last executing test programs:

10.820410842s ago: executing program 0 (id=12):
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0x2000feb, 0x80000010, 0x3, 0x8000)
preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/ksm_merging_pages\x00', 0x22000, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x82802, 0x0)
ioctl$auto_BLKTRACETEARDOWN2(r4, 0x1276, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8002)
arch_prctl$auto_ARCH_SET_GS(0x1001, 0x1000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2)
mremap$auto(0x1ff000, 0xfc, 0x847, 0x7, 0x6)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
clock_gettime$auto(0x8, 0x0)
ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(0xffffffffffffffff, 0x40789440, &(0x7f0000000180)={0x1, 0x7, 0x6, 0x3, 0x400, 0x1, 0x8001, 0x1, 0x65021801, "b94086959a4f44c2f795f67486e29175f7472a35e7b7a17823bb209709d88131882bd38c9594ce22c1be3346b234b1f645e0bfabe501526e79eadea233e74acc"})
write$auto(0x1, 0x0, 0x80000000)
sendfile$auto(r1, r0, 0x0, 0x5)
read$auto(r0, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001)
r5 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
fcntl$auto_F_RDLCK(r5, 0x1cb0, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r5, 0x40045702, &(0x7f00000000c0)=0xd)
write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000b80)=ANY=[@ANYBLOB="cc0fa2", @ANYRES16, @ANYRES32], 0x22ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)

9.657122153s ago: executing program 1 (id=15):
mmap$auto(0x0, 0x4020009, 0xdb, 0xebe, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000002b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002ac0)={&(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x13f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x2, 0x4, 0x5, 0x7)
sysfs$auto(0x5, 0x7, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
r4 = getpid()
rt_tgsigqueueinfo$auto(r4, r4, 0x0, &(0x7f0000002440)={@siginfo_0_0={0x9, 0x2, 0xffffffc4, @_sigsys={0x0, 0x10000, 0x4}}})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
r5 = socket(0x2, 0x1, 0x106)
getsockopt$auto_SO_BINDTOIFINDEX(r5, 0x1, 0x3e, 0x0, 0x0)
r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001180)='/dev/snd/controlC2\x00', 0x40, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f00000011c0)={{@raw=0x2, 0x5, 0xf3f, 0x400, "a788436779d5ce37b3f96825e6b362f1510cdb4a08f92b8526e9a12344ff75956f95e267b9f81f077303fca6", @raw=0x1}, 0x1, @integer=@value=[0x7, 0xa, 0x6145, 0x5, 0x8, 0xb89a, 0x40, 0x2, 0xfffffffffffffe00, 0x5, 0x6, 0x2, 0x6, 0x5517, 0x8, 0x7, 0x8000, 0x7b, 0x1, 0x5, 0xd, 0x5, 0x5, 0x7, 0x7, 0x4, 0x3, 0xb56, 0x9, 0x3, 0x929, 0x800, 0x222, 0x100, 0x73, 0x6, 0x2, 0x3, 0x6, 0xa, 0x2, 0x7, 0x53423b0a, 0x7f, 0x1ff, 0x2, 0x3, 0xcfc, 0xffffffff, 0x7, 0x5, 0xffffffffffffffcd, 0x10000, 0x539, 0xc3c, 0x1, 0x3, 0x2, 0x7ff, 0x400, 0x3, 0x5, 0x3, 0x1, 0x800, 0x6, 0xc000000000000000, 0x1, 0x6, 0x6, 0x6, 0x200, 0x2, 0xfffffffffffffffc, 0x8, 0x4, 0xe, 0xfb3, 0x0, 0xffffffffffff63c2, 0x9, 0x0, 0x100000000, 0x1ff, 0x4, 0x5, 0x8, 0xd7a4, 0x8, 0x5d, 0x40, 0x8c, 0x9, 0x0, 0x0, 0x4, 0x401, 0x9, 0x8, 0xfff, 0x7ff, 0xffff, 0x101, 0x6, 0x1, 0x6, 0x9, 0x608, 0x4411, 0xfffffffffffffff7, 0x3, 0x3, 0x8, 0x3, 0x1f, 0x5, 0xffff, 0x62, 0x1, 0x4, 0x1, 0x8, 0x5, 0x42, 0x6, 0x2, 0xf], "0bedf7e7372049a0b0db9342c58e4bc2ecbbf30f48915cac3fd5babacc53205e3fb838fcee27a6ab6c5cf0889ff7a30c822abe916b7564f7da51d41a17ec60dcc4db9bcb51e8571d71bf29c179b7d9cd317e584bc19603e180b4c4cd4df8a242c1faa4c94740e870b4921c6b0621b94c88d437716a89629bdc73b4180cf4bf35"})
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
landlock_restrict_self$auto(0xffffffffffffffff, 0x4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
io_uring_setup$auto(0x1, 0x0)
ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0)
ioctl$auto(r7, 0x89f0, r2)

9.465584109s ago: executing program 2 (id=16):
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0xa, 0x1, 0x84)
io_uring_setup$auto(0x7f, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x84)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c)
io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0xb800, 0x2, 0x7, 0x400a, <r0=>0xffffffffffffffff, [], {0x6, 0x6, 0xac48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x59, 0x76c2, 0x9, 0x100000000}})
io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, r0, [], {0x7, 0x200004, 0x7, 0x1, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x200009, 0x1, 0x3, 0x40, 0xcc, 0x8, 0x100000000}})
pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)
mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0)
r1 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x6)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40, 0x40, 0x5d}, 0x18)
mount_setattr$auto(r2, &(0x7f0000000180)='./file0\x00', 0xf82, &(0x7f00000001c0)={0x8000000000000001, 0x4, 0x1, @inferred=r2}, 0x2)
mmap$auto(0xa, 0x2020009, 0xfffefffffffffffa, 0xebe, r1, 0x7fff)
close_range$auto(0x2, 0x8, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
setreuid$auto(0x0, 0x0)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5)
ioctl$auto_VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000000c0)={0x5, 0xe000000, [{0x9, 0x6, 0x123}]})
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

9.219602169s ago: executing program 0 (id=17):
r0 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/projid_map\x00', 0x2, 0x0)
mkdir$auto(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x2)
r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000840), 0xc0000, 0x0)
ioctl$auto_RNDADDTOENTCNT2(r1, 0x40045201, &(0x7f0000000880)=0x80000001)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x30, r5, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="fffffffd"]}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x8880)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x147)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x1, 0x20008, 0x0, 0x0, 0x0, 0x8000000000000000)
r7 = socket(0xa, 0x801, 0x84)
setsockopt$auto(r7, 0x10000000084, 0x0, 0x0, 0x10)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x440, 0x0)
r8 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pread64$auto(r8, 0x0, 0x4, 0xc70d)
setresuid$auto(0x60, 0x1000, 0x8000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
utimensat$auto(r6, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x8, 0x1}, 0x6)
sysfs$auto(0x2, 0x100000000000031, 0x0)
fsopen$auto(0x0, 0x1)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0xa, 0x20009, 0x4000000000df, 0xffffffffffffc27d, r0, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
socket(0x15, 0x5, 0x0)

