  odev_open+0x6f/0x90
[  120.209803][ T6555]  ? __pfx_odev_open+0x10/0x10
[  120.209836][ T6555]  soundcore_open+0x2e3/0x5a0
[  120.209874][ T6555]  ? __pfx_soundcore_open+0x10/0x10
[  120.209909][ T6555]  chrdev_open+0x234/0x6a0
[  120.209939][ T6555]  ? __pfx_apparmor_file_open+0x10/0x10
[  120.209995][ T6555]  ? __pfx_chrdev_open+0x10/0x10
[  120.210028][ T6555]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  120.210069][ T6555]  do_dentry_open+0x6ab/0x14d0
[  120.210099][ T6555]  ? __pfx_chrdev_open+0x10/0x10
[  120.210131][ T6555]  vfs_open+0x82/0x3f0
[  120.210171][ T6555]  path_openat+0x2873/0x4280
[  120.210203][ T6555]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.210242][ T6555]  ? __pfx_path_openat+0x10/0x10
[  120.210277][ T6555]  do_file_open+0x20e/0x430
[  120.210306][ T6555]  ? __pfx_do_file_open+0x10/0x10
[  120.210348][ T6555]  ? alloc_fd+0x471/0x7a0
[  120.210401][ T6555]  ? do_getname+0x191/0x390
[  120.210441][ T6555]  do_sys_openat2+0x10f/0x1e0
[  120.210491][ T6555]  ? __pfx_do_sys_openat2+0x10/0x10
[  120.210533][ T6555]  ? do_futex+0x1bd/0x440
[  120.210587][ T6555]  __x64_sys_openat+0x12d/0x210
[  120.210629][ T6555]  ? __pfx___x64_sys_openat+0x10/0x10
[  120.210674][ T6555]  ? rcu_is_watching+0x12/0xc0
[  120.210706][ T6555]  do_syscall_64+0x115/0x840
[  120.210748][ T6555]  ? clear_bhb_loop+0x40/0x90
[  120.210785][ T6555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.210816][ T6555] RIP: 0033:0x7fe799b9ce59
[  120.210841][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.210871][ T6555] RSP: 002b:00007fe79aa82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  120.210903][ T6555] RAX: ffffffffffffffda RBX: 00007fe799e15fa0 RCX: 00007fe799b9ce59
[  120.210923][ T6555] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  120.210944][ T6555] RBP: 00007fe799c32d6f R08: 0000000000000000 R09: 0000000000000000
[  120.210964][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.210985][ T6555] R13: 00007fe799e16038 R14: 00007fe799e15fa0 R15: 00007ffe5e353548
[  120.211015][ T6555]  </TASK>
[  121.291807][ T6574] netlink: 'syz.3.188': attribute type 2 has an invalid length.
[  121.307153][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'.
[  124.566976][ T6660] process 'syz.3.204' launched ':,' with NULL argv: empty string added
[  125.480169][   T29] audit: type=1800 audit(1781745112.246:4): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.208" name="dbroot" dev="configfs" ino=14936 res=0 errno=0
[  125.761796][ T6691] mmap: syz.0.209 (6691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  126.010116][ T6699] ubi: mtd0 is already attached to ubi31
[  127.337487][ T6738] netlink: 350 bytes leftover after parsing attributes in process `syz.3.217'.
[  132.896942][   T29] audit: type=1800 audit(1781745119.646:5): pid=6831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.233" name="file0" dev="tmpfs" ino=322 res=0 errno=0
[  133.190179][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  133.197648][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  136.181456][ T6883] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  136.513606][   T29] audit: type=1800 audit(1781745123.276:6): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.246" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  137.514554][ T6899] block nbd0: NBD_DISCONNECT
[  138.041274][ T6918] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  138.725392][ T6927] random: crng reseeded on system resumption
[  139.659228][ T6947] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2666358 out of range (51000000..2150000000)
[  139.905900][ T6954] netlink: 342 bytes leftover after parsing attributes in process `syz.3.257'.
[  140.250014][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[  143.741883][ T7003] nfs4: Unknown parameter 'EC�H�];^��Y�ى��ZL�`�~^g��'
[  143.777878][ T7009] [U] ^C
[  144.153409][ T7026] netlink: 322 bytes leftover after parsing attributes in process `syz.1.268'.
[  144.486540][ T7038] serio: Serial port pty37
[  145.183153][ T7065] netlink: 322 bytes leftover after parsing attributes in process `syz.3.280'.
[  147.242358][ T7066] Process accounting paused
[  149.116545][ T7127] netlink: 'syz.2.294': attribute type 1 has an invalid length.
[  150.237626][ T7133] nfs4: Unknown parameter 'EC�H�];^��Y�ى��ZL�`�~^g��'
[  151.220975][ T7168] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  152.943677][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'.
[  153.109146][ T7195] nfs4: Unknown parameter 'EC�H�];^��Y�ى��ZL�`�~^g��'
[  153.348961][ T7214] futex_wake_op: syz.3.312 tries to shift op by -2048; fix this program
[  153.405730][ T7214] futex_wake_op: syz.3.312 tries to shift op by -2048; fix this program
[  153.422656][ T7214] 0x000000000001-0x000000020000 : ""
[  153.432229][ T7197] block nbd0: NBD_DISCONNECT
[  153.457551][ T7214] ftl_cs: FTL header corrupt!
[  153.811952][ T7232] netlink: 322 bytes leftover after parsing attributes in process `syz.0.313'.
[  154.503531][ T7246] FAULT_INJECTION: forcing a failure.
