last executing test programs:

10.869015309s ago: executing program 2 (id=327):
mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
sysfs$auto(0x2, 0x23, 0x0)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, 0x0, 0x3)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000)
shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db4102", &(0x7f0000000240)})
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
shutdown$auto(0x200000003, 0x2)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/251, 0xfb)
close_range$auto(0x2, r0, 0x6)
socket(0x2, 0x80002, 0x73)
openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000004c0)="e3188176b96f56170e647ad5b75e3e9d5b25824af2509ae55ed5ee191ee9257ac48ac1e8c7ca249fdb72092d4d6cb4b85c6e5e63af6e6386605a2acad0c973ffc78036fb03e7317159be64a299df97910013248ab5d114aa9179182bc486b00af747556837f9ef96271ce9d8c9987a0c8f56", 0x72)

9.90109752s ago: executing program 2 (id=329):
r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x4000, 0x0)
fsetxattr$auto(r0, &(0x7f0000000200)='*,{:}{{*\x00', &(0x7f0000000240)="d7f63a0a1536873db32404dbd31639b80bb07fb2046c6b4106d3849e0ef09e349d847569f9cfbcd7621925a4270e9768f7832d8caab2", 0x100, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x8000000000002, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9)
sendmmsg$auto(r1, 0x0, 0x20009a6, 0x3)
close_range$auto(0x2, 0x8, 0x0)
rseq$auto(&(0x7f00000001c0)={0xe, 0xfffffff7, 0x1, 0x9, 0xffffffff, 0x9}, 0x8000, 0x0, 0x6)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0)
bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r3, 0x454f, 0xfff, 0x0, 0x0, r2, 0x80000000}, 0x6d4)
flock$auto(r2, 0xc6)
r4 = open(0x0, 0x4242, 0x59)
flock$auto(r4, 0x6)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc)
ioctl$auto_RTC_UIE_ON(r5, 0x7003, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x7fffffff, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff9, 0x0, 0x0, 0x80000, 0x4, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x90, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000)
r6 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)

8.349407799s ago: executing program 2 (id=334):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800)
getcwd$auto(&(0x7f0000000000)='\x00', 0xc0000000000000)
unshare$auto(0x40000080)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0xf4, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_WIPHY_NAME={0x8, 0x2, '/${\x00'}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}, @NL80211_ATTR_HT_CAPABILITY={0x45, 0x1f, "ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e9"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x5c, 0x75, 0x0, 0x1, [@generic="ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f81b", @typed={0x8, 0x138, 0x0, 0x0, @u32=0x400}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r1}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0xf4}, 0x1, 0x0, 0x0, 0x91}, 0x10)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0)
mlockall$auto(0x7)
mprotect$auto(0x0, 0x806121, 0x6)
bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa)
ptrace$auto(0x10, r0, 0x2, 0x1007ff)
ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x2, 0x9193)

7.48705733s ago: executing program 0 (id=336):
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5')
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000280)=0xc9e, 0x400, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
capset$auto(0x0, 0x0)
getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/numa_maps\x00', 0x20000, 0x0)
read$auto_proc_sessionid_operations_base(r1, &(0x7f00000000c0)=""/4073, 0xfe9)
finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004)
pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11\x89\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv6/conf/wg0/hop_limit\x00', 0xc8202, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
writev$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x2}, 0x2000000000000003)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

7.295223806s ago: executing program 2 (id=338):
unshare$auto(0x40000080)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0)
pwrite64$auto(r0, &(0x7f0000000000)='/proc/sys/net/ipv6/coX\t/all/forwarding\x00', 0x4, 0x2)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x6)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x9, 0xd, 0xffc3)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES16, @ANYBLOB="000000000000000000000010fa2e0f0be0c5f3c315ae5dc610c18c19edbdc0009fb5b97975fac6f30e9926bd78b10a0329dd90727197a0c8d22505c3c0b61a9c5f78cf706d41a52780fd317de69d92a02b10f87e5b816c65e8f83b4153e2fcefbe68783c4905d3c6cdc899e018b111d3222d108d113728260b15b6871ed214ae640d36a8ddfb79371ce9facf0725017160637d6cdba1b95b6e054a0f5b1ab8e861da269f8997c734a7c40e66a92d042527a47607b1666d6bafe0168e5e164eccdd4d1a44dcbb105143c564c56a4e40b143358ccaf00841c0df82bfef966a84d7bf937597d2bfd426ab2f3842785e690a305ac85659b3724b099a3722b37745876bdc2fd8939e1a622b080f24135f96426dd69a17a03859bd83f9acf1eaad720eaffd384c992b253d950635df3c2ca2f45fce31ac54b11bfe0a307865b0661352946afe32aa2266059d93f0db35f9e5bbbe3bf8e7c0915928cf577141cefa984d155d80963548da01f1f479e6ff3265690cff2e1af1321ba9a43cf185d62fd988f09b40b7f9a370f6624e2c5283a93a3838baa34a38fc70605f176571035004578cfda147ea561f9993c4f8b086fa1517d3868fac79a551666ed92174adb3a1a9a5c9b7dd"], 0x14}}, 0x24048004)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/pagemap\x00', 0x400000, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x6, 0x0, 0x5, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x802, 0x0)
r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x6, 0xb74, 0x5)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto_proc_pid_maps_operations_internal(r3, &(0x7f00000020c0)=""/4093, 0xffd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8401, 0x0)

6.169876817s ago: executing program 0 (id=340):
mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffc10, 0xffffffffffffffff, 0x800008000)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r1 = fcntl$auto(r0, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff)
fcntl$auto(0x3, 0x4, 0xa553)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cpu.pressure\x00', 0x183142, 0x0)
sendfile$auto(r1, r2, 0x0, 0xc01)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)
keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
r3 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0)
ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x2, 0x8000000000000000}, {0x5, 0x5, 0x2}, {0xa6, 0x1, 0x2}])
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
statmount$auto(0x0, 0x0, 0x1fe, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x51c, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e)
mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000)
r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r4, &(0x7f0000000840)="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", 0xdd4)
write$auto(0x3, 0x0, 0xfffffdef)

6.121325565s ago: executing program 1 (id=341):
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
write$auto(r0, 0x0, 0x2)
getrlimit$auto(0x3, 0x0)
fdatasync$auto(r0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';')
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

5.547182053s ago: executing program 0 (id=342):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x222101, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r0, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084)
madvise$auto(0x9, 0x200007, 0x800)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}})
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x9, 0x0)

5.45411686s ago: executing program 3 (id=343):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_total_time_ms\x00', 0x0, 0x0)
socket(0x11, 0x2, 0x6)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0)
openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
socketpair$auto(0x4004, 0x8, 0x7, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r0, 0x400455cb, 0x0)

5.261793418s ago: executing program 2 (id=344):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800)
getcwd$auto(&(0x7f0000000000)='\x00', 0xc0000000000000)
unshare$auto(0x40000080)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x104, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, "13c366f9244357d432f6e44cc4bf4e"}, @NL80211_ATTR_WIPHY_NAME={0x8, 0x2, '/${\x00'}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}, @NL80211_ATTR_HT_CAPABILITY={0x45, 0x1f, "ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e9"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x5c, 0x75, 0x0, 0x1, [@generic="ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f81b", @typed={0x8, 0x138, 0x0, 0x0, @u32=0x400}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r1}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0x104}, 0x1, 0x0, 0x0, 0x91}, 0x10)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0)
mlockall$auto(0x7)
mprotect$auto(0x0, 0x806121, 0x6)
bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa)
ptrace$auto(0x10, r0, 0x2, 0x1007ff)
ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x2, 0x9193)

5.066323362s ago: executing program 3 (id=345):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, 0x0, 0x2000c055)
unshare$auto(0x40000080)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(r5, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xd, 0x4, 0x0, 0x1, [@nested={0x4, 0x45}, @generic="141fc94af8"]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd84697b73ae550f26f7eb", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000001140)={0xbc, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, "13c366f9244357d432f6e44cc4bf4e5878fe"}, @NL80211_ATTR_WIPHY_NAME={0x8, 0x2, '/${\x00'}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}, @NL80211_ATTR_HT_CAPABILITY={0x45, 0x1f, "ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e9"}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@typed={0xc, 0x140, 0x0, 0x0, @u64=0x3}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0xbc}, 0x1, 0x0, 0x0, 0x91}, 0x10)
ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0)
mlockall$auto(0x7)
mprotect$auto(0x0, 0x806121, 0x6)
bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4, <r7=>0xffffffffffffffff}, 0xa)
r8 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000180), r7)
sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x44000)
ptrace$auto(0x10, r0, 0x2, 0x1007ff)

4.086085696s ago: executing program 1 (id=346):
r0 = seccomp$auto(0x8, 0x9, 0x0)
fcntl$getown(r0, 0x9)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$auto_LOOP_CTL_ADD(r1, 0x4c80, 0xfffffffffffffffd)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20008, 0x4000000000df, 0x2000eb1, 0xffffffffffffffff, 0x3)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
socket(0x1d, 0x1, 0x7fff)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x4, 0x0, 0x4)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
semget$auto(0x7eb, 0xc7, 0xfffffffd)
readlinkat$auto(0x1, 0x0, 0x0, 0x16a)
mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0xa, 0x2, 0x3a)

3.659213689s ago: executing program 2 (id=347):
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2)
madvise$auto(0x0, 0x20499d, 0x9)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0x100, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
r0 = socket(0x2, 0x1, 0x106)
connect$auto(r0, 0x0, 0x54)
ioprio_set$auto(0x3, 0xffffffffffffffff, 0x4b34)
socketpair$auto(0x2, 0x5, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x1000000, 0xffffffffffff0006, 0x17)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2)
munlock$auto(0xf800000000000000, 0x100)

