last executing test programs:

2m30.963474805s ago: executing program 1 (id=181):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r1 = socket(0x1e, 0x6, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9)
sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x3)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
ioctl$auto_TUNSETOWNER(r3, 0x400454cc, &(0x7f0000000280)=0xfc0)
r5 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f00000000c0), 0x408081, 0x0)
setsockopt$auto_SO_RCVTIMEO_NEW(r5, 0x7, 0x42, &(0x7f0000000180)=':)[-&/\x00', 0x5)
getdents$auto(r4, 0x0, 0xfff)
msync$auto(0x7f, 0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x0, 0x0)
clock_nanosleep$auto(0x8001, 0x9, &(0x7f00000001c0)={0xf5d, 0x7f}, &(0x7f0000000240)={0x0, 0x1})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r7 = socket(0x10, 0x2, 0x4)
mlock$auto(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (fail_nth: 6)
write$auto(r7, &(0x7f0000000000)='-\x00', 0x2fb)
unshare$auto(0x40000080)

2m28.403222685s ago: executing program 1 (id=184):
ioperm$auto(0x7, 0x6, 0x3)
rt_sigaction$auto(0xffffffff, &(0x7f0000000100)={&(0x7f0000000180)=0x0, 0x8000000000000001, 0x0, {0xffffffffffffff09}}, 0x0, 0x8)
mmap$auto(0x0, 0xfff, 0xdf, 0x9a72, 0xffffffffffffffff, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0)
ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, &(0x7f0000000100)={0x0, 0x9d, 0x1, [0x0]})
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x4, 0xb}, 0x7f, 0x0, 0x0, 0x8)
rt_sigaction$auto(0xce4e, &(0x7f0000000240)={&(0x7f0000000080)=&(0x7f0000000040)=0x80, 0xa, &(0x7f0000000200)=&(0x7f00000000c0)=0x9, {0x9}}, &(0x7f0000000440)={&(0x7f0000000340)=&(0x7f0000000300)=0x6, 0xe, &(0x7f00000003c0)=&(0x7f0000000380)=0x4d, {0x401}}, 0x8)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="82", @ANYBLOB], 0x1c}}, 0x4044820)
r2 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4aa519ee8a8ce6755467d23edb317545d9bc87452a05", 0x49}, 0x3, &(0x7f0000000480)="53f6d6d6522f4e76aafe0f06c3ea7732c94a547684be941614dc8858ec4f75eddd0ffaa568da385fbcd8", 0x1, 0x1000}, 0x3}, 0x6629ddd2, 0x100)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = fanotify_init$auto(0x5, 0x1)
fanotify_mark$auto(r4, 0x205, 0x100003, 0x4, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
socket(0x27, 0x5, 0x0)
mlockall$auto(0x5)
r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0)
mmap$auto(0x6, 0x48000a, 0x100002bb, 0x14, r1, 0x1)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x4001, 0x0)
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)

2m27.249368961s ago: executing program 1 (id=186):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x2eb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r2 = open(&(0x7f0000000800)='./file0\x00', 0xa2240, 0x154)
fcntl$auto(r2, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
socket(0xa, 0x2, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)=""/16, 0x10)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0)
r3 = open(0x0, 0x22240, 0x154)
openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0)
writev$auto(r2, 0x0, 0x80000001)
fcntl$auto(r3, 0xfffffffd, 0x0)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x101a02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x8, 0x0, 0x4, @raw=0x404, @enumerated={0x55d3, 0x53, "bf154d70dcfcea02faacb07c4222db1f207fdb681dc9b0bf2c6c9ce16d51ebc73df6a7aa16659cd5e4dc8374caf945548e604179f1f87c3bd8701d3d5c3d998c", 0xffffffffffffffff, 0x91e0}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"})
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/blank\x00', 0xa001, 0x0)
pread64$auto(0xffffffffffffffff, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9)
socket(0xa, 0x2, 0x3a)
close_range$auto(r0, r3, 0x0)
epoll_create$auto(0x2)
socket(0x2b, 0x1, 0x1)
bind$auto(r5, &(0x7f0000000140)=@qipcrtr={0x2a, 0x0, 0x8000}, 0x5)

2m26.766351102s ago: executing program 1 (id=187):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0)
shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000240)={{0x3fe, 0xee00, 0xffffffffffffffff, 0x9, 0xc53a, 0x29, 0xe}, 0x4, 0xffffffffffffffff, 0xff, 0x81, @inferred, @inferred=<r0=>0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/tracing/error_log\x00', 0x2, 0x0)
ioctl$auto_FS_IOC_UNRESVSP64(r1, 0x4030582b, 0x5)
r2 = setfsgid$auto(0xee00)
fchown$auto(0xffffffffffffffff, 0xee00, r2)
mmap$auto(0x0, 0x10018, 0xdf, 0xeb1, 0x40000000000a5, 0x808000)
r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0)
ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0)
fsconfig$auto(r3, 0x80000000, 0x0, 0x0, r2)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, r0, 0x0, 0x10002)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
socket(0x3, 0x3, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x880201, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x3ff, 0x5, 0x20000000d, 0x8fd6, 0xfffffffffffffff8, 0x3, 0x60000020000, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x0, 0x400, 0x5, 0xfffffffffffffffe]}, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0xf00)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0xa242, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/crash_hotplug\x00', 0x121000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x29, 0x2, 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)

2m25.678932422s ago: executing program 1 (id=190):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x80202, 0x0)
write$auto_tomoyo_self_operations_securityfs_if(r1, &(0x7f0000000080)="60da", 0x2)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e072"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(r2, 0x8, 0x0)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", <r5=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10)
bpf$auto(0x19, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x203, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
sysfs$auto(0xfffffffe, 0x10000000000002a, 0x4)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0)
ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
mmap$auto(0x0, 0x5, 0x4, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

2m24.692110559s ago: executing program 32 (id=162):
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x80202, 0x0)
write$auto_tomoyo_self_operations_securityfs_if(r1, &(0x7f0000000080)="60da", 0x2)
preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e072"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(r2, 0x8, 0x0)
ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", <r5=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10)
bpf$auto(0x19, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x203, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
sysfs$auto(0xfffffffe, 0x10000000000002a, 0x4)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
mmap$auto(0x0, 0x5, 0x4, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

2m14.066953059s ago: executing program 2 (id=204):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck1/ignore_ce\x00', 0xa0202, 0x0)
sendfile$auto(r0, r0, 0x0, 0xfffffffffffffffb)
read$auto(r0, &(0x7f0000000140)='ovs_p\x04\x00\x00\x00\x00\x00', 0x8)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
keyctl$auto(0x4, 0x0, 0x0, 0x0, 0x800000000)
signalfd$auto(r0, &(0x7f0000000340)={0xffffffffffffffff}, 0x3)
capset$auto(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
select$auto(0x3, &(0x7f0000000040)={[0x5, 0x4, 0x37, 0x8, 0x4, 0xfffffffffffffffe, 0xa, 0x8, 0x9, 0x0, 0x3, 0xcf, 0x7, 0x213, 0x5, 0xffffffffffffffff]}, 0x0, 0x0, 0x0)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0700000000000000df25020000002c00018028003c80ceea994b8e7587d1654723f5b3cc330b4212ef00045d1d55fec5b15800"/60], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004855)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004811}, 0x800)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyyf\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b67, r1)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x80091, 0x0)
ioctl$auto(0xffffffffffffffff, 0xe, r3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
read$auto(r2, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
unshare$auto(0x40000080)
unlink$auto(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00')
ioctl$auto(0x3, 0x8004543a, 0x10000000000402)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bdi/1:8/power/runtime_status\x00', 0x32941, 0x0)
prctl$auto_SECCOMP_MODE_FILTER(0x8001, 0x2, 0x0, 0xffffffffffffffac, 0x5)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/226, 0xfffffffffffffebd)
socket$nl_generic(0x10, 0x3, 0x10)

2m13.091826631s ago: executing program 2 (id=206):
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0)
r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0xa002, 0x0)
writev$auto(r0, 0x0, 0x100)
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r2, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
io_setup$auto(0x7ffe, 0x0)
io_setup$auto(0x7ffe, &(0x7f0000000000))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)

2m11.950639384s ago: executing program 2 (id=209):
r0 = ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000040)={0x1, &(0x7f0000000000)={0x1000, 0xb8, 0x1, @raw=0x8}})
statmount$auto(&(0x7f0000000080)={0xdd1f, @inferred=r0, 0x5, 0x4}, &(0x7f00000000c0)={0x7, 0x5, 0x3, 0x4, 0x0, 0x6, 0x5, 0xd, 0x7, 0x7, 0x8, 0x2, 0x619b, 0x100000001, 0x81, 0x3, 0x8, 0x1000, 0x3, 0x7, 0x50000, 0x8001, 0x200, 0x36c08d9a, 0x6, 0x1ff, 0x8, 0x3, 0x4, 0x7, 0x0, [0x3da, 0x4, 0x400, 0x8, 0x9, 0x0, 0x6, 0x2, 0x7, 0x4, 0x7fffffffffffffff, 0x4, 0x6, 0x7, 0xa1e, 0x3, 0x80, 0x5, 0x0, 0x6, 0x3, 0x3, 0x6, 0x7, 0x7247, 0x10001, 0x0, 0x76ee, 0x59, 0x8, 0x25660d96, 0x6, 0x3, 0x7ae, 0x22e8ce23, 0x1ff, 0x58, 0x4, 0x2, 0x7ff, 0x6, 0x0, 0x9], "946f3d73dee06361f959f4ba3af25dccd2a880554162bc2fdcb3941e6ae4470da7751a6944cfc818a9f1bc07a09ebbc5e3aa3a24baade5e5c751027b0f677b12a6717b82bb41fcb6343388d58fb824ae7849f091bcbab7009a31c2e53a2c8797c2cbb0d9ba95da863b33791fcc510fc853b1befee37ff4cffe561b482357bff0cd66451ca002cab852af1200b58a22da23c1a00d207c88153ae929b936a34b1e16c6e56d87150f43cc1e113b6e61bac266d19da9f11f9ed2ba54e4bbc9a8eae7f3480ee067803f5ec6dd3c4a9c804a4955b65797b589"}, 0x2, 0x4)
pwritev2$auto(r0, &(0x7f00000013c0)={&(0x7f00000003c0)="e98b290f887f15aad140156c255829e6fcbf4c0fceaeb8da2727605027023a81ed05301d50793c43004fa0a62ebed10dfd2e0e1ae7be6ed9437e41e974a9ded2a5836446f72b8c10f464f9df6db245cdc68eb711a55d9d43a5ba15c7c5ba3c11fcb5010ded814f10a1c16d1c396d747cde44ffb6cac588126eef9b9b3378d2b983bbf159bffa19d235e983c6c4e86fd54f5ff76b1756ec57f56bb98ee1ab5c35befaa8dc64edcc2fdda1c4c2c7fad0d4aa70a705428d9fd164d34e4be2f15aa6beae78e5c52ed50c693120339377ce5b3908d99ca8be18a150afd79deb4fe2c8f95294832845dce7202ffabd4c992038ec991e645b7815a680ed0e45be993fdf0d7c02211b891da39829ed382130a0d2522ee1b7e26ec2b1af28050df92977d6508f46e1fff3dee9b83674fb10ff80cdb83e3cad82a787389e3442658c82cd0919d604acae163cd4aed2242937a780dba4dbda2d21fa28599d308a1dd7f61dbea718b1fa150536c20d458caa9a1438229b9bfa5a6c48fb26a411fee0fb19d0d5753738baf0bd2254e51670f1dc95350295364f0fc4a3422779aa03ed0b93b1887f411bff0cb611b23ba0a5dd488e9141fc0ffc23ebcb68dfd64e1c467d09f78608ddf87d95fbb24d4aaec4df089da85b40ef715d20f1b56dce34e2faed285255966d82f969facde0f4026dd6806b43b1c64f6ddca67f05cdb58674165d4e64d88b9bab1e1ae59aefc9418e1b653b21551af6a6bb57bed43bb95f0e5abf3640e49e703f1d264429851881c6aefe18c74a91a57401aaa8dec5dc00455463903fdf93957b874903f2d08e548bda1a1623a4bcf9653856008090d9130911932d906a66cdea63ac36a5f99ab39db07601dc1a7df42880a8cde05eea6d96b3acd5952628cbb94bd3a98bfc7544b72c9ecc27ce0384511f785f9666d326ffe49aba68da86f97d473b50b4368c728a71a0516077163753c15ca9f9b76d50676b98859f8df7fd1deaa53bdc0aa0436b55b4f286d5ca0894c3421d0e203ce649f758db562b163249305839c4ea5652fba6e35dfea2b48dd99a505551c34cad904e82dda001ac6f2bd1ca73afe26e79493c112d220f4933a0eeacb9b7ffc3188d700dbfe2e00492dc6bea2ccb3e6cda92a2d28e9179ec780ce8db3ee57934f01eb2fde1e0c09c25289c47878ffef5d7be91ee83c82b78b1fad6ff5ea972bd9c9a4a735af63120bf1a81c274a319bac64c2a4234ffe2984885cdd26fe855229fc196d9edd72da9c3d5277386b699945e69a6b32da24e6464793cf35ae12930b8a944af6cd541a408300035b4344538f850378b1b960db560269e4263aa526717906268be0f0890c83168c7936c06fcf9fa027fd0a83b29f2588a33a061801b9f24666f85c7fc0d03c285806572f336add7258d8dddec6266420dd49a603d955a40073994e57ee4d08de55062088d63f18bd9dd131f9c11a993179d325285318abfc64608b42bed41b036e95e0602ad87f8950db61a22cf75f0fc5da09a9a724fd580cb25e327e76f7276e2a91fda7ca2c69f1d4093a7100a01cf1c4c54448569ee1be0525c54c623d014bc9a4e73b44bb8ff8694b01028c77b714096af5d79c9210c6082189e53d766ab11fbf401d6e84dc0aea13869d21ec580d0514c9399dab3cc37f20c35e4dfebc240e52b707ebc92c45ad310923a0a418701b6450d594109e4651b85fddaa0c4d3d5e85d440504c7066345d98cfcb848da35a7f1567492ada7d715f7d007e33e2b33be9cd7c4d3ccc3339653cb805f223ae517cb451a369171e0f66864e6e0ad7e5e88d1edaf1fcce1589a0cfcb53791ea8e4a1976ddcb5c245e7da1169a2f933952793df3c99ce073b9ccde7f338105f253f87e43e8f67f507064e2315518a54936218bf0ed6ef5b9ddcac897b5c009c2cc346c6b880cf1487cbd423f173bdbcc43cb2fc3becea6ff490361a58767117ccd7499118b41bcc5bf6875b4a30532659e0bd51c380c6bf49af1fc051760c041e9f77529f1f49a4aa18f62d58efbba0d08604f426b586ca14f001d85e6deb6eb21e957e80c1807051f50043151548b03fba5cfffd4a66b4b1864fe1d46606d9642be3d7fe3c79ba1f43b728250d1dfbc60ec4086b5dd3860d479635b35801f318615e8cd8f6e177b2f09d7f8d4b06058ef195d043e6a6e1d8c76031dc40d7fefe208db38043f81349f67a29cc4e7a0587dfb511570d7cddcf507b8cb09f2b9c7d9b4f95892ed024ff981c8eb82f6078557c5ecb5f0bf1c0cde4e50449797267ae3975e204b2d752e4dc248ad6742a55a24d4c1d05c13e6ce5c9b5a53e9aa5379ff9550604d7d94ec08fe2f4ee7379dfbdbd476469883d7ca7bda8a442994028f0538a6486b0d8c371a7d19e37489d6a2ea09d2f1ccb893b78b343672df90cad65a5ca4d4ab59734cf3ac54e4a8b7f272856f5d0c34c5188d9acf612df8ccc6cc9aab0248c9f5b2ccce310351f5ac0b7f9137bf136831874a422da445a11552b00dad80da6068a96f53e1ae483b21435f16b185678a2233724e409b12031538610e3527b646474fd3381274debd89e054d73f4de03dcb46e57978f49e540dc1d6006e52c6a71d7ea5f2ecd7c0af471eec85768cbe2b5eb036e64c4c494aa431ec9d230b06ec8231fc0346b2362545158403b5840e40170ecec95abffee5f92d34a53e4a9e9bb937454bfeb2f5827ce3a6f23c8919fd2ef14db8e67d63d0ec2af1f459175e3d17d4482e5e0be05dcfdd38b1902993b661c66a01e315cea47d4ca2d757745afebd001075cd744eaebb5c0ea2892063a35259bd505552db4bba33bfe71e80e84ef18bd7f50f8304322a3165d76fc83a5534e94dbeca361ab1b5edf5770661b107027b28d9a50233405b225a105defeb32cc09f96f70679526f10c64496e9a917f912752c35371ec668f183306de35fb5cb2936737372fba3f2b1f231315bf30a8d96c3a20ecfb457034c922c241f407a3e07e531e55470d40ce78a4016e441b2d43dae03fbd4421f9aafd2006fa2749715a9fbe7307647743a434f78ddeed884ec24cae366bf683e58551aa30f753ba7669962d4c04c9bce83c44bd5aec951b07ff7debce81d1ff59d87282b6e00f081e5924b3977fa2a3778349c1d00fb175c02c90142d4a907d1149d871779827d16ee48b5dabcf215df801345ca3f2ea6ee0373e61bb7fa43912e9b60e945d65196c25bb07b28054ac9934ba379e7db73448e16c04cad7aeaaa38858d8fe49f72d699bba075d1017e2c40b327db7b5329b45a619fda5c4550f4c186491d4a77acf57981ec22224806ab92d5bb3df0927fef00f7e61983a8824664aaab15bd32827612f23af67c5319c5ac3e4d7cf431c55704d50d235cd9d832e842e8f5686d5ce3d60b62920dacf4736310c0b562db16d91c02dd8d0e7e5220124f80c37dabf2b5494a8c6272a0a4b90a65b521982bdfbd8f50e881923c478030629c934e7aac17ab83563371bca1ca48ac510a5c2e6fb8b4f5628fa4ab5c8e88d084d76541df28ccffa596eec4875763e7e7dafc137c28ba629d75b5ec4a4dadca727982d0ce79cd285f74738e275263cdaaa68acbca231416eea65bd60b17b766d6bc8c7116e950f4c6de7e0a65228f02a2f2f73a4f6eb6aab2fd4d15ec69d2119d406d718d5ed9e646952f79fa0ca80d84bb05490c8c0e26f14d2a529b394eb933223a7437c33da5c3c2bcf553ada544022b8bc843029dd57fc556af971f87d1df434bf2f4e227a47c0439c63c4753ae878fdf018556065b3797c92c736d64f6512ea8b290e202427650fffa2244d20470b21f60b6704c1cfc9b222707b7f5ac91e930d8a61dc57492dde613005477cab2b387902d804549975217c3dc4c7a1abcb0bcd0c57552a0dc92f5ec2f96c1d85952c64dd6bb4d97e30c5656f2efbc8e9ae75037cad2c21d375db251aade01e9a02132d4814e71abd547819373b4d99be918b78b4dafc56f405690861d835c5383d7b793dd29a252479b7785db89c0161a2c7564412da77c757fff62f56c7d27dbdc7f045f90d2cff1fe9f731b18a818f6ca9156efcee7ce922942652c3e74f2231b0dadb8c5e9fdf2714da79f8c2322c3f6bb0eaeecbe4e5b50c6c4cbd7c2bfad4aa675b74f53b78ed8498acafdcd9ccbd1f78bf6fed7e28d59efdfc80643102441b11891a1d9e86c0a09724086ff8d2a3de4a1e6c972771368ee4bfcb3e64319861af63faae2d297efb7ce45f89760c02b20d484039bb7db94ff1c373f6d3ad02f9bc3b9d178302ddb11581c31d6529bc6feb8f31005c9fa55bcfb000d5561a023132fe55a23aa9ec99a09e1eb409e8ceeabeeec3cd1c7df5704336dcc612aa64547173402a527eee501ed049663d12ae91996bc9a1957f936500eed3f71b7f1063ff19d0b8034e22b5c49a09336ff915ead4d7e1cb93234758cb6c58ee642bf71866b89f3d5c664edff5d8cd3954bbeaf9c149719baa0cc607ba2ca2e8ed615cb30fa6d5587613ba876b32e9de960001abc23d491359a5cbe523397730b5257c12af4080525d93fa7bc8b0916bf76426eb5f8dbcf479dbb18ff5d2fe5db01a8a5f637a474aee24c6a18856b7495b59665890fe8575f6ed6c1b5e40599972ef09f3ca62a8a6ed34fa4b17289ac35be6978d22ca5bc23fe812dd533acee365714bb37a5393f2cf2552c7cb4b2f5b9e74ad10bb93dbaceb68884dcaa5e69b60352048ec96f31766919f71ad08fd7d72deb53160c9c86a371bad4d12183c66ebd33e126e0520a320c644f8d52ee99be0caf413e0ac45f18b782a47d0717b28cd720c4332e8befc89e89c619007baf2adf6b76fcd40b4f53262cf5741cd0e93719136643693e497bf24c43e6572c9a3498f29b3f721804d1fce12b0b6c2fabb5c53c7f2f1bb4a7513798ec216d5c3f8bf21cf9180ac2ffc3b7f2721cd8b98e08e281500c7ebec5cd3a1ef8c09ed95308aef863a4a51462c30a43032ed45d3e3443003cdb405f3c1ede37204c70e1d33652f0f82b33a5027cec3d3f747978cccc6a002a9163ce8f9480088aa015ca9c7b6085096d1e7eabb6306b436879789948c37d65d73b64208d56a630432292f5ca762e72e902dd0ae951fe1903521fed12b74d7726cfee14b6d15ccc2cfd535a190a8422aa2a0057d42c52114a8d6033fb6e2fb2612364f809b7712cbe6ef2585109c5cca32f6b5db797e58df976ccecc9c114a28e30d6a067321b2ee278a344ba52023cfcf00357916528ac42c3869e4225af328ccc8da839b4283d64bc0f56ab5723d9ccad387dd995ad15a2e6fc42824b73a354a1fea8c628a5f1df99bc5ec9b7921d74a388796699aa8a9b9acd68292e6a295e020aabd3fea2b9b65d72469e345dcc50afd184d66b8c8963d3e3ed258e141bfc3338cadbac93e9ba7d8038331ec8c6237d33162d4fa8f7d7cffb95ae14067b3101932d9df29a73d8c3fe0e5edf290675bf92b38f54285c1458bc3a14bb155b19138d3bde38f6bf8b8cfe55ab8c202fa3dc8c021347ff220fc9db99a13db5bbd7e3592d5a3948ded5fd831a2b463f3b6baede23be823c5dc71cc8a85ba31e44961250d1c6d19f006e895ea41ab5242aaf2ac78a222216fc50664f01f1ee43292d4f0a3553f5a4b60f316d44aae176ed4d512b965fcc68a5447c6e8c3ddc1b5708589cf10c535bc6262e861711edb270775fe151def32e1a0eb072e377ed2dd586a2ecf47bb2dd90e1c824f2012bc999ab7606dca8b529ae15e5f9281bcab38cd8055732bc7f57adf6c0137", 0xd}, 0x8e, 0x4, 0x4, 0x1)
r1 = prctl$auto_SECCOMP_MODE_STRICT(0x4, 0x1, 0x0, 0x9, 0x7)
mmap$auto(0x433, 0x100000000, 0xd01, 0x16, r1, 0x10)
fsconfig$auto_FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001400)='-{\')%,)\x00', &(0x7f0000001440)="6cbed98ac0676dfcf5b8a54c28f706a02832e7a15f747731d4a33b4faa2528e66715b683c4afa8d4f8e5b8efe33e9a3b0680c7610fd532d96de51a616ef336f7558a2caa3d800a249255dd0f9170436d4bf95f3a8be7663b65498f1e1553ce30b5fe8268040b15e005893ea120092a1f53d457a2a1ad58a0a8e69a45f206478667727b06e4666291e4090c0f28e5a153ca48f3fa4702a008330c86994fa94f30295bb62e5dbee1567e92528bffe4a8ec2c550bce1d378cd5ba98a0ac6d40454194c22aedfd5ad2b014854ca8acc16ba7c9056af2b6cb41859d20d0e4fe848c0e35170a1219f63c788e", 0x6)
r2 = socketpair$auto(0x8, 0x53, 0x3fc0, &(0x7f0000001540)=0x10)
close_range$auto(r0, r1, 0x3)
setsockopt$auto_SO_BUF_LOCK(r2, 0xfffffff9, 0x48, &(0x7f0000001580)=')\'}\x00', 0x401)
syz_genetlink_get_family_id$auto_batadv(&(0x7f00000015c0), r2)
ioctl$auto_FS_IOC_RESVSP(r1, 0x40305828, 0xa5d)
io_uring_register$auto_IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000001600)="cc689909ee2061f76eed5f7b79a2eb033ccdf2052b4383ed0d7457d2628025fde9b8716150c513f6b78d8327aaad66276d1b3e72b98a34759dfcf6e740e5a5e51c1bd01689e9daba791cf7e1cf976370ab8a16a709a86acc8b6f18f94242fbb191b1a14836dd36d2bcf7736ec4342beaecd623ab27e92688665b1c75c679ba8ac39562a67ec387b4bb3f7aa0d7e78a0a21fe2885b1a2bf3720b5b164164bc46b85c30d293f7ed485e96c40bafb56cb796e4426751485da6bc71c6d8c5a8a4aa4b824794aad2abd1cda8c3ac0e07b", 0xf8)
getsockopt$auto_SO_REUSEADDR(r2, 0x6, 0x2, &(0x7f0000001700)=')\'}\x00', &(0x7f0000001740)=0x1)
r3 = ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000001780)={<r4=>r2, 0x1, 0x4, 0xfffffffffffffffa})
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001800), r2)
sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r4, &(0x7f0000001980)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001840)={0xfc, r5, 0x41b, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_PREV_BSSID={0xe0, 0x4f, "dd72a6fdc1c769e5de0c71d4f06107a6def78475e19590d108f0b8a8175796cae247af24b13ae84bb3c280b10fe53d560940ab7a4dc9977e290e41b6bab88002102b08ddad632aea46a04887af00cd2c5deb461b80f8a4603f54c137fd66f4139bae1fc3589c3cb5dc68fe9346fa3b73659a9a324332bd664181b50d39c8ca90e64ce7a337ab858fccef1187688c3d84bf817bf3d7003df0e3083b813553c505ec0559fc25e90e82b76026592ebfe8e56d716051c3f9e8be1db0d075c8223692c2878772849350979c38ccda0dfd9e10388692d8dd85cce766294fa0"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x651}]}, 0xfc}, 0x1, 0x0, 0x0, 0x84}, 0x800)
r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001a00), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000002400)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000023c0)={&(0x7f0000001a40)={0x94c, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_FRAME={0x865, 0x3, "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"}, @HWSIM_ATTR_COOKIE={0xc, 0x8, 0x5}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_CIPHER_SUPPORT={0xc0, 0x18, "cf3eae2a1510386351a57ab16a9c08ab6fb13ceb2409c97ce5096bcf0898f6f4ee72acd5be98ee6e3b550887ea2de881d18ee346a5c746c91d1acb2c89c0fc295c232c1a6e086d4b1d852d0ab269e71cfd8e350b6f267391e0d5c78326e41b4d5a2ff93282959e022c63b85e948ae479c87cbf60d49120874d1bc74c879f027f6db7a6392af6b49f307c22425d1c2793c272f0ec728e7dbb29dcbe576484aebd07b2979ed7d408a8f74eec0e6d38c1cabe37a078887949164e583979"}]}, 0x94c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010)
r7 = ioctl$auto_TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000002440)=0x2)
fallocate$auto(r7, 0x9, 0xffffffffffffffff, 0x81)
r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000024c0), r2)
sendmsg$auto_TIPC_NL_MON_PEER_GET(r4, &(0x7f0000002700)={&(0x7f0000002480), 0xc, &(0x7f00000026c0)={&(0x7f0000002500)={0x1b4, r8, 0xc10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@nested={0xb4, 0x7e, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @fd=r3}, @generic="89b096fb61039e11a650600b1ac32594a7fda408fc6960101975b5cd4248a4429b03785358552abd0fb6795d95b40250f33ea09cdf1c18a505dbfac4a4bc8a6db4bb40ce8a71e7a596fa4e41f7e3217fb701bffe89c40fcb4c83d2120ddc707e5a5e5f5055798853317694ec816a82c8a1607b4f74ab4823099a9682febdccf3189e329ee81652f341323d8261c8ea43bd75d0783cf7ff387430e7f3efcdaa1a", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}]}]}, @TIPC_NLA_UNSPEC={0x9b, 0x0, "965a269872f0b07c7c3917e7befbb4905c4de517b6b5304e8e8a692ec20cd1bd03e0aa16f592c0a40456d2d84173a4dcba228dcf00dc48e424493602d77ae6ee70d3d59237e07de4a5b2c97afecb8a91ac2beb10c4874de6864eb4c6a734c454448b57bbfd14c632d6d19222aed2784f697ce97e4dc3373716ee71c11141c6917fc597a0a646168591343ae367e3a93932703164bac0ce"}, @TIPC_NLA_UNSPEC={0x4c, 0x0, "3bd58e6cd2a1adb82813e1b0b4c371e6711ba5e492cfa9b72d5a369f788de0f4ef58a5eb0c900b1ed1fa32fe8801350d70fcf963ea552136847d2b849a52c829538747ce1684905a"}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x24040110}, 0xd0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000002740), 0x190000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000002780)={"97ef455dd7a9291f70ef0c3246a87b182fb70279f1a3200de59f649244838355", 0x4, 0xc, 0xcc12, 0x1, 0x0, <r9=>0x0})
kill$auto(r9, 0x4)
sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000003500)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000034c0)={&(0x7f0000002840)={0xc44, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_TAIL={0x4ea, 0xf, "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"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC_HINT={0x1d, 0xc8, "8511f18d99889088b79602c7e15a4f1611986e7c1b8f17abb6"}, @NL80211_ATTR_IE_PROBE_RESP={0x66e, 0x7f, "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"}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3ff}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x82, 0xe8, "3947a3a60bfc7d2d653a59c662c6026d307edd4168291dae54d94e1e7fefcc7771171d1a4e90e8808191cb089b9a75e8bfda4016b0607f81899984e1455a952de8315cb7478db13317d99c9378c8c7daa761d4f1e42863b8f06154c3b3ca356f73b9120f10e2fba16784fcf6c2f2d64f0c41bc767c3078214d48452ae615"}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x1b, 0x14e, "dbd6c1beeb193a6ed5733914a57a6eec1269b4a949200d"}]}, 0xc44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$auto_NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000003700)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000036c0)={&(0x7f0000003580)={0x13c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0xc}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x1}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_MLO_TTLM_DLINK={0xfc, 0x148, "dc31d800af8371f5ec3173d88a2554b02fb0793def22d51ed6da3e2230c09a7436f202d9caf1f5f02f77e4c34d027d62b4b350ca00122e9b37d5a78105b0329f5354933e561f31e616458844ad025cadd6e21bb6dadd5b2c4e2f5c2d6b6b066243e300c0313b15d5981d5e3ab1d040d2af9c148305f9adcb52a4c87f1766ddb5886721627c955b85f508d8ad6da49d1dac5dc8ab02f213422369125137e72aee8a04c61850e4856ca716ea1ce279fd7c4d5482c4ca6f743cd659abaafeda054e389d0ec2490b6966f272fc686e76f255219dff04f9de189e34aa7c7be9266fd21613a549a54f682b727c89cd960e6b15896341dc55f9f56e"}]}, 0x13c}}, 0x40)
ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r3, 0x80044dfe, &(0x7f0000003740)="0ca1257344beed48c2eee13082dbe0c4f3ba75bfa701344ac589bb494b702431ccd3a01ae01177d4197d32d05dda39c913292a124443abb60eee24acbc2e1d81b9")
setresuid$auto(0x0, 0x0, 0x0)