8.82142598s ago: executing program 2 (id=19):
mmap$auto(0x0, 0x4020009, 0xdb, 0xebe, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, 0x0, 0x40800)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x2, 0x4, 0x5, 0x7)
sysfs$auto(0x5, 0x7, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
getpid()
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x1, 0x106)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001180)='/dev/snd/controlC2\x00', 0x40, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000011c0)={{@raw=0x2, 0x5, 0xf3f, 0x400, "a788436779d5ce37b3f96825e6b362f1510cdb4a08f92b8526e9a12344ff75956f95e267b9f81f077303fca6", @raw=0x1}, 0x1, @integer=@value=[0x7, 0xa, 0x6145, 0x5, 0x8, 0xb89a, 0x40, 0x2, 0xfffffffffffffe00, 0x5, 0x6, 0x2, 0x6, 0x5517, 0x8, 0x7, 0x8000, 0x7b, 0x1, 0x5, 0xd, 0x5, 0x5, 0x7, 0x7, 0x4, 0x3, 0xb56, 0x9, 0x3, 0x929, 0x800, 0x222, 0x100, 0x73, 0x6, 0x2, 0x3, 0x6, 0xa, 0x2, 0x7, 0x53423b0a, 0x7f, 0x1ff, 0x2, 0x3, 0xcfc, 0xffffffff, 0x7, 0x5, 0xffffffffffffffcd, 0x10000, 0x539, 0xc3c, 0x1, 0x3, 0x2, 0x7ff, 0x400, 0x3, 0x5, 0x3, 0x1, 0x800, 0x6, 0xc000000000000000, 0x1, 0x6, 0x6, 0x6, 0x200, 0x2, 0xfffffffffffffffc, 0x8, 0x4, 0xe, 0xfb3, 0x0, 0xffffffffffff63c2, 0x9, 0x0, 0x100000000, 0x1ff, 0x4, 0x5, 0x8, 0xd7a4, 0x8, 0x5d, 0x40, 0x8c, 0x9, 0x0, 0x0, 0x4, 0x401, 0x9, 0x8, 0xfff, 0x7ff, 0xffff, 0x101, 0x6, 0x1, 0x6, 0x9, 0x608, 0x4411, 0xfffffffffffffff7, 0x3, 0x3, 0x8, 0x3, 0x1f, 0x5, 0xffff, 0x62, 0x1, 0x4, 0x1, 0x8, 0x5, 0x42, 0x6, 0x2, 0xf], "0bedf7e7372049a0b0db9342c58e4bc2ecbbf30f48915cac3fd5babacc53205e3fb838fcee27a6ab6c5cf0889ff7a30c822abe916b7564f7da51d41a17ec60dcc4db9bcb51e8571d71bf29c179b7d9cd317e584bc19603e180b4c4cd4df8a242c1faa4c94740e870b4921c6b0621b94c88d437716a89629bdc73b4180cf4bf35"})
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
landlock_restrict_self$auto(0xffffffffffffffff, 0x4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
io_uring_setup$auto(0x1, 0x0)
ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0)
ioctl$auto(r5, 0x89f0, r2)

8.063104075s ago: executing program 1 (id=20):
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0xa, 0x5, 0x84)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
futex$auto(0x0, 0x5, 0x1, 0x0, 0x0, 0x1bc)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/acpi/parameters/ec_event_clearing\x00', 0x129882, 0x0)
sendfile$auto(r2, r2, 0x0, 0x1)
preadv2$auto(r1, 0x0, 0x9, 0x1, 0x4, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram12\x00', 0x14f602, 0x0)
msync$auto(0x0, 0xe0, 0x6)
close_range$auto(0x2, 0x8, 0x0)
mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0)
remap_file_pages$auto(0x5, 0x8000000000000001, 0x0, 0xad0, 0x10007)
r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000001f00), 0x101002, 0x0)
write$auto(r3, &(0x7f0000001f40)='!+*\x00', 0x8)
mmap$auto(0x1ff, 0x2020009, 0xfffffffffffffff7, 0x14, r3, 0x8000)
pselect6$auto(0x3, 0x0, &(0x7f0000000340)={[0x9, 0x6, 0x40, 0x2f3, 0x8, 0x7fffffff, 0x8, 0x8, 0x4, 0x7, 0x40, 0x67a4ee2e, 0x6, 0x7, 0x9, 0xb]}, 0x0, 0x0, 0x0)
sysfs$auto(0x2, 0x100000000000038, 0x0)
socket(0xa, 0x3, 0xff)
ioctl$auto(0x3, 0x89e0, 0x91)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef)
r4 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000100), r0)
lstat$auto(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000003c0)={0x100000001, 0x1, 0x8, 0xfffffffc, <r5=>0xee01, 0x0, 0x0, 0x100000001, 0x3, 0xfffffffffffffff9, 0x9, 0x20f, 0x3ff, 0x9, 0x8, 0x1, 0xffffffff7fffffff})
sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000480)={0x7ec, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x3c8, 0x3, 0x0, 0x1, [@generic="12ed1b7a8d4b6c763ef4036da4e4ef5b578e1186b8dc48842a519333b121e19eb4ab9e0e5eac5cf47d845bd64e5c1af55966bd3ca270f340ce32bd2f64afaea2f639a2ac3cfc0856ea6d3940eee04e8a4e7e37d10435fb6d34bc062674b50875521fc504a0f06b20faf83e5c498b0f73e217b391ceeb8933ef20efb123f19fbc3609b6553a5094d715768312a4220befbde03034aa8541ef3efd75", @typed={0x8, 0x108, 0x0, 0x0, @fd=r1}, @nested={0x102, 0x8, 0x0, 0x1, [@generic="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"]}, @typed={0x8, 0x14a, 0x0, 0x0, @u32=0x2}, @generic="4c1eedf5d379697f28f2168b88af0c5c3294ed1b262e6e63f9b6ffe4e5dbccd5816a86cf1dcb764a31646e131143a98e68b098612e16042df9119892d2375011d7e0ab5542a42330613c46", @generic="7f0033fec7f5cd53f3171a84672b12c4f559908e12cd0467eb57e3bddb3e44ab5a4555c2eb620a87589895244e5183943e4719459ffe2df9c3d5991502bdf35eb41a0b749c3e489d7636b0b705884b734a8dd566867e83c39e7aa802288038ef44f387719f8df336ec3e1adeea29106f200015b7004ae72a503c54b24142460f895e1a66e9613009391ffeca4ebb3c833cba9003a204a4aca7ed38dab038efe772b034daf6508f51620a52db5082b6904176bb1aef6f273f1e2c602cd67a1898a7affc6f108db1098320d56243aa629e2690", @nested={0xd6, 0x165, 0x0, 0x1, [@nested={0x4, 0xbe}, @generic="4e849f4c7e65e64128aef941918b1bb50cb5b4f764096b1d8f698baac1647957d7921b566904dfa51bcbcf530cfb53a11cae6949580f5a421d2c8ce647da2b8b1d0ac14ffee8954fb1ef54d5300457b261230a61939c80400ae0148d210a9ed8380326c0e394c6c50947aa0af1c7e8e4ee30deca19a028f115f42d3713fe6c6adf06533cbd80698ec3", @generic="40f047b17f0b5da207524cf3fc1f8b6db3007c6f7b90fc42a6939759393c2eec1374ea4b3e64d81b9e8311c5ebfd5c1f2b0e140dcef03a708d742b4f3b322ee02f78912f5d"]}, @typed={0x8, 0xaa, 0x0, 0x0, @u32=0x6}, @generic="d2b983a8e8b0fe238d2d5b11728948dc79e3ee3c5125f114"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x118, 0x2, 0x0, 0x1, [@nested={0x111, 0x40, 0x0, 0x1, [@nested={0x4, 0xa8}, @generic="1259f5ee9395836aa0a5dd0d902b68db8779a094dee3d7ff8531e2f1b4eb024e60bc6e3229c2051665682d3deb26179f9613b665a6a1d54e6e3063102c3fde1a9fed365f1a5bdf5b35a2f365d4d052e1c1c0e363aec20899406d5ab46646c63d4672ffbf1bdcfb08b545f62b641d4aa6824005176557c2c3c42e7a022bc3d419e0faa84b779f4a142facf38ae68a3a16642a6be1fa3f4514a6ffff9af24b7445b0ca2b5c126082ef1bdea4e9f75b53c164e39dafd2b28776f362f0c6647042c2a4cd6d22af7d6e78c1334807b13f5ce4611c36f2eba9e2abe03ef079285b189e0fd1112f2cc74c5adbc045845fb59e7e3ff42a96c1c7ae84", @generic="14d7692d6617784b52f86db128", @nested={0x4, 0xf4}]}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x62}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x2}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x2e0, 0x2, 0x0, 0x1, [@generic="17b4791737609dbaa2a90161c368ca483fdb18eef525759aed96495254edd85b317852142711", @generic="ac5f83633add8b82245dbb855423f0a971395982129691526d5361378a65520d55506d8149d78dca1b30a283628412c3161052ddb328ee11fefffdd9c35476c34873cbf06b4fa386340ab933436bd58993c65ffb931e4fa2921440019160b9357eccdb0d4f81f977e10a1ab1b9dab3b1e25a55278e5008e5beb5d42e88cb1ac88694faae5ee751141db262663adfee87d287d36297468a2246fc", @typed={0x8, 0x97, 0x0, 0x0, @uid=r5}, @generic="3930a83c8beb3fc1562b1703409285d954d29a26245bd1725200859615664df0cd804a41778520e0ea432fc1d277d1d1b475d4425031f753162570195bdd35f9f76a291c441dd22c0f86e9e2ccc2cc83d82f3dfa0c2639d9904e62adf03c0946a6af61e3ea25b3d2c1fe8e4762dc747d082eb40e1e29416e4bb03036551f43b8770e536d1e35c4c312bdf518f1a87be0deee21c4d347a74811b67f595cfd5a460419633bb19d0c17de3b1ad4f12a06ac4be5", @typed={0x32, 0x7c, 0x0, 0x0, @str='/sys/module/acpi/parameters/ec_event_clearing\x00'}, @nested={0xfa, 0xf0, 0x0, 0x1, [@generic="11aecca630c0fe8343b84ec8c8ee952679e85acc544e367b2f040ac7fb56c1c1aeed9de8e8d94380f4680aacf91964105ddf5371ede33d6415a734fd4f6001fa6d4cbdaa7c29295a264e7365508a595d7db565433fe8a230182a01a0cdf78907799cce760407927781ab04df4f691fc65b1db7f7ec6cbf4abe26973d0952", @generic="85406c718893a3c9ac7f7efb5eaf34e3a46820e5bd2d4a68967c1ebccb2bfea2c3e47ba15c53fc00ce6434fd409cdc2f30cac46086411f3e06ecd151307f49af2e101973b97bc0811e5e8985684946c7af4b3513516a71b481c06766f6eba3cac05aee5d147b83e63e48011e058ebf453486aa05b95d2e40"]}, @generic="e86a3ed0e2bce9dab5245dd5f538aa0eea30741507851e48d00b161ae60e5311db23f45486f2", @typed={0x9, 0x8c, 0x0, 0x0, @str=')})}\x00'}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xfff}]}, 0x7ec}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
fsopen$auto(0x0, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
symlink$auto(&(0x7f0000000140)='./file0/../file0\x00', 0x0)
shmctl$auto(0x8, 0x4, &(0x7f0000000300)={{0x5, <r6=>0xee00, 0xee00, 0x89, 0x7ff, 0x8, 0x3d3}, 0x3, 0x0, 0x8, 0x1ff, @raw=0x3ff0000, @inferred=0xffffffffffffffff, 0xf, 0x0, &(0x7f0000000180), &(0x7f0000000240)="023b0742d35847c850bdd678b096ce89251246bc9fe671c6cb104ae279d1dce79f9f5303412839380d0af8dbbe36e722e6e95063ba2ef321f82efbe430f1d333425b73b804b4ff5a1682b044247f37c9461c1b6647940e5f115a72a7ee87bedf1c49d7d339cfff3287e2ced3b74d59ff39fc762f0fa693909f5ac3f3f3a9eb81a0b48fcf273d05426e38d469921322c1b11f6a2e5dbc8d"})
getpriority$auto_PRIO_USER(0x2, r6)

