last executing test programs:

12.756869161s ago: executing program 1 (id=141):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r0 = socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x20800, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
mmap$auto(0x0, 0x400008, 0x0, 0x9b72, r0, 0x0)
write$auto(0x1, 0x0, 0x80000000)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
write$auto(0xca, 0x0, 0x2d9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x5400, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = prctl$auto_PR_SYS_DISPATCH_ON(0x1ce9, 0x1, r2, 0x1, 0x9)
read$auto_stat_fops_per_vm_kvm_main(r4, &(0x7f0000000340)=""/200, 0xc8)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
sched_setaffinity$auto(0x0, 0xcf4d, &(0x7f00000000c0)=0xffffffffffffffff)
clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9)
exit$auto(0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x128, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x10a, 0x2, 0x0, 0x1, [@generic="b3309cdb67b6a07ac313edc3b23b0cbb14504ba4ddbd9c7d719fecfcfa3b6c4ab45951ab3f3e4a1aef5b859fc45d505bbce3184280edf75a7513c433fc2f488b3c442960642593ffc07c7c9e496d8765b928f0836c19c1d9f75b00643c2a2d3ebd27664fc1185eac7ebe6f8882a861eeb1e19d71d47474e2eec614c7cd1a7414de99cd42524f724a5d722caa54dfb6b9fd7ecca681e521dbe273d886169ff1e01a397b17d174c3e347a7d2899c32a78f6e8b741638b76b5a4fed546594eec03cd3d61dc6d84cea54a15b", @typed={0x8, 0x30, 0x0, 0x0, @uid}, @typed={0x8, 0xa5, 0x0, 0x0, @str='%-@\x00'}, @typed={0x8, 0x10d, 0x0, 0x0, @fd=r1}, @nested={0x24, 0xf1, 0x0, 0x1, [@typed={0x1e, 0x7e, 0x0, 0x0, @str='/sys/kernel/debug/lru_gen\x00'}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8800}, 0x8010)

11.12493498s ago: executing program 0 (id=142):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x302, 0x0)
timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000140)=0x6)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
inotify_rm_watch$auto(0xffffffffffffffff, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002d80)={0x40, r4, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="0ef9f18c"]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x10)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0xc0781, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0xa, 0x2, 0x88)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x8, 0x1, r6, @relative_id=0x13, 0xe600}, 0xf)

10.754338437s ago: executing program 1 (id=144):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
r0 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy15/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x80, 0x0)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
madvise$auto(0x0, 0xffffffffffff0001, 0xf65)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x9, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0x80}, {0x100, 0x1, 0x52, 0x85, 0x4, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}})
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
poll$auto(&(0x7f0000000040)={r2, 0x1, 0x40}, 0x8, 0x8000)
socket(0x1, 0x4, 0x4)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_OTPSELECT(0xffffffffffffffff, 0x80044d0d, &(0x7f00000000c0)=0x10009)
socket(0x2, 0x1, 0x0)
shutdown$auto(0x200000003, 0x2)
read$auto(r0, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy15/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x0)
connect$auto(r0, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa0c82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
socketpair$auto(0x1e, 0x5, 0x6, 0x0)
r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

10.667336303s ago: executing program 3 (id=145):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x0)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000)
r1 = io_uring_setup$auto(0x2, 0x0)
mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0)
r2 = fcntl$auto(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
read$auto(r3, 0x0, 0x2)
pwritev$auto(0x3, 0x0, 0x5, 0x3, 0x9)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$auto_NL80211_CMD_EPCS_CFG(r2, 0x0, 0x11)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, 0x0, 0x51)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4610, 0x0)
prctl$auto(0x23, 0x80000000000a, 0x80000001, 0x0, 0x0)
r4 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0)
read$auto_proc_environ_operations_base(r4, &(0x7f0000000240)=""/80, 0x50)
mknod$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2, 0xffffffff)

9.582674625s ago: executing program 1 (id=147):
r0 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x84000, 0x0)
ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f0000000100)={0x3, 0x0, 0x7, 0x1, 0x6})
r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendfile$auto(r1, r1, &(0x7f0000000340)=0x7, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/pcm\x00', 0x88002, 0x0)
pread64$auto(r7, 0x0, 0x594c, 0x9fffffffd)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x40, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
preadv$auto(0x3, 0x0, 0x3, 0x3, 0x10)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
sendmmsg$auto(r6, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x3, 0xa505}, 0x7ff}, 0x7, 0x4008)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)

9.221592956s ago: executing program 3 (id=148):
bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
bind$auto(0x3, 0x0, 0x6a)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb})
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x5, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0)
socket(0xa, 0x3, 0x3b)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0)

9.218956363s ago: executing program 0 (id=149):
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6)
unshare$auto(0x40000080)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
lsm_set_self_attr$auto(0x1, &(0x7f0000000100)={0x68, 0x8, 0x80}, 0x80, 0x0)
r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0)
readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x20200, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/vulnerabilities/mmio_stale_data\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
ioctl$auto(0x20000000000003, 0x8947, 0x2)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0)
sendfile$auto(r5, r4, 0x0, 0x48)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r6, 0x0, 0xfff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0)
unshare$auto(0x40000080)
madvise$auto(0x0, 0xffffffffffff0009, 0x13)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'})

8.5353246s ago: executing program 2 (id=150):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4)
flock$auto(r0, 0x1)
read$auto_urandom_fops_random(r0, &(0x7f0000000540)=""/4096, 0x1000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x3, 0xb, 0x55becab1, 0x5, 0x0)
mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x171e02, 0x0)
ppoll$auto(&(0x7f0000000040)={r3, 0x2}, 0x10, &(0x7f00000000c0)={0x7, 0x65a29aea}, &(0x7f0000000100)={0x4}, 0x8)
openat$auto_state_fops_(0xffffffffffffff9c, 0x0, 0x450003, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x2c, 0x3, 0x0, 0x1, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0x106, 0x0, 0x1, [@nested={0x1d, 0x74, 0x0, 0x1, [@nested={0xfffffffffffffe4c, 0x4d}, @typed={0xa888, 0xd0, 0x0, 0x0, @u32=0xa888}, @typed={0x4, 0x3}, @generic="2a9d272f66", @nested={0x4, 0x33}]}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/veth0_to_bridge/interval_probe_time_ms\x00', 0x202, 0x0)
sendfile$auto(r7, r6, 0x0, 0x48)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x4, 0x0)
r8 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r8, 0x0, 0xe)

7.286745262s ago: executing program 2 (id=151):
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/nbd6/hctx0/tags_bitmap\x00', 0x60000, 0x0)
socket(0x10, 0x4, 0xffffffc0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0)
write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xc7\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcfn\x15\xc5D\xcct\xff\x84\xd2*\xf8=\x1b\x90Z\xc0\xd72\xbc\x14R\x80\x00\x1b\xca\xbdV\xb0)\x1b\xa1\xbaC\x91\xc8\x16\xc9\x1e\xb2\xd7\xb7\x88g\x98\x7f\x95\xb2-F\xf7\xb4y\x19\x8e\xd2}uy\xfa\x1c\x82h\x01\x136\xfb\xef\x93\xdc\x1a@\x91bD\xcexS\x82C\xf9\xd2Y\xe2\x18o\xd8\xdc\xc3\xac\xb2\x1d\xebR\xa9\x98B\x19\x9c\x1e\x11\x91\x17\xce\xc0\xb47{\xc73\xeb\xdf7\x03\xf22\xdf\xa9\x90P\xfd\xaf\xed\xa3B\xec\xab\x8b\xdb\xbaP\x99;\xd6\x98x\xbbF\xb2\xd7\xc4g\xdc>\xe7>3\xd8\xbe\x8a2\xf283\xd6\xbd\x86Hs{#\x9d\x05\x05\xf8\x8d\x873W\xd9\xde\x12\x01e\x96\fVT\xefWSs\xda\xe33\xa3\xbc\xa4\x8b\xf7\\h\xaa_Q\x9a\xe3Z;\xa7\xe2Tzx\xa7]Dh5\xad(\xf8\xdb\xe6\xb6\x12\x91\xfa\xe2\xea`\x92\xce\xaf>', 0x100000a3d7)
socket(0x1d, 0x2, 0x6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8004)
io_uring_setup$auto(0x40000002c55, 0x0)
socket(0xa, 0x1, 0x84)
socket(0x2, 0x1, 0x0)
openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/trace_marker\x00', 0x0, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa1\x00', 0x1, 0x0)
socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x1f, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64)
fchdir$auto(r1)

7.233977593s ago: executing program 1 (id=159):
mmap$auto(0x0, 0x0, 0xc00000072, 0xfffffffffffffff7, 0x1000000002, 0x8000)
r0 = io_uring_setup$auto(0x86, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6)
socket(0x28, 0x4, 0xffffffc0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1, 0x100000007, 0x800000000000000d, 0x8fd6, 0x19488, 0x3, 0x8, 0x7f, 0x2, 0xffffffffffffffff, 0xdfe, 0x8, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x128e2, 0x0)
write$auto(r2, &(0x7f00000001c0)='\b\x1c\xc7\x00\x80\x00\x00\x00\x00\x00\x00\x00', 0x81)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4)
splice$auto(r0, &(0x7f0000000200)=0x2, r2, &(0x7f0000000240)=0x9, 0x4dc0000000000000, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f00000004c0)={{0x1, 0x0, 0x0, 0x9, 0x5c, 0x4, 0xffff}, &(0x7f0000000440)=0xf8, &(0x7f0000000480)=0x6, 0x2, 0x4, 0xfffffffffffffff8, 0xd3, 0x5, 0xb, 0x101, 0x7, @inferred, @inferred=0xffffffffffffffff})
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="34ed35f1", @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf251600000018000180140002006e657464657673696d300000000000000500040008000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)
write$auto_console_fops_tty_io(r3, &(0x7f0000000e00)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde4727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e28782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee98a7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acbae1e2079abd86182a662bb1642c9346d7fba628fb012da293acef33b8b76a8885c2e5d685348b6148c5b44409f58d8d5f29344fe8a2e4c2432ae622bb1912ea65d5574bff895025bd72cd780d59cbaa0886afd5d6676d2de6266903115525c075cc3f75ce9eba3787a890e1f758f0e502c4c9c0538dc942cf4e2d69742edeeddb66b1d459fcf6f744b2c40111104ab21fd4e99b4477e25cc5a9af59108c8b2f569d4ba227c754f294fdc1e6b383fd89861a203f4d4ee33814aeb21ee411a0d6918533aa2450b1e35c97ab6f01f3829c8a4c33fe0fbc81dd579bbdb44eda4f335d2bc512ca7f38f603c29033c94df2c9533f4422432f574a021e90a0fe3a4cf54", 0xcb6)
socket(0x8, 0x2, 0x1)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x2, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