2m10.132883543s ago: executing program 33 (id=190):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x80202, 0x0)
write$auto_tomoyo_self_operations_securityfs_if(r1, &(0x7f0000000080)="60da", 0x2)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e072"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(r2, 0x8, 0x0)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", <r5=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10)
bpf$auto(0x19, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x203, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
sysfs$auto(0xfffffffe, 0x10000000000002a, 0x4)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0)
ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
mmap$auto(0x0, 0x5, 0x4, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

2m8.706515993s ago: executing program 2 (id=215):
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0)
r0 = socket(0x1b, 0xa, 0x76)
madvise$auto(0x0, 0x2000040080000003, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000200), r0)
getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff)
getsockopt$auto_SO_ERROR(0xffffffffffffffff, 0x7ff, 0x4, &(0x7f0000000140)=':>()\x00', 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r5, 0xffffffffffdffe00, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x106)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2m3.751448674s ago: executing program 2 (id=223):
socket(0x2, 0x800, 0x0)
io_uring_setup$auto(0x1, 0x0)
r0 = socket(0x2a, 0x2, 0x0) (fail_nth: 8)
bind$auto(r0, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x6b)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r1 = socket(0xf, 0x3, 0x2)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)=""/53, 0x35)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x3ff, 0x1, 0x0, 0x1e)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000340), r1)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf250000000006000600070000000800090005000b00fc0100000000000000000000000000000c0003000c000000000000000c0003000100000002000000060006005a2200000800080003000000"], 0x60}, 0x1, 0x0, 0x0, 0x884}, 0x400)
r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0)
ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(r4, 0x4004550a, 0x0)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0)
mmap$auto(0x2000000004, 0x400008, 0xdf, 0x20c2417c, 0xffffffffffffffff, 0x3)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
select$auto(0x0, &(0x7f0000000140)={[0x8, 0x5, 0xfffffffffffff7fe, 0x80000000, 0xf47, 0x8, 0x7, 0x1, 0x200000003, 0x100000001, 0x5b, 0x3ff, 0x2, 0x100000001, 0x9, 0x2]}, &(0x7f0000000240)={[0x3, 0x5, 0xf1d6, 0xfff, 0x8e, 0x2, 0x1, 0x100, 0x7, 0x1, 0x8, 0x6, 0x20000000003ff, 0x6, 0x9, 0x4]}, &(0x7f00000002c0)={[0x1, 0x7ff, 0x9, 0x7, 0x7, 0x7f, 0x100000001, 0x16, 0x8, 0x4, 0xe, 0x3, 0xc, 0x4, 0x401, 0x6]}, &(0x7f00000000c0)={0x4, 0x8000})
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)

2m2.363311166s ago: executing program 2 (id=225):
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0)
writev$auto(r0, 0x0, 0xfffffffc)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x4000000008000)
getpid()
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x20342, 0x0)
r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r3, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
ioctl$auto(r4, 0xc0185502, r4)
ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc)
modify_ldt$auto(0x1, 0x0, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x29af42, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r6, 0x0, 0x20000080)
select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x100003, 0x3, 0x9, 0x1, 0xfe8b, 0x20000000006, 0x5, 0x5, 0x1, 0x62, 0x8000001e, 0x20000000005, 0x9, 0x9, 0x8, 0x8]}, 0x0)
mmap$auto(0x2, 0x20009, 0x4000000000000005, 0xeb1, 0x405, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x5a, 0xd7, 0xf1, 0x401, 0x2)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
close_range$auto(r4, 0xffffffffffffffff, 0x7fffffff)
openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m48.827817706s ago: executing program 5 (id=252):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004580), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r1, 0x601, 0x70bd29, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x14ed4312}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="b3e67044bcf124f4ae5a8c142f1c08cfef935f31d64642812b325f8ba228d1885adaebfcbdeacd9cc9d8850e8a0d2c35ea58bb923e317dc8a8b78d582ef877d9619377e0f3874f6e30d73c34cae5707277d95b7bc958720e7bc81aa45cd500bb54e63f58c202e0061eb947261c28edfbd4c8afc79a125f4fba082cff47c347a4aaaee6bd0596117fdd3af953214fb6601b225dd8164a6b7f65cc7b81b6b06c32962267ac8872fa95fd84035286dba99db2a1caa9fe2d3e39c7c6f9cf7bb4db41191cb29f1b3c83eb908883626a9b6aa830c2dff419e149fe8bae80c926ed21a951531996b88a714c12d350006d0054be64ec9d48d9467d96afddc688e231c40d5b2ef7361a745029bd418ff7b81c028c5ffb8234b39c972e2be416b8105f28541fe299e9efcadfe6ac9f9a6d93980fa556cebd4d64bb423da2821600df002f6465762f736e642f6d696469433244300000008b020780040005800400d8800939cb597170d79cc940c0b0d598baa4a5d46de9cbefcd6ec57276f6698682a7e2c98ef3f419daa529de65a29e0a254028686e33237b292724dc292d094dfe17500ee2a166de5899e820af64920f843b2ddef99f9607ea5b13df0a6772cee1e34a0e474e2e74ece94f7e888d21e58cca3a6d6a99a153af848cd8b5d78e4e37bac65e140fcb5ea6d8c092132ef0a41745488558a4b39db294fa306e3eeb14abf699ea41ad50f33181965f66ae2af82517cd57ff0c8742559440238a8ce1a407000000000000001b33439538d62755f41191aeb62160334dbdf8ed7b81a0a8255168b997c20c22c32c54aeafe12146", @ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0400558004"], 0x226c}, 0x1, 0x0, 0x0, 0xc4}, 0x1880)
r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000)
madvise$auto(0x0, 0x20200, 0x15)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b7e, 0x2, 0x8000)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r4, 0x0, 0x4d)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
read$auto_cgwb_debug_stats_fops_(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
listen$auto(0x3, 0x81)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002dd57000fcdbdf257e003f00"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)

1m47.702797251s ago: executing program 5 (id=253):
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x40e41, 0x0)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x19, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/53, 0x35)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
msgrcv$auto(0x71, &(0x7f0000000040)={0x4, 0x7}, 0x0, 0x7fffffffffffffff, 0x5)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x18000113)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
write$auto_sg_fops_sg(r2, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = ioctl$auto_dma_heap_fops_dma_heap(r0, 0x0, 0x0)
socket(0x11, 0x80003, 0x300)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x0)
ioctl$auto_RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000000)={0x0, 0xfa, {0xd, 0x0, 0x7ff, 0x0, 0x800, 0x9, 0x9, 0xffff, 0x5}})

1m47.158393461s ago: executing program 34 (id=225):
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0)
writev$auto(r0, 0x0, 0xfffffffc)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x4000000008000)
getpid()
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x20342, 0x0)
r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r3, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
ioctl$auto(r4, 0xc0185502, r4)
ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc)
modify_ldt$auto(0x1, 0x0, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x29af42, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r6, 0x0, 0x20000080)
select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x100003, 0x3, 0x9, 0x1, 0xfe8b, 0x20000000006, 0x5, 0x5, 0x1, 0x62, 0x8000001e, 0x20000000005, 0x9, 0x9, 0x8, 0x8]}, 0x0)
mmap$auto(0x2, 0x20009, 0x4000000000000005, 0xeb1, 0x405, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x5a, 0xd7, 0xf1, 0x401, 0x2)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
close_range$auto(r4, 0xffffffffffffffff, 0x7fffffff)
openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m46.660666792s ago: executing program 5 (id=256):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
epoll_create$auto(0x4)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0xf82, 0x0)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
lseek$auto(0x3, 0x3e7ffffffd, 0x3)
set_mempolicy_home_node$auto(0x1, 0x80, 0x7fff, 0x7)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
madvise$auto(0x3000, 0xffffffffffff0001, 0x15)

1m44.517261968s ago: executing program 5 (id=260):
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x19, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/53, 0x35)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x800, 0x0)
select$auto(0x7, 0x0, 0x0, 0x0, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/queues/tx-0/tx_maxrate\x00', 0x8402, 0x0)
futex$auto(0x0, 0x85, 0x8102, 0x0, 0x0, 0x40000006)
write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040), 0x0)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
socket(0x29, 0x2, 0x0)
mmap$auto(0xfffffffffffffffd, 0x2000b, 0x10000000000df, 0xeb1, r1, 0x8000)
io_uring_setup$auto(0x9, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7)
close_range$auto(0x2, 0xa, 0x0)
open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400000, 0x80)
socket(0x2, 0x3, 0xa)
socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x2, 0x1000000004, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x4, 0x0, 0x81, 0x0, 0x10000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
acct$auto(&(0x7f0000000140)='/dev/snd/seq\x00')
msgrcv$auto(0x71, 0x0, 0x0, 0x7fffffffffffffff, 0x5)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x18000113)
close_range$auto(0x2, 0x8, 0x0)

1m43.178208995s ago: executing program 5 (id=265):
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x0, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x3, 0xa) (async, rerun: 32)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (rerun: 32)
prctl$auto(0x1e, 0x1, 0x0, 0x1, 0x0) (async)
openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000100)='/dev/etherd/revalidate\x00', 0x541440, 0x0) (async)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) (async)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) (async)
r0 = prctl$auto(0xe79, 0x2, 0x0, 0x8000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) (async)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0030e5", @ANYRESOCT=r1, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) (async)
mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) (async)
socket(0xa, 0x1, 0x84) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) (async)
socket(0x2, 0x5, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0)
socket(0x10, 0x2, 0x0) (async)
close_range$auto(0x2, 0xa, 0x0) (async)
mmap$auto(0x3, 0xa00006, 0x4, 0x40eb1, 0x602, 0x300000000000)
ioprio_set$auto(0x2, 0x0, 0x208)
r2 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0)
setsockopt$auto(r2, 0x2, 0x4d6, &(0x7f0000000080)='/sys/kernel/security/tomoyo/query\x00', 0xee0a)

1m42.963278535s ago: executing program 5 (id=266):
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x80202, 0x0)
write$auto_tomoyo_self_operations_securityfs_if(r2, &(0x7f0000000080)="60da", 0x2)
preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e072"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(r3, 0x8, 0x0)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", <r6=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10)
bpf$auto(0x19, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x81, 0x203, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
sysfs$auto(0xfffffffe, 0x10000000000002a, 0x4)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
mmap$auto(0x0, 0x5, 0x4, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

1m39.169490694s ago: executing program 4 (id=272):
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0)
r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0)
writev$auto(r0, 0x0, 0x100)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r2, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
io_setup$auto(0x7ffe, 0x0)
io_setup$auto(0x7ffe, &(0x7f0000000000))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)

1m37.415772878s ago: executing program 4 (id=274):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$auto(r2, 0x0, 0x8)
r3 = socket(0xa, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="13042bbd7000fbdbdf650600000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x80)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6}]}, 0x24}}, 0x24048000)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000003300), 0x80880, 0x0)
read$auto_stat_fops_(r6, &(0x7f0000003340)=""/132, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
close_range$auto(0x0, 0xfffff004, 0x2)
r7 = socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', <r10=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r10, r9, 0x4, 0xf, r8, @relative_fd, 0xe600}, 0x1c)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xfdef)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff)

1m37.085961305s ago: executing program 4 (id=275):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004580), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r1, 0x601, 0x70bd29, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x14ed4312}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="04007e8004004180a503a35a7b73d91c03591e2d08359a034b4f9a56e722ed91b306bc5545952659947000a4a2fe08ec9c9efd37a5f762bf0c93182887fe3bde13eece5f072694f08b5ae7251fbbbff4e630db8fd201842e319d533a4695f1bc9194fe644693b8f70ba77467bdbbf1090f9faf368eeed9bab61f92da95c57ccbd86fe3fabfb6639fad43cd89aa2b8e4750461cb177061953e4be60e3112804ce739ab31106c9667c10a756da627722acfec402037ea6c3eeb76d632f2ec1b03dc5cf8eb2c7412364786b524f30ac116f600604ecfce3b65457e09b529f8ddc327437c3530a4ed44944d0dce6bf893ced5389951a546d3b581d659877a218371e96180ffde32c6cea5603df242d9f9f857dc4684f735efcd18963e509cbfe6971a566b6e66fd49efdb4007dd59a3840ab94843b53d99c6cc5ac3bc33f4bc6f8d14e6f68c7e77ec7c8d8f32fcebc5fc7d0f10e882dba58a6d2f958842c10fb2c462f606f96e56ff914000d00fc02000000000000000000000000000008002700", @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0400558004"], 0x226c}, 0x1, 0x0, 0x0, 0xc4}, 0x1880)
r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000)
madvise$auto(0x0, 0x20200, 0x15)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b7e, 0x2, 0x8000)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r4, 0x0, 0x4d)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
read$auto_cgwb_debug_stats_fops_(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
listen$auto(0x3, 0x81)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002dd57000fcdbdf257e003f00"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)

1m35.500131068s ago: executing program 4 (id=280):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS2\x00', 0x103681, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2, 0xed2f, 0xeb1, r0, 0xbe3)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0)
read$auto(r1, 0x0, 0x7ff)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffe}, 0x6, 0x6, 0x801)
write$auto(0x3, 0x0, 0x5c8)
write$auto(0x3, 0x0, 0x5c8)

1m35.072509099s ago: executing program 4 (id=281):
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0)
r0 = socket(0x1b, 0xa, 0x76)
madvise$auto(0x0, 0x2000040080000003, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000200), r0)
getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000)
shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00')
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x808)
socket(0x2, 0x801, 0x106)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8881}, 0x800)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x121040, 0x0)

1m33.488073731s ago: executing program 6 (id=284):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r1 = socket(0x1e, 0x6, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9)
sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x3)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
ioctl$auto_TUNSETOWNER(r3, 0x400454cc, &(0x7f0000000280)=0xfc0)
r5 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f00000000c0), 0x408081, 0x0)
setsockopt$auto_SO_RCVTIMEO_NEW(r5, 0x7, 0x42, &(0x7f0000000180)=':)[-&/\x00', 0x5)
getdents$auto(r4, 0x0, 0xfff)
msync$auto(0x7f, 0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x0, 0x0)
clock_nanosleep$auto(0x8001, 0x9, &(0x7f00000001c0)={0xf5d, 0x7f}, &(0x7f0000000240)={0x0, 0x1})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r7 = socket(0x10, 0x2, 0x4)
mlock$auto(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001200"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r7, &(0x7f0000000000)='-\x00', 0x2fb)
unshare$auto(0x40000080)

1m32.361269847s ago: executing program 4 (id=287):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS2\x00', 0x103681, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x16e1)
mmap$auto(0x0, 0x2, 0xed2f, 0xeb1, r1, 0xbe3)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
ioctl$auto(r0, 0x57, r0)
mmap$auto(0x0, 0x8, 0xdf, 0x8000000000000011, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
getsockopt$auto(0x6, 0x40000000029, 0x1a, 0xfffffffffffffffe, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
open(&(0x7f00000001c0)='./file0\x00', 0x121142, 0x13d)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
read$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x40000000000000, 0x4000000000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getpid()
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x280040cc}, 0x48011)

1m28.160507397s ago: executing program 6 (id=292):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0x4, 0x0)
close_range$auto(0x2, r0, 0x0) (async)
waitid$auto_P_PIDFD(0x3, r0, &(0x7f00000002c0)={@_si_pad}, 0x3, &(0x7f0000000340)={{0x7, 0x2}, {0x5, 0x1000000}, 0x6, 0x7fff, 0x1, 0x6, 0x4, 0x518f, 0xff, 0x800000000002, 0x0, 0x0, 0x1, 0x7, 0x3, 0x215}) (async)
socket(0x2b, 0x1, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = socketcall$auto(0x8000, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x109000, 0x0) (async)
openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x2, 0x0) (async)
read$auto(0x3, 0x0, 0x7) (async)
write$auto(0x3, 0x0, 0xfffffdef) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) (async)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) (async)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0xa, 0x1, 0xfe) (async)
ioperm$auto(0x7, 0x5ad2, 0xc)
r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r3, 0x0, 0x7ff, 0x400) (async)
socket(0x2, 0x1, 0x0) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)

1m27.828021218s ago: executing program 35 (id=266):
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x80202, 0x0)
write$auto_tomoyo_self_operations_securityfs_if(r2, &(0x7f0000000080)="60da", 0x2)
preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e072"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(r3, 0x8, 0x0)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", <r6=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10)
bpf$auto(0x19, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x81, 0x203, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
sysfs$auto(0xfffffffe, 0x10000000000002a, 0x4)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0)
ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
mmap$auto(0x0, 0x5, 0x4, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

1m27.227334176s ago: executing program 6 (id=295):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS2\x00', 0x103681, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2, 0xed2f, 0xeb1, r1, 0xbe3)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
ioctl$auto(r0, 0x57, r0)
mmap$auto(0x40000000000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r2 = getpid()
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010025bd23b886d03f92b3bf0000"], 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x48011)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0)
read$auto(r5, 0x0, 0x7ff)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffe}, 0x6, 0x6, 0x801)
write$auto(0x3, 0x0, 0x5c8) (fail_nth: 8)
write$auto(0x3, 0x0, 0x5c8)
socket(0x80000000000000a, 0x2, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90)

1m26.026028806s ago: executing program 6 (id=296):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
epoll_create$auto(0x4)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
mmap$auto(0x3ff, 0x3, 0xffffffff, 0x100000eb1, 0x40000000000a1, 0x4000008000)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
lseek$auto(0x3, 0x3e7ffffffd, 0x3)
set_mempolicy_home_node$auto(0x1, 0x80, 0x7fff, 0x7)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
madvise$auto(0x3000, 0xffffffffffff0001, 0x15)