[  154.503531][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.517200][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.2.317 Not tainted syzkaller #0 PREEMPT(full) 
[  154.517230][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  154.517244][ T7246] Call Trace:
[  154.517251][ T7246]  <TASK>
[  154.517259][ T7246]  dump_stack_lvl+0x100/0x190
[  154.517303][ T7246]  should_fail_ex.cold+0x5/0xa
[  154.517328][ T7246]  _copy_from_user+0x2e/0xd0
[  154.517355][ T7246]  generic_map_update_batch+0x4bb/0x800
[  154.517393][ T7246]  ? __pfx_generic_map_update_batch+0x10/0x10
[  154.517432][ T7246]  ? rcu_is_watching+0x12/0xc0
[  154.517453][ T7246]  ? __might_fault+0xc5/0x140
[  154.517481][ T7246]  ? lock_release+0x24d/0x310
[  154.517518][ T7246]  ? __pfx_generic_map_update_batch+0x10/0x10
[  154.517551][ T7246]  bpf_map_do_batch+0x66f/0x6d0
[  154.517578][ T7246]  __sys_bpf+0x4ce/0x4e80
[  154.517620][ T7246]  ? kstrtouint_from_user+0x80/0x1d0
[  154.517654][ T7246]  ? __pfx___sys_bpf+0x10/0x10
[  154.517686][ T7246]  ? rcu_is_watching+0x12/0xc0
[  154.517707][ T7246]  ? get_pid_task+0xfc/0x250
[  154.517736][ T7246]  ? rcu_is_watching+0x12/0xc0
[  154.517756][ T7246]  ? get_pid_task+0xfc/0x250
[  154.517810][ T7246]  ? lock_release+0x24d/0x310
[  154.517855][ T7246]  ? ksys_write+0x12a/0x250
[  154.517902][ T7246]  ? rcu_is_watching+0x12/0xc0
[  154.517932][ T7246]  ? preempt_count_add+0x76/0x150
[  154.517979][ T7246]  ? vfs_write+0x15d/0x1050
[  154.518024][ T7246]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  154.518084][ T7246]  ? __x64_sys_bpf+0xce/0x140
[  154.518136][ T7246]  __x64_sys_bpf+0xce/0x140
[  154.518193][ T7246]  ? trace_irq_enable.constprop.0+0x122/0x160
[  154.518241][ T7246]  do_syscall_64+0x115/0x840
[  154.518299][ T7246]  ? clear_bhb_loop+0x40/0x90
[  154.518343][ T7246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.518375][ T7246] RIP: 0033:0x7f7575b9ce59
[  154.518399][ T7246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.518445][ T7246] RSP: 002b:00007f75769ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  154.518475][ T7246] RAX: ffffffffffffffda RBX: 00007f7575e15fa0 RCX: 00007f7575b9ce59
[  154.518495][ T7246] RDX: 0000000000000092 RSI: 0000200000000380 RDI: 000000000000001a
[  154.518527][ T7246] RBP: 00007f75769ff090 R08: 0000000000000000 R09: 0000000000000000
[  154.518546][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.518564][ T7246] R13: 00007f7575e16038 R14: 00007f7575e15fa0 R15: 00007ffe5c51c5b8
[  154.518594][ T7246]  </TASK>
[  155.486025][ T7250] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  156.146218][ T7281] netlink: 322 bytes leftover after parsing attributes in process `syz.3.324'.
[  156.266674][ T7273] nfs4: Unknown parameter 'EC�H�];^��Y�ى��ZL�`�~^g��'
[  158.412632][ T7314] netlink: 342 bytes leftover after parsing attributes in process `syz.3.330'.
[  161.499722][ T7352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.624512][ T7352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.689580][ T7352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.754727][ T7352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.077390][ T7403] FAULT_INJECTION: forcing a failure.
[  164.077390][ T7403] name failslab, interval 1, probability 0, space 0, times 0
[  164.090466][ T7403] CPU: 0 UID: 0 PID: 7403 Comm: syz.2.348 Not tainted syzkaller #0 PREEMPT(full) 
[  164.090508][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  164.090529][ T7403] Call Trace:
[  164.090539][ T7403]  <TASK>
[  164.090550][ T7403]  dump_stack_lvl+0x100/0x190
[  164.090610][ T7403]  should_fail_ex.cold+0x5/0xa
[  164.090645][ T7403]  ? __kmalloc_cache_noprof+0x53/0x6e0
[  164.090688][ T7403]  should_failslab+0xc2/0x120
[  164.090741][ T7403]  __kmalloc_cache_noprof+0x7a/0x6e0
[  164.090781][ T7403]  ? alloc_ldt_struct+0x5d/0x1b0
[  164.090818][ T7403]  ? __pfx_down_write_killable+0x10/0x10
[  164.090873][ T7403]  alloc_ldt_struct+0x5d/0x1b0
[  164.090911][ T7403]  write_ldt+0x62b/0xd40
[  164.090952][ T7403]  ? __pfx_write_ldt+0x10/0x10
[  164.090990][ T7403]  ? xfd_validate_state+0x129/0x190
[  164.091050][ T7403]  __x64_sys_modify_ldt+0xb1/0x170
[  164.091104][ T7403]  do_syscall_64+0x115/0x840
[  164.091148][ T7403]  ? clear_bhb_loop+0x40/0x90
[  164.091187][ T7403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.091222][ T7403] RIP: 0033:0x7f7575b9ce59
[  164.091247][ T7403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.091283][ T7403] RSP: 002b:00007f75769ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[  164.091316][ T7403] RAX: ffffffffffffffda RBX: 00007f7575e15fa0 RCX: 00007f7575b9ce59
[  164.091339][ T7403] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001
[  164.091359][ T7403] RBP: 00007f7575c32d6f R08: 0000000000000000 R09: 0000000000000000
[  164.091379][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.091399][ T7403] R13: 00007f7575e16038 R14: 00007f7575e15fa0 R15: 00007ffe5c51c5b8
[  164.091431][ T7403]  </TASK>
[  165.599335][ T7425] netlink: 322 bytes leftover after parsing attributes in process `syz.3.352'.