6.697962733s ago: executing program 3 (id=152):
openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = socket(0x1a, 0x1, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r2 = socket(0x2b, 0x1, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x8, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mlock$auto(0x112, 0x80006)
mlockall$auto(0x800000000000005)
madvise$auto(0x0, 0x200007, 0x19)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
getsockopt$auto_SO_TXREHASH(r0, 0xced5, 0x4a, &(0x7f0000000080)='/dev/kvm\x00', &(0x7f0000000180)=0x7)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
write$auto(0x3, 0x0, 0xfffffdef)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
socket(0x2, 0x5, 0x0)

6.626597016s ago: executing program 0 (id=153):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r0 = socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x20800, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0)
select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
mmap$auto(0x0, 0x400008, 0x0, 0x9b72, r0, 0x0)
write$auto(0x1, 0x0, 0x80000000)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
write$auto(0xca, 0x0, 0x2d9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x5400, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = prctl$auto_PR_SYS_DISPATCH_ON(0x1ce9, 0x1, r2, 0x1, 0x9)
read$auto_stat_fops_per_vm_kvm_main(r4, &(0x7f0000000340)=""/200, 0xc8)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
sched_setaffinity$auto(0x0, 0xcf4d, &(0x7f00000000c0)=0xffffffffffffffff)
clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9)
exit$auto(0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x128, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x10a, 0x2, 0x0, 0x1, [@generic="b3309cdb67b6a07ac313edc3b23b0cbb14504ba4ddbd9c7d719fecfcfa3b6c4ab45951ab3f3e4a1aef5b859fc45d505bbce3184280edf75a7513c433fc2f488b3c442960642593ffc07c7c9e496d8765b928f0836c19c1d9f75b00643c2a2d3ebd27664fc1185eac7ebe6f8882a861eeb1e19d71d47474e2eec614c7cd1a7414de99cd42524f724a5d722caa54dfb6b9fd7ecca681e521dbe273d886169ff1e01a397b17d174c3e347a7d2899c32a78f6e8b741638b76b5a4fed546594eec03cd3d61dc6d84cea54a15b", @typed={0x8, 0x30, 0x0, 0x0, @uid}, @typed={0x8, 0xa5, 0x0, 0x0, @str='%-@\x00'}, @typed={0x8, 0x10d, 0x0, 0x0, @fd=r1}, @nested={0x24, 0xf1, 0x0, 0x1, [@typed={0x1e, 0x7e, 0x0, 0x0, @str='/sys/kernel/debug/lru_gen\x00'}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8800}, 0x8010)

5.188299622s ago: executing program 2 (id=154):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8})
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
msync$auto(0x1ffff000, 0xffffffffffffbffb, 0x3)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400)
socket(0x22, 0x1, 0x100)
r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r1})
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/008/001\x00', 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff)
sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, 0x0, 0x801)
r4 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r4, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b)
mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
close_range$auto(r2, r5, 0x10001)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r6, 0x8000)
preadv2$auto(r6, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r6, 0x1261, 0x0)

4.77581s ago: executing program 0 (id=155):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0)
readv$auto(r0, &(0x7f0000000140)={0x0, 0x8}, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
write$auto(0x1, 0x0, 0x80000000)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0xecb02, 0x0)
mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/17, 0x11)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0xf, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0x1, 0x3, 0x4000000000006, 0x4, 0xb4, 0x9, 0x20000000006, 0x810006, 0x80, 0x0, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x1000000, 0xafa, 0x0, 0x0, 0x2886, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800000000]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="e40000002e3f63f06ff25c5279e81514c60c134030fb51da3e9b3fa9ba388a61ec839d25bcc51b52a7c4f11a7460f3cab8de0ad08e5e60ddb066d51779604f4db670e159c728daed9d234de1c14c40bd8397b7d4ef14c816207b52c4d10c69d5c7a35ab019a3b1bafce0b0ce89d88dd0bc1949e674a9a4dbb4266a5f657724f523eea2a355445da280990a07ce45a41d79482119446bbcdbfd7de1dc2ad40e74b4386454ba61b55dccd8165e36910d506da32471c049645eab", @ANYRES16, @ANYBLOB="010025bd7000fddbdf251f0000000e000201a9e68000b79db19b1c98000005002f0104000000080061000300000004008e0004004a019f002501685bbd35cdfee2217fae69a184f4eadae558fa1da560a6843009001756dcd263afedcf837c2da3e09adfedfe22e811d3301f2278e17090403e23f14b2175a95d2acd3ac389b852cf4a99e082fe28e9cdc4c54f7011f71e683b85d61100aefa162e117be6183c3161a11c06b1428cc994ff50118f4e480fcf3c3f61fda75a8bf148544ffaf27f1409ddd3b0e448c4d2b370fbaa0dd63c5eb97501e00008007e0050df0000"], 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xf0, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_CNTDWN_OFFS_BEACON={0x4c, 0xba, "36adaa01903c017ec72c5254e09bcae22868014262a51fc4417c6f61196fce870bcb49a9782d27a3b472c6cd0d8b902fe9ea438f81af5e30821608630524c9d9c54bcb3c8a8b3fb0"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_TID_CONFIG={0x88, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x68}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x2d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20004080}, 0x800)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
madvise$auto(0x0, 0x200007, 0x8)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x1, 0x541b, 0x8)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/buffer_size_kb\x00', 0x58102, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff)

4.363632651s ago: executing program 1 (id=156):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x302, 0x0)
timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000140)=0x6)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
inotify_rm_watch$auto(0xffffffffffffffff, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002d80)={0x40, r4, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="0ef9f18c"]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x10)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0xc0781, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0xa, 0x2, 0x88)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x8, 0x1, r6, @relative_id=0x13, 0xe600}, 0xf)

3.64896746s ago: executing program 3 (id=157):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
r0 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy15/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x80, 0x0)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
madvise$auto(0x0, 0xffffffffffff0001, 0xf65)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x9, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0x80}, {0x100, 0x1, 0x52, 0x85, 0x4, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}})
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0)
poll$auto(&(0x7f0000000040)={r2, 0x1, 0x40}, 0x8, 0x8000)
socket(0x1, 0x4, 0x4)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_OTPSELECT(0xffffffffffffffff, 0x80044d0d, &(0x7f00000000c0)=0x10009)
socket(0x2, 0x1, 0x0)
shutdown$auto(0x200000003, 0x2)
read$auto(r0, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy15/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x0)
connect$auto(r0, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa0c82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
socketpair$auto(0x1e, 0x5, 0x6, 0x0)
r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

3.647774931s ago: executing program 2 (id=158):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x0)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000)
r1 = io_uring_setup$auto(0x2, 0x0)
mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0)
r2 = fcntl$auto(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
read$auto(r3, 0x0, 0x2)
pwritev$auto(0x3, 0x0, 0x5, 0x3, 0x9)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$auto_NL80211_CMD_EPCS_CFG(r2, 0x0, 0x11)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, 0x0, 0x51)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4610, 0x0)
prctl$auto(0x23, 0x80000000000a, 0x80000001, 0x0, 0x0)
r4 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0)
read$auto_proc_environ_operations_base(r4, &(0x7f0000000240)=""/80, 0x50)
mknod$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2, 0xffffffff)

2.560616901s ago: executing program 0 (id=160):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4)
flock$auto(r0, 0x1)
read$auto_urandom_fops_random(r0, &(0x7f0000000540)=""/4096, 0x1000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x3, 0xb, 0x55becab1, 0x5, 0x0)
mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x171e02, 0x0)
ppoll$auto(&(0x7f0000000040)={r3, 0x2}, 0x10, &(0x7f00000000c0)={0x7, 0x65a29aea}, &(0x7f0000000100)={0x4}, 0x8)
openat$auto_state_fops_(0xffffffffffffff9c, 0x0, 0x450003, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x2c, 0x3, 0x0, 0x1, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0x106, 0x0, 0x1, [@nested={0x1d, 0x74, 0x0, 0x1, [@nested={0xfffffffffffffe4c, 0x4d}, @typed={0xa888, 0xd0, 0x0, 0x0, @u32=0xa888}, @typed={0x4, 0x3}, @generic="2a9d272f66", @nested={0x4, 0x33}]}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/veth0_to_bridge/interval_probe_time_ms\x00', 0x202, 0x0)
sendfile$auto(r7, r6, 0x0, 0x48)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x4, 0x0)
r8 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r8, 0x0, 0xe)

