last executing test programs:

9.784213709s ago: executing program 1 (id=87):
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf25020000000800ac80e5ded7b956b14acfafed62f0b0e7d41b43a0e877e8be790517e17a8bf483c2c49a2240fd306613b01e26c9939ed61f89603e15dc3e9f51631106245beb5f68fb49774346d52ff7e811a646224f31f994d502dffdf5a309dd3e81139d88acda340000000000020000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x20044000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000)
write$auto_proc_pid_attr_operations_base(0xffffffffffffffff, &(0x7f0000000200)="a597d9ce6359203d", 0x8)
socket(0x2, 0x5, 0x0)
bind$auto(0x3, 0x0, 0x6a)
statmount$auto(0x0, 0x0, 0x1fe, 0xd)
ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
semctl$auto(0x80001ff, 0x804, 0x13, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4)
timer_create$auto(0x9, 0x0, 0x0)
timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0)
timer_gettime$auto(0x0, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002)
keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4)
bpf$auto(0x0, 0x0, 0x6f1)
ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
write$auto(0x3, 0x0, 0x800)
ioctl$auto(0x3, 0x80000541b, 0x38)
openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x800, 0x0)

9.618348185s ago: executing program 3 (id=89):
open_tree$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xfff)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x4)
close_range$auto(0x2, 0x8, 0x0)
r1 = io_uring_setup$auto(0x6, 0x0)
socket(0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x5411, 0x38)
futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5)
futex$auto(0x0, 0x3, 0x1f, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3)
r2 = socket(0x89c322b17cb5a5a6, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
read$auto(r2, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef)
close_range$auto(r2, r1, 0xdf)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x2, 0x73)
io_uring_setup$auto(0x9, 0x0)
close_range$auto(0x2, 0x8, 0x0)
eventfd$auto(0x3)
socketpair$auto(0x809, 0x2, 0x9, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)
mmap$auto(0x1000000001, 0x400008, 0x1000, 0x9b72, 0x2, 0x8000)

9.462884121s ago: executing program 1 (id=90):
socket(0xa, 0x3, 0x3b)
shmctl$auto_IPC_RMID(0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e10600"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0xfffffffffffffffc, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0201, 0x0)
timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0xc)
write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000000c0)="0a1b9a3c3e3efd6ea3d31791840bd70c00000082574c58e9865c42d76e1cadd6a7b7b426b7fcdc8e357080d70b5ab848770dc8f745d1c76eedaa12b9db4b519958c62bf692d2c9df7a9a2e8a556b30aeb5dfce3531f694dabdbc08f62cb37e5bc82e660cfd70f603b20416c7bf0e95345b899b4466bf6a70b1274b19782b41ac172a25e65be53e69c6369b67a4cbd6383a0d766de0287d84516183587530a17dbfd83a7678c6dad9917b91c7c9de3d61af452f90cf22400c4bcbb8410703641b3bccd058f9f2bad31f2ce81e389e210b34f43b4a5af377a6d4353989b4e9d49b2537b0a63a5cf6ae230d1296ef8b30c6bcdf7a6edf5c3258be46ae9d15fc0417e6b59bce357b9a8b05b4ad586c7b72db5ae55e9d149330720a", 0x119)
r1 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
mmap$auto(0x5, 0x20009, 0x10000202, 0x4000000eb5, r1, 0xd535)
close_range$auto(0x2, 0x8, 0x0)
futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5)
futex$auto(&(0x7f0000000080)=0x3, 0x2, 0x8, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3)
r2 = epoll_create$auto(0x3e)
r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000001cc0)={{0x800, 0x10000, 0x5, 0x591, 0x7}, 0x6, 0x2, 0x6, "58e5218f9678796f35bf2803b1e21a54bddb4e340bb83340b899e51485a51568"})
epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94B\xbb\x995\x1e\xf7@\xd8\xca\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea2\x1b\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8f\xb5\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b)
chown$auto(&(0x7f00000000c0)='./file0\x00', 0xee01, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)

8.862593167s ago: executing program 1 (id=91):
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/binder1\x00', 0x214000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0x4, 0x9b72, 0x2, 0x8000)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
io_setup$auto(0x7ffe, 0x0)
io_setup$auto(0x7ffe, &(0x7f0000000000))
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0)
mlockall$auto(0x7)
r1 = socketpair$auto(0x1e, 0x200, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x4b67, r1)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev\x00', 0x0, 0x0)
unshare$auto(0x40000080)
clock_settime$auto(0x0, &(0x7f0000000000)={0x100000004, 0x8})
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r2 = fanotify_init$auto(0x5, 0x2000000000002)
socket(0x15, 0x5, 0x0)
r3 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
writev$auto(r3, &(0x7f0000000140)={&(0x7f0000002ac0), 0xe4}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x37, "664d74a5489db0541a88047e21e51a99e8b814c8e129e7787dad485d49466090", @raw=0x8})
fanotify_mark$auto(0x0, 0x201, 0x9, 0x4, 0x0)

7.976882452s ago: executing program 3 (id=94):
sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x804)
r0 = socket(0xa, 0x1, 0x100)
mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/43:256/strict_limit\x00', 0xa022, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
close_range$auto(0x2, 0x8, 0x0)
r2 = io_uring_setup$auto(0x1, 0x0)
r3 = socket(0xa, 0x801, 0x106)
setsockopt$auto(r3, 0x6, 0x24, 0x0, 0x9)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/dummy0/forwarding\x00', 0x202, 0x0)
sendfile$auto(r5, r4, 0x0, 0x48)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3fdafc9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r6, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
r7 = socket(0x18, 0x5, 0x1)
pselect6$auto(0x200, &(0x7f0000000440)={[0x5, 0xd9c, 0x81, 0x6, 0xff00000000000, 0x9, 0x9, 0x5661, 0x4, 0x3, 0x6, 0x35e, 0xfffffffffffffffd, 0xc1, 0xfffffffffffffffc, 0xc]}, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_smbd_genl(0x0, r0)
sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x30004850)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbd7251c0000000500d3000800000023002400d48125aab4d3170a74fabb57969785d3be6d929d4c714e50ec369a82b5971800"], 0x40}, 0x1, 0x0, 0x0, 0x4000005}, 0x4084)
r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
ioctl$auto_TCSBRKP2(r8, 0x5425, 0x0)
ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x0, &(0x7f0000000180)="dc100debc7fd2c4fa89d950e1933e53f8a7a4ce5ce731ee4a3e31a7b62979e93c11e0853962e1f52fca001d62735f7a14fa942a74a70f490f73180a5b476885471f52edabde6ea5d51ad5c1e7a750984447a64bb9ff1d3a7")
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
unshare$auto(0x2)
close_range$auto(0x2, 0x8, 0x0)

7.602190618s ago: executing program 2 (id=95):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x5, 0x0)
socket(0x1, 0x3, 0x0)
r0 = socket(0xa, 0x1, 0x84)
close_range$auto(0x0, 0x5, 0x0)
io_uring_setup$auto(0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(r0, 0xc040aed4, r1)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
io_uring_setup$auto(0x55, 0x0)
move_pages$auto(0x0, 0x8, 0x0, 0x0, 0x0, 0xb)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x4063c2, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x43a081, 0x0)
unshare$auto(0x40000080)
ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000280)={0x7ffffffffffffffd, @raw=0x3, @raw=0x400, 0x1, 0xffffbffffffffff7, '\x00', {0x2, 0x76e6, 0x1000, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x9, 0x8, {0x1, 0x2}, {0x7ff, 0x4}, {0x1, 0x8}, 0x3, 0x101, 0x10200, 0x200, 0x0, 0x401, 0x1000, 0xfc00, 0x0, 0x2, '\x00', 0x0, 0x3840, 0xe5, 0x1}})
setgroups$auto(0x10000, &(0x7f0000000040)=0x7fff)
write$auto(r4, 0x0, 0x81)
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0xaa080, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)

6.893530252s ago: executing program 0 (id=96):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0xb, 0x73)
socket(0x8, 0x3, 0x3)
socket(0x26, 0x4, 0x106)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event\x00', 0xa0301, 0x0)
write$auto(r1, 0x0, 0x4)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
socket(0x18, 0x3, 0x2)
sched_get_priority_min$auto(0x40)
openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0xb49dc2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/file-nr\x00', 0x0, 0x0)
socket(0x6, 0x2, 0x80000000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008062}, 0x4000845)
sendmmsg$auto(0x3, 0x0, 0x2, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0xfa, 0x80}, 0x96)
r2 = open(0x0, 0x80842, 0x91)
write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)

6.789042083s ago: executing program 3 (id=97):
setresuid$auto(0x8, 0x8, 0x0)
r0 = setfsuid$auto(0xee00)
setreuid$auto(r0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad)
msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r3, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4)
mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
mbind$auto(0xfffffffffffff000, 0x100000004, 0xfffffffe, 0x0, 0x2000000000006, 0x1)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r4 = getegid()
r5 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7})
shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r0, r4, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r5, @raw=0x5, 0x5, 0x0, &(0x7f0000000500)="4f98c640887224e1536d4e40a39d3c81a9c6e8ae66bc479f7d92b6c649f07587e8084d4fd558d54a2ddca9c318eb050342e0fbb295dd58250b8d185616881413c9b3a8bbc9cb6f3059624b9d64d81f5b347672273ff0eac474a4fce025de7972a1b178c920727aab101d7741be7f42a7acc5ee4675ca2c96a2d08ca9a74b323f548afca84b63a71fb65c71061963f9693b6afa898480b20dc6d2e4f35f2381eabde6ac3f3b34948a7014878f346459ef0a11d7cb4fe7732d8d9e95d0cc7450914c2b63b9054c10080ba951b8f095adaead86e8bf209f5a9ecef565321572507c2b71c3a04fe37344218ffc325a27547ba7f31f1edb3ba545", &(0x7f0000000600)="3b4aab5baf7b70279f51554278b9b2497af28d2f68748361dda23b269d8b59ff913dc2ce2f41389066481eb9ea5492d38b5b950569f4d785c41fe5d0ab02234a66c5d804108051813044b3235a4b452ff0c51b938f2f5440d9ecee6cfad16d8271c93fa2488f5af21c4361fca3799a20b53b6f0c6c3b19b35a674aec24b246c982d5f007b2ecde6cab52699af3b1e94e1a42d4e44b022d7d64730dd5127ccd9f02f7590e93c2c7d8eb6e44"})
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", <r6=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf)
r7 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8a042, 0x0)
bind$auto(r7, &(0x7f0000000180)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x8)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)