3.65456915s ago: executing program 3 (id=348):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0xff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
setgroups$auto(0xe32, 0x0)
write$auto(0x3, 0x0, 0xffd8)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)

3.631484037s ago: executing program 0 (id=355):
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
write$auto(r0, 0x0, 0x2)
getrlimit$auto(0x3, 0x0)
fdatasync$auto(r0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';')
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

2.492290156s ago: executing program 3 (id=349):
memfd_secret$auto(0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket(0x1a, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1)
socket(0x2b, 0x1, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mlock$auto(0x112, 0x80006)
mlockall$auto(0x800000000000005)
madvise$auto(0x0, 0x200007, 0x19)
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b394b", 0x14)
msgsnd$auto(0x0, &(0x7f0000000000)={0x40, 0x5}, 0x8, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r4 = socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

1.656947638s ago: executing program 0 (id=350):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, 0x0, 0x2000c055)
unshare$auto(0x40000080)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(r5, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xd, 0x4, 0x0, 0x1, [@nested={0x4, 0x45}, @generic="141fc94af8"]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd84697b73ae550f26f7eb", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000001140)={0xbc, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, "13c366f9244357d432f6e44cc4bf4e5878"}, @NL80211_ATTR_WIPHY_NAME={0x8, 0x2, '/${\x00'}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}, @NL80211_ATTR_HT_CAPABILITY={0x45, 0x1f, "ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e9"}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@typed={0xc, 0x140, 0x0, 0x0, @u64=0x3}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0xbc}, 0x1, 0x0, 0x0, 0x91}, 0x10)
ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0)
mlockall$auto(0x7)
mprotect$auto(0x0, 0x806121, 0x6)
bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4, <r7=>0xffffffffffffffff}, 0xa)
r8 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000180), r7)
sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x44000)
ptrace$auto(0x10, r0, 0x2, 0x1007ff)

1.654413929s ago: executing program 1 (id=351):
socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000000)=0x8)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xa, 0x0)
r0 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000180)=@token_create={0xf6f, r1}, 0xffffffff)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
mmap$auto(0xfffffffffffffffa, 0x1, 0xdf, 0xeb1, 0x401, 0x8003)
rseq$auto(0x0, 0x18, 0x5d7, 0x6)
mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r2 = gettid()
r3 = prctl$auto(0x3e, 0x1, r2, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c)
sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800)
copy_file_range$auto(0xffffffffffffffff, &(0x7f0000000340)=0x5, r3, 0x0, 0x7, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/034/001\x00', 0x802, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)})

1.245487379s ago: executing program 3 (id=352):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x4000)
sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, 0x0, 0x54)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
setreuid$auto(0x15, 0x5)
setuid$auto(0xe)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3)

1.146388074s ago: executing program 1 (id=353):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_total_time_ms\x00', 0x0, 0x0)
socket(0x11, 0x2, 0x6)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0)
openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
socketpair$auto(0x4004, 0x8, 0x7, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r0, 0x400455cb, 0x0)

941.833036ms ago: executing program 1 (id=354):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000f3dbdf2584000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
epoll_ctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
copy_file_range$auto(0xffffffffffffffff, &(0x7f0000000000)=0x6, r0, &(0x7f00000002c0)=0x616, 0x2, 0x6)
mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000)
mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0xe8)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1)
sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x7ffffff8, 0x5, 0x7, 0x5, 0x61, 0x103})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

480.712921ms ago: executing program 0 (id=356):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800)
getcwd$auto(&(0x7f0000000000)='\x00', 0xc0000000000000)
unshare$auto(0x40000080)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x104, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, "13c366f9244357d432f6e44cc4bf4e"}, @NL80211_ATTR_WIPHY_NAME={0x8, 0x2, '/${\x00'}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}, @NL80211_ATTR_HT_CAPABILITY={0x45, 0x1f, "ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e9"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x5c, 0x75, 0x0, 0x1, [@generic="ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f81b", @typed={0x8, 0x138, 0x0, 0x0, @u32=0x400}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r1}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0x104}, 0x1, 0x0, 0x0, 0x91}, 0x10)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0)
mlockall$auto(0x7)
mprotect$auto(0x0, 0x806121, 0x6)
bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa)
ptrace$auto(0x10, r0, 0x2, 0x1007ff)
ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x2, 0x9193)

306.035µs ago: executing program 1 (id=357):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
fanotify_init$auto(0x9, 0x3)
pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff)
mmap$auto(0x0, 0x7069, 0x8, 0x19, 0x401, 0x8ffd)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}})
io_uring_register$auto(0x2, 0x1d, 0x0, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000)