[  165.635498][ T7426] netlink: 342 bytes leftover after parsing attributes in process `syz.2.353'.
[  167.614587][ T7455] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  168.812578][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'.
[  169.084313][ T7461] Process accounting resumed
[  169.940233][ T7490] nfs4: Unknown parameter 'EC�H�];^��Y�ى��ZL�`�~^g��'
[  171.146089][ T7501] nfs4: Unknown parameter 'EC�H�];^��Y�ى��ZL�`�~^g��'
[  174.782823][ T7540] nfs4: Unknown parameter 'EC�H�];^��Y�ى��ZL�`�~^g��'
[  176.673667][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  176.682705][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  176.690426][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  176.699712][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  176.707336][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  176.781854][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  176.790828][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  176.802205][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  176.813926][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  176.827113][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  177.995590][ T7579] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.006103][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.014167][ T7579] bridge_slave_0: entered allmulticast mode
[  178.040073][ T7579] bridge_slave_0: entered promiscuous mode
[  178.055104][ T7579] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.068081][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.086453][ T7579] bridge_slave_1: entered allmulticast mode
[  178.098003][ T7579] bridge_slave_1: entered promiscuous mode
[  178.237991][ T7579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.266425][ T7583] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.279744][ T7583] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.292994][ T7583] bridge_slave_0: entered allmulticast mode
[  178.306011][ T7583] bridge_slave_0: entered promiscuous mode
[  178.329374][ T7579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.364317][ T7583] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.372590][ T7583] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.385421][ T7583] bridge_slave_1: entered allmulticast mode
[  178.395922][ T7583] bridge_slave_1: entered promiscuous mode
[  178.460495][ T7579] team0: Port device team_slave_0 added
[  178.480040][ T7579] team0: Port device team_slave_1 added
[  178.558909][ T7583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.654279][ T7583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.676382][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.683622][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  178.710403][ T7579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.750399][ T7583] team0: Port device team_slave_0 added
[  178.757145][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.766241][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  178.800963][ T7579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.801178][ T4937] Bluetooth: hci4: command tx timeout
[  178.832325][ T7636] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  178.832325][ T7636] The task syz.3.389 (7636) triggered the difference, watch for misbehavior.
[  178.874347][ T7583] team0: Port device team_slave_1 added
[  178.879639][ T4937] Bluetooth: hci5: command tx timeout
[  179.007642][ T7579] hsr_slave_0: entered promiscuous mode
[  179.038605][ T7579] hsr_slave_1: entered promiscuous mode
[  179.051542][ T7579] debugfs: 'hsr0' already exists in 'hsr'
[  179.063420][ T7579] Cannot create hsr debugfs directory
[  179.121698][ T7583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.133110][ T7583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  179.200789][ T7583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.243982][ T7583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.257607][ T7583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  179.295765][ T7583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.576865][ T7583] hsr_slave_0: entered promiscuous mode
[  179.601215][ T7583] hsr_slave_1: entered promiscuous mode
[  179.616958][ T7583] debugfs: 'hsr0' already exists in 'hsr'
[  179.630077][ T7583] Cannot create hsr debugfs directory
[  180.867936][ T4937] Bluetooth: hci4: command tx timeout
[  180.948051][ T4937] Bluetooth: hci5: command tx timeout
[  181.080565][ T7651] netlink: 178 bytes leftover after parsing attributes in process `syz.3.392'.
[  181.109503][ T7651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.392'.
[  182.673798][ T7666] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input5
[  182.947924][ T4937] Bluetooth: hci4: command tx timeout
[  182.964610][ T7675] netlink: 342 bytes leftover after parsing attributes in process `syz.3.396'.
[  183.027905][ T4937] Bluetooth: hci5: command tx timeout
[  185.027971][ T4937] Bluetooth: hci4: command tx timeout
[  185.108017][ T4937] Bluetooth: hci5: command tx timeout
[  187.897920][ T7748] syz.3.404 (7748) used greatest stack depth: 19992 bytes left
[  189.017436][ T7782] kernel profiling enabled (shift: 0)
[  193.930339][ T7843] netlink: 342 bytes leftover after parsing attributes in process `syz.2.420'.
[  194.122837][ T7846] nfs4: Unknown parameter 'EC�H�];^��Y�ى��ZL�`�~^g��'
[  194.631403][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  194.637991][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  195.619194][ T7871] sctp: [Deprecated]: syz.3.425 (pid 7871) Use of int in maxseg socket option.
[  195.619194][ T7871] Use struct sctp_assoc_value instead
[  198.314325][ T7913] netlink: 342 bytes leftover after parsing attributes in process `syz.3.432'.
[  199.153098][ T7921] nfs4: Unknown parameter 'EC�H�];^��Y�ى��ZL�`�~^g��'
[  199.335785][ T7912] Process accounting paused
[  200.369279][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.436'.
[  200.974592][ T7940] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260
[  200.974622][ T7940] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260
[  201.828254][ T7940] Bluetooth: hci2: command 0x0406 tx timeout
[  201.834484][ T7940] Bluetooth: hci0: command 0x0406 tx timeout
[  201.841035][ T7940] Bluetooth: hci3: command 0x0406 tx timeout
[  201.847065][ T7940] Bluetooth: hci1: command 0x0406 tx timeout
[  201.936293][ T7950] kexec: Could not allocate control_code_buffer
[  202.066291][ T7962] netlink: 342 bytes leftover after parsing attributes in process `syz.2.438'.