2.132820752s ago: executing program 1 (id=161):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r1, 0x80184132, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), 0xffffffffffffffff)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_clone3(&(0x7f0000000880)={0x0, &(0x7f0000000640)=<r4=>0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0), {0x8}, &(0x7f0000000700)=""/231, 0xe7, &(0x7f0000000800)=""/40, &(0x7f0000000840)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r3}}, 0x58)
waitid$auto_P_PIDFD(0x3, r4, &(0x7f0000000380)={@siginfo_0_0={0x6, 0x7f, 0x0, @_timer={<r5=>0x0, 0xffff, @sival_int=0x6, 0x5}}}, 0xbf2b, &(0x7f0000000440)={{0x1, 0x401}, {0x8000000000000000, 0x4}, 0x2511, 0xfffffffffffffffb, 0x1, 0x3, 0x7, 0x0, 0x4, 0x3, 0x9, 0x7fffffff, 0x80, 0x6072, 0x3, 0x6})
waitid$auto(0x400, r3, &(0x7f0000000500)={@siginfo_0_0={0x9b61, 0x7, 0x3, @_timer={r5, 0x4, @sival_int, 0xffffffff}}}, 0x54a9, &(0x7f0000000580)={{0x7, 0x2}, {0xb, 0x7}, 0xe5b5, 0x4, 0x2, 0x3, 0x28f42a7d, 0x7, 0x2, 0x8, 0x3a4b2cca, 0x5, 0x4, 0xff, 0x1, 0x4})
getsockopt$auto_SO_BROADCAST(r0, 0x6, 0x6, &(0x7f00000000c0)='~-,}\x00', &(0x7f0000000140)=0xc0000000)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0)
madvise$auto(0x0, 0x20499d, 0x9)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
ioctl$auto_BLKRRPART(r6, 0x125f, 0x700000000000000)
open(0x0, 0x161342, 0x100)
open(0x0, 0xeee00, 0x31)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec23\x00', 0x4700, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0x14f602, 0x0)
bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000340)=@bpf_attr_0={0x0, 0x1, 0x1, 0x5, 0x4, 0xffffffffffffffff, 0x9, "38b7bbd1f7965a807264335b76c22027", 0x0, 0xffffffffffffffff, 0x22, 0x10, 0x7, 0x748}, 0x400)
r7 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x4909b6fb, 0x1ffde, 0x4007, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0xffff, 0x10000, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x7f, 0x0, [0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x400000]}, 0x202, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

2.129249057s ago: executing program 3 (id=169):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x302, 0x0)
timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000140)=0x6)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
inotify_rm_watch$auto(0xffffffffffffffff, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002d80)={0x40, r4, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="0ef9f18c"]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x10)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0xc0781, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0xa, 0x2, 0x88)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x8, 0x1, r6, @relative_id=0x13, 0xe600}, 0xf)

1.511604095s ago: executing program 2 (id=162):
bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
bind$auto(0x3, 0x0, 0x6a)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb})
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x5, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0)
socket(0xa, 0x3, 0x3b)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0)

1.496514891s ago: executing program 0 (id=171):
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0)
ioctl$auto_CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f00000001c0)={"8911bd3a", 0x1, 0x0, 0x6, 0x4, 0x6, "feaf587cdf4d2f534a1c88d3e40a00", "e6cf6512", "f34cae3a", "10a991b3", ["3ae887a128f1d8c79420d880", "b11feafce4d296d8c985d069", "0149f0a7102c3fffab592db0", "0059c09dca7de9bdbbc6be07"]})
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x80703, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0xa, 0x1, 0x100)
pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000280)=0xfffffffffffffffd)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000340)=""/156, 0x9c)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_matches\x00', 0x80, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000180)=""/248, 0xf8)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000001140)='/proc/self/oom_adj\x00', 0x8042, 0x0)
read$auto(r5, 0x0, 0x1f40)
r6 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x1, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0xa}, 0x3)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x5, 0x7, 0x4, 0xff, 0x8e6, 0x6, 0xfac4, 0x3, 0x3, 0x8003, 0x0, 0x7, 0x2, 0x1, 0x2, 0x6]}, 0x0)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x0, 0xe1, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x0, 0x0)
lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)

969.968764ms ago: executing program 3 (id=163):
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840)
sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x34000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x3f3)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6)
socket(0x10, 0x4, 0xffffffc0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x15, 0x5, 0x0)
socket(0x2, 0x1, 0x106)
getsockopt$auto(0x4, 0x6, 0x17, 0xfffffffffffffffc, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0)
sendfile$auto(r2, 0x3, 0x0, 0x7)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006)
open(0x0, 0x1e1401, 0xe5)
mmap$auto(0x0, 0xda32, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
clock_nanosleep$auto(0x9, 0x0, 0x0, 0xffffffffffffffff)
tkill$auto(0x0, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_batadv\x00'})
write$auto(0x3, 0x0, 0x100082)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)