1m23.676143104s ago: executing program 6 (id=299):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={0x18, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_MLO_SUPPORT={0x4, 0x1d}]}, 0x18}, 0x1, 0xff07000000000000, 0x0, 0x20004041}, 0x4004040)

1m22.709865446s ago: executing program 6 (id=301):
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0)
r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0)
writev$auto(r0, 0x0, 0x100)
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r2, 0x0, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
io_setup$auto(0x7ffe, 0x0)
io_setup$auto(0x7ffe, &(0x7f0000000000))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)

1m17.043083703s ago: executing program 36 (id=287):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS2\x00', 0x103681, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x16e1)
mmap$auto(0x0, 0x2, 0xed2f, 0xeb1, r1, 0xbe3)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
ioctl$auto(r0, 0x57, r0)
mmap$auto(0x0, 0x8, 0xdf, 0x8000000000000011, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
getsockopt$auto(0x6, 0x40000000029, 0x1a, 0xfffffffffffffffe, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
open(&(0x7f00000001c0)='./file0\x00', 0x121142, 0x13d)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
read$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x40000000000000, 0x4000000000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getpid()
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x280040cc}, 0x48011)

1m7.092962524s ago: executing program 37 (id=301):
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0)
r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0)
writev$auto(r0, 0x0, 0x100)
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r2, 0x0, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
io_setup$auto(0x7ffe, 0x0)
io_setup$auto(0x7ffe, &(0x7f0000000000))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)

49.646916353s ago: executing program 8 (id=356):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000080)={"7442cd6d15518e58cb8b573cf64d91cc9a8ade1932f6c2ac813a46ab1d8de312", 0x5, 0x5, 0xfffffff7, 0x9, 0x5, <r3=>0xffffffffffffffff})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000003c0)={{@inferred=0xffffffffffffffff, 0x1000, 0xfff, 0x1, "5a370d84d9316a05b8d0ee0a43d867adaca1680fd6496c38644545df1bc2615659d2de0445d359d6d6ebe6df", @inferred=r3}, 0x0, @enumerated=@item=[0x9, 0x5, 0x4, 0x8, 0x8, 0x2, 0x9, 0xfffffffd, 0x7fff, 0x40, 0x9, 0x0, 0x4, 0x7, 0x8000, 0x1, 0xfff, 0x1, 0xfffffff7, 0x2, 0x3, 0xedb, 0x0, 0xffffffff, 0x10, 0x0, 0x959, 0x10ab, 0x1, 0x6, 0xffffffff, 0x6, 0x7fffffff, 0x689, 0x5, 0xe, 0x3ff, 0xd, 0x7, 0x7, 0x3, 0xfffffe00, 0x0, 0xe, 0x7ff, 0x1, 0x6, 0x3, 0xfffffffd, 0x8, 0x4, 0x4, 0x7ff, 0xaa75, 0x9, 0x40, 0xffff, 0xa87c, 0xffffff81, 0x51, 0x8, 0x4, 0x7, 0x7, 0x6, 0x1, 0xffe0, 0x5, 0x48000000, 0x9, 0x7, 0x1d2, 0x200, 0xffff, 0x6, 0x1, 0x4, 0x5, 0x80, 0x6, 0x3, 0x9, 0x7ff, 0x2, 0x7, 0x9, 0x0, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x1c0, 0x8, 0x821, 0xb1, 0x0, 0x7, 0x4, 0x7, 0x1, 0x7, 0x55, 0xe793, 0x80000000, 0xfff, 0x10001, 0xff, 0xfffff78c, 0x4, 0x80, 0xffffffff, 0x9730, 0x3, 0x3ff, 0xa275, 0x2, 0x0, 0xffff, 0x2, 0x2, 0x39, 0x1289fa74, 0x6, 0xff, 0x10001, 0x5, 0xbfa], "70bf4d96baf39389d7841c947b29caf2ec8b0f8bddd09ef18af4b31dda6cb18059120fa688e761679cb51b473b2ee6db554c5c77b36440f1347c91771fdd63da716cfc588a7d9053c3a2e3590231ad9a3facf408877a8fd623995b94a3a52e70a7e50d72d12aa67f30c4cd48c18fb352e6ebfed86419aa6c0cccea9f3ad9410f"})
bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x4, 0x7, 0x67, 0x400, 0x0, 0x0, 0x80f0c8, 0x20, "2fc1d5cbcb9f6b5e511f0dd8d6068f65", r1, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x3ad, 0x3, 0x0, 0x3, @attach_prog_fd, 0x4, 0xffff, 0x8, 0x81, 0xfffffffe}, 0x4a)

48.565575955s ago: executing program 8 (id=359):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r0, 0x0, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vicodec.0/video4linux/video2/uevent\x00', 0xa001, 0x0)
mmap$auto(0x2, 0x400007, 0xe895, 0x16, r0, 0x401)
openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000007ea4b46f01ec4bc7334208de26cbe38cb6db4940875c63f639625f09c4d820e7b46a995c8c341b9f31acbbdaf42a3923faf3bd5fb7d0fbd040e5ab4caed4106b99fdc9e96e145727b677bf982cd86575257bc5", @ANYRES16=r1, @ANYBLOB="000326bd7000ffdbdf2588000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080)
write$auto(0x3, 0x0, 0xfffffdef)
setsockopt$auto(0xffffffffffffffff, 0xff, 0x5, 0x0, 0x7)
connect$auto(0x3, 0x0, 0x55)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r3, 0x541c, r4)

47.044431478s ago: executing program 8 (id=363):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0)
read$auto(r0, 0x0, 0x7ff)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffe}, 0x6, 0x6, 0x801)
write$auto(0x3, 0x0, 0x5c8)
write$auto(0x3, 0x0, 0x5c8)

46.837026698s ago: executing program 8 (id=365):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0xf82, 0x0)
mmap$auto(0x3ff, 0x3, 0xffffffff, 0x100000eb1, 0x40000000000a1, 0x4000008000)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
lseek$auto(0x3, 0x3e7ffffffd, 0x3)
set_mempolicy_home_node$auto(0x1, 0x80, 0x7fff, 0x7)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
madvise$auto(0x3000, 0xffffffffffff0001, 0x15)

44.514905716s ago: executing program 8 (id=370):
close_range$auto(0x2, 0x8, 0x0)
memfd_secret$auto(0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
msgctl$auto_IPC_INFO(0x3e860b2a, 0x3, &(0x7f0000000140)={{0x279, 0xee00, <r2=>0x0, 0x3, 0x40, 0xfffffffe, 0xd29}, &(0x7f0000000040)=0xf2, &(0x7f00000000c0)=0x5, 0x2, 0x3, 0x100, 0x27, 0xe, 0xba, 0x3ff, 0x10})
fstat$auto(r0, &(0x7f00000001c0)={0x2ed4, 0x1, 0x4, 0x8957, 0x0, r2, 0x0, 0x3, 0x4, 0x0, 0x1ff, 0x100000001, 0xac, 0x3, 0x6, 0x9, 0x8})
mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0)
pread64$auto(r3, 0x0, 0x40000000f42c, 0x585)
ioctl$auto_KVM_CREATE_VM(r0, 0x5000aea5, 0x20)

43.417070167s ago: executing program 8 (id=374):
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x4, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"})
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x80081280, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x4, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7}, 0x1fe, 0x80)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='V'], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999", @raw=0x3cf51fcb})
ioctl$auto_SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0x8)
unshare$auto(0x40000080)

34.540525834s ago: executing program 9 (id=400):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ram0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0)
r1 = socket(0x1e, 0x6, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9)
sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0xa)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x3)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/net\x00')
r4 = ioctl$auto_TUNSETOWNER(r2, 0x400454cc, &(0x7f0000000280)=0xfc0)
r5 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f00000000c0), 0x408081, 0x0)
setsockopt$auto_SO_RCVTIMEO_NEW(r5, 0x7, 0x42, &(0x7f0000000180)=':)[-&/\x00', 0x5)
ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000480)=0x2)
getdents$auto(r3, 0x0, 0xfff)
msync$auto(0x7f, 0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x0, 0x0)
clock_nanosleep$auto(0x8001, 0x9, &(0x7f00000001c0)={0xf5d, 0x7f}, &(0x7f0000000240)={0x0, 0x1})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r7 = socket(0x1a, 0x5, 0x801004)
mlock$auto(0xffffffffffffffff, 0xffffffffffffffff)
bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x5, 0x1, 0xa9, 0x4}, 0x6f4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r7, &(0x7f0000000000)='-\x00', 0x2fb)
unshare$auto(0x40000080)

33.048341484s ago: executing program 9 (id=405):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004580), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r1, 0x601, 0x70bd29, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x14ed4312}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0400558004"], 0x226c}, 0x1, 0x0, 0x0, 0xc4}, 0x1880)
r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000)
madvise$auto(0x0, 0x20200, 0x15)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b7e, 0x2, 0x8000)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc40, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r4, 0x0, 0x4d)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
read$auto_cgwb_debug_stats_fops_(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
listen$auto(0x3, 0x81)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002dd57000fcdbdf257e003f00"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)

31.945663479s ago: executing program 9 (id=407):
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0)
r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0)
writev$auto(r0, 0x0, 0x100)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
getpid()
unshare$auto(0x40000080)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r2, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7)
ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
io_setup$auto(0x7ffe, 0x0)
io_setup$auto(0x7ffe, &(0x7f0000000000))
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)

30.318627605s ago: executing program 9 (id=411):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
epoll_create$auto(0x4)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0xf82, 0x0)
mmap$auto(0x3ff, 0x3, 0xffffffff, 0x100000eb1, 0x40000000000a1, 0x4000008000)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
lseek$auto(0x3, 0x3e7ffffffd, 0x3)
set_mempolicy_home_node$auto(0x1, 0x80, 0x7fff, 0x7)
close_range$auto(0x2, 0xa, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
madvise$auto(0x3000, 0xffffffffffff0001, 0x15)

28.813754338s ago: executing program 9 (id=413):
ioctl$auto(0xffffffffffffffff, 0x5411, 0x24)

28.655308298s ago: executing program 9 (id=414):
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0)
r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0)
writev$auto(r0, 0x0, 0x100)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
getpid()
unshare$auto(0x40000080)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r2, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7)
ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
io_setup$auto(0x7ffe, 0x0)
io_setup$auto(0x7ffe, &(0x7f0000000000))
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)

27.519968668s ago: executing program 38 (id=374):
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x4, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"})
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x80081280, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x4, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7}, 0x1fe, 0x80)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='V'], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999", @raw=0x3cf51fcb})
ioctl$auto_SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0x8)
unshare$auto(0x40000080)

13.757114096s ago: executing program 3 (id=435):
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x40e41, 0x0)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x19, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
epoll_create$auto(0x4)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0xf82, 0x0)
mmap$auto(0x3ff, 0x3, 0xffffffff, 0x100000eb1, 0x40000000000a1, 0x4000008000)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
madvise$auto(0x3000, 0xffffffffffff0001, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)

13.51435813s ago: executing program 39 (id=414):
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0)
r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0)
writev$auto(r0, 0x0, 0x100)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
getpid()
unshare$auto(0x40000080)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r2, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7)
ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
io_setup$auto(0x7ffe, 0x0)
io_setup$auto(0x7ffe, &(0x7f0000000000))
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)

12.300489969s ago: executing program 3 (id=440):
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x5, 0x2000000004020009, 0x20000df, 0x3fd, 0xffffffffffffffff, 0x3)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x40e41, 0x0)
mmap$auto(0x0, 0x2, 0x4000000000dd, 0x19, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
close_range$auto(r0, r0, 0x4)
socket(0x1a, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/53, 0x35)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
msgrcv$auto(0x4, &(0x7f00000000c0)={0x4, 0x7}, 0x100000000, 0x7ffffffffffffffc, 0x60005)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x20000020, 0x0, 0xe1e7)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x1fe, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101)

10.431294662s ago: executing program 0 (id=443):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r0, &(0x7f00000000c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bddf00000000000000000000000000762193fe54c621095ee4097d6deca64c95a11998f66fdd33a0c3c41d4f9b818f440ebf06c7e04dd209953239627e0a54d27efd297feac5ef99add5f11330bdf7d41e79764a389a4cfa2ff929d52d9650e6806a7b5a9017b3b71dfad6b129e1c5a4286cf4a1ff24a4b502e633db3c6b54", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000084)
setsockopt$auto(0x400000000000003, 0x29, 0x37, 0xffffffffffffffff, 0x0)
socket(0xa, 0x2, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000900)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/name\x00', 0x40000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000940)=""/4096, 0x1000)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$auto_KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0xfffffffe, 0x0, [{0x48d, 0x400, 0xfffffffffffffc00}]})
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
write$auto(r7, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bpf$auto(0x22, &(0x7f0000000140)=@bpf_attr_11={0xffff, 0x6, 0x6, 0x800, 0x4000ffff, 0x3c09, 0xffffffff}, 0x81)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)

10.344840617s ago: executing program 3 (id=444):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0)
mmap$auto(0x2, 0x400007, 0xe895, 0x16, r0, 0x401)
openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000007ea4b46f01ec4bc7334208de26cbe38cb6db4940875c63f639625f09c4d820e7b46a995c8c341b9f31acbbdaf42a3923faf3bd5fb7d0fbd040e5ab4caed4106b99fdc9e96e145727b677bf982cd86575257bc5", @ANYRES16=r1, @ANYBLOB="000326bd7000ffdbdf2588000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080)
write$auto(0x3, 0x0, 0xfffffdef)
setsockopt$auto(0xffffffffffffffff, 0xff, 0x5, 0x0, 0x7)
connect$auto(0x3, 0x0, 0x55)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r3, 0x541c, r4)

9.093287845s ago: executing program 0 (id=446):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
epoll_create$auto(0x4)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0xf82, 0x0)
mmap$auto(0x3ff, 0x3, 0xffffffff, 0x100000eb1, 0x40000000000a1, 0x4000008000)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
lseek$auto(0x3, 0x3e7ffffffd, 0x3)
set_mempolicy_home_node$auto(0x1, 0x80, 0x7fff, 0x7)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
madvise$auto(0x3000, 0xffffffffffff0001, 0x15)

8.373130617s ago: executing program 3 (id=447):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
socket(0x11, 0x80003, 0x20000300)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf251600018014000200697036746e6c3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)
r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(r2, 0x0, 0xba6, 0x9)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
epoll_create$auto(0x4)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0xf82, 0x0)
mmap$auto(0x3ff, 0x3, 0xffffffff, 0x100000eb1, 0x40000000000a1, 0x4000008000)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x10000000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
lseek$auto(0x3, 0x3e7ffffffd, 0x3)
set_mempolicy_home_node$auto(0x1, 0x80, 0x7fff, 0x7)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)

7.246283787s ago: executing program 3 (id=448):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004580), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r1, 0x601, 0x70bd29, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x14ed4312}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0400558004"], 0x226c}, 0x1, 0x0, 0x0, 0xc4}, 0x1880)
r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000)
madvise$auto(0x0, 0x20200, 0x15)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b7e, 0x2, 0x8000)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r4, 0x0, 0x4d)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
read$auto_cgwb_debug_stats_fops_(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
listen$auto(0x3, 0x81)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002dd57000fcdbdf257e003f00"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)

7.079624618s ago: executing program 0 (id=449):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
epoll_create$auto(0x4)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0xf82, 0x0)
mmap$auto(0x3ff, 0x3, 0xffffffff, 0x100000eb1, 0x40000000000a1, 0x4000008000)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
lseek$auto(0x3, 0x3e7ffffffd, 0x3)
set_mempolicy_home_node$auto(0x1, 0x80, 0x7fff, 0x7)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
madvise$auto(0x3000, 0xffffffffffff0001, 0x15)

6.559591255s ago: executing program 7 (id=450):
fstat$auto(0x1, &(0x7f0000001a40)={0x2, 0x3, 0x1, 0x2, <r0=>0x3, <r1=>0x0, 0x0, 0x6, 0xe, 0x7, 0x3, 0x7, 0x7ff, 0xffffffff80000000, 0x7, 0x7ff, 0x81})
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0xb, 0x0)
r4 = socket(0x2, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xce23, @multicast1}, 0xa)
socket(0x2, 0x1, 0x106)
ioperm$auto(0x7, 0x6, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd)
sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, 0x0, 0x20000890)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
futex$auto(&(0x7f0000000140)=0x5e8, 0x1, 0x3, &(0x7f00000001c0)={0x2, 0x7}, &(0x7f0000000280)=0xc7, 0x2ed4)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
msgctl$auto_IPC_RMID(0x5, 0x0, &(0x7f0000000200)={{0xc38, r0, r1, 0xfffffff9, 0x1, 0x1077, 0x81}, &(0x7f0000000080)=0x1, &(0x7f0000000100)=0xfd, 0x0, 0x90f, 0x8, 0x8000000000000000, 0x3, 0x5, 0x100, 0x8000, @inferred, @raw=0xfb})

5.46811331s ago: executing program 7 (id=451):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x80000001, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x15, 0x5, 0x0)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x1000000)
socket(0xa, 0x3, 0x3b)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x100007, 0x6d3f, 0x9, 0x800000002, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)

5.345023782s ago: executing program 3 (id=452):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0)
write$auto(r0, 0x0, 0x7ef)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
r1 = socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0xc)
r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r2, 0x0, 0x7ff, 0x400)
socket(0x2, 0x1, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948a, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r5)
sendfile$auto(r4, r4, 0x0, 0x0)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000004640)={0x168, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_MESH_ID={0x1a, 0x18, "a2f27dc22384318d048511c35251eaaeedd746a8ea28"}, @NL80211_ATTR_CSA_IES={0x127, 0xb9, 0x0, 0x1, [@generic="bf7155962f5e72cbab7d0f4302e5dea0075028d24238e2c39f447e990f08c67da8523afb84e46f965bb80a32f51b2dfcff998fb4720d699384a0174aa710f1ca8c4b272fbb9a41ed1b913b309e98132878442fc9377534aeffb4420f8472a9f66170eb5ba92d88257bc28cbc5b7f834300e92f", @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x7d, 0xea, 0x0, 0x0, @binary="146f0aba4655b4c8ab84c98af7a663363fda30c727a44ea45a5c8857623e42ffb3daac3a23c76048145c4d5916b684327669fd03ced5ef6b4631a3ef5907f1014f8a5be1026ef16a09d68266c33519fd6a97b93f9942b8bd2a9b6346ed2aa7a588cc4855166aeea38f86565d1d37c0d52f2103b5a50d640c6e"}, @nested={0x14, 0x54, 0x0, 0x1, [@typed={0x8, 0x27, 0x0, 0x0, @pid}, @nested={0x4, 0xda}, @nested={0x4, 0x9c}]}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0xee0}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfffffff7}]}, 0x168}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
unshare$auto(0x40000080)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/cache/index0/ways_of_associativity\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000003800)=""/168, 0xa8)
close_range$auto(0x2, 0x8, 0x0)

5.206991407s ago: executing program 0 (id=453):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x147602, 0x0)
r1 = socket(0x10, 0x2, 0x6)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044)
ioctl$auto_BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f0000000000)={0x6, 0x1, 0x2, 0x2, [0x800000000000000, 0x400, 0xffffffffffffffc1, 0x401]})
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0)
write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00000400080004e6070014000180100010800c000b00080000000000050000000000000070a06ef4f6fcea98fd0b153c3a0dc62d255c859db15d88f08103a574d6d3dcecd5ca5e8235f8006e4060dcd9ca4155fc216f3f8ef59d6a1a0200000028f1162100"/112], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000001900), 0xffffffffffffffff)
sendmsg$auto_TASKSTATS_CMD_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
socket(0x23, 0x80805, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x400, 0x0)
unshare$auto(0x40000080)
r8 = socket(0x1e, 0x1, 0x0)
lsm_set_self_attr$auto(0x1, &(0x7f0000000100)={0x68, 0x8, 0x80}, 0x80, 0x0)
readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6)
r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D2\x00', 0x3b7302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r9, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_ILA_CMD_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xac6533691ab1be2f)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)

4.107079779s ago: executing program 7 (id=454):
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1)
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x42a120, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dsp\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000c00))
socket(0x11, 0xa, 0x300)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/oss\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_SNDRV_PCM_IOCTL_TSTAMP2(0xffffffffffffffff, 0x40044102, &(0x7f0000000000)=0xb)
r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0)
ioctl$auto_EVIOCSREP(r5, 0x40084503, 0x0)
r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000001c0), 0x40e102, 0x0)
ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff024}})
write$auto(r6, 0x0, 0x6)
ioctl$auto(0x3, 0x400454ca, 0x38)
read$auto(0xffffffffffffffff, 0x0, 0x4)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/conf/ip6tnl0/disable_policy\x00', 0x600, 0x0)
ioctl$auto_TUNSETTXFILTER(r0, 0x400454d1, 0x0)

3.26183834s ago: executing program 7 (id=455):
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0)
r0 = socket(0x1b, 0xa, 0x76)
madvise$auto(0x0, 0x2000040080000003, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000200), r0)
getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
mremap$auto(0x200000001000, 0x4, 0x4, 0x3, 0x100000000)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
syz_clone(0x34255400, 0x0, 0xfffffffffffffee3, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000080), r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x808)
socket(0x22, 0x2, 0x3)
syz_clone(0x200111, 0x0, 0xfffffffffffffe7c, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x3ff}, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8881}, 0x800)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r0)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x121040, 0x0)
pread64$auto(r5, &(0x7f0000000380)='\x00\x00\x00\x8f\xde\xa4\a\'\x9b\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99\x96x\xd4\xa5D\xfa\xe5\xf9od^\xa6\x00\x00\x00\x00\x00\x00\x00\x0e\x87\xfa>\xbeaDs\xce,\xcfz\x89\xbc\xae\xcf\x83c\x1c\x90\xda\xbf\xad\xe0\xd6\xec-\x05\xcb\xee\x9f\xd2\xfat\x9a\xb65dFH\xa6\xbd[\xd2Ff\x7f?E\x9f(8\x88\x88\xeb\xcea\xea\x10\xc8\xf12-\x9c\xcd`\xb7WH\xa5\xccj\xc0\x03p>\xdd\xce\xaf_G9\x84L\r\x9e^>\x06\xca\xec', 0x2, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)

3.022854362s ago: executing program 0 (id=456):
r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
sysfs$auto(0x2, 0x100001000000032, 0x0)
r1 = fsopen$auto(0x0, 0x1)
fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x3, &(0x7f0000001640)='+\x00', &(0x7f0000001680)="df", 0x0)
ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)=0x1)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_clone3(0x0, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/topology/thread_siblings\x00', 0x400, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x5, 0x406, 0xfffe, 0x10001, 0x2, 0x6d3e, 0x3, 0x2, 0x4]}, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0)
sendfile$auto(r3, r3, 0x0, 0x7fffe000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x2000, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000009, 0xa4000000000002)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff)

2.136734267s ago: executing program 7 (id=457):
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x19, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/53, 0x35)
select$auto(0x7, 0x0, 0x0, 0x0, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
msgrcv$auto(0x71, 0x0, 0x0, 0x7fffffffffffffff, 0x5)
r1 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", <r2=>0x0, r1, 0x5, 0x7, 0xe5, 0x3, 0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x10)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$auto(0xffffffffffffffff, 0xfffffffc, 0x20, 0x0, 0x98000116)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0)
ioctl$auto(r4, 0x921064b1, 0x8)
pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r3, 0x1ff, &(0x7f00000000c0)={@_si_pad}, 0x1)
r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
write$auto_sg_fops_sg(r5, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0x0, 0x0)
socket(0x11, 0x80003, 0x300)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x10}, 0x8, 0x3, 0x4, 0x0)

883.509502ms ago: executing program 1 (id=436):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x6, 0x4, 0x8201, 0x2, 0x808, 0xc, 0x5933, 0x4000000002, 0x3}, 0x6f4)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyy7\x00', 0x2, 0x0)
ioctl$auto_TIOCSWINSZ(r1, 0x5414, &(0x7f00000000c0)="05")
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000440), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf4e379f37c5b8231}, 0x10000)
r4 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0)
dup$auto(r4)
socket(0xa, 0x2, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a6f72cb22c"], 0x1368}, 0x1, 0x0, 0x0, 0x80000}, 0x20000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x013\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x39)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x490602, 0x0)
read$auto(r5, 0x0, 0x20)
mincore$auto(0x0, 0x1, 0xfffffffffffffffc)
fsconfig$auto_FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', &(0x7f00000000c0)="89d183e4d1ae19693cab8147481f4142ac0c612c5dc042d861f643f260d4199596463ef2dc", 0x2)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x80802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x50, 0x602, 0x300000000000)
ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={"77b223906bc09888ab88dc2f5396d956e2c955d7c76b09f926dc17cc477ab958", 0x5, 0x3, 0x68b3, 0xf, 0x7fff, 0xffffffffffffffff})
landlock_restrict_self$auto(0xffffffffffffffff, 0x2)
socket(0x2, 0x1, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

