last executing test programs:

10.589082535s ago: executing program 1 (id=120):
mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x23, 0x80805, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0)
ioctl$auto_BLKRRPART(r3, 0x125f, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0)
write$auto(r2, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

9.487956344s ago: executing program 3 (id=122):
mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x23, 0x80805, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0)
ioctl$auto_BLKRRPART(r3, 0x125f, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0)
write$auto(r2, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=0x0)

8.675848127s ago: executing program 1 (id=124):
mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
execve$auto(0x0, 0x0, 0x0)
open(0x0, 0x22240, 0x154)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x23, 0x80805, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0)
ioctl$auto_BLKRRPART(r3, 0x125f, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0)
write$auto(r2, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x02\x00\b\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5')

8.311397785s ago: executing program 0 (id=126):
mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000)
socket(0xf, 0x3, 0x2)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22640, 0x1c7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x3c)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x446b, 0x0, 0x106, 0x0, 0x1, 0x2003}, 0xed7138c}, 0x7, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0x9, 0x20009, 0x1, 0xeb1, 0xffffffffffffffff, 0x14)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/midi2\x00', 0x200, 0x0)
socket(0x23, 0x80805, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0)
ioctl$auto_BLKRRPART(r3, 0x125f, 0x0)
prctl$auto(0x4003e, 0x10000001, 0x0, 0x1, 0xde6)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0)
write$auto(r2, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000440)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5')

7.787356106s ago: executing program 3 (id=127):
r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40, 0x0)
read$auto_ftrace_subsystem_filter_fops_trace_events(r0, &(0x7f0000000100)=""/216, 0xd8)
r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001bf9f34dc422231cf4d40d4", 0x35)
r2 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0)
ioctl$auto_FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000440)="9b58b4fccbcd800000100000000000000025000000d1627cc84d61f3d07771b09e2c91eb271fd2f826dcc129e3a136d030996f8769497d9621bcd869c6f014922a060000000000000028a0784539e00ad178298ec54bf55f716653ee64518c92a24409be055f93546773a695c31a9a53ef754e8ca43619e9a71b76f8e8aeb15a4019883dbfd1")
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x54)
mmap$auto(0x0, 0x4, 0x4200000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x45c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}, @HWSIM_ATTR_PMSR_RESULT={0x438, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x3ec, 0x5, 0x0, 0x1, [{0x3e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x374, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xf1f}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x13, 0x14, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0xffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x8001}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xfffffffe}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xfffffffffffffe01}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x10001}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x62}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x1c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xe}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xff}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8e3}]}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x13, 0x13, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0xffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x64f}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6}]}]}, @NL80211_PMSR_RESP_ATTR_DATA={0x278, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x10000}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0xd0a6}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x3c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xe}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x5}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0xf0}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x4b}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x81}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x3}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0xc, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x6}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0xba}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x13, 0x14, 'MAC80211_HWSIM\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x61e}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xc6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3e}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x1c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_BW={0x5}, @HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0xe}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x3}]}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xeba}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xda3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xffffffffffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x1000}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xc478673}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x6c}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9255}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x2c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x9}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x7f}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x1}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x9d}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x6f4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_LCI={0x13, 0x13, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xffffffffffffff7f}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xe}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x4}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x66, 0x1, "6b074ccd6dcf3891b543b8004df8a752d9e2a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a9b75b718ca14a40df6c9f813f017212cd32804fad90d3dc0c69c87"}]}, {0x4}, {0x4}]}, @NL80211_PMSR_ATTR_PEERS={0x48, 0x5, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x58}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x2}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}]}, {0x4}]}]}]}, 0x45c}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0xc)
getsockopt$auto(r2, 0x0, 0x26, 0x0, &(0x7f00000000c0)=0x9010c)
r6 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TCP_METRICS_CMD_GET(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)

7.414735284s ago: executing program 3 (id=128):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/radio1/name\x00', 0xa2500, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000002c0)=""/106, 0x6a)
waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000080)={@_si_pad}, 0x3, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff)
process_vm_writev$auto(0x0, 0x0, 0x200000000017, 0x0, 0x7, 0x0)
r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64)
fchdir$auto(r1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r3 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0x7fffffff)
ptrace$auto(0x10, r2, 0x4, 0x7ff)
sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="20018000", @ANYRES16=0x0, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf250f0000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000600000014000200776c616e310000000000000000000000140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB="28000180140002006261746164763000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300080000002800018008000100", @ANYRES32=0x0, @ANYBLOB="14000200746561a03000000000000000000000000800030001040000200001801400020070696d3672656700000000000000000000000100", @ANYRES32, @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x4048044}, 0x4080)
ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r2, 0x8, 0x6)

6.490649589s ago: executing program 1 (id=130):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/radio1/name\x00', 0xa2500, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000002c0)=""/106, 0x6a)
waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000080)={@_si_pad}, 0x3, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/clk/clk_dump\x00', 0x200000, 0x0)
process_vm_writev$auto(0x0, 0x0, 0x200000000017, 0x0, 0x7, 0x0)
r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64)
fchdir$auto(r1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r3 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0x7fffffff)
ptrace$auto(0x10, r2, 0x4, 0x7ff)
sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="20018000", @ANYRES16=0x0, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf250f0000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000600000014000200776c616e310000000000000000000000140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB="28000180140002006261746164763000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300080000002800018008000100", @ANYRES32=0x0, @ANYBLOB="14000200746561a03000000000000000000000000800030001040000200001801400020070696d3672656700000000000000000000000100", @ANYRES32, @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x4048044}, 0x4080)
ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r2, 0x8, 0x6)

6.180226531s ago: executing program 0 (id=131):
r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40, 0x0)
read$auto_ftrace_subsystem_filter_fops_trace_events(r0, &(0x7f0000000100)=""/216, 0xd8)
r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001bf9f34dc422231cf4d40d4", 0x35)
r2 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0)
ioctl$auto_FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000440)="9b58b4fccbcd800000100000000000000025000000d1627cc84d61f3d07771b09e2c91eb271fd2f826dcc129e3a136d030996f8769497d9621bcd869c6f014922a060000000000000028a0784539e00ad178298ec54bf55f716653ee64518c92a24409be055f93546773a695c31a9a53ef754e8ca43619e9a71b76f8e8aeb15a4019883dbfd1")
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x54)
mmap$auto(0x0, 0x4, 0x4200000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x48c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}, @HWSIM_ATTR_PMSR_RESULT={0x468, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x41c, 0x5, 0x0, 0x1, [{0x410, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x3a4, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xf1f}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x13, 0x14, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0xffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x8001}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xfffffffe}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xfffffffffffffe01}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x10001}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x62}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x1c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xe}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xff}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8e3}]}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x13, 0x13, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0xffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x64f}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6}]}]}, @NL80211_PMSR_RESP_ATTR_DATA={0x2a8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x10000}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0xc, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xfd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0xd0a6}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x4}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0xc, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x6}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0xba}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x13, 0x14, 'MAC80211_HWSIM\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x61e}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xc6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3e}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x1c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_BW={0x5}, @HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0xe}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x3}]}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xeba}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xda3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xffffffffffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x1000}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xc478673}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x6c}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9255}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x2c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x9}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x7f}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x1}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x9d}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x6f4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_LCI={0x13, 0x13, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xffffffffffffff7f}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xe}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x4}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x66, 0x1, "6b074ccd6dcf3891b543b8004df8a752d9e2a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a9b75b718ca14a40df6c9f813f017212cd32804fad90d3dc0c69c87"}]}, {0x4}, {0x4}]}, @NL80211_PMSR_ATTR_PEERS={0x48, 0x5, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x58}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x2}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}]}, {0x4}]}]}]}, 0x48c}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0xc)
getsockopt$auto(r2, 0x0, 0x26, 0x0, &(0x7f00000000c0)=0x9010c)
r6 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TCP_METRICS_CMD_GET(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)

5.925321287s ago: executing program 0 (id=132):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/radio1/name\x00', 0xa2500, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000002c0)=""/106, 0x6a)
waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000080)={@_si_pad}, 0x3, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/clk/clk_dump\x00', 0x200000, 0x0)
process_vm_writev$auto(0x0, 0x0, 0x200000000017, 0x0, 0x7, 0x0)
r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64)
fchdir$auto(r1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r3 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0x7fffffff)
ptrace$auto(0x10, r2, 0x4, 0x7ff)
sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="20018000", @ANYRES16=0x0, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf250f0000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000600000014000200776c616e310000000000000000000000140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB="28000180140002006261746164763000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300080000002800018008000100", @ANYRES32=0x0, @ANYBLOB="14000200746561a03000000000000000000000000800030001040000200001801400020070696d3672656700000000000000000000000100", @ANYRES32, @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x4048044}, 0x4080)
ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r2, 0x8, 0x6)

5.890855339s ago: executing program 2 (id=133):
r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40, 0x0)
read$auto_ftrace_subsystem_filter_fops_trace_events(r0, &(0x7f0000000100)=""/216, 0xd8)
r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001bf9f34dc422231cf4d40d4", 0x35)
r2 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0)
ioctl$auto_FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000440)="9b58b4fccbcd800000100000000000000025000000d1627cc84d61f3d07771b09e2c91eb271fd2f826dcc129e3a136d030996f8769497d9621bcd869c6f014922a060000000000000028a0784539e00ad178298ec54bf55f716653ee64518c92a24409be055f93546773a695c31a9a53ef754e8ca43619e9a71b76f8e8aeb15a4019883dbfd1")
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x54)
mmap$auto(0x0, 0x4, 0x4200000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x458, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}, @HWSIM_ATTR_PMSR_RESULT={0x434, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x3e8, 0x5, 0x0, 0x1, [{0x3dc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x370, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xf1f}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x13, 0x14, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0xffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x8001}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xfffffffe}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xfffffffffffffe01}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x10001}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x62}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x1c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xe}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xff}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8e3}]}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x13, 0x13, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0xffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x64f}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6}]}]}, @NL80211_PMSR_RESP_ATTR_DATA={0x274, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x10000}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0xd0a6}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x3c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xe}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x5}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0xf0}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x4b}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x81}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x3}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0xc, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x6}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0xba}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x13, 0x14, 'MAC80211_HWSIM\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x61e}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xc6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3e}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x1c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_BW={0x5}, @HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0xe}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x3}]}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xeba}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xda3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xffffffffffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x1000}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xc478673}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x6c}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9255}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x2c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x9}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x7f}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x1}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x9d}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x6f4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_LCI={0x13, 0x13, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xffffffffffffff7f}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xe}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x4}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x66, 0x1, "6b074ccd6dcf3891b543b8004df8a752d9e2a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a9b75b718ca14a40df6c9f813f017212cd32804fad90d3dc0c69c87"}]}, {0x4}, {0x4}]}, @NL80211_PMSR_ATTR_PEERS={0x48, 0x5, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x58}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x2}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}]}, {0x4}]}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0xc)
getsockopt$auto(r2, 0x0, 0x26, 0x0, &(0x7f00000000c0)=0x9010c)
r6 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TCP_METRICS_CMD_GET(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)

5.551079215s ago: executing program 2 (id=134):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
select$auto(0x2000e, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000001, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0xab]}, 0x0)
mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000001c0)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0xffff7f00, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x40980, 0x0)
pread64$auto(r3, 0x0, 0x1000f42d, 0x100)
sysfs$auto(0x2, 0x23, 0x0)
r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r4, 0x0, 0x4)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
mmap$auto(0x0, 0x400007, 0x4, 0x9b72, 0xffffffffffffffff, 0x1)
sendmsg$auto_NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x3c}}, 0x0)
writev$auto(0xffffffffffffffff, 0x0, 0x3)
connect$auto(r0, 0x0, 0x458)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)

