last executing test programs: 2m31.128222521s ago: executing program 1 (id=441): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x2202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000040)={0x7, 0x200}) madvise$auto(0x0, 0x200007, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)=ANY=[@ANYBLOB="0aa9bc37", @ANYRES16=r3, @ANYBLOB="a9e12bbd7000ffdbdf2501000040050006000700000008000300010001000500050000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x20008010) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) 2m29.730310588s ago: executing program 1 (id=442): r0 = socket(0x0, 0x80000, 0x83b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x8058) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) (async) mmap$auto(0x0, 0x100c, 0xfffffffffffffff9, 0x8000000008011, 0x3, 0x0) (async) mmap$auto(0x0, 0x8, 0xe1, 0x9b72, 0x2, 0x8000) (async) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) (async) read$auto(r2, &(0x7f0000000000)='veth1\x00', 0x10) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) (async) sysfs$auto(0x2, 0xffff, 0x0) (async) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r3, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r4 = ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000400)={r1, &(0x7f0000000100)="f9de8f2e7f6f4e77c9b9abf5c33b11f64b875e5ad1a5e010de3c9309f43ff4b1ab8c786cbe74307449d47f9f5d639ffa997ef22b9a17c131dea0fea6707736f3859efeb7ca097d12aeae8e1a1a3bfc4fc3b4485e108b636d9cc50e742babacbb4c67d50a8b95ca1f341bdb3abd", 0x1, &(0x7f0000000180)="7e337ddcc8e442e2b78b5aaae2bf475c9be0fc7dfa293fd2ff90dfc537248c0a13c19da93b82bd57b568bcbf5519f450888169dcfd3d177529b9e3ba4fb976", 0x3, &(0x7f00000002c0)="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", &(0x7f00000003c0)=0x802}) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), r1) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000002a80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="341100009608a0d5ff4422d7f69eddbaa00e23289410168d01b4be5b88f207c538482e05be76154dbedd99475e552c88d1ab24611e3881f90de08970e2982cbd47e940e0aa25fa0471c4b698775183196b5d411496e641533221719e1a91fd5531158dd02b6abafd2b84acc3ee6da740effe20875741804cbdb6e9", @ANYRES16=r6, @ANYBLOB="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"], 0x1134}, 0x1, 0x0, 0x0, 0x54}, 0x800) unshare$auto(0x40000080) (async) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r7, @ANYBLOB="000328bd7000fedbdf2506000000", @ANYBLOB="14000400", @ANYRESOCT=r5, @ANYRES16=r2, @ANYRESDEC=r4], 0xfffffffffffffe34}, 0x1, 0x0, 0x0, 0x884}, 0x200480b0) read$auto(0xffffffffffffffff, 0x0, 0x7f) (async) mprotect$auto(0xff, 0x80000000000008, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) mmap$auto(0x0, 0xb, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r8 = socket(0x2, 0x1, 0x0) setsockopt$auto(r8, 0x0, 0x10, 0x0, 0x17) 2m29.51928593s ago: executing program 1 (id=443): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000003c0)={0x2200, 0x0, 0x0, 0x0, {0x10001f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0xfffffffffffffe8b) getcpu$auto(0x0, &(0x7f0000000040)=0xcdf, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:03/power/runtime_active_time\x00', 0x286a01, 0x0) close_range$auto(r2, 0xfffffffffffff000, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) mmap$auto(0x0, 0x200, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r5 = pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r4, 0x0, 0x6c06, 0x8) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x4, 0x0, 0x0, 0x5, 0xffc00000000000) bpf$auto(0x0, &(0x7f00000001c0)=@link_update={0xffffffffffffffff, @new_prog_fd=r5, 0x733}, 0x10) fgetxattr$auto(r2, &(0x7f00000004c0)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x0) pread64$auto(r1, 0x0, 0xe, 0x100000000007) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) bind$auto(r3, &(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x2}, 0x3}}, 0x5) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r6, &(0x7f0000000000)='system.posix_acl_access\x00') unshare$auto(0x40000080) socket(0x10, 0x2, 0x0) 2m29.142408531s ago: executing program 1 (id=445): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000200), 