0s ago: executing program 2 (id=164):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x100000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2, 0x801, 0x6)
connect$auto(0x3, 0x0, 0x54)
sendfile$auto(0xffffffffffffffff, r0, 0x0, 0x7ffff000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0)
pread64$auto(r1, 0x0, 0x8, 0x8000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0xa, 0x1, 0x100)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0xbb, 0x400008, 0x5000df, 0x7fff, 0xffffffffffffffff, 0x1000000000080)
mmap$auto(0x0, 0x5c, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r2, 0x0, 0x1f40)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts.
[   88.227353][ T5836] cgroup: Unknown subsys name 'net'
[   88.358179][ T5836] cgroup: Unknown subsys name 'cpuset'
[   88.367155][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   90.286986][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   92.467818][ T5167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.476173][ T5167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.484660][ T5167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.493550][ T5167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.503879][ T5167] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.584392][ T5167] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.599531][ T5167] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.608604][ T5167] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.654215][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.662663][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.725824][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.733417][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.742523][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.742858][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.756975][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.757439][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.772720][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.776740][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.788192][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.793827][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.401024][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   93.484307][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   93.496871][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   93.642699][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   93.742725][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.750154][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.757859][ T5845] bridge_slave_0: entered allmulticast mode
[   93.766895][ T5845] bridge_slave_0: entered promiscuous mode
[   93.820284][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.827963][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.835532][ T5845] bridge_slave_1: entered allmulticast mode
[   93.842709][ T5845] bridge_slave_1: entered promiscuous mode
[   93.850568][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.859210][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.867127][ T5852] bridge_slave_0: entered allmulticast mode
[   93.875699][ T5852] bridge_slave_0: entered promiscuous mode
[   93.888962][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.896377][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.904104][ T5850] bridge_slave_0: entered allmulticast mode
[   93.911317][ T5850] bridge_slave_0: entered promiscuous mode
[   93.948008][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.956171][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.964455][ T5852] bridge_slave_1: entered allmulticast mode
[   93.971771][ T5852] bridge_slave_1: entered promiscuous mode
[   93.985221][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.992377][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.000222][ T5850] bridge_slave_1: entered allmulticast mode
[   94.007508][ T5850] bridge_slave_1: entered promiscuous mode
[   94.036564][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.091515][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.118090][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.146419][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.172078][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.196877][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.205712][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.212902][ T5854] bridge_slave_0: entered allmulticast mode
[   94.220435][ T5854] bridge_slave_0: entered promiscuous mode
[   94.228314][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.235612][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.242923][ T5854] bridge_slave_1: entered allmulticast mode
[   94.250554][ T5854] bridge_slave_1: entered promiscuous mode
[   94.259386][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.331595][ T5845] team0: Port device team_slave_0 added
[   94.344486][ T5852] team0: Port device team_slave_0 added
[   94.368415][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.392306][ T5845] team0: Port device team_slave_1 added
[   94.413061][ T5852] team0: Port device team_slave_1 added
[   94.436038][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.447984][ T5850] team0: Port device team_slave_0 added
[   94.458106][ T5850] team0: Port device team_slave_1 added
[   94.519713][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.528074][ T5167] Bluetooth: hci0: command tx timeout
[   94.534354][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.560379][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.572672][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.580162][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.606443][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.644541][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.651527][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.677580][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.689353][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.696723][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.722947][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.745648][ T5854] team0: Port device team_slave_0 added
[   94.753783][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.760771][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.787321][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.811540][ T5854] team0: Port device team_slave_1 added
[   94.818247][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.825257][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.852252][ T5848] Bluetooth: hci2: command tx timeout
[   94.852262][ T5859] Bluetooth: hci1: command tx timeout
[   94.863668][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.866385][ T5167] Bluetooth: hci3: command tx timeout
[   94.928537][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.935598][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.962290][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.015888][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.022978][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.049777][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.066113][ T5852] hsr_slave_0: entered promiscuous mode
[   95.072443][ T5852] hsr_slave_1: entered promiscuous mode
[   95.098245][ T5845] hsr_slave_0: entered promiscuous mode
[   95.105145][ T5845] hsr_slave_1: entered promiscuous mode
[   95.111241][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.119152][ T5845] Cannot create hsr debugfs directory
[   95.153099][ T5850] hsr_slave_0: entered promiscuous mode
[   95.159945][ T5850] hsr_slave_1: entered promiscuous mode
[   95.166931][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.174734][ T5850] Cannot create hsr debugfs directory
[   95.324274][ T5854] hsr_slave_0: entered promiscuous mode
[   95.330608][ T5854] hsr_slave_1: entered promiscuous mode
[   95.337391][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.345104][ T5854] Cannot create hsr debugfs directory
[   95.748424][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   95.777750][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   95.790678][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   95.811096][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   95.862047][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   95.874937][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.892898][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   95.914605][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   95.994182][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.019756][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.035897][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.049029][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.148578][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.181128][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   96.205379][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.227987][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   96.308874][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.349758][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.400279][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   96.431816][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   96.446503][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.453912][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.479976][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.487235][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.509350][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.516618][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.531582][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.538815][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.554496][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.603896][ T5167] Bluetooth: hci0: command tx timeout
[   96.637563][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   96.676977][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.696251][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.703502][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.751893][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   96.782722][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   96.799979][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.807163][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.879753][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.887038][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.924628][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.925180][ T5167] Bluetooth: hci3: command tx timeout
[   96.931803][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.945511][ T5848] Bluetooth: hci1: command tx timeout
[   96.951389][ T5848] Bluetooth: hci2: command tx timeout
[   97.250097][   T24] cfg80211: failed to load regulatory.db
[   97.364114][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.522915][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.570251][ T5852] veth0_vlan: entered promiscuous mode
[   97.638548][ T5852] veth1_vlan: entered promiscuous mode
[   97.667300][ T5845] veth0_vlan: entered promiscuous mode
[   97.701815][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.752091][ T5845] veth1_vlan: entered promiscuous mode
[   97.771874][ T5852] veth0_macvtap: entered promiscuous mode
[   97.797634][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.822028][ T5852] veth1_macvtap: entered promiscuous mode
[   97.881013][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.901211][ T5854] veth0_vlan: entered promiscuous mode
[   97.921429][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.952328][ T5854] veth1_vlan: entered promiscuous mode
[   97.968763][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.980313][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.990195][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.999008][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.034041][ T5845] veth0_macvtap: entered promiscuous mode
[   98.048394][ T5850] veth0_vlan: entered promiscuous mode
[   98.062809][ T5845] veth1_macvtap: entered promiscuous mode
[   98.086432][ T5850] veth1_vlan: entered promiscuous mode
[   98.129287][ T5854] veth0_macvtap: entered promiscuous mode
[   98.144086][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.166585][ T5854] veth1_macvtap: entered promiscuous mode
[   98.183195][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.225754][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.235521][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.245427][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.254407][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.289244][ T5850] veth0_macvtap: entered promiscuous mode
[   98.319904][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.333213][ T5850] veth1_macvtap: entered promiscuous mode
[   98.370990][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.379962][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.397193][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.421412][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.458994][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.468329][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.477233][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.487892][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.504739][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.563875][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.576708][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.578107][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.596896][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.607299][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.616955][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.657801][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.676837][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.686242][ T5167] Bluetooth: hci0: command tx timeout
[   98.774024][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.798348][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.847799][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   98.987098][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.004233][ T5167] Bluetooth: hci1: command tx timeout
[   99.009719][ T5167] Bluetooth: hci3: command tx timeout
[   99.015284][ T5848] Bluetooth: hci2: command tx timeout
[   99.016201][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.105581][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   99.130564][ T5940] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use)
[   99.175019][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.182930][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.292931][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.334204][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.413046][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.439242][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.943921][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.146924][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.426161][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  100.486120][   T30] audit: type=1800 audit(1753612723.898:2): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5" name="members" dev="configfs" ino=7444 res=0 errno=0
[  100.593864][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.774942][ T5167] Bluetooth: hci0: command tx timeout
[  101.010574][ T5966] Console: switching to colour VGA+ 80x25
[  101.038392][ T5966] Zero length message leads to an empty skb
[  101.083773][ T5167] Bluetooth: hci1: command tx timeout
[  101.093644][ T5167] Bluetooth: hci3: command tx timeout
[  101.095490][ T5848] Bluetooth: hci2: command tx timeout
[  101.347724][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  101.608344][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  101.616963][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  102.038582][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[  102.484959][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.493720][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.502641][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.990921][ T5990] FAULT_INJECTION: forcing a failure.
[  102.990921][ T5990] name failslab, interval 1, probability 0, space 0, times 1
[  103.006836][ T5990] CPU: 0 UID: 0 PID: 5990 Comm: syz.3.12 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  103.006863][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  103.006874][ T5990] Call Trace:
[  103.006881][ T5990]  <TASK>
[  103.006888][ T5990]  dump_stack_lvl+0x16c/0x1f0
[  103.006912][ T5990]  should_fail_ex+0x512/0x640
[  103.006934][ T5990]  should_failslab+0xc2/0x120
[  103.006956][ T5990]  __kmalloc_cache_noprof+0x6a/0x3e0
[  103.006984][ T5990]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  103.007014][ T5990]  ? tipc_group_create+0xbc/0x660
[  103.007047][ T5990]  tipc_group_create+0xbc/0x660
[  103.007080][ T5990]  tipc_setsockopt+0x7f0/0xdb0
[  103.007103][ T5990]  ? __pfx_tipc_setsockopt+0x10/0x10
[  103.007129][ T5990]  ? __fget_files+0x204/0x3c0
[  103.007160][ T5990]  ? __pfx_tipc_setsockopt+0x10/0x10
[  103.007182][ T5990]  do_sock_setsockopt+0xf0/0x1d0
[  103.007209][ T5990]  __sys_setsockopt+0x120/0x1a0
[  103.007230][ T5990]  __x64_sys_setsockopt+0xbd/0x160
[  103.007247][ T5990]  ? do_syscall_64+0x91/0x490
[  103.007264][ T5990]  ? lockdep_hardirqs_on+0x7c/0x110
[  103.007281][ T5990]  do_syscall_64+0xcd/0x490
[  103.007301][ T5990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.007320][ T5990] RIP: 0033:0x7f0acef8e9a9
[  103.007336][ T5990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.007354][ T5990] RSP: 002b:00007f0acfe98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  103.007371][ T5990] RAX: ffffffffffffffda RBX: 00007f0acf1b5fa0 RCX: 00007f0acef8e9a9
[  103.007382][ T5990] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006
[  103.007393][ T5990] RBP: 00007f0acf010d69 R08: 0000000000000014 R09: 0000000000000000
[  103.007403][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.007413][ T5990] R13: 0000000000000000 R14: 00007f0acf1b5fa0 R15: 00007ffd70734728
[  103.007435][ T5990]  </TASK>
[  103.384356][ T6000] random: crng reseeded on system resumption
[  103.660200][ T6006] Restarting kernel threads ...
[  103.690383][ T6006] Done restarting kernel threads.
[  104.679705][ T5990] kexec: Could not allocate control_code_buffer
[  106.032822][ T6035] random: crng reseeded on system resumption
[  106.158533][ T6036] kAFS: No cell specified
[  106.641405][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.682764][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.086571][ T6073] FAULT_INJECTION: forcing a failure.
[  110.086571][ T6073] name failslab, interval 1, probability 0, space 0, times 0
[  110.173638][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: syz.3.26 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  110.173667][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  110.173685][ T6073] Call Trace:
[  110.173691][ T6073]  <TASK>
[  110.173699][ T6073]  dump_stack_lvl+0x16c/0x1f0
[  110.173723][ T6073]  should_fail_ex+0x512/0x640
[  110.173742][ T6073]  ? __kmalloc_noprof+0xbf/0x510
[  110.173763][ T6073]  ? ima_write_template_field_data+0x5d/0x1f0
[  110.173790][ T6073]  should_failslab+0xc2/0x120
[  110.173812][ T6073]  __kmalloc_noprof+0xd2/0x510
[  110.173835][ T6073]  ima_write_template_field_data+0x5d/0x1f0
[  110.173867][ T6073]  ima_eventname_init_common+0x1b8/0x260
[  110.173897][ T6073]  ? __pfx_ima_eventname_init_common+0x10/0x10
[  110.173928][ T6073]  ? trace_kmalloc+0x2b/0xd0
[  110.173948][ T6073]  ? __kmalloc_noprof+0x242/0x510
[  110.173971][ T6073]  ima_alloc_init_template+0x39d/0x720
[  110.173995][ T6073]  ? rcu_is_watching+0x12/0xc0
[  110.174017][ T6073]  ima_store_measurement+0x1eb/0x5c0
[  110.174042][ T6073]  ? __pfx_ima_store_measurement+0x10/0x10
[  110.174066][ T6073]  ? vfs_getxattr_alloc+0xec/0x340
[  110.174101][ T6073]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  110.174123][ T6073]  process_measurement+0x1ddb/0x23e0
[  110.174149][ T6073]  ? __mutex_trylock_common+0xe9/0x250
[  110.174175][ T6073]  ? __pfx_process_measurement+0x10/0x10
[  110.174197][ T6073]  ? __pfx___might_resched+0x10/0x10
[  110.174218][ T6073]  ? rcu_is_watching+0x12/0xc0
[  110.174236][ T6073]  ? find_held_lock+0x2b/0x80
[  110.174255][ T6073]  ? tracing_check_open_get_tr.part.0+0xad/0x130
[  110.174302][ T6073]  ? tracing_check_open_get_tr.part.0+0xb2/0x130
[  110.174327][ T6073]  ? inode_to_bdi+0x9e/0x160
[  110.174350][ T6073]  ima_file_check+0xc5/0x110
[  110.174369][ T6073]  ? __pfx_ima_file_check+0x10/0x10
[  110.174394][ T6073]  security_file_post_open+0x8e/0x210
[  110.174423][ T6073]  path_openat+0x1404/0x2cb0
[  110.174448][ T6073]  ? __pfx_path_openat+0x10/0x10
[  110.174467][ T6073]  ? __lock_acquire+0xb8a/0x1c90
[  110.174494][ T6073]  do_filp_open+0x20b/0x470
[  110.174512][ T6073]  ? __pfx_do_filp_open+0x10/0x10
[  110.174546][ T6073]  ? alloc_fd+0x471/0x7d0
[  110.174580][ T6073]  do_sys_openat2+0x11b/0x1d0
[  110.174604][ T6073]  ? __pfx_do_sys_openat2+0x10/0x10
[  110.174637][ T6073]  __x64_sys_openat+0x174/0x210
[  110.174662][ T6073]  ? __pfx___x64_sys_openat+0x10/0x10
[  110.174703][ T6073]  do_syscall_64+0xcd/0x490
[  110.174724][ T6073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.174743][ T6073] RIP: 0033:0x7f0acef8e9a9
[  110.174758][ T6073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.174776][ T6073] RSP: 002b:00007f0acfe98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  110.174793][ T6073] RAX: ffffffffffffffda RBX: 00007f0acf1b5fa0 RCX: 00007f0acef8e9a9
[  110.174805][ T6073] RDX: 0000000000080100 RSI: 0000200000008140 RDI: ffffffffffffff9c
[  110.174816][ T6073] RBP: 00007f0acf010d69 R08: 0000000000000000 R09: 0000000000000000
[  110.174826][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.174836][ T6073] R13: 0000000000000000 R14: 00007f0acf1b5fa0 R15: 00007ffd70734728
[  110.174859][ T6073]  </TASK>
[  110.175083][   T30] audit: type=1804 audit(1753612733.658:3): pid=6073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.26" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb" dev="tracefs" ino=1301 res=0 errno=0
[  110.956829][ T6087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  111.105482][ T6090] sysfs_service_op_store: Client not running :-5:
[  111.947472][ T6099] input: jJǸ���;9�%v����l��Q�	J86�� as /devices/virtual/input/input6
[  112.197435][ T6090] sysfs_service_op_show: Client not running :-5:
[  114.828578][ T6118] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  116.812583][ T6155] process 'syz.3.42' launched ':,' with NULL argv: empty string added
[  121.977799][ T6220] warning: `syz.1.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211