6.693101552s ago: executing program 1 (id=98):
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
socket(0x15, 0x4, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
mmap$auto(0x4, 0x6, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
tgkill$auto(0x0, 0x1, 0x1)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4)
r3 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
r4 = ioctl$auto_TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000240)=0x2)
ioctl$auto_UI_SET_MSCBIT(r4, 0x40045568, &(0x7f0000000280)=0x5)
mmap$auto(0x0, 0x7, 0x3, 0xeb5, r3, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0)
read$auto(0x3, 0x0, 0x1f40)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20002, 0x0)
writev$auto(r5, 0x0, 0x3)
r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0)
sendfile$auto(r7, r7, 0x0, 0x71)
ioctl$auto_PPPIOCSPASS(r6, 0x40107447, 0x0)

6.41837248s ago: executing program 2 (id=99):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0xfe04)
socket(0x10, 0x2, 0x0)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0)
pwrite64$auto(r1, 0x0, 0x6bc, 0x5)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40)
readahead$auto(r1, 0x4, 0x4)
sysfs$auto(0x1003, 0x401, 0x0)
unshare$auto(0x40000080)
socket(0x2, 0x801, 0x100)
mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
write$auto(0x3, 0x0, 0x100082)
madvise$auto(0x0, 0x200007, 0x19)
socket(0xa, 0x3, 0x3a)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0)
read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000010c0)=""/22, 0x16)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto(r3, 0x80dc5521, 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229fd70090000004a0003000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)

5.886130804s ago: executing program 0 (id=100):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x4000, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000140)='\t', 0x1)
r1 = fsopen$auto(0x0, 0x1)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0)
write$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffffff, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38)
socket(0xa, 0x1, 0x84)
r2 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r4, 0x0, 0x81)
write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x3, 0x1ffe1, 0x7, 0x3, 0xf7fffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x82, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0x0, 0x0, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x4, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd)
ioctl$auto_EVIOCGRAB(r5, 0x40044590, &(0x7f0000000000)=0x2)
write$auto(r5, 0x0, 0x10001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000380)={0x4, 0xd, 0x4, 0xc2b, 0x8001, 0x1000, 0x0, 0x7})
madvise$auto(0x0, 0x4, 0x15)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r6)
sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7020f8dbdf250100000008000100aa7e0bd395f93a30", @ANYRES32=0x9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4000080)
socket(0xa, 0x1, 0x84)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0x2}, 0x52)
shutdown$auto(0x200000003, 0x2)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)

4.717828402s ago: executing program 0 (id=101):
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
sysfs$auto(0x2, 0x23, 0x0)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, 0x0, 0x3)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x3, 0x40081271, 0x38)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r3 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$auto(r3, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x18)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000)
shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db4102", &(0x7f0000000240)="41b431f15aa64d11716c2908cc9f948827ddb702f4ae4ad578a4d9e2fa81507ca870d066e25696b0b2ac35abb53a8fc6e9df9fdbbc11fe705ab85e88111e5684e28f8599bc486b93eea020ee76a340a548c82e805e2d182d741e51d53c799f7bb722a591e8ac4c48f3317ac8926b8bfb8d1ffa178e0f324273421083410618838dc3"})
socket(0xb, 0xa, 0xd9)
setpgid$auto(0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r4 = socket(0xa, 0x1, 0x84)
bind$auto(r4, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
epoll_ctl$auto_EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x4, 0x3})
write$auto(0x3, 0x0, 0xfdef)
read$auto(0x3, 0x0, 0x1f40)

4.001350525s ago: executing program 2 (id=102):
r0 = socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, r0, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
mlock$auto(0x401, 0x439)
sendmmsg$auto(0x3, 0x0, 0x40, 0x100)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
epoll_create$auto(0x4)
get_robust_list$auto(0x0, 0x0, 0x0)
ioctl$auto(0x3, 0xffffffff40088a01, 0x1)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(r1, 0x8, 0x0)
brk$auto(0xffffffffffffff66)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
pread64$auto(r4, 0x0, 0x800003, 0x270)
r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyt5\x00', 0x20102, 0x0)
write$auto_console_fops_tty_io(r5, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b9b", 0x23)
setrlimit$auto(0x8, 0x0)
mlockall$auto(0x7)
r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0)
ioctl$auto_SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x364f9cefc8a0a83, 0x0)
shmctl$auto_IPC_RMID(0x5, 0x0, &(0x7f0000000380)={{0x81, 0xffffffffffffffff, 0x0, 0x5, 0x6, 0x1, 0x1}, 0xfffffff7, 0x3, 0x3, 0x8, @inferred, @raw=0x7, 0x2, 0x0, &(0x7f0000000280)="aaf09bd80d0000000000", &(0x7f0000001680)="08749ff4df35b75598629815e764e8491468fdee9079bd455261f3c12af31e72dd791e875cd7b47f19b1f97db7ffc84a8b8cfb1a797248310467b7aeb0f74733b23e7571d2878ceecbaaf91127b7dad93fcf0ece1ab11340072b43d017cd7186e2edad8471949f0e47b7b643dbcb9db8a8fde30ae065eb190136a96660eb14e7c34717b80e50f2a82e82c81ed70773c0ca0369a3da197a95c26bd775695b59799231eb84f9279387a7012a8dd7ce9838d92ff0776d2ce8c68c1b6b5836c68da3627d29"})

3.831056909s ago: executing program 1 (id=103):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x40, r3, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x3, 0x0, 0x1, [@nested={0x9, 0x5, 0x0, 0x1, [@generic="5647f82231"]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x40}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315, r4}, 0x1)
read$auto(0x3, 0x0, 0x80)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0)
write$auto(r5, 0x0, 0x6)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$auto_XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000002c0)={0x0, 0x10001, 0x0, &(0x7f0000000280)=0x2})
r7 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r7, 0x0, 0x100000002, 0x100000001)

3.650494929s ago: executing program 3 (id=104):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
socket(0xf, 0x3, 0x2)
sendmsg$auto_NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000004c0)={0x480, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REKEY_DATA={0x45b, 0x7a, 0x0, 0x1, [@generic="d0b639691b58f71f024766982495e3cfffa17c8f4806e0983435a588634a84efadb1b11d03066b3ff302819c59c9863f4e2770f3550f17c01d91b53f284d56e8715b2000613028a42b278269d3d37897cdaf50f3295eea0c1eb8355bed15deaf34f3a0e3169692654ee033c456c096c9019df54705d175af99709c51b7f620c7c6fd527be2d48ef927762b2c9f0ab65c1f25adaeb34ff107bb150d8ec40cd8be10232d7868a17f27c8413545f9220199308e8cc86ea6d9ab7b169188c3bb96baf36b", @generic="e7f1218c833b7510c4fec587d4a6ffa5cd1554864e276019337d2fa32ad32dfe6b3b92f4ae6211048811a8a5976ca27c0334699a13", @nested={0x262, 0x11, 0x0, 0x1, [@generic="2dcade7ee68767ae7993e71cfb00e3abd48557586a534b768bfdd3df1ecad1b0c3a71b0cd008113cb8b70db5336576d8f19b669caab0dee5abb58443138de67fd52227ef2a230bff070e0746cfee3f64c731b73b20f18b4bd695510efe36f5039a8d04f3dfe3ea80767e63a7cbf730e50717fc5d7daa691f0f4df0b2bbf037e0e7022a2a3b9476e86a49a51cb4", @generic="668f1a2bc345484f795e3a1c9f3caf24b664d9ba60a095cdf9a6070fa2be4c2674c0d801597a35876cb75f9a4a6831aea5739b7bd85d9f1688cae697845fcf58d19a1e25c9e0eec46e2c168cbd6b3491d00004ff3856c13378e5f86828c0622eb9e561f3ec654588ddae461580f784720f941ba3493991ee8e954e57d1898548d9597891e15a92c42636c671a7186e2f3f50f28cae586be67797c07406ad7f80d46952b8575b28f47320e7b1a7db31368462f4058ce907bc1c29439efc09b8e142", @generic="2687cadebe7f3809975be733ffa1b916212fa694f38a8e7ffbe333c2399867463504652c1459e8fa3651460affdf1a0433a64f9b1822af4546f8a81fbbe07abdc43f53ba013db47ca8ed0bbb41ae2c191bc7102bea6d93650e0ec38292efbc8eaaaba9dbfaaf86d5e3b8d90fb9351dd0f51e36b8fd8f926e0223540d0c172a1496374f91e3ea0042a3e7cac19450f57ff87bcb4c3c396b1e8483d7bc1a0dc71bcd0b36f5", @nested={0x4, 0x97}, @generic="8a76dfd5a149652b4bba0f3235d1fd4c854889b963abbe6c3afae6fbcc576b56c3ecbe9a17a6be3b4493d741b30f729e64a63aeb4733acebbc665d001b6960b0051cc57f1e4a57356aedfd0868e34f7d06be7474243c97e5ac21b2c78e56781dba6ee6dabe63e4dd"]}, @nested={0x14, 0xb0, 0x0, 0x1, [@typed={0x8, 0xde, 0x0, 0x0, @str='{+$\x00'}, @typed={0x4, 0x2e}, @nested={0x4, 0x3e}]}, @typed={0x8, 0x50, 0x0, 0x0, @pid}, @generic="6bdcfab5378d649e3de0430fe973edc77255054d7f48a18d127fdfdd6c45ff62c4a93301f585da9944f856b5e8ec78e990d5e85d921cbaa2951574134698dae2c79cc487e2061d5eb9cb1fea11293ed2f70b9ee735e78fd4e885176be00e1933039007581fafdcba1cda83d9787b054c388e3b499310977542eb845c0f63abaa6265d01d594a6660f23d5f4c314676a2bc66c986914641f9d1dd13541546fdaa84703f24b29421211b9e5480e08df32c92232e103eeff6bed4a739df778c603ddd13acf5b897ee6a9e171fd4c3c23bab06454ec6bd6e9eb7791cda2cc98fb95e"]}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xbac}]}, 0x480}, 0x1, 0x0, 0x0, 0x4004041}, 0x40100)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x660040, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0)
memfd_create$auto(0x0, 0x7)
select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x1003, 0x1, 0x948b, 0x3, 0x9, 0xfffffffffffffffd, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x43, 0x6, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0x200, 0x6, 0x10003, 0x83, 0x4, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/bdi/7:14/min_bytes\x00', 0x80302, 0x0)
write$auto(r0, &(0x7f0000000000)='!h\xf3\xec@\xdbS\xcc\x04', 0xa)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
setfsgid$auto(0xee00)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r1 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080)="af101b8f8a7d3fb11541234c841ad04ef950bd816b1a4f98cd92c3e2a12357557135aad56ced71a1f0d966c275daa2c99a9c0ad115b322b5d8183b96ab92708cc68cbbdfb3df131db9a98348c8", 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003680)={'wlan0\x00'})
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)='-7', 0x3a)
openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/1:0:0:0\x00', 0x711000, 0x0)