4.449826876s ago: executing program 2 (id=135):
mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x23, 0x80805, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0)
ioctl$auto_BLKRRPART(r3, 0x125f, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0)
write$auto(r2, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\xf5\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5')

4.387674778s ago: executing program 1 (id=136):
mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x23, 0x80805, 0x0)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0)
ioctl$auto_BLKRRPART(r5, 0x125f, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0)
write$auto(r4, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5')

3.767224035s ago: executing program 3 (id=137):
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0)
socket(0xa, 0x5, 0x0)
getresuid$auto(0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffc)
rseq$auto(0x0, 0x8000, 0x0, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf2503000000080003000002000006000700", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
open(0x0, 0x44042, 0x1d0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2f212cbd7000fcdbdf2531"], 0x48}}, 0x4000000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/virt_wifi0/delay_first_probe_time\x00', 0x40400, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0)
setsockopt$auto_SO_TIMESTAMPNS_OLD(r3, 0x3, 0x23, 0x0, 0x7fff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/122, 0x7a)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6c43)
socket(0x2, 0x80802, 0x0)
socket(0x9, 0x2, 0x4)
getrandom$auto(0x0, 0x6000000, 0x3)
semget$auto(0x0, 0x2e4a, 0x8000)
semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0)

3.35386097s ago: executing program 0 (id=138):
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0)
socket(0xa, 0x5, 0x0)
getresuid$auto(0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffc)
rseq$auto(0x0, 0x8000, 0x0, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf2503000000080003000002000006000700", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
open(0x0, 0x44042, 0x1d0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2f212cbd7000fcdbdf2531"], 0x48}}, 0x4000000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/virt_wifi0/delay_first_probe_time\x00', 0x40400, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0)
setsockopt$auto_SO_TIMESTAMPNS_OLD(r3, 0x3, 0x23, 0x0, 0x7fff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/122, 0x7a)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6c43)
socket(0x2, 0x80802, 0x0)
socket(0x9, 0x2, 0x4)
getrandom$auto(0x0, 0x6000000, 0x3)
semget$auto(0x0, 0x2e4a, 0x8000)
semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0)

2.946929629s ago: executing program 2 (id=139):
mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0xfffffffffffffffe, 0x20009, 0xdf, 0xeb1, 0x401, 0x400)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dmmidi2\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x5, 0x0)
epoll_create$auto(0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r3, 0x0)
capset$auto(0x0, 0x0)
epoll_ctl$auto(0x5, 0x3, r3, 0x0)
socket(0x23, 0x80805, 0x0)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0)
ioctl$auto_BLKRRPART(r4, 0x125f, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0)
write$auto(r2, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0)

2.620556552s ago: executing program 3 (id=140):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffd, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x800000000000006, 0x2, 0x9, 0x19334, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7f, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x1]}, 0x1fe, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0x20499d, 0x9)
mmap$auto(0x470000000, 0xd, 0x4000000000000df, 0x109b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
rseq$auto(&(0x7f0000000040)={0x5, 0x8, 0x80000001, 0x1000, 0x4, 0x2}, 0x8001, 0x0, 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, 0x0, 0x84000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)

2.230966875s ago: executing program 1 (id=141):
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000)
r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x40, r0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0xa, 0x2, 0x0, 0x1, [@generic="00b487080d9c"]}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880)
mmap$auto(0x20000, 0x40005, 0xdf, 0x1b, 0x7, 0x28000)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
futex$auto(0x0, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0)
mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
mmap$auto(0x0, 0x20008, 0x4, 0x3b, 0xffffffffffffffff, 0x8000)
socket(0x2a, 0x2, 0x0)
io_uring_setup$auto(0x6, 0x0)
select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x5, 0x7fff, 0x19fff, 0x800009487, 0x8, 0x200000000008, 0x7f, 0x100000000003, 0x1000000009, 0x9, 0x3, 0x6, 0x400005, 0x1000000000000005, 0x2]}, 0x0)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000c80)="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", 0x1a4)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x15, 0x3, 0x8000)
connect$auto(0x3, 0x0, 0x81)
mmap$auto(0x0, 0x7, 0x20000000df, 0x19, 0x40000000000a5, 0x5)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0)
pread64$auto(r4, 0x0, 0x6, 0x1ff)
readv$auto(0x3, 0x0, 0x4)
unshare$auto(0x40000080)
open(0x0, 0x161342, 0x130)

1.953649066s ago: executing program 0 (id=142):
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x602, 0x0)
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
pread64$auto(r1, &(0x7f0000000080)=')-\x00', 0x80000001, 0x6)
r2 = pidfd_open$auto(0x0, 0x8d)
r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000000c0), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_XFS_IOC_FREESP(r2, 0x4030580b, &(0x7f0000000140)={0x401, 0x537, 0x8, 0x4, 0x6, <r5=>0xffffffffffffffff})
sendmsg$auto_TIPC_NL_PEER_REMOVE(r4, &(0x7f0000001580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f0000000180)={0x1398, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NAME_TABLE={0xab, 0x8, 0x0, 0x1, [@nested={0x8, 0x3b, 0x0, 0x1, [@nested={0x4, 0x7b}]}, @generic="76c0e85dd1d7ae48d8e41c6803ca90263cae9f76afcb67c4cb3aa88fd36aeafd008e01677351e056bfbf6911ef92fb69671236555c9843e75344c979d82472192dc774110adc32153c3dbafa7b8c3b7ac734809061ab0ab646d2c48a29288cd2fc82ab0bfa3d2c32c9cd339c22e425c222d545788d089286e470e766cd6ea7978c2f6a", @typed={0x14, 0x34, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @typed={0x8, 0x14d, 0x0, 0x0, @pid=r5}]}, @TIPC_NLA_NAME_TABLE={0xc, 0x8, 0x0, 0x1, [@nested={0x8, 0xa0, 0x0, 0x1, [@nested={0x4, 0xb5}]}]}, @TIPC_NLA_LINK={0x120, 0x4, 0x0, 0x1, [@typed={0xe, 0x71, 0x0, 0x0, @str='wireguard\x00'}, @nested={0x10c, 0x14, 0x0, 0x1, [@nested={0x4, 0x113}, @typed={0x102, 0x1b, 0x0, 0x0, @binary="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"}]}]}, @TIPC_NLA_MEDIA={0x119d, 0x5, 0x0, 0x1, [@nested={0x78, 0xb3, 0x0, 0x1, [@nested={0x4, 0x8f}, @typed={0x4, 0x3}, @generic="6f60a293e8ff5e76e713219fc97787285e2ce924ad87c258c785ea8d4b745dbaf444750e461b0a232701e08b6ab5c514f784e09b65633b79b2a5bcb2fcb06633706d1103bfdc79607fa8853b8ea2e9bd4d5250f81d74b68b68e137ba9dda56848df993f6541017661a7aa960"]}, @generic="c778cb890cfc25ae9efc5536f072eaa2f1c91e83088f96573927bcfcc68af57633f2925ec14ceeb66e014a79e34ed7ceb3ca4492de2a30af6ab21979d1993de1207c47da397cfcc94f3593fe8a7abe3de1f1d899abbcb204691980b2fd1786fdf8672192f79773234121522ccc60961a730495585ba34465a9f32100214c4d66e8a3bd03c562cdeb22e0a570f67d4faed8cbb3580b3bc17725b9514d39229ee1fef69f1e60085a35d60d85767d22a2f2229fb895ffa508a01a3e4b4935bf1c0b8c892913c67663a7e9b9cb228e08f49d26bc338b4cb5fcd1af1a9ac7366b378c8bdfdebf04a4244d9a4e7ade1cf93e6e364795398d", @typed={0x18, 0x6b, 0x0, 0x0, @str='/dev/mapper/control\x00'}, @generic="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", @typed={0x8, 0x73, 0x0, 0x0, @fd}, @nested={0x8, 0xec, 0x0, 0x1, [@nested={0x4, 0xb3}]}, @typed={0x4, 0x146}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @ipv4=@local}]}]}, 0x1398}, 0x1, 0x0, 0x0, 0x24000140}, 0x40)
r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000015c0), 0x100, 0x0)
ioctl$auto_UI_SET_MSCBIT(r6, 0x40045568, &(0x7f0000001600)=0x4)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001680), r2)
sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x80, r7, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x5d, 0x9d, "56f8aaa246f6f1481c7b193480eb90627054ac47deaee7e7581d3e8bdfcc4d5ae3ea6ffc750680537cd4b98817d1cb3d9fec0b352e131452ebd26d08d319818d346983c318f907c67b3d996de906b1ed4bf0ad01f7d8aea325"}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x240000c0)
ioctl$auto_SNDRV_PCM_IOCTL_PVERSION2(r2, 0x80044100, &(0x7f00000017c0)=0x8000)
r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001800)='/dev/bus/usb/006/001\x00', 0x141980, 0x0)
getsockopt$auto_SO_TYPE(r2, 0x8001, 0x3, &(0x7f0000001840)='/dev/bus/usb/006/001\x00', &(0x7f0000001880))
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001a80)={{&(0x7f00000018c0)="016eb462b2d9c8496f4bd6261879a2ebe54fdad16de2feeca780d8d7c8990fdbcd107451e81f6ff6f717f5ff711c0fc11c2aac6db41020ca9bd0bbb320db2175e7a923a64ad8be4e01246a806fa585a2cca52ad61cc7d7b01fe733e747eaece437eb14ef8ac9841f1402be8e108068c40e4ce003b6144f20374987d54b263899f1f5572eb5ac0f0dbeab0f1932e6", 0x0, &(0x7f00000019c0)={&(0x7f0000001980)="f1ef02fad068ad5846d7b2478e90cf35da3dd75f3f6c7b15ced619a282ea7ae734", 0x9}, 0x838, &(0x7f0000001a00)="a9be7facfb7f0d9b6dc29ca4c284dcba21a7011b8a080783ad49b9db551b5df3c44597a6f89630defe5e050ec26a176f42759f6e8b133985f2d2ae6ddf5b52efbeb1916e800817e0d2f4c7cb640372e541b9bb9396ee46baa9caadb670225f4c2a8f3ffd4201d4b93ddb2b", 0xff, 0x100}}, 0x7, 0x6)
r9 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xe, &(0x7f0000001ac0)="3722bc3645728e19f675a2af9d244adcfcb49101d7c0ef166e0a27609875b274e054d3aa37938dda34bcadaee9627e7dbe8eeea6a2ddcdf6c87f90e23e73aacee090f84f0d806dde2e3df4cea17d6119acd1bb4f55b3521d54bbde339b0a6588bef10ea29cde59874afce92ef46ebde8ef08e3a003b77bfe1aec0f239612a00517a885")
ioctl$auto_XFS_IOC_ERROR_CLEARALL(r2, 0x40085875, &(0x7f0000001b80)={<r10=>r6, 0xde8})
copy_file_range$auto(r10, &(0x7f0000001bc0)=0xfffffffffffffffb, r8, &(0x7f0000001c00)=0x9c2f, 0x10001, 0xffff563a)
r11 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000001c80), r4)
sendmsg$auto_CGROUPSTATS_CMD_GET(r9, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r11, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x80)
ioctl$auto_FIONBIO(r9, 0x5421, 0x3)
ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
setsockopt$auto(r8, 0x306, 0x7b2d, &(0x7f0000001d80)=':[.%/\x00', 0xfffff6b4)
r12 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0)
ioctl$auto_SNAPSHOT_FREE_SWAP_PAGES(r12, 0x3309, 0x0)
bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f0000001e00)=@bpf_attr_1={r4, 0x2, @next_key, 0x4}, 0xf8d4)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_WG_CMD_GET_DEVICE(r13, &(0x7f00000021c0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002000)={0x154, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x90, 0x8, 0x0, 0x1, [@generic="310ecb45853d057632db1f15b316d6af3fb51c552354047645aab79fae23b2aba3ba63b4cf3d5ab8c4b48a3bcc", @generic="196bb95210353c937abec8a61382e862f8d9205354692706dd92bb5e20cca267020bfd669ababd57d45f3d5cd91707b6debb4ce8dccd369788c5e6363e93dd352a908984e398ae", @typed={0x8, 0xca, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x36, 0x0, 0x0, @uid}, @typed={0x8, 0xea, 0x0, 0x0, @fd=r1}]}, @WGDEVICE_A_PUBLIC_KEY={0xb0, 0x4, "c7ab9e3850cd4f07c7ce479ce4686c9fd95ea6fcf2af0c1c562a743836c70d6fb3c1d45198496afe4c846b06dd603b01e7c4772d967e50f943292d62950127a63a2c13884f7e0173fe45a0fc73576477c7837e5ecbd8f079423b0253c1bc3abfb3e94608f76e16f3d829f96d7659c08f9cf82da02a8a4b3763e622c5a8300a26a64765c49fc0fcf6058ca94427d5125c22e5635324d0a04f6f9bfca127b7ff33b2565cdb76a925643882f66c"}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c011)

