last executing test programs:

9.186958666s ago: executing program 0 (id=100):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/links\x00', 0x800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
unshare$auto(0x40000080)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f0000000200)={0x4000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket(0x12, 0x4, 0x440a)
mmap$auto(0x0, 0x1000, 0xc, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0)
write$auto(r3, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff)
ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040))
sendfile$auto(0x6, 0x3, 0x0, 0xfdef)
io_setup$auto(0x80002, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r2)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="20002abd7000fedcdf25010000000d000280055140d023e39b5a933e949a3ae6e421486b139cfc549d2c023a5139cca0b945b14436de99229dba6dc3e33db0d907fa3c196becbd49464d23bd9773a6cbc93748a7cfe94461145276ca90ebb14873788d1eff95dbc4f3a36f1fc3ec2e053f4ba5e39ba1ffac07d987d8f7992c5eb555c2b9e85350c204947657e1"], 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x8041)
epoll_pwait2$auto(r1, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa4883, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x0, 0x0)
setreuid$auto(0x8, 0x9d7)

7.052587233s ago: executing program 2 (id=114):
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
ioctl$auto(0x3, 0x4020565a, 0x38)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f00000001c0))
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0)
ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r5 = socket(0x23, 0x5, 0x0)
bind$auto(r5, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=@task_fd_query={r4, r5, 0x8, 0xc, 0x80000000, 0x7, r0, 0xef77, 0xff}, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0_to_bond\x00', 0x284000, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

6.519684467s ago: executing program 1 (id=107):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
ioctl$auto(0x3, 0x4020565a, 0x38)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_OSS_GETVERSION2(r2, 0x80044d76, &(0x7f00000001c0))
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0)
ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r4 = socket(0x23, 0x5, 0x0)
bind$auto(r4, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=@task_fd_query={r3, r4, 0x8, 0xc, 0x80000000, 0x7, <r5=>0xffffffffffffffff, 0xef77, 0xff}, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0_to_bond\x00', 0x284000, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
ioctl$auto_VFIO_IOMMU_MAP_DMA(r5, 0x3b71, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

5.884821581s ago: executing program 2 (id=108):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f00000001c0))
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0)
ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r5 = socket(0x23, 0x5, 0x0)
bind$auto(r5, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=@task_fd_query={r4, r5, 0x8, 0xc, 0x80000000, 0x7, <r6=>r0, 0xef77, 0xff}, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0_to_bond\x00', 0x284000, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
ioctl$auto_VFIO_IOMMU_MAP_DMA(r6, 0x3b71, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

5.883853612s ago: executing program 0 (id=117):
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
ioctl$auto(0x3, 0x4020565a, 0x38)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f00000001c0))
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0)
ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r5 = socket(0x23, 0x5, 0x0)
bind$auto(r5, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=@task_fd_query={r4, r5, 0x8, 0xc, 0x80000000, 0x7, r0, 0xef77, 0xff}, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0_to_bond\x00', 0x284000, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

5.732129594s ago: executing program 3 (id=109):
ioperm$auto(0x7, 0x5ad2, 0x8)
ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x4, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001)
process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r3)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040)
sendmsg$auto_WG_CMD_GET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x703, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x985}, 0x4)
write$auto_tty_fops_tty_io(r2, &(0x7f0000000580)="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", 0xfdef)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0)
ioctl$auto_USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000400)=0xfffff000)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x141000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x248880, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r0, &(0x7f0000000600)='/Eev7audio1\x00VI\xa3\xaa\x01\x00\x00\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\x8eZ|\xffGP\x97)\xcf\a\xfb\\nD\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbb\xd9\xce\xb3\xfa\xcd(\xa6\x9c\xc7I\xb65T\xa4Y8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\x06k\xa2\xc2\xa7n\xf8>\"\xfd@\xee\xf9\xa4\xf4\xb4\x90\x95\f\xc2\xb6\x15\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xda\xe4\x15\xcbx\x01w\xeb\xf4R\x9663\x840\tL\xd2r\xf7\f#\xccR\xfc\xc0e~b\x99`S_\xba\a%Ta\xdf\xbc\x85\x99\xfe\xf8\x05n\xfa\xb9-ph\xf2\x87\x92\x9d\x10!\x83\xecV\x19\xd2\x96W\x9d\x8b\xd6bt\xea\xe4\x9c\xbf\x01t@\x85/D\xba\x14.w\xf57\xbe\x804\f\xeep\x9f\xa7\xc25\\\xe9m0\xcf\xbe;\x83E\x17C\xda||A\xe6R;\x00\x00', 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r8 = userfaultfd$auto(0x1)
statx$auto(r8, 0x0, 0x1000, 0x8, 0x0)