0s ago: executing program 3 (id=358):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
madvise$auto(0x108000, 0x800032, 0x4)
r0 = socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r2=>r1, 0x7, 0x6}, 0x7, 0x3)
r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'team_slave_0\x00', <r4=>0x0})
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000500)={0x1c, r3, 0x301, 0x70bd2e, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vlan1\x00'})
sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000008}, 0xc0000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r6, &(0x7f0000001a00)="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", 0x9cb)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
rt_sigsuspend$auto(&(0x7f00000000c0)={0x4}, 0x8)
select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0)
mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0)
read$auto(0x3, 0x0, 0xf34)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts.
[   72.119775][ T5810] cgroup: Unknown subsys name 'net'
[   72.248602][ T5810] cgroup: Unknown subsys name 'cpuset'
[   72.257631][ T5810] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.712507][ T5810] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   75.723771][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.732188][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.743780][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.765394][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.776536][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.791549][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.800927][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.810241][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.817877][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.823687][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.826790][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.834614][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.840587][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.847587][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.854349][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.861161][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.867949][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.882968][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.907192][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.920131][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.415549][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   76.535940][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   76.567867][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   76.585925][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   76.685975][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.693215][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.700630][ T5824] bridge_slave_0: entered allmulticast mode
[   76.707905][ T5824] bridge_slave_0: entered promiscuous mode
[   76.737321][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.744565][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.751817][ T5824] bridge_slave_1: entered allmulticast mode
[   76.759278][ T5824] bridge_slave_1: entered promiscuous mode
[   76.861656][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.901820][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.924921][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.932129][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.939767][ T5821] bridge_slave_0: entered allmulticast mode
[   76.947028][ T5821] bridge_slave_0: entered promiscuous mode
[   76.955345][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.962487][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.970070][ T5825] bridge_slave_0: entered allmulticast mode
[   76.977269][ T5825] bridge_slave_0: entered promiscuous mode
[   76.984625][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.991865][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.999199][ T5832] bridge_slave_0: entered allmulticast mode
[   77.006671][ T5832] bridge_slave_0: entered promiscuous mode
[   77.027007][ T5824] team0: Port device team_slave_0 added
[   77.032762][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.040290][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.047841][ T5821] bridge_slave_1: entered allmulticast mode
[   77.055098][ T5821] bridge_slave_1: entered promiscuous mode
[   77.062791][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.070439][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.077925][ T5825] bridge_slave_1: entered allmulticast mode
[   77.085544][ T5825] bridge_slave_1: entered promiscuous mode
[   77.092533][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.099874][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.107593][ T5832] bridge_slave_1: entered allmulticast mode
[   77.114740][ T5832] bridge_slave_1: entered promiscuous mode
[   77.124623][ T5824] team0: Port device team_slave_1 added
[   77.204985][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.227142][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.238973][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.251251][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.261325][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.268862][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.295154][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.309143][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.334719][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.355881][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.362846][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.388987][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.439436][ T5821] team0: Port device team_slave_0 added
[   77.447894][ T5821] team0: Port device team_slave_1 added
[   77.464468][ T5825] team0: Port device team_slave_0 added
[   77.483720][ T5832] team0: Port device team_slave_0 added
[   77.502598][ T5825] team0: Port device team_slave_1 added
[   77.521168][ T5832] team0: Port device team_slave_1 added
[   77.547551][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.554653][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.580842][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.606763][ T5824] hsr_slave_0: entered promiscuous mode
[   77.613101][ T5824] hsr_slave_1: entered promiscuous mode
[   77.630049][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.637199][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.663708][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.686639][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.694266][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.720504][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.738971][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.745985][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.772133][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.784123][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.791093][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.817550][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.849266][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.856268][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.882393][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.894323][   T51] Bluetooth: hci1: command tx timeout
[   77.973399][   T51] Bluetooth: hci2: command tx timeout
[   77.976724][ T5832] hsr_slave_0: entered promiscuous mode
[   77.979750][ T5828] Bluetooth: hci3: command tx timeout
[   77.985845][ T5832] hsr_slave_1: entered promiscuous mode
[   77.990523][ T5835] Bluetooth: hci0: command tx timeout
[   77.996605][ T5832] debugfs: 'hsr0' already exists in 'hsr'
[   78.007221][ T5832] Cannot create hsr debugfs directory
[   78.035257][ T5821] hsr_slave_0: entered promiscuous mode
[   78.041555][ T5821] hsr_slave_1: entered promiscuous mode
[   78.047840][ T5821] debugfs: 'hsr0' already exists in 'hsr'
[   78.053992][ T5821] Cannot create hsr debugfs directory
[   78.082428][ T5825] hsr_slave_0: entered promiscuous mode
[   78.088911][ T5825] hsr_slave_1: entered promiscuous mode
[   78.095144][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   78.100865][ T5825] Cannot create hsr debugfs directory
[   78.516456][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.529332][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.539338][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.558337][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.612025][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.636683][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.655297][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.680019][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.752624][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.763062][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.787685][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.817452][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.878255][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.888274][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.899841][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.924451][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.024380][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.072090][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   79.102318][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.109646][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.129694][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.145273][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.152441][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.202400][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.240138][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   79.257501][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.271551][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.278765][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.292405][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   79.319410][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.332795][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.339936][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.354677][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.361833][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.392769][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.399990][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.432124][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   79.476999][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.484318][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.506444][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.513701][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.625729][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.740821][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.875992][ T5824] veth0_vlan: entered promiscuous mode