3.468205839s ago: executing program 0 (id=105):
mmap$auto(0x80000000, 0xfffffffffffffffc, 0x1c, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
msync$auto(0x0, 0x2000000005, 0x6)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/smaps_rollup\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
preadv2$auto(r1, &(0x7f00000002c0)={0x0, 0x8}, 0x8000000000000001, 0x7fffffffffffffff, 0x2, 0x858b)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
membarrier$auto(0x2, 0x0, 0x9)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0xc8201, 0x0)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)

2.810074291s ago: executing program 2 (id=106):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x600000000000000, 0x0, 0x40014}, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
mmap$auto(0x0, 0x7, 0xdf, 0xfffffffffffffffd, 0x40000000000a5, 0x8000)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r2, 0x80184132, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x2b, 0x1, 0x1)
setsockopt$auto(0x3, 0x11e, 0x1, 0x0, 0x9)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x10000073)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r4 = socket(0xa, 0x2, 0x88)
setsockopt$auto(r4, 0x11, 0xb, 0x0, 0x8)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, 0x0, 0x202, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)

1.578940913s ago: executing program 3 (id=107):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/cable#1\x00', 0x100, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)})
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = socket(0x10, 0x2, 0x6)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf25110000002280080046800400f7800a0010800000002a4f7b0000"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
r5 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x6, 0xb8, 0x10, 0x4, 0x4, r4, 0x0, "2af0513ce63f00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf)
getsockopt$auto_SO_SNDTIMEO_NEW(r5, 0x1, 0x43, &(0x7f0000000000)='\x00', 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
r6 = socket(0x2b, 0x1, 0x1)
socketpair$auto(0x9, 0x5, 0x2, 0x0)
ioctl$auto(r6, 0x89a0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8)
unshare$auto(0x40000080)

1.443998959s ago: executing program 2 (id=108):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
statmount$auto(0x0, 0x0, 0x1fe, 0xd)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000300)={0xa9, 0x2, "a855697639f7581d67ae65faa62e999f7d4337d1a42bf3212865a975c643130b69bef2e74e6358630cdc1ba5229105f62a54b1ac2d1af588eec58ba50beaefc2bbfc214db4f2a86a951b95ac506be40bfe368a6c29cd8a3f8f3f03a8c57481603ae66bd50e9a3c76af61dd78b9845871bc97ff49aa86f38bd9c738e9e9d43291c58b94d3555fd5717b05bb7ca8ce36c850ee653c6553cba3ec579d3f0005042b923931bff1c39eb54b"}, 0x7)
sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002540)={0x0, 0x2114}, 0x1, 0x0, 0x0, 0x81}, 0x804)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r2 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000)
setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9)
mmap$auto(0x3, 0x200006, 0x2, 0x13, r1, 0x340000000003)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
r3 = socket(0xa, 0x801, 0x84)
getsockopt$auto_SO_TIMESTAMPING_NEW(r3, 0x0, 0x41, 0x0, &(0x7f00000000c0)=0xffff)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
socket(0xf, 0x3, 0x2)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
bind$auto(r3, 0x0, 0x6)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket(0x10, 0x2, 0xc)

1.386441584s ago: executing program 0 (id=109):
mmap$auto(0x0, 0x200006, 0x400000002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x2, 0x1)
sendto$auto(r0, 0x0, 0xb, 0x2, &(0x7f0000000000), 0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/devices/platform/dummy_hcd.7/usb8/speed\x00', 0x101100, 0x0)
ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, &(0x7f0000000140)={0x0, 0xe4b8})
write$auto(0x3, 0x0, 0xfdef)
timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x1)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto_TIOCSWINSZ2(r1, 0x5414, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
r2 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5<y\xa5\x97\x13\xef\xc4g\xc3\xa4&\x81I6\v\xcc\x00\x00', 0x62, 0xfffc, 0x0)
mq_timedsend$auto(r2, 0x0, 0x80, 0x9, 0x0)
mq_timedreceive$auto(r2, 0x0, 0x4dc9, 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = socket(0x23, 0x6, 0x0)
bind$auto(r3, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x10, 0x5, 0xc)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

1.071780427s ago: executing program 0 (id=110):
setresuid$auto(0x8, 0x8, 0x0)
r0 = setfsuid$auto(0xee00)
setreuid$auto(r0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r3, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4)
mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
getegid()
waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7})
open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x2a)
unshare$auto(0x40000080)
madvise$auto(0x0, 0xffffffffffff0101, 0x15)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", <r4=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf)
r5 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8a042, 0x0)
bind$auto(r5, &(0x7f0000000180)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x8)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)

355.580501ms ago: executing program 1 (id=111):
socket(0x2, 0x1, 0x106)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x610000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @multicast1}, 0x54)
r1 = epoll_create$auto(0x2)
epoll_pwait2$auto(r1, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f0000000200)={0x40004200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$auto_SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000240)="ff1c77e3e0c75de3e4b5b406551a5767a5356c9bd9de5c773f2e75e6819101f051269dc09510f21d26b8a47ea44ff3011466be44ee87e992ae7b381f46f7e8880f1e4e52a3aa37892fbbcee374327f019f5d1866ce7ce150a42b0a07517071aa68e5997c2bc1062a9b033ba7bfba2572aaa306a2725c16886e383a0973673e3ea024667ff4d2d10e01fd145039fbc221dcd97c590000000000000000005b0d5646bec3cc3e72e128b447ddfe9f9109d94bbbeeb889959201af3ee76e59ecacbc6cd4db93f60abb9223cbd86cb4ea79e84ec9c9bc05390d61c270dd5ea2a3334fd5db6942929d02c50bc254ecb9989258c9e074a6917a36f0")
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x1000001, 0x0, 0x9}]})
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0)
sendfile$auto(r2, r3, 0x0, 0x1)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r4 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x5, &(0x7f0000000000), 0x2)
mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008003)
r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
ioctl$auto(r5, 0x9000643c, 0xc35)
openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r4, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x204, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x4}, @ETHTOOL_A_CABLE_TEST_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x200}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x81}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xe6f}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x1}, 0x0)

111.951654ms ago: executing program 2 (id=112):
mlock2$auto(0x5, 0x9, 0xfffffffd)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
sysfs$auto(0x2, 0x11, 0x0)
r0 = socket(0x2a, 0x2, 0x8001)
close_range$auto(0xffffffffffffffff, r0, 0xb)
socket(0x15, 0x5, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = socket(0x1a, 0x80805, 0x0)
bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/247, 0xf7)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x183401, 0x0)
select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x990, 0xffffffffffffffff, 0x1, 0x948b, 0x2a1, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x6, 0x0, 0xc, 0x3, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x20000000000003, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0)
r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r4, &(0x7f0000000e00), 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x100)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x87, 0x7, 0x6, 0x4, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x9, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0x200d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x2, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0)