4.822176026s ago: executing program 0 (id=110):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/enabled\x00', 0xa000, 0x0)
socket(0x1d, 0x2, 0x6)
lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000480)={0x87, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174"}, 0x403)
getsockopt$auto(0xffffffffffffffff, 0x114, 0x2713, 0xfffffffffffffffc, 0x0)
write$auto(0x1, 0x0, 0x80000000)
fcntl$auto(0x0, 0x407, 0x100000)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
close_range$auto(0x2, 0x8, 0x0)

4.82192314s ago: executing program 1 (id=111):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
ioctl$auto(0x3, 0x4020565a, 0x38)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f00000001c0))
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0)
ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r5 = socket(0x23, 0x5, 0x0)
bind$auto(r5, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=@task_fd_query={r4, r5, 0x8, 0xc, 0x80000000, 0x7, r0, 0xef77, 0xff}, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0_to_bond\x00', 0x284000, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

4.579944489s ago: executing program 3 (id=112):
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0)
waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000002c0)={@_si_pad}, 0x9bdf, &(0x7f0000000340)={{0x101, 0x4}, {0xffffff0000000000, 0x100000001}, 0xfffffffffffffff9, 0x1000, 0xf3a0, 0x0, 0x2, 0xc2, 0x9, 0x9, 0x8000, 0xfffffffffffffbaa, 0x8, 0xd3d, 0x4, 0xe})
sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0xfffffffffffffe0f, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_COLOR_CHANGE_COLOR, @NL80211_ATTR_FILS_ERP_RRK={0x0, 0xfc, "ef273fb7298571c2d167b60107f45d72b1160ee1a07a031a47ced280e7fe"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x6}]}, 0xfffffffffffffdb8}}, 0x48000)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f0000000440)="232d7efe595046ab5c98199adf260600de16baef6176e6021e1dcedc5b94973d5e1a211a1d00000000000000e0ffffff1000000000000000db79898a2afcf708d4eb3fad48ec0fdf99eef6e44ca56aa44e092414c64ae0a7680a2c774cc36317beb46355ba3d9ba2171b4fb5ffac090fd5cd1090202872ac93b65b88a08213e0b037d93a09f7", 0x86)
sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0xb21, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="98060000", @ANYRES16=r1, @ANYBLOB="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"], 0x698}, 0x1, 0x0, 0x0, 0x804}, 0x48c1)
socketpair$auto(0x1, 0x4, 0x701, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000980), 0x400, 0x0)
writev$auto(r4, &(0x7f0000000a80)={&(0x7f00000009c0)="0090d677c6a0698d0461b2d89cfd9260a00f8d6a682bb050a30f5e2810269313e34a9b9cb1de9f90d48990c98246fc1c30fb90a4da57f54723b6aafbebbfb9c6a1d351fc59ae9ebeaddf2239a4cb5d7480baf7d4f9ead0b666f4f825630322e95ca5f731c465e154762b33941dd66446ea2949ecd684efd775be645f632ec9115e", 0x2}, 0x1)
epoll_create$auto(0x5a5d)
io_uring_setup$auto(0x4, 0x0)
r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/5u\x00', 0x0, 0x0)
pread64$auto(r5, 0x0, 0x0, 0x40000000009)
close_range$auto(0x2, 0x8, 0x0)

4.537215508s ago: executing program 2 (id=113):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/free_hugepages\x00', 0x14b142, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x804, 0x7ff, 0x9b72, 0x2, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x0, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7})
keyctl$auto_KEYCTL_UPDATE(0x2, 0x80000000, 0x200000000006, 0x80000001, 0x100)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0)
splice$auto(r2, &(0x7f0000000280)=0x5, r3, &(0x7f0000000340)=0x3, 0x3, 0x8)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004)

3.723399092s ago: executing program 3 (id=115):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/free_hugepages\x00', 0x14b142, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x804, 0x7ff, 0x9b72, 0x2, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x0, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7})
keyctl$auto_KEYCTL_UPDATE(0x2, 0x80000000, 0x200000000006, 0x80000001, 0x100)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0)
splice$auto(r2, &(0x7f0000000280)=0x5, r3, &(0x7f0000000340)=0x3, 0x3, 0x8)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xee46}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