[   79.890613][ T5824] veth1_vlan: entered promiscuous mode
[   79.976380][ T5835] Bluetooth: hci1: command tx timeout
[   79.979320][ T5824] veth0_macvtap: entered promiscuous mode
[   80.011934][ T5824] veth1_macvtap: entered promiscuous mode
[   80.053870][ T5835] Bluetooth: hci0: command tx timeout
[   80.057093][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.059391][ T5835] Bluetooth: hci3: command tx timeout
[   80.066431][ T5828] Bluetooth: hci2: command tx timeout
[   80.112876][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.123163][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.176167][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.207687][ T3510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.218636][ T3510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.240889][ T3510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.249699][ T3510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.286015][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.309696][ T5832] veth0_vlan: entered promiscuous mode
[   80.344321][ T5825] veth0_vlan: entered promiscuous mode
[   80.366511][ T5825] veth1_vlan: entered promiscuous mode
[   80.377263][ T5832] veth1_vlan: entered promiscuous mode
[   80.447333][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.463702][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.483795][ T5821] veth0_vlan: entered promiscuous mode
[   80.522811][ T5821] veth1_vlan: entered promiscuous mode
[   80.544414][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.552270][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.566392][ T5825] veth0_macvtap: entered promiscuous mode
[   80.576445][ T5832] veth0_macvtap: entered promiscuous mode
[   80.589476][ T5825] veth1_macvtap: entered promiscuous mode
[   80.607535][ T5832] veth1_macvtap: entered promiscuous mode
[   80.642571][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   80.673195][ T5821] veth0_macvtap: entered promiscuous mode
[   80.712407][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.738791][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.767074][ T5821] veth1_macvtap: entered promiscuous mode
[   80.779491][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.797119][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.820233][ T3510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.831013][ T3510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.864428][ T3510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.896466][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.913512][ T3510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.922330][ T3510] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.943616][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.951065][ T3510] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.961479][ T3510] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.014075][ T3510] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.022839][ T3510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.068826][ T3510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.093004][ T3510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.112508][ T3510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.165642][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.190894][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.213589][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.224611][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.359479][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.360260][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.384096][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.396816][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.477387][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.512667][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.601623][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.612200][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.993792][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   82.023580][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   82.055696][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   82.064671][ T5828] Bluetooth: hci1: command tx timeout
[   82.070382][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   82.078916][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   82.123448][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   82.133601][ T5828] Bluetooth: hci2: command tx timeout
[   82.133878][ T5835] Bluetooth: hci3: command tx timeout
[   82.139019][ T5828] Bluetooth: hci0: command tx timeout
[   82.354675][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   82.511664][ T5934] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   82.595535][ T5934] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.074336][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   83.134065][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   83.182004][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   83.253182][ T5954] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   83.461577][ T5954] FAULT_INJECTION: forcing a failure.
[   83.461577][ T5954] name failslab, interval 1, probability 0, space 0, times 1
[   83.517014][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(full) 
[   83.517053][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   83.517076][ T5954] Call Trace:
[   83.517085][ T5954]  <TASK>
[   83.517099][ T5954]  dump_stack_lvl+0x100/0x190
[   83.517150][ T5954]  should_fail_ex.cold+0x5/0xa
[   83.517183][ T5954]  should_failslab+0xc2/0x120
[   83.517226][ T5954]  __kvmalloc_node_noprof+0xfa/0xa00
[   83.517262][ T5954]  ? alloc_fdtable+0x110/0x2d0
[   83.517307][ T5954]  alloc_fdtable+0x110/0x2d0
[   83.517345][ T5954]  dup_fd+0x995/0xd10
[   83.517388][ T5954]  ? apparmor_task_alloc+0x2c1/0x3b0
[   83.517423][ T5954]  copy_process+0x2631/0x7a10
[   83.517473][ T5954]  ? __pfx_copy_process+0x10/0x10
[   83.517506][ T5954]  ? find_held_lock+0x2b/0x80
[   83.517562][ T5954]  kernel_clone+0xfc/0x9a0
[   83.517589][ T5954]  ? __pfx_futex_wait+0x10/0x10
[   83.517628][ T5954]  ? __pfx_kernel_clone+0x10/0x10
[   83.517674][ T5954]  __do_sys_clone+0xd9/0x120
[   83.517705][ T5954]  ? __pfx___do_sys_clone+0x10/0x10
[   83.517734][ T5954]  ? find_held_lock+0x2b/0x80
[   83.517797][ T5954]  do_syscall_64+0x106/0xf80
[   83.517844][ T5954]  ? clear_bhb_loop+0x40/0x90
[   83.517877][ T5954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.517903][ T5954] RIP: 0033:0x7fdd69d9bf79
[   83.517926][ T5954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.517951][ T5954] RSP: 002b:00007fdd6abd0fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   83.517983][ T5954] RAX: ffffffffffffffda RBX: 00007fdd6a015fa0 RCX: 00007fdd69d9bf79
[   83.518000][ T5954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004001000
[   83.518016][ T5954] RBP: 00007fdd69e327e0 R08: 0000000000000000 R09: 0000000000000000
[   83.518031][ T5954] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   83.518046][ T5954] R13: 00007fdd6a016038 R14: 00007fdd6a015fa0 R15: 00007ffff5ad13e8
[   83.518079][ T5954]  </TASK>
[   84.057727][ T5960] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   84.087448][ T5968] netlink: 350 bytes leftover after parsing attributes in process `syz.0.13'.
[   84.120022][ T5968] Zero length message leads to an empty skb
[   84.133745][ T5828] Bluetooth: hci1: command tx timeout
[   84.214171][ T5828] Bluetooth: hci3: command tx timeout
[   84.214200][ T5835] Bluetooth: hci2: command tx timeout
[   84.575881][ T5964] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   84.583001][ T5964] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   84.641504][ T5964] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   84.682820][ T5964] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   84.705002][ T5964] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   84.732051][ T5964] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   84.775441][ T5964] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   84.801455][ T5964] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   84.814831][ T5964] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   84.858882][ T5964] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   84.869018][ T5964] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   84.887726][ T5964] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   85.354682][ T5983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'.
[   85.402674][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[   85.415724][ T5990] netlink: 'syz.2.17': attribute type 1 has an invalid length.
[   85.423753][ T5990] netlink: 51505 bytes leftover after parsing attributes in process `syz.2.17'.
[   85.915472][ T6000] FAULT_INJECTION: forcing a failure.
[   85.915472][ T6000] name failslab, interval 1, probability 0, space 0, times 0
[   85.977498][ T6000] CPU: 0 UID: 0 PID: 6000 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) 
[   85.977528][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   85.977537][ T6000] Call Trace:
[   85.977542][ T6000]  <TASK>
[   85.977549][ T6000]  dump_stack_lvl+0x100/0x190
[   85.977575][ T6000]  should_fail_ex.cold+0x5/0xa
[   85.977593][ T6000]  should_failslab+0xc2/0x120
[   85.977615][ T6000]  kmem_cache_alloc_noprof+0x7b/0x6e0
[   85.977633][ T6000]  ? dup_fd+0x4d/0xd10
[   85.977652][ T6000]  ? trace_kmalloc+0x101/0x130
[   85.977676][ T6000]  dup_fd+0x4d/0xd10
[   85.977698][ T6000]  ? apparmor_task_alloc+0x2c1/0x3b0
[   85.977717][ T6000]  copy_process+0x2631/0x7a10
[   85.977743][ T6000]  ? __pfx_copy_process+0x10/0x10
[   85.977768][ T6000]  kernel_clone+0xfc/0x9a0
[   85.977787][ T6000]  ? __pfx_futex_wait+0x10/0x10
[   85.977806][ T6000]  ? madvise_unlock+0x172/0x220
[   85.977829][ T6000]  ? __pfx_kernel_clone+0x10/0x10
[   85.977855][ T6000]  __do_sys_clone+0xd9/0x120
[   85.977871][ T6000]  ? __pfx___do_sys_clone+0x10/0x10
[   85.977888][ T6000]  ? find_held_lock+0x2b/0x80
[   85.977925][ T6000]  do_syscall_64+0x106/0xf80
[   85.977946][ T6000]  ? clear_bhb_loop+0x40/0x90
[   85.977963][ T6000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.977978][ T6000] RIP: 0033:0x7f25e619bf79
[   85.977991][ T6000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.978004][ T6000] RSP: 002b:00007f25e6f7afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   85.978019][ T6000] RAX: ffffffffffffffda RBX: 00007f25e6415fa0 RCX: 00007f25e619bf79
[   85.978028][ T6000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004001000
[   85.978036][ T6000] RBP: 00007f25e62327e0 R08: 0000000000000000 R09: 0000000000000000