7.498349123s ago: executing program 2 (id=22):
syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d)
r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec26\x00', 0xc0000, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000180)={'\x00', 0x0, 0x5, 0x2, 0x9b7, 0x9, "fafffffc3924222ce18c1000", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "6c6529a30418fffffffff300", "ef5ac4927aed9c5c00000080", ' \x00\x00\x00\x00\x00\t\x00']})
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0)
ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, 0x0)
write$auto(0x3, 0x0, 0x400000000000050)
getsockopt$auto_SO_BSDCOMPAT(r1, 0x3, 0xe, &(0x7f0000000040)='#!\x00', &(0x7f00000000c0)=0x1)
r2 = socket(0xa, 0x1, 0x84)
r3 = getsockopt$auto(r1, 0x9, 0x3a72, 0x0, 0x0)
mmap$auto(0xea88, 0xb, 0xd, 0x10, 0x3, 0xffffffffffffffff)
shmctl$auto_SHM_LOCK(0x6, 0xb, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
socket(0x29, 0x2, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400005, 0x9, 0xff, r3, 0x8000)
process_vm_readv$auto(0x0, 0x0, 0x800000005, &(0x7f0000000500)={0x0, 0x1ffffffff}, 0x2, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x0, 0x40000001, 0x0, 0x4000001)
unshare$auto(0x4000007f)
mmap$auto(0x2, 0x2020009, 0x3, 0x400000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0)
setfsuid$auto(0xee00)
getsockopt$auto_SO_TXTIME(r2, 0x9, 0x3d, 0x0, 0x0)
prctl$auto(0x23, 0x6, 0x0, 0x7e, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socketpair$auto(0x12008, 0x7ff, 0x4, 0x0)

6.795338683s ago: executing program 0 (id=24):
r0 = socket(0x10, 0x2, 0x1ff)
writev$auto(r0, &(0x7f0000000000)={&(0x7f0000000300), 0x6}, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
mmap$auto(0x0, 0x22, 0x3, 0xeb0, r0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x5, 0x400a)
process_vm_writev$auto(0x0, &(0x7f00000011c0)={&(0x7f00000001c0)="42777dd1330b458d0b5c44ca32e94fc00cfbce962ee7d8f31c0f90c327830f55adfdceafcc0f7b5a21ea23bdf5344d47d49d60218e57bb33118d04fdd37f5fd17f96", 0x8}, 0x7, 0x0, 0x7, 0xb5)
sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000", @ANYRES16=0x0, @ANYBLOB="01000200000000006bbc9d65365cbf8013"], 0x18}, 0x1, 0x0, 0x0, 0x4000094}, 0x8080)
socket(0x11, 0x3, 0x9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2)
sendmsg$auto_NL80211_CMD_SET_BSS(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40000c9)
r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0)
poll$auto(&(0x7f0000000480)={r6, 0xffff, 0x29}, 0x3, 0x7)
get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

6.78349198s ago: executing program 1 (id=25):
r0 = bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={<r1=>0x0, 0x4, 0x4, 0x10001, 0x8, 0x0, <r2=>0xffffffffffffffff, 0x9, 0x5}, 0xef)
r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
sendmsg$auto_NL80211_CMD_CONNECT(r3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0xc090)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
futex$auto(0x0, 0x8b, 0x7, 0x0, 0x0, 0x5)
write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8n\x89C:\x84D\x1du\xb4\xeb\xb9\xdec\x8c\x9d\\\x9a\x14$4\xe0\xa8%\x16\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4c\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf', 0x9)
r4 = socket(0x2b, 0x5, 0xfffffffd)
fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
fsopen$auto(0x0, 0x1)
prctl$auto(0x105, 0x37, r1, 0xfff, 0x5)
mmap$auto(0x8001, 0x20009, 0x800, 0xeb1, r2, 0x8000)
mmap$auto(0x10000000000000, 0x400008, 0xdf, 0x9b72, r4, 0x5)
r6 = io_uring_setup$auto(0x6, 0x0)
r7 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e)
fcntl$auto_F_ADD_SEALS(r7, 0x410, 0x0)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x10001)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_freeze_timeout\x00', 0x200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000080)=""/247, 0xe5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x200c02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder1\x00', 0x80800, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pppol2tp\x00', 0x303000, 0x0)
pread64$auto(r6, 0x0, 0x3ff, 0xc55)