0s ago: executing program 3 (id=113):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/9/chip_name\x00', 0x181040, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/48, 0x30)
unshare$auto(0x40000080)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffe, 0x8, 0x4000000000db, 0x12, 0x400, 0x8001)
setsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x4, 0x40, &(0x7f0000000480)='/Eev\n\x0e\xcf^+\xf3\xc4Y\x84\xf4\xe4\x98/audio1\x00VI\xa3\xaa\xb1;\x9d\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9abN\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953\x01\x9f.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4re\x90\xc0\xbf\xcem\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\x12w\xd7\x99\x8c\xbe\x8f\x1dI\xe2\xae8\x83\xcf\xc5D\xcc\x00', 0x4)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001bc0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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"], 0x2bc4}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000080)
write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef)
mmap$auto(0x0, 0x80000001, 0x7, 0x17, r2, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0)
listmount$auto(0x0, 0x0, 0x7fffffffffffffff, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x0, 0x0)
r3 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0)
ioperm$auto(0x7, 0x5ad2, 0x8)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000200)={{@raw=0x4, 0x0, 0x1000004, 0x480808, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @inferred=0xffffffffffffffff}, 0x2, 0xc, 0x4, @inferred, @reserved="196c056a347704def6f5c5636ed52c07609cee4319588cd9a11ad396065c1267314ab73ce54c205a43297cf5b6310383212fdbb93e51da48edd9350aa935db0d5d6e32e39d8f68ee55f32c5de7b40a4ceb3840920880cbb9fc246ea65af96a74482a52e660cfc6828ba8c9404d70b947a06c9927ba7f1beed137c48265c74c8d", "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"})
rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd}}})
r4 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f00000000c0), 0x7fcb, 0x0, 0x10015, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x9, 0x100)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/caches\x00', 0x102, 0x0)
pread64$auto(r5, 0x0, 0x100000001, 0x100)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
unshare$auto(0x40000080)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty36\x00', 0x0, 0x0)
read$auto(r6, 0x0, 0x80)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts.
[   81.183451][ T5813] cgroup: Unknown subsys name 'net'
[   81.312075][ T5813] cgroup: Unknown subsys name 'cpuset'
[   81.320710][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   82.798319][ T5813] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   84.859216][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.867674][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.875503][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.882126][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.887568][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.899784][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.900644][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.907913][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.914900][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.923635][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.928858][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.935995][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.958820][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.970472][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.988848][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.004201][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.018811][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.026595][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.035568][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.045784][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.515716][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   85.645329][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   85.667750][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   85.785580][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.792895][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.800669][ T5831] bridge_slave_0: entered allmulticast mode
[   85.808454][ T5831] bridge_slave_0: entered promiscuous mode
[   85.837289][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   85.847727][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.855131][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.862496][ T5831] bridge_slave_1: entered allmulticast mode
[   85.869760][ T5831] bridge_slave_1: entered promiscuous mode
[   85.973766][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.981111][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.988248][ T5822] bridge_slave_0: entered allmulticast mode
[   85.995491][ T5822] bridge_slave_0: entered promiscuous mode
[   86.006002][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.032934][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.040980][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.048331][ T5822] bridge_slave_1: entered allmulticast mode
[   86.056142][ T5822] bridge_slave_1: entered promiscuous mode
[   86.065250][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.089497][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.096643][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.104165][ T5823] bridge_slave_0: entered allmulticast mode
[   86.111296][ T5823] bridge_slave_0: entered promiscuous mode
[   86.149687][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.157068][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.164518][ T5823] bridge_slave_1: entered allmulticast mode
[   86.171659][ T5823] bridge_slave_1: entered promiscuous mode
[   86.196359][ T5831] team0: Port device team_slave_0 added
[   86.230456][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.242155][ T5831] team0: Port device team_slave_1 added
[   86.251106][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.308181][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.319520][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.326699][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.334478][ T5837] bridge_slave_0: entered allmulticast mode
[   86.341639][ T5837] bridge_slave_0: entered promiscuous mode
[   86.373007][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.392798][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.400227][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.407432][ T5837] bridge_slave_1: entered allmulticast mode
[   86.414762][ T5837] bridge_slave_1: entered promiscuous mode
[   86.422233][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.429815][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.456101][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.469451][ T5822] team0: Port device team_slave_0 added
[   86.501745][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.508822][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.535463][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.548709][ T5822] team0: Port device team_slave_1 added
[   86.555806][ T5823] team0: Port device team_slave_0 added
[   86.593416][ T5823] team0: Port device team_slave_1 added
[   86.601603][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.637737][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.677206][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.684566][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.710595][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.745421][ T5837] team0: Port device team_slave_0 added
[   86.752525][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.759871][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.786675][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.798905][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.805860][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.831910][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.855891][ T5837] team0: Port device team_slave_1 added
[   86.868948][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.875915][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.903322][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.929713][ T5831] hsr_slave_0: entered promiscuous mode
[   86.936605][ T5831] hsr_slave_1: entered promiscuous mode
[   86.959696][ T5835] Bluetooth: hci2: command tx timeout
[   86.965344][ T5835] Bluetooth: hci0: command tx timeout
[   87.038639][ T5835] Bluetooth: hci1: command tx timeout
[   87.056058][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.063318][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.089857][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.118652][ T5835] Bluetooth: hci3: command tx timeout
[   87.140451][ T5823] hsr_slave_0: entered promiscuous mode
[   87.147448][ T5823] hsr_slave_1: entered promiscuous mode
[   87.153912][ T5823] debugfs: 'hsr0' already exists in 'hsr'
[   87.159781][ T5823] Cannot create hsr debugfs directory
[   87.166664][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.174331][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.201236][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.225757][ T5822] hsr_slave_0: entered promiscuous mode
[   87.233709][ T5822] hsr_slave_1: entered promiscuous mode
[   87.240198][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   87.245940][ T5822] Cannot create hsr debugfs directory
[   87.392071][ T5837] hsr_slave_0: entered promiscuous mode
[   87.399070][ T5837] hsr_slave_1: entered promiscuous mode
[   87.405179][ T5837] debugfs: 'hsr0' already exists in 'hsr'
[   87.411138][ T5837] Cannot create hsr debugfs directory