[   85.978045][ T6000] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   85.978053][ T6000] R13: 00007f25e6416038 R14: 00007f25e6415fa0 R15: 00007fff76e6e338
[   85.978072][ T6000]  </TASK>
[   86.191106][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout
[   86.693894][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout
[   86.857167][ T6015] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   86.867195][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout
[   86.876731][ T6015] ubi0: attaching mtd0
[   86.882606][ T6015] ubi0: scanning is finished
[   86.903481][ T6015] ubi0 error: ubi_read_volume_table: the layout volume was not found
[   86.942568][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout
[   86.962579][   T42] cfg80211: failed to load regulatory.db
[   87.311253][ T6015] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[   87.496571][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'.
[   87.530618][ T6025] netlink: 25 bytes leftover after parsing attributes in process `syz.1.27'.
[   87.924107][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'.
[   87.944024][ T6043] netlink: 'syz.1.30': attribute type 1 has an invalid length.
[   87.952225][ T6043] netlink: 5 bytes leftover after parsing attributes in process `syz.1.30'.
[   88.023595][ T6043] netlink: 'syz.1.30': attribute type 1 has an invalid length.
[   88.214450][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout
[   88.228711][ T6042] mmap: syz.3.28 (6042) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   88.773355][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout
[   88.798756][ T6051] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   88.933641][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout
[   89.019642][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout
[   89.187796][ T6052] hub 1-0:1.0: USB hub found
[   89.196668][ T6052] hub 1-0:1.0: 1 port detected
[   89.198006][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.35'.
[   90.074599][ T6065] team0: Port device team_slave_0 removed
[   90.293427][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout
[   90.511658][   T29] audit: type=1800 audit(1771300935.417:2): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.33" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[   90.512001][ T6057] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[   90.597638][ T6057] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[   90.745150][ T6057] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   90.862720][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout
[   91.014861][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout
[   91.094094][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout
[   91.901393][ T6076] syz.3.36 (6076) used greatest stack depth: 18680 bytes left
[   92.282322][ T6089] FAULT_INJECTION: forcing a failure.
[   92.282322][ T6089] name failslab, interval 1, probability 0, space 0, times 0
[   92.303007][ T6089] CPU: 1 UID: 0 PID: 6089 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT(full) 
[   92.303042][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   92.303058][ T6089] Call Trace:
[   92.303066][ T6089]  <TASK>
[   92.303075][ T6089]  dump_stack_lvl+0x100/0x190
[   92.303120][ T6089]  should_fail_ex.cold+0x5/0xa
[   92.303153][ T6089]  should_failslab+0xc2/0x120
[   92.303196][ T6089]  __kmalloc_cache_node_noprof+0x7d/0x770
[   92.303236][ T6089]  ? __alloc_workqueue+0xf78/0x1880
[   92.303269][ T6089]  ? lockdep_init_map_type+0x5c/0x250
[   92.303304][ T6089]  __alloc_workqueue+0xf78/0x1880
[   92.303339][ T6089]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   92.303381][ T6089]  alloc_workqueue_noprof+0xd2/0x200
[   92.303413][ T6089]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[   92.303455][ T6089]  ? __pfx___debug_object_init+0x10/0x10
[   92.303498][ T6089]  nci_register_device+0x511/0xb80
[   92.303531][ T6089]  ? __pfx_nci_register_device+0x10/0x10
[   92.303570][ T6089]  ? lockdep_init_map_type+0x5c/0x250
[   92.303618][ T6089]  virtual_ncidev_open+0x141/0x220
[   92.303664][ T6089]  ? __pfx_virtual_ncidev_open+0x10/0x10
[   92.303705][ T6089]  misc_open+0x26d/0x450
[   92.303742][ T6089]  ? __pfx_misc_open+0x10/0x10
[   92.303777][ T6089]  chrdev_open+0x234/0x6a0
[   92.303816][ T6089]  ? __pfx_apparmor_file_open+0x10/0x10
[   92.303849][ T6089]  ? __pfx_chrdev_open+0x10/0x10
[   92.303890][ T6089]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[   92.303938][ T6089]  do_dentry_open+0x6d8/0x1660
[   92.303976][ T6089]  ? __pfx_chrdev_open+0x10/0x10
[   92.304025][ T6089]  vfs_open+0x82/0x3f0
[   92.304059][ T6089]  path_openat+0x208c/0x31a0
[   92.304111][ T6089]  ? __pfx_path_openat+0x10/0x10
[   92.304165][ T6089]  do_file_open+0x20e/0x430
[   92.304208][ T6089]  ? __pfx_do_file_open+0x10/0x10
[   92.304271][ T6089]  ? alloc_fd+0x476/0x790
[   92.304313][ T6089]  ? do_getname+0x191/0x390
[   92.304345][ T6089]  do_sys_openat2+0x10d/0x1e0
[   92.304374][ T6089]  ? __pfx_do_sys_openat2+0x10/0x10
[   92.304419][ T6089]  __x64_sys_openat+0x12d/0x210
[   92.304451][ T6089]  ? __pfx___x64_sys_openat+0x10/0x10
[   92.304496][ T6089]  do_syscall_64+0x106/0xf80
[   92.304535][ T6089]  ? clear_bhb_loop+0x40/0x90
[   92.304570][ T6089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.304598][ T6089] RIP: 0033:0x7f603ef9bf79
[   92.304631][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.304659][ T6089] RSP: 002b:00007f603fe96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   92.304686][ T6089] RAX: ffffffffffffffda RBX: 00007f603f215fa0 RCX: 00007f603ef9bf79
[   92.304704][ T6089] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[   92.304720][ T6089] RBP: 00007f603f0327e0 R08: 0000000000000000 R09: 0000000000000000
[   92.304736][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.304752][ T6089] R13: 00007f603f216038 R14: 00007f603f215fa0 R15: 00007ffc3ae43ba8
[   92.304789][ T6089]  </TASK>
[   92.936754][ T6096] FAULT_INJECTION: forcing a failure.
[   92.936754][ T6096] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   92.950172][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: syz.0.41 Not tainted syzkaller #0 PREEMPT(full) 
[   92.950204][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   92.950219][ T6096] Call Trace:
[   92.950227][ T6096]  <TASK>
[   92.950236][ T6096]  dump_stack_lvl+0x100/0x190
[   92.950277][ T6096]  should_fail_ex.cold+0x5/0xa
[   92.950305][ T6096]  _copy_from_user+0x2e/0xd0
[   92.950336][ T6096]  bpf_prog_create_from_user+0x109/0x2f0
[   92.950376][ T6096]  ? __pfx_seccomp_check_filter+0x10/0x10
[   92.950407][ T6096]  do_seccomp+0x7f7/0x2740
[   92.950439][ T6096]  ? __pfx_do_seccomp+0x10/0x10
[   92.950462][ T6096]  ? __x64_sys_openat+0x12d/0x210
[   92.950490][ T6096]  ? __pfx___x64_sys_futex+0x10/0x10
[   92.950529][ T6096]  do_syscall_64+0x106/0xf80
[   92.950575][ T6096]  ? clear_bhb_loop+0x40/0x90
[   92.950605][ T6096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.950628][ T6096] RIP: 0033:0x7fdd69d9bf79
[   92.950647][ T6096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.950674][ T6096] RSP: 002b:00007fdd6abd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[   92.950699][ T6096] RAX: ffffffffffffffda RBX: 00007fdd6a015fa0 RCX: 00007fdd69d9bf79
[   92.950716][ T6096] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001
[   92.950732][ T6096] RBP: 00007fdd69e327e0 R08: 0000000000000000 R09: 0000000000000000
[   92.950749][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.950763][ T6096] R13: 00007fdd6a016038 R14: 00007fdd6a015fa0 R15: 00007ffff5ad13e8
[   92.950797][ T6096]  </TASK>
[   93.430412][ T6099] netlink: 350 bytes leftover after parsing attributes in process `syz.1.40'.
[   93.691330][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.45'.
[   93.832895][ T6111] team0: Port device team_slave_0 removed
[   95.129893][ T6131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.47'.
[   98.378856][ T5828] Bluetooth: hci3: Malformed Event: 0x02
[   99.229515][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.57'.
[  100.138203][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.61'.
[  100.401034][ T6204] team0: Port device team_slave_0 removed
[  102.890963][ T6242] serio: Serial port pty6
[  104.782367][ T6281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.74'.
[  105.596223][ T6291] random: crng reseeded on system resumption
[  107.683058][ T6333] ubi0: attaching mtd0
[  107.688372][ T6333] ubi0: scanning is finished
[  107.704857][ T6333] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  107.747578][ T6334] netlink: 'syz.0.82': attribute type 72 has an invalid length.
[  107.934339][ T6333] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  107.965669][ T6339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.83'.
[  108.068907][ T6342] FAULT_INJECTION: forcing a failure.
[  108.068907][ T6342] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  108.083053][ T6342] CPU: 0 UID: 0 PID: 6342 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT(full) 
[  108.083089][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  108.083101][ T6342] Call Trace:
[  108.083106][ T6342]  <TASK>
[  108.083112][ T6342]  dump_stack_lvl+0x100/0x190
[  108.083140][ T6342]  should_fail_ex.cold+0x5/0xa
[  108.083154][ T6342]  ? prepare_alloc_pages+0x16d/0x5f0
[  108.083179][ T6342]  should_fail_alloc_page+0xeb/0x140
[  108.083202][ T6342]  prepare_alloc_pages+0x1f0/0x5f0
[  108.083229][ T6342]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  108.083269][ T6342]  ? __lock_acquire+0x4a5/0x2630
[  108.083310][ T6342]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  108.083348][ T6342]  ? do_raw_spin_lock+0x128/0x260
[  108.083382][ T6342]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  108.083416][ T6342]  ? find_held_lock+0x2b/0x80
[  108.083465][ T6342]  ? __lock_acquire+0x4a5/0x2630
[  108.083494][ T6342]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  108.083538][ T6342]  ? policy_nodemask+0xed/0x4f0
[  108.083581][ T6342]  alloc_pages_mpol+0x1fb/0x550
[  108.083624][ T6342]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  108.083665][ T6342]  ? __folio_batch_add_and_move+0x5e5/0xc60
[  108.083702][ T6342]  ? __folio_batch_add_and_move+0x5e5/0xc60
[  108.083747][ T6342]  folio_alloc_mpol_noprof+0x36/0x340
[  108.083777][ T6342]  shmem_alloc_folio+0x135/0x160
[  108.083810][ T6342]  shmem_alloc_and_add_folio+0x371/0xd40
[  108.083855][ T6342]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  108.083895][ T6342]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  108.083941][ T6342]  shmem_get_folio_gfp+0x6ab/0x1900
[  108.083984][ T6342]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  108.084022][ T6342]  ? filemap_map_pages+0x9e0/0x2170
[  108.084063][ T6342]  shmem_fault+0x1f9/0xa20
[  108.084098][ T6342]  ? __lock_acquire+0x4a5/0x2630
[  108.084130][ T6342]  ? __pfx_shmem_fault+0x10/0x10