syzkaller
syzkaller login: [  124.972591][ T5848] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  126.363650][ T6271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.63'.
[  126.749344][ T6271] Invalid ELF header magic: != ELF
[  128.027806][ T6271] could not allocate digest TFM handle 
[  128.045996][ T6278] could not allocate digest TFM handle 
[  128.325727][ T6295] random: crng reseeded on system resumption
[  129.204145][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.318328][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.356913][ T6313] __vm_enough_memory: pid: 6313, comm: syz.3.67, bytes: 4398046511104 not enough memory for the allocation
[  131.204453][ T6327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.70'.
[  131.213474][ T6327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.221036][ T6327] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.295772][ T6327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.303268][ T6327] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.321522][ T6348] FAULT_INJECTION: forcing a failure.
[  133.321522][ T6348] name failslab, interval 1, probability 0, space 0, times 0
[  133.334714][ T6348] CPU: 1 UID: 0 PID: 6348 Comm: syz.0.74 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  133.334755][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  133.334772][ T6348] Call Trace:
[  133.334782][ T6348]  <TASK>
[  133.334794][ T6348]  dump_stack_lvl+0x16c/0x1f0
[  133.334822][ T6348]  should_fail_ex+0x512/0x640
[  133.334840][ T6348]  ? __kmalloc_noprof+0xbf/0x510
[  133.334861][ T6348]  ? __register_sysctl_table+0xb3/0x1900
[  133.334881][ T6348]  should_failslab+0xc2/0x120
[  133.334903][ T6348]  __kmalloc_noprof+0xd2/0x510
[  133.334928][ T6348]  __register_sysctl_table+0xb3/0x1900
[  133.334950][ T6348]  ? is_module_address+0x5f/0xf0
[  133.334981][ T6348]  ? __pfx___register_sysctl_table+0x10/0x10
[  133.335001][ T6348]  ? is_module_address+0x69/0xf0
[  133.335026][ T6348]  ? register_net_sysctl_sz+0x228/0x3e0
[  133.335061][ T6348]  ? __asan_memcpy+0x3c/0x60
[  133.335105][ T6348]  sysctl_route_net_init+0x15e/0x2c0
[  133.335133][ T6348]  ? __pfx_sysctl_route_net_init+0x10/0x10
[  133.335158][ T6348]  ops_init+0x1df/0x5f0
[  133.335181][ T6348]  setup_net+0x1ff/0x510
[  133.335200][ T6348]  ? lockdep_init_map_type+0x5c/0x280
[  133.335226][ T6348]  ? __pfx_setup_net+0x10/0x10
[  133.335248][ T6348]  ? debug_mutex_init+0x37/0x70
[  133.335268][ T6348]  copy_net_ns+0x2a6/0x5f0
[  133.335294][ T6348]  create_new_namespaces+0x3ea/0xa90
[  133.335319][ T6348]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  133.335342][ T6348]  ksys_unshare+0x45b/0xa40
[  133.335368][ T6348]  ? __pfx_ksys_unshare+0x10/0x10
[  133.335393][ T6348]  ? xfd_validate_state+0x61/0x180
[  133.335434][ T6348]  __x64_sys_unshare+0x31/0x40
[  133.335458][ T6348]  do_syscall_64+0xcd/0x490
[  133.335479][ T6348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.335497][ T6348] RIP: 0033:0x7fe3ef18e9a9
[  133.335513][ T6348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.335531][ T6348] RSP: 002b:00007fe3effad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  133.335549][ T6348] RAX: ffffffffffffffda RBX: 00007fe3ef3b5fa0 RCX: 00007fe3ef18e9a9
[  133.335560][ T6348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  133.335570][ T6348] RBP: 00007fe3ef210d69 R08: 0000000000000000 R09: 0000000000000000
[  133.335581][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.335591][ T6348] R13: 0000000000000000 R14: 00007fe3ef3b5fa0 R15: 00007ffe50cd49d8
[  133.335613][ T6348]  </TASK>
[  136.093835][ T6372] random: crng reseeded on system resumption
[  136.811387][ T6375] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  137.349877][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.360581][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.540789][ T6377] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[  138.212787][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  138.220810][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  139.501100][ T6417] Invalid ELF header magic: != ELF
[  140.559878][ T6432] phram: not enough arguments
[  140.643646][ T6432] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12
[  141.839392][ T6442] syz.3.87 uses obsolete (PF_INET,SOCK_PACKET)
[  142.276369][ T6450] netlink: 342 bytes leftover after parsing attributes in process `syz.0.88'.
[  144.440626][ T6487] FAULT_INJECTION: forcing a failure.
[  144.440626][ T6487] name failslab, interval 1, probability 0, space 0, times 0
[  144.484567][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.1.96 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  144.484615][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  144.484632][ T6487] Call Trace:
[  144.484643][ T6487]  <TASK>
[  144.484655][ T6487]  dump_stack_lvl+0x16c/0x1f0
[  144.484692][ T6487]  should_fail_ex+0x512/0x640
[  144.484722][ T6487]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  144.484760][ T6487]  should_failslab+0xc2/0x120
[  144.484795][ T6487]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  144.484828][ T6487]  ? __d_alloc+0x31/0xaa0
[  144.484866][ T6487]  __d_alloc+0x31/0xaa0
[  144.484903][ T6487]  d_alloc_pseudo+0x1c/0xc0
[  144.484944][ T6487]  alloc_file_pseudo+0xcf/0x230
[  144.484986][ T6487]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  144.485037][ T6487]  __shmem_file_setup+0x1a3/0x330
[  144.485086][ T6487]  shmem_zero_setup+0x93/0x1a0
[  144.485117][ T6487]  __mmap_region+0x1ece/0x25e0
[  144.485152][ T6487]  ? __pfx___mmap_region+0x10/0x10
[  144.485182][ T6487]  ? rcu_is_watching+0x12/0xc0
[  144.485234][ T6487]  ? rcu_is_watching+0x12/0xc0
[  144.485268][ T6487]  ? trace_sched_exit_tp+0xde/0x130
[  144.485306][ T6487]  ? __schedule+0x1181/0x5dd0
[  144.485359][ T6487]  ? __lock_acquire+0xb21/0x1c90
[  144.485416][ T6487]  ? __pfx___schedule+0x10/0x10
[  144.485511][ T6487]  ? trace_cap_capable+0x18d/0x200
[  144.485562][ T6487]  mmap_region+0x1ab/0x3f0
[  144.485593][ T6487]  ? __get_unmapped_area+0x267/0x440
[  144.485638][ T6487]  do_mmap+0xa3e/0x1210
[  144.485685][ T6487]  ? __pfx_do_mmap+0x10/0x10
[  144.485726][ T6487]  ? __pfx_down_write_killable+0x10/0x10
[  144.485769][ T6487]  vm_mmap_pgoff+0x281/0x450
[  144.485812][ T6487]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  144.485858][ T6487]  ? __x64_sys_futex+0x1e0/0x4c0
[  144.485893][ T6487]  ? __x64_sys_futex+0x1e9/0x4c0
[  144.485935][ T6487]  ksys_mmap_pgoff+0x7d/0x5c0
[  144.485973][ T6487]  ? xfd_validate_state+0x61/0x180
[  144.486012][ T6487]  ? __pfx_ksys_write+0x10/0x10
[  144.486045][ T6487]  __x64_sys_mmap+0x125/0x190
[  144.486092][ T6487]  do_syscall_64+0xcd/0x490
[  144.486126][ T6487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.486155][ T6487] RIP: 0033:0x7f38fd18e9a9
[  144.486180][ T6487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.486209][ T6487] RSP: 002b:00007f38fdf85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  144.486246][ T6487] RAX: ffffffffffffffda RBX: 00007f38fd3b5fa0 RCX: 00007f38fd18e9a9
[  144.486266][ T6487] RDX: 0000000000100003 RSI: 0000000002020009 RDI: 0000000000000000
[  144.486283][ T6487] RBP: 00007f38fd210d69 R08: fffffffffffffffa R09: 0000000000000000
[  144.486301][ T6487] R10: 0000009000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  144.486319][ T6487] R13: 0000000000000000 R14: 00007f38fd3b5fa0 R15: 00007fffddd93e98
[  144.486359][ T6487]  </TASK>
[  147.459419][ T6478] syz.2.94 (6478) used greatest stack depth: 21096 bytes left
[  147.959787][ T6524] FAULT_INJECTION: forcing a failure.
[  147.959787][ T6524] name failslab, interval 1, probability 0, space 0, times 0
[  148.016875][ T6524] CPU: 0 UID: 0 PID: 6524 Comm: syz.3.103 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  148.016919][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  148.016936][ T6524] Call Trace:
[  148.016946][ T6524]  <TASK>
[  148.016958][ T6524]  dump_stack_lvl+0x16c/0x1f0
[  148.016992][ T6524]  should_fail_ex+0x512/0x640
[  148.017021][ T6524]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  148.017070][ T6524]  should_failslab+0xc2/0x120
[  148.017104][ T6524]  __kmalloc_cache_noprof+0x6a/0x3e0
[  148.017147][ T6524]  ? copy_time_ns+0xf6/0x580
[  148.017181][ T6524]  copy_time_ns+0xf6/0x580
[  148.017206][ T6524]  ? copy_cgroup_ns+0x71/0x700
[  148.017251][ T6524]  create_new_namespaces+0x48a/0xa90
[  148.017295][ T6524]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  148.017333][ T6524]  ksys_unshare+0x45b/0xa40