1.765567493s ago: executing program 2 (id=143):
mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
execve$auto(0x0, 0x0, 0x0)
open(0x0, 0x22240, 0x154)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x23, 0x80805, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0)
ioctl$auto_BLKRRPART(r3, 0x125f, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0)
write$auto(r2, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\xf4\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5')

1.015880456s ago: executing program 1 (id=144):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/radio1/name\x00', 0xa2500, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000002c0)=""/106, 0x6a)
waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000080)={@_si_pad}, 0x3, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/clk/clk_dump\x00', 0x200000, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff)
process_vm_writev$auto(0x0, 0x0, 0x200000000017, 0x0, 0x7, 0x0)
fchdir$auto(0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0x7fffffff)
ptrace$auto(0x10, r1, 0x4, 0x7ff)
sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="20018000", @ANYRES16=0x0, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf250f0000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000600000014000200776c616e310000000000000000000000140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB="28000180140002006261746164763000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300080000002800018008000100", @ANYRES32=0x0, @ANYBLOB="14000200746561a03000000000000000000000000800030001040000200001801400020070696d3672656700000000000000000000000100", @ANYRES32, @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x4048044}, 0x4080)
ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r1, 0x8, 0x6)

936.878128ms ago: executing program 3 (id=145):
mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
execve$auto(0x0, 0x0, 0x0)
open(0x0, 0x22240, 0x154)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x23, 0x80805, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0)
ioctl$auto_BLKRRPART(r3, 0x125f, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0)
write$auto(r2, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00@\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5')

480.479654ms ago: executing program 0 (id=146):
r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x4, 0x2, 0x0, 0x9b7, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", "ff7f62c9", ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]})
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x4a)
sendto$auto(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0xd0fe)
msgrcv$auto(0xff, 0x0, 0x2400000000, 0x7, 0x6bc2cc7d)
r2 = pidfd_open$auto(0x1, 0x0)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x102, 0x0)
ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, &(0x7f0000000040))
setns(r2, 0x20000000)
write$auto(r0, &(0x7f0000000140)='\x1c\x91\xb4F\xe2hsF!\xcd\n\xf8dA\x19\b{\xef;\xbdX\xbaCu\xcb\xfc\xd5\xd9\xf4\x1c\xff/x\xbc2\x8a)\x85=\x95\xf4\xbb\x1d\xd2\x1a\xf6\t\xbf\xbd\xbc\xd1\xe7\xc8\x9b\x99\xa7\x9d \x7f\xdd\xfa\"@\xa8\xc6\xa8\xf0A\x00\xaa\x12G\\u\xca\xc0\xd3<\xe5\xaa\xaf\x03\xa8\xc1|?\x0e\xb4)H\xf0\x13:\x98\x9a/\x85\x01\x004s\xabt\x9d\x18S7\x8e\xdc\x85B\xef@&h0m\x16\xa9\xd2\x15\xb5y\xec\x14F\f\xce\xc7\x83\xe8\xb1\xfa\xd0\xa5p^j\xd7', 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x142, 0x0)
read$auto(r4, 0x0, 0x4)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/fail-nth\x00', 0x208a01, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
r5 = socket(0x2, 0xa, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x401, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$auto(r5, 0x84, 0xd, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x6d82, 0x20eb1, 0xfffffffffffffffa, 0x8000)
r6 = socket(0x10, 0x2, 0xf)
r7 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r6, 0xffffffff}, 0xd)
bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r7, 0x98}, 0x5)
r8 = socket(0xa, 0x1, 0x84)
setsockopt$auto(r8, 0x0, 0x60, 0x0, 0x6f7250c4)