0x260540, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001840)="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", 0x1d9) ioctl$auto(0x3, 0x80000541b, 0x38) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r2 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x420003, 0x0) r3 = socket(0x35, 0x5, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendfile$auto(r2, r3, &(0x7f00000001c0)=0x3ff, 0xe) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x7f83, 0x0) mmap$auto(0x0, 0x202000c, 0x7, 0xebf, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x3, 0x0) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x6f29, 0x0) io_uring_setup$auto(0x5, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1adf82, 0x0) ioctl$auto(0x3, 0x80286f4e, r6) 2m28.708792328s ago: executing program 1 (id=446): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40000a, 0x80000001, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$auto_MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000180)={0x10001, 0x2, 0x7f, 0x9, 0x6, 0x6, 0x7f, 0xc4, 0x80000001, 0x2, 0x2, 0x6, 0x3, @iso={0x2, 0x80000000}, 0x40, 0x8001, 0x5, 0xc85c}, &(0x7f0000000200)="fa348f5d9dd1a3c8736ddbc3da82570bb35c973c1a71ba3098a7b808099fe6aa8f2e6f12574d62ed3f4d5aa646b540e2e048693b96d9e11c32ba6a59a5ca540340ec619610fef167cf35f6cc89aeeb2171f4fa668cc4588b9924cedc0d170a5d5646227606925c44dcf678150849de770c1791cfb33ab60bce67943628544236634d8520cffae92f18b71cbfed39c3003abbb3a0e9075296315eea8d0e66ab8fb33a51b508bfd5971b132f8a06c2f03d37657c", 0x4}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mtrr\x00', 0xc0000, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x80000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x1, 0x0) mincore$auto(0x1000, 0x8001, 0x0) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) socket(0xa, 0x5, 0x0) semctl$auto(0x1ff, 0x100000001, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0xc) setsockopt$auto_SO_PRIORITY(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1880, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 2m28.436499025s ago: executing program 1 (id=447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002e00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf251b000000180001801400"/38], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x700000000000000) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000002f80)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) unshare$auto(0x8100000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d8, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_MATCH={0x6b, 0x5b, "f59fc7a2d0630d6061aa15251970db727b3eb19d13df4707daa76be2f230d9b5578756ba80f9db59d47d3f9ef1d971700e63e7fb2b973b4c2b6c76ab932999b2e02bdf57b941a9365390ae2e35bfbf5f3d0b9abe7a11d07f4821b128ef1147c0f55be5a0e556fc"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x8}, @NL80211_ATTR_FTM_RESPONDER={0x130, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x39, 0x3, "59a14a342f302a769a964143107d1b74ffad4104adf0963bbca438ab998277db32395c0883b91d7b8e8adf154c1af2aa0a9d182978"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x48, 0x2, "6a717860dddd0b9cca5a4188f46e35daf477b6f3ac7bc9ec893e883e097af4831932a56ff6bf57dda3a9ca5cda35f94cf9924435087c89f6f1e4ad238355bf0edcf57f10"}, @NL80211_FTM_RESP_ATTR_LCI={0xc, 0x2, "9140565c6c952883"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x90, 0x3, "d6d034c83ce6210645fc917b50fe561ab51232ad16cae453f2219d36fa9e983b326562c73dc0aa3f1e7ebfb2e834417769635fa4fde90a82f8af8f86475592d2ba259a407f4f85de66e12a196a7978791e35bd2a5bf7adf1ea40401556671a03264b99a6099cc362f52dd76ed418ecee265e1e05f6f475e379a9e595f4c3cd7dac8b9694306c5599df6962ec"}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "186c54d5a37cd198f3bb7c578ed319fc80b7f15f20007ff8d8cc"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000) 2m26.631682841s ago: executing program 32 (id=420): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x3, 0x1) (async) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) lseek$auto(0x3, 0x1800000000000, 0x3) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r0 = socket(0x2a, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) setfsuid$auto(0xee00) setfsuid$auto(0xee01) (async) r1 = setfsuid$auto(0xee01) getpriority$auto_PRIO_USER(0x2, r1) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) mmap$auto(0x2, 0x40000000009, 0x4000000000df, 0x40eb1, r0, 0x300000000000) r2 = prctl$auto_PR_SET_SECCOMP(0x16, 0x9, 0x5, 0x5, 0xfffffffffffffff7) r3 = fcntl$auto_F_GETOWN(r2, 0x9, 0x0) capset$auto(&(0x7f00000008c0)={0xffffffff, r3}, &(0x7f0000000900)={0x1, 0xe030, 0x4c}) (async) capset$auto(&(0x7f00000008c0)={0xffffffff, r3}, &(0x7f0000000900)={0x1, 0xe030, 0x4c}) lstat$auto(0x0, 0x0) msgctl$auto_MSG_STAT_ANY(0x2, 0xd, &(0x7f0000000240)={{0x8, 0xee00, 0xee01, 0xd, 0x5, 0x5, 0x6}, &(0x7f00000001c0)=0x1, 0x0, 0x9, 0xc79f, 0x4, 0xb0c4, 0x40, 0x8, 0x3, 0x3, @raw=0x7, @raw=0x7}) (async) msgctl$auto_MSG_STAT_ANY(0x2, 0xd, &(0x7f0000000240)={{0x8, 0xee00, 0xee01, 0xd, 0x5, 0x5, 0x6}, &(0x7f00000001c0)=0x1, 0x0, 0x9, 0xc79f, 0x4, 0xb0c4, 0x40, 0x8, 0x3, 0x3, @raw=0x7, @raw=0x7}) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = setfsuid$auto(0xee00) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x438080, 0x0) (async) r6 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x438080, 0x0) fchown$auto(r6, r4, 0xffffffffffffffff) setresuid$auto(0xee01, r5, 0x0) (async) setresuid$auto(0xee01, r5, 0x0) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189003, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r7, 0x4010744d, &(0x7f0000000140)={0x0, 0x2, 0x10005}) 2m21.458114799s ago: executing program 33 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x2) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x40, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe6}, @NFSD_A_SERVER_SCOPE={0x13, 0x4, '/dev/mtdblock0\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x814}, 0x80) 2m15.336029003s ago: executing program 4 (id=451): mmap$auto(0x7, 0x402000a, 0xffffffffffffffff, 0x19, 0x401, 0x101) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x29, 0x5, 0x0) write$auto(r1, 0x0, 0x100000a3dc) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x0, 0x1) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) 2m15.239960103s ago: executing program 0 (id=459): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x284e00, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x17, 0xffffffffffffffff, 0x0) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) socket(0x10, 0x2, 0x4) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/anon_fault_alloc\x00', 0x100, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) r4 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0xe8180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$auto(0x100, 0x800000000000400, 0xfffbfffffffffffe, 0x400000004000eb2, r2, 0x8001) prctl$auto(0x23, 0xf, 0x100000000000b, 0xfff, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0x8, 0x3d, 0x0, 0x0, 0x0) madvise$auto(0xfffffffffffffffc, 0x0, 0x1f28) mq_open$auto(0x0, 0x7e, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mq_notify$auto(r4, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001180)=""/4096, 0x1000) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000100)={0x4e, r3, 0x6, "81639a79e1e7217ac83540adbe76fe26"}) mbind$auto(0x0, 0x2091cf, 0x4004, 0x0, 0x6, 0x2) r6 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x0, 0x0) read$auto_ftrace_system_enable_fops_trace_events(r6, 0x0, 0x0) 2m14.196774062s ago: executing program 0 (id=460): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r0 = socket(0x1f, 0x2, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x400053, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) read$auto_transactions_fops_(0xffffffffffffffff, 0x0, 0x0) r2 = fanotify_init$auto(0x6a1, 0x2000000000002) ioctl$auto(r0, 0x9, r2) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) socket(0x1, 0x1, 0x1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45) getsockopt$auto_SO_DONTROUTE(r3, 0x5, 0x5, &(0x7f00000000c0)='/\xd8!\\$%.