822.764793ms ago: executing program 0 (id=458):
set_tid_address$auto(0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
open(0x0, 0xa22c0, 0x155)
prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001)
keyctl$auto(0x5, 0xfffffffe, 0x0, 0x0, 0x10)
setreuid$auto(0x15, 0x5)
access$auto(0x0, 0x5)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x6)
write$auto(r0, &(0x7f00000000c0)='/Eev/a\x04\x00\x00\x001\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
open(0x0, 0x7ffd, 0x12)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r1, &(0x7f0000000100)='1', 0x1)
madvise$auto(0x0, 0x2000040080000004, 0xe)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x20000080)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10)
unshare$auto(0x40000080)
io_uring_setup$auto(0x4c2, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)
unshare$auto(0x0)
pwrite64$auto(r2, 0x0, 0x1, 0x27)

0s ago: executing program 7 (id=459):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0)
write$auto(r0, 0x0, 0x7ef)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x18, r2, 0x301, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090)
r3 = socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0xc)
r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r4, 0x0, 0x7ff, 0x400)
socket(0x2, 0x1, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948a, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r7)
sendfile$auto(r6, r6, 0x0, 0x0)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000004640)={0x168, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_MESH_ID={0x1a, 0x18, "a2f27dc22384318d048511c35251eaaeedd746a8ea28"}, @NL80211_ATTR_CSA_IES={0x127, 0xb9, 0x0, 0x1, [@generic="bf7155962f5e72cbab7d0f4302e5dea0075028d24238e2c39f447e990f08c67da8523afb84e46f965bb80a32f51b2dfcff998fb4720d699384a0174aa710f1ca8c4b272fbb9a41ed1b913b309e98132878442fc9377534aeffb4420f8472a9f66170eb5ba92d88257bc28cbc5b7f834300e92f", @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x7d, 0xea, 0x0, 0x0, @binary="146f0aba4655b4c8ab84c98af7a663363fda30c727a44ea45a5c8857623e42ffb3daac3a23c76048145c4d5916b684327669fd03ced5ef6b4631a3ef5907f1014f8a5be1026ef16a09d68266c33519fd6a97b93f9942b8bd2a9b6346ed2aa7a588cc4855166aeea38f86565d1d37c0d52f2103b5a50d640c6e"}, @nested={0x14, 0x54, 0x0, 0x1, [@typed={0x8, 0x27, 0x0, 0x0, @pid}, @nested={0x4, 0xda}, @nested={0x4, 0x9c}]}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0xee0}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfffffff7}]}, 0x168}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
unshare$auto(0x40000080)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)

kernel console output (not intermixed with test programs):