[   87.762397][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.775561][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.786233][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.799186][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.858323][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.876374][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.890256][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.903334][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.982017][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.996676][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.021921][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.047771][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.116754][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.132902][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.145866][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.156630][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.260094][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.301730][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.341114][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   88.364084][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   88.390555][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.397827][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.407576][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.414722][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.451974][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.462865][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.470109][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.479778][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.486982][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.557136][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.590961][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   88.606127][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   88.634439][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.641932][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.669592][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.676789][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.689433][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.696870][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.707691][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.715280][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.977399][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.039571][   T52] Bluetooth: hci2: command tx timeout
[   89.045120][ T5835] Bluetooth: hci0: command tx timeout
[   89.117142][ T5822] veth0_vlan: entered promiscuous mode
[   89.126820][ T5835] Bluetooth: hci1: command tx timeout
[   89.197728][ T5822] veth1_vlan: entered promiscuous mode
[   89.212781][ T5835] Bluetooth: hci3: command tx timeout
[   89.225190][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.362952][ T5822] veth0_macvtap: entered promiscuous mode
[   89.386775][ T5831] veth0_vlan: entered promiscuous mode
[   89.405199][ T5822] veth1_macvtap: entered promiscuous mode
[   89.441870][ T5831] veth1_vlan: entered promiscuous mode
[   89.455526][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.470205][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.488406][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.509568][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.524918][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.539243][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.548297][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.568221][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.626919][ T5831] veth0_macvtap: entered promiscuous mode
[   89.653533][ T5831] veth1_macvtap: entered promiscuous mode
[   89.728295][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.730793][ T5823] veth0_vlan: entered promiscuous mode
[   89.737407][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.762099][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.781691][ T5837] veth0_vlan: entered promiscuous mode
[   89.817471][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.831792][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.843251][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.847000][ T5837] veth1_vlan: entered promiscuous mode
[   89.862573][ T5823] veth1_vlan: entered promiscuous mode
[   89.874261][   T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.902587][   T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.913359][   T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.946690][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.976690][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   90.005263][ T5823] veth0_macvtap: entered promiscuous mode
[   90.035298][ T5823] veth1_macvtap: entered promiscuous mode
[   90.053798][ T5837] veth0_macvtap: entered promiscuous mode
[   90.066914][ T5837] veth1_macvtap: entered promiscuous mode
[   90.124657][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.185573][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.202200][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.237700][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.247613][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.262351][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.275075][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.284506][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.297715][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.331851][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.389890][ T1167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.432342][ T1167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.453580][ T1167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.477137][  T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.492310][  T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.510555][ T1167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.658228][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.667628][  T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.700057][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.719368][  T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.873992][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.900490][  T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.909515][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[   90.917919][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[   90.939982][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.952000][  T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.049220][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.119146][ T5835] Bluetooth: hci0: command tx timeout
[   91.124582][ T5835] Bluetooth: hci2: command tx timeout
[   91.158857][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.167165][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.198799][ T5835] Bluetooth: hci1: command tx timeout
[   91.214218][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   91.279470][ T5835] Bluetooth: hci3: command tx timeout
[   91.759169][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.828093][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   91.859172][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.042287][  T781] cfg80211: failed to load regulatory.db
[   92.135713][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   93.198953][ T5835] Bluetooth: hci2: command tx timeout
[   93.204379][ T5835] Bluetooth: hci0: command tx timeout
[   93.279897][ T5835] Bluetooth: hci1: command tx timeout
[   93.360416][ T5835] Bluetooth: hci3: command tx timeout
[   94.632951][ T5963] Zero length message leads to an empty skb
[   96.164630][ T5988] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   96.325253][ T5981] netlink: 268 bytes leftover after parsing attributes in process `syz.1.11'.
[   96.680513][ T5987] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET)
[   96.857667][ T5996] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   97.347737][ T5981] syz.1.11 (5981) used greatest stack depth: 18808 bytes left
[   97.356103][ T6000] random: crng reseeded on system resumption
[   97.776824][ T6002] mmap: syz.1.15 (6002) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  100.236742][ T6050] process 'syz.1.20' launched './file0' with NULL argv: empty string added
[  100.264365][ T6037] netlink: 5 bytes leftover after parsing attributes in process `syz.0.19'.
[  101.941988][ T6085] binder: BINDER_SET_CONTEXT_MGR already set
[  101.948193][ T6085] binder: 6077:6085 ioctl 4018620d 9 returned -16
[  102.646859][ T6087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  103.218993][ T6109] can0: slcan on ttynull.
[  103.443013][ T6108] can0 (unregistered): slcan off ttynull.
[  104.426663][ T6127] QAT: Stopping all acceleration devices.
[  104.575061][ T5835] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260
[  104.575102][ T5835] Bluetooth: hci2: unexpected subevent 0x0a length: 725 > 30
[  107.044231][ T6175] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  107.299927][ T6183] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  107.583472][ T6187] FAULT_INJECTION: forcing a failure.
[  107.583472][ T6187] name failslab, interval 1, probability 0, space 0, times 1
[  107.639809][ T6187] CPU: 0 UID: 0 PID: 6187 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT(full) 
[  107.639833][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  107.639841][ T6187] Call Trace:
[  107.639846][ T6187]  <TASK>
[  107.639852][ T6187]  dump_stack_lvl+0x16c/0x1f0
[  107.639882][ T6187]  should_fail_ex+0x512/0x640
[  107.639897][ T6187]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  107.639920][ T6187]  should_failslab+0xc2/0x120
[  107.639934][ T6187]  kmem_cache_alloc_node_noprof+0x78/0x770
[  107.639952][ T6187]  ? do_kmem_cache_create+0x25b/0x740
[  107.639970][ T6187]  ? do_kmem_cache_create+0x25b/0x740
[  107.639981][ T6187]  do_kmem_cache_create+0x25b/0x740
[  107.639998][ T6187]  __kmem_cache_create_args+0x202/0x3c0
[  107.640017][ T6187]  mon_text_open+0x333/0x510
[  107.640034][ T6187]  ? __pfx_mon_text_open+0x10/0x10
[  107.640051][ T6187]  ? __pfx_mon_text_ctor+0x10/0x10
[  107.640066][ T6187]  ? __pfx_apparmor_file_open+0x10/0x10
[  107.640081][ T6187]  ? lockdown_is_locked_down+0x3f/0x130
[  107.640096][ T6187]  ? bpf_lsm_locked_down+0x9/0x10
[  107.640113][ T6187]  ? __pfx_mon_text_open+0x10/0x10
[  107.640126][ T6187]  full_proxy_open_regular+0x1b9/0x360
[  107.640144][ T6187]  do_dentry_open+0x982/0x1530
[  107.640164][ T6187]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  107.640182][ T6187]  vfs_open+0x82/0x3f0
[  107.640199][ T6187]  path_openat+0x1de4/0x2cb0
[  107.640224][ T6187]  ? __pfx_path_openat+0x10/0x10
[  107.640243][ T6187]  ? __lock_acquire+0xb8a/0x1c90
[  107.640260][ T6187]  do_filp_open+0x20b/0x470
[  107.640279][ T6187]  ? __pfx_do_filp_open+0x10/0x10
[  107.640311][ T6187]  ? alloc_fd+0x471/0x7d0
[  107.640334][ T6187]  do_sys_openat2+0x11b/0x1d0
[  107.640349][ T6187]  ? __pfx_do_sys_openat2+0x10/0x10
[  107.640371][ T6187]  ? find_held_lock+0x2b/0x80
[  107.640395][ T6187]  __x64_sys_openat+0x174/0x210
[  107.640411][ T6187]  ? __pfx___x64_sys_openat+0x10/0x10
[  107.640436][ T6187]  do_syscall_64+0xcd/0xfa0
[  107.640460][ T6187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.640473][ T6187] RIP: 0033:0x7f265a58efc9