[  203.195281][ T4937] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  203.907922][ T4937] Bluetooth: hci3: command 0x0406 tx timeout
[  203.907927][ T5633] Bluetooth: hci3: Opcode 0x206a failed: -110
[  212.666066][ T4937] Bluetooth: hci3: unexpected event for opcode 0x7c89
[  212.730655][ T8040] nfs: Unknown parameter '�m?���LH>�｢^�e���ko}*	 �'
[  212.801204][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'.
[  212.810681][ T8041] tc_dump_action: action bad kind
[  215.199144][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  215.207602][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  215.215152][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  215.223054][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  215.230785][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  215.380890][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  215.389638][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  215.397069][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  215.407537][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  215.415219][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  215.801312][ T8063] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.808624][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.815842][ T8063] bridge_slave_0: entered allmulticast mode
[  215.823394][ T8063] bridge_slave_0: entered promiscuous mode
[  215.831262][ T8063] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.838574][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.845786][ T8063] bridge_slave_1: entered allmulticast mode
[  215.852991][ T8063] bridge_slave_1: entered promiscuous mode
[  215.881526][ T8063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.897481][ T8063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.932652][ T8063] team0: Port device team_slave_0 added
[  215.943200][ T8063] team0: Port device team_slave_1 added
[  215.967732][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.974900][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  216.002096][ T8063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.017063][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.024247][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  216.050294][ T8063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.099913][ T8063] hsr_slave_0: entered promiscuous mode
[  216.106206][ T8063] hsr_slave_1: entered promiscuous mode
[  216.112666][ T8063] debugfs: 'hsr0' already exists in 'hsr'
[  216.118703][ T8063] Cannot create hsr debugfs directory
[  216.177995][ T8070] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.185223][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.193257][ T8070] bridge_slave_0: entered allmulticast mode
[  216.200663][ T8070] bridge_slave_0: entered promiscuous mode
[  216.211815][ T8070] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.219142][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.226440][ T8070] bridge_slave_1: entered allmulticast mode
[  216.233996][ T8070] bridge_slave_1: entered promiscuous mode
[  216.267499][ T8070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.282414][ T8070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.324019][ T8070] team0: Port device team_slave_0 added
[  216.335175][ T8070] team0: Port device team_slave_1 added
[  216.358830][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.365805][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  216.393068][ T8070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.405980][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.413058][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  216.439350][ T8070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.473581][ T8070] hsr_slave_0: entered promiscuous mode
[  216.479944][ T8070] hsr_slave_1: entered promiscuous mode
[  216.485995][ T8070] debugfs: 'hsr0' already exists in 'hsr'
[  216.492027][ T8070] Cannot create hsr debugfs directory
[  217.267950][ T4937] Bluetooth: hci3: command tx timeout
[  217.427982][ T4937] Bluetooth: hci6: command tx timeout
[  219.348073][ T4937] Bluetooth: hci3: command tx timeout
[  219.508171][ T4937] Bluetooth: hci6: command tx timeout
[  221.428032][ T4937] Bluetooth: hci3: command tx timeout
[  221.588353][ T4937] Bluetooth: hci6: command tx timeout
[  223.508109][ T4937] Bluetooth: hci3: command tx timeout
[  223.678000][ T4937] Bluetooth: hci6: command tx timeout
[  236.892692][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  236.900501][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  236.907885][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  236.915814][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  236.924988][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  236.958488][ T5633] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  236.965886][ T5633] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  236.973391][ T5633] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  236.982393][ T5633] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  236.990656][ T5633] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  237.540351][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.547630][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.555036][ T8100] bridge_slave_0: entered allmulticast mode
[  237.562318][ T8100] bridge_slave_0: entered promiscuous mode
[  237.575958][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.583278][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.590893][ T8100] bridge_slave_1: entered allmulticast mode
[  237.599511][ T8100] bridge_slave_1: entered promiscuous mode
[  237.633457][ T8100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.651529][ T8100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.674430][ T8105] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.681936][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.689572][ T8105] bridge_slave_0: entered allmulticast mode
[  237.698243][ T8105] bridge_slave_0: entered promiscuous mode
[  237.712532][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.719797][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.727021][ T8105] bridge_slave_1: entered allmulticast mode
[  237.734166][ T8105] bridge_slave_1: entered promiscuous mode
[  237.742621][ T8100] team0: Port device team_slave_0 added
[  237.756898][ T8100] team0: Port device team_slave_1 added
[  237.777992][ T8105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.796038][ T8105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.814966][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.822437][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  237.848850][ T8100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.867193][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.874360][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  237.902123][ T8100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.914788][ T8105] team0: Port device team_slave_0 added
[  237.926941][ T8105] team0: Port device team_slave_1 added
[  237.948477][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.955476][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  237.982035][ T8105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.001692][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.009067][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  238.035138][ T8105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.060795][ T8100] hsr_slave_0: entered promiscuous mode
[  238.067580][ T8100] hsr_slave_1: entered promiscuous mode
[  238.073898][ T8100] debugfs: 'hsr0' already exists in 'hsr'
[  238.079690][ T8100] Cannot create hsr debugfs directory
[  238.116761][ T8105] hsr_slave_0: entered promiscuous mode
[  238.123909][ T8105] hsr_slave_1: entered promiscuous mode
[  238.130135][ T8105] debugfs: 'hsr0' already exists in 'hsr'
[  238.135910][ T8105] Cannot create hsr debugfs directory
[  238.947980][ T4937] Bluetooth: hci7: command tx timeout
[  239.028183][ T4937] Bluetooth: hci8: command tx timeout
[  241.027918][ T4937] Bluetooth: hci7: command tx timeout
[  241.107965][ T4937] Bluetooth: hci8: command tx timeout
[  243.107990][ T4937] Bluetooth: hci7: command tx timeout
[  243.188064][ T4937] Bluetooth: hci8: command tx timeout
[  245.187966][ T4937] Bluetooth: hci7: command tx timeout
[  245.268023][ T4937] Bluetooth: hci8: command tx timeout