[  105.310302][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.317494][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.354079][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[  105.400174][ T5865] Bluetooth: hci2: command tx timeout
[  105.438502][ T5853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  105.449828][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.476057][ T5865] Bluetooth: hci3: command tx timeout
[  105.476084][ T5867] Bluetooth: hci1: command tx timeout
[  105.492361][ T5167] Bluetooth: hci0: command tx timeout
[  105.493905][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.505231][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.547852][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.555095][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.708323][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.870118][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.037512][ T5852] veth0_vlan: entered promiscuous mode
[  106.092953][ T5852] veth1_vlan: entered promiscuous mode
[  106.199759][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.232729][ T5852] veth0_macvtap: entered promiscuous mode
[  106.251978][ T5852] veth1_macvtap: entered promiscuous mode
[  106.278026][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.320160][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.331301][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.355997][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.395640][ T5853] veth0_vlan: entered promiscuous mode
[  106.418044][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.430118][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.441850][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.450705][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.462289][ T5853] veth1_vlan: entered promiscuous mode
[  106.542415][ T5853] veth0_macvtap: entered promiscuous mode
[  106.554360][ T5850] veth0_vlan: entered promiscuous mode
[  106.569500][ T5853] veth1_macvtap: entered promiscuous mode
[  106.626054][ T5850] veth1_vlan: entered promiscuous mode
[  106.643880][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.651472][ T5851] veth0_vlan: entered promiscuous mode
[  106.702731][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.725405][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.733406][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.762624][ T5851] veth1_vlan: entered promiscuous mode
[  106.770635][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.779817][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.789538][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.798414][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.874274][ T5850] veth0_macvtap: entered promiscuous mode
[  106.882527][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.891454][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.916407][ T5850] veth1_macvtap: entered promiscuous mode
[  106.992770][ T5851] veth0_macvtap: entered promiscuous mode
[  107.024405][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  107.029338][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.067721][ T5851] veth1_macvtap: entered promiscuous mode
[  107.104183][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.117715][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.143834][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.227408][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.246625][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.255961][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.265387][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.275254][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.302080][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.330129][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.344383][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.375350][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.389922][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.399677][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.408532][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.474773][ T5867] Bluetooth: hci2: command tx timeout
[  107.554939][ T5867] Bluetooth: hci1: command tx timeout
[  107.560539][ T5867] Bluetooth: hci0: command tx timeout
[  107.567465][ T5167] Bluetooth: hci3: command tx timeout
[  107.783792][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.809573][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.874846][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.884978][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.893469][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  108.219981][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.248824][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.431654][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.468328][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.575002][ T5867] Bluetooth: hci2: command tx timeout
[  109.635895][ T5867] Bluetooth: hci0: command tx timeout
[  109.639022][ T5167] Bluetooth: hci1: command tx timeout
[  109.641443][ T5867] Bluetooth: hci3: command tx timeout
[  109.803353][ T5968] FAULT_INJECTION: forcing a failure.
[  109.803353][ T5968] name failslab, interval 1, probability 0, space 0, times 1
[  109.820409][ T5968] CPU: 0 UID: 0 PID: 5968 Comm: syz.0.5 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  109.820453][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  109.820478][ T5968] Call Trace:
[  109.820489][ T5968]  <TASK>
[  109.820505][ T5968]  dump_stack_lvl+0x16c/0x1f0
[  109.820561][ T5968]  should_fail_ex+0x512/0x640
[  109.820608][ T5968]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  109.820663][ T5968]  should_failslab+0xc2/0x120
[  109.820694][ T5968]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  109.820745][ T5968]  ? anon_vma_fork+0xe6/0x620
[  109.820781][ T5968]  anon_vma_fork+0xe6/0x620
[  109.820811][ T5968]  ? vm_area_dup+0x5a1/0x8d0
[  109.820844][ T5968]  dup_mmap+0x152e/0x21d0
[  109.820882][ T5968]  ? __pfx_dup_mmap+0x10/0x10
[  109.820929][ T5968]  copy_process+0x4081/0x7650
[  109.820958][ T5968]  ? preempt_schedule_thunk+0x16/0x30
[  109.821005][ T5968]  ? __pfx_copy_process+0x10/0x10
[  109.821034][ T5968]  ? find_held_lock+0x2b/0x80
[  109.821062][ T5968]  ? wake_up_q+0xb0/0x160
[  109.821083][ T5968]  ? do_raw_spin_unlock+0x172/0x230
[  109.821108][ T5968]  kernel_clone+0xfc/0x960
[  109.821138][ T5968]  ? __pfx_futex_wake+0x10/0x10
[  109.821171][ T5968]  ? __pfx_kernel_clone+0x10/0x10
[  109.821217][ T5968]  __do_sys_clone+0xce/0x120
[  109.821246][ T5968]  ? __pfx___do_sys_clone+0x10/0x10
[  109.821289][ T5968]  ? xfd_validate_state+0x61/0x180
[  109.821330][ T5968]  do_syscall_64+0xcd/0x490
[  109.821368][ T5968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.821391][ T5968] RIP: 0033:0x7fb32118e929
[  109.821415][ T5968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.821436][ T5968] RSP: 002b:00007fb322079fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  109.821458][ T5968] RAX: ffffffffffffffda RBX: 00007fb3213b6160 RCX: 00007fb32118e929
[  109.821472][ T5968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  109.821485][ T5968] RBP: 00007fb321210b39 R08: 0000000000000000 R09: 0000000000000000
[  109.821499][ T5968] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  109.821512][ T5968] R13: 0000000000000000 R14: 00007fb3213b6160 R15: 00007ffe23a21ed8
[  109.821540][ T5968]  </TASK>
[  110.864830][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  110.875288][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.893909][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.902897][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.911662][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.920638][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.929588][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.942946][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.951831][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  114.501411][ T6017] netlink: 342 bytes leftover after parsing attributes in process `syz.3.11'.
[  116.238453][ T6039] random: crng reseeded on system resumption
[  116.394114][ T6031] netlink: 342 bytes leftover after parsing attributes in process `syz.0.15'.
[  118.720641][ T6059] netlink: 342 bytes leftover after parsing attributes in process `syz.0.20'.
[  119.610778][ T6072] netlink: 342 bytes leftover after parsing attributes in process `syz.3.22'.
[  124.795494][ T6153] netlink: 342 bytes leftover after parsing attributes in process `syz.1.34'.
[  134.221097][ T6283] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  134.302050][ T6283] Zero length message leads to an empty skb
[  136.393473][ T6315] ubi0: attaching mtd0
[  136.420540][ T6315] ubi0: scanning is finished
[  136.429831][ T6315] ubi0: empty MTD device detected
[  136.654881][ T6315] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  136.668362][ T6315] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  136.676752][ T6315] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  136.706043][ T6315] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  136.713577][ T6315] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  136.827403][ T6315] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  136.866344][ T6315] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3180542384
[  136.902848][ T6315] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  137.011841][ T6328] ubi0: background thread "ubi_bgt0d" started, PID 6328
[  137.051510][ T6319] ubi0: detaching mtd0
[  137.156583][ T6319] ubi0: mtd0 is detached
[  138.122755][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  138.129426][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  138.453876][ T6351] netlink: 342 bytes leftover after parsing attributes in process `syz.0.65'.
[  139.179272][ T6362] netlink: 342 bytes leftover after parsing attributes in process `syz.1.67'.
[  140.986131][ T6382] capability: warning: `syz.2.69' uses 32-bit capabilities (legacy support in use)
[  141.139154][ T6377] FAULT_INJECTION: forcing a failure.
[  141.139154][ T6377] name failslab, interval 1, probability 0, space 0, times 0
[  141.155904][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.0.70 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  141.155943][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  141.155961][ T6377] Call Trace:
[  141.155971][ T6377]  <TASK>
[  141.155982][ T6377]  dump_stack_lvl+0x16c/0x1f0
[  141.156048][ T6377]  should_fail_ex+0x512/0x640
[  141.156091][ T6377]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  141.156143][ T6377]  should_failslab+0xc2/0x120
[  141.156173][ T6377]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  141.156221][ T6377]  ? find_held_lock+0x2b/0x80
[  141.156252][ T6377]  ? vm_area_dup+0x27/0x8d0
[  141.156291][ T6377]  ? dup_mmap+0x5cb/0x21d0
[  141.156332][ T6377]  vm_area_dup+0x27/0x8d0
[  141.156377][ T6377]  dup_mmap+0x877/0x21d0
[  141.156427][ T6377]  ? __pfx_dup_mmap+0x10/0x10
[  141.156493][ T6377]  copy_process+0x4081/0x7650
[  141.156533][ T6377]  ? __pfx___futex_wait+0x10/0x10
[  141.156592][ T6377]  ? __pfx_copy_process+0x10/0x10
[  141.156646][ T6377]  ? find_held_lock+0x2b/0x80
[  141.156695][ T6377]  kernel_clone+0xfc/0x960
[  141.156738][ T6377]  ? __pfx_kernel_clone+0x10/0x10
[  141.156808][ T6377]  __do_sys_clone+0xce/0x120
[  141.156850][ T6377]  ? __pfx___do_sys_clone+0x10/0x10
[  141.156910][ T6377]  ? xfd_validate_state+0x61/0x180
[  141.156966][ T6377]  do_syscall_64+0xcd/0x490
[  141.157015][ T6377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.157047][ T6377] RIP: 0033:0x7fb32118e929
[  141.157077][ T6377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.157111][ T6377] RSP: 002b:00007fb32209afe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  141.157140][ T6377] RAX: ffffffffffffffda RBX: 00007fb3213b6080 RCX: 00007fb32118e929
[  141.157158][ T6377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  141.157176][ T6377] RBP: 00007fb321210b39 R08: 0000000000000000 R09: 0000000000000000
[  141.157193][ T6377] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  141.157211][ T6377] R13: 0000000000000000 R14: 00007fb3213b6080 R15: 00007ffe23a21ed8
[  141.157251][ T6377]  </TASK>
[  141.727486][ T6391] netlink: 342 bytes leftover after parsing attributes in process `syz.3.71'.
[  146.821663][ T6462] ubi0: attaching mtd0
[  146.837809][ T6462] ubi0: scanning is finished
[  147.103404][ T6462] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  147.167099][ T6462] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  147.284338][ T6462] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  147.362802][ T6462] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  147.468053][ T6462] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  147.586912][ T6462] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  147.664539][ T6462] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3180542384
[  147.721910][ T6462] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  147.834888][ T6463] ubi0: detaching mtd0
[  147.915392][ T6463] ubi0: mtd0 is detached
[  148.338845][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'.
[  152.716793][ T6541] netlink: 342 bytes leftover after parsing attributes in process `syz.2.94'.
[  156.006062][ T6574] netlink: 342 bytes leftover after parsing attributes in process `syz.3.100'.
[  156.964225][ T6585] zram0: detected capacity change from 0 to 8
[  160.190437][ T6632] ovs_: entered promiscuous mode
[  160.397451][ T6637] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[  160.672969][ T6641] ubi0: attaching mtd0
[  160.760784][ T6641] ubi0: scanning is finished
[  161.183919][ T6641] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  161.245499][ T6641] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  161.253251][ T6641] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  161.279219][ T6641] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  161.294404][ T6641] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  161.302047][ T6641] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  161.404338][ T6641] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3180542384
[  161.434607][ T6641] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  161.506507][ T6645] ubi0: detaching mtd0
[  161.543267][ T6645] ubi0: mtd0 is detached
[  162.695990][ T6667] netlink: 342 bytes leftover after parsing attributes in process `syz.0.115'.
[  163.035767][ T6675] mmap: syz.2.117 (6675) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  163.093600][ T6675] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  163.198606][ T6678] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  164.397983][ T6678] syz.1.118 (6678): /proc/6676/oom_adj is deprecated, please use /proc/6676/oom_score_adj instead.
[  168.607369][ T6725] netlink: 342 bytes leftover after parsing attributes in process `syz.2.127'.
[  172.140974][ T6790] netlink: 342 bytes leftover after parsing attributes in process `syz.0.138'.
[  172.431498][ T6791] netlink: 342 bytes leftover after parsing attributes in process `syz.2.139'.
[  173.121491][ T6787] netlink: 342 bytes leftover after parsing attributes in process `syz.1.140'.
[  180.896664][ T6909] netlink: 342 bytes leftover after parsing attributes in process `syz.1.158'.
[  181.545379][ T6920] process 'syz.0.159' launched './file0' with NULL argv: empty string added
[  183.257481][ T6933] zswap: compressor  not available
[  183.383797][ T6943] Unable to find swap-space signature
[  183.400887][ T6943] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  186.606142][ T6985] FAULT_INJECTION: forcing a failure.
[  186.606142][ T6985] name failslab, interval 1, probability 0, space 0, times 0
[  186.660147][ T6985] CPU: 0 UID: 0 PID: 6985 Comm: syz.1.171 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  186.660187][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  186.660204][ T6985] Call Trace:
[  186.660213][ T6985]  <TASK>
[  186.660224][ T6985]  dump_stack_lvl+0x16c/0x1f0
[  186.660277][ T6985]  should_fail_ex+0x512/0x640
[  186.660320][ T6985]  ? fs_reclaim_acquire+0xae/0x150
[  186.660359][ T6985]  ? tomoyo_encode2+0x100/0x3e0
[  186.660398][ T6985]  should_failslab+0xc2/0x120
[  186.660427][ T6985]  __kmalloc_noprof+0xd2/0x510
[  186.660472][ T6985]  ? d_absolute_path+0x136/0x1a0
[  186.660512][ T6985]  tomoyo_encode2+0x100/0x3e0
[  186.660561][ T6985]  tomoyo_encode+0x29/0x50
[  186.660601][ T6985]  tomoyo_realpath_from_path+0x18f/0x6e0
[  186.660659][ T6985]  tomoyo_get_exe+0x63/0xa0
[  186.660690][ T6985]  tomoyo_write_control+0x689/0x1430
[  186.660765][ T6985]  ? __pfx_tomoyo_write_control+0x10/0x10
[  186.660824][ T6985]  ? __pfx_tomoyo_write+0x10/0x10
[  186.660865][ T6985]  vfs_write+0x29d/0x1150
[  186.660913][ T6985]  ? __pfx___mutex_lock+0x10/0x10
[  186.660958][ T6985]  ? __pfx_vfs_write+0x10/0x10
[  186.661012][ T6985]  ? __fget_files+0x20e/0x3c0
[  186.661068][ T6985]  ksys_write+0x12a/0x250
[  186.661107][ T6985]  ? __pfx_ksys_write+0x10/0x10
[  186.661157][ T6985]  do_syscall_64+0xcd/0x490
[  186.661200][ T6985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.661227][ T6985] RIP: 0033:0x7f28d858e929
[  186.661248][ T6985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.661273][ T6985] RSP: 002b:00007f28d94a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  186.661297][ T6985] RAX: ffffffffffffffda RBX: 00007f28d87b6080 RCX: 00007f28d858e929
[  186.661315][ T6985] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003
[  186.661330][ T6985] RBP: 00007f28d94a0090 R08: 0000000000000000 R09: 0000000000000000
[  186.661346][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.661362][ T6985] R13: 0000000000000000 R14: 00007f28d87b6080 R15: 00007ffda3f12b98
[  186.661396][ T6985]  </TASK>
[  186.661419][ T6985] ERROR: Out of memory at tomoyo_realpath_from_path.
[  188.362839][ T7011] FAULT_INJECTION: forcing a failure.
[  188.362839][ T7011] name failslab, interval 1, probability 0, space 0, times 0
[  188.607401][ T7011] CPU: 1 UID: 0 PID: 7011 Comm: syz.3.176 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  188.607445][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  188.607464][ T7011] Call Trace:
[  188.607474][ T7011]  <TASK>
[  188.607486][ T7011]  dump_stack_lvl+0x16c/0x1f0
[  188.607539][ T7011]  should_fail_ex+0x512/0x640
[  188.607584][ T7011]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  188.607633][ T7011]  should_failslab+0xc2/0x120
[  188.607665][ T7011]  __kmalloc_cache_noprof+0x6a/0x3e0
[  188.607708][ T7011]  ? mpi_alloc+0x46/0x230
[  188.607746][ T7011]  ? mpi_normalize+0xc9/0x100
[  188.607784][ T7011]  mpi_alloc+0x46/0x230
[  188.607827][ T7011]  rsa_check_payload+0x3b/0xc0
[  188.607879][ T7011]  rsa_enc+0x198/0x3b0
[  188.607930][ T7011]  ? __pfx_rsa_enc+0x10/0x10
[  188.607979][ T7011]  ? __virt_addr_valid+0x81/0x610
[  188.608014][ T7011]  ? __phys_addr+0xe8/0x180
[  188.608049][ T7011]  ? sg_init_one+0xf5/0x1b0
[  188.608094][ T7011]  rsassa_pkcs1_verify+0x502/0xb60
[  188.608143][ T7011]  ? __pfx_rsassa_pkcs1_verify+0x10/0x10
[  188.608201][ T7011]  ? rsa_max_size+0xd/0x70
[  188.608249][ T7011]  ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0
[  188.608290][ T7011]  public_key_verify_signature+0x66f/0x970
[  188.608349][ T7011]  ? __pfx_public_key_verify_signature+0x10/0x10
[  188.608421][ T7011]  ? __pfx_public_key_verify_signature_2+0x10/0x10
[  188.608466][ T7011]  verify_signature+0xe2/0x130
[  188.608504][ T7011]  pkcs7_validate_trust+0x220/0x7e0
[  188.608562][ T7011]  verify_pkcs7_message_sig+0x12c/0x250
[  188.608600][ T7011]  ? __pfx_verify_pkcs7_message_sig+0x10/0x10
[  188.608636][ T7011]  ? kfree+0x2b4/0x4d0
[  188.608673][ T7011]  ? public_key_signature_free+0xda/0x110
[  188.608722][ T7011]  ? pkcs7_parse_message+0x536/0x720
[  188.608774][ T7011]  verify_pkcs7_signature+0x6d/0xa0
[  188.608815][ T7011]  valid_regdb+0x215/0x590
[  188.608849][ T7011]  ? __pfx___mutex_lock+0x10/0x10
[  188.608900][ T7011]  ? __pfx_valid_regdb+0x10/0x10
[  188.608943][ T7011]  reg_reload_regdb+0x11e/0x460
[  188.608982][ T7011]  ? __pfx_reg_reload_regdb+0x10/0x10
[  188.609034][ T7011]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  188.609078][ T7011]  ? nl80211_pre_doit+0x1b0/0xb10
[  188.609130][ T7011]  genl_family_rcv_msg_doit+0x209/0x2f0
[  188.609173][ T7011]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  188.609211][ T7011]  ? rcu_is_watching+0x12/0xc0
[  188.609259][ T7011]  ? bpf_lsm_capable+0x9/0x10
[  188.609298][ T7011]  ? security_capable+0x7e/0x260
[  188.609344][ T7011]  genl_rcv_msg+0x55c/0x800
[  188.609386][ T7011]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.609424][ T7011]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  188.609466][ T7011]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[  188.609499][ T7011]  ? __pfx_nl80211_post_doit+0x10/0x10
[  188.609559][ T7011]  netlink_rcv_skb+0x158/0x420
[  188.609593][ T7011]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.609634][ T7011]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  188.609683][ T7011]  ? netlink_deliver_tap+0x1ae/0xd30
[  188.609740][ T7011]  genl_rcv+0x28/0x40
[  188.609773][ T7011]  netlink_unicast+0x58a/0x850
[  188.609812][ T7011]  ? __pfx_netlink_unicast+0x10/0x10
[  188.609857][ T7011]  netlink_sendmsg+0x8d1/0xdd0
[  188.609897][ T7011]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.609946][ T7011]  ____sys_sendmsg+0xa98/0xc70
[  188.609984][ T7011]  ? copy_msghdr_from_user+0x10a/0x160
[  188.610029][ T7011]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.610074][ T7011]  ? ___sys_sendmsg+0xde/0x1d0
[  188.610123][ T7011]  ___sys_sendmsg+0x134/0x1d0
[  188.610172][ T7011]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.610214][ T7011]  ? __lock_acquire+0x622/0x1c90
[  188.610309][ T7011]  __sys_sendmsg+0x16d/0x220
[  188.610362][ T7011]  ? __pfx___sys_sendmsg+0x10/0x10
[  188.610426][ T7011]  ? __x64_sys_futex+0x1e0/0x4c0
[  188.610494][ T7011]  do_syscall_64+0xcd/0x490
[  188.610547][ T7011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.610580][ T7011] RIP: 0033:0x7f2d2278e929
[  188.610606][ T7011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.610637][ T7011] RSP: 002b:00007f2d23580038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.610666][ T7011] RAX: ffffffffffffffda RBX: 00007f2d229b5fa0 RCX: 00007f2d2278e929
[  188.610688][ T7011] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005
[  188.610707][ T7011] RBP: 00007f2d22810b39 R08: 0000000000000000 R09: 0000000000000000
[  188.610726][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.610745][ T7011] R13: 0000000000000000 R14: 00007f2d229b5fa0 R15: 00007ffe14ac4e08
[  188.610787][ T7011]  </TASK>
[  189.057428][    C1] vkms_vblank_simulate: vblank timer overrun
[  189.806278][ T7012] syz.3.176 (7012) used greatest stack depth: 19784 bytes left
[  191.589525][ T7035] FAULT_INJECTION: forcing a failure.
[  191.589525][ T7035] name failslab, interval 1, probability 0, space 0, times 0
[  191.602707][ T7035] CPU: 0 UID: 0 PID: 7035 Comm: syz.1.181 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  191.602749][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  191.602767][ T7035] Call Trace:
[  191.602777][ T7035]  <TASK>
[  191.602788][ T7035]  dump_stack_lvl+0x16c/0x1f0
[  191.602847][ T7035]  should_fail_ex+0x512/0x640
[  191.602890][ T7035]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  191.602941][ T7035]  should_failslab+0xc2/0x120
[  191.602972][ T7035]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  191.603043][ T7035]  ? __alloc_skb+0x2b2/0x380
[  191.603096][ T7035]  __alloc_skb+0x2b2/0x380
[  191.603141][ T7035]  ? __pfx___alloc_skb+0x10/0x10
[  191.603188][ T7035]  ? __pfx___might_resched+0x10/0x10
[  191.603228][ T7035]  ? rcu_is_watching+0x12/0xc0
[  191.603268][ T7035]  netlink_dump+0x192/0xd00
[  191.603298][ T7035]  ? __rhashtable_lookup.constprop.0+0x3a5/0x760
[  191.603329][ T7035]  ? __netlink_dump_start+0x150/0x990
[  191.603362][ T7035]  ? __pfx_netlink_dump+0x10/0x10
[  191.603388][ T7035]  ? __pfx___mutex_lock+0x10/0x10
[  191.603457][ T7035]  __netlink_dump_start+0x6d6/0x990
[  191.603489][ T7035]  smc_diag_handler_dump+0x1f9/0x240
[  191.603516][ T7035]  ? __pfx_smc_diag_handler_dump+0x10/0x10
[  191.603542][ T7035]  ? __pfx_smc_diag_dump+0x10/0x10
[  191.603569][ T7035]  ? sock_diag_lock_handler+0x10f/0x2e0
[  191.603613][ T7035]  sock_diag_rcv_msg+0x435/0x790
[  191.603653][ T7035]  netlink_rcv_skb+0x158/0x420
[  191.603680][ T7035]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  191.603718][ T7035]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  191.603757][ T7035]  ? netlink_deliver_tap+0x1ae/0xd30
[  191.603808][ T7035]  netlink_unicast+0x58a/0x850
[  191.603840][ T7035]  ? __pfx_netlink_unicast+0x10/0x10
[  191.603877][ T7035]  netlink_sendmsg+0x8d1/0xdd0
[  191.603910][ T7035]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.603950][ T7035]  ____sys_sendmsg+0xa98/0xc70
[  191.603980][ T7035]  ? copy_msghdr_from_user+0x10a/0x160
[  191.604020][ T7035]  ? __pfx_____sys_sendmsg+0x10/0x10
[  191.604072][ T7035]  ___sys_sendmsg+0x134/0x1d0
[  191.604113][ T7035]  ? __pfx____sys_sendmsg+0x10/0x10
[  191.604149][ T7035]  ? __lock_acquire+0x622/0x1c90
[  191.604227][ T7035]  __sys_sendmsg+0x16d/0x220
[  191.604266][ T7035]  ? __pfx___sys_sendmsg+0x10/0x10
[  191.604317][ T7035]  ? syscall_user_dispatch+0x78/0x140
[  191.604351][ T7035]  do_syscall_64+0xcd/0x490
[  191.604394][ T7035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.604429][ T7035] RIP: 0033:0x7f28d858e929
[  191.604453][ T7035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.604480][ T7035] RSP: 002b:00007f28d94a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.604504][ T7035] RAX: ffffffffffffffda RBX: 00007f28d87b6080 RCX: 00007f28d858e929
[  191.604521][ T7035] RDX: 000000000400c000 RSI: 0000200000000140 RDI: 000000000000000a
[  191.604537][ T7035] RBP: 00007f28d94a0090 R08: 0000000000000000 R09: 0000000000000000
[  191.604553][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.604568][ T7035] R13: 0000000000000000 R14: 00007f28d87b6080 R15: 00007ffda3f12b98
[  191.604602][ T7035]  </TASK>
[  195.368923][ T7068] ubi0: attaching mtd0
[  195.389506][ T7068] ubi0: scanning is finished
[  195.674855][ T7068] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  195.737558][ T7068] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  195.764610][ T7068] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  195.772213][ T7068] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  195.784601][ T7068] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  195.794524][ T7068] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  195.816442][ T7068] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3180542384
[  195.884592][ T7068] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  195.954232][ T7069] ubi0: detaching mtd0
[  195.970391][ T7069] ubi0: mtd0 is detached
[  196.239494][ T7084] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  197.574656][ T7085] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[  198.898439][ T7113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  198.906910][ T7113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  198.916983][ T7113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  198.938849][ T7113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  198.949354][ T7113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  199.560328][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  199.569016][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  200.189133][ T7112] chnl_net:caif_netlink_parms(): no params data found
[  200.796794][ T7112] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.838080][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.846057][ T7112] bridge_slave_0: entered allmulticast mode
[  200.876766][ T7112] bridge_slave_0: entered promiscuous mode
[  200.908884][ T7112] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.926249][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.946827][ T7112] bridge_slave_1: entered allmulticast mode
[  200.964739][ T7112] bridge_slave_1: entered promiscuous mode
[  200.994615][ T7113] Bluetooth: hci2: command tx timeout
[  201.185034][ T7112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.275510][ T7112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.402334][ T7112] team0: Port device team_slave_0 added
[  201.429327][ T7112] team0: Port device team_slave_1 added
[  201.630894][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.650654][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.721662][ T7112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.763942][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.778507][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.843140][ T7112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.851822][ T7112] hsr_slave_0: entered promiscuous mode
[  202.858429][ T7112] hsr_slave_1: entered promiscuous mode
[  202.877904][ T7112] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.894517][ T7112] Cannot create hsr debugfs directory
[  203.096053][ T7113] Bluetooth: hci2: command tx timeout
[  203.550244][ T7112] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  203.607374][ T7112] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  203.628852][ T7112] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  203.642694][ T7112] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  203.972557][ T7112] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.036521][ T7112] 8021q: adding VLAN 0 to HW filter on device team0
[  204.079890][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.087128][ T6877] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.124492][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.131799][ T6877] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.067033][ T7112] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.158636][ T7113] Bluetooth: hci2: command tx timeout
[  206.026075][ T7112] veth0_vlan: entered promiscuous mode
[  206.139553][ T7112] veth1_vlan: entered promiscuous mode
[  206.226299][ T7112] veth0_macvtap: entered promiscuous mode
[  206.252470][ T7112] veth1_macvtap: entered promiscuous mode
[  206.328198][ T7192] FAULT_INJECTION: forcing a failure.
[  206.328198][ T7192] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  206.340818][ T7112] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.360335][ T7192] CPU: 1 UID: 0 PID: 7192 Comm: syz.2.201 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  206.360379][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  206.360399][ T7192] Call Trace:
[  206.360410][ T7192]  <TASK>
[  206.360422][ T7192]  dump_stack_lvl+0x16c/0x1f0
[  206.360477][ T7192]  should_fail_ex+0x512/0x640
[  206.360531][ T7192]  should_fail_alloc_page+0xe7/0x130
[  206.360565][ T7192]  prepare_alloc_pages+0x3c2/0x610
[  206.360612][ T7192]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  206.360671][ T7192]  ? kasan_save_stack+0x42/0x60
[  206.360717][ T7192]  ? kasan_save_stack+0x33/0x60
[  206.360763][ T7192]  ? kasan_save_track+0x14/0x30
[  206.360809][ T7192]  ? __kasan_slab_alloc+0x89/0x90
[  206.360859][ T7192]  ? kmem_cache_alloc_noprof+0x1cb/0x3b0
[  206.360906][ T7192]  ? ptlock_alloc+0x1f/0x70
[  206.360945][ T7192]  ? pte_alloc_one+0x82/0x3a0
[  206.360971][ T7192]  ? copy_huge_pmd+0x18d/0x2fd0
[  206.361008][ T7192]  ? copy_page_range+0xe47/0x5740
[  206.361065][ T7192]  ? dup_mmap+0xe88/0x21d0
[  206.361103][ T7192]  ? copy_process+0x4081/0x7650
[  206.361154][ T7192]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  206.361226][ T7192]  ? lock_acquire+0x179/0x350
[  206.361272][ T7192]  ? find_held_lock+0x2b/0x80