0s ago: executing program 2 (id=147):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
getsockopt$auto_SO_TYPE(r0, 0x9, 0x3, &(0x7f0000000080)='/dev/ppp\x00', &(0x7f0000000100)=0xfffff0c7)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff004}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts.
[   81.950505][ T5820] cgroup: Unknown subsys name 'net'
[   82.157458][ T5820] cgroup: Unknown subsys name 'cpuset'
[   82.166392][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.629033][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.245299][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.254637][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.263630][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.263856][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.272897][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.278597][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.286427][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.300168][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.301502][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.323044][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.324479][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.338578][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.339772][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.347677][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.360981][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.368451][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.369106][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.385512][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.386100][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.404897][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.884939][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   85.930817][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   85.959654][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   86.014852][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   86.132778][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.140585][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.148080][ T5833] bridge_slave_0: entered allmulticast mode
[   86.155323][ T5833] bridge_slave_0: entered promiscuous mode
[   86.179413][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.186613][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.193719][ T5833] bridge_slave_1: entered allmulticast mode
[   86.201514][ T5833] bridge_slave_1: entered promiscuous mode
[   86.288516][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.295805][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.302931][ T5835] bridge_slave_0: entered allmulticast mode
[   86.310218][ T5835] bridge_slave_0: entered promiscuous mode
[   86.329745][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.339049][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.346809][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.353916][ T5837] bridge_slave_0: entered allmulticast mode
[   86.360980][ T5837] bridge_slave_0: entered promiscuous mode
[   86.368244][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.375488][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.382602][ T5835] bridge_slave_1: entered allmulticast mode
[   86.389776][ T5835] bridge_slave_1: entered promiscuous mode
[   86.396506][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.403617][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.411152][ T5834] bridge_slave_0: entered allmulticast mode
[   86.418975][ T5834] bridge_slave_0: entered promiscuous mode
[   86.428612][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.448523][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.455702][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.462928][ T5837] bridge_slave_1: entered allmulticast mode
[   86.470052][ T5837] bridge_slave_1: entered promiscuous mode
[   86.486248][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.493367][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.500920][ T5834] bridge_slave_1: entered allmulticast mode
[   86.507981][ T5834] bridge_slave_1: entered promiscuous mode
[   86.550991][ T5833] team0: Port device team_slave_0 added
[   86.569052][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.590803][ T5833] team0: Port device team_slave_1 added
[   86.598832][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.610306][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.621571][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.641957][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.660797][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.708314][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.715543][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.741802][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.769700][ T5835] team0: Port device team_slave_0 added
[   86.799938][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.807090][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.864162][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.886774][ T5837] team0: Port device team_slave_0 added
[   86.894092][ T5835] team0: Port device team_slave_1 added
[   86.906805][ T5834] team0: Port device team_slave_0 added
[   86.941296][ T5837] team0: Port device team_slave_1 added
[   86.963792][ T5834] team0: Port device team_slave_1 added
[   87.028313][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.036503][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.063756][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.100392][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.107412][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.133417][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.146060][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.153014][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.178941][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.190442][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.197591][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.223632][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.249686][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.256703][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.282681][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.310232][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.317328][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.343398][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.361475][ T5833] hsr_slave_0: entered promiscuous mode
[   87.367960][ T5833] hsr_slave_1: entered promiscuous mode
[   87.395276][ T5845] Bluetooth: hci1: command tx timeout
[   87.474293][ T5845] Bluetooth: hci2: command tx timeout
[   87.474677][ T5839] Bluetooth: hci3: command tx timeout
[   87.482225][ T5835] hsr_slave_0: entered promiscuous mode
[   87.486067][ T5842] Bluetooth: hci0: command tx timeout
[   87.492924][ T5835] hsr_slave_1: entered promiscuous mode
[   87.503127][ T5835] debugfs: 'hsr0' already exists in 'hsr'
[   87.509219][ T5835] Cannot create hsr debugfs directory
[   87.530477][ T5834] hsr_slave_0: entered promiscuous mode
[   87.536706][ T5834] hsr_slave_1: entered promiscuous mode
[   87.542798][ T5834] debugfs: 'hsr0' already exists in 'hsr'
[   87.548726][ T5834] Cannot create hsr debugfs directory
[   87.559811][ T5837] hsr_slave_0: entered promiscuous mode
[   87.566177][ T5837] hsr_slave_1: entered promiscuous mode
[   87.572179][ T5837] debugfs: 'hsr0' already exists in 'hsr'
[   87.578067][ T5837] Cannot create hsr debugfs directory
[   87.999948][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.013539][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.026555][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.038614][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.112809][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.130735][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.155218][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.169203][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.233526][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.258649][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.271280][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.286111][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.358114][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.370596][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.395612][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.410897][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.436443][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.488895][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   88.514480][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.521757][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.538317][ T3843] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.545469][ T3843] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.612147][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.666815][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.676873][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   88.714464][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.721572][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.753403][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   88.779684][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.790088][ T3843] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.797240][ T3843] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.819797][ T3843] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.826973][ T3843] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.856368][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.863522][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.904789][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   88.941437][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.948659][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.994026][ T3843] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.001259][ T3843] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.117621][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.321247][ T5833] veth0_vlan: entered promiscuous mode
[   89.371050][ T5833] veth1_vlan: entered promiscuous mode
[   89.460048][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.475227][ T5842] Bluetooth: hci1: command tx timeout
[   89.496460][ T5833] veth0_macvtap: entered promiscuous mode
[   89.511798][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.526077][ T5833] veth1_macvtap: entered promiscuous mode
[   89.555286][ T5839] Bluetooth: hci0: command tx timeout
[   89.555323][ T5845] Bluetooth: hci3: command tx timeout
[   89.560751][ T5842] Bluetooth: hci2: command tx timeout
[   89.598894][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.609887][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.649526][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.682038][ T3446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.692447][ T3446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.709950][ T3446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.718944][ T3446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.730140][ T5835] veth0_vlan: entered promiscuous mode
[   89.736610][ T5834] veth0_vlan: entered promiscuous mode
[   89.784599][ T5835] veth1_vlan: entered promiscuous mode
[   89.826169][ T5834] veth1_vlan: entered promiscuous mode
[   89.872413][ T3843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.888224][ T3843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.921055][ T5837] veth0_vlan: entered promiscuous mode
[   89.942925][ T5837] veth1_vlan: entered promiscuous mode
[   89.950964][ T5835] veth0_macvtap: entered promiscuous mode
[   89.958827][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.967647][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.991549][ T5835] veth1_macvtap: entered promiscuous mode
[   90.003658][ T5834] veth0_macvtap: entered promiscuous mode
[   90.021582][ T5834] veth1_macvtap: entered promiscuous mode
[   90.045480][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   90.061973][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.083680][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.109956][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.132590][ T3446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.147855][ T3446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.167372][ T5837] veth0_macvtap: entered promiscuous mode
[   90.204059][ T3446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.215845][ T3446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.228601][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.243764][ T5837] veth1_macvtap: entered promiscuous mode
[   90.280839][ T3843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.301549][ T3843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.322987][ T3843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.344103][ T3843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.364003][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.410609][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.456484][ T3537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.496582][ T3537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.528151][ T3537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.538722][ T3537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.538855][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.567511][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.568679][ T5927] process 'syz.0.1' launched './file0' with NULL argv: empty string added
[   90.648873][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.683552][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.712146][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.749921][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.769034][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   90.778237][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[   90.816259][ T3901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.824091][ T3901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.976653][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.987186][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.143611][ T3843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.200170][ T3843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.424579][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.433244][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.567648][ T5842] Bluetooth: hci1: command tx timeout
[   91.634486][ T5842] Bluetooth: hci3: command tx timeout
[   91.642515][ T5932] netlink: 'syz.1.2': attribute type 5 has an invalid length.
[   91.650860][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.660843][ T5842] Bluetooth: hci2: command tx timeout
[   91.660854][ T5845] Bluetooth: hci0: command tx timeout
[   91.674618][ T5932] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   91.682175][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   91.894281][  T793] cfg80211: failed to load regulatory.db
[   93.643853][ T5842] Bluetooth: hci1: command tx timeout
[   93.718647][ T5842] Bluetooth: hci0: command tx timeout
[   93.724076][ T5842] Bluetooth: hci2: command tx timeout
[   93.729605][ T5842] Bluetooth: hci3: command tx timeout
[   93.738931][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   93.748791][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   94.148558][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   94.157721][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   94.252001][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   98.224888][ T6000] zswap: compressor  not available
[   98.296147][ T6011] Zero length message leads to an empty skb
[   99.153363][ T6021] FAULT_INJECTION: forcing a failure.
[   99.153363][ T6021] name failslab, interval 1, probability 0, space 0, times 1
[   99.174306][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) 
[   99.174344][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   99.174364][ T6021] Call Trace:
[   99.174372][ T6021]  <TASK>
[   99.174382][ T6021]  dump_stack_lvl+0x16c/0x1f0
[   99.174429][ T6021]  should_fail_ex+0x512/0x640
[   99.174456][ T6021]  ? __kmalloc_cache_noprof+0x5f/0x800
[   99.174487][ T6021]  should_failslab+0xc2/0x120
[   99.174527][ T6021]  __kmalloc_cache_noprof+0x80/0x800
[   99.174555][ T6021]  ? __mutex_unlock_slowpath+0x161/0x790
[   99.174592][ T6021]  ? shrinker_alloc+0xf5/0xbf0
[   99.174628][ T6021]  ? shrinker_alloc+0xf5/0xbf0
[   99.174656][ T6021]  shrinker_alloc+0xf5/0xbf0
[   99.174688][ T6021]  ? mark_held_locks+0x49/0x80
[   99.174712][ T6021]  ? pcpu_memcg_post_alloc_hook+0x1e/0x690
[   99.174748][ T6021]  ? __percpu_init_rwsem+0x2d/0x160
[   99.174782][ T6021]  ? __pfx_shrinker_alloc+0x10/0x10
[   99.174818][ T6021]  ? lockdep_init_map_type+0x5c/0x270
[   99.174846][ T6021]  ? __raw_spin_lock_init+0x3a/0x110
[   99.174874][ T6021]  ? __init_rwsem+0x12d/0x1b0
[   99.174905][ T6021]  alloc_super+0x7d7/0xd00
[   99.174959][ T6021]  sget_fc+0x116/0xc20
[   99.174997][ T6021]  ? __pfx_set_anon_super_fc+0x10/0x10
[   99.175035][ T6021]  ? __pfx_mqueue_fill_super+0x10/0x10
[   99.175077][ T6021]  get_tree_nodev+0x28/0x190
[   99.175117][ T6021]  mqueue_get_tree+0xf1/0x130
[   99.175158][ T6021]  vfs_get_tree+0x8e/0x330
[   99.175189][ T6021]  fc_mount_longterm+0x1a/0x270
[   99.175226][ T6021]  mq_init_ns+0x482/0x810
[   99.175258][ T6021]  copy_ipcs+0x3db/0x7d0
[   99.175289][ T6021]  create_new_namespaces+0x20a/0xab0
[   99.175326][ T6021]  ? security_capable+0x7e/0x260
[   99.175373][ T6021]  copy_namespaces+0x468/0x570
[   99.175413][ T6021]  copy_process+0x2a70/0x7430
[   99.175470][ T6021]  ? __pfx_copy_process+0x10/0x10
[   99.175523][ T6021]  ? _copy_from_user+0x59/0xd0
[   99.175558][ T6021]  kernel_clone+0xfc/0x910
[   99.175600][ T6021]  ? __pfx_kernel_clone+0x10/0x10
[   99.175639][ T6021]  ? futex_private_hash_put+0x160/0x1b0
[   99.175676][ T6021]  ? __pfx_futex_wait+0x10/0x10
[   99.175721][ T6021]  __do_sys_clone3+0x212/0x290
[   99.175761][ T6021]  ? __pfx___do_sys_clone3+0x10/0x10
[   99.175813][ T6021]  ? find_held_lock+0x2b/0x80
[   99.175876][ T6021]  do_syscall_64+0xcd/0xf80
[   99.175919][ T6021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.175952][ T6021] RIP: 0033:0x7f1c2158f7c9
[   99.175985][ T6021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.176012][ T6021] RSP: 002b:00007f1c2245ff08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[   99.176040][ T6021] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1c2158f7c9
[   99.176058][ T6021] RDX: 00007f1c2245ff20 RSI: 0000000000000058 RDI: 00007f1c2245ff20
[   99.176076][ T6021] RBP: 00007f1c21613f91 R08: 0000000000000000 R09: 0000000000000058
[   99.176093][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.176109][ T6021] R13: 00007f1c217e6038 R14: 00007f1c217e5fa0 R15: 00007ffc46e6f8e8
[   99.176147][ T6021]  </TASK>
QBer���f���2h����]�
�r��P�t5i��}H�����mԺ��9(e�\���O7������M�V��*n�� b�<X�`c�G ������ruq�씿��ߐ̲e��7L����"��? 2۾^��EQp�7Q{�{�@5�@��q%¾��6`kli��Yg�#���_���(�����M��j]S��w�|NBWa�	�D����,���t�7Y{�g͡�,�iby�^���,p�P/3�;�]�M�C��L�L"�i�4��|���w�$%��2���8��"W���N�9����W�����4�K��
�ƒ�皲4��np8db�ɦ3ܕop_����}1	�hY������߆�;�
蹬�^9�zT����1��?�*�"딌�����o��[��P�
���0�O{�pi�)<L�1�}k8�o�4)�S�����3
�^s+�Q
i��>B�+�w

���7���ϋ	B��j�$�U-�X���&�/?�2�`�%����w?�Ϻ�Űh��\�w���b�bSG5��0���&��Q�	6�}������>7k��i��O���DٞYy͠���!ط�}w#����<7-��/J�Xrr9�g�s�C���|CH��^I�����Sw5m�S8��N=�*^�aYȁ�9Z=�2��S
R!Cu+���򳃇�.�S96b>Ö�����{�
o�P�=��jW5^%�W�\c	_H@~Ί|lO[%�ao
k�����U�����dR�_��?��.Y
"�?o�����Q�qD;�����`N���0QB��۲�*	`�@�;^��'��g��}�5�r���>L���J�+@<��ÿcAU`A}}H��i�%�?�`�z�g��a��/:�}�?��4�>A�.�U>ʭX�	q��n��\��2q��2�}�ƼcJF<op��c��B��L~{
�{j?7W��tc'|C�M�ğEX��������P�_�8<��(�"-��ʌ�G1v2l�I�+_<s�he�*���v���hH��@���������l�S�<G�JS�#�k=���A'̜��!]�?{H�m��-l�S/���7��ݶ[�$I�J�~@�D���@��>Q9mFd��ÕŲG��8�y̵e�Ff�q4\�Z��5���<��.�+7�&W^<�R��^ݟ��awg��W(

(�R�D�`{`c�~\��V�Ih�P�Y�����/�����V��;w��"Η,�z�q�A�F�91�I�clr���n�Aq��`���p�hu���3�ds������	>axԅRm�w\�2Lv�J�e.�6��=�\�2�n�|OF�ϊ�`�z�i(�k���5�eĢ��HW7�g��"/����Mu�)*��/˓%��jRU�T�mIJ7M�5���J�H�����Q�U~A���%�z��o�{�\Uc�K!�>�o{��n8x/O''8�zd�i_kj��ё{�*�Q�+�WЋ�f/�#y*A�.�n;
�PDٛ�9����&�����a4�
ầ�*0�.`R�~�m~(�C�+��y7�&���O�/-R�R2��y��
�;F 4w�XS���K+��BPK�n�[�g����*:&B�������a	�7���\b���L�O?J"�H@>������5r��Al�sӪ�ҁ�'X��8X�����X�W�Z��s���R6K�H�:۱�oj3KQ�u)�n�·Eb��=�]$B$�6��;e���P/�΂?R��~�T"�Ds6f"����~a$wB�N<	8�|{���\�yg.L�Ę�«s��X
�v�V�t��۳z?�������|M�2�Z��{:n��������#c�98J�k}G��=��\�f����d������]*�Iїj0���[?�b2B����i�E����T=�����6`	��BJcF��0���#�6�r��W���E���(�[��L�F��ᦺq�d��I{�	��qb��M{d���x*��3:Л�����U4���=�`K0��I��
���F�����`��
8��ӗNh+�UZ��%�n؀3��-������5s$��J}R�w�ݬJ4v\&��9���)
���Y�����u@�%���S��L��<��i�֦��W���E�q*����I��H��mV�.άnZ�tU��N=E�F<BѼ��W݈��4F�����L$	6�s����1�@���]~80{���A�Ϭ�4�
��6@	���(x�ك�U��p6k��g���<�S����
g�M���<r<  
��l���I��(ײE�5>˙��2~30<�G�hѾ���R}U���Po��3�t5y�e������?�W�l�����ڬ�9F�؀��s���b�;kH�nUD��!���Z�K�5�)
g�-�KJ1{��} :l�q��z���z��

*����r2Pu�<.φj�T��^�NH�r.j0��4�2pN�)���:c�����Yi����������bҧ�Y�A;3Ѐ�>=��d��+Y�D�j-���6��{�q�j�ǩ`G�_ 6&�G�!�Y@fn1��_c{!�8O��-Hd�p�኏I ��h`� ��TA�,�'�_R}�_A��\��+�4���k�e�ZS�t�/���pڰ@���'���O�tr'��NJy�9�>�m#[  100.117588][ T6030] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  100.239461][ T6032] FAULT_INJECTION: forcing a failure.
[  100.239461][ T6032] name failslab, interval 1, probability 0, space 0, times 0
[  100.264318][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: syz.3.23 Not tainted syzkaller #0 PREEMPT(full) 
[  100.264354][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  100.264369][ T6032] Call Trace:
[  100.264378][ T6032]  <TASK>
[  100.264388][ T6032]  dump_stack_lvl+0x16c/0x1f0
[  100.264434][ T6032]  should_fail_ex+0x512/0x640
[  100.264467][ T6032]  ? fs_reclaim_acquire+0xae/0x150
[  100.264517][ T6032]  should_failslab+0xc2/0x120
[  100.264557][ T6032]  kmem_cache_alloc_noprof+0x83/0x770
[  100.264586][ T6032]  ? __pfx_map_id_range_down+0x10/0x10
[  100.264621][ T6032]  ? security_inode_alloc+0x3b/0x2b0
[  100.264653][ T6032]  ? security_inode_alloc+0x3b/0x2b0
[  100.264679][ T6032]  security_inode_alloc+0x3b/0x2b0
[  100.264707][ T6032]  inode_init_always_gfp+0xced/0x1040
[  100.264750][ T6032]  ? __pfx_mqueue_fill_super+0x10/0x10
[  100.264787][ T6032]  alloc_inode+0x86/0x240
[  100.264819][ T6032]  new_inode+0x22/0x1c0
[  100.264849][ T6032]  ? __pfx_mqueue_fill_super+0x10/0x10
[  100.264888][ T6032]  mqueue_get_inode+0x2e/0xdd0
[  100.264929][ T6032]  ? sget_fc+0x808/0xc20
[  100.264967][ T6032]  ? __pfx_mqueue_fill_super+0x10/0x10
[  100.265017][ T6032]  mqueue_fill_super+0x14d/0x260
[  100.265061][ T6032]  get_tree_nodev+0xdd/0x190
[  100.265102][ T6032]  mqueue_get_tree+0xf1/0x130
[  100.265143][ T6032]  vfs_get_tree+0x8e/0x330
[  100.265177][ T6032]  fc_mount_longterm+0x1a/0x270
[  100.265213][ T6032]  mq_init_ns+0x482/0x810
[  100.265245][ T6032]  copy_ipcs+0x3db/0x7d0
[  100.265276][ T6032]  create_new_namespaces+0x20a/0xab0
[  100.265314][ T6032]  ? security_capable+0x7e/0x260
[  100.265360][ T6032]  copy_namespaces+0x468/0x570
[  100.265400][ T6032]  copy_process+0x2a70/0x7430
[  100.265458][ T6032]  ? __pfx_copy_process+0x10/0x10
[  100.265504][ T6032]  ? _copy_from_user+0x59/0xd0
[  100.265538][ T6032]  kernel_clone+0xfc/0x910
[  100.265582][ T6032]  ? __pfx_kernel_clone+0x10/0x10
[  100.265619][ T6032]  ? futex_private_hash_put+0x160/0x1b0
[  100.265656][ T6032]  ? __pfx_futex_wait+0x10/0x10
[  100.265703][ T6032]  __do_sys_clone3+0x212/0x290
[  100.265760][ T6032]  ? __pfx___do_sys_clone3+0x10/0x10
[  100.265813][ T6032]  ? find_held_lock+0x2b/0x80
[  100.265878][ T6032]  do_syscall_64+0xcd/0xf80
[  100.265921][ T6032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.265949][ T6032] RIP: 0033:0x7f1c2158f7c9
[  100.265980][ T6032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.266008][ T6032] RSP: 002b:00007f1c2245ff08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  100.266035][ T6032] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1c2158f7c9
[  100.266053][ T6032] RDX: 00007f1c2245ff20 RSI: 0000000000000058 RDI: 00007f1c2245ff20
[  100.266070][ T6032] RBP: 00007f1c21613f91 R08: 0000000000000000 R09: 0000000000000058
[  100.266087][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.266103][ T6032] R13: 00007f1c217e6038 R14: 00007f1c217e5fa0 R15: 00007ffc46e6f8e8
[  100.266142][ T6032]  </TASK>
QBer���f���2h����]�
�r��P�t5i��}H�����mԺ��9(e�\���O7������M�V��*n�� b�<X�`c�G ������ruq�씿��ߐ̲e��7L����"��? 2۾^��EQp�7Q{�{�@5�@��q%¾��6`kli��Yg�#���_���(�����M��j]S��w�|NBWa�	�D����,���t�7Y{�g͡�,�iby�^���,p�P/3�;�]�M�C��L�L"�i�4��|���w�$%��2���8��"W���N�9����W�����4�K��
�ƒ�皲4��np8db�ɦ3ܕop_����}1	�hY������߆�;�
蹬�^9�zT����1��?�*�"딌�����o��[��P�
���0�O{�pi�)<L�1�}k8�o�4)�S�����3
�^s+�Q
i��>B�+�w

���7���ϋ	B��j�$�U-�X���&�/?�2�`�%����w?�Ϻ�Űh��\�w���b�bSG5��0���&��Q�	6�}������>7k��i��O���DٞYy͠���!ط�}w#����<7-��/J�Xrr9�g�s�C���|CH��^I�����Sw5m�S8��N=�*^�aYȁ�9Z=�2��S
R!Cu+���򳃇�.�S96b>Ö�����{�
o�P�=��jW5^%�W�\c	_H@~Ί|lO[%�ao
k�����U�����dR�_��?��.Y
"�?o�����Q�qD;�����`N���0QB��۲�*	`�@�;^��'��g��}�5�r���>L���J�+@<��ÿcAU`A}}H��i�%�?�`�z�g��a��/:�}�?��4�>A�.�U>ʭX�	q��n��\��2q��2�}�ƼcJF<op��c��B��L~{
�{j?7W��tc'|C�M�ğEX��������P�_�8<��(�"-��ʌ�G1v2l�I�+_<s�he�*���v���hH��@���������l�S�<G�JS�#�k=���A'̜��!]�?{H�m��-l�S/���7��ݶ[�$I�J�~@�D���@��>Q9mFd��ÕŲG��8�y̵e�Ff�q4\�Z��5���<��.�+7�&W^<�R��^ݟ��awg��W(

(�R�D�`{`c�~\��V�Ih�P�Y�����/�����V��;w��"Η,�z�q�A�F�91�I�clr���n�Aq��`���p�hu���3�ds������	>axԅRm�w\�2Lv�J�e.�6��=�\�2�n�|OF�ϊ�`�z�i(�k���5�eĢ��HW7�g��"/����Mu�)*��/˓%��jRU�T�mIJ7M�5���J�H�����Q�U~A���%�z��o�{�\Uc�K!�>�o{��n8x/O''8�zd�i_kj��ё{�*�Q�+�WЋ�f/�#y*A�.�n;
�PDٛ�9����&�����a4�
ầ�*0�.`R�~�m~(�C�+��y7�&���O�/-R�R2��y��
�;F 4w�XS���K+��BPK�n�[�g����*:&B�������a	�7���\b���L�O?J"�H@>������5r��Al�sӪ�ҁ�'X��8X�����X�W�Z��s���R6K�H�:۱�oj3KQ�u)�n�·Eb��=�]$B$�6��;e���P/�΂?R��~�T"�Ds6f"����~a$wB�N<	8�|{���\�yg.L�Ę�«s��X
�v�V�t��۳z?�������|M�2�Z��{:n��������#c�98J�k}G��=��\�f����d������]*�Iїj0���[?�b2B����i�E����T=�����6`	��BJcF��0���#�6�r��W���E���(�[��L�F��ᦺq�d��I{�	��qb��M{d���x*��3:Л�����U4���=�`K0��I��
���F�����`��
8��ӗNh+�UZ��%�n؀3��-������5s$��J}R�w�ݬJ4v\&��9���)
���Y�����u@�%���S��L��<��i�֦��W���E�q*����I��H��mV�.άnZ�tU��N=E�F<BѼ��W݈��4F�����L$	6�s����1�@���]~80{���A�Ϭ�4�
��6@	���(x�ك�U��p6k��g���<�S����
g�M���<r<  
��l���I��(ײE�5>˙��2~30<�G�hѾ���R}U���Po��3�t5y�e������?�W�l�����ڬ�9F�؀��s���b�;kH�nUD��!���Z�K�5�)
g�-�KJ1{��} :l�q��z���z��

*����r2Pu�<.φj�T��^�NH�r.j0��4�2pN�)���:c�����Yi����������bҧ�Y�A;3Ѐ�>=��d��+Y�D�j-���6��{�q�j�ǩ`G�_ 6&�G�!�Y@fn1��_c{!�8O��-Hd�p�኏I ��h`� ��TA�,�'�_R}�_A��\��+�4���k�e�ZS�t�/���pڰ@���'���O�tr'��NJy�9�>�m#[  100.920190][ T6038] FAULT_INJECTION: forcing a failure.
[  100.920190][ T6038] name failslab, interval 1, probability 0, space 0, times 0
[  100.975009][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT(full) 
[  100.975048][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  100.975063][ T6038] Call Trace:
[  100.975072][ T6038]  <TASK>
[  100.975083][ T6038]  dump_stack_lvl+0x16c/0x1f0
[  100.975129][ T6038]  should_fail_ex+0x512/0x640
[  100.975159][ T6038]  ? __kmalloc_noprof+0xca/0x910
[  100.975193][ T6038]  should_failslab+0xc2/0x120
[  100.975234][ T6038]  __kmalloc_noprof+0xeb/0x910
[  100.975263][ T6038]  ? __register_sysctl_table+0xe8e/0x1900
[  100.975299][ T6038]  ? __register_sysctl_table+0xea2/0x1900
[  100.975342][ T6038]  ? __register_sysctl_table+0xea2/0x1900
[  100.975378][ T6038]  __register_sysctl_table+0xea2/0x1900
[  100.975424][ T6038]  ? __pfx___register_sysctl_table+0x10/0x10
[  100.975459][ T6038]  ? kfree+0x261/0x6e0
[  100.975491][ T6038]  ? __asan_memcpy+0x3c/0x60
[  100.975533][ T6038]  setup_mq_sysctls+0x13d/0x230
[  100.975573][ T6038]  copy_ipcs+0x51a/0x7d0
[  100.975605][ T6038]  create_new_namespaces+0x20a/0xab0
[  100.975644][ T6038]  ? security_capable+0x7e/0x260
[  100.975692][ T6038]  copy_namespaces+0x468/0x570
[  100.975731][ T6038]  copy_process+0x2a70/0x7430
[  100.975788][ T6038]  ? __pfx_copy_process+0x10/0x10
[  100.975839][ T6038]  ? _copy_from_user+0x59/0xd0
[  100.975873][ T6038]  kernel_clone+0xfc/0x910
[  100.975917][ T6038]  ? __pfx_kernel_clone+0x10/0x10
[  100.975961][ T6038]  ? futex_private_hash_put+0x160/0x1b0
[  100.975999][ T6038]  ? __pfx_futex_wait+0x10/0x10
[  100.976047][ T6038]  __do_sys_clone3+0x212/0x290
[  100.976089][ T6038]  ? __pfx___do_sys_clone3+0x10/0x10
[  100.976147][ T6038]  ? find_held_lock+0x2b/0x80
[  100.976210][ T6038]  do_syscall_64+0xcd/0xf80
[  100.976253][ T6038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.976281][ T6038] RIP: 0033:0x7f1c2158f7c9
[  100.976304][ T6038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.976330][ T6038] RSP: 002b:00007f1c2245ff08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  100.976361][ T6038] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1c2158f7c9
[  100.976379][ T6038] RDX: 00007f1c2245ff20 RSI: 0000000000000058 RDI: 00007f1c2245ff20
[  100.976398][ T6038] RBP: 00007f1c21613f91 R08: 0000000000000000 R09: 0000000000000058
[  100.976415][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.976432][ T6038] R13: 00007f1c217e6038 R14: 00007f1c217e5fa0 R15: 00007ffc46e6f8e8
[  100.976470][ T6038]  </TASK>
QBer���f���2h����]�
�r��P�t5i��}H�����mԺ��9(e�\���O7[  101.346483][ T6038] sysctl could not get directory: /fs -12
������M�V��*n�� b�<X�`c�G ������ruq�씿��ߐ̲e��7L����"��? 2۾^��EQp�7Q{�{�@5�@��q%¾��6`kli��Yg�#���_���(�����M��j]S��w�|NBWa�	�D����,���t�7Y{�g͡�,�iby�^���,p�P/3�;�]�M�C��L�L"�i�4��|���w�$%��2���8��"W���N�9����W�����4�K��
�ƒ�皲4��np8db�ɦ3ܕop_����}1	�hY������߆�;�
蹬�^9�zT����1��?�*�"딌�����o��[��P�
���0�O{�pi�)<L�1�}k8�o�4)�S�����3
�^s+�Q
i��>B�+�w