[  256.068723][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  256.075161][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  275.433666][ T5633] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  275.441159][ T5633] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  275.448755][ T5633] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  275.456561][ T5633] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  275.470876][ T5633] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  275.484382][ T5633] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  275.493975][ T5633] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  275.501460][ T5633] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  275.510086][ T5633] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  275.517854][ T5633] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  276.064465][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.072595][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.081631][ T8143] bridge_slave_0: entered allmulticast mode
[  276.089859][ T8143] bridge_slave_0: entered promiscuous mode
[  276.104019][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.111301][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.118657][ T8143] bridge_slave_1: entered allmulticast mode
[  276.125579][ T8143] bridge_slave_1: entered promiscuous mode
[  276.161117][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.176471][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  276.213421][ T8143] team0: Port device team_slave_0 added
[  276.219203][ T8146] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.226509][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.234485][ T8146] bridge_slave_0: entered allmulticast mode
[  276.241931][ T8146] bridge_slave_0: entered promiscuous mode
[  276.250852][ T8143] team0: Port device team_slave_1 added
[  276.256669][ T8146] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.263916][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.271322][ T8146] bridge_slave_1: entered allmulticast mode
[  276.278437][ T8146] bridge_slave_1: entered promiscuous mode
[  276.314512][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.321669][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.348095][ T8143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.361219][ T8146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.371428][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.378847][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.405833][ T8143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.423046][ T8146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  276.448320][ T8146] team0: Port device team_slave_0 added
[  276.462635][ T8146] team0: Port device team_slave_1 added
[  276.492339][ T8143] hsr_slave_0: entered promiscuous mode
[  276.499146][ T8143] hsr_slave_1: entered promiscuous mode
[  276.505302][ T8143] debugfs: 'hsr0' already exists in 'hsr'
[  276.511701][ T8143] Cannot create hsr debugfs directory
[  276.518219][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.525237][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.551349][ T8146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.563395][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.570637][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.596674][ T8146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.657877][ T8146] hsr_slave_0: entered promiscuous mode
[  276.664280][ T8146] hsr_slave_1: entered promiscuous mode
[  276.670705][ T8146] debugfs: 'hsr0' already exists in 'hsr'
[  276.676449][ T8146] Cannot create hsr debugfs directory
[  277.507991][ T5633] Bluetooth: hci9: command tx timeout
[  277.587999][ T5633] Bluetooth: hci10: command tx timeout
[  279.587943][ T5633] Bluetooth: hci9: command tx timeout
[  279.667981][ T5633] Bluetooth: hci10: command tx timeout
[  281.667999][ T5633] Bluetooth: hci9: command tx timeout
[  281.747942][ T5633] Bluetooth: hci10: command tx timeout
[  283.747951][ T5633] Bluetooth: hci9: command tx timeout
[  283.827915][ T5633] Bluetooth: hci10: command tx timeout
[  296.955044][ T4937] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  296.963863][ T4937] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  296.971289][ T4937] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  296.980008][ T4937] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  296.988851][ T4937] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  297.010979][ T5633] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  297.019124][ T5633] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  297.026600][ T5633] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  297.037495][ T5633] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  297.045298][ T5633] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  297.563279][ T8183] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.570580][ T8183] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.578184][ T8183] bridge_slave_0: entered allmulticast mode
[  297.585057][ T8183] bridge_slave_0: entered promiscuous mode
[  297.601601][ T8183] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.608991][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.616301][ T8183] bridge_slave_1: entered allmulticast mode
[  297.623550][ T8183] bridge_slave_1: entered promiscuous mode
[  297.664624][ T8183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.683025][ T8183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.707206][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.714525][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.721981][ T8186] bridge_slave_0: entered allmulticast mode
[  297.729173][ T8186] bridge_slave_0: entered promiscuous mode
[  297.743795][ T8186] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.751235][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.758590][ T8186] bridge_slave_1: entered allmulticast mode
[  297.765524][ T8186] bridge_slave_1: entered promiscuous mode
[  297.774067][ T8183] team0: Port device team_slave_0 added
[  297.788404][ T8183] team0: Port device team_slave_1 added
[  297.811149][ T8186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.830030][ T8186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.846786][ T8183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.853994][ T8183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  297.880088][ T8183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.899168][ T8183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.906175][ T8183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  297.933737][ T8183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.946423][ T8186] team0: Port device team_slave_0 added
[  297.958738][ T8186] team0: Port device team_slave_1 added
[  297.986147][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.994277][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  298.021383][ T8186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.040139][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.047208][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  298.073411][ T8186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  298.088338][ T8183] hsr_slave_0: entered promiscuous mode
[  298.094832][ T8183] hsr_slave_1: entered promiscuous mode
[  298.101377][ T8183] debugfs: 'hsr0' already exists in 'hsr'
[  298.107146][ T8183] Cannot create hsr debugfs directory
[  298.159487][ T8186] hsr_slave_0: entered promiscuous mode
[  298.165963][ T8186] hsr_slave_1: entered promiscuous mode
[  298.172396][ T8186] debugfs: 'hsr0' already exists in 'hsr'
[  298.178196][ T8186] Cannot create hsr debugfs directory
[  299.027949][ T4937] Bluetooth: hci11: command tx timeout
[  299.108181][ T4937] Bluetooth: hci12: command tx timeout
[  299.108264][ T5633] Bluetooth: hci4: command 0x0406 tx timeout
[  299.113797][ T7959] Bluetooth: hci5: command 0x0406 tx timeout
[  301.107974][ T7939] Bluetooth: hci11: command tx timeout
[  301.188293][ T7939] Bluetooth: hci12: command tx timeout
[  303.188077][ T7939] Bluetooth: hci11: command tx timeout
[  303.268110][ T7939] Bluetooth: hci12: command tx timeout
[  305.267948][ T7939] Bluetooth: hci11: command tx timeout
[  305.347967][ T7939] Bluetooth: hci12: command tx timeout
[  317.518730][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  317.525091][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  318.788116][   T30] INFO: task syz.0.338:7352 blocked for more than 143 seconds.