[  108.084173][ T6342]  ? __pfx_filemap_map_pages+0x10/0x10
[  108.084219][ T6342]  __do_fault+0x10d/0x550
[  108.084270][ T6342]  do_fault+0xaf9/0x1a00
[  108.084302][ T6342]  __handle_mm_fault+0x180f/0x2b60
[  108.084342][ T6342]  ? mt_find+0x45e/0x8e0
[  108.084386][ T6342]  ? __pfx___handle_mm_fault+0x10/0x10
[  108.084416][ T6342]  ? __pfx_mt_find+0x10/0x10
[  108.084476][ T6342]  ? find_vma+0xbf/0x140
[  108.084512][ T6342]  ? __pfx_find_vma+0x10/0x10
[  108.084538][ T6342]  handle_mm_fault+0x36d/0xa20
[  108.084559][ T6342]  do_user_addr_fault+0x74c/0x12f0
[  108.084587][ T6342]  exc_page_fault+0x6f/0xd0
[  108.084608][ T6342]  asm_exc_page_fault+0x26/0x30
[  108.084623][ T6342] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  108.084641][ T6342] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 8f 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  108.084655][ T6342] RSP: 0018:ffffc90003577d30 EFLAGS: 00050206
[  108.084668][ T6342] RAX: 0000000000000001 RBX: 0000000000001fe4 RCX: 0000000000001b84
[  108.084678][ T6342] RDX: 0000000000000001 RSI: 0000000000008000 RDI: ffffc9000348607c
[  108.084686][ T6342] RBP: 0000000000007ba0 R08: 0000000000000001 R09: fffff52000690f7f
[  108.084695][ T6342] R10: ffffc90003487bff R11: 0000000000000000 R12: 0000000000000000
[  108.084703][ T6342] R13: ffffc90003480060 R14: 0000000000007ba0 R15: ffffc90003480060
[  108.084722][ T6342]  _copy_from_user+0x98/0xd0
[  108.084743][ T6342]  bpf_prog_create_from_user+0x109/0x2f0
[  108.084767][ T6342]  ? __pfx_seccomp_check_filter+0x10/0x10
[  108.084786][ T6342]  do_seccomp+0x7f7/0x2740
[  108.084808][ T6342]  ? __pfx_do_seccomp+0x10/0x10
[  108.084824][ T6342]  ? __x64_sys_openat+0x12d/0x210
[  108.084842][ T6342]  ? xfd_validate_state+0x129/0x190
[  108.084869][ T6342]  do_syscall_64+0x106/0xf80
[  108.084889][ T6342]  ? clear_bhb_loop+0x40/0x90
[  108.084906][ T6342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.084921][ T6342] RIP: 0033:0x7f25e619bf79
[  108.084934][ T6342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.084947][ T6342] RSP: 002b:00007f25e6f7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  108.084959][ T6342] RAX: ffffffffffffffda RBX: 00007f25e6415fa0 RCX: 00007f25e619bf79
[  108.084968][ T6342] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001
[  108.084977][ T6342] RBP: 00007f25e62327e0 R08: 0000000000000000 R09: 0000000000000000
[  108.084988][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.084996][ T6342] R13: 00007f25e6416038 R14: 00007f25e6415fa0 R15: 00007fff76e6e338
[  108.085015][ T6342]  </TASK>
[  108.663887][ T6339] team0: Port device team_slave_0 removed
[  109.025830][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.88'.
[  110.374808][   T29] audit: type=1800 audit(1771300955.267:3): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.92" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  110.799279][ T6382] ubi0: attaching mtd0
[  110.806161][ T6382] ubi0: scanning is finished
[  110.810888][ T6382] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  110.852207][ T6386] netlink: 'syz.3.93': attribute type 72 has an invalid length.
[  111.027130][ T6382] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  111.220418][ T6395] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  111.523363][ T6401] bridge0: port 3(gretap0) entered blocking state
[  111.531361][ T6401] bridge0: port 3(gretap0) entered disabled state
[  111.541574][ T6401] gretap0: entered allmulticast mode
[  111.549550][ T6401] FAULT_INJECTION: forcing a failure.
[  111.549550][ T6401] name failslab, interval 1, probability 0, space 0, times 0
[  111.573625][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.3.95 Not tainted syzkaller #0 PREEMPT(full) 
[  111.573662][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  111.573676][ T6401] Call Trace:
[  111.573684][ T6401]  <TASK>
[  111.573694][ T6401]  dump_stack_lvl+0x100/0x190
[  111.573737][ T6401]  should_fail_ex.cold+0x5/0xa
[  111.573767][ T6401]  should_failslab+0xc2/0x120
[  111.573807][ T6401]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  111.573840][ T6401]  ? __kernfs_new_node+0xd2/0x960
[  111.573881][ T6401]  ? kstrdup+0xb3/0xe0
[  111.573921][ T6401]  __kernfs_new_node+0xd2/0x960
[  111.573958][ T6401]  ? __pfx___kernfs_new_node+0x10/0x10
[  111.574001][ T6401]  ? find_held_lock+0x2b/0x80
[  111.574041][ T6401]  ? kernfs_root+0xee/0x2a0
[  111.574071][ T6401]  ? kernfs_root+0xee/0x2a0
[  111.574110][ T6401]  kernfs_new_node+0x11b/0x1a0
[  111.574152][ T6401]  kernfs_create_link+0xcc/0x240
[  111.574198][ T6401]  sysfs_do_create_link_sd+0x90/0x140
[  111.574233][ T6401]  sysfs_create_link+0x61/0xc0
[  111.574265][ T6401]  __netdev_adjacent_dev_insert+0x819/0xbf0
[  111.574308][ T6401]  ? __pfx___netdev_adjacent_dev_insert+0x10/0x10
[  111.574359][ T6401]  __netdev_upper_dev_link+0x3d8/0x7e0
[  111.574395][ T6401]  ? __pfx___netdev_upper_dev_link+0x10/0x10
[  111.574423][ T6401]  ? kernfs_root+0xf8/0x2a0
[  111.574459][ T6401]  ? kernfs_add_one+0x214/0x850
[  111.574504][ T6401]  netdev_master_upper_dev_link+0x9f/0xd0
[  111.574537][ T6401]  ? __pfx_netdev_master_upper_dev_link+0x10/0x10
[  111.574571][ T6401]  ? lockdep_rtnl_is_held+0x26/0x40
[  111.574601][ T6401]  ? netdev_is_rx_handler_busy+0x83/0x140
[  111.574650][ T6401]  br_add_if+0x9fd/0x1b40
[  111.574692][ T6401]  ? security_capable+0x80/0x260
[  111.574728][ T6401]  add_del_if+0x114/0x160
[  111.574769][ T6401]  br_dev_siocdevprivate+0x8ac/0x1650
[  111.574815][ T6401]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  111.574874][ T6401]  ? lock_acquire+0x1cf/0x380
[  111.574920][ T6401]  ? netdev_name_node_lookup+0x107/0x150
[  111.574955][ T6401]  ? __mutex_lock+0x26a/0x1b90
[  111.575001][ T6401]  dev_ifsioc+0xc1e/0x1e90
[  111.575040][ T6401]  ? __pfx_dev_ifsioc+0x10/0x10
[  111.575073][ T6401]  ? __pfx___mutex_lock+0x10/0x10
[  111.575126][ T6401]  ? dev_load+0x8e/0x240
[  111.575158][ T6401]  ? dev_load+0x8e/0x240
[  111.575200][ T6401]  dev_ioctl+0x70e/0x1070
[  111.575240][ T6401]  sock_ioctl+0x494/0x6b0
[  111.575273][ T6401]  ? __pfx_sock_ioctl+0x10/0x10
[  111.575302][ T6401]  ? hook_file_ioctl_common+0x146/0x410
[  111.575347][ T6401]  ? __fget_files+0x21f/0x3d0
[  111.575390][ T6401]  ? __pfx_sock_ioctl+0x10/0x10
[  111.575423][ T6401]  __x64_sys_ioctl+0x18e/0x210
[  111.575459][ T6401]  do_syscall_64+0x106/0xf80
[  111.575498][ T6401]  ? clear_bhb_loop+0x40/0x90
[  111.575532][ T6401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.575560][ T6401] RIP: 0033:0x7f7a15b9bf79
[  111.575584][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.575610][ T6401] RSP: 002b:00007f7a16998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.575635][ T6401] RAX: ffffffffffffffda RBX: 00007f7a15e16180 RCX: 00007f7a15b9bf79
[  111.575652][ T6401] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008
[  111.575668][ T6401] RBP: 00007f7a15c327e0 R08: 0000000000000000 R09: 0000000000000000
[  111.575685][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.575701][ T6401] R13: 00007f7a15e16218 R14: 00007f7a15e16180 R15: 00007ffe4cca6458
[  111.575740][ T6401]  </TASK>
[  112.105676][ T6401] gretap0: left allmulticast mode
[  113.826291][ T6434] ubi0: attaching mtd0
[  113.863084][ T6434] ubi0: scanning is finished
[  113.911648][ T6434] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  113.924822][ T6442] netlink: 'syz.1.103': attribute type 72 has an invalid length.
[  114.153199][ T6434] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  114.171832][ T6446] ubi0: attaching mtd0
[  114.177596][ T6446] ubi0: scanning is finished
[  114.182406][ T6446] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  114.338519][ T6446] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  116.652957][ T6512] ubi0: attaching mtd0
[  116.660182][ T6512] ubi0: scanning is finished
[  116.669961][ T6512] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  116.874633][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.118'.
[  116.978798][ T6512] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  117.032491][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'.
[  118.752463][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.123'.
[  120.535203][ T6574] ubi0: attaching mtd0
[  120.540535][ T6574] ubi0: scanning is finished
[  120.545334][ T6574] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  120.624125][ T6574] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  121.399927][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.132'.
[  122.706803][ T6606] serio: Serial port pty6
[  124.631481][ T6657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.144'.
[  126.051823][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.147'.
[  126.339086][ T6682] ubi0: attaching mtd0
[  126.379614][ T6682] ubi0: scanning is finished
[  126.389684][ T6682] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  126.754120][ T6682] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  128.009632][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'.
[  128.425495][ T6723] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead.
[  130.611862][ T6755] bridge0: port 3(gretap0) entered blocking state
[  130.624247][ T6755] bridge0: port 3(gretap0) entered disabled state
[  130.632695][ T6755] gretap0: entered allmulticast mode
[  130.663176][ T6755] gretap0: entered promiscuous mode
[  130.669816][ T6755] FAULT_INJECTION: forcing a failure.
[  130.669816][ T6755] name failslab, interval 1, probability 0, space 0, times 0
[  130.682929][ T6755] CPU: 1 UID: 0 PID: 6755 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT(full) 
[  130.682952][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  130.682961][ T6755] Call Trace:
[  130.682968][ T6755]  <TASK>
[  130.682975][ T6755]  dump_stack_lvl+0x100/0x190
[  130.683006][ T6755]  should_fail_ex.cold+0x5/0xa
[  130.683025][ T6755]  should_failslab+0xc2/0x120
[  130.683047][ T6755]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  130.683067][ T6755]  ? __alloc_skb+0x140/0x710
[  130.683089][ T6755]  __alloc_skb+0x140/0x710
[  130.683107][ T6755]  ? __alloc_skb+0x5b7/0x710
[  130.683126][ T6755]  ? __pfx___alloc_skb+0x10/0x10
[  130.683147][ T6755]  ? __pfx_fdb_create+0x10/0x10
[  130.683165][ T6755]  fdb_notify+0xa2/0x190
[  130.683182][ T6755]  fdb_add_local+0x184/0x1c0
[  130.683206][ T6755]  br_fdb_add_local+0x39/0x60
[  130.683225][ T6755]  br_add_if+0xe89/0x1b40
[  130.683260][ T6755]  ? __pfx_veth_set_rx_headroom+0x10/0x10
[  130.683307][ T6755]  add_del_if+0x114/0x160
[  130.683352][ T6755]  br_dev_siocdevprivate+0x8ac/0x1650
[  130.683380][ T6755]  ? __lock_acquire+0x4a5/0x2630
[  130.683399][ T6755]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  130.683427][ T6755]  ? do_raw_spin_lock+0x128/0x260
[  130.683450][ T6755]  ? mark_held_locks+0x40/0x70