3.555655314s ago: executing program 1 (id=116):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/free_hugepages\x00', 0x14b142, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x804, 0x7ff, 0x9b72, 0x2, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x0, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7})
keyctl$auto_KEYCTL_UPDATE(0x2, 0x80000000, 0x200000000006, 0x80000001, 0x100)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0)
splice$auto(r2, &(0x7f0000000280)=0x5, r3, &(0x7f0000000340)=0x3, 0x3, 0x8)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004)

3.289122268s ago: executing program 2 (id=118):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/links\x00', 0x800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
unshare$auto(0x40000080)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f0000000200)={0x4000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket(0x12, 0x4, 0x440a)
mmap$auto(0x0, 0x1000, 0xc, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0)
write$auto(r3, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff)
ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040))
sendfile$auto(0x6, 0x3, 0x0, 0xfdef)
io_setup$auto(0x80002, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r2)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="20002abd7000fedcdf25010000000d000280055140d023e39b5a933e949a3ae6e421486b139cfc549d2c023a5139cca0b945b14436de99229dba6dc3e33db0d907fa3c196becbd49464d23bd9773a6cbc93748a7cfe94461145276ca90ebb14873788d1eff95dbc4f3a36f1fc3ec2e053f4ba5e39ba1ffac07d987d8f7992c5eb555c2b9e85350c204947657e1"], 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x8041)
epoll_pwait2$auto(r1, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa4883, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x0, 0x0)
setreuid$auto(0x8, 0x9d7)

3.277138945s ago: executing program 3 (id=119):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/links\x00', 0x800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0)
unshare$auto(0x40000080)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x5, 0x6, 0xffffffff, 0x2}, 0x30, 0x0, 0x6)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f0000000200)={0x4000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket(0x12, 0x4, 0x440a)
mmap$auto(0x0, 0x1000, 0xc, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff)
ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040))
sendfile$auto(0x6, 0x3, 0x0, 0xfdef)
io_setup$auto(0x80002, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r1)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="20002abd7000fedcdf25010000000d000280055140d023e39b5a933e949a3ae6e421486b139cfc549d2c023a5139cca0b945b14436de99229dba6dc3e33db0d907fa3c196becbd49464d23bd9773a6cbc93748a7cfe94461145276ca90ebb14873788d1eff95dbc4f3a36f1fc3ec2e053f4ba5e39ba1ffac07d987d8f7992c5eb555c2b9e85350c204947657e1"], 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x8041)
epoll_pwait2$auto(r0, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa4883, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x0, 0x0)
setreuid$auto(0x8, 0x9d7)

3.237003572s ago: executing program 0 (id=120):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0)
ioctl$auto(0x3, 0x4020565a, 0x38)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f00000001c0))
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0)
ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r5 = socket(0x23, 0x5, 0x0)
bind$auto(r5, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=@task_fd_query={r4, r5, 0x8, 0xc, 0x80000000, 0x7, r0, 0xef77, 0xff}, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0_to_bond\x00', 0x284000, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

2.619537422s ago: executing program 1 (id=121):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x4020565a, 0x38)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f00000001c0))
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0)
ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r5 = socket(0x23, 0x5, 0x0)
bind$auto(r5, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=@task_fd_query={r4, r5, 0x8, 0xc, 0x80000000, 0x7, <r6=>r0, 0xef77, 0xff}, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0_to_bond\x00', 0x284000, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
ioctl$auto_VFIO_IOMMU_MAP_DMA(r6, 0x3b71, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

2.061011873s ago: executing program 0 (id=122):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/free_hugepages\x00', 0x14b142, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x804, 0x7ff, 0x9b72, 0x2, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x0, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7})
keyctl$auto_KEYCTL_UPDATE(0x2, 0x80000000, 0x200000000006, 0x80000001, 0x100)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0)
splice$auto(r2, &(0x7f0000000280)=0x5, r3, &(0x7f0000000340)=0x3, 0x3, 0x8)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xee46}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1.699829948s ago: executing program 2 (id=123):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
ioctl$auto(0x3, 0x4020565a, 0x38)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f00000001c0))
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0)
ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r5 = socket(0x23, 0x5, 0x0)
bind$auto(r5, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=@task_fd_query={r4, r5, 0x8, 0xc, 0x80000000, 0x7, r0, 0xef77, 0xff}, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0_to_bond\x00', 0x284000, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