\'@+%\x00', &(0x7f0000000100)=0x1000) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r4 = socket(0x2b, 0x1, 0x0) r5 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64$auto(r5, 0x0, 0x800, 0x45e) sendmmsg$auto(r4, &(0x7f0000000000)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 2m13.127733457s ago: executing program 34 (id=447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002e00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf251b000000180001801400"/38], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x700000000000000) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000002f80)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) unshare$auto(0x8100000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d8, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_MATCH={0x6b, 0x5b, "f59fc7a2d0630d6061aa15251970db727b3eb19d13df4707daa76be2f230d9b5578756ba80f9db59d47d3f9ef1d971700e63e7fb2b973b4c2b6c76ab932999b2e02bdf57b941a9365390ae2e35bfbf5f3d0b9abe7a11d07f4821b128ef1147c0f55be5a0e556fc"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x8}, @NL80211_ATTR_FTM_RESPONDER={0x130, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x39, 0x3, "59a14a342f302a769a964143107d1b74ffad4104adf0963bbca438ab998277db32395c0883b91d7b8e8adf154c1af2aa0a9d182978"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x48, 0x2, "6a717860dddd0b9cca5a4188f46e35daf477b6f3ac7bc9ec893e883e097af4831932a56ff6bf57dda3a9ca5cda35f94cf9924435087c89f6f1e4ad238355bf0edcf57f10"}, @NL80211_FTM_RESP_ATTR_LCI={0xc, 0x2, "9140565c6c952883"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x90, 0x3, "d6d034c83ce6210645fc917b50fe561ab51232ad16cae453f2219d36fa9e983b326562c73dc0aa3f1e7ebfb2e834417769635fa4fde90a82f8af8f86475592d2ba259a407f4f85de66e12a196a7978791e35bd2a5bf7adf1ea40401556671a03264b99a6099cc362f52dd76ed418ecee265e1e05f6f475e379a9e595f4c3cd7dac8b9694306c5599df6962ec"}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "186c54d5a37cd198f3bb7c578ed319fc80b7f15f20007ff8d8cc"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000) 2m11.220158589s ago: executing program 4 (id=462): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x54) r4 = syz_clone3(&(0x7f0000000380)={0x22000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f00000001c0), {0x19}, &(0x7f0000000240)=""/6, 0x6, &(0x7f0000000280)=""/140, &(0x7f0000000340)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6, {r2}}, 0x58) fcntl$auto(r0, 0x8, r4) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x40804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4fc7, 0x0, 0x5, 0x0, 0x4, 0x6}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="0100273d7000fddbdf2501000000100007800c00018008000180000000000c00020006000000000000000c00050013"], 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) 2m10.176417501s ago: executing program 0 (id=463): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x40000081, 0x6, 0x0, 0x4000008) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x19, 0x0, 0x9, 0x0, 0x1f, 0x3}, 0x4}, 0x7, 0x20020004) write$auto(0x3, 0x0, 0x7fffffff) preadv2$auto(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffbfffff, 0x7, 0x2e) r1 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000100), 0x84400, 0x0) fcntl$auto_F_SETSIG(r1, 0xa, 0xfffffffffffffffd) mmap$auto(0x8, 0x2020009, 0x400, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRES16=0x0, @ANYBLOB="08002dbd7000fddbdf252dfffffff600120040000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) io_setup$auto(0x5b6e4b94, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x1, 0x106) connect$auto(r3, 0x0, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r4, 0x0, 0xfffffdf1) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mprotect$auto(0x0, 0x8000000000000001, 0x8) migrate_pages$auto(0x0, 0x9, &(0x7f0000000100)=0x7, &(0x7f0000000040)=0x101) 2m9.189094304s ago: executing program 5 (id=456): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x28, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) futex_wait$auto(0x0, 0x2, 0x1, 0x2, 0xfffffffffffffffe, 0x1) keyctl$auto_KEYCTL_INSTANTIATE(0xc, 0x7, 0xc, 0x0, 0x9) semtimedop$auto(0xa, &(0x7f0000000000)={0x8, 0x9, 0xe}, 0x0, &(0x7f0000000040)={0x3, 0x8}) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x84) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000029, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) ppoll$auto(0x0, 0xd6, 0x0, 0x0, 0x8) statx$auto(0xffffffffffffffff, 0x0, 0x1100, 