5.883894281s ago: executing program 3 (id=27):
io_uring_setup$auto(0x59, 0x0)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x9, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x29, 0x2, 0x0)
r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/queues\x00', 0x82, 0x0)
read$auto(r1, 0x0, 0x84)
ioctl$auto(r0, 0x8923, 0x24)
futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x1000)
futex$auto(&(0x7f0000000080)=0x89, 0x5, 0x9, 0x0, &(0x7f0000000000)=0x4, 0x1bc)

5.600762073s ago: executing program 1 (id=28):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
open(0x0, 0x22240, 0x155)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
pipe$auto(0x0)
pipe$auto(0x0)
write$auto(0x3, 0x0, 0xfdf3)
tee$auto(0x2000000000000, 0x3, 0x402, 0xd)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x500, 0x0)
socket(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x26, 0x3, 0x4)
ioctl$auto_VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x7fff, r0})
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x4, &(0x7f0000000140)={{0x5, 0x80000006}, {0x0, 0xa}, 0x7607, 0x1, 0x3, 0x6, 0x3, 0x9, 0x401, 0x401, 0x24f0, 0x0, 0x6, 0x5, 0x6, 0x3})
bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)=@query={@target_ifindex, 0x100, 0x400, 0x0, 0x2, @prog_cnt=0xff, 0x0, 0x30a5, 0x3, 0x5, 0x6}, 0x1)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)

5.297710368s ago: executing program 3 (id=29):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r0, 0x110, 0x7, 0x0, 0x8000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
set_mempolicy_home_node$auto(0xc, 0xe873, 0x4, 0x9)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0)
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x40a00, 0x1c7)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
pidfd_open$auto(0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
fchmod$auto(0xffffffffffffffff, 0x8)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0xb9, 0x9, 0xfffffffffffffffd, 0x948d, 0x1ff, 0x1, 0x8, 0x8003, 0x65, 0x8000001f, 0x10000001002, 0x100000000006d41, 0x7, 0x1, 0x9]}, 0x0)
select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x4, 0x6, 0x7, 0x3, 0x0, 0x4000000000007, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x3, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
close_range$auto(r0, r3, 0x5)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x6, &(0x7f0000000140)=@test={r1, 0xfffffff9, 0x800, 0x4, 0x100000000, 0x4, 0x95eacce6, 0x401, 0x2, 0xfffffbff, 0x2, 0x7fffffff, 0x744, 0x5, 0x4}, 0x6)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000020c0), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000002100)=ANY=[@ANYBLOB="60100000", @ANYRES16=r5, @ANYBLOB="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"], 0x1060}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

5.144829822s ago: executing program 0 (id=30):
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
r0 = socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
read$auto(0x3, 0x0, 0x7fffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x8af}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x4)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
shmctl$auto_IPC_INFO(0x5, 0x3, 0x0)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
init_module$auto(&(0x7f0000000000), 0xfffff, 0x0)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r1)
sendmsg$auto_TIPC_NL_BEARER_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x130, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x11c, 0x5, 0x0, 0x1, [@nested={0x39, 0x1e, 0x0, 0x1, [@nested={0x4, 0x128}, @typed={0xc, 0x95, 0x0, 0x0, @u64=0x60}, @generic="ea89b03300062d8c9acd42c8a959ca2b4b2090e10c94fc41d08405681850a4e5114b3dcaab"]}, @generic="25dd6f10cceab112ab1f36ba3ebcd75289233cec219ac38d612d2498ea2f85059e6703149f3c9e214355ca178b8b25d7ce8ceaa0be1a3e4c3d9265c55860cc4556ff5f3efa22fc35f7d4ff9d7feeb60607f8206f05bdff3929f22f73cfd211e6eb3774f0a43d44469bb7310528883d41ce46fcdeae296202aefdbe948d9990b995d0a7a91577e634ac8db6d86e7b5c33399feaef01567b34e7ed74863d3613119f34", @generic="27a7271e1488e84872449a581fea5052e32433b4ae364885c871ced224275337a86802d93c30fad358d09c14efc74b458ff749c8f6c6644a74a7"]}]}, 0x130}, 0x1, 0x0, 0x0, 0x12}, 0x4)
recvfrom$auto(r1, &(0x7f0000002300), 0x1000, 0x2, &(0x7f0000002400)=@in={0x2, 0x4e24, @local}, &(0x7f0000002440)=0x5d)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r3, 0x8000)
prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0x101, 0x2, 0x0, 0xdfd)
madvise$auto(0x0, 0x400053, 0x9)
ioctl$auto_BLKRRPART(r3, 0x125f, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r6 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r6, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)="4a67d2", 0x14}, 0x6, &(0x7f0000000180), 0x5, 0x1001}, 0x5}, 0x2, 0x100)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, r3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x30}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xaf6e}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x9de9}]}, 0x4c}}, 0x850)

4.917225863s ago: executing program 1 (id=31):
mmap$auto(0x0, 0x4020009, 0xdb, 0xebe, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, 0x0, 0x40800)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x2, 0x4, 0x5, 0x7)
sysfs$auto(0x5, 0x7, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
getpid()
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x1, 0x106)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001180)='/dev/snd/controlC2\x00', 0x40, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000011c0)={{@raw=0x2, 0x5, 0xf3f, 0x400, "a788436779d5ce37b3f96825e6b362f1510cdb4a08f92b8526e9a12344ff75956f95e267b9f81f077303fca6", @raw=0x1}, 0x1, @integer=@value=[0x7, 0xa, 0x6145, 0x5, 0x8, 0xb89a, 0x40, 0x2, 0xfffffffffffffe00, 0x5, 0x6, 0x2, 0x6, 0x5517, 0x8, 0x7, 0x8000, 0x7b, 0x1, 0x5, 0xd, 0x5, 0x5, 0x7, 0x7, 0x4, 0x3, 0xb56, 0x9, 0x3, 0x929, 0x800, 0x222, 0x100, 0x73, 0x6, 0x2, 0x3, 0x6, 0xa, 0x2, 0x7, 0x53423b0a, 0x7f, 0x1ff, 0x2, 0x3, 0xcfc, 0xffffffff, 0x7, 0x5, 0xffffffffffffffcd, 0x10000, 0x539, 0xc3c, 0x1, 0x3, 0x2, 0x7ff, 0x400, 0x3, 0x5, 0x3, 0x1, 0x800, 0x6, 0xc000000000000000, 0x1, 0x6, 0x6, 0x6, 0x200, 0x2, 0xfffffffffffffffc, 0x8, 0x4, 0xe, 0xfb3, 0x0, 0xffffffffffff63c2, 0x9, 0x0, 0x100000000, 0x1ff, 0x4, 0x5, 0x8, 0xd7a4, 0x8, 0x5d, 0x40, 0x8c, 0x9, 0x0, 0x0, 0x4, 0x401, 0x9, 0x8, 0xfff, 0x7ff, 0xffff, 0x101, 0x6, 0x1, 0x6, 0x9, 0x608, 0x4411, 0xfffffffffffffff7, 0x3, 0x3, 0x8, 0x3, 0x1f, 0x5, 0xffff, 0x62, 0x1, 0x4, 0x1, 0x8, 0x5, 0x42, 0x6, 0x2, 0xf], "0bedf7e7372049a0b0db9342c58e4bc2ecbbf30f48915cac3fd5babacc53205e3fb838fcee27a6ab6c5cf0889ff7a30c822abe916b7564f7da51d41a17ec60dcc4db9bcb51e8571d71bf29c179b7d9cd317e584bc19603e180b4c4cd4df8a242c1faa4c94740e870b4921c6b0621b94c88d437716a89629bdc73b4180cf4bf35"})
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
landlock_restrict_self$auto(0xffffffffffffffff, 0x4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
io_uring_setup$auto(0x1, 0x0)
ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0)
ioctl$auto(r5, 0x89f0, r2)