[  107.640496][ T6187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.640510][ T6187] RSP: 002b:00007f26587f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  107.640525][ T6187] RAX: ffffffffffffffda RBX: 00007f265a7e6180 RCX: 00007f265a58efc9
[  107.640535][ T6187] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  107.640544][ T6187] RBP: 00007f265a611f91 R08: 0000000000000000 R09: 0000000000000000
[  107.640553][ T6187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.640561][ T6187] R13: 00007f265a7e6218 R14: 00007f265a7e6180 R15: 00007ffdd5fee188
[  107.640581][ T6187]  </TASK>
[  107.640649][ T6187] __kmem_cache_create_args(mon_text_ffff88805be47400) failed with error -22
[  108.158892][ T6187] CPU: 1 UID: 0 PID: 6187 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT(full) 
[  108.158913][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  108.158922][ T6187] Call Trace:
[  108.158927][ T6187]  <TASK>
[  108.158933][ T6187]  dump_stack_lvl+0x16c/0x1f0
[  108.158959][ T6187]  __kmem_cache_create_args+0x128/0x3c0
[  108.158980][ T6187]  mon_text_open+0x333/0x510
[  108.158998][ T6187]  ? __pfx_mon_text_open+0x10/0x10
[  108.159015][ T6187]  ? __pfx_mon_text_ctor+0x10/0x10
[  108.159031][ T6187]  ? __pfx_apparmor_file_open+0x10/0x10
[  108.159046][ T6187]  ? lockdown_is_locked_down+0x3f/0x130
[  108.159060][ T6187]  ? bpf_lsm_locked_down+0x9/0x10
[  108.159077][ T6187]  ? __pfx_mon_text_open+0x10/0x10
[  108.159091][ T6187]  full_proxy_open_regular+0x1b9/0x360
[  108.159114][ T6187]  do_dentry_open+0x982/0x1530
[  108.159137][ T6187]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  108.159156][ T6187]  vfs_open+0x82/0x3f0
[  108.159176][ T6187]  path_openat+0x1de4/0x2cb0
[  108.159203][ T6187]  ? __pfx_path_openat+0x10/0x10
[  108.159223][ T6187]  ? __lock_acquire+0xb8a/0x1c90
[  108.159241][ T6187]  do_filp_open+0x20b/0x470
[  108.159260][ T6187]  ? __pfx_do_filp_open+0x10/0x10
[  108.159298][ T6187]  ? alloc_fd+0x471/0x7d0
[  108.159336][ T6187]  do_sys_openat2+0x11b/0x1d0
[  108.159362][ T6187]  ? __pfx_do_sys_openat2+0x10/0x10
[  108.159379][ T6187]  ? find_held_lock+0x2b/0x80
[  108.159402][ T6187]  __x64_sys_openat+0x174/0x210
[  108.159426][ T6187]  ? __pfx___x64_sys_openat+0x10/0x10
[  108.159449][ T6187]  do_syscall_64+0xcd/0xfa0
[  108.159473][ T6187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.159487][ T6187] RIP: 0033:0x7f265a58efc9
[  108.159500][ T6187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.159513][ T6187] RSP: 002b:00007f26587f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  108.159527][ T6187] RAX: ffffffffffffffda RBX: 00007f265a7e6180 RCX: 00007f265a58efc9
[  108.159537][ T6187] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  108.159545][ T6187] RBP: 00007f265a611f91 R08: 0000000000000000 R09: 0000000000000000
[  108.159553][ T6187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.159562][ T6187] R13: 00007f265a7e6218 R14: 00007f265a7e6180 R15: 00007ffdd5fee188
[  108.159581][ T6187]  </TASK>
[  110.552878][ T6236] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input5
[  110.652494][ T6239] Process accounting resumed
[  110.815287][ T6238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.312978][ T6009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.753921][ T6009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.201497][ T6009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.745206][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  113.753959][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  113.763754][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  113.778052][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.796139][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  114.109817][ T6009] bridge_slave_1: left allmulticast mode
[  114.115635][ T6009] bridge_slave_1: left promiscuous mode
[  114.151542][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.290871][ T6009] bridge_slave_0: left allmulticast mode
[  114.296537][ T6009] bridge_slave_0: left promiscuous mode
[  114.380391][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.411812][ T6293] __vm_enough_memory: pid: 6293, comm: syz.2.52, bytes: 4398046511104 not enough memory for the allocation
[  114.443890][ T6293] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.4294967293), cmd(2)
[  115.560450][ T6301] FAULT_INJECTION: forcing a failure.
[  115.560450][ T6301] name fail_futex, interval 1, probability 0, space 0, times 1
[  115.573538][ T6301] CPU: 1 UID: 0 PID: 6301 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT(full) 
[  115.573565][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  115.573573][ T6301] Call Trace:
[  115.573579][ T6301]  <TASK>
[  115.573585][ T6301]  dump_stack_lvl+0x16c/0x1f0
[  115.573612][ T6301]  should_fail_ex+0x512/0x640
[  115.573629][ T6301]  should_fail_futex+0x4c/0x60
[  115.573657][ T6301]  futex_lock_pi_atomic+0x101/0xd50
[  115.573679][ T6301]  futex_lock_pi+0x23f/0x7c0
[  115.573698][ T6301]  ? __pfx_futex_lock_pi+0x10/0x10
[  115.573714][ T6301]  ? __futex_wait+0x24b/0x2f0
[  115.573744][ T6301]  ? futex_private_hash_put+0x18a/0x300
[  115.573767][ T6301]  ? __pfx_futex_wake_mark+0x10/0x10
[  115.573789][ T6301]  ? ksys_write+0x190/0x250
[  115.573810][ T6301]  do_futex+0x11a/0x350
[  115.573824][ T6301]  ? __pfx_do_futex+0x10/0x10
[  115.573849][ T6301]  __x64_sys_futex+0x1e0/0x4c0
[  115.573865][ T6301]  ? fput+0x9b/0xd0
[  115.573878][ T6301]  ? __pfx___x64_sys_futex+0x10/0x10
[  115.573893][ T6301]  ? xfd_validate_state+0x61/0x180
[  115.573908][ T6301]  ? __pfx_ksys_write+0x10/0x10
[  115.573938][ T6301]  do_syscall_64+0xcd/0xfa0
[  115.573960][ T6301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.573974][ T6301] RIP: 0033:0x7f68b098efc9
[  115.573987][ T6301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.573999][ T6301] RSP: 002b:00007f68b17e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  115.574013][ T6301] RAX: ffffffffffffffda RBX: 00007f68b0be5fa0 RCX: 00007f68b098efc9
[  115.574022][ T6301] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000
[  115.574030][ T6301] RBP: 00007f68b0a11f91 R08: 0000000000000000 R09: 000000008000fff5
[  115.574039][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.574047][ T6301] R13: 00007f68b0be6038 R14: 00007f68b0be5fa0 R15: 00007ffe49436408
[  115.574065][ T6301]  </TASK>
[  115.861230][ T5835] Bluetooth: hci1: command tx timeout
[  116.169686][ T6009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.226520][ T6009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.287034][ T6009] bond0 (unregistering): Released all slaves
[  117.244149][ T6311] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  117.451935][ T6282] chnl_net:caif_netlink_parms(): no params data found
[  117.885567][ T6009] hsr_slave_0: left promiscuous mode
[  117.891671][ T6009] hsr_slave_1: left promiscuous mode
[  117.897595][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.911368][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.922569][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.937879][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.964872][ T6009] veth1_macvtap: left promiscuous mode
[  117.970826][ T6009] veth0_macvtap: left promiscuous mode
[  117.976716][ T6009] veth1_vlan: left promiscuous mode
[  117.982864][ T6009] veth0_vlan: left promiscuous mode
[  117.999642][ T5835] Bluetooth: hci1: command tx timeout
[  118.471873][ T6009] team0 (unregistering): Port device team_slave_1 removed
[  118.531302][ T6009] team0 (unregistering): Port device team_slave_0 removed
[  118.875008][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.884612][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.892216][ T6282] bridge_slave_0: entered allmulticast mode
[  118.899596][ T6282] bridge_slave_0: entered promiscuous mode
[  118.936703][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.944119][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.951420][ T6282] bridge_slave_1: entered allmulticast mode
[  118.964721][ T6282] bridge_slave_1: entered promiscuous mode
[  119.009836][ T6282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.042092][ T6282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.134985][ T6282] team0: Port device team_slave_0 added
[  119.192936][ T6282] team0: Port device team_slave_1 added
[  119.241850][ T6340] random: crng reseeded on system resumption
[  119.295582][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.303981][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.364956][ T6282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.367155][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.367174][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.367203][ T6282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.633163][ T6282] hsr_slave_0: entered promiscuous mode
[  119.655103][ T6282] hsr_slave_1: entered promiscuous mode
[  119.682540][ T6282] debugfs: 'hsr0' already exists in 'hsr'
[  119.698460][ T6282] Cannot create hsr debugfs directory
[  120.078604][ T5835] Bluetooth: hci1: command tx timeout
[  120.918864][ T6375] ALSA: mixer_oss: invalid OSS volume '0'
[  120.924775][ T6375] ALSA: mixer_oss: invalid OSS volume 'PHONET'
[  120.938260][ T6375] ALSA: mixer_oss: invalid OSS volume 'L2TP/IPv6'
[  121.561224][ T6380] netlink: 188 bytes leftover after parsing attributes in process `syz.1.62'.
[  121.596254][ T6380] netlink: 93 bytes leftover after parsing attributes in process `syz.1.62'.
[  121.845812][ T6387] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0]
[  121.954797][ T6380] kfence: disabled
[  122.201603][ T5835] Bluetooth: hci1: command tx timeout
[  122.555895][ T6282] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  122.611800][ T6404] futex_wake_op: syz.1.65 tries to shift op by -2048; fix this program
[  122.636195][ T6404] 0x000000000001-0x000000020000 : ""
[  122.760274][ T6404] ftl_cs: FTL header corrupt!
[  122.806416][ T6282] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  122.961037][ T6404] syz.1.65(6404): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  123.677553][ T6282] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  123.783283][ T6282] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  123.924682][ T6426] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0]
[  124.427467][ T6282] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.586989][ T6282] 8021q: adding VLAN 0 to HW filter on device team0