[  130.683469][ T6755]  ? netdev_name_node_lookup+0x107/0x150
[  130.683486][ T6755]  ? __mutex_lock+0x26a/0x1b90
[  130.683519][ T6755]  dev_ifsioc+0xc1e/0x1e90
[  130.683554][ T6755]  ? __pfx_dev_ifsioc+0x10/0x10
[  130.683581][ T6755]  ? __pfx___mutex_lock+0x10/0x10
[  130.683643][ T6755]  ? dev_load+0x8e/0x240
[  130.683662][ T6755]  ? dev_load+0x8e/0x240
[  130.683684][ T6755]  dev_ioctl+0x70e/0x1070
[  130.683706][ T6755]  sock_ioctl+0x494/0x6b0
[  130.683724][ T6755]  ? __pfx_sock_ioctl+0x10/0x10
[  130.683738][ T6755]  ? hook_file_ioctl_common+0x146/0x410
[  130.683761][ T6755]  ? __fget_files+0x21f/0x3d0
[  130.683784][ T6755]  ? __pfx_sock_ioctl+0x10/0x10
[  130.683801][ T6755]  __x64_sys_ioctl+0x18e/0x210
[  130.683821][ T6755]  do_syscall_64+0x106/0xf80
[  130.683841][ T6755]  ? clear_bhb_loop+0x40/0x90
[  130.683862][ T6755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.683877][ T6755] RIP: 0033:0x7fdd69d9bf79
[  130.683899][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.683916][ T6755] RSP: 002b:00007fdd6ab8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  130.683931][ T6755] RAX: ffffffffffffffda RBX: 00007fdd6a016180 RCX: 00007fdd69d9bf79
[  130.683940][ T6755] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008
[  130.683949][ T6755] RBP: 00007fdd69e327e0 R08: 0000000000000000 R09: 0000000000000000
[  130.683958][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.683967][ T6755] R13: 00007fdd6a016218 R14: 00007fdd6a016180 R15: 00007ffff5ad13e8
[  130.683986][ T6755]  </TASK>
[  131.029636][ T6755] bridge0: port 3(gretap0) entered blocking state
[  131.036611][ T6755] bridge0: port 3(gretap0) entered forwarding state
[  131.227890][ T6751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.162'.
[  131.458153][ T6763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'.
[  133.017744][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  133.026664][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  133.390894][ T6787] ubi0: attaching mtd0
[  133.400793][ T6787] ubi0: scanning is finished
[  133.405532][ T6787] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  133.815571][ T6787] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  135.124774][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'.
[  135.179376][ T6821] netlink: 25 bytes leftover after parsing attributes in process `syz.1.174'.
[  135.468025][ T6836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.176'.
[  135.637043][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.177'.
[  135.648378][ T6835] ipvlan1: entered promiscuous mode
[  135.657864][ T6835] ipvlan1: entered allmulticast mode
[  135.663170][ T6835] veth0_vlan: entered allmulticast mode
[  139.348648][ T6905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.190'.
[  139.960852][ T6900] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input5
[  141.647198][ T6942] process 'syz.3.195' launched './file0' with NULL argv: empty string added
[  142.332892][ T6952] netlink: 350 bytes leftover after parsing attributes in process `syz.3.198'.
[  144.403746][ T6988] FAULT_INJECTION: forcing a failure.
[  144.403746][ T6988] name failslab, interval 1, probability 0, space 0, times 0
[  144.433556][ T6988] CPU: 0 UID: 0 PID: 6988 Comm: syz.2.203 Not tainted syzkaller #0 PREEMPT(full) 
[  144.433579][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  144.433588][ T6988] Call Trace:
[  144.433594][ T6988]  <TASK>
[  144.433600][ T6988]  dump_stack_lvl+0x100/0x190
[  144.433627][ T6988]  should_fail_ex.cold+0x5/0xa
[  144.433647][ T6988]  should_failslab+0xc2/0x120
[  144.433668][ T6988]  __kmalloc_cache_noprof+0x7a/0x6f0
[  144.433684][ T6988]  ? __v4l2_subdev_state_alloc+0x53/0x410
[  144.433706][ T6988]  __v4l2_subdev_state_alloc+0x53/0x410
[  144.433726][ T6988]  subdev_open+0xa6/0x510
[  144.433745][ T6988]  v4l2_open+0x1d2/0x490
[  144.433760][ T6988]  ? __pfx_v4l2_open+0x10/0x10
[  144.433774][ T6988]  chrdev_open+0x234/0x6a0
[  144.433794][ T6988]  ? __pfx_apparmor_file_open+0x10/0x10
[  144.433812][ T6988]  ? __pfx_chrdev_open+0x10/0x10
[  144.433834][ T6988]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  144.433860][ T6988]  do_dentry_open+0x6d8/0x1660
[  144.433882][ T6988]  ? __pfx_chrdev_open+0x10/0x10
[  144.433907][ T6988]  vfs_open+0x82/0x3f0
[  144.433925][ T6988]  path_openat+0x208c/0x31a0
[  144.433958][ T6988]  ? futex_unqueue+0x13d/0x2c0
[  144.433975][ T6988]  ? stack_depot_save_flags+0x27/0x9d0
[  144.433998][ T6988]  ? __pfx_path_openat+0x10/0x10
[  144.434019][ T6988]  ? kasan_save_stack+0x3f/0x50
[  144.434037][ T6988]  ? kasan_save_stack+0x30/0x50
[  144.434054][ T6988]  ? kasan_save_track+0x14/0x30
[  144.434071][ T6988]  ? __kasan_slab_alloc+0x89/0x90
[  144.434090][ T6988]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  144.434107][ T6988]  ? do_getname+0x35/0x390
[  144.434123][ T6988]  do_file_open+0x20e/0x430
[  144.434145][ T6988]  ? __pfx_do_file_open+0x10/0x10
[  144.434181][ T6988]  ? find_held_lock+0x2b/0x80
[  144.434206][ T6988]  ? __might_fault+0xc5/0x140
[  144.434223][ T6988]  ? __might_fault+0xc5/0x140
[  144.434242][ T6988]  file_open_name+0x198/0x3b0
[  144.434258][ T6988]  ? __pfx_file_open_name+0x10/0x10
[  144.434277][ T6988]  ? do_getname+0x191/0x390
[  144.434297][ T6988]  acct_on+0xa4/0x9e0
[  144.434316][ T6988]  ? __pfx_acct_on+0x10/0x10
[  144.434335][ T6988]  ? bpf_lsm_capable+0x9/0x10
[  144.434356][ T6988]  ? security_capable+0x80/0x260
[  144.434376][ T6988]  __x64_sys_acct+0x81/0x1e0
[  144.434394][ T6988]  ? lockdep_hardirqs_on+0x78/0x100
[  144.434415][ T6988]  do_syscall_64+0x106/0xf80
[  144.434435][ T6988]  ? clear_bhb_loop+0x40/0x90
[  144.434460][ T6988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.434476][ T6988] RIP: 0033:0x7f25e619bf79
[  144.434490][ T6988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.434504][ T6988] RSP: 002b:00007f25e6f7b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[  144.434519][ T6988] RAX: ffffffffffffffda RBX: 00007f25e6415fa0 RCX: 00007f25e619bf79
[  144.434528][ T6988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[  144.434537][ T6988] RBP: 00007f25e62327e0 R08: 0000000000000000 R09: 0000000000000000
[  144.434546][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.434554][ T6988] R13: 00007f25e6416038 R14: 00007f25e6415fa0 R15: 00007fff76e6e338
[  144.434575][ T6988]  </TASK>
[  144.935836][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.204'.
[  145.173187][ T6996] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  145.489207][ T6997] Invalid ELF header magic: != ELF
[  148.472730][ T7026] Invalid ELF header magic: != ELF
[  152.710130][ T7117] syz.3.227 uses obsolete (PF_INET,SOCK_PACKET)
[  156.378989][ T7190] ubi0: attaching mtd0
[  156.384527][ T7190] ubi0: scanning is finished
[  156.389201][ T7190] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  156.686270][ T7195] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  156.765877][ T7190] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  157.515217][ T5828] Bluetooth: hci1: unexpected event 0x0f length: 440 > 4
[  157.515830][ T5828] Bluetooth: hci1: unexpected event for opcode 0x0010
[  158.848864][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'.
[  159.755499][ T7264] binder: 7263:7264 ioctl 4018620d ffffffffffffffff returned -22
[  159.957360][ T7270] ubi0: attaching mtd0
[  159.963004][ T7270] ubi0: scanning is finished
[  159.967768][ T7270] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  160.234231][ T7270] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  160.285104][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.252'.
[  161.630075][ T5828] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  161.647560][ T5828] Bluetooth: hci1: Injecting HCI hardware error event
[  161.656378][ T5828] Bluetooth: hci1: hardware error 0x00
[  161.719358][ T7307] ima: policy update failed
[  161.731824][ T7307] serio: Serial port pty6
[  161.864631][   T29] audit: type=1807 audit(1771301006.627:4): UNKNOWN=0"�]$|�1j�0B|d���ӉO��+��/��x����WӦ��^��gq%Ḧr�O� res=0
[  161.976489][   T29] audit: type=1802 audit(1771301006.627:5): pid=7307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.257" res=0 errno=0
[  162.043750][   T29] audit: type=1802 audit(1771301006.637:6): pid=7307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.257" res=0 errno=0
[  163.294512][ T7339] Invalid ELF header magic: != ELF
[  163.744397][ T5828] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  171.479437][ T7488] bridge0: port 3(gretap0) entered blocking state
[  171.486029][ T7488] FAULT_INJECTION: forcing a failure.
[  171.486029][ T7488] name failslab, interval 1, probability 0, space 0, times 0
[  171.498793][ T7488] CPU: 1 UID: 0 PID: 7488 Comm: syz.3.283 Not tainted syzkaller #0 PREEMPT(full) 
[  171.498830][ T7488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  171.498847][ T7488] Call Trace:
[  171.498856][ T7488]  <TASK>
[  171.498866][ T7488]  dump_stack_lvl+0x100/0x190
[  171.498913][ T7488]  should_fail_ex.cold+0x5/0xa
[  171.498945][ T7488]  ? switchdev_deferred_enqueue+0x3e/0x2d0
[  171.498983][ T7488]  should_failslab+0xc2/0x120
[  171.499025][ T7488]  __kmalloc_noprof+0xe0/0x850
[  171.499066][ T7488]  ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10
[  171.499105][ T7488]  switchdev_deferred_enqueue+0x3e/0x2d0
[  171.499147][ T7488]  switchdev_port_attr_set+0xb5/0x100
[  171.499187][ T7488]  __set_ageing_time+0xc2/0x140
[  171.499229][ T7488]  ? __pfx___set_ageing_time+0x10/0x10
[  171.499286][ T7488]  br_init_port+0x18a/0x210
[  171.499315][ T7488]  br_add_if+0x5a4/0x1b40
[  171.499355][ T7488]  ? security_capable+0x80/0x260
[  171.499390][ T7488]  add_del_if+0x114/0x160
[  171.499430][ T7488]  br_dev_siocdevprivate+0x8ac/0x1650
[  171.499474][ T7488]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  171.499528][ T7488]  ? lock_acquire+0x1cf/0x380
[  171.499574][ T7488]  ? netdev_name_node_lookup+0x107/0x150
[  171.499610][ T7488]  ? __mutex_lock+0x26a/0x1b90
[  171.499656][ T7488]  dev_ifsioc+0xc1e/0x1e90
[  171.499696][ T7488]  ? __pfx_dev_ifsioc+0x10/0x10
[  171.499729][ T7488]  ? __pfx___mutex_lock+0x10/0x10
[  171.499794][ T7488]  ? dev_load+0x8e/0x240
[  171.499827][ T7488]  ? dev_load+0x8e/0x240
[  171.499870][ T7488]  dev_ioctl+0x70e/0x1070
[  171.499910][ T7488]  sock_ioctl+0x494/0x6b0
[  171.499943][ T7488]  ? __pfx_sock_ioctl+0x10/0x10
[  171.499976][ T7488]  ? hook_file_ioctl_common+0x146/0x410
[  171.500021][ T7488]  ? __fget_files+0x21f/0x3d0
[  171.500064][ T7488]  ? __pfx_sock_ioctl+0x10/0x10
[  171.500097][ T7488]  __x64_sys_ioctl+0x18e/0x210
[  171.500134][ T7488]  do_syscall_64+0x106/0xf80
[  171.500172][ T7488]  ? clear_bhb_loop+0x40/0x90
[  171.500206][ T7488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.500234][ T7488] RIP: 0033:0x7f7a15b9bf79