4.118878939s ago: executing program 1 (id=32):
r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)
sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x0)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0100a6bd58847b320896b56719319a75b239dfdb65ffffffff467000ffdb"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x440c0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0x7b2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8)
bpf$auto(0x0, &(0x7f0000000300)=@bpf_attr_0={0x22, 0x538, 0x80, 0x10000, 0x4, 0xffffffffffffffff, 0x21000, "72fea04183dce563f03f2a25077b3383", 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x101, 0x1000000000001}, 0x4)
socket(0x15, 0x5, 0x0)

4.035931303s ago: executing program 2 (id=33):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000200)={[0xb, 0x8, 0x3, 0x2, 0x3, 0x1000000009, 0x9, 0xff, 0x3, 0xffffffffffffffff, 0x7, 0x7, 0x100000001, 0x8000000000002001, 0x3, 0x9]}, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
r3 = socket(0x1d, 0x2, 0x6)
r4 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$auto(r3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x1f, 0x0)
fanotify_init$auto(0x6a1, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x0, 0x0)
r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0c02, 0x0)
ioctl$auto(r6, 0xc0045543, r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r8)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'dummy0\x00', <r10=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r9, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040050}, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r11=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe8, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0xb}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/bcache/register_quiet\x00', 0x401, 0x0)

3.490859897s ago: executing program 0 (id=34):
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0)
socket(0x11, 0x3, 0x9)
r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$auto(r1, 0x6f41, 0x38)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/ports/0/pp_hold\x00', 0x2201c3, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
write$auto(0x3, 0x0, 0xfdef)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
ioctl$auto(r2, 0x541c, 0xffffffffffffffff)

3.327758972s ago: executing program 3 (id=35):
mmap$auto(0x2, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8003)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="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")
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socket(0x20, 0x2, 0x0)
setsockopt$auto(r0, 0xfffffffd, 0x0, 0x0, 0x7)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
write$auto(r1, &(0x7f0000000080)='/dev/audio\x00', 0x80000000)
r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
execve$auto(0x0, 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00'})
sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x140080e4)
ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
ioctl$auto(0xc8, 0x800454e1, 0x5c8d)
read$auto(0x3, 0x0, 0x8080)
sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008004)
write$auto(0xffffffffffffffff, 0x0, 0x81)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)

2.108597391s ago: executing program 3 (id=36):
unshare$auto(0x40000080)
mmap$auto(0x100, 0xd70, 0xfffffffffffffffc, 0x9b72, 0xffffffffffffffff, 0x27ffe)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyx9\x00', 0x56d183, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
io_uring_setup$auto(0x59, 0x0)
r1 = socket(0x28, 0x1, 0x0)
timer_settime$auto(0x2, 0xffff8000, 0x0, 0x0)
timer_gettime$auto(0x0, 0x0)
getsockopt$auto(r1, 0x25, 0x2, 0x0, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioperm$auto(0xaf, 0xe, 0x991b)
memfd_create$auto(&(0x7f0000000040)='IPVS\x00', 0x7)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0)
r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0)
ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0)
ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0)
ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0)
ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioprio_set$auto(0x3, 0x0, 0x4b34)
sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48010)
write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r2)
sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)

683.597283ms ago: executing program 0 (id=37):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram0\x00', 0x16f300, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, 0x2, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/disk\x00', 0xc0082, 0x0)
write$auto(r1, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,D\xbf&\x9eb|\n\xee\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbb\xbb\xf9\xcdz\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x1d\x88mr\xfd\xf1\x1b;\xabt\xd1a}\x10\xab\xeb_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\x15/\xf9\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\aA\xe9(\x00\x00\x00\x00\x00N\xb5J\xc8A\xc7m\xbf\x19\xae\x9d\xcaR\x0f\xa8\xdf\xe4M\xe1>k\x93\x01\xe5\xba(\x96K\xc1=d3\xe00u\"`]\xb3\x11a\x1cSn\xe7\x87\x84\x93\xe4\x90]\x86\x10\xe5\xacK\x99\xc1$\x91\x05\x00\x00\x00O\x01xc\xa8\x9a\x1bK\x00\x00\xf6\xa2\x8a\x7f4\f[BLH$6\xfb,\xd8\xd3\xd0\xa1v\x14\xcd\x1a\xbdx\xaed\x9d\\\xd0\xff\xd2Y\xc4\x9fT\xb2\xd5\r\xf1#\xd5\xf2\x9cU\xd1:+\xb63\xae\xc1\xf7\xe1\xd4\x879?\xdd\xd6\xd4\xa3\xc7\xd8 S\xfc:\xe1{\x16\\h\x9d\xbc#KEC\x1a\xf9KH`\x82e:_\x9b\xf1\xc1\x8e\xf0\xc46\x98\xd6u\x90\x18\x8f\xe8\xc3%\x8e9\xab\x7f\x0e\n\xb2\xa4\xef\x90\xb16\x04\xbc\xc9\xdc\xad,\xcc\xad}DY\x1d\x1fv\x90\x97u\xa1\xfb\x13\xa93\xb6XJ\x84\xe3\xc1)\x98\xae5q\xa5L\x87\x1aq\x1d0\xf1\xcb\xe5\xf4F!*\xf9\xb3,w\"\xf2\xd0\xd1Vj\xd0\x06\xcc\xbc\xee0\x98.\xd9dC\x8e9\xfdM\\\xc5&\\\x9b\x81\x88t\xa4\x9f\xd1P\xd2e\x9c\xf9\xd2\xaf\x00'/478, 0xb)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000100"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r2, 0x8000)
madvise$auto(0x0, 0x400053, 0x9)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
r3 = socketcall$auto(0x8000ffa, 0x0)
fcntl$auto(0x8000000000000001, 0x5, 0x8)
close_range$auto(0x2, 0xa, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0x4020ae76, r3)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x14, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES8=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x4, 0x0)
sendfile$auto(0x3, r0, 0x0, 0x400000000006)
shutdown$auto(0x200000003, 0x2)

525.644731ms ago: executing program 3 (id=38):
r0 = socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6d)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
sendmmsg$auto(r0, 0x0, 0x9, 0x1)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x181081, 0x0)
r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000000c0), r0)
sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400f8b87c9791417cda88ee1c35660b190000", @ANYRES16=r1, @ANYBLOB="000a29bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x41)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80)
bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0xad, 0x8, <r4=>0xffffffffffffffff, @relative_fd=r2, 0xfffffffffffff8e8}, 0x7)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/bond_slave_1/base_reachable_time_ms\x00', 0x40001, 0x0)
connect$auto(r4, &(0x7f0000000080)=@l2={0x1f, 0x8, @none, 0x9e}, 0x50)
io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x6, 0x0, 0x18)
keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x5, 0xffffffffffffffff, 0x0, 0x0, 0x101)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x0, 0xa, 0xac, 0xfff8, 0xfffffffe, 0x0})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r5, 0x110, 0x7, 0x0, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x800064c1, 0xffffffffffffffff)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
pidfd_open$auto(0x1, 0x0)

487.482267ms ago: executing program 2 (id=39):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
io_uring_register$auto_IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f00000000c0)="2fa03ca714c8a8334df365f19121f526a63590b2f1ddf6180a1e2c8d03e7b1d8d0e449f0df", 0xfffffff9)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x28000880)
ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080))