[  318.795852][   T30]       Not tainted syzkaller #0
[  318.802361][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  318.811317][   T30] task:syz.0.338       state:D stack:25320 pid:7352  tgid:7351  ppid:5619   task_flags:0x480140 flags:0x00080002
[  318.823458][   T30] Call Trace:
[  318.826764][   T30]  <TASK>
[  318.829793][   T30]  __schedule+0x125c/0x6730
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  318.834350][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  318.839900][   T30]  ? __pfx___schedule+0x10/0x10
[  318.845332][   T30]  ? rcu_is_watching+0x12/0xc0
[  318.850221][   T30]  ? schedule+0x2bf/0x390
[  318.854617][   T30]  ? lock_release+0x24d/0x310
[  318.859654][   T30]  schedule+0xdd/0x390
[  318.863798][   T30]  schedule_timeout+0x1b2/0x280
[  318.868942][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  318.874549][   T30]  ? rcu_is_watching+0x12/0xc0
[  318.879465][   T30]  ? rcu_is_watching+0x12/0xc0
[  318.884298][   T30]  __wait_for_common+0x2e7/0x4c0
[  318.889514][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  318.895011][   T30]  ? __pfx___wait_for_common+0x10/0x10
[  318.902272][   T30]  remove_one+0x312/0x420
[  318.906818][   T30]  ? up_write+0x2e5/0x5c0
[  318.911285][   T30]  __simple_recursive_removal+0x148/0x5c0
[  318.917084][   T30]  ? __pfx_remove_one+0x10/0x10
[  318.922199][   T30]  debugfs_remove+0x5d/0x80
[  318.926800][   T30]  nsim_dev_health_exit+0x3b/0xe0
[  318.932070][   T30]  nsim_dev_reload_destroy+0x144/0x4a0
[  318.937635][   T30]  nsim_drv_remove+0x52/0x1e0
[  318.942506][   T30]  ? __pfx_nsim_bus_remove+0x10/0x10
[  318.948560][   T30]  device_remove+0xcb/0x180
[  318.953169][   T30]  device_release_driver_internal+0x44e/0x620
[  318.959499][   T30]  bus_remove_device+0x2bc/0x560
[  318.964539][   T30]  ? __pfx_bus_remove_device+0x10/0x10
[  318.970340][   T30]  ? __pfx_device_remove_attrs+0x10/0x10
[  318.976313][   T30]  device_del+0x376/0x9b0
[  318.981499][   T30]  ? __pfx_device_del+0x10/0x10
[  318.986437][   T30]  ? __mutex_lock+0x26d/0x1bd0
[  318.991344][   T30]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[  318.996868][   T30]  device_unregister+0x1d/0xe0
[  319.003596][   T30]  del_device_store+0x346/0x480
[  319.009356][   T30]  ? __pfx_del_device_store+0x10/0x10
[  319.014835][   T30]  ? sysfs_file_kobj+0xe4/0x290
[  319.019911][   T30]  ? rcu_is_watching+0x12/0xc0
[  319.024755][   T30]  ? sysfs_file_kobj+0xe4/0x290
[  319.032215][   T30]  ? __pfx_del_device_store+0x10/0x10
[  319.037759][   T30]  bus_attr_store+0x74/0xb0
[  319.042429][   T30]  ? __pfx_bus_attr_store+0x10/0x10
[  319.047911][   T30]  sysfs_kf_write+0xf2/0x150
[  319.052626][   T30]  kernfs_fop_write_iter+0x3e0/0x5f0
[  319.058674][   T30]  ? __pfx_sysfs_kf_write+0x10/0x10
[  319.064183][   T30]  vfs_write+0x6ac/0x1050
[  319.068771][   T30]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  319.074676][   T30]  ? __pfx_vfs_write+0x10/0x10
[  319.080050][   T30]  ksys_write+0x12a/0x250
[  319.084487][   T30]  ? __pfx_ksys_write+0x10/0x10
[  319.089554][   T30]  ? rcu_is_watching+0x12/0xc0
[  319.094391][   T30]  do_syscall_64+0x115/0x840
[  319.099101][   T30]  ? clear_bhb_loop+0x40/0x90
[  319.105666][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.112684][   T30] RIP: 0033:0x7f05a3f9ce59
[  319.117183][   T30] RSP: 002b:00007f05a4e6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  319.126442][   T30] RAX: ffffffffffffffda RBX: 00007f05a4215fa0 RCX: 00007f05a3f9ce59
[  319.134623][   T30] RDX: 0000000000000045 RSI: 0000200000000040 RDI: 000000000000000c
[  319.143581][   T30] RBP: 00007f05a4032d6f R08: 0000000000000000 R09: 0000000000000000
[  319.151781][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.159899][   T30] R13: 00007f05a4216038 R14: 00007f05a4215fa0 R15: 00007ffe257c4688
[  319.168061][   T30]  </TASK>
[  319.171222][   T30] INFO: task syz.1.339:7354 blocked for more than 143 seconds.