���7���ϋ	B��j�$�U-�X���&�/?�2�`�%����w?�Ϻ�Űh��\�w���b�bSG5��0���&��Q�	6�}������>7k��i��O���DٞYy͠���!ط�}w#����<7-��/J�Xrr9�g�s�C���|CH��^I�����Sw5m�S8��N=�*^�aYȁ�9Z=�2��S
R!Cu+���򳃇�.�S96b>Ö�����{�
o�P�=��jW5^%�W�\c	_H@~Ί|lO[%�ao
k�����U�����dR�_��?��.Y
"�?o�����Q�qD;�����`N���0QB��۲�*	`�@�;^��'��g��}�5�r���>L���J�+@<��ÿcAU`A}}H��i�%�?�`�z�g��a��/:�}�?��4�>A�.�U>ʭX�	q��n��\��2q��2�}�ƼcJF<op��c��B��L~{
�{j?7W��tc'|C�M�ğEX��������P�_�8<��(�"-��ʌ�G1v2l�I�+_<s�he�*���v���hH��@���������l�S�<G�JS�#�k=���A'̜��!]�?{H�m��-l�S/���7��ݶ[�$I�J�~@�D���@��>Q9mFd��ÕŲG��8�y̵e�Ff�q4\�Z��5���<��.�+7�&W^<�R��^ݟ��awg��W(

(�R�D�`{`c�~\��V�Ih�P�Y�����/�����V��;w��"Η,�z�q�A�F�91�I�clr���n�Aq��`���p�hu���3�ds������	>axԅRm�w\�2Lv�J�e.�6��=�\�2�n�|OF�ϊ�`�z�i(�k���5�eĢ��HW7�g��"/����Mu�)*��/˓%��jRU�T�mIJ7M�5���J�H�����Q�U~A���%�z��o�{�\Uc�K!�>�o{��n8x/O''8�zd�i_kj��ё{�*�Q�+�WЋ�f/�#y*A�.�n;
�PDٛ�9����&�����a4�
ầ�*0�.`R�~�m~(�C�+��y7�&���O�/-R�R2��y��
�;F 4w�XS���K+��BPK�n�[�g����*:&B�������a	�7���\b���L�O?J"�H@>������5r��Al�sӪ�ҁ�'X��8X�����X�W�Z��s���R6K�H�:۱�oj3KQ�u)�n�·Eb��=�]$B$�6��;e���P/�΂?R��~�T"�Ds6f"����~a$wB�N<	8�|{���\�yg.L�Ę�«s��X
�v�V�t��۳z?�������|M�2�Z��{:n��������#c�98J�k}G��=��\�f����d������]*�Iїj0���[?�b2B����i�E����T=�����6`	��BJcF��0���#�6�r��W���E���(�[��L�F��ᦺq�d��I{�	��qb��M{d���x*��3:Л�����U4���=�`K0��I��
���F�����`��
8��ӗNh+�UZ��%�n؀3��-������5s$��J}R�w�ݬJ4v\&��9���)
���Y�����u@�%���S��L��<��i�֦��W���E�q*����I��H��mV�.άnZ�tU��N=E�F<BѼ��W݈��4F�����L$	6�s����1�@���]~80{���A�Ϭ�4�
��6@	���(x�ك�U��p6k��g���<�S����
g�M���<r<  
��l���I��(ײE�5>˙��2~30<�G�hѾ���R}U���Po��3�t5y�e������?�W�l�����ڬ�9F�؀��s���b�;kH�nUD��!���Z�K�5�)
g�-�KJ1{��} :l�q��z���z��

*����r2Pu�<.φj�T��^�NH�r.j0��4�2pN�)���:c�����Yi����������bҧ�Y�A;3Ѐ�>=��d��+Y�D�j-���6��{�q�j�ǩ`G�_ 6&�G�!�Y@fn1��_c{!�8O��-Hd�p�኏I ��h`� ��TA�,�'�_R}�_A��\��+�4���k�e�ZS�t�/���pڰ@���'���O�tr'��NJy�9�>�m#[  102.385029][ T6057] netlink: 52 bytes leftover after parsing attributes in process `syz.2.29'.
[  102.776839][ T6051] blktrace: Concurrent blktraces are not allowed on loop2
[  103.770699][ T6075] netlink: 52 bytes leftover after parsing attributes in process `syz.3.32'.
[  105.522728][ T6096] netlink: 52 bytes leftover after parsing attributes in process `syz.3.36'.
[  106.896214][ T6121] futex_wake_op: syz.2.40 tries to shift op by -2048; fix this program
[  106.943352][ T6121] futex_wake_op: syz.2.40 tries to shift op by -2048; fix this program
[  107.110153][ T6115] 0x000000000001-0x000000020000 : ""
[  107.184930][ T6115] ftl_cs: FTL header corrupt!
[  107.557311][ T6126] random: crng reseeded on system resumption
[  107.686466][ T5845] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5
[  108.561039][ T6134] FAULT_INJECTION: forcing a failure.
[  108.561039][ T6134] name failslab, interval 1, probability 0, space 0, times 0
[  108.691797][ T6134] CPU: 1 UID: 0 PID: 6134 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT(full) 
[  108.691842][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  108.691858][ T6134] Call Trace:
[  108.691867][ T6134]  <TASK>
[  108.691879][ T6134]  dump_stack_lvl+0x16c/0x1f0
[  108.691923][ T6134]  should_fail_ex+0x512/0x640
[  108.691952][ T6134]  ? __kmalloc_noprof+0xca/0x910
[  108.691986][ T6134]  should_failslab+0xc2/0x120
[  108.692019][ T6134]  __kmalloc_noprof+0xeb/0x910
[  108.692034][ T6134]  ? splice_from_pipe_next+0x1f7/0x5d0
[  108.692057][ T6134]  ? copy_splice_read+0x1a8/0xc20
[  108.692082][ T6134]  ? copy_splice_read+0x1a8/0xc20
[  108.692102][ T6134]  copy_splice_read+0x1a8/0xc20
[  108.692123][ T6134]  ? __pfx_pipe_to_null+0x10/0x10
[  108.692147][ T6134]  ? __pfx_copy_splice_read+0x10/0x10
[  108.692167][ T6134]  ? pipe_unlock+0x4a/0x70
[  108.692189][ T6134]  ? __pfx_splice_from_pipe+0x10/0x10
[  108.692214][ T6134]  ? find_held_lock+0x2b/0x80
[  108.692236][ T6134]  ? __pfx_copy_splice_read+0x10/0x10
[  108.692256][ T6134]  do_splice_read+0x285/0x370
[  108.692279][ T6134]  splice_direct_to_actor+0x2a1/0xa30
[  108.692302][ T6134]  ? __pfx_direct_splice_actor+0x10/0x10
[  108.692327][ T6134]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  108.692353][ T6134]  do_splice_direct+0x174/0x240
[  108.692375][ T6134]  ? __pfx_do_splice_direct+0x10/0x10
[  108.692396][ T6134]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  108.692419][ T6134]  ? bpf_lsm_file_permission+0x9/0x10
[  108.692436][ T6134]  ? security_file_permission+0x71/0x210
[  108.692456][ T6134]  ? rw_verify_area+0xcf/0x6c0
[  108.692476][ T6134]  do_sendfile+0xb06/0xe50
[  108.692499][ T6134]  ? __pfx_do_sendfile+0x10/0x10
[  108.692518][ T6134]  ? __fget_files+0x204/0x3c0
[  108.692541][ T6134]  ? __x64_sys_futex+0x1e0/0x4c0
[  108.692557][ T6134]  ? __x64_sys_futex+0x1e9/0x4c0
[  108.692576][ T6134]  __x64_sys_sendfile64+0x1d8/0x220
[  108.692591][ T6134]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  108.692604][ T6134]  ? syscall_user_dispatch+0x78/0x140
[  108.692628][ T6134]  do_syscall_64+0xcd/0xf80
[  108.692652][ T6134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.692667][ T6134] RIP: 0033:0x7f1c2158f7c9
[  108.692680][ T6134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.692694][ T6134] RSP: 002b:00007f1c2241e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  108.692708][ T6134] RAX: ffffffffffffffda RBX: 00007f1c217e6180 RCX: 00007f1c2158f7c9
[  108.692718][ T6134] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b
[  108.692726][ T6134] RBP: 00007f1c21613f91 R08: 0000000000000000 R09: 0000000000000000
[  108.692735][ T6134] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000
[  108.692743][ T6134] R13: 00007f1c217e6218 R14: 00007f1c217e6180 R15: 00007ffc46e6f8e8
[  108.692763][ T6134]  </TASK>
[  111.328409][ T6174] FAULT_INJECTION: forcing a failure.
[  111.328409][ T6174] name failslab, interval 1, probability 0, space 0, times 0
[  111.355013][ T6174] CPU: 1 UID: 0 PID: 6174 Comm: syz.2.51 Not tainted syzkaller #0 PREEMPT(full) 
[  111.355049][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  111.355063][ T6174] Call Trace:
[  111.355068][ T6174]  <TASK>
[  111.355075][ T6174]  dump_stack_lvl+0x16c/0x1f0
[  111.355102][ T6174]  should_fail_ex+0x512/0x640
[  111.355118][ T6174]  ? __kvmalloc_node_noprof+0x129/0xa40
[  111.355140][ T6174]  should_failslab+0xc2/0x120
[  111.355162][ T6174]  __kvmalloc_node_noprof+0x14a/0xa40
[  111.355183][ T6174]  ? newary+0x185/0xc50
[  111.355201][ T6174]  ? newary+0x185/0xc50
[  111.355214][ T6174]  newary+0x185/0xc50
[  111.355228][ T6174]  ? ipcget+0xa98/0xfa0
[  111.355248][ T6174]  ipcget+0xaf3/0xfa0
[  111.355267][ T6174]  ? do_futex+0x122/0x350
[  111.355287][ T6174]  ? __pfx_ipcget+0x10/0x10
[  111.355308][ T6174]  ? __x64_sys_futex+0x1e0/0x4c0
[  111.355325][ T6174]  __x64_sys_semget+0x1cb/0x260
[  111.355341][ T6174]  ? __pfx___x64_sys_semget+0x10/0x10
[  111.355362][ T6174]  do_syscall_64+0xcd/0xf80
[  111.355385][ T6174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.355399][ T6174] RIP: 0033:0x7ffbe3f8f7c9
[  111.355412][ T6174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.355426][ T6174] RSP: 002b:00007ffbe4e38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040
[  111.355441][ T6174] RAX: ffffffffffffffda RBX: 00007ffbe41e6090 RCX: 00007ffbe3f8f7c9
[  111.355450][ T6174] RDX: 000000000000cb51 RSI: 0000000000000001 RDI: 0000000000000006
[  111.355459][ T6174] RBP: 00007ffbe4013f91 R08: 0000000000000000 R09: 0000000000000000
[  111.355467][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.355475][ T6174] R13: 00007ffbe41e6128 R14: 00007ffbe41e6090 R15: 00007ffed1b2f718
[  111.355494][ T6174]  </TASK>
[  114.585624][ T6211] FAULT_INJECTION: forcing a failure.
[  114.585624][ T6211] name failslab, interval 1, probability 0, space 0, times 0
[  114.627571][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.3.59 Not tainted syzkaller #0 PREEMPT(full) 
[  114.627597][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  114.627605][ T6211] Call Trace:
[  114.627611][ T6211]  <TASK>
[  114.627617][ T6211]  dump_stack_lvl+0x16c/0x1f0
[  114.627644][ T6211]  should_fail_ex+0x512/0x640
[  114.627660][ T6211]  ? __kmalloc_cache_noprof+0x5f/0x800
[  114.627679][ T6211]  should_failslab+0xc2/0x120
[  114.627700][ T6211]  __kmalloc_cache_noprof+0x80/0x800
[  114.627715][ T6211]  ? __lock_acquire+0x436/0x2890
[  114.627729][ T6211]  ? tty_open+0x13e/0xf90
[  114.627753][ T6211]  ? tty_open+0x13e/0xf90
[  114.627779][ T6211]  ? __pfx_tty_open+0x10/0x10
[  114.627815][ T6211]  tty_open+0x13e/0xf90
[  114.627859][ T6211]  ? __pfx_tty_open+0x10/0x10
[  114.627897][ T6211]  ? chrdev_open+0x10b/0x6a0
[  114.627939][ T6211]  ? __pfx_tty_open+0x10/0x10
[  114.627977][ T6211]  chrdev_open+0x234/0x6a0
[  114.628015][ T6211]  ? __pfx_apparmor_file_open+0x10/0x10
[  114.628042][ T6211]  ? __pfx_chrdev_open+0x10/0x10
[  114.628084][ T6211]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  114.628133][ T6211]  do_dentry_open+0x748/0x1590
[  114.628171][ T6211]  ? __pfx_chrdev_open+0x10/0x10
[  114.628217][ T6211]  vfs_open+0x82/0x3f0
[  114.628235][ T6211]  path_openat+0x2078/0x3140
[  114.628263][ T6211]  ? __pfx_path_openat+0x10/0x10
[  114.628291][ T6211]  do_filp_open+0x20b/0x470
[  114.628312][ T6211]  ? __pfx_do_filp_open+0x10/0x10
[  114.628345][ T6211]  ? alloc_fd+0x471/0x7d0
[  114.628370][ T6211]  do_sys_openat2+0x121/0x290
[  114.628386][ T6211]  ? __pfx_do_sys_openat2+0x10/0x10
[  114.628408][ T6211]  __x64_sys_openat+0x174/0x210
[  114.628425][ T6211]  ? __pfx___x64_sys_openat+0x10/0x10
[  114.628448][ T6211]  do_syscall_64+0xcd/0xf80
[  114.628471][ T6211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.628486][ T6211] RIP: 0033:0x7f1c2158f7c9
[  114.628500][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.628513][ T6211] RSP: 002b:00007f1c22460038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  114.628527][ T6211] RAX: ffffffffffffffda RBX: 00007f1c217e5fa0 RCX: 00007f1c2158f7c9
[  114.628537][ T6211] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  114.628546][ T6211] RBP: 00007f1c21613f91 R08: 0000000000000000 R09: 0000000000000000
[  114.628555][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.628564][ T6211] R13: 00007f1c217e6038 R14: 00007f1c217e5fa0 R15: 00007ffc46e6f8e8
[  114.628583][ T6211]  </TASK>
[  117.107400][ T6240] FAULT_INJECTION: forcing a failure.
[  117.107400][ T6240] name failslab, interval 1, probability 0, space 0, times 0
[  117.145836][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) 
[  117.145859][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  117.145873][ T6240] Call Trace:
[  117.145882][ T6240]  <TASK>
[  117.145892][ T6240]  dump_stack_lvl+0x16c/0x1f0
[  117.145941][ T6240]  should_fail_ex+0x512/0x640
[  117.145958][ T6240]  ? kmem_cache_alloc_lru_noprof+0x66/0x770
[  117.145979][ T6240]  should_failslab+0xc2/0x120
[  117.146001][ T6240]  kmem_cache_alloc_lru_noprof+0x87/0x770
[  117.146020][ T6240]  ? __d_alloc+0x35/0xa80
[  117.146037][ T6240]  ? __d_alloc+0x35/0xa80
[  117.146047][ T6240]  __d_alloc+0x35/0xa80
[  117.146062][ T6240]  d_alloc_parallel+0x111/0x1510
[  117.146084][ T6240]  ? find_held_lock+0x2b/0x80
[  117.146104][ T6240]  ? __pfx_d_alloc_parallel+0x10/0x10
[  117.146123][ T6240]  ? __d_lookup+0x266/0x4a0
[  117.146145][ T6240]  lookup_open.isra.0+0x66c/0x1780
[  117.146167][ T6240]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  117.146196][ T6240]  ? mnt_get_write_access+0x1e9/0x2f0
[  117.146215][ T6240]  path_openat+0x12bb/0x3140
[  117.146242][ T6240]  ? __pfx_path_openat+0x10/0x10
[  117.146269][ T6240]  do_filp_open+0x20b/0x470
[  117.146291][ T6240]  ? __pfx_do_filp_open+0x10/0x10
[  117.146325][ T6240]  ? alloc_fd+0x471/0x7d0
[  117.146350][ T6240]  do_sys_openat2+0x121/0x290
[  117.146366][ T6240]  ? __pfx_do_sys_openat2+0x10/0x10
[  117.146383][ T6240]  ? find_held_lock+0x2b/0x80
[  117.146405][ T6240]  __x64_sys_openat+0x174/0x210
[  117.146421][ T6240]  ? __pfx___x64_sys_openat+0x10/0x10
[  117.146445][ T6240]  do_syscall_64+0xcd/0xf80
[  117.146468][ T6240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.146483][ T6240] RIP: 0033:0x7f1c2158f7c9
[  117.146496][ T6240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.146510][ T6240] RSP: 002b:00007f1c22460038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  117.146524][ T6240] RAX: ffffffffffffffda RBX: 00007f1c217e5fa0 RCX: 00007f1c2158f7c9
[  117.146533][ T6240] RDX: 8f3b7a51b80ebd01 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  117.146543][ T6240] RBP: 00007f1c21613f91 R08: 0000000000000000 R09: 0000000000000000
[  117.146552][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.146560][ T6240] R13: 00007f1c217e6038 R14: 00007f1c217e5fa0 R15: 00007ffc46e6f8e8
[  117.146580][ T6240]  </TASK>
[  117.848900][ T6258] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[  118.294639][ T6261] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  119.001096][ T6284] FAULT_INJECTION: forcing a failure.
[  119.001096][ T6284] name failslab, interval 1, probability 0, space 0, times 0
[  119.047673][ T6284] CPU: 0 UID: 0 PID: 6284 Comm: syz.2.73 Not tainted syzkaller #0 PREEMPT(full) 
[  119.047712][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  119.047729][ T6284] Call Trace:
[  119.047738][ T6284]  <TASK>
[  119.047748][ T6284]  dump_stack_lvl+0x16c/0x1f0
[  119.047791][ T6284]  should_fail_ex+0x512/0x640
[  119.047821][ T6284]  ? kmem_cache_alloc_noprof+0x62/0x770
[  119.047859][ T6284]  should_failslab+0xc2/0x120
[  119.047898][ T6284]  kmem_cache_alloc_noprof+0x83/0x770
[  119.047931][ T6284]  ? security_file_alloc+0x34/0x2b0
[  119.047979][ T6284]  ? security_file_alloc+0x34/0x2b0
[  119.048011][ T6284]  security_file_alloc+0x34/0x2b0
[  119.048047][ T6284]  init_file+0x93/0x4c0
[  119.048077][ T6284]  alloc_empty_file+0x73/0x1e0
[  119.048108][ T6284]  dentry_open+0x46/0xd0
[  119.048138][ T6284]  acct_on+0x1a5/0xa00
[  119.048173][ T6284]  ? __pfx_acct_on+0x10/0x10
[  119.048211][ T6284]  ? bpf_lsm_capable+0x9/0x10
[  119.048255][ T6284]  __x64_sys_acct+0x81/0x1e0
[  119.048289][ T6284]  ? lockdep_hardirqs_on+0x7c/0x110
[  119.048324][ T6284]  do_syscall_64+0xcd/0xf80
[  119.048367][ T6284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.048395][ T6284] RIP: 0033:0x7ffbe3f8f7c9
[  119.048417][ T6284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.048441][ T6284] RSP: 002b:00007ffbe4e38038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[  119.048467][ T6284] RAX: ffffffffffffffda RBX: 00007ffbe41e6090 RCX: 00007ffbe3f8f7c9
[  119.048486][ T6284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[  119.048502][ T6284] RBP: 00007ffbe4013f91 R08: 0000000000000000 R09: 0000000000000000
[  119.048520][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.048536][ T6284] R13: 00007ffbe41e6128 R14: 00007ffbe41e6090 R15: 00007ffed1b2f718
[  119.048575][ T6284]  </TASK>
[  119.262057][ T6289] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  119.389861][ T6292] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  119.436091][ T6288] RDS: rds_bind could not find a transport for ::ffff:172.20.20.253, load rds_tcp or rds_rdma?