88.754862ms ago: executing program 2 (id=40):
ioctl$auto_BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000040)={0x2143, 0xffffffffffffffff, @start={0x4, 0xd7, "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", "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"}, [0xfc, 0x4, 0x10001, 0x8, 0x7, 0x7, 0xff, 0x7f39, 0x9, 0x2e, 0x0, 0x33, 0x6, 0x7, 0x4, 0x3, 0x400, 0x8, 0x5, 0x0, 0xd667, 0x401, 0x8, 0x7f, 0x8, 0x80, 0x100000000000000, 0x5, 0x10000, 0x8, 0x401, 0x8, 0x1, 0x8, 0x4, 0x1000, 0x5, 0x8c, 0xe74, 0xf, 0xe, 0x1, 0x8, 0x5, 0xb5a, 0xf, 0x2, 0xbc9, 0xf, 0x8, 0x60eaa63, 0x4, 0x7f, 0xa2, 0x2, 0x100000000, 0x9, 0xa8, 0x7, 0x8, 0x0, 0x3, 0x80, 0x2]})
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0)
read$auto(r0, 0x0, 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000ac0), 0xa400, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r2, 0x40085503, &(0x7f0000000b00)={0x0, 0x400, 0x8001, "f025e5d8773d43869f4c9162647f2036ab8d20264aef150f83e7e880e9b320e2386cd2c0506de979c958b7d1584dc7735ad203149f30836350cb5be7adc757bc9f9771a88d0e3729395d28b66ad20566284bb4d88851dde06c311be9e105a8dfbb4fa34d540f6ca50ac7c868d478868acff648ad72032bccf2b30fa7381e30c241de6510c68a858dd31bd07c0b72ae9b1b8e35becda94dbbc25efbcaf663b50b9c45306fe881a33478b62d08c61c3f7012d861a4cabadf06d2200beeddde5b523d3285a579c8407fb02d55c6feee440401879c0bdf0a9c6e35c814524c7e81082b0126a55d84d7e1237566"})
r3 = io_uring_setup$auto(0x86, 0x0)
r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0)
ioctl$auto(r4, 0xc0205647, r3)
close_range$auto(0x2, r3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), r3)
r5 = gettid()
kill$auto(r5, 0x11)
sendmsg$auto_NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x800)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, 0x0, 0xc800)
r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0)
write$auto_console_fops_tty_io(r7, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vlan0\x00'})
writev$auto(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xb}, 0x3)

0s ago: executing program 3 (id=41):
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={<r0=>0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x5}, 0xef)
r1 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r2, 0x29, 0x18, &(0x7f0000000040)='!\x00', 0x1ff)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
sendmsg$auto_NL80211_CMD_CONNECT(r1, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc090)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
futex$auto(0x0, 0x88, 0x7, 0x0, 0x0, 0x5)
socket(0x2b, 0x5, 0xfffffffd)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
prctl$auto(0x38, 0x3, r0, 0x2, 0x3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r4, r4, 0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000)
r5 = socket(0x23, 0x2, 0x0)
shmctl$auto_SHM_INFO(0xfffffff8, 0xe, 0x0)
ioctl$auto(r5, 0x89ef, 0x74)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
bpf$auto(0x0, 0x0, 0x6f3)
mmap$auto(0xf000, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
close_range$auto(0x2, 0x8, 0x0)