1.437824897s ago: executing program 3 (id=124):
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0)
waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000002c0)={@_si_pad}, 0x9bdf, &(0x7f0000000340)={{0x101, 0x4}, {0xffffff0000000000, 0x100000001}, 0xfffffffffffffff9, 0x1000, 0xf3a0, 0x0, 0x2, 0xc2, 0x9, 0x9, 0x8000, 0xfffffffffffffbaa, 0x8, 0xd3d, 0x4, 0xe})
sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0xfffffffffffffe0f, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_COLOR_CHANGE_COLOR, @NL80211_ATTR_FILS_ERP_RRK={0x0, 0xfc, "ef273fb7298571c2d167b60107f45d72b1160ee1a07a031a47ced280e7fe"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x6}]}, 0xfffffffffffffdb8}}, 0x48000)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f0000000440)="232d7efe595046ab5c98199adf260600de16baef6176e6021e1dcedc5b94973d5e1a211a1d00000000000000e0ffffff1000000000000000db79898a2afcf708d4eb3fad48ec0fdf99eef6e44ca56aa44e092414c64ae0a7680a2c774cc36317beb46355ba3d9ba2171b4fb5ffac090fd5cd1090202872ac93b65b88a08213e0b037d93a09f7", 0x86)
sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0xb21, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="98060000", @ANYRES16=r1, @ANYBLOB="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"], 0x698}, 0x1, 0x0, 0x0, 0x804}, 0x48c1)
socketpair$auto(0x1, 0x4, 0x701, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000980), 0x400, 0x0)
writev$auto(r4, &(0x7f0000000a80)={&(0x7f00000009c0)="0090d677c6a0698d0461b2d89cfd9260a00f8d6a682bb050a30f5e2810269313e34a9b9cb1de9f90d48990c98246fc1c30fb90a4da57f54723b6aafbebbfb9c6a1d351fc59ae9ebeaddf2239a4cb5d7480baf7d4f9ead0b666f4f825630322e95ca5f731c465e154762b33941dd66446ea2949ecd684efd775be645f632ec9115e", 0x2}, 0x1)
epoll_create$auto(0x5a5d)
io_uring_setup$auto(0x4, 0x0)
r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/5u\x00', 0x0, 0x0)
pread64$auto(r5, 0x0, 0x0, 0x40000000009)
close_range$auto(0x2, 0x8, 0x0)

1.302130822s ago: executing program 1 (id=125):
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
ioctl$auto(0x3, 0x4020565a, 0x38)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f00000001c0))
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0)
ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r5 = socket(0x23, 0x5, 0x0)
bind$auto(r5, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=@task_fd_query={r4, r5, 0x8, 0xc, 0x80000000, 0x7, <r6=>r0, 0xef77, 0xff}, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0_to_bond\x00', 0x284000, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
ioctl$auto_VFIO_IOMMU_MAP_DMA(r6, 0x3b71, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

539.536794ms ago: executing program 0 (id=126):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
ioctl$auto(0x3, 0x4020565a, 0x38)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f00000001c0))
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0)
ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r5 = socket(0x23, 0x5, 0x0)
bind$auto(r5, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=@task_fd_query={r4, r5, 0x8, 0xc, 0x80000000, 0x7, r0, 0xef77, 0xff}, 0x2)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0_to_bond\x00', 0x284000, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

270.790757ms ago: executing program 3 (id=127):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/free_hugepages\x00', 0x14b142, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x804, 0x7ff, 0x9b72, 0x2, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x0, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7})
keyctl$auto_KEYCTL_UPDATE(0x2, 0x80000000, 0x200000000006, 0x80000001, 0x100)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0)
splice$auto(r2, &(0x7f0000000280)=0x5, r3, &(0x7f0000000340)=0x3, 0x3, 0x8)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xee46}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

224.713µs ago: executing program 1 (id=128):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/free_hugepages\x00', 0x14b142, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x804, 0x7ff, 0x9b72, 0x2, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x0, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7})
keyctl$auto_KEYCTL_UPDATE(0x2, 0x80000000, 0x200000000006, 0x80000001, 0x100)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0)
splice$auto(r2, &(0x7f0000000280)=0x5, r3, &(0x7f0000000340)=0x3, 0x3, 0x8)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004)