[  206.361307][ T7192]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  206.361359][ T7192]  ? policy_nodemask+0xea/0x4e0
[  206.361393][ T7192]  alloc_pages_mpol+0x1fb/0x550
[  206.361428][ T7192]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  206.361464][ T7192]  ? find_held_lock+0x2b/0x80
[  206.361502][ T7192]  alloc_pages_noprof+0x131/0x390
[  206.361536][ T7192]  pte_alloc_one+0x1c/0x3a0
[  206.361568][ T7192]  copy_huge_pmd+0x18d/0x2fd0
[  206.361623][ T7192]  ? __pfx_copy_huge_pmd+0x10/0x10
[  206.361679][ T7192]  ? __pfx___might_resched+0x10/0x10
[  206.361725][ T7192]  copy_page_range+0xe47/0x5740
[  206.361786][ T7192]  ? __lock_acquire+0x622/0x1c90
[  206.361863][ T7192]  ? __pfx_copy_page_range+0x10/0x10
[  206.361908][ T7192]  ? mas_store+0x7a9/0x1160
[  206.361943][ T7192]  ? find_held_lock+0x2b/0x80
[  206.361979][ T7192]  ? __vma_enter_locked+0x163/0x3f0
[  206.362049][ T7192]  dup_mmap+0xe88/0x21d0
[  206.362108][ T7192]  ? __pfx_dup_mmap+0x10/0x10
[  206.362180][ T7192]  copy_process+0x4081/0x7650
[  206.362225][ T7192]  ? __pfx___futex_wait+0x10/0x10
[  206.362303][ T7192]  ? __pfx_copy_process+0x10/0x10
[  206.362346][ T7192]  ? find_held_lock+0x2b/0x80
[  206.362398][ T7192]  kernel_clone+0xfc/0x960
[  206.362444][ T7192]  ? __pfx_kernel_clone+0x10/0x10
[  206.362511][ T7192]  __do_sys_clone+0xce/0x120
[  206.362553][ T7192]  ? __pfx___do_sys_clone+0x10/0x10
[  206.362615][ T7192]  ? xfd_validate_state+0x61/0x180
[  206.362684][ T7192]  do_syscall_64+0xcd/0x490
[  206.362737][ T7192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.362769][ T7192] RIP: 0033:0x7f3d8c18e929
[  206.362795][ T7192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.362825][ T7192] RSP: 002b:00007f3d8cfb6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  206.362855][ T7192] RAX: ffffffffffffffda RBX: 00007f3d8c3b6080 RCX: 00007f3d8c18e929
[  206.362877][ T7192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  206.362896][ T7192] RBP: 00007f3d8c210b39 R08: 0000000000000000 R09: 0000000000000000
[  206.362914][ T7192] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  206.362934][ T7192] R13: 0000000000000000 R14: 00007f3d8c3b6080 R15: 00007ffdca13d228
[  206.362974][ T7192]  </TASK>
[  206.727357][ T7112] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.847257][ T7112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.873197][ T7112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.893917][ T7112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.936938][ T7112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.236109][ T7113] Bluetooth: hci2: command tx timeout
[  207.455625][ T6916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.464616][ T6916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.570169][ T6916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.582087][ T6916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.427457][ T7229] netlink: 342 bytes leftover after parsing attributes in process `syz.2.206'.
[  211.939794][ T7251] netlink: 342 bytes leftover after parsing attributes in process `syz.4.211'.
[  212.750961][ T6874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  212.764949][ T6874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  212.773173][ T6874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  212.829128][ T6874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  212.840893][ T6874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.479206][ T7262] chnl_net:caif_netlink_parms(): no params data found
[  213.735979][ T7262] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.743293][ T7262] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.754531][ T7262] bridge_slave_0: entered allmulticast mode
[  213.762617][ T7262] bridge_slave_0: entered promiscuous mode
[  213.777029][ T7262] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.784481][ T7262] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.791797][ T7262] bridge_slave_1: entered allmulticast mode
[  213.801791][ T7262] bridge_slave_1: entered promiscuous mode
[  213.894029][ T7262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.926075][ T7262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.351966][ T7262] team0: Port device team_slave_0 added
[  214.390642][ T7262] team0: Port device team_slave_1 added
[  214.866915][ T7262] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.884537][ T7262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.920728][ T6874] Bluetooth: hci0: command tx timeout
[  215.023739][ T7262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.093140][ T7262] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.114545][ T7262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.194563][ T7262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.490160][ T7262] hsr_slave_0: entered promiscuous mode
[  215.545204][ T7262] hsr_slave_1: entered promiscuous mode
[  215.565414][ T7262] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.573162][ T7262] Cannot create hsr debugfs directory
[  215.665789][ T7286] ubi0: attaching mtd0
[  215.712412][ T7286] ubi0: scanning is finished
[  216.010418][ T7286] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  216.033322][ T7286] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  216.072000][ T7286] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  216.079710][ T7286] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  216.099914][ T7286] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  216.107953][ T7286] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  216.116455][ T7286] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3180542384
[  216.128169][ T7286] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  216.138599][ T7287] ubi0: detaching mtd0
[  216.155161][ T7287] ubi0: mtd0 is detached
[  216.644134][ T7262] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  216.728975][ T7262] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  216.751643][ T7262] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  216.814148][ T7262] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  216.994674][ T6874] Bluetooth: hci0: command tx timeout
[  218.053482][ T7262] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.155463][ T7262] 8021q: adding VLAN 0 to HW filter on device team0
[  218.190713][ T7319] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  218.236202][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.243501][ T6877] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.337176][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.344328][ T6877] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.353546][ T7323] FAULT_INJECTION: forcing a failure.
[  218.353546][ T7323] name failslab, interval 1, probability 0, space 0, times 0
[  218.402968][ T7323] CPU: 1 UID: 0 PID: 7323 Comm: syz.2.223 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  218.403015][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  218.403033][ T7323] Call Trace:
[  218.403043][ T7323]  <TASK>
[  218.403054][ T7323]  dump_stack_lvl+0x16c/0x1f0
[  218.403105][ T7323]  should_fail_ex+0x512/0x640
[  218.403148][ T7323]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  218.403199][ T7323]  should_failslab+0xc2/0x120
[  218.403227][ T7323]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  218.403272][ T7323]  ? __pfx___debug_object_init+0x10/0x10
[  218.403307][ T7323]  ? __d_alloc+0x31/0xaa0
[  218.403360][ T7323]  __d_alloc+0x31/0xaa0
[  218.403412][ T7323]  d_alloc_pseudo+0x1c/0xc0
[  218.403448][ T7323]  alloc_file_pseudo+0xcf/0x230
[  218.403483][ T7323]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  218.403526][ T7323]  ? alloc_fd+0x471/0x7d0
[  218.403576][ T7323]  sock_alloc_file+0x50/0x210
[  218.403627][ T7323]  __sys_socket+0x1c0/0x260
[  218.403660][ T7323]  ? fput+0x70/0xf0
[  218.403688][ T7323]  ? __pfx___sys_socket+0x10/0x10
[  218.403721][ T7323]  ? ksys_write+0x1ac/0x250
[  218.403763][ T7323]  ? __pfx_ksys_write+0x10/0x10
[  218.403814][ T7323]  __x64_sys_socket+0x72/0xb0
[  218.403847][ T7323]  ? lockdep_hardirqs_on+0x7c/0x110
[  218.403891][ T7323]  do_syscall_64+0xcd/0x490
[  218.403937][ T7323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.403967][ T7323] RIP: 0033:0x7f3d8c18e929
[  218.403991][ T7323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.404020][ T7323] RSP: 002b:00007f3d8cfb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  218.404048][ T7323] RAX: ffffffffffffffda RBX: 00007f3d8c3b6080 RCX: 00007f3d8c18e929
[  218.404067][ T7323] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a
[  218.404085][ T7323] RBP: 00007f3d8cfb7090 R08: 0000000000000000 R09: 0000000000000000
[  218.404103][ T7323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.404121][ T7323] R13: 0000000000000000 R14: 00007f3d8c3b6080 R15: 00007ffdca13d228
[  218.404159][ T7323]  </TASK>
[  219.074744][ T6874] Bluetooth: hci0: command tx timeout
[  220.659127][ T7262] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.778329][ T7362] netlink: 342 bytes leftover after parsing attributes in process `syz.4.226'.
[  221.159730][ T6874] Bluetooth: hci0: command tx timeout
[  221.489972][ T7262] veth0_vlan: entered promiscuous mode
[  221.525649][ T7262] veth1_vlan: entered promiscuous mode
[  221.621085][ T7262] veth0_macvtap: entered promiscuous mode
[  221.645224][ T7262] veth1_macvtap: entered promiscuous mode
[  221.708240][ T7262] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.769479][ T7262] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.818304][ T7262] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.835258][ T7262] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.844106][ T7262] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.866220][ T7262] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.148634][ T7001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.176397][ T7001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.247098][ T6877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.255538][ T6877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.018201][ T7399] FAULT_INJECTION: forcing a failure.
[  223.018201][ T7399] name failslab, interval 1, probability 0, space 0, times 0
[  223.031138][ T7399] CPU: 1 UID: 0 PID: 7399 Comm: syz.3.230 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  223.031177][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  223.031196][ T7399] Call Trace:
[  223.031206][ T7399]  <TASK>
[  223.031217][ T7399]  dump_stack_lvl+0x16c/0x1f0
[  223.031269][ T7399]  should_fail_ex+0x512/0x640
[  223.031314][ T7399]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  223.031368][ T7399]  should_failslab+0xc2/0x120
[  223.031399][ T7399]  __kmalloc_cache_noprof+0x6a/0x3e0
[  223.031440][ T7399]  ? alloc_file_pseudo+0x1b3/0x230
[  223.031473][ T7399]  ? __io_uring_add_tctx_node+0x132/0x500
[  223.031511][ T7399]  __io_uring_add_tctx_node+0x132/0x500
[  223.031543][ T7399]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[  223.031580][ T7399]  ? __anon_inode_getfile+0x17c/0x280
[  223.031630][ T7399]  io_uring_setup+0x1579/0x2080
[  223.031676][ T7399]  ? __pfx_io_uring_setup+0x10/0x10
[  223.031714][ T7399]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  223.031790][ T7399]  ? __fget_files+0x20e/0x3c0
[  223.031845][ T7399]  ? ksys_write+0x1ac/0x250
[  223.031889][ T7399]  ? __pfx_ksys_write+0x10/0x10
[  223.031940][ T7399]  __x64_sys_io_uring_setup+0xc2/0x170
[  223.031981][ T7399]  do_syscall_64+0xcd/0x490
[  223.032032][ T7399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.032061][ T7399] RIP: 0033:0x7f2d2278e929
[  223.032087][ T7399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.032116][ T7399] RSP: 002b:00007f2d2351d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  223.032144][ T7399] RAX: ffffffffffffffda RBX: 00007f2d229b6240 RCX: 00007f2d2278e929
[  223.032165][ T7399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004001
[  223.032183][ T7399] RBP: 00007f2d2351d090 R08: 0000000000000000 R09: 0000000000000000
[  223.032201][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  223.032219][ T7399] R13: 0000000000000000 R14: 00007f2d229b6240 R15: 00007ffe14ac4e08
[  223.032259][ T7399]  </TASK>
[  223.236070][    C1] vkms_vblank_simulate: vblank timer overrun
[  223.290824][ T7384] FAULT_INJECTION: forcing a failure.
[  223.290824][ T7384] name failslab, interval 1, probability 0, space 0, times 0
[  223.305201][ T7384] CPU: 1 UID: 0 PID: 7384 Comm: syz.4.229 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  223.305242][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  223.305257][ T7384] Call Trace:
[  223.305264][ T7384]  <TASK>
[  223.305273][ T7384]  dump_stack_lvl+0x16c/0x1f0
[  223.305320][ T7384]  should_fail_ex+0x512/0x640
[  223.305365][ T7384]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  223.305404][ T7384]  should_failslab+0xc2/0x120
[  223.305425][ T7384]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  223.305461][ T7384]  ? ptlock_alloc+0x1f/0x70
[  223.305495][ T7384]  ptlock_alloc+0x1f/0x70
[  223.305523][ T7384]  pte_alloc_one+0x82/0x3a0
[  223.305544][ T7384]  copy_huge_pmd+0x18d/0x2fd0
[  223.305582][ T7384]  ? __pfx_copy_huge_pmd+0x10/0x10
[  223.305610][ T7384]  ? __pfx___might_resched+0x10/0x10
[  223.305635][ T7384]  ? copy_page_range+0x13f0/0x5740
[  223.305668][ T7384]  copy_page_range+0xe47/0x5740
[  223.305708][ T7384]  ? __lock_acquire+0x622/0x1c90
[  223.305771][ T7384]  ? __pfx_copy_page_range+0x10/0x10
[  223.305800][ T7384]  ? mas_store+0x7a9/0x1160
[  223.305822][ T7384]  ? find_held_lock+0x2b/0x80
[  223.305846][ T7384]  ? __vma_enter_locked+0x163/0x3f0
[  223.305889][ T7384]  dup_mmap+0xe88/0x21d0
[  223.305925][ T7384]  ? __pfx_dup_mmap+0x10/0x10
[  223.305970][ T7384]  copy_process+0x4081/0x7650
[  223.305998][ T7384]  ? __pfx___futex_wait+0x10/0x10
[  223.306040][ T7384]  ? __pfx_copy_process+0x10/0x10
[  223.306068][ T7384]  ? find_held_lock+0x2b/0x80
[  223.306101][ T7384]  kernel_clone+0xfc/0x960
[  223.306131][ T7384]  ? __pfx_kernel_clone+0x10/0x10
[  223.306174][ T7384]  __do_sys_clone+0xce/0x120
[  223.306202][ T7384]  ? __pfx___do_sys_clone+0x10/0x10
[  223.306243][ T7384]  ? xfd_validate_state+0x61/0x180
[  223.306282][ T7384]  do_syscall_64+0xcd/0x490
[  223.306340][ T7384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.306363][ T7384] RIP: 0033:0x7f68c2b8e929
[  223.306381][ T7384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.306403][ T7384] RSP: 002b:00007f68c39b6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  223.306423][ T7384] RAX: ffffffffffffffda RBX: 00007f68c2db6080 RCX: 00007f68c2b8e929
[  223.306438][ T7384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  223.306451][ T7384] RBP: 00007f68c2c10b39 R08: 0000000000000000 R09: 0000000000000000
[  223.306464][ T7384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  223.306477][ T7384] R13: 0000000000000000 R14: 00007f68c2db6080 R15: 00007ffc275e1aa8
[  223.306505][ T7384]  </TASK>
[  225.208744][ T7420] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.410199][ T7420] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  226.416336][ T7435] netlink: 342 bytes leftover after parsing attributes in process `syz.5.235'.
[  227.242138][ T7421] Bluetooth: hci1: command 0x0406 tx timeout
[  227.250045][ T6869] Bluetooth: hci3: command 0x0406 tx timeout
[  229.337500][ T7473] syz.5.243 (7473) used obsolete PPPIOCDETACH ioctl
[  231.182487][ T7497] FAULT_INJECTION: forcing a failure.
[  231.182487][ T7497] name failslab, interval 1, probability 0, space 0, times 0
[  231.204630][ T7497] CPU: 1 UID: 0 PID: 7497 Comm: syz.3.248 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  231.204674][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  231.204693][ T7497] Call Trace:
[  231.204703][ T7497]  <TASK>
[  231.204716][ T7497]  dump_stack_lvl+0x16c/0x1f0
[  231.204769][ T7497]  should_fail_ex+0x512/0x640
[  231.204813][ T7497]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  231.204853][ T7497]  should_failslab+0xc2/0x120
[  231.204876][ T7497]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  231.204913][ T7497]  ? ptlock_alloc+0x1f/0x70
[  231.204947][ T7497]  ptlock_alloc+0x1f/0x70
[  231.204977][ T7497]  pte_alloc_one+0x82/0x3a0
[  231.204999][ T7497]  copy_huge_pmd+0x18d/0x2fd0
[  231.205038][ T7497]  ? __pfx_copy_huge_pmd+0x10/0x10
[  231.205103][ T7497]  ? __pfx___might_resched+0x10/0x10
[  231.205128][ T7497]  ? copy_page_range+0x13f0/0x5740
[  231.205161][ T7497]  copy_page_range+0xe47/0x5740
[  231.205202][ T7497]  ? __lock_acquire+0x622/0x1c90
[  231.205258][ T7497]  ? __pfx_copy_page_range+0x10/0x10
[  231.205296][ T7497]  ? mas_store+0x7a9/0x1160
[  231.205319][ T7497]  ? find_held_lock+0x2b/0x80
[  231.205344][ T7497]  ? __vma_enter_locked+0x163/0x3f0
[  231.205391][ T7497]  dup_mmap+0xe88/0x21d0
[  231.205429][ T7497]  ? __pfx_dup_mmap+0x10/0x10
[  231.205481][ T7497]  copy_process+0x4081/0x7650
[  231.205511][ T7497]  ? __pfx___futex_wait+0x10/0x10
[  231.205555][ T7497]  ? __pfx_copy_process+0x10/0x10
[  231.205585][ T7497]  ? find_held_lock+0x2b/0x80
[  231.205620][ T7497]  kernel_clone+0xfc/0x960
[  231.205653][ T7497]  ? __pfx_kernel_clone+0x10/0x10
[  231.205698][ T7497]  __do_sys_clone+0xce/0x120
[  231.205728][ T7497]  ? __pfx___do_sys_clone+0x10/0x10
[  231.205790][ T7497]  ? xfd_validate_state+0x61/0x180
[  231.205832][ T7497]  do_syscall_64+0xcd/0x490
[  231.205871][ T7497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.205894][ T7497] RIP: 0033:0x7f2d2278e929
[  231.205913][ T7497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.205935][ T7497] RSP: 002b:00007f2d2351cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  231.205956][ T7497] RAX: ffffffffffffffda RBX: 00007f2d229b6240 RCX: 00007f2d2278e929
[  231.205971][ T7497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  231.205985][ T7497] RBP: 00007f2d22810b39 R08: 0000000000000000 R09: 0000000000000000
[  231.205999][ T7497] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  231.206012][ T7497] R13: 0000000000000000 R14: 00007f2d229b6240 R15: 00007ffe14ac4e08
[  231.206041][ T7497]  </TASK>
[  231.503059][ T7498] netlink: 342 bytes leftover after parsing attributes in process `syz.5.249'.
[  236.005517][ T7113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  236.024521][ T7113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  236.053798][ T7113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  236.127706][ T7113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  236.136479][ T7113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  237.551918][ T7535] chnl_net:caif_netlink_parms(): no params data found
[  237.941609][ T7535] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.955379][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.965116][ T7535] bridge_slave_0: entered allmulticast mode
[  237.972597][ T7535] bridge_slave_0: entered promiscuous mode
[  237.982432][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.990018][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.997571][ T7535] bridge_slave_1: entered allmulticast mode
[  238.006165][ T7535] bridge_slave_1: entered promiscuous mode
[  238.081006][ T7535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.099829][ T7535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.195067][ T7113] Bluetooth: hci4: command tx timeout
[  238.212327][ T7535] team0: Port device team_slave_0 added
[  238.223671][ T7535] team0: Port device team_slave_1 added
[  238.492206][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.525959][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.607123][ T7535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.761228][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.768636][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.799592][ T7535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.809251][ T7575] ubi0: attaching mtd0
[  238.816393][ T7575] ubi0: scanning is finished
[  238.954543][ T7575] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  239.000365][ T7575] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  239.018057][ T7575] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  239.026319][ T7575] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  239.036480][ T7575] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  239.043325][ T7575] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  239.056832][ T7575] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3180542384
[  239.077621][ T7575] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  239.096638][ T7576] ubi0: detaching mtd0
[  239.234665][ T7576] ubi0: mtd0 is detached
[  239.652172][ T7535] hsr_slave_0: entered promiscuous mode
[  239.691239][ T7535] hsr_slave_1: entered promiscuous mode
[  239.736282][ T7535] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  239.764557][ T7535] Cannot create hsr debugfs directory
[  240.110155][ T7594] FAULT_INJECTION: forcing a failure.
[  240.110155][ T7594] name failslab, interval 1, probability 0, space 0, times 0
[  240.124097][ T7594] CPU: 1 UID: 0 PID: 7594 Comm: syz.3.267 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  240.124138][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  240.124156][ T7594] Call Trace:
[  240.124166][ T7594]  <TASK>
[  240.124177][ T7594]  dump_stack_lvl+0x16c/0x1f0
[  240.124230][ T7594]  should_fail_ex+0x512/0x640
[  240.124280][ T7594]  should_failslab+0xc2/0x120
[  240.124311][ T7594]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  240.124362][ T7594]  ? skb_clone+0x190/0x3f0
[  240.124420][ T7594]  skb_clone+0x190/0x3f0
[  240.124469][ T7594]  netlink_deliver_tap+0xabd/0xd30
[  240.124528][ T7594]  netlink_dump+0x85e/0xd00
[  240.124561][ T7594]  ? __pfx_netlink_dump+0x10/0x10
[  240.124586][ T7594]  ? __pfx___mutex_lock+0x10/0x10
[  240.124660][ T7594]  __netlink_dump_start+0x6d6/0x990
[  240.124698][ T7594]  smc_diag_handler_dump+0x1f9/0x240
[  240.124736][ T7594]  ? __pfx_smc_diag_handler_dump+0x10/0x10
[  240.124767][ T7594]  ? __pfx_smc_diag_dump+0x10/0x10
[  240.124799][ T7594]  ? sock_diag_lock_handler+0x10f/0x2e0
[  240.124851][ T7594]  sock_diag_rcv_msg+0x435/0x790
[  240.124897][ T7594]  netlink_rcv_skb+0x158/0x420
[  240.124928][ T7594]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  240.124972][ T7594]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  240.125019][ T7594]  ? netlink_deliver_tap+0x1ae/0xd30
[  240.125078][ T7594]  netlink_unicast+0x58a/0x850
[  240.125116][ T7594]  ? __pfx_netlink_unicast+0x10/0x10
[  240.125161][ T7594]  netlink_sendmsg+0x8d1/0xdd0
[  240.125199][ T7594]  ? __pfx_netlink_sendmsg+0x10/0x10
[  240.125247][ T7594]  ____sys_sendmsg+0xa98/0xc70
[  240.125282][ T7594]  ? copy_msghdr_from_user+0x10a/0x160
[  240.125326][ T7594]  ? __pfx_____sys_sendmsg+0x10/0x10
[  240.125380][ T7594]  ___sys_sendmsg+0x134/0x1d0
[  240.125429][ T7594]  ? __pfx____sys_sendmsg+0x10/0x10
[  240.125472][ T7594]  ? __lock_acquire+0x622/0x1c90
[  240.125567][ T7594]  __sys_sendmsg+0x16d/0x220
[  240.125615][ T7594]  ? __pfx___sys_sendmsg+0x10/0x10
[  240.125661][ T7594]  ? sched_clock_cpu+0x6c/0x530
[  240.125717][ T7594]  ? syscall_user_dispatch+0x78/0x140
[  240.125760][ T7594]  do_syscall_64+0xcd/0x490
[  240.125809][ T7594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.125840][ T7594] RIP: 0033:0x7f2d2278e929
[  240.125862][ T7594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.125886][ T7594] RSP: 002b:00007f2d2353e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  240.125909][ T7594] RAX: ffffffffffffffda RBX: 00007f2d229b6160 RCX: 00007f2d2278e929
[  240.125926][ T7594] RDX: 000000000400c000 RSI: 0000200000000140 RDI: 000000000000000a
[  240.125942][ T7594] RBP: 00007f2d2353e090 R08: 0000000000000000 R09: 0000000000000000
[  240.125957][ T7594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  240.125971][ T7594] R13: 0000000000000000 R14: 00007f2d229b6160 R15: 00007ffe14ac4e08
[  240.126004][ T7594]  </TASK>
[  240.627870][ T7113] Bluetooth: hci4: command tx timeout
[  240.993526][ T7535] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  241.002950][ T7600] netlink: 342 bytes leftover after parsing attributes in process `syz.4.268'.
[  241.122006][ T7535] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  241.135384][ T7535] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  241.197952][ T7535] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  241.434026][ T7535] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.469198][ T7535] 8021q: adding VLAN 0 to HW filter on device team0
[  241.489891][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.497079][ T7001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.527705][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.534906][ T7001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.893846][ T7535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.462235][ T7535] veth0_vlan: entered promiscuous mode
[  242.482494][ T7535] veth1_vlan: entered promiscuous mode
[  242.549278][ T7535] veth0_macvtap: entered promiscuous mode
[  242.561665][ T7535] veth1_macvtap: entered promiscuous mode
[  242.593921][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.622938][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.675103][ T7535] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.683957][ T7535] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.704068][ T7113] Bluetooth: hci4: command tx timeout
[  242.732596][ T7535] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.752428][ T7535] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.079404][ T6916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.114566][ T6916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.530867][ T6872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.583031][ T6872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.936486][ T7632] netlink: 342 bytes leftover after parsing attributes in process `syz.4.272'.
[  244.755714][ T7113] Bluetooth: hci4: command tx timeout
[  245.504191][ T7666] FAULT_INJECTION: forcing a failure.
[  245.504191][ T7666] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  245.624580][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.3.276 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  245.624621][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  245.624638][ T7666] Call Trace:
[  245.624648][ T7666]  <TASK>
[  245.624665][ T7666]  dump_stack_lvl+0x16c/0x1f0
[  245.624709][ T7666]  should_fail_ex+0x512/0x640
[  245.624747][ T7666]  _copy_from_user+0x2e/0xd0
[  245.624783][ T7666]  kstrtouint_from_user+0xd6/0x1d0
[  245.624810][ T7666]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  245.624836][ T7666]  ? __lock_acquire+0xb8a/0x1c90
[  245.624879][ T7666]  proc_fail_nth_write+0x83/0x250
[  245.624907][ T7666]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  245.624941][ T7666]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  245.624966][ T7666]  vfs_write+0x29d/0x1150
[  245.625017][ T7666]  ? __pfx___mutex_lock+0x10/0x10
[  245.625051][ T7666]  ? __pfx_vfs_write+0x10/0x10
[  245.625090][ T7666]  ? __fget_files+0x20e/0x3c0
[  245.625129][ T7666]  ksys_write+0x12a/0x250
[  245.625160][ T7666]  ? __pfx_ksys_write+0x10/0x10
[  245.625200][ T7666]  do_syscall_64+0xcd/0x490
[  245.625235][ T7666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.625258][ T7666] RIP: 0033:0x7f2d2278d3df
[  245.625275][ T7666] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  245.625296][ T7666] RSP: 002b:00007f2d2355f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  245.625316][ T7666] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2d2278d3df
[  245.625330][ T7666] RDX: 0000000000000001 RSI: 00007f2d2355f0a0 RDI: 0000000000000003
[  245.625343][ T7666] RBP: 00007f2d2355f090 R08: 0000000000000000 R09: 0000000000000000
[  245.625356][ T7666] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  245.625368][ T7666] R13: 0000000000000000 R14: 00007f2d229b6080 R15: 00007ffe14ac4e08
[  245.625396][ T7666]  </TASK>
[  246.485043][ T7674] netlink: 342 bytes leftover after parsing attributes in process `syz.6.277'.
[  247.526632][ T7682] FAULT_INJECTION: forcing a failure.
[  247.526632][ T7682] name failslab, interval 1, probability 0, space 0, times 0
[  247.557732][ T7697] netlink: 342 bytes leftover after parsing attributes in process `syz.6.282'.
[  247.602834][ T7682] CPU: 1 UID: 0 PID: 7682 Comm: syz.3.279 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  247.602883][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  247.602903][ T7682] Call Trace:
[  247.602914][ T7682]  <TASK>
[  247.602927][ T7682]  dump_stack_lvl+0x16c/0x1f0
[  247.602986][ T7682]  should_fail_ex+0x512/0x640
[  247.603033][ T7682]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  247.603089][ T7682]  should_failslab+0xc2/0x120
[  247.603138][ T7682]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  247.603186][ T7682]  ? trace_cap_capable+0x18d/0x200
[  247.603217][ T7682]  ? vm_area_dup+0x27/0x8d0
[  247.603266][ T7682]  vm_area_dup+0x27/0x8d0
[  247.603314][ T7682]  dup_mmap+0x877/0x21d0
[  247.603370][ T7682]  ? __pfx_dup_mmap+0x10/0x10
[  247.603444][ T7682]  copy_process+0x4081/0x7650
[  247.603488][ T7682]  ? __pfx___futex_wait+0x10/0x10
[  247.603553][ T7682]  ? __pfx_copy_process+0x10/0x10
[  247.603596][ T7682]  ? find_held_lock+0x2b/0x80
[  247.603648][ T7682]  kernel_clone+0xfc/0x960
[  247.603694][ T7682]  ? __pfx_kernel_clone+0x10/0x10
[  247.603761][ T7682]  __do_sys_clone+0xce/0x120
[  247.603811][ T7682]  ? __pfx___do_sys_clone+0x10/0x10
[  247.603875][ T7682]  ? xfd_validate_state+0x61/0x180
[  247.603936][ T7682]  do_syscall_64+0xcd/0x490
[  247.603989][ T7682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.604022][ T7682] RIP: 0033:0x7f2d2278e929
[  247.604046][ T7682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.604076][ T7682] RSP: 002b:00007f2d2355efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  247.604106][ T7682] RAX: ffffffffffffffda RBX: 00007f2d229b6080 RCX: 00007f2d2278e929
[  247.604127][ T7682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  247.604147][ T7682] RBP: 00007f2d22810b39 R08: 0000000000000000 R09: 0000000000000000
[  247.604166][ T7682] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  247.604186][ T7682] R13: 0000000000000000 R14: 00007f2d229b6080 R15: 00007ffe14ac4e08
[  247.604228][ T7682]  </TASK>
[  248.516785][ T7701] synth uevent: /devices/platform/vicodec.0/video4linux/video2: unknown uevent action string
[  248.544683][ T7701] video4linux video2: uevent: failed to send synthetic uevent: -22
[  248.695607][ T7701] synth uevent: /devices/platform/vicodec.0/video4linux/video2: unknown uevent action string
[  248.714703][ T7701] video4linux video2: uevent: failed to send synthetic uevent: -22
[  250.835407][ T7731] FAULT_INJECTION: forcing a failure.
[  250.835407][ T7731] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  250.870427][ T7731] CPU: 1 UID: 0 PID: 7731 Comm: syz.3.289 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  250.870473][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  250.870492][ T7731] Call Trace:
[  250.870503][ T7731]  <TASK>
[  250.870515][ T7731]  dump_stack_lvl+0x16c/0x1f0
[  250.870571][ T7731]  should_fail_ex+0x512/0x640
[  250.870625][ T7731]  should_fail_alloc_page+0xe7/0x130
[  250.870662][ T7731]  prepare_alloc_pages+0x3c2/0x610
[  250.870708][ T7731]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  250.870770][ T7731]  ? __lock_acquire+0x622/0x1c90
[  250.870823][ T7731]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  250.870892][ T7731]  ? is_bpf_text_address+0x8a/0x1a0
[  250.870937][ T7731]  ? bpf_ksym_find+0x124/0x1c0
[  250.870973][ T7731]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  250.871014][ T7731]  ? is_bpf_text_address+0x94/0x1a0
[  250.871057][ T7731]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  250.871111][ T7731]  ? policy_nodemask+0xea/0x4e0