[  148.017378][ T6524]  ? __pfx_ksys_unshare+0x10/0x10
[  148.017418][ T6524]  ? xfd_validate_state+0x61/0x180
[  148.017465][ T6524]  __x64_sys_unshare+0x31/0x40
[  148.017502][ T6524]  do_syscall_64+0xcd/0x490
[  148.017535][ T6524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.017563][ T6524] RIP: 0033:0x7f0acef8e9a9
[  148.017593][ T6524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.017620][ T6524] RSP: 002b:00007f0acfe98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  148.017647][ T6524] RAX: ffffffffffffffda RBX: 00007f0acf1b5fa0 RCX: 00007f0acef8e9a9
[  148.017666][ T6524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080
[  148.017684][ T6524] RBP: 00007f0acf010d69 R08: 0000000000000000 R09: 0000000000000000
[  148.017700][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  148.017717][ T6524] R13: 0000000000000000 R14: 00007f0acf1b5fa0 R15: 00007ffd70734728
[  148.017754][ T6524]  </TASK>
[  148.215676][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'.
[  148.225225][ T6525] vcan0: entered promiscuous mode
[  148.278162][ T6524] FAULT_INJECTION: forcing a failure.
[  148.278162][ T6524] name failslab, interval 1, probability 0, space 0, times 0
[  148.355878][ T6524] CPU: 0 UID: 0 PID: 6524 Comm: syz.3.103 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  148.355907][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  148.355918][ T6524] Call Trace:
[  148.355925][ T6524]  <TASK>
[  148.355932][ T6524]  dump_stack_lvl+0x16c/0x1f0
[  148.355956][ T6524]  should_fail_ex+0x512/0x640
[  148.355975][ T6524]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  148.355998][ T6524]  should_failslab+0xc2/0x120
[  148.356019][ T6524]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  148.356038][ T6524]  ? inode_set_ctime_current+0x2a1/0x8f0
[  148.356059][ T6524]  ? __d_alloc+0x31/0xaa0
[  148.356081][ T6524]  __d_alloc+0x31/0xaa0
[  148.356111][ T6524]  d_alloc_pseudo+0x1c/0xc0
[  148.356134][ T6524]  alloc_file_pseudo+0xcf/0x230
[  148.356159][ T6524]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  148.356183][ T6524]  ? hugetlbfs_get_inode+0x31f/0x730
[  148.356210][ T6524]  hugetlb_file_setup+0x4cd/0x620
[  148.356236][ T6524]  ksys_mmap_pgoff+0x189/0x5c0
[  148.356264][ T6524]  __x64_sys_mmap+0x125/0x190
[  148.356294][ T6524]  do_syscall_64+0xcd/0x490
[  148.356315][ T6524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.356333][ T6524] RIP: 0033:0x7f0acef8e9a9
[  148.356348][ T6524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.356367][ T6524] RSP: 002b:00007f0acfe98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  148.356385][ T6524] RAX: ffffffffffffffda RBX: 00007f0acf1b5fa0 RCX: 00007f0acef8e9a9
[  148.356396][ T6524] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000
[  148.356406][ T6524] RBP: 00007f0acf010d69 R08: 0000000000000401 R09: 0000300000000000
[  148.356417][ T6524] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000
[  148.356427][ T6524] R13: 0000000000000000 R14: 00007f0acf1b5fa0 R15: 00007ffd70734728
[  148.356449][ T6524]  </TASK>
[  150.463948][ T6548] openvswitch: netlink: Flow key attribute not present in set flow.
[  151.331830][ T6549] random: crng reseeded on system resumption
[  152.327632][ T6567] ubi0: attaching mtd0
[  152.369874][ T6567] ubi0: scanning is finished
[  152.421628][ T6567] ubi0: empty MTD device detected
[  152.427012][ T6567] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record
[  152.581149][ T6574] FAULT_INJECTION: forcing a failure.
[  152.581149][ T6574] name failslab, interval 1, probability 0, space 0, times 0
[  152.624226][ T6574] CPU: 0 UID: 0 PID: 6574 Comm: syz.2.112 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  152.624270][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  152.624287][ T6574] Call Trace:
[  152.624298][ T6574]  <TASK>
[  152.624310][ T6574]  dump_stack_lvl+0x16c/0x1f0
[  152.624345][ T6574]  should_fail_ex+0x512/0x640
[  152.624374][ T6574]  ? __kmalloc_node_noprof+0xc5/0x500
[  152.624408][ T6574]  should_failslab+0xc2/0x120
[  152.624439][ T6574]  __kmalloc_node_noprof+0xd8/0x500
[  152.624465][ T6574]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  152.624492][ T6574]  ? alloc_slab_obj_exts+0x41/0xa0
[  152.624536][ T6574]  alloc_slab_obj_exts+0x41/0xa0
[  152.624577][ T6574]  new_slab+0x283/0x330
[  152.624617][ T6574]  ___slab_alloc+0xd9c/0x1940
[  152.624657][ T6574]  ? alloc_tty_struct+0x96/0x8c0
[  152.624691][ T6574]  ? new_slab+0x2b1/0x330
[  152.624742][ T6574]  ? alloc_tty_struct+0x96/0x8c0
[  152.624773][ T6574]  ? __slab_alloc.constprop.0+0x56/0xb0
[  152.624813][ T6574]  __slab_alloc.constprop.0+0x56/0xb0
[  152.624857][ T6574]  __kmalloc_cache_noprof+0xfb/0x3e0
[  152.624898][ T6574]  ? alloc_tty_struct+0x96/0x8c0
[  152.624935][ T6574]  alloc_tty_struct+0x96/0x8c0
[  152.624968][ T6574]  ? __pfx_alloc_tty_struct+0x10/0x10
[  152.625014][ T6574]  tty_init_dev.part.0+0x1e/0x500
[  152.625050][ T6574]  tty_open+0xa50/0xf90
[  152.625158][ T6574]  ? __pfx_tty_open+0x10/0x10
[  152.625191][ T6574]  ? chrdev_open+0x58c/0x6a0
[  152.625227][ T6574]  ? __pfx_tty_open+0x10/0x10
[  152.625259][ T6574]  chrdev_open+0x231/0x6a0
[  152.625293][ T6574]  ? __pfx_chrdev_open+0x10/0x10
[  152.625328][ T6574]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  152.625378][ T6574]  do_dentry_open+0x744/0x1c10
[  152.625405][ T6574]  ? __pfx_chrdev_open+0x10/0x10
[  152.625442][ T6574]  vfs_open+0x82/0x3f0
[  152.625483][ T6574]  path_openat+0x1de4/0x2cb0
[  152.625527][ T6574]  ? __pfx_path_openat+0x10/0x10
[  152.625557][ T6574]  ? __lock_acquire+0xb8a/0x1c90
[  152.625595][ T6574]  do_filp_open+0x20b/0x470
[  152.625619][ T6574]  ? __pfx_do_filp_open+0x10/0x10
[  152.625671][ T6574]  ? alloc_fd+0x471/0x7d0
[  152.625718][ T6574]  do_sys_openat2+0x11b/0x1d0
[  152.625749][ T6574]  ? __pfx_do_sys_openat2+0x10/0x10
[  152.625795][ T6574]  __x64_sys_openat+0x174/0x210
[  152.625826][ T6574]  ? __pfx___x64_sys_openat+0x10/0x10
[  152.625873][ T6574]  do_syscall_64+0xcd/0x490
[  152.625902][ T6574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.625925][ T6574] RIP: 0033:0x7f40c958e9a9
[  152.625945][ T6574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.625967][ T6574] RSP: 002b:00007f40ca416038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  152.625990][ T6574] RAX: ffffffffffffffda RBX: 00007f40c97b6080 RCX: 00007f40c958e9a9
[  152.626005][ T6574] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  152.626020][ T6574] RBP: 00007f40c9610d69 R08: 0000000000000000 R09: 0000000000000000
[  152.626034][ T6574] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  152.626048][ T6574] R13: 0000000000000000 R14: 00007f40c97b6080 R15: 00007ffc01f55a68
[  152.626080][ T6574]  </TASK>
[  153.174072][ T6574] tty tty26: ldisc open failed (-12), clearing slot 25
[  153.331456][ T6567] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  155.538613][ T6600] FAULT_INJECTION: forcing a failure.
[  155.538613][ T6600] name failslab, interval 1, probability 0, space 0, times 0
[  155.592171][ T6600] CPU: 0 UID: 0 PID: 6600 Comm: syz.0.117 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  155.592215][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  155.592232][ T6600] Call Trace:
[  155.592242][ T6600]  <TASK>
[  155.592252][ T6600]  dump_stack_lvl+0x16c/0x1f0
[  155.592296][ T6600]  should_fail_ex+0x512/0x640
[  155.592325][ T6600]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  155.592359][ T6600]  should_failslab+0xc2/0x120
[  155.592392][ T6600]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  155.592423][ T6600]  ? __kernfs_new_node+0xd2/0x8e0
[  155.592472][ T6600]  __kernfs_new_node+0xd2/0x8e0
[  155.592520][ T6600]  ? __pfx___kernfs_new_node+0x10/0x10
[  155.592573][ T6600]  ? find_held_lock+0x2b/0x80
[  155.592604][ T6600]  ? kernfs_root+0xee/0x2a0
[  155.592638][ T6600]  kernfs_new_node+0x13c/0x1e0
[  155.592675][ T6600]  __kernfs_create_file+0x53/0x350
[  155.592717][ T6600]  sysfs_add_file_mode_ns+0x207/0x3c0
[  155.592767][ T6600]  internal_create_group+0x578/0xf30
[  155.592804][ T6600]  ? __pfx_internal_create_group+0x10/0x10
[  155.592837][ T6600]  ? kernfs_create_link+0x1bd/0x240
[  155.592880][ T6600]  internal_create_groups+0x9d/0x150
[  155.592911][ T6600]  device_add+0x731/0x1a70
[  155.592951][ T6600]  ? __pfx_device_add+0x10/0x10
[  155.592991][ T6600]  ? lockdep_init_map_type+0x5c/0x280
[  155.593036][ T6600]  input_register_device+0x7e8/0x1130