0s ago: executing program 2 (id=129):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/enabled\x00', 0xa000, 0x0)
socket(0x1d, 0x2, 0x6)
lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000480)={0x87, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174"}, 0x403)
getsockopt$auto(0xffffffffffffffff, 0x114, 0x2713, 0xfffffffffffffffc, 0x0)
write$auto(0x1, 0x0, 0x80000000)
fcntl$auto(0x0, 0x407, 0x100000)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
close_range$auto(0x2, 0x8, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts.
[  100.729127][ T5835] cgroup: Unknown subsys name 'net'
[  100.873571][ T5835] cgroup: Unknown subsys name 'cpuset'
[  100.883830][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  102.481058][  T981] cfg80211: failed to load regulatory.db
[  102.727366][ T5835] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  105.095980][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  105.098467][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.104960][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  105.118438][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.121436][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  105.133532][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  105.133699][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.141925][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  105.149276][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  105.159149][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  105.165689][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  105.170746][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  105.177725][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.218946][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.238203][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.240313][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.253384][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.253738][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.279071][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.287237][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.873710][ T5852] chnl_net:caif_netlink_parms(): no params data found
[  105.919875][ T5851] chnl_net:caif_netlink_parms(): no params data found
[  106.051148][ T5850] chnl_net:caif_netlink_parms(): no params data found
[  106.229723][ T5860] chnl_net:caif_netlink_parms(): no params data found
[  106.242720][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.250831][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.258357][ T5851] bridge_slave_0: entered allmulticast mode
[  106.267411][ T5851] bridge_slave_0: entered promiscuous mode
[  106.276341][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.283839][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.291186][ T5852] bridge_slave_0: entered allmulticast mode
[  106.298746][ T5852] bridge_slave_0: entered promiscuous mode
[  106.328599][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.336061][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.343581][ T5851] bridge_slave_1: entered allmulticast mode
[  106.351239][ T5851] bridge_slave_1: entered promiscuous mode
[  106.359046][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.366247][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.374088][ T5852] bridge_slave_1: entered allmulticast mode
[  106.381983][ T5852] bridge_slave_1: entered promiscuous mode
[  106.480217][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.528577][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.542198][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.552129][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.562784][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.570170][ T5850] bridge_slave_0: entered allmulticast mode
[  106.577722][ T5850] bridge_slave_0: entered promiscuous mode
[  106.609342][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.622037][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.629709][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.637108][ T5850] bridge_slave_1: entered allmulticast mode
[  106.645550][ T5850] bridge_slave_1: entered promiscuous mode
[  106.744842][ T5851] team0: Port device team_slave_0 added
[  106.771086][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.781601][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.789152][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.796421][ T5860] bridge_slave_0: entered allmulticast mode
[  106.804750][ T5860] bridge_slave_0: entered promiscuous mode
[  106.814978][ T5851] team0: Port device team_slave_1 added
[  106.840318][ T5852] team0: Port device team_slave_0 added
[  106.850577][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.868757][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.876971][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.884909][ T5860] bridge_slave_1: entered allmulticast mode
[  106.892842][ T5860] bridge_slave_1: entered promiscuous mode
[  106.916998][ T5852] team0: Port device team_slave_1 added
[  106.967953][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.975273][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.002025][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.050847][ T5850] team0: Port device team_slave_0 added
[  107.073298][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.080947][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.107730][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.127841][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.135346][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.161866][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.175880][ T5850] team0: Port device team_slave_1 added
[  107.199845][ T5858] Bluetooth: hci1: command tx timeout
[  107.201174][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.218311][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.230610][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.237692][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.263773][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.279111][ T5858] Bluetooth: hci2: command tx timeout