[  119.458641][ T6288] zero sized request
[  120.011481][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'.
[  121.374961][ T6319] netlink: 338 bytes leftover after parsing attributes in process `syz.0.80'.
[  122.075344][ T6355] ubi0: attaching mtd0
[  122.145529][ T6355] ubi0: scanning is finished
[  122.150880][ T6355] ubi0: empty MTD device detected
[  122.483097][ T6355] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  122.532499][ T6355] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  122.570238][ T6355] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  122.612018][ T6355] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  122.620409][ T6355] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  122.679204][ T6355] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  122.722601][ T6355] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1986786062
[  122.843168][ T6355] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  122.994260][ T6367] ubi0: background thread "ubi_bgt0d" started, PID 6367
[  122.994920][ T6360] ubi0: detaching mtd0
[  123.059530][ T6360] ubi0: mtd0 is detached
[  123.548254][ T6379] netlink: 52 bytes leftover after parsing attributes in process `syz.3.86'.
[  124.196372][ T6402] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  124.855963][ T6408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.90'.
[  125.916280][ T6420] blktrace: Concurrent blktraces are not allowed on loop2
[  126.787539][ T6441] zero sized request
[  128.861169][ T6465] zswap: compressor  not available
[  132.189376][ T6465] kexec: Could not allocate control_code_buffer
[  133.455764][ T6531] ptp ptp0: only physical clock in use now
[  133.545272][ T6534] openvswitch: netlink: Key type 135 is out of range max 32
[  133.779012][ T6526] blktrace: Concurrent blktraces are not allowed on loop2
[  135.448212][ T6554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.121'.
[  135.586601][ T6554] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  137.992216][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  137.999816][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  139.735637][ T6609] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  142.101496][ T6630] netlink: 'syz.3.137': attribute type 5 has an invalid length.
[  142.144316][ T6630] netlink: 'syz.3.137': attribute type 1 has an invalid length.
[  142.202805][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'.
[  142.246724][ T6631] netlink: 'syz.3.137': attribute type 5 has an invalid length.
[  142.328671][ T6631] netlink: 'syz.3.137': attribute type 1 has an invalid length.
[  142.355517][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'.
[  142.576864][ T6633] netlink: 'syz.0.138': attribute type 5 has an invalid length.
[  142.602303][ T6633] netlink: 'syz.0.138': attribute type 1 has an invalid length.
[  142.652442][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'.
[  142.746195][ T6634] netlink: 'syz.0.138': attribute type 5 has an invalid length.
[  142.753865][ T6634] netlink: 'syz.0.138': attribute type 1 has an invalid length.
[  142.794670][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'.
[  144.459955][ T6653] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  144.508985][ T6653] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  144.614494][ T6653] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  144.636662][ T6653] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  144.642780][ T6653] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  144.670946][ T6653] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  144.715780][ T6653] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  144.748881][ T6653] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  144.768758][ T6653] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  144.864810][ T6653] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  144.880415][ T6653] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  144.896494][ T6653] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  145.066319][ T6672] FAULT_INJECTION: forcing a failure.
[  145.066319][ T6672] name failslab, interval 1, probability 0, space 0, times 0
[  145.123304][ T6672] CPU: 1 UID: 0 PID: 6672 Comm: syz.0.146 Not tainted syzkaller #0 PREEMPT(full) 
[  145.123343][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  145.123360][ T6672] Call Trace:
[  145.123368][ T6672]  <TASK>
[  145.123377][ T6672]  dump_stack_lvl+0x16c/0x1f0
[  145.123418][ T6672]  should_fail_ex+0x512/0x640
[  145.123447][ T6672]  ? __kmalloc_noprof+0xca/0x910
[  145.123479][ T6672]  should_failslab+0xc2/0x120
[  145.123519][ T6672]  __kmalloc_noprof+0xeb/0x910
[  145.123546][ T6672]  ? __pfx___might_resched+0x10/0x10
[  145.123575][ T6672]  ? load_msg+0x118/0x4a0
[  145.123612][ T6672]  ? load_msg+0x118/0x4a0
[  145.123643][ T6672]  load_msg+0x118/0x4a0
[  145.123683][ T6672]  do_msgrcv+0x202/0x16c0
[  145.123722][ T6672]  ? do_futex+0x122/0x350
[  145.123748][ T6672]  ? __pfx_do_msg_fill+0x10/0x10
[  145.123788][ T6672]  ? __pfx_do_msgrcv+0x10/0x10
[  145.123819][ T6672]  ? __x64_sys_futex+0x1e0/0x4c0
[  145.123862][ T6672]  ? xfd_validate_state+0x61/0x180
[  145.123887][ T6672]  ? __pfx_ksys_write+0x10/0x10
[  145.123933][ T6672]  ? do_syscall_64+0xcd/0xf80
[  145.123971][ T6672]  do_syscall_64+0xcd/0xf80
[  145.124013][ T6672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.124040][ T6672] RIP: 0033:0x7f558158f7c9
[  145.124062][ T6672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.124088][ T6672] RSP: 002b:00007f55824b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046
[  145.124117][ T6672] RAX: ffffffffffffffda RBX: 00007f55817e5fa0 RCX: 00007f558158f7c9
[  145.124133][ T6672] RDX: 0000002400000000 RSI: 0000000000000000 RDI: 00000000000000ff
[  145.124146][ T6672] RBP: 00007f5581613f91 R08: 000000006bc2cc7d R09: 0000000000000000
[  145.124162][ T6672] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[  145.124189][ T6672] R13: 00007f55817e6038 R14: 00007f55817e5fa0 R15: 00007ffe6cd35ae8
[  145.124228][ T6672]  </TASK>
[  145.419400][ T6675] ==================================================================
[  145.419417][ T6675] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60
[  145.419465][ T6675] Write of size 8 at addr ffffc90003d69be0 by task syz.0.146/6675
[  145.419488][ T6675] 
[  145.419500][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.0.146 Not tainted syzkaller #0 PREEMPT(full) 
[  145.419533][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  145.419549][ T6675] Call Trace:
[  145.419558][ T6675]  <TASK>
[  145.419569][ T6675]  dump_stack_lvl+0x116/0x1f0
[  145.419611][ T6675]  print_report+0xcd/0x630
[  145.419650][ T6675]  ? __virt_addr_valid+0x81/0x610
[  145.419696][ T6675]  ? sys_imageblit+0x1a6f/0x1e60
[  145.419734][ T6675]  kasan_report+0xe0/0x110
[  145.419774][ T6675]  ? sys_imageblit+0x1a6f/0x1e60
[  145.419817][ T6675]  sys_imageblit+0x1a6f/0x1e60
[  145.419860][ T6675]  ? __pfx_sys_imageblit+0x10/0x10
[  145.419899][ T6675]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  145.419931][ T6675]  ? queue_work_on+0x12a/0x1f0
[  145.419965][ T6675]  ? drm_fb_helper_damage_area+0xaa/0xd0
[  145.419999][ T6675]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  145.420041][ T6675]  soft_cursor+0x524/0xa10
[  145.420076][ T6675]  ? fb_get_color_depth+0x120/0x250
[  145.420107][ T6675]  bit_cursor+0xe8c/0x17e0
[  145.420142][ T6675]  ? __pfx_bit_cursor+0x10/0x10
[  145.420186][ T6675]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  145.420228][ T6675]  ? get_color+0x1da/0x450
[  145.420255][ T6675]  ? __pfx_bit_cursor+0x10/0x10
[  145.420287][ T6675]  fbcon_cursor+0x437/0x5d0
[  145.420314][ T6675]  ? add_softcursor+0x31/0x290
[  145.420346][ T6675]  ? hide_cursor+0x99/0x220
[  145.420379][ T6675]  set_cursor+0x1db/0x250
[  145.420411][ T6675]  vcs_write+0xbbc/0xdb0
[  145.420448][ T6675]  ? __pfx_vcs_write+0x10/0x10
[  145.420480][ T6675]  ? bpf_lsm_file_permission+0x9/0x10
[  145.420513][ T6675]  ? security_file_permission+0x71/0x210
[  145.420548][ T6675]  ? rw_verify_area+0xcf/0x6c0
[  145.420583][ T6675]  ? __pfx_vcs_write+0x10/0x10
[  145.420612][ T6675]  vfs_write+0x2a0/0x11d0
[  145.420653][ T6675]  ? __pfx_vfs_write+0x10/0x10
[  145.420688][ T6675]  ? find_held_lock+0x2b/0x80
[  145.420722][ T6675]  ? __fget_files+0x204/0x3c0
[  145.420767][ T6675]  ? __fget_files+0x20e/0x3c0
[  145.420810][ T6675]  ksys_write+0x12a/0x250
[  145.420846][ T6675]  ? __pfx_ksys_write+0x10/0x10
[  145.420909][ T6675]  do_syscall_64+0xcd/0xf80
[  145.420948][ T6675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.420973][ T6675] RIP: 0033:0x7f558158f7c9
[  145.420992][ T6675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.421019][ T6675] RSP: 002b:00007f5582493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  145.421045][ T6675] RAX: ffffffffffffffda RBX: 00007f55817e6090 RCX: 00007f558158f7c9
[  145.421063][ T6675] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000003
[  145.421078][ T6675] RBP: 00007f5581613f91 R08: 0000000000000000 R09: 0000000000000000
[  145.421092][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.421106][ T6675] R13: 00007f55817e6128 R14: 00007f55817e6090 R15: 00007ffe6cd35ae8
[  145.421130][ T6675]  </TASK>
[  145.421139][ T6675] 
[  145.421152][ T6675] The buggy address belongs to a vmalloc virtual mapping
[  145.421178][ T6675] Memory state around the buggy address:
[  145.421192][ T6675]  ffffc90003d69a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  145.421210][ T6675]  ffffc90003d69b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  145.421229][ T6675] >ffffc90003d69b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  145.421243][ T6675]                                                        ^
[  145.421258][ T6675]  ffffc90003d69c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  145.421276][ T6675]  ffffc90003d69c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  145.421290][ T6675] ==================================================================
[  145.478949][ T6675] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  145.478974][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.0.146 Not tainted syzkaller #0 PREEMPT(full) 
[  145.479009][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  145.479026][ T6675] Call Trace:
[  145.479036][ T6675]  <TASK>
[  145.479047][ T6675]  dump_stack_lvl+0x3d/0x1f0
[  145.479094][ T6675]  vpanic+0x640/0x6f0
[  145.479124][ T6675]  panic+0xca/0xd0
[  145.479162][ T6675]  ? __pfx_panic+0x10/0x10
[  145.479190][ T6675]  ? sys_imageblit+0x1a6f/0x1e60
[  145.479232][ T6675]  ? preempt_schedule_common+0x44/0xc0
[  145.479274][ T6675]  ? preempt_schedule_thunk+0x16/0x30
[  145.479305][ T6675]  check_panic_on_warn+0xab/0xb0
[  145.479336][ T6675]  end_report+0x107/0x160
[  145.479376][ T6675]  kasan_report+0xee/0x110
[  145.479418][ T6675]  ? sys_imageblit+0x1a6f/0x1e60
[  145.479462][ T6675]  sys_imageblit+0x1a6f/0x1e60
[  145.479507][ T6675]  ? __pfx_sys_imageblit+0x10/0x10
[  145.479549][ T6675]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  145.479582][ T6675]  ? queue_work_on+0x12a/0x1f0
[  145.479617][ T6675]  ? drm_fb_helper_damage_area+0xaa/0xd0
[  145.479653][ T6675]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  145.479697][ T6675]  soft_cursor+0x524/0xa10
[  145.479734][ T6675]  ? fb_get_color_depth+0x120/0x250
[  145.479767][ T6675]  bit_cursor+0xe8c/0x17e0
[  145.479803][ T6675]  ? __pfx_bit_cursor+0x10/0x10
[  145.479842][ T6675]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  145.479885][ T6675]  ? get_color+0x1da/0x450
[  145.479911][ T6675]  ? __pfx_bit_cursor+0x10/0x10
[  145.479942][ T6675]  fbcon_cursor+0x437/0x5d0
[  145.479971][ T6675]  ? add_softcursor+0x31/0x290
[  145.480004][ T6675]  ? hide_cursor+0x99/0x220
[  145.480038][ T6675]  set_cursor+0x1db/0x250
[  145.480071][ T6675]  vcs_write+0xbbc/0xdb0
[  145.480110][ T6675]  ? __pfx_vcs_write+0x10/0x10
[  145.480150][ T6675]  ? bpf_lsm_file_permission+0x9/0x10
[  145.480186][ T6675]  ? security_file_permission+0x71/0x210
[  145.480224][ T6675]  ? rw_verify_area+0xcf/0x6c0
[  145.480262][ T6675]  ? __pfx_vcs_write+0x10/0x10
[  145.480293][ T6675]  vfs_write+0x2a0/0x11d0
[  145.480335][ T6675]  ? __pfx_vfs_write+0x10/0x10
[  145.480372][ T6675]  ? find_held_lock+0x2b/0x80
[  145.480408][ T6675]  ? __fget_files+0x204/0x3c0
[  145.480450][ T6675]  ? __fget_files+0x20e/0x3c0
[  145.480493][ T6675]  ksys_write+0x12a/0x250
[  145.480532][ T6675]  ? __pfx_ksys_write+0x10/0x10
[  145.480577][ T6675]  do_syscall_64+0xcd/0xf80
[  145.480620][ T6675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.480650][ T6675] RIP: 0033:0x7f558158f7c9
[  145.480672][ T6675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.480700][ T6675] RSP: 002b:00007f5582493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  145.480727][ T6675] RAX: ffffffffffffffda RBX: 00007f55817e6090 RCX: 00007f558158f7c9
[  145.480747][ T6675] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000003
[  145.480765][ T6675] RBP: 00007f5581613f91 R08: 0000000000000000 R09: 0000000000000000
[  145.480783][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.480800][ T6675] R13: 00007f55817e6128 R14: 00007f55817e6090 R15: 00007ffe6cd35ae8
[  145.480830][ T6675]  </TASK>
[  145.481221][ T6675] Kernel Offset: disabled