[  250.871145][ T7731]  alloc_pages_mpol+0x1fb/0x550
[  250.871179][ T7731]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  250.871222][ T7731]  alloc_pages_noprof+0x131/0x390
[  250.871256][ T7731]  __pud_alloc+0x3b/0x750
[  250.871317][ T7731]  copy_page_range+0x23b6/0x5740
[  250.871363][ T7731]  ? dup_mmap+0x152e/0x21d0
[  250.871400][ T7731]  ? copy_process+0x4081/0x7650
[  250.871448][ T7731]  ? kernel_clone+0xfc/0x960
[  250.871487][ T7731]  ? __do_sys_clone+0xce/0x120
[  250.871534][ T7731]  ? __lock_acquire+0x622/0x1c90
[  250.871613][ T7731]  ? __pfx_copy_page_range+0x10/0x10
[  250.871658][ T7731]  ? mas_store+0x7a9/0x1160
[  250.871691][ T7731]  ? find_held_lock+0x2b/0x80
[  250.871726][ T7731]  ? __pfx_mas_store+0x10/0x10
[  250.871755][ T7731]  ? __vma_enter_locked+0x163/0x3f0
[  250.871822][ T7731]  dup_mmap+0xe88/0x21d0
[  250.871878][ T7731]  ? __pfx_dup_mmap+0x10/0x10
[  250.871947][ T7731]  copy_process+0x4081/0x7650
[  250.871988][ T7731]  ? preempt_schedule_thunk+0x16/0x30
[  250.872048][ T7731]  ? __pfx_copy_process+0x10/0x10
[  250.872091][ T7731]  ? find_held_lock+0x2b/0x80
[  250.872131][ T7731]  ? wake_up_q+0xb0/0x160
[  250.872160][ T7731]  ? do_raw_spin_unlock+0x172/0x230
[  250.872197][ T7731]  kernel_clone+0xfc/0x960
[  250.872240][ T7731]  ? __pfx_futex_wake+0x10/0x10
[  250.872286][ T7731]  ? __pfx_kernel_clone+0x10/0x10
[  250.872354][ T7731]  __do_sys_clone+0xce/0x120
[  250.872398][ T7731]  ? __pfx___do_sys_clone+0x10/0x10
[  250.872470][ T7731]  ? xfd_validate_state+0x61/0x180
[  250.872530][ T7731]  do_syscall_64+0xcd/0x490
[  250.872584][ T7731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.872624][ T7731] RIP: 0033:0x7f2d2278e929
[  250.872651][ T7731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.872682][ T7731] RSP: 002b:00007f2d2351cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  250.872712][ T7731] RAX: ffffffffffffffda RBX: 00007f2d229b6240 RCX: 00007f2d2278e929
[  250.872733][ T7731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  250.872752][ T7731] RBP: 00007f2d22810b39 R08: 0000000000000000 R09: 0000000000000000
[  250.872772][ T7731] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  250.872791][ T7731] R13: 0000000000000000 R14: 00007f2d229b6240 R15: 00007ffe14ac4e08
[  250.872851][ T7731]  </TASK>
[  252.411227][ T7735] FAULT_INJECTION: forcing a failure.
[  252.411227][ T7735] name failslab, interval 1, probability 0, space 0, times 0
[  252.424178][ T7735] CPU: 0 UID: 0 PID: 7735 Comm: syz.3.290 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  252.424238][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  252.424257][ T7735] Call Trace:
[  252.424267][ T7735]  <TASK>
[  252.424280][ T7735]  dump_stack_lvl+0x16c/0x1f0
[  252.424333][ T7735]  should_fail_ex+0x512/0x640
[  252.424380][ T7735]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  252.424435][ T7735]  should_failslab+0xc2/0x120
[  252.424466][ T7735]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  252.424515][ T7735]  ? ptlock_alloc+0x1f/0x70
[  252.424565][ T7735]  ptlock_alloc+0x1f/0x70
[  252.424621][ T7735]  pte_alloc_one+0x82/0x3a0
[  252.424654][ T7735]  copy_huge_pmd+0x18d/0x2fd0
[  252.424710][ T7735]  ? __pfx_copy_huge_pmd+0x10/0x10
[  252.424762][ T7735]  ? __pfx___might_resched+0x10/0x10
[  252.424795][ T7735]  ? copy_page_range+0x13f0/0x5740
[  252.424840][ T7735]  copy_page_range+0xe47/0x5740
[  252.424895][ T7735]  ? __lock_acquire+0x622/0x1c90
[  252.424969][ T7735]  ? __pfx_copy_page_range+0x10/0x10
[  252.425011][ T7735]  ? mas_store+0x7a9/0x1160
[  252.425042][ T7735]  ? find_held_lock+0x2b/0x80
[  252.425076][ T7735]  ? __vma_enter_locked+0x163/0x3f0
[  252.425140][ T7735]  dup_mmap+0xe88/0x21d0
[  252.425210][ T7735]  ? __pfx_dup_mmap+0x10/0x10
[  252.425279][ T7735]  copy_process+0x4081/0x7650
[  252.425322][ T7735]  ? __pfx___futex_wait+0x10/0x10
[  252.425387][ T7735]  ? __pfx_copy_process+0x10/0x10
[  252.425430][ T7735]  ? find_held_lock+0x2b/0x80
[  252.425482][ T7735]  kernel_clone+0xfc/0x960
[  252.425528][ T7735]  ? __pfx_kernel_clone+0x10/0x10
[  252.425602][ T7735]  __do_sys_clone+0xce/0x120
[  252.425646][ T7735]  ? __pfx___do_sys_clone+0x10/0x10
[  252.425709][ T7735]  ? xfd_validate_state+0x61/0x180
[  252.425770][ T7735]  do_syscall_64+0xcd/0x490
[  252.425823][ T7735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.425857][ T7735] RIP: 0033:0x7f2d2278e929
[  252.425883][ T7735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.425914][ T7735] RSP: 002b:00007f2d2355efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  252.425944][ T7735] RAX: ffffffffffffffda RBX: 00007f2d229b6080 RCX: 00007f2d2278e929
[  252.425965][ T7735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  252.425985][ T7735] RBP: 00007f2d22810b39 R08: 0000000000000000 R09: 0000000000000000
[  252.426004][ T7735] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  252.426023][ T7735] R13: 0000000000000000 R14: 00007f2d229b6080 R15: 00007ffe14ac4e08
[  252.426066][ T7735]  </TASK>
[  255.345281][ T7767] FAULT_INJECTION: forcing a failure.
[  255.345281][ T7767] name failslab, interval 1, probability 0, space 0, times 0
[  255.364548][ T7767] CPU: 1 UID: 0 PID: 7767 Comm: syz.6.295 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  255.364588][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  255.364606][ T7767] Call Trace:
[  255.364617][ T7767]  <TASK>
[  255.364628][ T7767]  dump_stack_lvl+0x16c/0x1f0
[  255.364678][ T7767]  should_fail_ex+0x512/0x640
[  255.364720][ T7767]  ? fs_reclaim_acquire+0xae/0x150
[  255.364759][ T7767]  ? tomoyo_encode2+0x100/0x3e0
[  255.364799][ T7767]  should_failslab+0xc2/0x120
[  255.364829][ T7767]  __kmalloc_noprof+0xd2/0x510
[  255.364872][ T7767]  ? d_absolute_path+0x136/0x1a0
[  255.364911][ T7767]  tomoyo_encode2+0x100/0x3e0
[  255.364958][ T7767]  tomoyo_encode+0x29/0x50
[  255.364998][ T7767]  tomoyo_realpath_from_path+0x18f/0x6e0
[  255.365060][ T7767]  tomoyo_get_exe+0x63/0xa0
[  255.365092][ T7767]  tomoyo_write_control+0x689/0x1430
[  255.365158][ T7767]  ? __pfx_tomoyo_write_control+0x10/0x10
[  255.365220][ T7767]  ? __pfx_tomoyo_write+0x10/0x10
[  255.365262][ T7767]  vfs_write+0x29d/0x1150
[  255.365312][ T7767]  ? __pfx___mutex_lock+0x10/0x10
[  255.365358][ T7767]  ? __pfx_vfs_write+0x10/0x10
[  255.365411][ T7767]  ? __fget_files+0x20e/0x3c0
[  255.365467][ T7767]  ksys_write+0x12a/0x250
[  255.365511][ T7767]  ? __pfx_ksys_write+0x10/0x10
[  255.365567][ T7767]  do_syscall_64+0xcd/0x490
[  255.365616][ T7767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.365648][ T7767] RIP: 0033:0x7fa87778e929
[  255.365672][ T7767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.365701][ T7767] RSP: 002b:00007fa8755f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  255.365729][ T7767] RAX: ffffffffffffffda RBX: 00007fa8779b6080 RCX: 00007fa87778e929
[  255.365749][ T7767] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003
[  255.365766][ T7767] RBP: 00007fa8755f6090 R08: 0000000000000000 R09: 0000000000000000
[  255.365784][ T7767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.365796][ T7767] R13: 0000000000000000 R14: 00007fa8779b6080 R15: 00007ffceae9e798
[  255.365824][ T7767]  </TASK>
[  255.666787][ T7767] ERROR: Out of memory at tomoyo_realpath_from_path.
[  255.767321][ T6874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  255.776036][ T6874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  255.783707][ T6874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  255.793407][ T6874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  255.801320][ T6874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  256.634141][ T7769] chnl_net:caif_netlink_parms(): no params data found
[  257.543748][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.579669][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.672363][ T7769] bridge_slave_0: entered allmulticast mode
[  257.765665][ T7769] bridge_slave_0: entered promiscuous mode
[  257.808490][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.846520][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.853822][ T7769] bridge_slave_1: entered allmulticast mode
[  257.874687][ T6874] Bluetooth: hci0: command tx timeout
[  257.924634][ T7769] bridge_slave_1: entered promiscuous mode
[  258.252959][ T7769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.311115][ T7769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.488904][ T7769] team0: Port device team_slave_0 added
[  258.526486][ T7769] team0: Port device team_slave_1 added
[  258.647651][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.674621][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.765977][ T7769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.780430][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.787702][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.814915][ T7769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.874009][ T7769] hsr_slave_0: entered promiscuous mode
[  258.881237][ T7769] hsr_slave_1: entered promiscuous mode
[  258.887839][ T7769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  258.895786][ T7769] Cannot create hsr debugfs directory
[  259.458196][ T7802] FAULT_INJECTION: forcing a failure.
[  259.458196][ T7802] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  259.471664][ T7802] CPU: 1 UID: 0 PID: 7802 Comm: syz.3.300 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  259.471706][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  259.471725][ T7802] Call Trace:
[  259.471736][ T7802]  <TASK>
[  259.471748][ T7802]  dump_stack_lvl+0x16c/0x1f0
[  259.471802][ T7802]  should_fail_ex+0x512/0x640
[  259.471855][ T7802]  should_fail_alloc_page+0xe7/0x130
[  259.471890][ T7802]  prepare_alloc_pages+0x3c2/0x610
[  259.471928][ T7802]  ? rcu_is_watching+0x12/0xc0
[  259.471965][ T7802]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  259.472020][ T7802]  ? rcu_is_watching+0x12/0xc0
[  259.472064][ T7802]  ? trace_mm_page_alloc+0x11f/0x1a0
[  259.472117][ T7802]  ? __alloc_frozen_pages_noprof+0x294/0x23f0
[  259.472164][ T7802]  ? lockdep_hardirqs_on+0x7c/0x110
[  259.472208][ T7802]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  259.472253][ T7802]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  259.472314][ T7802]  ? alloc_vmap_area+0x645/0x29c0
[  259.472346][ T7802]  ? __vmalloc_node_range_noprof+0x271/0x14b0
[  259.472387][ T7802]  ? __do_sys_listmount+0x1c2/0xec0
[  259.472424][ T7802]  ? do_syscall_64+0xcd/0x490
[  259.472469][ T7802]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.472518][ T7802]  alloc_pages_bulk_noprof+0x71c/0x1410
[  259.472565][ T7802]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  259.472637][ T7802]  ? policy_nodemask+0xea/0x4e0
[  259.472670][ T7802]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  259.472718][ T7802]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  259.472765][ T7802]  kasan_populate_vmalloc+0xf1/0x1f0
[  259.472816][ T7802]  alloc_vmap_area+0x959/0x29c0
[  259.472867][ T7802]  ? __pfx_alloc_vmap_area+0x10/0x10
[  259.472911][ T7802]  __get_vm_area_node+0x1ca/0x330
[  259.472956][ T7802]  __vmalloc_node_range_noprof+0x271/0x14b0
[  259.472996][ T7802]  ? __do_sys_listmount+0x1c2/0xec0
[  259.473044][ T7802]  ? __lock_acquire+0xb8a/0x1c90
[  259.473085][ T7802]  ? __do_sys_listmount+0x1c2/0xec0
[  259.473131][ T7802]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  259.473173][ T7802]  ? __alloc_pages_noprof+0xb/0x1b0
[  259.473216][ T7802]  ? ___kmalloc_large_node+0x84/0x1e0
[  259.473249][ T7802]  ? find_held_lock+0x2b/0x80
[  259.473288][ T7802]  __kvmalloc_node_noprof+0x30a/0x620
[  259.473330][ T7802]  ? __do_sys_listmount+0x1c2/0xec0
[  259.473370][ T7802]  ? __do_sys_listmount+0x1c2/0xec0
[  259.473414][ T7802]  ? __do_sys_listmount+0x1c2/0xec0
[  259.473450][ T7802]  __do_sys_listmount+0x1c2/0xec0
[  259.473495][ T7802]  ? __x64_sys_futex+0x1e0/0x4c0
[  259.473531][ T7802]  ? __x64_sys_futex+0x1e9/0x4c0
[  259.473569][ T7802]  ? __pfx___do_sys_listmount+0x10/0x10
[  259.473632][ T7802]  do_syscall_64+0xcd/0x490
[  259.473681][ T7802]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.473711][ T7802] RIP: 0033:0x7f2d2278e929
[  259.473735][ T7802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.473764][ T7802] RSP: 002b:00007f2d23580038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[  259.473792][ T7802] RAX: ffffffffffffffda RBX: 00007f2d229b5fa0 RCX: 00007f2d2278e929
[  259.473812][ T7802] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100
[  259.473830][ T7802] RBP: 00007f2d22810b39 R08: 0000000000000000 R09: 0000000000000000
[  259.473849][ T7802] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  259.473867][ T7802] R13: 0000000000000000 R14: 00007f2d229b5fa0 R15: 00007ffe14ac4e08
[  259.473905][ T7802]  </TASK>
[  259.831658][ T7802] syz.3.300: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  259.847548][ T7802] CPU: 0 UID: 0 PID: 7802 Comm: syz.3.300 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  259.847593][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  259.847612][ T7802] Call Trace:
[  259.847623][ T7802]  <TASK>
[  259.847635][ T7802]  dump_stack_lvl+0x16c/0x1f0
[  259.847689][ T7802]  warn_alloc+0x248/0x3a0
[  259.847740][ T7802]  ? __pfx_warn_alloc+0x10/0x10
[  259.847792][ T7802]  ? kfree+0x2b4/0x4d0
[  259.847847][ T7802]  ? __get_vm_area_node+0x208/0x330
[  259.847900][ T7802]  __vmalloc_node_range_noprof+0xb2d/0x14b0
[  259.847972][ T7802]  ? __lock_acquire+0xb8a/0x1c90
[  259.848017][ T7802]  ? __do_sys_listmount+0x1c2/0xec0
[  259.848069][ T7802]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  259.848115][ T7802]  ? __alloc_pages_noprof+0xb/0x1b0
[  259.848163][ T7802]  ? ___kmalloc_large_node+0x84/0x1e0
[  259.848199][ T7802]  ? find_held_lock+0x2b/0x80
[  259.848238][ T7802]  __kvmalloc_node_noprof+0x30a/0x620
[  259.848284][ T7802]  ? __do_sys_listmount+0x1c2/0xec0
[  259.848327][ T7802]  ? __do_sys_listmount+0x1c2/0xec0
[  259.848376][ T7802]  ? __do_sys_listmount+0x1c2/0xec0
[  259.848415][ T7802]  __do_sys_listmount+0x1c2/0xec0
[  259.848465][ T7802]  ? __x64_sys_futex+0x1e0/0x4c0
[  259.848504][ T7802]  ? __x64_sys_futex+0x1e9/0x4c0
[  259.848546][ T7802]  ? __pfx___do_sys_listmount+0x10/0x10
[  259.848610][ T7802]  do_syscall_64+0xcd/0x490
[  259.848662][ T7802]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.848696][ T7802] RIP: 0033:0x7f2d2278e929
[  259.848722][ T7802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.848752][ T7802] RSP: 002b:00007f2d23580038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[  259.848782][ T7802] RAX: ffffffffffffffda RBX: 00007f2d229b5fa0 RCX: 00007f2d2278e929
[  259.848804][ T7802] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100
[  259.848825][ T7802] RBP: 00007f2d22810b39 R08: 0000000000000000 R09: 0000000000000000
[  259.848852][ T7802] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  259.848872][ T7802] R13: 0000000000000000 R14: 00007f2d229b5fa0 R15: 00007ffe14ac4e08
[  259.848914][ T7802]  </TASK>
[  259.848925][ T7802] Mem-Info:
[  259.861622][ T7769] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  260.093684][ T7769] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  260.130217][ T6874] Bluetooth: hci0: command tx timeout
[  260.160398][ T7769] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  260.176241][ T7802] active_anon:17805 inactive_anon:0 isolated_anon:0
[  260.176241][ T7802]  active_file:15530 inactive_file:40400 isolated_file:0
[  260.176241][ T7802]  unevictable:768 dirty:285 writeback:0
[  260.176241][ T7802]  slab_reclaimable:11327 slab_unreclaimable:117527
[  260.176241][ T7802]  mapped:48411 shmem:7705 pagetables:1258
[  260.176241][ T7802]  sec_pagetables:0 bounce:0
[  260.176241][ T7802]  kernel_misc_reclaimable:0
[  260.176241][ T7802]  free:1250233 free_pcp:23268 free_cma:0
[  260.245081][ T7802] Node 0 active_anon:67020kB inactive_anon:0kB active_file:62120kB inactive_file:161396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:193644kB dirty:1136kB writeback:0kB shmem:25084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13580kB pagetables:4880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  260.257010][ T7769] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  260.292372][ T7802] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  260.366544][ T7802] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  260.445298][ T7802] lowmem_reserve[]: 0 2480 2482 2482 2482
[  260.451192][ T7802] Node 0 DMA32 free:1097944kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57372kB inactive_anon:0kB active_file:62120kB inactive_file:162072kB unevictable:1536kB writepending:1132kB present:3129332kB managed:2540344kB mlocked:0kB bounce:0kB free_pcp:73212kB local_pcp:26564kB free_cma:0kB
[  260.499575][ T7807] netlink: 342 bytes leftover after parsing attributes in process `syz.6.301'.
[  260.660528][ T7802] lowmem_reserve[]: 0 0 1 1 1
[  260.670734][ T7802] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  260.774643][ T7802] lowmem_reserve[]: 0 0 0 0 0
[  260.799351][ T7802] Node 1 Normal free:3898572kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20108kB local_pcp:6940kB free_cma:0kB
[  260.894511][ T7802] lowmem_reserve[]: 0 0 0 0 0
[  260.899403][ T7802] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  260.919912][ T7769] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.960520][ T7769] 8021q: adding VLAN 0 to HW filter on device team0
[  260.967896][ T7802] Node 0 DMA32: 193*4kB (UME) 475*8kB (ME) 163*16kB (UME) 28*32kB (UM) 120*64kB (UME) 12*128kB (UME) 85*256kB (UM) 60*512kB (UME) 30*1024kB (UME) 8*2048kB (M) 239*4096kB (M) = 1095820kB
[  260.999832][ T7802] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  261.001887][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  261.018488][ T7802] Node 1 Normal: 4*4kB (UME) 38*8kB (UME) 8*16kB (ME) 100*32kB (UME) 45*64kB (UME) 11*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3898624kB
[  261.020210][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  261.047803][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.055037][ T6916] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.084547][ T7802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  261.089317][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.101354][ T6916] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.108883][ T7802] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  261.124769][ T7802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  261.137561][ T7802] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  261.147208][ T7802] 57802 total pagecache pages
[  261.151929][ T7802] 0 pages in swap cache
[  261.156435][ T7802] Free swap  = 124984kB
[  261.162301][ T7802] Total swap = 124996kB
[  261.170958][ T7802] 2097051 pages RAM
[  261.177463][ T7802] 0 pages HighMem/MovableOnly
[  261.201007][ T7802] 429987 pages reserved
[  261.206372][ T7802] 0 pages cma reserved
[  261.664504][ T7769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.195023][ T6874] Bluetooth: hci0: command tx timeout
[  262.969723][ T7769] veth0_vlan: entered promiscuous mode
[  263.028740][ T7769] veth1_vlan: entered promiscuous mode
[  263.073592][ T7769] veth0_macvtap: entered promiscuous mode
[  263.086725][ T7769] veth1_macvtap: entered promiscuous mode
[  263.109524][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.136493][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.189408][ T7769] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.226602][ T7769] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.247272][ T7769] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.256370][ T7769] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.550497][ T6916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.630882][ T6916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.709748][ T7148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.718416][ T7148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.283592][ T6874] Bluetooth: hci0: command tx timeout
[  266.051975][ T7113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  266.063105][ T7113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  266.087040][ T7113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  266.118896][ T7113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  266.134530][ T7113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  267.274709][ T7871] chnl_net:caif_netlink_parms(): no params data found
[  267.639748][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.693217][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.715796][ T7871] bridge_slave_0: entered allmulticast mode
[  267.737078][ T7871] bridge_slave_0: entered promiscuous mode
[  267.749430][ T7871] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.769174][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.784694][ T7871] bridge_slave_1: entered allmulticast mode
[  267.821008][ T7871] bridge_slave_1: entered promiscuous mode
[  267.926857][ T7871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.946079][ T7871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.014202][ T7871] team0: Port device team_slave_0 added
[  268.098709][ T7871] team0: Port device team_slave_1 added
[  268.163458][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.176426][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.207716][ T7113] Bluetooth: hci5: command tx timeout
[  268.388254][ T7871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.436100][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.443086][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.535032][ T7871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.796482][ T7871] hsr_slave_0: entered promiscuous mode
[  268.846092][ T7871] hsr_slave_1: entered promiscuous mode
[  268.866156][ T7871] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  268.873792][ T7871] Cannot create hsr debugfs directory
[  270.161137][ T7871] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  270.233445][ T7871] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  270.269284][ T7871] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  270.284038][ T7113] Bluetooth: hci5: command tx timeout
[  270.472171][ T7871] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  270.976005][ T7871] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.120796][ T7871] 8021q: adding VLAN 0 to HW filter on device team0
[  271.151512][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.158795][ T6872] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.315123][ T7327] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.322321][ T7327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.483143][ T7871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  271.996522][ T7871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.357316][ T7113] Bluetooth: hci5: command tx timeout
[  273.208590][ T7871] veth0_vlan: entered promiscuous mode
[  273.231434][ T7871] veth1_vlan: entered promiscuous mode
[  273.358053][ T7871] veth0_macvtap: entered promiscuous mode
[  273.376692][ T7871] veth1_macvtap: entered promiscuous mode
[  273.430086][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.481105][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.527370][ T7871] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.575879][ T7871] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.605270][ T7871] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.624562][ T7871] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.072648][ T7964] FAULT_INJECTION: forcing a failure.
[  274.072648][ T7964] name failslab, interval 1, probability 0, space 0, times 0
[  274.155986][ T7964] CPU: 1 UID: 0 PID: 7964 Comm: syz.7.319 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  274.156033][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  274.156052][ T7964] Call Trace:
[  274.156063][ T7964]  <TASK>
[  274.156075][ T7964]  dump_stack_lvl+0x16c/0x1f0
[  274.156129][ T7964]  should_fail_ex+0x512/0x640
[  274.156174][ T7964]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  274.156225][ T7964]  should_failslab+0xc2/0x120
[  274.156255][ T7964]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  274.156301][ T7964]  ? ptlock_alloc+0x1f/0x70
[  274.156345][ T7964]  ptlock_alloc+0x1f/0x70
[  274.156383][ T7964]  pte_alloc_one+0x82/0x3a0
[  274.156412][ T7964]  copy_huge_pmd+0x18d/0x2fd0
[  274.156466][ T7964]  ? __pfx_copy_huge_pmd+0x10/0x10
[  274.156518][ T7964]  ? __pfx___might_resched+0x10/0x10
[  274.156553][ T7964]  ? copy_page_range+0x13f0/0x5740
[  274.156600][ T7964]  copy_page_range+0xe47/0x5740
[  274.156659][ T7964]  ? __lock_acquire+0x622/0x1c90
[  274.156729][ T7964]  ? __pfx_copy_page_range+0x10/0x10
[  274.156771][ T7964]  ? mas_store+0x7a9/0x1160
[  274.156803][ T7964]  ? find_held_lock+0x2b/0x80
[  274.156839][ T7964]  ? __vma_enter_locked+0x163/0x3f0
[  274.156903][ T7964]  dup_mmap+0xe88/0x21d0
[  274.156944][ T7964]  ? __pfx_dup_mmap+0x10/0x10
[  274.156992][ T7964]  copy_process+0x4081/0x7650
[  274.157023][ T7964]  ? __pfx___futex_wait+0x10/0x10
[  274.157069][ T7964]  ? __pfx_copy_process+0x10/0x10
[  274.157100][ T7964]  ? find_held_lock+0x2b/0x80
[  274.157136][ T7964]  kernel_clone+0xfc/0x960
[  274.157168][ T7964]  ? __pfx_kernel_clone+0x10/0x10
[  274.157217][ T7964]  __do_sys_clone+0xce/0x120
[  274.157247][ T7964]  ? __pfx___do_sys_clone+0x10/0x10
[  274.157294][ T7964]  ? xfd_validate_state+0x61/0x180
[  274.157336][ T7964]  do_syscall_64+0xcd/0x490
[  274.157374][ T7964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.157398][ T7964] RIP: 0033:0x7f79f8b8e929
[  274.157416][ T7964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.157439][ T7964] RSP: 002b:00007f79f998ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  274.157459][ T7964] RAX: ffffffffffffffda RBX: 00007f79f8db5fa0 RCX: 00007f79f8b8e929
[  274.157475][ T7964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  274.157488][ T7964] RBP: 00007f79f8c10b39 R08: 0000000000000000 R09: 0000000000000000
[  274.157509][ T7964] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  274.157523][ T7964] R13: 0000000000000000 R14: 00007f79f8db5fa0 R15: 00007ffebe73cb28
[  274.157553][ T7964]  </TASK>
[  274.459086][ T7113] Bluetooth: hci5: command tx timeout
[  274.571076][ T6916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.579046][ T6916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.673627][ T6916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.686393][ T6916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.747055][ T7972] Invalid ELF header magic: != ELF
[  276.237072][ T6874] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  276.245629][ T6874] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  276.284596][ T6874] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  276.321895][ T6874] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  276.342586][ T6874] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  277.124948][ T7996] ubi0: attaching mtd0
[  277.171498][ T7996] ubi0: scanning is finished
[  277.572442][ T7996] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  277.621146][ T7996] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  277.629679][ T7996] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  277.649269][ T7996] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  277.675557][ T7996] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  277.715861][ T7996] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  277.723923][ T7996] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3180542384
[  277.762009][ T7996] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  277.796514][ T7998] ubi0: detaching mtd0
[  277.836876][ T7985] chnl_net:caif_netlink_parms(): no params data found
[  277.857889][ T7998] ubi0: mtd0 is detached
[  278.435084][ T6874] Bluetooth: hci6: command tx timeout
[  278.650881][ T8020] syz.8.325 uses obsolete (PF_INET,SOCK_PACKET)
[  279.182937][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.216945][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.256233][ T7985] bridge_slave_0: entered allmulticast mode
[  279.264518][ T7985] bridge_slave_0: entered promiscuous mode
[  279.304290][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.322191][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.332322][ T7985] bridge_slave_1: entered allmulticast mode
[  279.341339][ T7985] bridge_slave_1: entered promiscuous mode
[  279.519941][ T7985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.688402][ T7985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.910233][ T7985] team0: Port device team_slave_0 added
[  279.998351][ T7985] team0: Port device team_slave_1 added
[  280.193779][ T7985] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.278539][ T7985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.351220][ T7985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.376204][ T7985] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.388163][ T7985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.414451][ T7985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.514701][ T6874] Bluetooth: hci6: command tx timeout
[  280.752517][ T7985] hsr_slave_0: entered promiscuous mode
[  280.777724][ T7985] hsr_slave_1: entered promiscuous mode
[  280.835861][ T7985] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.876453][ T7985] Cannot create hsr debugfs directory
[  280.915217][ T8036] netlink: 330 bytes leftover after parsing attributes in process `syz.7.330'.
[  282.415315][ T7985] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  282.457675][ T7985] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  282.595387][ T6874] Bluetooth: hci6: command tx timeout
[  282.606750][ T7985] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  282.793138][ T7985] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  282.820101][ T8059] netlink: 342 bytes leftover after parsing attributes in process `syz.8.334'.
[  283.127047][ T7985] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.149971][ T7985] 8021q: adding VLAN 0 to HW filter on device team0
[  283.217348][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.224598][ T6877] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.471534][ T7327] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.478734][ T7327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.681360][ T7985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  284.668236][ T7985] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.690859][ T6874] Bluetooth: hci6: command tx timeout
[  286.073057][ T7985] veth0_vlan: entered promiscuous mode
[  286.093862][ T7985] veth1_vlan: entered promiscuous mode
[  286.494990][ T7985] veth0_macvtap: entered promiscuous mode
[  286.502002][ T8110] netlink: 342 bytes leftover after parsing attributes in process `syz.8.339'.
[  286.526262][ T7985] veth1_macvtap: entered promiscuous mode
[  286.794847][ T7985] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.812956][ T7985] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.004308][ T7985] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.148360][ T7985] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.158294][ T7985] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.174590][ T7985] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.372237][ T6872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.426865][ T6872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.568307][ T6912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.591032][ T6912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.012963][ T8165] ubi0: attaching mtd0
[  291.057238][ T8165] ubi0: scanning is finished