[  107.332630][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.340378][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.366976][ T5858] Bluetooth: hci3: command tx timeout
[  107.369342][ T5858] Bluetooth: hci0: command tx timeout
[  107.373053][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.421713][ T5860] team0: Port device team_slave_0 added
[  107.431397][ T5860] team0: Port device team_slave_1 added
[  107.454349][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.463854][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.490327][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.515367][ T5851] hsr_slave_0: entered promiscuous mode
[  107.524677][ T5851] hsr_slave_1: entered promiscuous mode
[  107.577840][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.585386][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.611992][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.628722][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.636399][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.663061][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.680458][ T5852] hsr_slave_0: entered promiscuous mode
[  107.686975][ T5852] hsr_slave_1: entered promiscuous mode
[  107.693386][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  107.701403][ T5852] Cannot create hsr debugfs directory
[  107.808425][ T5850] hsr_slave_0: entered promiscuous mode
[  107.815421][ T5850] hsr_slave_1: entered promiscuous mode
[  107.823062][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  107.830879][ T5850] Cannot create hsr debugfs directory
[  107.873261][ T5860] hsr_slave_0: entered promiscuous mode
[  107.880917][ T5860] hsr_slave_1: entered promiscuous mode
[  107.887284][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  107.895699][ T5860] Cannot create hsr debugfs directory
[  108.397840][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  108.416736][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  108.428330][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  108.452388][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  108.523654][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  108.536642][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  108.550382][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  108.565382][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  108.663554][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  108.685355][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  108.707951][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  108.720907][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  108.836949][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  108.861535][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  108.874956][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  108.888176][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  108.945390][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.999857][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[  109.042914][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.050366][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.092610][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.099891][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.127823][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.223789][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[  109.256256][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.263514][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.282765][ T5858] Bluetooth: hci1: command tx timeout
[  109.286153][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.354948][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.362241][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.372624][ T5858] Bluetooth: hci2: command tx timeout
[  109.390921][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.439232][ T5858] Bluetooth: hci0: command tx timeout
[  109.439468][ T5863] Bluetooth: hci3: command tx timeout
[  109.472991][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[  109.498607][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.505890][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.537913][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.545223][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.563623][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  109.593920][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[  109.638276][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.645648][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.678321][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.685605][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.783761][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.976002][ T5851] veth0_vlan: entered promiscuous mode
[  110.042407][ T5851] veth1_vlan: entered promiscuous mode
[  110.141246][ T5851] veth0_macvtap: entered promiscuous mode
[  110.172933][ T5851] veth1_macvtap: entered promiscuous mode
[  110.290129][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.305442][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.324277][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.346278][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.357145][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.368336][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.378148][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.527288][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.555826][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.598754][ T5852] veth0_vlan: entered promiscuous mode
[  110.628040][ T4519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.637266][ T4519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.681845][ T5852] veth1_vlan: entered promiscuous mode
[  110.716494][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.743081][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.774826][ T5860] veth0_vlan: entered promiscuous mode