[  155.593083][ T6600]  ? input_ff_create+0x256/0x350
[  155.593121][ T6600]  uinput_ioctl_handler.isra.0+0x1357/0x1df0
[  155.593162][ T6600]  ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10
[  155.593208][ T6600]  ? find_held_lock+0x2b/0x80
[  155.593256][ T6600]  ? __pfx_uinput_ioctl+0x10/0x10
[  155.593307][ T6600]  __x64_sys_ioctl+0x18e/0x210
[  155.593349][ T6600]  do_syscall_64+0xcd/0x490
[  155.593382][ T6600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.593412][ T6600] RIP: 0033:0x7fe3ef18e9a9
[  155.593437][ T6600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.593463][ T6600] RSP: 002b:00007fe3effad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  155.593490][ T6600] RAX: ffffffffffffffda RBX: 00007fe3ef3b5fa0 RCX: 00007fe3ef18e9a9
[  155.593510][ T6600] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[  155.593527][ T6600] RBP: 00007fe3ef210d69 R08: 0000000000000000 R09: 0000000000000000
[  155.593544][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.593561][ T6600] R13: 0000000000000000 R14: 00007fe3ef3b5fa0 R15: 00007ffe50cd49d8
[  155.593601][ T6600]  </TASK>
[  156.510716][ T6607] openvswitch: netlink: IPv4 tunnel dst address is zero
[  157.747964][ T6615] block nbd9: NBD_DISCONNECT
[  157.790552][ T6615] openvswitch: netlink: Tunnel attr 242 out of range max 16
[  159.371691][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'.
[  160.376567][ T6656] FAULT_INJECTION: forcing a failure.
[  160.376567][ T6656] name failslab, interval 1, probability 0, space 0, times 0
[  160.436823][ T6656] CPU: 1 UID: 0 PID: 6656 Comm: syz.1.129 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  160.436869][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  160.436886][ T6656] Call Trace:
[  160.436896][ T6656]  <TASK>
[  160.436907][ T6656]  dump_stack_lvl+0x16c/0x1f0
[  160.436942][ T6656]  should_fail_ex+0x512/0x640
[  160.436977][ T6656]  should_failslab+0xc2/0x120
[  160.437019][ T6656]  __kmalloc_cache_noprof+0x6a/0x3e0
[  160.437059][ T6656]  ? skb_queue_purge_reason+0x2c8/0x420
[  160.437094][ T6656]  ? nfc_genl_rcv_nl_event+0xc1/0x2e0
[  160.437139][ T6656]  nfc_genl_rcv_nl_event+0xc1/0x2e0
[  160.437176][ T6656]  notifier_call_chain+0xb9/0x410
[  160.437213][ T6656]  ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10
[  160.437258][ T6656]  blocking_notifier_call_chain+0x69/0xa0
[  160.437296][ T6656]  netlink_release+0x186b/0x2020
[  160.437337][ T6656]  ? netlink_release+0x1de/0x2020
[  160.437373][ T6656]  ? __pfx_netlink_release+0x10/0x10
[  160.437409][ T6656]  ? __pfx_locks_remove_file+0x10/0x10
[  160.437451][ T6656]  __sock_release+0xb0/0x270
[  160.437484][ T6656]  ? __pfx_sock_close+0x10/0x10
[  160.437512][ T6656]  sock_close+0x1c/0x30
[  160.437541][ T6656]  __fput+0x402/0xb70
[  160.437583][ T6656]  fput_close_sync+0x118/0x260
[  160.437618][ T6656]  ? __pfx_fput_close_sync+0x10/0x10
[  160.437651][ T6656]  ? dnotify_flush+0x79/0x4c0
[  160.437688][ T6656]  __x64_sys_close+0x8b/0x120
[  160.437727][ T6656]  do_syscall_64+0xcd/0x490
[  160.437758][ T6656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.437796][ T6656] RIP: 0033:0x7f38fd18d60a
[  160.437819][ T6656] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24
[  160.437847][ T6656] RSP: 002b:00007f38fdf83f90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  160.437875][ T6656] RAX: ffffffffffffffda RBX: 000000000000003f RCX: 00007f38fd18d60a
[  160.437894][ T6656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[  160.437910][ T6656] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  160.437926][ T6656] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  160.437943][ T6656] R13: 0000000000000000 R14: 00007f38fd3b5fa0 R15: 00007fffddd93e98
[  160.437981][ T6656]  </TASK>
[  161.358209][ T6665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.130'.
[  161.367301][ T6665] bond0: entered allmulticast mode
[  161.372486][ T6665] bond_slave_0: entered allmulticast mode
[  161.378785][ T6665] bond_slave_1: entered allmulticast mode
[  163.016350][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.134'.
[  163.035946][ T6679] ipvlan0: entered allmulticast mode
[  163.041287][ T6679] veth0_vlan: entered allmulticast mode
[  163.893175][ T6688] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  163.900613][ T6688] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  163.947278][ T6688] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  163.992277][ T6688] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  164.001202][ T6688] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  164.028113][ T6688] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  164.059232][ T6688] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  164.081209][ T6688] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  164.115964][ T6688] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  164.166181][ T6688] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  164.172382][ T6688] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  164.181318][ T6688] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  165.254209][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout
[  166.043447][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout
[  166.123450][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout
[  166.213491][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout
[  166.549194][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.143'.
[  167.326937][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout
[  167.668366][ T6747] openvswitch: netlink: IPv4 tunnel dst address is zero
[  168.123458][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout
[  168.203488][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout
[  168.293566][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout
[  168.791036][ T6766] FAULT_INJECTION: forcing a failure.
[  168.791036][ T6766] name failslab, interval 1, probability 0, space 0, times 0
[  168.865747][ T6766] CPU: 1 UID: 0 PID: 6766 Comm: syz.2.150 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  168.865795][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  168.865812][ T6766] Call Trace:
[  168.865833][ T6766]  <TASK>
[  168.865845][ T6766]  dump_stack_lvl+0x16c/0x1f0
[  168.865885][ T6766]  should_fail_ex+0x512/0x640
[  168.865913][ T6766]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  168.865950][ T6766]  should_failslab+0xc2/0x120
[  168.865989][ T6766]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  168.866021][ T6766]  ? __alloc_skb+0x2b2/0x380
[  168.866057][ T6766]  __alloc_skb+0x2b2/0x380
[  168.866085][ T6766]  ? __pfx___alloc_skb+0x10/0x10
[  168.866116][ T6766]  ? __nla_validate_parse+0x600/0x2880
[  168.866165][ T6766]  __netdev_alloc_skb+0x213/0x920
[  168.866202][ T6766]  ovs_packet_cmd_execute+0x219/0x15b0
[  168.866241][ T6766]  ? __pfx_ovs_packet_cmd_execute+0x10/0x10
[  168.866278][ T6766]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  168.866322][ T6766]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  168.866374][ T6766]  genl_family_rcv_msg_doit+0x209/0x2f0
[  168.866419][ T6766]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  168.866460][ T6766]  ? trace_cap_capable+0x18d/0x200
[  168.866506][ T6766]  ? bpf_lsm_capable+0x9/0x10
[  168.866547][ T6766]  ? security_capable+0x7e/0x260
[  168.866583][ T6766]  ? ns_capable+0xd7/0x110
[  168.866616][ T6766]  genl_rcv_msg+0x55c/0x800
[  168.866672][ T6766]  ? __pfx_genl_rcv_msg+0x10/0x10
[  168.866714][ T6766]  ? __pfx_ovs_packet_cmd_execute+0x10/0x10
[  168.866760][ T6766]  netlink_rcv_skb+0x158/0x420
[  168.866797][ T6766]  ? __pfx_genl_rcv_msg+0x10/0x10
[  168.866849][ T6766]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  168.866903][ T6766]  ? netlink_deliver_tap+0x1ae/0xd30
[  168.866946][ T6766]  genl_rcv+0x28/0x40
[  168.866982][ T6766]  netlink_unicast+0x58a/0x850
[  168.867023][ T6766]  ? __pfx_netlink_unicast+0x10/0x10
[  168.867069][ T6766]  netlink_sendmsg+0x8d1/0xdd0
[  168.867112][ T6766]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.867165][ T6766]  ____sys_sendmsg+0xa95/0xc70
[  168.867205][ T6766]  ? copy_msghdr_from_user+0x10a/0x160
[  168.867237][ T6766]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.867287][ T6766]  ? __pfx_futex_wake_mark+0x10/0x10
[  168.867337][ T6766]  ___sys_sendmsg+0x134/0x1d0
[  168.867378][ T6766]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.867407][ T6766]  ? __lock_acquire+0x622/0x1c90
[  168.867499][ T6766]  __sys_sendmsg+0x16d/0x220