0xbdf4, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x83, 0x0, 0x8) socket(0x11, 0x2, 0x9) 2m7.817115962s ago: executing program 5 (id=464): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c028379dd", 0xbb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000020c0), 0x800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/config.gz\x00', 0x2100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x280, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) bpf$auto(0x8, &(0x7f00000001c0)=@batch={0x8000000000009, 0x80000001, 0x10008, 0xc1, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x103) mmap$auto(0xff, 0x8, 0xdf, 0x9b72, r3, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x3, 0x0, 0x0) timer_delete$auto(0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_GET_TXSC(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40080c4) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioctl$auto_RTC_AIE_OFF(r2, 0x7002, 0x0) madvise$auto(0xfffffffffffffff9, 0xffffffffffff0005, 0xffff) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) 2m5.819274003s ago: executing program 0 (id=465): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r0) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x11, 0x5, 0x100) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x40444c0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/memmap/2/type\x00', 0x18b740, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/112, 0x70) socket(0x2a, 0x2, 0x403) r2 = wait4$auto(0x0, &(0x7f0000000080)=0x9, 0xc38c, &(0x7f00000000c0)={{0x0, 0xc}, {0x3, 0x1000000}, 0x7, 0x80000000, 0x41, 0x8001, 0x9, 0x3, 0x7, 0x2, 0x100000001, 0x1000, 0x0, 0x8, 0x6, 0x3e}) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000180)={0x3, 0xe, 0xb, 0x1, 0x9, r2}) prctl$auto(0x8, 0x2, r3, 0x9, 0x3) mmap$auto(0x0, 0x20009, 0x81, 0x19, 0xffffffffffffffff, 0x6) socket(0x9, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r4 = getuid() keyctl$auto(0x421f, 0x1, r4, 0x3, 0x1) setpriority$auto(0x0, r4, 0x5) r5 = socket(0x2, 0x1, 0x106) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) unshare$auto(0xa) setsockopt$auto(r5, 0x6, 0x1e, 0x0, 0x7) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x5) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 2m3.735894592s ago: executing program 0 (id=466): socket$nl_generic(0x10, 0x3, 0x10) timer_settime$auto(0x0, 0x5, &(0x7f00000000c0)={{0x8, 0x10004}, {0x9, 0x800000010}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) r3 = clone$auto(0x5, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x100000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r4) sendmsg$auto_TASKSTATS_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010a27bd7000fddbdf250100000008000200", @ANYRES32, @ANYBLOB="080028d8", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20000840) socket(0xa, 0x3, 0x3a) bind$auto(0x3, &(0x7f0000000040)=@hci={0x1f, 0x2, 0x4}, 0xe) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [{0x277, 0x3}]}) 2m2.849656879s ago: executing program 0 (id=467): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:10/max_ratio\x00', 0x2002, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xff4fe636e6ca8df0, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) prctl$auto(0x29, 0x0, 0x8, 0x0, 0x0) memfd_create$auto(&(0x7f0000000000)='\x00', 0x6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x9, 0x5, 0x8000000000000, 0xf, 0xffffffffffffffff, 0x1, 0x5}, 0x6f4) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x8a002, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, r1, 0x8000) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) io_uring_setup$auto(0x2, 0x0) open(0x0, 0xa240, 0x15e) setreuid$auto(0x3, 0x7) mlock$auto(0xfbe8, 0x1000000000000004) open(0x0, 0x183082, 0x17f) 1m55.929826629s ago: executing program 35 (id=462): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x54) r4 = syz_clone3(&(0x7f0000000380)={0x22000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f00000001c0), {0x19}, &(0x7f0000000240)=""/6, 0x6, &(0x7f0000000280)=""/140, &(0x7f0000000340)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6, {r2}}, 0x58) fcntl$auto(r0, 0x8, r4) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x40804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4fc7, 