[  110.825542][ T5850] veth0_vlan: entered promiscuous mode
[  110.835798][ T5860] veth1_vlan: entered promiscuous mode
[  110.862264][ T5852] veth0_macvtap: entered promiscuous mode
[  110.887158][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  110.891816][ T5852] veth1_macvtap: entered promiscuous mode
[  110.917931][ T5850] veth1_vlan: entered promiscuous mode
[  110.964853][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.983093][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.006976][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.033135][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.043083][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.053221][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.094829][ T5860] veth0_macvtap: entered promiscuous mode
[  111.135162][ T5860] veth1_macvtap: entered promiscuous mode
[  111.167908][ T5850] veth0_macvtap: entered promiscuous mode
[  111.270188][ T5850] veth1_macvtap: entered promiscuous mode
[  111.338266][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.360177][ T5863] Bluetooth: hci1: command tx timeout
[  111.369173][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  111.417867][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.443035][ T5863] Bluetooth: hci2: command tx timeout
[  111.454284][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.464580][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.491173][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.520219][ T5863] Bluetooth: hci3: command tx timeout
[  111.529448][ T5863] Bluetooth: hci0: command tx timeout
[  111.557559][ T5860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.567184][ T5860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.580666][ T5860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.591363][ T5860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.622583][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.706248][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.716998][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.727623][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.736650][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.772570][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.807386][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.994291][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.002855][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.187604][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.215058][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.343814][ T4519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.389641][ T4519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.480447][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.543343][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.013317][ T5946] random: crng reseeded on system resumption
[  113.263635][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  113.446889][ T5863] Bluetooth: hci1: command tx timeout
[  113.519469][ T5863] Bluetooth: hci2: command tx timeout
[  113.599513][ T5863] Bluetooth: hci0: command tx timeout
[  113.600376][ T5858] Bluetooth: hci3: command tx timeout
[  113.673399][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  114.139468][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  114.192851][ T5957] random: crng reseeded on system resumption
[  114.459875][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  114.719667][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  115.241889][ T5968] zswap: compressor  not available
[  115.809780][ T5986] random: crng reseeded on system resumption
[  116.399452][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  116.539826][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  116.699615][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  117.140589][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  117.917843][ T6012] random: crng reseeded on system resumption
[  119.198158][ T6021] random: crng reseeded on system resumption
[  119.699754][ T6031] random: crng reseeded on system resumption
[  121.069631][ T6049] random: crng reseeded on system resumption
[  121.558211][ T6051] zswap: compressor  not available
[  122.204308][ T6069] random: crng reseeded on system resumption
[  122.315824][ T6066] zswap: compressor  not available
[  123.411508][ T6081] random: crng reseeded on system resumption
[  123.881481][ T6085] zswap: compressor  not available
[  124.781538][ T6103] random: crng reseeded on system resumption
[  126.077139][ T6125] random: crng reseeded on system resumption
[  127.266325][ T6137] zswap: compressor  not available
[  127.881224][ T6147] random: crng reseeded on system resumption
[  128.994769][ T6155] random: crng reseeded on system resumption
[  130.044022][ T6165] random: crng reseeded on system resumption
[  130.942512][ T6174] zswap: compressor  not available
[  131.883343][ T6191] random: crng reseeded on system resumption
[  132.871016][ T6205] random: crng reseeded on system resumption
[  134.404356][ T6227] random: crng reseeded on system resumption
[  135.787451][ T6237] zswap: compressor  not available
[  136.743728][ T6259] random: crng reseeded on system resumption
[  137.067701][ T6255] Zero length message leads to an empty skb
[  137.245756][ T6262] zswap: compressor  not available
[  137.724042][ T6282] random: crng reseeded on system resumption
[  138.264253][ T6287] zswap: compressor  not available
[  138.745461][ T6300] random: crng reseeded on system resumption
[  139.387383][ T6310] binder: 6303:6310 ioctl 1260 7fffffffffffffff returned -22
[  140.322256][ T6318] random: crng reseeded on system resumption
[  141.630574][ T6330] random: crng reseeded on system resumption
[  142.154991][ T6332] zswap: compressor  not available
[  142.974247][ T6341] zswap: compressor  not available
[  143.258046][ T6358] random: crng reseeded on system resumption
[  143.453874][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  143.487783][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  143.496655][ T6364] binder: 6362:6364 ioctl 1260 7fffffffffffffff returned -22