[  168.867533][ T6766]  ? __pfx___sys_sendmsg+0x10/0x10
[  168.867563][ T6766]  ? __x64_sys_futex+0x1e0/0x4c0
[  168.867625][ T6766]  do_syscall_64+0xcd/0x490
[  168.867661][ T6766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.867691][ T6766] RIP: 0033:0x7f40c958e9a9
[  168.867716][ T6766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.867745][ T6766] RSP: 002b:00007f40ca437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.867772][ T6766] RAX: ffffffffffffffda RBX: 00007f40c97b5fa0 RCX: 00007f40c958e9a9
[  168.867792][ T6766] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000008
[  168.867809][ T6766] RBP: 00007f40c9610d69 R08: 0000000000000000 R09: 0000000000000000
[  168.867837][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.867855][ T6766] R13: 0000000000000000 R14: 00007f40c97b5fa0 R15: 00007ffc01f55a68
[  168.867896][ T6766]  </TASK>
[  169.423891][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout
[  170.203506][ T5167] Bluetooth: hci1: command 0x0c1a tx timeout
[  170.300192][ T5167] Bluetooth: hci2: command 0x0c1a tx timeout
[  170.419157][ T5167] Bluetooth: hci3: command 0x0c1a tx timeout
[  173.581387][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'.
[  173.601419][ T6811] bond0: entered allmulticast mode
[  173.618705][ T6811] bond_slave_0: entered allmulticast mode
[  173.670235][ T6811] bond_slave_1: entered allmulticast mode
[  174.599139][ T6829] FAULT_INJECTION: forcing a failure.
[  174.599139][ T6829] name failslab, interval 1, probability 0, space 0, times 0
[  174.629002][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.0.160 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  174.629056][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  174.629074][ T6829] Call Trace:
[  174.629084][ T6829]  <TASK>
[  174.629096][ T6829]  dump_stack_lvl+0x16c/0x1f0
[  174.629134][ T6829]  should_fail_ex+0x512/0x640
[  174.629173][ T6829]  should_failslab+0xc2/0x120
[  174.629210][ T6829]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  174.629244][ T6829]  ? skb_clone+0x190/0x3f0
[  174.629284][ T6829]  skb_clone+0x190/0x3f0
[  174.629320][ T6829]  netlink_deliver_tap+0xabd/0xd30
[  174.629366][ T6829]  netlink_unicast+0x62f/0x850
[  174.629410][ T6829]  ? __pfx_netlink_unicast+0x10/0x10
[  174.629459][ T6829]  netlink_sendmsg+0x8d1/0xdd0
[  174.629503][ T6829]  ? __pfx_netlink_sendmsg+0x10/0x10
[  174.629558][ T6829]  ____sys_sendmsg+0xa95/0xc70
[  174.629599][ T6829]  ? copy_msghdr_from_user+0x10a/0x160
[  174.629631][ T6829]  ? __pfx_____sys_sendmsg+0x10/0x10
[  174.629683][ T6829]  ? __pfx_futex_wake_mark+0x10/0x10
[  174.629734][ T6829]  ___sys_sendmsg+0x134/0x1d0
[  174.629768][ T6829]  ? __pfx____sys_sendmsg+0x10/0x10
[  174.629795][ T6829]  ? __lock_acquire+0x622/0x1c90
[  174.629887][ T6829]  __sys_sendmsg+0x16d/0x220
[  174.629920][ T6829]  ? __pfx___sys_sendmsg+0x10/0x10
[  174.629952][ T6829]  ? __x64_sys_futex+0x1e0/0x4c0
[  174.630016][ T6829]  do_syscall_64+0xcd/0x490
[  174.630061][ T6829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.630091][ T6829] RIP: 0033:0x7fe3ef18e9a9
[  174.630116][ T6829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.630144][ T6829] RSP: 002b:00007fe3effad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.630174][ T6829] RAX: ffffffffffffffda RBX: 00007fe3ef3b5fa0 RCX: 00007fe3ef18e9a9
[  174.630194][ T6829] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000008
[  174.630212][ T6829] RBP: 00007fe3ef210d69 R08: 0000000000000000 R09: 0000000000000000
[  174.630229][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.630247][ T6829] R13: 0000000000000000 R14: 00007fe3ef3b5fa0 R15: 00007ffe50cd49d8
[  174.630283][ T6829]  </TASK>
[  175.663948][ T6834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.161'.
[  175.675822][ T6834] ipvlan0: entered allmulticast mode
[  175.685992][ T6834] veth0_vlan: entered allmulticast mode
[  177.883677][ T5167] ==================================================================
[  177.891831][ T5167] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240
[  177.899678][ T5167] Read of size 140 at addr ffffc900090b5000 by task kworker/u9:1/5167
[  177.907846][ T5167] 
[  177.910176][ T5167] CPU: 1 UID: 0 PID: 5167 Comm: kworker/u9:1 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  177.910199][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  177.910212][ T5167] Workqueue: hci0 hci_devcd_timeout
[  177.910240][ T5167] Call Trace:
[  177.910247][ T5167]  <TASK>
[  177.910254][ T5167]  dump_stack_lvl+0x116/0x1f0
[  177.910273][ T5167]  print_report+0xcd/0x630
[  177.910293][ T5167]  ? __virt_addr_valid+0x81/0x610
[  177.910314][ T5167]  ? hci_devcd_dump+0x142/0x240
[  177.910338][ T5167]  kasan_report+0xe0/0x110
[  177.910358][ T5167]  ? hci_devcd_dump+0x142/0x240
[  177.910386][ T5167]  kasan_check_range+0x100/0x1b0
[  177.910410][ T5167]  __asan_memcpy+0x23/0x60
[  177.910437][ T5167]  hci_devcd_dump+0x142/0x240
[  177.910463][ T5167]  hci_devcd_timeout+0xb5/0x2e0
[  177.910489][ T5167]  ? rcu_is_watching+0x12/0xc0
[  177.910509][ T5167]  process_one_work+0x9cc/0x1b70
[  177.910540][ T5167]  ? __pfx_process_one_work+0x10/0x10
[  177.910570][ T5167]  ? assign_work+0x1a0/0x250
[  177.910596][ T5167]  worker_thread+0x6c8/0xf10
[  177.910627][ T5167]  ? __pfx_worker_thread+0x10/0x10
[  177.910655][ T5167]  kthread+0x3c5/0x780
[  177.910680][ T5167]  ? __pfx_kthread+0x10/0x10
[  177.910705][ T5167]  ? rcu_is_watching+0x12/0xc0
[  177.910723][ T5167]  ? __pfx_kthread+0x10/0x10
[  177.910748][ T5167]  ret_from_fork+0x5d4/0x6f0
[  177.910773][ T5167]  ? __pfx_kthread+0x10/0x10
[  177.910798][ T5167]  ret_from_fork_asm+0x1a/0x30
[  177.910822][ T5167]  </TASK>
[  177.910828][ T5167] 
[  178.058334][ T5167] The buggy address belongs to a vmalloc virtual mapping
[  178.065367][ T5167] Memory state around the buggy address:
[  178.071006][ T5167]  ffffc900090b4f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  178.079073][ T5167]  ffffc900090b4f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  178.087138][ T5167] >ffffc900090b5000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  178.095207][ T5167]                    ^
[  178.099293][ T5167]  ffffc900090b5080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  178.107444][ T5167]  ffffc900090b5100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  178.115592][ T5167] ==================================================================
[  178.131279][ T5167] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  178.138520][ T5167] CPU: 1 UID: 0 PID: 5167 Comm: kworker/u9:1 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  178.150776][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  178.160842][ T5167] Workqueue: hci0 hci_devcd_timeout
[  178.166075][ T5167] Call Trace:
[  178.169383][ T5167]  <TASK>
[  178.172326][ T5167]  dump_stack_lvl+0x3d/0x1f0
[  178.176936][ T5167]  panic+0x71c/0x800
[  178.180874][ T5167]  ? __pfx_panic+0x10/0x10
[  178.185323][ T5167]  ? mark_held_locks+0x49/0x80
[  178.190114][ T5167]  ? preempt_schedule_thunk+0x16/0x30
[  178.195528][ T5167]  ? hci_devcd_dump+0x142/0x240
[  178.200416][ T5167]  ? preempt_schedule_common+0x44/0xc0
[  178.205990][ T5167]  ? check_panic_on_warn+0x1f/0xb0
[  178.211140][ T5167]  ? hci_devcd_dump+0x142/0x240
[  178.216006][ T5167]  check_panic_on_warn+0xab/0xb0
[  178.220961][ T5167]  end_report+0x107/0x170
[  178.225301][ T5167]  kasan_report+0xee/0x110
[  178.229751][ T5167]  ? hci_devcd_dump+0x142/0x240
[  178.234633][ T5167]  kasan_check_range+0x100/0x1b0
[  178.239593][ T5167]  __asan_memcpy+0x23/0x60
[  178.244113][ T5167]  hci_devcd_dump+0x142/0x240
[  178.248807][ T5167]  hci_devcd_timeout+0xb5/0x2e0
[  178.253773][ T5167]  ? rcu_is_watching+0x12/0xc0
[  178.258569][ T5167]  process_one_work+0x9cc/0x1b70
[  178.263555][ T5167]  ? __pfx_process_one_work+0x10/0x10
[  178.268976][ T5167]  ? assign_work+0x1a0/0x250
[  178.273678][ T5167]  worker_thread+0x6c8/0xf10
[  178.278303][ T5167]  ? __pfx_worker_thread+0x10/0x10
[  178.283450][ T5167]  kthread+0x3c5/0x780
[  178.287571][ T5167]  ? __pfx_kthread+0x10/0x10
[  178.292242][ T5167]  ? rcu_is_watching+0x12/0xc0
[  178.297034][ T5167]  ? __pfx_kthread+0x10/0x10
[  178.301640][ T5167]  ret_from_fork+0x5d4/0x6f0
[  178.306265][ T5167]  ? __pfx_kthread+0x10/0x10
[  178.310872][ T5167]  ret_from_fork_asm+0x1a/0x30
[  178.315650][ T5167]  </TASK>
[  178.318832][ T5167] Kernel Offset: disabled
[  178.323164][ T5167] Rebooting in 86400 seconds..