[  291.360563][ T8165] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  291.368468][ T8165] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  291.393567][ T8165] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  291.464696][ T8165] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  291.515760][ T8165] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  291.544816][ T8165] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  291.564247][ T8165] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3180542384
[  291.575325][ T8165] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  291.620768][ T8166] ubi0: detaching mtd0
[  291.642608][ T8166] ubi0: mtd0 is detached
[  292.141314][ T8181] random: crng reseeded on system resumption
[  292.899798][ T8193] netlink: 342 bytes leftover after parsing attributes in process `syz.3.354'.
[  293.296166][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.9.357'.
[  295.310472][ T8231] ubi0: attaching mtd0
[  295.341834][ T8231] ubi0: scanning is finished
[  295.638012][ T8231] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  295.659158][ T8231] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  295.667531][ T8231] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  295.676661][ T8231] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  295.782552][ T8231] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  295.807242][ T8231] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  295.827479][ T8231] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3180542384
[  295.837852][ T8231] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  295.857620][ T8233] ubi0: detaching mtd0
[  295.858918][ T8244] ubi0: background thread "ubi_bgt0d" started, PID 8244
[  295.920607][ T8233] ubi0: mtd0 is detached
[  310.889520][ T8456] netlink: 342 bytes leftover after parsing attributes in process `syz.9.407'.
[  311.809271][ T8464] FAULT_INJECTION: forcing a failure.
[  311.809271][ T8464] name failslab, interval 1, probability 0, space 0, times 0
[  311.884652][ T8464] CPU: 1 UID: 0 PID: 8464 Comm: syz.7.409 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  311.884698][ T8464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  311.884733][ T8464] Call Trace:
[  311.884744][ T8464]  <TASK>
[  311.884756][ T8464]  dump_stack_lvl+0x16c/0x1f0
[  311.884810][ T8464]  should_fail_ex+0x512/0x640
[  311.884858][ T8464]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  311.884914][ T8464]  should_failslab+0xc2/0x120
[  311.884946][ T8464]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  311.885004][ T8464]  ? ptlock_alloc+0x1f/0x70
[  311.885054][ T8464]  ptlock_alloc+0x1f/0x70
[  311.885094][ T8464]  pte_alloc_one+0x82/0x3a0
[  311.885126][ T8464]  copy_huge_pmd+0x18d/0x2fd0
[  311.885182][ T8464]  ? __pfx_copy_huge_pmd+0x10/0x10
[  311.885222][ T8464]  ? do_raw_spin_unlock+0x172/0x230
[  311.885253][ T8464]  ? _raw_spin_unlock+0x28/0x50
[  311.885303][ T8464]  copy_page_range+0xe47/0x5740
[  311.885349][ T8464]  ? dup_mmap+0x152e/0x21d0
[  311.885387][ T8464]  ? copy_process+0x4081/0x7650
[  311.885436][ T8464]  ? __lock_acquire+0x622/0x1c90
[  311.885513][ T8464]  ? __pfx_copy_page_range+0x10/0x10
[  311.885572][ T8464]  ? mas_store+0x7a9/0x1160
[  311.885604][ T8464]  ? find_held_lock+0x2b/0x80
[  311.885640][ T8464]  ? __pfx_mas_store+0x10/0x10
[  311.885668][ T8464]  ? __vma_enter_locked+0x163/0x3f0
[  311.885738][ T8464]  dup_mmap+0xe88/0x21d0
[  311.885795][ T8464]  ? __pfx_dup_mmap+0x10/0x10
[  311.885865][ T8464]  copy_process+0x4081/0x7650
[  311.885908][ T8464]  ? __pfx___futex_wait+0x10/0x10
[  311.885979][ T8464]  ? __pfx_copy_process+0x10/0x10
[  311.886032][ T8464]  ? __futex_hash.constprop.0+0x1e9/0x440
[  311.886081][ T8464]  kernel_clone+0xfc/0x960
[  311.886126][ T8464]  ? __pfx_kernel_clone+0x10/0x10
[  311.886195][ T8464]  __do_sys_clone+0xce/0x120
[  311.886238][ T8464]  ? __pfx___do_sys_clone+0x10/0x10
[  311.886303][ T8464]  ? xfd_validate_state+0x61/0x180
[  311.886365][ T8464]  do_syscall_64+0xcd/0x490
[  311.886419][ T8464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.886453][ T8464] RIP: 0033:0x7f79f8b8e929
[  311.886480][ T8464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.886512][ T8464] RSP: 002b:00007f79f994dfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  311.886544][ T8464] RAX: ffffffffffffffda RBX: 00007f79f8db6160 RCX: 00007f79f8b8e929
[  311.886566][ T8464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  311.886586][ T8464] RBP: 00007f79f8c10b39 R08: 0000000000000000 R09: 0000000000000000
[  311.886607][ T8464] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  311.886626][ T8464] R13: 0000000000000000 R14: 00007f79f8db6160 R15: 00007ffebe73cb28
[  311.886670][ T8464]  </TASK>
[  313.798884][ T8490] netlink: 342 bytes leftover after parsing attributes in process `syz.9.414'.
[  314.047944][ T8489] netlink: 342 bytes leftover after parsing attributes in process `syz.3.412'.
[  315.286234][ T7113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  315.295775][ T7113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  315.304678][ T7113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  315.325688][ T7113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  315.335859][ T7113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  316.438306][ T8499] chnl_net:caif_netlink_parms(): no params data found
[  316.771590][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.802243][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.815662][ T8499] bridge_slave_0: entered allmulticast mode
[  316.841127][ T8499] bridge_slave_0: entered promiscuous mode
[  316.900358][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.927093][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.028110][ T8499] bridge_slave_1: entered allmulticast mode
[  317.064708][ T8499] bridge_slave_1: entered promiscuous mode
[  317.213289][ T8499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.250303][ T8499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.391624][ T8499] team0: Port device team_slave_0 added
[  317.406326][ T7113] Bluetooth: hci7: command tx timeout
[  317.536703][ T8499] team0: Port device team_slave_1 added
[  317.785063][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.792113][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.854639][ T8499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.868383][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.884785][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.913314][ T8499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.259093][ T8499] hsr_slave_0: entered promiscuous mode
[  318.312576][ T8499] hsr_slave_1: entered promiscuous mode
[  318.326426][ T8499] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  318.354653][ T8499] Cannot create hsr debugfs directory
[  319.425557][ T8499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.470702][ T8531] bridge0: port 3(hsr_slave_1) entered blocking state
[  319.478887][ T8531] bridge0: port 3(hsr_slave_1) entered disabled state
[  319.486358][ T7113] Bluetooth: hci7: command tx timeout
[  319.493700][ T8531] hsr_slave_1: entered allmulticast mode
[  319.520707][ T8531] hsr_slave_1: left allmulticast mode
[  319.622806][ T8499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.787994][ T8499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.886524][ T8499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.578769][ T8499] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  320.624895][ T8499] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  320.661922][ T8499] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  320.685610][ T8499] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  321.051452][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.127218][ T8499] 8021q: adding VLAN 0 to HW filter on device team0
[  321.160001][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.167190][ T7001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.269843][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.277043][ T7001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.559188][ T7113] Bluetooth: hci7: command tx timeout
[  321.994563][ T8499] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.158436][ T8499] veth0_vlan: entered promiscuous mode
[  322.237342][ T8499] veth1_vlan: entered promiscuous mode
[  322.364694][ T8499] veth0_macvtap: entered promiscuous mode
[  322.381228][ T8499] veth1_macvtap: entered promiscuous mode
[  322.490496][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  322.497196][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  322.632858][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.811094][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.002011][ T8499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.071701][ T8499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.130046][ T8499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.240138][ T8499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.635025][ T6874] Bluetooth: hci7: command tx timeout
[  324.139372][ T7327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.173870][ T7327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.276556][ T7327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.290978][ T7327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.522046][ T6874] Bluetooth: hci2: command 0x0406 tx timeout
[  329.745801][ T8651] ubi0: attaching mtd0
[  329.752288][ T8651] ubi0: scanning is finished
[  329.885623][ T6874] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  329.903888][ T6874] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  329.914669][ T6874] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  329.923574][ T6874] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  329.934427][ T6874] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  330.043661][ T8651] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  330.124061][ T8651] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  330.131797][ T8651] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  330.139061][ T8651] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  330.146608][ T8651] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  330.153810][ T8651] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  330.163618][ T8651] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3180542384
[  330.176752][ T8651] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  330.188848][ T8660] ubi0: background thread "ubi_bgt0d" started, PID 8660
[  330.275451][ T8653] ubi0: detaching mtd0
[  330.296766][ T8653] ubi0: mtd0 is detached
[  331.075862][ T8670] FAULT_INJECTION: forcing a failure.
[  331.075862][ T8670] name failslab, interval 1, probability 0, space 0, times 0
[  331.117986][ T8670] CPU: 1 UID: 0 PID: 8670 Comm: syz.0.442 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  331.118036][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  331.118054][ T8670] Call Trace:
[  331.118065][ T8670]  <TASK>
[  331.118078][ T8670]  dump_stack_lvl+0x16c/0x1f0
[  331.118129][ T8670]  should_fail_ex+0x512/0x640
[  331.118174][ T8670]  ? fs_reclaim_acquire+0xae/0x150
[  331.118216][ T8670]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  331.118260][ T8670]  should_failslab+0xc2/0x120
[  331.118292][ T8670]  __kmalloc_noprof+0xd2/0x510
[  331.118349][ T8670]  tomoyo_realpath_from_path+0xc2/0x6e0
[  331.118400][ T8670]  ? tomoyo_profile+0x47/0x60
[  331.118454][ T8670]  tomoyo_path_number_perm+0x245/0x580
[  331.118491][ T8670]  ? tomoyo_path_number_perm+0x237/0x580
[  331.118533][ T8670]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  331.118575][ T8670]  ? find_held_lock+0x2b/0x80
[  331.118646][ T8670]  ? find_held_lock+0x2b/0x80
[  331.118678][ T8670]  ? hook_file_ioctl_common+0x145/0x410
[  331.118723][ T8670]  ? __fget_files+0x20e/0x3c0
[  331.118774][ T8670]  security_file_ioctl+0x9b/0x240
[  331.118817][ T8670]  __x64_sys_ioctl+0xb7/0x210
[  331.118859][ T8670]  do_syscall_64+0xcd/0x490
[  331.118917][ T8670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.118947][ T8670] RIP: 0033:0x7f144b38e929
[  331.118972][ T8670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.119001][ T8670] RSP: 002b:00007f144c17e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  331.119031][ T8670] RAX: ffffffffffffffda RBX: 00007f144b5b5fa0 RCX: 00007f144b38e929
[  331.119052][ T8670] RDX: 0000000000000024 RSI: 0000000000005411 RDI: 0000000000000003
[  331.119070][ T8670] RBP: 00007f144c17e090 R08: 0000000000000000 R09: 0000000000000000
[  331.119090][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.119109][ T8670] R13: 0000000000000000 R14: 00007f144b5b5fa0 R15: 00007ffe68cd3288
[  331.119152][ T8670]  </TASK>
[  331.119196][ T8670] ERROR: Out of memory at tomoyo_realpath_from_path.
[  331.415351][ T8654] chnl_net:caif_netlink_parms(): no params data found
[  331.802512][ T8654] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.835970][ T8654] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.857010][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[  331.891870][ T8654] bridge_slave_0: entered allmulticast mode
[  331.921448][ T8654] bridge_slave_0: entered promiscuous mode
[  331.965780][ T8654] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.973087][ T8654] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.980697][ T8654] bridge_slave_1: entered allmulticast mode
[  331.989024][ T8654] bridge_slave_1: entered promiscuous mode
[  332.036094][ T7113] Bluetooth: hci8: command tx timeout
[  332.428184][ T8654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.487449][ T8654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.881447][ T8654] team0: Port device team_slave_0 added
[  332.957736][ T8654] team0: Port device team_slave_1 added
[  333.226960][ T8654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.275554][ T8654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.517256][ T8654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.538741][ T8654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.548212][ T8654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.605166][ T8654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.851928][ T8705] netlink: 'syz.3.447': attribute type 2 has an invalid length.
[  334.133441][ T7113] Bluetooth: hci8: command tx timeout
[  334.145916][ T8654] hsr_slave_0: entered promiscuous mode
[  334.225989][ T8654] hsr_slave_1: entered promiscuous mode
[  334.232682][ T8654] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  334.420266][ T8654] Cannot create hsr debugfs directory
[  335.769515][ T8654] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.863533][ T8654] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.944916][ T8654] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.025953][ T8654] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.194811][ T7113] Bluetooth: hci8: command tx timeout
[  336.733666][ T8654] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  336.789560][ T8654] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  336.883128][ T8654] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  337.067487][ T8654] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  337.087054][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'.
[  338.274646][ T7113] Bluetooth: hci8: command tx timeout
[  338.399922][ T8752] netlink: set zone limit has 8 unknown bytes
[  338.599225][ T8654] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.677613][ T8654] 8021q: adding VLAN 0 to HW filter on device team0
[  338.718783][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.726044][ T7515] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.776425][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.783692][ T6877] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.658773][ T8654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.858929][ T8654] veth0_vlan: entered promiscuous mode
[  339.900296][ T8654] veth1_vlan: entered promiscuous mode
[  340.041639][ T8654] veth0_macvtap: entered promiscuous mode
[  340.078530][ T8654] veth1_macvtap: entered promiscuous mode
[  340.126747][ T8654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  340.187868][ T8654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  340.228396][ T8654] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.275068][ T8654] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.283888][ T8654] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.404488][ T8654] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.704084][ T6877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.756157][ T6877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.823977][ T6877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.896119][ T6877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.274989][   T31] INFO: task kworker/u10:2:6876 blocked for more than 143 seconds.
[  342.284886][   T31]       Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0
[  342.293497][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  342.302320][   T31] task:kworker/u10:2   state:D stack:25672 pid:6876  tgid:6876  ppid:2      task_flags:0x4208060 flags:0x00004000
[  342.315224][   T31] Workqueue: netns cleanup_net
[  342.320108][   T31] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  342.323522][   T31]  <TASK>
[  342.333299][   T31]  __schedule+0x116a/0x5de0
[  342.354972][   T31]  ? __pfx___schedule+0x10/0x10
[  342.359954][   T31]  ? find_held_lock+0x2b/0x80
[  342.364785][   T31]  ? schedule+0x2d7/0x3a0
[  342.369205][   T31]  schedule+0xe7/0x3a0
[  342.373334][   T31]  schedule_timeout+0x257/0x290
[  342.404409][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  342.409919][   T31]  ? mark_held_locks+0x49/0x80
[  342.484459][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.493451][   T31]  __wait_for_common+0x2fc/0x4e0
[  342.564506][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  342.569997][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  342.639137][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.675762][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  342.681703][   T31]  __flush_workqueue+0x3e2/0x1230
[  342.744723][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  342.844534][   T31]  ? rxrpc_discard_prealloc+0xb6/0x9b0
[  342.850070][   T31]  ? rxrpc_release+0x568/0x670
[  342.874503][   T31]  ? rxrpc_release_calls_on_socket+0x18a/0x300
[  342.880785][   T31]  rxrpc_release+0x27a/0x670
[  342.885761][   T31]  sock_release+0x91/0x1d0
[  342.894851][   T31]  afs_close_socket+0x21b/0x3e0
[  342.909808][   T31]  ? afs_wait_for_servers+0xec/0x220
[  342.975336][   T31]  ? __pfx_afs_close_socket+0x10/0x10
[  342.980873][   T31]  ? __timer_delete_sync+0x108/0x1b0
[  342.986367][   T31]  ? __pfx_afs_net_exit+0x10/0x10
[  342.991463][   T31]  afs_net_exit+0x93/0x140
[  342.996304][   T31]  ops_undo_list+0x2eb/0xab0
[  343.014654][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  343.019886][   T31]  ? __local_bh_enable_ip+0xa4/0x120
[  343.025371][   T31]  cleanup_net+0x408/0x890
[  343.029845][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  343.034883][   T31]  ? rcu_is_watching+0x12/0xc0
[  343.044477][   T31]  process_one_work+0x9cf/0x1b70
[  343.049542][   T31]  ? __pfx_process_one_work+0x10/0x10
[  343.055054][   T31]  ? assign_work+0x1a0/0x250
[  343.059688][   T31]  worker_thread+0x6c8/0xf10
[  343.064325][   T31]  ? __pfx_worker_thread+0x10/0x10
[  343.095285][   T31]  kthread+0x3c2/0x780
[  343.099464][   T31]  ? __pfx_kthread+0x10/0x10
[  343.112360][   T31]  ? rcu_is_watching+0x12/0xc0
[  343.117606][   T31]  ? __pfx_kthread+0x10/0x10
[  343.122269][   T31]  ret_from_fork+0x5d7/0x6f0
[  343.135154][   T31]  ? __pfx_kthread+0x10/0x10
[  343.139934][   T31]  ret_from_fork_asm+0x1a/0x30
[  343.145319][   T31]  </TASK>
[  343.159993][   T31] INFO: task syz.0.162:6928 blocked for more than 144 seconds.
[  343.208637][   T31]       Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0
[  343.244408][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  343.253252][   T31] task:syz.0.162       state:D stack:24616 pid:6928  tgid:6926  ppid:5852   task_flags:0x400140 flags:0x00004006
[  343.304408][   T31] Call Trace:
[  343.334444][   T31]  <TASK>
[  343.337469][   T31]  __schedule+0x116a/0x5de0
[  343.342049][   T31]  ? __lock_acquire+0x622/0x1c90
[  343.364424][   T31]  ? __pfx___schedule+0x10/0x10
[  343.374446][   T31]  ? find_held_lock+0x2b/0x80
[  343.379203][   T31]  ? schedule+0x2d7/0x3a0
[  343.383602][   T31]  schedule+0xe7/0x3a0
[  343.424477][   T31]  schedule_timeout+0x257/0x290
[  343.429522][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  343.454644][   T31]  ? mark_held_locks+0x49/0x80
[  343.459532][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  343.485348][   T31]  __wait_for_common+0x2fc/0x4e0
[  343.490391][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  343.534437][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  343.540101][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  343.567955][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  343.573890][   T31]  __flush_workqueue+0x3e2/0x1230
[  343.604493][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  343.610166][   T31]  ? rxrpc_discard_prealloc+0xb6/0x9b0
[  343.642017][   T31]  ? rxrpc_release_calls_on_socket+0x18a/0x300
[  343.694473][   T31]  rxrpc_release+0x27a/0x670
[  343.699353][   T31]  sock_release+0x91/0x1d0
[  343.703821][   T31]  afs_open_socket+0x334/0x400
[  343.754933][   T31]  ? __pfx_afs_open_socket+0x10/0x10
[  343.760337][   T31]  ? proc_create_net_single_write+0x141/0x1b0
[  343.774460][   T31]  ? __pfx_proc_create_net_single_write+0x10/0x10
[  343.780989][   T31]  afs_net_init+0x825/0xb00
[  343.788359][   T31]  ? __pfx_afs_net_init+0x10/0x10
[  343.793459][   T31]  ops_init+0x1df/0x5f0
[  343.798748][   T31]  setup_net+0x1ff/0x510
[  343.803082][   T31]  ? lockdep_init_map_type+0x5c/0x280
[  343.808677][   T31]  ? __pfx_setup_net+0x10/0x10
[  343.813531][   T31]  ? debug_mutex_init+0x37/0x70
[  343.820455][   T31]  copy_net_ns+0x2a6/0x5f0
[  343.825275][   T31]  create_new_namespaces+0x3ea/0xa90
[  343.830633][   T31]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  343.836640][   T31]  ksys_unshare+0x45b/0xa40
[  343.841211][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  343.846947][   T31]  ? xfd_validate_state+0x61/0x180
[  343.852145][   T31]  __x64_sys_unshare+0x31/0x40
[  343.858077][   T31]  do_syscall_64+0xcd/0x490
[  343.862692][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.869182][   T31] RIP: 0033:0x7fb32118e929
[  343.873654][   T31] RSP: 002b:00007fb3220bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  343.894596][   T31] RAX: ffffffffffffffda RBX: 00007fb3213b5fa0 RCX: 00007fb32118e929
[  343.902741][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  343.924473][   T31] RBP: 00007fb321210b39 R08: 0000000000000000 R09: 0000000000000000
[  343.932712][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  343.957773][   T31] R13: 0000000000000000 R14: 00007fb3213b5fa0 R15: 00007ffe23a21ed8
[  343.974459][   T31]  </TASK>
[  343.977680][   T31] 
[  343.977680][   T31] Showing all locks held in the system:
[  343.994465][   T31] 1 lock held by khungtaskd/31:
[  343.999401][   T31]  #0: ffffffff8e5c4c40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  344.035831][   T31] 3 locks held by kworker/0:2/978:
[  344.041028][   T31]  #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  344.064800][   T31]  #1: ffffc90003a57d10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  344.084455][   T31]  #2: ffffffff8e5d0238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  344.104462][   T31] 2 locks held by getty/5610:
[  344.109293][   T31]  #0: ffff8880358520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  344.134411][   T31]  #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  344.164480][   T31] 3 locks held by kworker/u10:2/6876:
[  344.169949][   T31]  #0: ffff88801c6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  344.195206][   T31]  #1: ffffc9000425fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  344.214425][   T31]  #2: ffffffff9034e510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890
[  344.223889][   T31] 1 lock held by syz.0.162/6928:
[  344.244465][   T31]  #0: ffffffff9034e510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  344.254018][   T31] 1 lock held by syz.1.190/7094:
[  344.275533][   T31]  #0: ffffffff9034e510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  344.296616][   T31] 1 lock held by syz.2.225/7356:
[  344.301675][   T31]  #0: ffffffff9034e510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  344.324535][   T31] 1 lock held by syz.5.266/7589:
[  344.331409][   T31]  #0: ffffffff9034e510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  344.364493][   T31] 1 lock held by syz.4.287/7719:
[  344.369537][   T31] 1 lock held by syz.6.301/7805:
[  344.384450][   T31]  #0: ffffffff9034e510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  344.393996][   T31] 1 lock held by syz.8.374/8287:
[  344.414439][   T31]  #0: ffffffff9034e510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  344.423970][   T31] 1 lock held by syz.9.414/8485:
[  344.444501][   T31]  #0: ffffffff9034e510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  344.454045][   T31] 5 locks held by syz-executor/8654:
[  344.474477][   T31]  #0: ffff88807d61cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90
[  344.484267][   T31]  #1: ffff88807d61c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0
[  344.514730][   T31]  #2: ffffffff905d6028 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260
[  344.535767][   T31]  #3: ffff88806f2ab338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730
[  344.554720][   T31]  #4: ffffffff8e5d0238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  344.584468][   T31] 1 lock held by syz.3.452/8738:
[  344.589494][   T31]  #0: ffffffff9034e510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  344.614420][   T31] 3 locks held by syz.7.455/8765:
[  344.619544][   T31]  #0: ffff8880289a0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90
[  344.654687][   T31]  #1: ffff8880289a00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0
[  344.684481][   T31]  #2: ffffffff905d6028 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260
[  344.704441][   T31] 3 locks held by syz.0.458/8779:
[  344.709579][   T31] 
[  344.721314][   T31] =============================================
[  344.721314][   T31] 
[  344.744293][   T31] NMI backtrace for cpu 1
[  344.744316][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  344.744359][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  344.744378][   T31] Call Trace:
[  344.744387][   T31]  <TASK>
[  344.744399][   T31]  dump_stack_lvl+0x116/0x1f0
[  344.744449][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  344.744483][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  344.744526][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  344.744578][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  344.744619][   T31]  watchdog+0xf70/0x12c0
[  344.744673][   T31]  ? __pfx_watchdog+0x10/0x10
[  344.744715][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  344.744764][   T31]  ? __kthread_parkme+0x19e/0x250
[  344.744803][   T31]  ? __pfx_watchdog+0x10/0x10
[  344.744850][   T31]  kthread+0x3c2/0x780
[  344.744893][   T31]  ? __pfx_kthread+0x10/0x10
[  344.744939][   T31]  ? rcu_is_watching+0x12/0xc0
[  344.744972][   T31]  ? __pfx_kthread+0x10/0x10
[  344.745019][   T31]  ret_from_fork+0x5d7/0x6f0
[  344.745059][   T31]  ? __pfx_kthread+0x10/0x10
[  344.745105][   T31]  ret_from_fork_asm+0x1a/0x30
[  344.745156][   T31]  </TASK>
[  344.866045][   T31] Sending NMI from CPU 1 to CPUs 0:
[  344.871336][    C0] NMI backtrace for cpu 0
[  344.871353][    C0] CPU: 0 UID: 0 PID: 6877 Comm: kworker/u10:3 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  344.871386][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  344.871404][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  344.871434][    C0] RIP: 0010:mark_lock+0x8e/0x610
[  344.871470][    C0] Code: 8d 04 80 48 8d 04 80 48 8d 04 c5 20 c9 d6 95 4c 89 ea 48 23 50 60 b8 01 00 00 00 74 7f 48 8b 54 24 68 65 48 2b 15 0a 1a 38 12 <0f> 85 e8 04 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 49
[  344.871495][    C0] RSP: 0018:ffffc9000416fa80 EFLAGS: 00000046
[  344.871513][    C0] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 0000000000000006
[  344.871529][    C0] RDX: 0000000000000000 RSI: ffff88803593a940 RDI: ffff888035939e00
[  344.871544][    C0] RBP: ffffc9000416fb18 R08: 0000000000000000 R09: 0000000000000001
[  344.871560][    C0] R10: ffffffff90a9a157 R11: 0000000000000001 R12: ffff88803593a940
[  344.871576][    C0] R13: 0000000000000040 R14: 0000000000000001 R15: ffff888035939e00
[  344.871592][    C0] FS:  0000000000000000(0000) GS:ffff888124720000(0000) knlGS:0000000000000000
[  344.871616][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  344.871641][    C0] CR2: 00005590ec9cf610 CR3: 000000000e382000 CR4: 00000000003526f0
[  344.871657][    C0] Call Trace:
[  344.871664][    C0]  <TASK>
[  344.871677][    C0]  ? do_raw_spin_lock+0x12c/0x2b0
[  344.871721][    C0]  mark_held_locks+0x49/0x80
[  344.871755][    C0]  lockdep_hardirqs_on_prepare+0xf7/0x1d0
[  344.871791][    C0]  trace_hardirqs_on+0x36/0x40
[  344.871828][    C0]  _raw_spin_unlock_irqrestore+0x52/0x80
[  344.871864][    C0]  skb_dequeue+0x126/0x180
[  344.871894][    C0]  ieee80211_iface_work+0x718/0x1020
[  344.871930][    C0]  ? rcu_is_watching+0x12/0xc0
[  344.871958][    C0]  cfg80211_wiphy_work+0x3df/0x550
[  344.871985][    C0]  process_one_work+0x9cf/0x1b70
[  344.872030][    C0]  ? __pfx_cfg80211_wiphy_work+0x10/0x10
[  344.872056][    C0]  ? __pfx_process_one_work+0x10/0x10
[  344.872100][    C0]  ? assign_work+0x1a0/0x250
[  344.872138][    C0]  worker_thread+0x6c8/0xf10
[  344.872184][    C0]  ? __pfx_worker_thread+0x10/0x10
[  344.872223][    C0]  kthread+0x3c2/0x780
[  344.872259][    C0]  ? __pfx_kthread+0x10/0x10
[  344.872296][    C0]  ? rcu_is_watching+0x12/0xc0
[  344.872322][    C0]  ? __pfx_kthread+0x10/0x10
[  344.872359][    C0]  ret_from_fork+0x5d7/0x6f0
[  344.872393][    C0]  ? __pfx_kthread+0x10/0x10
[  344.872429][    C0]  ret_from_fork_asm+0x1a/0x30
[  344.872484][    C0]  </TASK>
[  345.124490][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  345.131506][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  345.143368][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  345.153481][   T31] Call Trace:
[  345.156810][   T31]  <TASK>
[  345.159877][   T31]  dump_stack_lvl+0x3d/0x1f0
[  345.164546][   T31]  panic+0x71c/0x800
[  345.168490][   T31]  ? __pfx___irq_work_queue_local+0x10/0x10
[  345.174455][   T31]  ? __pfx_panic+0x10/0x10
[  345.178973][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  345.184397][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  345.190415][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  345.195830][   T31]  ? watchdog+0xdda/0x12c0
[  345.200309][   T31]  ? watchdog+0xdcd/0x12c0
[  345.204774][   T31]  watchdog+0xdeb/0x12c0
[  345.209067][   T31]  ? __pfx_watchdog+0x10/0x10
[  345.213787][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  345.219029][   T31]  ? __kthread_parkme+0x19e/0x250
[  345.224098][   T31]  ? __pfx_watchdog+0x10/0x10
[  345.228828][   T31]  kthread+0x3c2/0x780
[  345.232943][   T31]  ? __pfx_kthread+0x10/0x10
[  345.237579][   T31]  ? rcu_is_watching+0x12/0xc0
[  345.242373][   T31]  ? __pfx_kthread+0x10/0x10
[  345.247017][   T31]  ret_from_fork+0x5d7/0x6f0
[  345.251653][   T31]  ? __pfx_kthread+0x10/0x10
[  345.256312][   T31]  ret_from_fork_asm+0x1a/0x30
[  345.261143][   T31]  </TASK>
[  345.264356][   T31] Kernel Offset: disabled
[  345.268706][   T31] Rebooting in 86400 seconds..