[  171.500257][ T7488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.500283][ T7488] RSP: 002b:00007f7a16998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  171.500311][ T7488] RAX: ffffffffffffffda RBX: 00007f7a15e16180 RCX: 00007f7a15b9bf79
[  171.500329][ T7488] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008
[  171.500347][ T7488] RBP: 00007f7a15c327e0 R08: 0000000000000000 R09: 0000000000000000
[  171.500364][ T7488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.500380][ T7488] R13: 00007f7a15e16218 R14: 00007f7a15e16180 R15: 00007ffe4cca6458
[  171.500418][ T7488]  </TASK>
[  171.500468][ T7488] gretap0: failed to offload ageing time
[  171.782886][ T7488] bridge0: port 3(gretap0) entered disabled state
[  171.803504][ T7488] gretap0: entered allmulticast mode
[  171.858000][ T7488] gretap0: entered promiscuous mode
[  171.881127][ T7488] bridge0: port 3(gretap0) entered blocking state
[  171.887750][ T7488] bridge0: port 3(gretap0) entered forwarding state
[  172.473415][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'.
[  176.827358][ T7565] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  176.859773][ T7565] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  176.900621][ T7565] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  178.486455][    C1] sd 0:0:1:0: [sda] tag#8327 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  178.496944][    C1] sd 0:0:1:0: [sda] tag#8327 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00
[  180.544082][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.308'.
[  181.713703][ T7662] misc userio: Invalid payload size
[  183.608808][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.316'.
[  185.055026][ T7725] ima: policy update failed
[  185.065661][ T7725] serio: Serial port pty6
[  185.106935][   T29] audit: type=1807 audit(1771301029.967:7): UNKNOWN=0"�]$|�1j�0B|d���ӉO��+��/��x����WӦ��^��gq%Ḧr�O� res=0
[  185.158638][   T29] audit: type=1802 audit(1771301029.967:8): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.319" res=0 errno=0
[  185.203341][   T29] audit: type=1802 audit(1771301029.967:9): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.319" res=0 errno=0
[  188.371781][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'.
[  190.154573][ T7816] misc userio: Invalid payload size
[  192.346177][ T7867] Invalid ELF header magic: != ELF
[  194.458424][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  194.467160][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  195.034956][ T7905] Invalid ELF header magic: != ELF
[  196.745037][ T7929] vhci_hcd vhci_hcd.0: invalid port number 16
[  197.425829][ T7944] bridge0: port 3(gretap0) entered blocking state
[  197.433745][ T7944] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  197.449146][ T7944] bridge0: port 3(gretap0) entered disabled state
[  197.502957][ T7944] gretap0: entered allmulticast mode
[  197.542801][ T7944] gretap0: entered promiscuous mode
[  197.595583][ T7944] bridge0: port 3(gretap0) entered blocking state
[  197.602166][ T7944] bridge0: port 3(gretap0) entered forwarding state
[  198.600517][ T7960] ==================================================================
[  198.600549][ T7960] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60
[  198.600586][ T7960] Write of size 8 at addr ffffc900042690a0 by task syz.3.358/7960
[  198.600611][ T7960] 
[  198.600623][ T7960] CPU: 0 UID: 0 PID: 7960 Comm: syz.3.358 Not tainted syzkaller #0 PREEMPT(full) 
[  198.600656][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  198.600681][ T7960] Call Trace:
[  198.600690][ T7960]  <TASK>
[  198.600702][ T7960]  dump_stack_lvl+0x100/0x190
[  198.600743][ T7960]  print_report+0x156/0x4c9
[  198.600781][ T7960]  ? _raw_spin_lock_irqsave+0x52/0x60
[  198.600817][ T7960]  ? __virt_addr_valid+0x81/0x620
[  198.600853][ T7960]  ? sys_imageblit+0x19fb/0x1d60
[  198.600879][ T7960]  kasan_report+0xdf/0x1e0
[  198.600919][ T7960]  ? sys_imageblit+0x19fb/0x1d60
[  198.600948][ T7960]  sys_imageblit+0x19fb/0x1d60
[  198.600980][ T7960]  ? __pfx_sys_imageblit+0x10/0x10
[  198.601007][ T7960]  ? prb_read_valid+0x78/0xa0
[  198.601040][ T7960]  ? __pfx_prb_read_valid+0x10/0x10
[  198.601076][ T7960]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  198.601111][ T7960]  soft_cursor+0x524/0xa10
[  198.601152][ T7960]  ? fb_get_color_depth+0x120/0x250
[  198.601189][ T7960]  bit_cursor+0xe58/0x16f0
[  198.601229][ T7960]  ? __pfx_bit_cursor+0x10/0x10
[  198.601265][ T7960]  ? __lock_acquire+0x4a5/0x2630
[  198.601301][ T7960]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  198.601343][ T7960]  ? get_color+0x1da/0x450
[  198.601374][ T7960]  ? __pfx_bit_cursor+0x10/0x10
[  198.601409][ T7960]  fbcon_cursor+0x43c/0x5e0
[  198.601441][ T7960]  ? add_softcursor+0x1c0/0x290
[  198.601480][ T7960]  set_cursor+0x1db/0x250
[  198.601518][ T7960]  con_write+0x89/0xb0
[  198.601545][ T7960]  n_tty_write+0x44f/0x12d0
[  198.601586][ T7960]  ? __pfx_n_tty_write+0x10/0x10
[  198.601618][ T7960]  ? trace_kmalloc+0x101/0x130
[  198.601658][ T7960]  ? __pfx_woken_wake_function+0x10/0x10
[  198.601705][ T7960]  ? rcu_is_watching+0x12/0xc0
[  198.601743][ T7960]  ? file_tty_write.isra.0+0x694/0x890
[  198.601773][ T7960]  ? kfree+0x2ec/0x6b0
[  198.601802][ T7960]  ? __pfx_n_tty_write+0x10/0x10
[  198.601835][ T7960]  file_tty_write.isra.0+0x4d2/0x890
[  198.601867][ T7960]  redirected_tty_write+0xd4/0x120
[  198.601894][ T7960]  vfs_write+0x6ac/0x1070
[  198.601931][ T7960]  ? __pfx_redirected_tty_write+0x10/0x10
[  198.601960][ T7960]  ? __pfx_vfs_write+0x10/0x10
[  198.601994][ T7960]  ? find_held_lock+0x2b/0x80
[  198.602055][ T7960]  ksys_write+0x12a/0x250
[  198.602091][ T7960]  ? __pfx_ksys_write+0x10/0x10
[  198.602134][ T7960]  do_syscall_64+0x106/0xf80
[  198.602173][ T7960]  ? clear_bhb_loop+0x40/0x90
[  198.602204][ T7960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.602232][ T7960] RIP: 0033:0x7f7a15b9bf79
[  198.602255][ T7960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.602282][ T7960] RSP: 002b:00007f7a16977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  198.602309][ T7960] RAX: ffffffffffffffda RBX: 00007f7a15e16270 RCX: 00007f7a15b9bf79
[  198.602328][ T7960] RDX: 00000000000009cb RSI: 0000200000001a00 RDI: 0000000000000005
[  198.602345][ T7960] RBP: 00007f7a15c327e0 R08: 0000000000000000 R09: 0000000000000000
[  198.602363][ T7960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.602379][ T7960] R13: 00007f7a15e16308 R14: 00007f7a15e16270 R15: 00007ffe4cca6458
[  198.602408][ T7960]  </TASK>
[  198.602417][ T7960] 
[  198.602424][ T7960] The buggy address belongs to a vmalloc virtual mapping
[  198.602444][ T7960] Memory state around the buggy address:
[  198.602458][ T7960]  ffffc90004268f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  198.602489][ T7960]  ffffc90004269000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  198.602509][ T7960] >ffffc90004269080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  198.602523][ T7960]                                ^
[  198.602538][ T7960]  ffffc90004269100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  198.602557][ T7960]  ffffc90004269180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  198.602572][ T7960] ==================================================================
[  198.605175][ T7960] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  198.605199][ T7960] CPU: 0 UID: 0 PID: 7960 Comm: syz.3.358 Not tainted syzkaller #0 PREEMPT(full) 
[  198.605231][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  198.605247][ T7960] Call Trace:
[  198.605256][ T7960]  <TASK>
[  198.605267][ T7960]  dump_stack_lvl+0x100/0x190
[  198.605313][ T7960]  vpanic+0x552/0x970
[  198.605339][ T7960]  ? __pfx_vpanic+0x10/0x10
[  198.605371][ T7960]  ? sys_imageblit+0x19fb/0x1d60
[  198.605397][ T7960]  panic+0xd1/0xe0
[  198.605422][ T7960]  ? __pfx_panic+0x10/0x10
[  198.605449][ T7960]  ? sys_imageblit+0x19fb/0x1d60
[  198.605475][ T7960]  ? preempt_schedule_common+0x42/0xc0
[  198.605518][ T7960]  check_panic_on_warn.cold+0x19/0x34
[  198.605548][ T7960]  end_report.part.0+0x3a/0x90
[  198.605585][ T7960]  kasan_report.cold+0xe/0x18
[  198.605624][ T7960]  ? sys_imageblit+0x19fb/0x1d60
[  198.605654][ T7960]  sys_imageblit+0x19fb/0x1d60
[  198.605761][ T7960]  ? __pfx_sys_imageblit+0x10/0x10
[  198.605789][ T7960]  ? prb_read_valid+0x78/0xa0
[  198.605821][ T7960]  ? __pfx_prb_read_valid+0x10/0x10
[  198.605857][ T7960]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  198.605893][ T7960]  soft_cursor+0x524/0xa10
[  198.605933][ T7960]  ? fb_get_color_depth+0x120/0x250
[  198.605969][ T7960]  bit_cursor+0xe58/0x16f0
[  198.606010][ T7960]  ? __pfx_bit_cursor+0x10/0x10
[  198.606046][ T7960]  ? __lock_acquire+0x4a5/0x2630
[  198.606082][ T7960]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  198.606124][ T7960]  ? get_color+0x1da/0x450
[  198.606154][ T7960]  ? __pfx_bit_cursor+0x10/0x10
[  198.606188][ T7960]  fbcon_cursor+0x43c/0x5e0
[  198.606219][ T7960]  ? add_softcursor+0x1c0/0x290
[  198.606259][ T7960]  set_cursor+0x1db/0x250
[  198.606297][ T7960]  con_write+0x89/0xb0
[  198.606324][ T7960]  n_tty_write+0x44f/0x12d0
[  198.606364][ T7960]  ? __pfx_n_tty_write+0x10/0x10
[  198.606397][ T7960]  ? trace_kmalloc+0x101/0x130
[  198.606438][ T7960]  ? __pfx_woken_wake_function+0x10/0x10
[  198.606488][ T7960]  ? rcu_is_watching+0x12/0xc0
[  198.606528][ T7960]  ? file_tty_write.isra.0+0x694/0x890
[  198.606554][ T7960]  ? kfree+0x2ec/0x6b0
[  198.606584][ T7960]  ? __pfx_n_tty_write+0x10/0x10
[  198.606618][ T7960]  file_tty_write.isra.0+0x4d2/0x890
[  198.606649][ T7960]  redirected_tty_write+0xd4/0x120
[  198.606691][ T7960]  vfs_write+0x6ac/0x1070
[  198.606731][ T7960]  ? __pfx_redirected_tty_write+0x10/0x10
[  198.606762][ T7960]  ? __pfx_vfs_write+0x10/0x10
[  198.606798][ T7960]  ? find_held_lock+0x2b/0x80
[  198.606849][ T7960]  ksys_write+0x12a/0x250
[  198.606886][ T7960]  ? __pfx_ksys_write+0x10/0x10
[  198.606927][ T7960]  do_syscall_64+0x106/0xf80
[  198.606966][ T7960]  ? clear_bhb_loop+0x40/0x90
[  198.606999][ T7960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.607028][ T7960] RIP: 0033:0x7f7a15b9bf79
[  198.607052][ T7960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.607080][ T7960] RSP: 002b:00007f7a16977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  198.607107][ T7960] RAX: ffffffffffffffda RBX: 00007f7a15e16270 RCX: 00007f7a15b9bf79
[  198.607126][ T7960] RDX: 00000000000009cb RSI: 0000200000001a00 RDI: 0000000000000005
[  198.607145][ T7960] RBP: 00007f7a15c327e0 R08: 0000000000000000 R09: 0000000000000000
[  198.607162][ T7960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.607179][ T7960] R13: 00007f7a15e16308 R14: 00007f7a15e16270 R15: 00007ffe4cca6458
[  198.607207][ T7960]  </TASK>
[  198.607357][ T7960] Kernel Offset: disabled