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   63.319817][ T5291] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.341745][ T5291] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts.
syzkaller login: [   89.830909][ T5617] cgroup: Unknown subsys name 'net'
[   89.963557][ T5617] cgroup: Unknown subsys name 'cpuset'
[   89.975835][ T5617] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   91.806728][ T5617] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   94.325868][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.343210][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.353041][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.362369][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.387543][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.396024][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   94.423053][ T5645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   94.430199][ T5643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.447705][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.453931][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   94.462426][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.471111][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.479511][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   94.488624][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.496640][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.505837][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   94.507093][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.514132][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.524733][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   94.539352][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   96.207970][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.215712][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.223303][ T5628] bridge_slave_0: entered allmulticast mode
[   96.230832][ T5628] bridge_slave_0: entered promiscuous mode
[   96.283149][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.290656][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.297840][ T5628] bridge_slave_1: entered allmulticast mode
[   96.306026][ T5628] bridge_slave_1: entered promiscuous mode
[   96.415047][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.430324][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.516242][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.523708][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.531604][ T5634] bridge_slave_0: entered allmulticast mode
[   96.539467][ T5634] bridge_slave_0: entered promiscuous mode
[   96.550146][ T5635] Bluetooth: hci0: command tx timeout
[   96.575591][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.582937][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.590876][ T5633] bridge_slave_0: entered allmulticast mode
[   96.598413][ T5633] bridge_slave_0: entered promiscuous mode
[   96.606066][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.613794][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.621414][ T5634] bridge_slave_1: entered allmulticast mode
[   96.629394][ T5634] bridge_slave_1: entered promiscuous mode
[   96.638259][ T5641] Bluetooth: hci2: command tx timeout
[   96.638267][ T5643] Bluetooth: hci1: command tx timeout
[   96.644771][ T5635] Bluetooth: hci3: command tx timeout
[   96.659636][ T5628] team0: Port device team_slave_0 added
[   96.665816][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.673092][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.681814][ T5632] bridge_slave_0: entered allmulticast mode
[   96.689532][ T5632] bridge_slave_0: entered promiscuous mode
[   96.697075][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.704529][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.711969][ T5633] bridge_slave_1: entered allmulticast mode
[   96.719621][ T5633] bridge_slave_1: entered promiscuous mode
[   96.754027][ T5628] team0: Port device team_slave_1 added
[   96.760538][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.767753][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.775060][ T5632] bridge_slave_1: entered allmulticast mode
[   96.783000][ T5632] bridge_slave_1: entered promiscuous mode
[   96.853822][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.866325][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.879424][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.903530][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.915705][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.937313][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.944603][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.971496][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.986091][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.019597][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.026659][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.053021][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.089945][ T5634] team0: Port device team_slave_0 added
[   97.117693][ T5633] team0: Port device team_slave_0 added
[   97.126035][ T5634] team0: Port device team_slave_1 added
[   97.147890][ T5632] team0: Port device team_slave_0 added
[   97.156289][ T5633] team0: Port device team_slave_1 added
[   97.201198][ T5632] team0: Port device team_slave_1 added
[   97.219559][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.227019][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.253774][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.265744][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.274924][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.302377][   T24] cfg80211: failed to load regulatory.db
[   97.302383][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.346099][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.353289][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.380271][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.407257][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.414290][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.441319][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.472910][ T5628] hsr_slave_0: entered promiscuous mode
[   97.479825][ T5628] hsr_slave_1: entered promiscuous mode
[   97.503289][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.510630][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.536722][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.549635][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.556642][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.583129][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.635704][ T5633] hsr_slave_0: entered promiscuous mode
[   97.643347][ T5633] hsr_slave_1: entered promiscuous mode
[   97.650198][ T5633] debugfs: 'hsr0' already exists in 'hsr'
[   97.656028][ T5633] Cannot create hsr debugfs directory
[   97.749951][ T5634] hsr_slave_0: entered promiscuous mode
[   97.756635][ T5634] hsr_slave_1: entered promiscuous mode
[   97.763086][ T5634] debugfs: 'hsr0' already exists in 'hsr'
[   97.769095][ T5634] Cannot create hsr debugfs directory
[   97.781218][ T5632] hsr_slave_0: entered promiscuous mode
[   97.788990][ T5632] hsr_slave_1: entered promiscuous mode
[   97.795489][ T5632] debugfs: 'hsr0' already exists in 'hsr'
[   97.801430][ T5632] Cannot create hsr debugfs directory
[   98.311261][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   98.330113][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.342169][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   98.353305][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.362501][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   98.374216][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.383707][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   98.394606][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.480620][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.492746][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.502459][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.514713][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.523507][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.535428][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.550315][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.561510][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.639485][ T5643] Bluetooth: hci0: command tx timeout
[   98.672185][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   98.682406][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.695675][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   98.707228][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.710453][ T5641] Bluetooth: hci2: command tx timeout
[   98.716353][ T5635] Bluetooth: hci3: command tx timeout
[   98.719822][ T5643] Bluetooth: hci1: command tx timeout
[   98.749103][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   98.761419][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.770087][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   98.780732][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.885989][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.897532][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.914142][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.924861][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.937948][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.947847][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.956613][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   98.967034][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   99.055433][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.102072][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.142373][ T5628] 8021q: adding VLAN 0 to HW filter on device team0
[   99.172588][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.180966][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.207517][ T5633] 8021q: adding VLAN 0 to HW filter on device team0
[   99.233333][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.240963][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.278940][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.287004][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.319970][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.327168][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.352664][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.425086][ T5632] 8021q: adding VLAN 0 to HW filter on device team0
[   99.464142][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.483422][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.490723][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.515592][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.522852][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.628860][ T5634] 8021q: adding VLAN 0 to HW filter on device team0
[   99.666362][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.673895][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.761480][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.768732][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.404908][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.609117][ T5628] veth0_vlan: entered promiscuous mode
[  100.661331][ T5628] veth1_vlan: entered promiscuous mode
[  100.715559][ T5635] Bluetooth: hci0: command tx timeout
[  100.759100][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.791059][ T5635] Bluetooth: hci2: command tx timeout
[  100.791803][ T5643] Bluetooth: hci3: command tx timeout
[  100.802412][ T5641] Bluetooth: hci1: command tx timeout
[  100.834946][ T5628] veth0_macvtap: entered promiscuous mode
[  100.861376][ T5628] veth1_macvtap: entered promiscuous mode
[  100.987915][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.027350][ T5633] veth0_vlan: entered promiscuous mode
[  101.062795][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.090917][ T5633] veth1_vlan: entered promiscuous mode
[  101.126849][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.140305][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.156631][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.170628][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.180416][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.216600][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.332894][ T5633] veth0_macvtap: entered promiscuous mode
[  101.385710][ T5633] veth1_macvtap: entered promiscuous mode
[  101.407069][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.416524][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.463011][ T5632] veth0_vlan: entered promiscuous mode
[  101.496338][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.501716][ T5634] veth0_vlan: entered promiscuous mode
[  101.506450][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.527431][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.542526][ T5634] veth1_vlan: entered promiscuous mode
[  101.557288][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.566963][ T5632] veth1_vlan: entered promiscuous mode
[  101.622051][ T1125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.634078][ T1125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.648873][ T1125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.658062][ T1125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.700163][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  101.805170][ T5632] veth0_macvtap: entered promiscuous mode