[  124.682251][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.689476][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.725072][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.732228][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.199182][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'.
[  125.701047][ T6282] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.095503][ T6488] block2mtd: error: cannot open device �inX�����±��jFB�B>U�;߸�Ilk�
[  126.173727][ T6282] veth0_vlan: entered promiscuous mode
[  127.072077][ T6282] veth1_vlan: entered promiscuous mode
[  127.448409][ T6509] bridge0: port 3(gretap0) entered blocking state
[  127.456950][ T6509] bridge0: port 3(gretap0) entered disabled state
[  127.466261][ T6509] gretap0: entered allmulticast mode
[  127.489409][ T6509] gretap0: entered promiscuous mode
[  127.495545][ T6509] bridge0: port 3(gretap0) entered blocking state
[  127.502382][ T6509] bridge0: port 3(gretap0) entered forwarding state
[  127.596347][ T6282] veth0_macvtap: entered promiscuous mode
[  127.637754][ T6282] veth1_macvtap: entered promiscuous mode
[  127.723797][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.749386][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.836663][   T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.899618][   T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.970653][   T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.970762][   T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.200261][ T6528] FAULT_INJECTION: forcing a failure.
[  128.200261][ T6528] name failslab, interval 1, probability 0, space 0, times 0
[  128.215568][ T6528] CPU: 1 UID: 0 PID: 6528 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT(full) 
[  128.215605][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  128.215620][ T6528] Call Trace:
[  128.215627][ T6528]  <TASK>
[  128.215637][ T6528]  dump_stack_lvl+0x16c/0x1f0
[  128.215682][ T6528]  should_fail_ex+0x512/0x640
[  128.215708][ T6528]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  128.215749][ T6528]  should_failslab+0xc2/0x120
[  128.215775][ T6528]  kmem_cache_alloc_noprof+0x75/0x6e0
[  128.215810][ T6528]  ? key_alloc+0x3e0/0x1330
[  128.215852][ T6528]  ? key_alloc+0x3e0/0x1330
[  128.215883][ T6528]  key_alloc+0x3e0/0x1330
[  128.215931][ T6528]  ? __pfx_key_alloc+0x10/0x10
[  128.215965][ T6528]  ? __pfx_key_default_cmp+0x10/0x10
[  128.216003][ T6528]  ? __pfx_keyring_search_iterator+0x10/0x10
[  128.216052][ T6528]  keyring_alloc+0x44/0xc0
[  128.216093][ T6528]  look_up_user_keyrings+0x510/0x760
[  128.216131][ T6528]  ? __pfx_look_up_user_keyrings+0x10/0x10
[  128.216176][ T6528]  lookup_user_key+0x1a3/0x1300
[  128.216213][ T6528]  ? __pfx_lookup_user_key+0x10/0x10
[  128.216243][ T6528]  ? do_futex+0x122/0x350
[  128.216280][ T6528]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  128.216318][ T6528]  ? fput+0x9b/0xd0
[  128.216352][ T6528]  keyctl_keyring_clear+0x24/0x1a0
[  128.216382][ T6528]  __do_sys_keyctl+0x355/0x590
[  128.216415][ T6528]  do_syscall_64+0xcd/0xfa0
[  128.216458][ T6528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.216485][ T6528] RIP: 0033:0x7f68b098efc9
[  128.216506][ T6528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.216531][ T6528] RSP: 002b:00007f68b17c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  128.216556][ T6528] RAX: ffffffffffffffda RBX: 00007f68b0be6090 RCX: 00007f68b098efc9
[  128.216575][ T6528] RDX: 0000000000000002 RSI: 00000000fffffffb RDI: 0000000000000007
[  128.216592][ T6528] RBP: 00007f68b0a11f91 R08: 0000000000000008 R09: 0000000000000000
[  128.216609][ T6528] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000
[  128.216625][ T6528] R13: 00007f68b0be6128 R14: 00007f68b0be6090 R15: 00007ffe49436408
[  128.216664][ T6528]  </TASK>
[  128.452365][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.479243][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.756196][  T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.764545][  T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.288157][ T6549] FAULT_INJECTION: forcing a failure.
[  129.288157][ T6549] name failslab, interval 1, probability 0, space 0, times 0
[  129.301925][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.2.78 Not tainted syzkaller #0 PREEMPT(full) 
[  129.301947][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  129.301961][ T6549] Call Trace:
[  129.301967][ T6549]  <TASK>
[  129.301973][ T6549]  dump_stack_lvl+0x16c/0x1f0
[  129.301999][ T6549]  should_fail_ex+0x512/0x640
[  129.302013][ T6549]  ? __kmalloc_noprof+0xca/0x880
[  129.302031][ T6549]  should_failslab+0xc2/0x120
[  129.302046][ T6549]  __kmalloc_noprof+0xdd/0x880
[  129.302063][ T6549]  ? __register_sysctl_table+0xb3/0x1900
[  129.302089][ T6549]  ? __register_sysctl_table+0xb3/0x1900
[  129.302103][ T6549]  __register_sysctl_table+0xb3/0x1900
[  129.302120][ T6549]  ? is_module_address+0x5f/0xf0
[  129.302139][ T6549]  ? __pfx___register_sysctl_table+0x10/0x10
[  129.302154][ T6549]  ? is_module_address+0x69/0xf0
[  129.302169][ T6549]  ? register_net_sysctl_sz+0x228/0x3e0
[  129.302185][ T6549]  ? __asan_memcpy+0x3c/0x60
[  129.302212][ T6549]  __ip_vs_lblc_init+0x159/0x340
[  129.302234][ T6549]  ? __pfx___ip_vs_lblc_init+0x10/0x10
[  129.302253][ T6549]  ops_init+0x1e2/0x5f0
[  129.302271][ T6549]  setup_net+0x100/0x390
[  129.302284][ T6549]  ? __pfx_setup_net+0x10/0x10
[  129.302298][ T6549]  ? debug_mutex_init+0x37/0x70
[  129.302319][ T6549]  copy_net_ns+0x2f8/0x690
[  129.302335][ T6549]  create_new_namespaces+0x3ea/0xa90
[  129.302360][ T6549]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  129.302381][ T6549]  ksys_unshare+0x45b/0xa40
[  129.302395][ T6549]  ? __pfx_ksys_unshare+0x10/0x10
[  129.302409][ T6549]  ? xfd_validate_state+0x61/0x180
[  129.302429][ T6549]  __x64_sys_unshare+0x31/0x40
[  129.302441][ T6549]  do_syscall_64+0xcd/0xfa0
[  129.302463][ T6549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.302476][ T6549] RIP: 0033:0x7fc321d8efc9
[  129.302489][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.302501][ T6549] RSP: 002b:00007fc31fff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  129.302514][ T6549] RAX: ffffffffffffffda RBX: 00007fc321fe6090 RCX: 00007fc321d8efc9
[  129.302523][ T6549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  129.302531][ T6549] RBP: 00007fc321e11f91 R08: 0000000000000000 R09: 0000000000000000
[  129.302539][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.302546][ T6549] R13: 00007fc321fe6128 R14: 00007fc321fe6090 R15: 00007ffd06323e28
[  129.302565][ T6549]  </TASK>
[  130.220402][ T5835] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11
[  130.471478][ T6564] FAULT_INJECTION: forcing a failure.
[  130.471478][ T6564] name failslab, interval 1, probability 0, space 0, times 0
[  130.484832][ T6564] CPU: 0 UID: 0 PID: 6564 Comm: syz.0.82 Not tainted syzkaller #0 PREEMPT(full) 
[  130.484873][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  130.484888][ T6564] Call Trace:
[  130.484897][ T6564]  <TASK>
[  130.484907][ T6564]  dump_stack_lvl+0x16c/0x1f0
[  130.484952][ T6564]  should_fail_ex+0x512/0x640
[  130.484983][ T6564]  should_failslab+0xc2/0x120
[  130.485011][ T6564]  kmem_cache_alloc_lru_noprof+0x79/0x6e0
[  130.485049][ T6564]  ? xas_split_alloc+0x11c/0x490
[  130.485095][ T6564]  ? xas_split_alloc+0x11c/0x490
[  130.485131][ T6564]  xas_split_alloc+0x11c/0x490
[  130.485180][ T6564]  __folio_split+0xd73/0x4d80
[  130.485230][ T6564]  ? __pfx_try_to_unmap_one+0x10/0x10
[  130.485265][ T6564]  ? __mem_cgroup_try_charge_swap+0x8c/0x400
[  130.485297][ T6564]  ? __pfx___folio_split+0x10/0x10
[  130.485339][ T6564]  ? folio_alloc_swap+0x8af/0xd00
[  130.485369][ T6564]  split_folio_to_list+0x9b/0x180
[  130.485399][ T6564]  shmem_writeout+0x42e/0x1140
[  130.485439][ T6564]  ? __pfx_shmem_writeout+0x10/0x10
[  130.485467][ T6564]  ? __pfx_try_to_unmap+0x10/0x10
[  130.485498][ T6564]  ? find_held_lock+0x2b/0x80
[  130.485532][ T6564]  ? inode_to_bdi+0x9e/0x160
[  130.485567][ T6564]  ? folio_clear_dirty_for_io+0x112/0x790
[  130.485598][ T6564]  shrink_folio_list+0x2f45/0x4800
[  130.485642][ T6564]  ? __pfx_shrink_folio_list+0x10/0x10
[  130.485672][ T6564]  ? __lock_acquire+0x622/0x1c90
[  130.485718][ T6564]  ? find_held_lock+0x2b/0x80
[  130.485752][ T6564]  ? is_bpf_text_address+0x8a/0x1a0
[  130.485779][ T6564]  ? bpf_ksym_find+0x124/0x1c0
[  130.485856][ T6564]  reclaim_folio_list+0xda/0x5d0
[  130.485896][ T6564]  ? __pfx_css_rstat_updated+0x10/0x10
[  130.485940][ T6564]  ? __pfx_reclaim_folio_list+0x10/0x10
[  130.485988][ T6564]  ? lru_gen_update_size+0x543/0xe10
[  130.486029][ T6564]  ? lru_gen_del_folio+0x32b/0x540
[  130.486062][ T6564]  reclaim_pages+0x3ec/0x570
[  130.486098][ T6564]  ? __pfx_reclaim_pages+0x10/0x10
[  130.486128][ T6564]  ? madvise_cold_or_pageout_pte_range+0x1e2f/0x20d0
[  130.486166][ T6564]  madvise_cold_or_pageout_pte_range+0x14d1/0x20d0
[  130.486212][ T6564]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  130.486244][ T6564]  ? __lock_acquire+0x622/0x1c90
[  130.486273][ T6564]  ? __pfx_stack_trace_save+0x10/0x10
[  130.486307][ T6564]  ? css_rstat_updated+0x1c2/0x510
[  130.486344][ T6564]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  130.486373][ T6564]  walk_pgd_range+0xc05/0x1f50
[  130.486428][ T6564]  ? __pfx_walk_pgd_range+0x10/0x10
[  130.486476][ T6564]  __walk_page_range+0x163/0x820
[  130.486518][ T6564]  ? __lock_acquire+0xb8a/0x1c90
[  130.486553][ T6564]  walk_page_range_vma+0x2c7/0xa20
[  130.486595][ T6564]  ? __pfx_walk_page_range_vma+0x10/0x10
[  130.486632][ T6564]  ? find_held_lock+0x2b/0x80
[  130.486682][ T6564]  madvise_pageout+0x257/0x540
[  130.486711][ T6564]  ? __pfx_madvise_pageout+0x10/0x10
[  130.486735][ T6564]  ? finish_task_switch.isra.0+0x21c/0xc10
[  130.486800][ T6564]  madvise_vma_behavior+0xb14/0x2d50
[  130.486835][ T6564]  ? mas_prev_setup.constprop.0+0xb6/0x9d0
[  130.486884][ T6564]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  130.486916][ T6564]  ? mas_prev+0x9b/0xf0
[  130.486941][ T6564]  ? __pfx_mas_prev+0x10/0x10
[  130.486977][ T6564]  ? find_vma_prev+0xd3/0x150
[  130.487004][ T6564]  ? __pfx_find_vma_prev+0x10/0x10
[  130.487044][ T6564]  ? __futex_wait+0x24b/0x2f0
[  130.487082][ T6564]  madvise_walk_vmas+0x31f/0x9c0
[  130.487114][ T6564]  ? __pfx___schedule+0x10/0x10
[  130.487150][ T6564]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  130.487191][ T6564]  madvise_do_behavior+0x1e2/0x530
[  130.487224][ T6564]  ? __pfx_madvise_do_behavior+0x10/0x10
[  130.487255][ T6564]  ? down_read+0x13d/0x480
[  130.487301][ T6564]  do_madvise+0x176/0x240