[  144.639100][ T6377] random: crng reseeded on system resumption
[  145.139228][ T6378] zswap: compressor  not available
[  146.935002][ T6410] random: crng reseeded on system resumption
[  147.620817][ T6419] random: crng reseeded on system resumption
[  148.509525][ T6428] random: crng reseeded on system resumption
[  149.762563][ T6442] random: crng reseeded on system resumption
[  150.573081][ T6455] random: crng reseeded on system resumption
[  151.582886][ T6460] zswap: compressor  not available
[  152.035427][ T6476] random: crng reseeded on system resumption
[  152.634331][ T6485] random: crng reseeded on system resumption
[  153.244576][ T6492] random: crng reseeded on system resumption
[  153.884341][ T6501] random: crng reseeded on system resumption
[  154.389123][ T6505] random: crng reseeded on system resumption
[  155.529618][ T6519] random: crng reseeded on system resumption
[  157.077900][ T6548] random: crng reseeded on system resumption
[  157.217414][ T6556] binder: 6546:6556 ioctl 1260 7fffffffffffffff returned -22
[  157.356999][ T6541] zswap: compressor  not available
[  157.884681][ T6561] random: crng reseeded on system resumption
[  158.032174][ T6561] binder: 6560:6561 ioctl 1260 7fffffffffffffff returned -22
[  158.639560][ T6569] random: crng reseeded on system resumption
[  159.106794][ T6577] random: crng reseeded on system resumption
[  160.049498][ T6582] random: crng reseeded on system resumption
[  160.719167][ T5858] ==================================================================
[  160.727322][ T5858] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240
[  160.735215][ T5858] Read of size 140 at addr ffffc90003212000 by task kworker/u9:4/5858
[  160.743426][ T5858] 
[  160.745833][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: kworker/u9:4 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) 
[  160.745875][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  160.745896][ T5858] Workqueue: hci0 hci_devcd_timeout
[  160.745945][ T5858] Call Trace:
[  160.745957][ T5858]  <TASK>
[  160.745972][ T5858]  dump_stack_lvl+0x116/0x1f0
[  160.746007][ T5858]  print_report+0xcd/0x630
[  160.746038][ T5858]  ? __virt_addr_valid+0x81/0x610
[  160.746073][ T5858]  ? hci_devcd_dump+0x142/0x240
[  160.746113][ T5858]  kasan_report+0xe0/0x110
[  160.746145][ T5858]  ? hci_devcd_dump+0x142/0x240
[  160.746190][ T5858]  kasan_check_range+0x100/0x1b0
[  160.746228][ T5858]  __asan_memcpy+0x23/0x60
[  160.746271][ T5858]  hci_devcd_dump+0x142/0x240
[  160.746313][ T5858]  hci_devcd_timeout+0xb5/0x2e0
[  160.746354][ T5858]  ? rcu_is_watching+0x12/0xc0
[  160.746386][ T5858]  process_one_work+0x9cc/0x1b70
[  160.746437][ T5858]  ? __pfx_process_one_work+0x10/0x10
[  160.746486][ T5858]  ? assign_work+0x1a0/0x250
[  160.746528][ T5858]  worker_thread+0x6c8/0xf10
[  160.746580][ T5858]  ? __pfx_worker_thread+0x10/0x10
[  160.746623][ T5858]  kthread+0x3c5/0x780
[  160.746663][ T5858]  ? __pfx_kthread+0x10/0x10
[  160.746705][ T5858]  ? rcu_is_watching+0x12/0xc0
[  160.746733][ T5858]  ? __pfx_kthread+0x10/0x10
[  160.746780][ T5858]  ret_from_fork+0x5d4/0x6f0
[  160.746819][ T5858]  ? __pfx_kthread+0x10/0x10
[  160.746860][ T5858]  ret_from_fork_asm+0x1a/0x30
[  160.746899][ T5858]  </TASK>
[  160.746909][ T5858] 
[  160.894456][ T5858] The buggy address belongs to a vmalloc virtual mapping
[  160.901510][ T5858] Memory state around the buggy address:
[  160.907233][ T5858]  ffffc90003211f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  160.915312][ T5858]  ffffc90003211f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  160.923386][ T5858] >ffffc90003212000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  160.931456][ T5858]                    ^
[  160.935542][ T5858]  ffffc90003212080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  160.943639][ T5858]  ffffc90003212100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  160.951725][ T5858] ==================================================================
[  160.961311][ T5858] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  160.968636][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: kworker/u9:4 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) 
[  160.980822][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  160.990919][ T5858] Workqueue: hci0 hci_devcd_timeout
[  160.996157][ T5858] Call Trace:
[  160.999450][ T5858]  <TASK>
[  161.002389][ T5858]  dump_stack_lvl+0x3d/0x1f0
[  161.006999][ T5858]  panic+0x71c/0x800
[  161.011189][ T5858]  ? __pfx_panic+0x10/0x10
[  161.015630][ T5858]  ? mark_held_locks+0x49/0x80
[  161.020440][ T5858]  ? preempt_schedule_thunk+0x16/0x30
[  161.025838][ T5858]  ? hci_devcd_dump+0x142/0x240
[  161.030718][ T5858]  ? preempt_schedule_common+0x44/0xc0
[  161.036210][ T5858]  ? check_panic_on_warn+0x1f/0xb0
[  161.041358][ T5858]  ? hci_devcd_dump+0x142/0x240
[  161.046236][ T5858]  check_panic_on_warn+0xab/0xb0
[  161.051205][ T5858]  end_report+0x107/0x170
[  161.055583][ T5858]  kasan_report+0xee/0x110
[  161.060113][ T5858]  ? hci_devcd_dump+0x142/0x240
[  161.064998][ T5858]  kasan_check_range+0x100/0x1b0
[  161.070051][ T5858]  __asan_memcpy+0x23/0x60
[  161.074506][ T5858]  hci_devcd_dump+0x142/0x240
[  161.079214][ T5858]  hci_devcd_timeout+0xb5/0x2e0
[  161.084106][ T5858]  ? rcu_is_watching+0x12/0xc0
[  161.088926][ T5858]  process_one_work+0x9cc/0x1b70
[  161.093910][ T5858]  ? __pfx_process_one_work+0x10/0x10
[  161.099320][ T5858]  ? assign_work+0x1a0/0x250
[  161.103944][ T5858]  worker_thread+0x6c8/0xf10
[  161.108577][ T5858]  ? __pfx_worker_thread+0x10/0x10
[  161.113724][ T5858]  kthread+0x3c5/0x780
[  161.117830][ T5858]  ? __pfx_kthread+0x10/0x10
[  161.122465][ T5858]  ? rcu_is_watching+0x12/0xc0
[  161.127248][ T5858]  ? __pfx_kthread+0x10/0x10
[  161.131881][ T5858]  ret_from_fork+0x5d4/0x6f0
[  161.136499][ T5858]  ? __pfx_kthread+0x10/0x10
[  161.141152][ T5858]  ret_from_fork_asm+0x1a/0x30
[  161.145943][ T5858]  </TASK>
[  161.149146][ T5858] Kernel Offset: disabled
[  161.153509][ T5858] Rebooting in 86400 seconds..