[  319.178902][   T30]       Not tainted syzkaller #0
[  319.183897][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  319.192814][   T30] task:syz.1.339       state:D stack:29032 pid:7354  tgid:7353  ppid:5624   task_flags:0x400040 flags:0x00080002
[  319.205168][   T30] Call Trace:
[  319.209893][   T30]  <TASK>
[  319.212899][   T30]  __schedule+0x125c/0x6730
[  319.217464][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  319.223264][   T30]  ? do_raw_spin_lock+0x128/0x260
[  319.228586][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  319.234063][   T30]  ? debug_mutex_add_waiter+0x122/0x200
[  319.239972][   T30]  ? rcu_is_watching+0x12/0xc0
[  319.244813][   T30]  ? __pfx___schedule+0x10/0x10
[  319.250057][   T30]  ? rcu_is_watching+0x12/0xc0
[  319.254899][   T30]  ? schedule+0x2bf/0x390
[  319.259573][   T30]  ? lock_release+0x24d/0x310
[  319.264350][   T30]  schedule+0xdd/0x390
[  319.268842][   T30]  schedule_preempt_disabled+0x13/0x30
[  319.274406][   T30]  __mutex_lock+0xccc/0x1bd0
[  319.279329][   T30]  ? devlink_health_report+0x656/0xb00
[  319.284881][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  319.290295][   T30]  ? devlink_recover_notify.constprop.0+0x1e3/0x550
[  319.296992][   T30]  ? devlink_health_report+0x656/0xb00
[  319.302865][   T30]  devlink_health_report+0x656/0xb00
[  319.308444][   T30]  ? __pfx_devlink_health_report+0x10/0x10
[  319.315687][   T30]  ? _copy_from_user+0x59/0xd0
[  319.321243][   T30]  nsim_dev_health_break_write+0x166/0x210
[  319.327166][   T30]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[  319.333916][   T30]  ? rcu_is_watching+0x12/0xc0
[  319.339603][   T30]  full_proxy_write+0x135/0x1a0
[  319.344555][   T30]  vfs_write+0x2aa/0x1050
[  319.350966][   T30]  ? __pfx_full_proxy_write+0x10/0x10
[  319.356436][   T30]  ? __pfx_vfs_write+0x10/0x10
[  319.362332][   T30]  ? rcu_is_watching+0x12/0xc0
[  319.367187][   T30]  ? __fget_files+0x21f/0x3d0
[  319.372958][   T30]  ksys_write+0x12a/0x250
[  319.377394][   T30]  ? __pfx_ksys_write+0x10/0x10
[  319.382591][   T30]  ? rcu_is_watching+0x12/0xc0
[  319.387434][   T30]  do_syscall_64+0x115/0x840
[  319.393049][   T30]  ? clear_bhb_loop+0x40/0x90
[  319.398013][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.403983][   T30] RIP: 0033:0x7fd53c39ce59
[  319.408725][   T30] RSP: 002b:00007fd53d2e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  319.419294][   T30] RAX: ffffffffffffffda RBX: 00007fd53c615fa0 RCX: 00007fd53c39ce59
[  319.427439][   T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000003
[  319.438224][   T30] RBP: 00007fd53c432d6f R08: 0000000000000000 R09: 0000000000000000
[  319.446298][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.455331][   T30] R13: 00007fd53c616038 R14: 00007fd53c615fa0 R15: 00007ffd5a442628
[  319.463755][   T30]  </TASK>
[  319.466896][   T30] INFO: lockdep is turned off.
[  319.472735][   T30] NMI backtrace for cpu 0
[  319.472761][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  319.472796][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  319.472814][   T30] Call Trace:
[  319.472824][   T30]  <TASK>
[  319.472834][   T30]  dump_stack_lvl+0x100/0x190
[  319.472891][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[  319.472926][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  319.472981][   T30]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  319.473017][   T30]  sys_info+0x141/0x190
[  319.473064][   T30]  watchdog+0xcb1/0x1030
[  319.473105][   T30]  ? trace_irq_enable.constprop.0+0x122/0x160
[  319.473154][   T30]  ? __pfx_watchdog+0x10/0x10
[  319.473192][   T30]  ? __kthread_parkme+0x18c/0x230
[  319.473243][   T30]  ? kthread+0x13a/0x450
[  319.473275][   T30]  ? __pfx_watchdog+0x10/0x10
[  319.473321][   T30]  kthread+0x370/0x450
[  319.473354][   T30]  ? __pfx_kthread+0x10/0x10
[  319.473389][   T30]  ret_from_fork+0x72b/0xd50
[  319.473420][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  319.473452][   T30]  ? __switch_to+0x800/0x10f0
[  319.473493][   T30]  ? __switch_to_asm+0x39/0x70
[  319.473532][   T30]  ? __pfx_kthread+0x10/0x10
[  319.473567][   T30]  ret_from_fork_asm+0x1a/0x30
[  319.473615][   T30]  </TASK>
[  319.473637][   T30] Sending NMI from CPU 0 to CPUs 1:
[  319.609370][    C1] NMI backtrace for cpu 1
[  319.609390][    C1] CPU: 1 UID: 0 PID: 5607 Comm: sshd-session Not tainted syzkaller #0 PREEMPT(full) 
[  319.609421][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  319.609436][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x20
[  319.609474][    C1] Code: bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <40> 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 86 fe ff ff 66 0f 1f 44