[  130.487329][ T6564]  ? __pfx_do_madvise+0x10/0x10
[  130.487355][ T6564]  ? do_futex+0x122/0x350
[  130.487410][ T6564]  ? syscall_user_dispatch+0x78/0x140
[  130.487449][ T6564]  __x64_sys_madvise+0xa9/0x110
[  130.487480][ T6564]  do_syscall_64+0xcd/0xfa0
[  130.487521][ T6564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.487549][ T6564] RIP: 0033:0x7f656078efc9
[  130.487571][ T6564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.487596][ T6564] RSP: 002b:00007f6561675038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  130.487621][ T6564] RAX: ffffffffffffffda RBX: 00007f65609e6090 RCX: 00007f656078efc9
[  130.487637][ T6564] RDX: 0000000000000015 RSI: 00000000002003f0 RDI: 0000000000000000
[  130.487652][ T6564] RBP: 00007f6560811f91 R08: 0000000000000000 R09: 0000000000000000
[  130.487664][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.487679][ T6564] R13: 00007f65609e6128 R14: 00007f65609e6090 R15: 00007fff1becaa98
[  130.487716][ T6564]  </TASK>
[  131.428155][ T6574] capability: warning: `syz.3.83' uses 32-bit capabilities (legacy support in use)
[  132.979131][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  132.991799][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  135.102953][ T6637] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  136.617172][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'.
[  138.106174][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'.
[  138.891566][ T6678] random: crng reseeded on system resumption
[  138.907802][ T6688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'.
[  139.075590][ T6691] netlink: 5 bytes leftover after parsing attributes in process `syz.1.103'.
[  139.284952][ T6696] netlink: 'syz.2.106': attribute type 1 has an invalid length.
[  140.584337][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.107'.
[  142.450675][ T6735] ==================================================================
[  142.450686][ T6735] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60
[  142.450712][ T6735] Write of size 8 at addr ffffc900036695e0 by task syz.3.113/6735
[  142.450724][ T6735] 
[  142.450731][ T6735] CPU: 0 UID: 0 PID: 6735 Comm: syz.3.113 Not tainted syzkaller #0 PREEMPT(full) 
[  142.450747][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  142.450755][ T6735] Call Trace:
[  142.450761][ T6735]  <TASK>
[  142.450767][ T6735]  dump_stack_lvl+0x116/0x1f0
[  142.450789][ T6735]  print_report+0xcd/0x630
[  142.450803][ T6735]  ? __virt_addr_valid+0x81/0x610
[  142.450818][ T6735]  ? sys_imageblit+0x1a6f/0x1e60
[  142.450833][ T6735]  kasan_report+0xe0/0x110
[  142.450846][ T6735]  ? sys_imageblit+0x1a6f/0x1e60
[  142.450865][ T6735]  sys_imageblit+0x1a6f/0x1e60
[  142.450883][ T6735]  ? desc_read_finalized_seq+0x131/0x1d0
[  142.450898][ T6735]  ? __pfx_sys_imageblit+0x10/0x10
[  142.450914][ T6735]  ? __asan_memcpy+0x3c/0x60
[  142.450930][ T6735]  ? desc_read+0x2ae/0x370
[  142.450943][ T6735]  ? panic_on_this_cpu+0x32/0x40
[  142.450957][ T6735]  ? _prb_read_valid+0x73c/0x890
[  142.450974][ T6735]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  142.450992][ T6735]  soft_cursor+0x524/0xa10
[  142.451006][ T6735]  ? fb_get_color_depth+0x120/0x250
[  142.451026][ T6735]  bit_cursor+0xe8c/0x17e0
[  142.451040][ T6735]  ? __pfx_bit_cursor+0x10/0x10
[  142.451055][ T6735]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  142.451073][ T6735]  ? get_color+0x1da/0x450
[  142.451091][ T6735]  ? __pfx_bit_cursor+0x10/0x10
[  142.451102][ T6735]  fbcon_cursor+0x40c/0x5a0
[  142.451121][ T6735]  ? __pfx_mark_held_locks+0x1/0x10
[  142.451135][ T6735]  hide_cursor+0x87/0x220
[  142.451150][ T6735]  do_con_write+0x240c/0x8290
[  142.451165][ T6735]  ? __pfx___mutex_trylock_common+0x10/0x10
[  142.451180][ T6735]  ? __pfx___might_resched+0x10/0x10
[  142.451198][ T6735]  ? rcu_is_watching+0x12/0xc0
[  142.451216][ T6735]  ? trace_contention_end+0xdd/0x130
[  142.451238][ T6735]  ? __mutex_lock+0x1c5/0x1060
[  142.451261][ T6735]  ? n_tty_write+0x44d/0x11e0
[  142.451295][ T6735]  ? __pfx_do_con_write+0x10/0x10
[  142.451324][ T6735]  ? __pfx___mutex_lock+0x10/0x10
[  142.451347][ T6735]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  142.451372][ T6735]  con_write+0x23/0xb0
[  142.451392][ T6735]  do_output_char+0x5d9/0x840
[  142.451410][ T6735]  n_tty_write+0x4fe/0x11e0
[  142.451431][ T6735]  ? __pfx_n_tty_write+0x10/0x10
[  142.451450][ T6735]  ? __pfx_woken_wake_function+0x10/0x10
[  142.451466][ T6735]  ? __pfx___might_resched+0x10/0x10
[  142.451484][ T6735]  ? __pfx_n_tty_write+0x10/0x10
[  142.451503][ T6735]  file_tty_write.constprop.0+0x503/0x9b0
[  142.451521][ T6735]  redirected_tty_write+0xd4/0x150
[  142.451537][ T6735]  vfs_write+0x7d3/0x11d0
[  142.451562][ T6735]  ? __pfx_redirected_tty_write+0x10/0x10
[  142.451579][ T6735]  ? __pfx_vfs_write+0x10/0x10
[  142.451597][ T6735]  ? find_held_lock+0x2b/0x80
[  142.451620][ T6735]  ksys_write+0x12a/0x250
[  142.451638][ T6735]  ? __pfx_ksys_write+0x10/0x10
[  142.451658][ T6735]  do_syscall_64+0xcd/0xfa0
[  142.451677][ T6735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.451691][ T6735] RIP: 0033:0x7f68b098efc9
[  142.451703][ T6735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.451716][ T6735] RSP: 002b:00007f68b17a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  142.451729][ T6735] RAX: ffffffffffffffda RBX: 00007f68b0be6180 RCX: 00007f68b098efc9
[  142.451738][ T6735] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000005
[  142.451747][ T6735] RBP: 00007f68b0a11f91 R08: 0000000000000000 R09: 0000000000000000
[  142.451756][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.451764][ T6735] R13: 00007f68b0be6218 R14: 00007f68b0be6180 R15: 00007ffe49436408
[  142.451778][ T6735]  </TASK>
[  142.451783][ T6735] 
[  142.451787][ T6735] The buggy address belongs to a vmalloc virtual mapping
[  142.451800][ T6735] Memory state around the buggy address:
[  142.451809][ T6735]  ffffc90003669480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  142.451818][ T6735]  ffffc90003669500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  142.451828][ T6735] >ffffc90003669580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  142.451835][ T6735]                                                        ^
[  142.451844][ T6735]  ffffc90003669600: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  142.451853][ T6735]  ffffc90003669680: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  142.451861][ T6735] ==================================================================
[  142.470136][ T6735] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  142.470152][ T6735] CPU: 0 UID: 0 PID: 6735 Comm: syz.3.113 Not tainted syzkaller #0 PREEMPT(full) 
[  142.470171][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  142.470180][ T6735] Call Trace:
[  142.470185][ T6735]  <TASK>
[  142.470191][ T6735]  dump_stack_lvl+0x3d/0x1f0
[  142.470216][ T6735]  vpanic+0x640/0x6f0
[  142.470232][ T6735]  panic+0xca/0xd0
[  142.470245][ T6735]  ? __pfx_panic+0x10/0x10
[  142.470260][ T6735]  ? sys_imageblit+0x1a6f/0x1e60
[  142.470278][ T6735]  ? preempt_schedule_common+0x44/0xc0
[  142.470299][ T6735]  ? preempt_schedule_thunk+0x16/0x30
[  142.470316][ T6735]  check_panic_on_warn+0xab/0xb0
[  142.470332][ T6735]  end_report+0x107/0x170
[  142.470345][ T6735]  kasan_report+0xee/0x110
[  142.470358][ T6735]  ? sys_imageblit+0x1a6f/0x1e60
[  142.470376][ T6735]  sys_imageblit+0x1a6f/0x1e60
[  142.470394][ T6735]  ? desc_read_finalized_seq+0x131/0x1d0
[  142.470409][ T6735]  ? __pfx_sys_imageblit+0x10/0x10
[  142.470425][ T6735]  ? __asan_memcpy+0x3c/0x60
[  142.470442][ T6735]  ? desc_read+0x2ae/0x370
[  142.470455][ T6735]  ? panic_on_this_cpu+0x32/0x40
[  142.470469][ T6735]  ? _prb_read_valid+0x73c/0x890
[  142.470486][ T6735]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  142.470504][ T6735]  soft_cursor+0x524/0xa10
[  142.470519][ T6735]  ? fb_get_color_depth+0x120/0x250
[  142.470548][ T6735]  bit_cursor+0xe8c/0x17e0
[  142.470564][ T6735]  ? __pfx_bit_cursor+0x10/0x10
[  142.470579][ T6735]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  142.470598][ T6735]  ? get_color+0x1da/0x450
[  142.470618][ T6735]  ? __pfx_bit_cursor+0x10/0x10
[  142.470631][ T6735]  fbcon_cursor+0x40c/0x5a0
[  142.470651][ T6735]  ? __pfx_mark_held_locks+0x1/0x10
[  142.470666][ T6735]  hide_cursor+0x87/0x220
[  142.470681][ T6735]  do_con_write+0x240c/0x8290
[  142.470697][ T6735]  ? __pfx___mutex_trylock_common+0x10/0x10
[  142.470713][ T6735]  ? __pfx___might_resched+0x10/0x10
[  142.470732][ T6735]  ? rcu_is_watching+0x12/0xc0
[  142.470751][ T6735]  ? trace_contention_end+0xdd/0x130
[  142.470766][ T6735]  ? __mutex_lock+0x1c5/0x1060
[  142.470779][ T6735]  ? n_tty_write+0x44d/0x11e0
[  142.470799][ T6735]  ? __pfx_do_con_write+0x10/0x10
[  142.470816][ T6735]  ? __pfx___mutex_lock+0x10/0x10
[  142.470830][ T6735]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  142.470845][ T6735]  con_write+0x23/0xb0
[  142.470862][ T6735]  do_output_char+0x5d9/0x840
[  142.470881][ T6735]  n_tty_write+0x4fe/0x11e0
[  142.470903][ T6735]  ? __pfx_n_tty_write+0x10/0x10
[  142.470923][ T6735]  ? __pfx_woken_wake_function+0x10/0x10
[  142.470941][ T6735]  ? __pfx___might_resched+0x10/0x10
[  142.470960][ T6735]  ? __pfx_n_tty_write+0x10/0x10
[  142.470980][ T6735]  file_tty_write.constprop.0+0x503/0x9b0
[  142.471000][ T6735]  redirected_tty_write+0xd4/0x150
[  142.471016][ T6735]  vfs_write+0x7d3/0x11d0
[  142.471036][ T6735]  ? __pfx_redirected_tty_write+0x10/0x10
[  142.471053][ T6735]  ? __pfx_vfs_write+0x10/0x10
[  142.471071][ T6735]  ? find_held_lock+0x2b/0x80
[  142.471094][ T6735]  ksys_write+0x12a/0x250
[  142.471112][ T6735]  ? __pfx_ksys_write+0x10/0x10
[  142.471134][ T6735]  do_syscall_64+0xcd/0xfa0
[  142.471155][ T6735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.471170][ T6735] RIP: 0033:0x7f68b098efc9
[  142.471182][ T6735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.471195][ T6735] RSP: 002b:00007f68b17a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  142.471210][ T6735] RAX: ffffffffffffffda RBX: 00007f68b0be6180 RCX: 00007f68b098efc9
[  142.471220][ T6735] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000005
[  142.471228][ T6735] RBP: 00007f68b0a11f91 R08: 0000000000000000 R09: 0000000000000000
[  142.471237][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.471245][ T6735] R13: 00007f68b0be6218 R14: 00007f68b0be6180 R15: 00007ffe49436408
[  142.471259][ T6735]  </TASK>
[  142.471417][ T6735] Kernel Offset: disabled