[  101.836911][ T5634] veth0_macvtap: entered promiscuous mode
[  101.894715][ T5632] veth1_macvtap: entered promiscuous mode
[  101.921555][ T5634] veth1_macvtap: entered promiscuous mode
[  101.926871][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.926900][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.030864][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.036162][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.036194][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.037987][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.075854][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.086947][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.177186][ T1125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.202969][ T1125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.212360][ T1125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.259898][ T1125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.298742][ T1125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.340268][ T1125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.357402][ T1125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.394002][ T1125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.644169][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.664305][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.788900][ T5641] Bluetooth: hci0: command tx timeout
[  102.805769][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.834257][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.865161][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.875569][ T5641] Bluetooth: hci1: command tx timeout
[  102.882201][ T5643] Bluetooth: hci3: command tx timeout
[  102.883308][ T5635] Bluetooth: hci2: command tx timeout
[  102.889923][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.947101][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.974948][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.246027][ T5798] FAULT_INJECTION: forcing a failure.
[  103.246027][ T5798] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  103.309608][ T5798] CPU: 0 UID: 0 PID: 5798 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) 
[  103.309651][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  103.309680][ T5798] Call Trace:
[  103.309691][ T5798]  <TASK>
[  103.309703][ T5798]  dump_stack_lvl+0x100/0x190
[  103.309747][ T5798]  should_fail_ex.cold+0x5/0xa
[  103.309795][ T5798]  _copy_to_user+0x32/0xd0
[  103.309838][ T5798]  simple_read_from_buffer+0xcb/0x170
[  103.309880][ T5798]  proc_fail_nth_read+0x1af/0x230
[  103.309933][ T5798]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  103.309989][ T5798]  ? rw_verify_area+0xce/0x6d0
[  103.310021][ T5798]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  103.310073][ T5798]  vfs_read+0x1e4/0xb30
[  103.310115][ T5798]  ? __pfx_vfs_read+0x10/0x10
[  103.310150][ T5798]  ? __fget_files+0x215/0x3d0
[  103.310196][ T5798]  ? __fget_files+0x21f/0x3d0
[  103.310243][ T5798]  ksys_read+0x12a/0x250
[  103.310280][ T5798]  ? __pfx_ksys_read+0x10/0x10
[  103.310321][ T5798]  ? rcu_is_watching+0x12/0xc0
[  103.310366][ T5798]  do_syscall_64+0x10b/0xf80
[  103.310394][ T5798]  ? clear_bhb_loop+0x40/0x90
[  103.310432][ T5798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.310464][ T5798] RIP: 0033:0x7fabb135d68e
[  103.310490][ T5798] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  103.310519][ T5798] RSP: 002b:00007fabaf5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  103.310555][ T5798] RAX: ffffffffffffffda RBX: 00007fabaf5f66c0 RCX: 00007fabb135d68e
[  103.310576][ T5798] RDX: 000000000000000f RSI: 00007fabaf5f60a0 RDI: 0000000000000005
[  103.310595][ T5798] RBP: 00007fabaf5f6090 R08: 0000000000000000 R09: 0000000000000000
[  103.310614][ T5798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.310633][ T5798] R13: 00007fabb1616038 R14: 00007fabb1615fa0 R15: 00007fff8d561018
[  103.310679][ T5798]  </TASK>
[  103.611288][   T30] audit: type=1800 audit(1779555756.196:2): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  103.766319][ T5812] netlink: 354 bytes leftover after parsing attributes in process `syz.2.3'.
[  103.777485][ T5812] Zero length message leads to an empty skb
[  103.952023][ T5819] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  104.273387][ T5815] netlink: 'syz.0.8': attribute type 11 has an invalid length.
[  104.301600][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[  105.799877][ T5848] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  106.713662][ T5873] process 'syz.0.17' launched './file0' with NULL argv: empty string added
[  107.043103][ T5876] netlink: 'syz.3.18': attribute type 11 has an invalid length.
[  107.927275][ T5895] mmap: syz.1.20 (5895) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  108.137490][ T5900] netlink: 342 bytes leftover after parsing attributes in process `syz.3.21'.
[  108.742816][ T5873] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  108.892380][ T5908] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  110.960268][ T5942] Invalid ELF header magic: != ELF
[  111.656845][ T5937] netlink: 'syz.3.29': attribute type 11 has an invalid length.
[  111.680458][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'.
[  115.751425][ T6027] ==================================================================
[  115.751447][ T6027] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60
[  115.751518][ T6027] Write of size 8 at addr ffffc90004aa9120 by task syz.2.40/6027
[  115.751546][ T6027] 
[  115.751566][ T6027] CPU: 1 UID: 0 PID: 6027 Comm: syz.2.40 Not tainted syzkaller #0 PREEMPT(full) 
[  115.751603][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  115.751624][ T6027] Call Trace:
[  115.751634][ T6027]  <TASK>
[  115.751646][ T6027]  dump_stack_lvl+0x100/0x190
[  115.751687][ T6027]  print_report+0x13d/0x4b0
[  115.751722][ T6027]  ? _raw_spin_lock_irqsave+0x52/0x60
[  115.751762][ T6027]  ? sys_imageblit+0x19fb/0x1d60
[  115.751800][ T6027]  kasan_report+0xdf/0x1d0
[  115.751828][ T6027]  ? sys_imageblit+0x19fb/0x1d60
[  115.751869][ T6027]  sys_imageblit+0x19fb/0x1d60
[  115.751911][ T6027]  ? __pfx_sys_imageblit+0x10/0x10
[  115.751951][ T6027]  ? prb_read_valid+0x78/0xa0
[  115.751978][ T6027]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  115.752010][ T6027]  soft_cursor+0x524/0xa10
[  115.752044][ T6027]  ? atomic_notifier_call_chain+0x80/0x1c0
[  115.752083][ T6027]  ? fb_get_color_depth+0x120/0x250
[  115.752114][ T6027]  bit_cursor+0xca1/0x1490
[  115.752149][ T6027]  ? __pfx_bit_cursor+0x10/0x10
[  115.752180][ T6027]  ? __lock_acquire+0x4a5/0x2630
[  115.752205][ T6027]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  115.752242][ T6027]  ? get_color+0x1da/0x450
[  115.752267][ T6027]  ? __pfx_bit_cursor+0x10/0x10
[  115.752297][ T6027]  fbcon_cursor+0x43c/0x5e0
[  115.752324][ T6027]  ? add_softcursor+0x190/0x290
[  115.752359][ T6027]  set_cursor+0x1db/0x250
[  115.752392][ T6027]  con_write+0x89/0xb0
[  115.752413][ T6027]  n_tty_write+0x431/0x11c0
[  115.752447][ T6027]  ? __pfx_n_tty_write+0x10/0x10
[  115.752474][ T6027]  ? trace_kmalloc+0xe3/0x110
[  115.752508][ T6027]  ? __pfx_woken_wake_function+0x10/0x10
[  115.752539][ T6027]  ? rcu_is_watching+0x12/0xc0
[  115.752568][ T6027]  ? file_tty_write.isra.0+0x694/0x890
[  115.752606][ T6027]  ? kfree+0x1dd/0x6c0
[  115.752640][ T6027]  ? __pfx_n_tty_write+0x10/0x10
[  115.752668][ T6027]  file_tty_write.isra.0+0x4d2/0x890
[  115.752710][ T6027]  redirected_tty_write+0xd4/0x120
[  115.752751][ T6027]  vfs_write+0x6ac/0x1070
[  115.752779][ T6027]  ? __pfx_redirected_tty_write+0x10/0x10
[  115.752819][ T6027]  ? __pfx_vfs_write+0x10/0x10
[  115.752845][ T6027]  ? find_held_lock+0x2b/0x80
[  115.752886][ T6027]  ksys_write+0x12a/0x250
[  115.752912][ T6027]  ? __pfx_ksys_write+0x10/0x10
[  115.752941][ T6027]  ? rcu_is_watching+0x12/0xc0
[  115.752972][ T6027]  do_syscall_64+0x10b/0xf80
[  115.752993][ T6027]  ? clear_bhb_loop+0x40/0x90
[  115.753020][ T6027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.753044][ T6027] RIP: 0033:0x7fd681f9ce59
[  115.753063][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.753087][ T6027] RSP: 002b:00007fd682ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  115.753109][ T6027] RAX: ffffffffffffffda RBX: 00007fd682215fa0 RCX: 00007fd681f9ce59
[  115.753125][ T6027] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004
[  115.753140][ T6027] RBP: 00007fd682032d6f R08: 0000000000000000 R09: 0000000000000000
[  115.753154][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.753169][ T6027] R13: 00007fd682216038 R14: 00007fd682215fa0 R15: 00007ffd9f81ad18
[  115.753192][ T6027]  </TASK>
[  115.753200][ T6027] 
[  115.753206][ T6027] The buggy address belongs to a vmalloc virtual mapping
[  115.753237][ T6027] Memory state around the buggy address:
[  115.753249][ T6027]  ffffc90004aa9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  115.753270][ T6027]  ffffc90004aa9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  115.753287][ T6027] >ffffc90004aa9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  115.753300][ T6027]                                ^
[  115.753312][ T6027]  ffffc90004aa9180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  115.753329][ T6027]  ffffc90004aa9200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  115.753342][ T6027] ==================================================================
[  115.768569][ T6027] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  115.768596][ T6027] CPU: 1 UID: 0 PID: 6027 Comm: syz.2.40 Not tainted syzkaller #0 PREEMPT(full) 
[  115.768635][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  115.768655][ T6027] Call Trace:
[  115.768666][ T6027]  <TASK>
[  115.768680][ T6027]  dump_stack_lvl+0x100/0x190
[  115.768720][ T6027]  vpanic+0x552/0x970
[  115.768754][ T6027]  ? __pfx_vpanic+0x10/0x10
[  115.768788][ T6027]  ? mark_held_locks+0x40/0x70
[  115.768825][ T6027]  ? sys_imageblit+0x19fb/0x1d60
[  115.768878][ T6027]  panic+0xd1/0xe0
[  115.768913][ T6027]  ? __pfx_panic+0x10/0x10
[  115.768945][ T6027]  ? sys_imageblit+0x19fb/0x1d60
[  115.768998][ T6027]  ? preempt_schedule_common+0x42/0xc0
[  115.769055][ T6027]  check_panic_on_warn.cold+0x19/0x34
[  115.769090][ T6027]  end_report.part.0+0x3a/0x90
[  115.769137][ T6027]  kasan_report.cold+0xe/0x18
[  115.769186][ T6027]  ? sys_imageblit+0x19fb/0x1d60
[  115.769241][ T6027]  sys_imageblit+0x19fb/0x1d60
[  115.769298][ T6027]  ? __pfx_sys_imageblit+0x10/0x10
[  115.769354][ T6027]  ? prb_read_valid+0x78/0xa0
[  115.769392][ T6027]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  115.769437][ T6027]  soft_cursor+0x524/0xa10
[  115.769494][ T6027]  ? atomic_notifier_call_chain+0x80/0x1c0
[  115.769552][ T6027]  ? fb_get_color_depth+0x120/0x250
[  115.769595][ T6027]  bit_cursor+0xca1/0x1490
[  115.769646][ T6027]  ? __pfx_bit_cursor+0x10/0x10
[  115.769691][ T6027]  ? __lock_acquire+0x4a5/0x2630
[  115.769727][ T6027]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  115.769780][ T6027]  ? get_color+0x1da/0x450
[  115.769816][ T6027]  ? __pfx_bit_cursor+0x10/0x10
[  115.769859][ T6027]  fbcon_cursor+0x43c/0x5e0
[  115.769897][ T6027]  ? add_softcursor+0x190/0x290
[  115.769946][ T6027]  set_cursor+0x1db/0x250
[  115.769993][ T6027]  con_write+0x89/0xb0
[  115.770025][ T6027]  n_tty_write+0x431/0x11c0
[  115.770073][ T6027]  ? __pfx_n_tty_write+0x10/0x10
[  115.770111][ T6027]  ? trace_kmalloc+0xe3/0x110
[  115.770151][ T6027]  ? __pfx_woken_wake_function+0x10/0x10
[  115.770193][ T6027]  ? rcu_is_watching+0x12/0xc0
[  115.770233][ T6027]  ? file_tty_write.isra.0+0x694/0x890
[  115.770286][ T6027]  ? kfree+0x1dd/0x6c0
[  115.770334][ T6027]  ? __pfx_n_tty_write+0x10/0x10
[  115.770375][ T6027]  file_tty_write.isra.0+0x4d2/0x890
[  115.770433][ T6027]  redirected_tty_write+0xd4/0x120
[  115.770497][ T6027]  vfs_write+0x6ac/0x1070
[  115.770539][ T6027]  ? __pfx_redirected_tty_write+0x10/0x10
[  115.770596][ T6027]  ? __pfx_vfs_write+0x10/0x10
[  115.770632][ T6027]  ? find_held_lock+0x2b/0x80
[  115.770686][ T6027]  ksys_write+0x12a/0x250
[  115.770723][ T6027]  ? __pfx_ksys_write+0x10/0x10
[  115.770765][ T6027]  ? rcu_is_watching+0x12/0xc0
[  115.770808][ T6027]  do_syscall_64+0x10b/0xf80
[  115.770839][ T6027]  ? clear_bhb_loop+0x40/0x90
[  115.770877][ T6027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.770912][ T6027] RIP: 0033:0x7fd681f9ce59
[  115.770939][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.770973][ T6027] RSP: 002b:00007fd682ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  115.771006][ T6027] RAX: ffffffffffffffda RBX: 00007fd682215fa0 RCX: 00007fd681f9ce59
[  115.771029][ T6027] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004
[  115.771049][ T6027] RBP: 00007fd682032d6f R08: 0000000000000000 R09: 0000000000000000
[  115.771070][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.771090][ T6027] R13: 00007fd682216038 R14: 00007fd682215fa0 R15: 00007ffd9f81ad18
[  115.771120][ T6027]  </TASK>
[  115.771291][ T6027] Kernel Offset: disabled