[  319.609498][    C1] RSP: 0018:ffffc900039277b0 EFLAGS: 00000246
[  319.609518][    C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff825bf5ae
[  319.609535][    C1] RDX: ffff88807895be00 RSI: 0000000000000000 RDI: 0000000000000000
[  319.609550][    C1] RBP: 0000000000000000 R08: 0000000000000004 R09: 000000000000002f
[  319.609565][    C1] R10: 00000000000001fd R11: 1ffff11003cedc3a R12: 0000000000000000
[  319.609581][    C1] R13: ffffea00004e4a40 R14: ffff888026963d58 R15: 0000000013929025
[  319.609597][    C1] FS:  0000000000000000(0000) GS:ffff88812443c000(0000) knlGS:0000000000000000
[  319.609621][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  319.609637][    C1] CR2: 000056144d672f40 CR3: 000000000e592000 CR4: 00000000003526f0
[  319.609653][    C1] Call Trace:
[  319.609661][    C1]  <TASK>
[  319.609670][    C1]  __zap_vma_range+0x14ae/0x4a30
[  319.609726][    C1]  ? __pfx___zap_vma_range+0x10/0x10
[  319.609774][    C1]  unmap_vmas+0x299/0x5f0
[  319.609816][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  319.609854][    C1]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  319.609885][    C1]  ? mas_next_slot+0x10a3/0x1960
[  319.609932][    C1]  exit_mmap+0x1ef/0xa00
[  319.609956][    C1]  ? lock_acquire+0x301/0x370
[  319.609989][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  319.610013][    C1]  ? rcu_is_watching+0x12/0xc0
[  319.610041][    C1]  ? uprobe_clear_state+0x5f/0x260
[  319.610078][    C1]  ? __mutex_unlock_slowpath+0x350/0x910
[  319.610119][    C1]  ? arch_uprobe_clear_state+0x107/0x150
[  319.610150][    C1]  __mmput+0x12a/0x410
[  319.610195][    C1]  mmput+0x67/0x80
[  319.610232][    C1]  do_exit+0x8b1/0x2ae0
[  319.610258][    C1]  ? __fput+0x692/0xb50
[  319.610286][    C1]  ? do_raw_spin_lock+0x128/0x260
[  319.610325][    C1]  ? __pfx_do_exit+0x10/0x10
[  319.610351][    C1]  ? rcu_is_watching+0x12/0xc0
[  319.610374][    C1]  ? rcu_is_watching+0x12/0xc0
[  319.610400][    C1]  do_group_exit+0xd5/0x2a0
[  319.610429][    C1]  __x64_sys_exit_group+0x3e/0x50
[  319.610459][    C1]  x64_sys_call+0x102c/0x1530
[  319.610491][    C1]  do_syscall_64+0x115/0x840
[  319.610523][    C1]  ? clear_bhb_loop+0x40/0x90
[  319.610552][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.610578][    C1] RIP: 0033:0x7fa874cf16c5
[  319.610596][    C1] Code: Unable to access opcode bytes at 0x7fa874cf169b.
[  319.610607][    C1] RSP: 002b:00007ffed622d3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  319.610630][    C1] RAX: ffffffffffffffda RBX: 00000000000000ff RCX: 00007fa874cf16c5
[  319.610646][    C1] RDX: 00000000000000e7 RSI: fffffffffffffea0 RDI: 00000000000000ff
[  319.610663][    C1] RBP: 00007ffed622d540 R08: 0000000000000000 R09: 0000000000000000
[  319.610678][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa87539c1a0
[  319.610694][    C1] R13: 00000000ffffffe3 R14: 00007ffed622d790 R15: 000000000000000a
[  319.610718][    C1]  </TASK>
[  319.937270][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  319.944167][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  319.953292][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  319.963357][   T30] Call Trace:
[  319.966647][   T30]  <TASK>
[  319.969582][   T30]  dump_stack_lvl+0x100/0x190
[  319.974297][   T30]  vpanic+0x552/0x970
[  319.978301][   T30]  ? __pfx_vpanic+0x10/0x10
[  319.982837][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  319.989012][   T30]  panic+0xd1/0xe0
[  319.992746][   T30]  ? __pfx_panic+0x10/0x10
[  319.997168][   T30]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  320.003330][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  320.009500][   T30]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  320.015666][   T30]  ? watchdog.cold+0x1ec/0x234
[  320.020447][   T30]  ? watchdog+0xcc1/0x1030
[  320.024902][   T30]  watchdog.cold+0x1fd/0x234
[  320.029522][   T30]  ? trace_irq_enable.constprop.0+0x122/0x160
[  320.035661][   T30]  ? __pfx_watchdog+0x10/0x10
[  320.040377][   T30]  ? __kthread_parkme+0x18c/0x230
[  320.045429][   T30]  ? kthread+0x13a/0x450
[  320.049768][   T30]  ? __pfx_watchdog+0x10/0x10
[  320.054463][   T30]  kthread+0x370/0x450
[  320.058549][   T30]  ? __pfx_kthread+0x10/0x10
[  320.063154][   T30]  ret_from_fork+0x72b/0xd50
[  320.067765][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  320.072909][   T30]  ? __switch_to+0x800/0x10f0
[  320.077604][   T30]  ? __switch_to_asm+0x39/0x70
[  320.082392][   T30]  ? __pfx_kthread+0x10/0x10
[  320.087003][   T30]  ret_from_fork_asm+0x1a/0x30
[  320.091816][   T30]  </TASK>
[  320.095711][   T30] Kernel Offset: disabled
[  320.100050][   T30] Rebooting in 86400 seconds..