0x0, 0x5, 0x0, 0x4, 0x6}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="0100273d7000fddbdf2501000000100007800c00018008000180000000000c00020006000000000000000c00050013"], 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) 1m52.281833993s ago: executing program 36 (id=464): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c028379dd", 0xbb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000020c0), 0x800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/config.gz\x00', 0x2100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x280, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) bpf$auto(0x8, &(0x7f00000001c0)=@batch={0x8000000000009, 0x80000001, 0x10008, 0xc1, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x103) mmap$auto(0xff, 0x8, 0xdf, 0x9b72, r3, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x3, 0x0, 0x0) timer_delete$auto(0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_GET_TXSC(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40080c4) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioctl$auto_RTC_AIE_OFF(r2, 0x7002, 0x0) madvise$auto(0xfffffffffffffff9, 0xffffffffffff0005, 0xffff) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) 1m47.378763576s ago: executing program 37 (id=467): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:10/max_ratio\x00', 0x2002, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xff4fe636e6ca8df0, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) prctl$auto(0x29, 0x0, 0x8, 0x0, 0x0) memfd_create$auto(&(0x7f0000000000)='\x00', 0x6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x9, 0x5, 0x8000000000000, 0xf, 0xffffffffffffffff, 0x1, 0x5}, 0x6f4) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x8a002, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, r1, 0x8000) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) io_uring_setup$auto(0x2, 0x0) open(0x0, 0xa240, 0x15e) setreuid$auto(0x3, 0x7) mlock$auto(0xfbe8, 0x1000000000000004) open(0x0, 0x183082, 0x17f) 1m41.132699752s ago: executing program 7 (id=494): r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x84}, 0x3) write$auto(0x3, 0x0, 0xfdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002880), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x28082, 0x0) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$auto_I2C_SLAVE(r3, 0x703, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020005, 0xdb, 0xeb1, 0x401, 0x8000) unshare$auto(0xfffffffffffffcd0) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) r4 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) r5 = setfsuid$auto(0xee00) fchown$auto(r4, r5, 0xffffffffffffffff) setresuid$auto(0xee01, r5, 0x0) r6 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x2, 0x0) sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf2501000000380008801800bb800800ee00", @ANYRES32=r5, @ANYBLOB="08003400040071801c005c800400d6800c00ec00000000000000000008003a0000000000", @ANYRES32=r6, @ANYBLOB="14000200766c616e300000000000000000000000060006004e22000004000880"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) msgctl$auto_MSG_INFO(0x2, 0xc, &(0x7f00000001c0)={{0x8, 0x0, 0xee01, 0x40, 0x1, 0xcff, 0x9}, &(0x7f0000000000)=0x3, &(0x7f0000000180), 0x8000, 0x9, 0xffffffffffffffff, 0x2, 0x1, 0x6, 0x7c18, 0x9, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) setfsuid$auto(r7) r8 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r8, 0x40000403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r8, 0x6f29, 0x0) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x100, 0x0) ioctl$auto_TIOCSTI2(r9, 0x5412, &(0x7f0000000140)="13") ioctl$auto_TIOCSTI2(r9, 0x5412, 0x0) sendmsg$auto_IPVS_CMD_GET_INFO(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f00000028c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB='\x00\x00\x00#\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) 1m39.807064226s ago: executing program 7 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) userfaultfd$auto(0x1) (async) ioctl$auto(0x3, 0x541b, 0x10000000000402) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200202000a, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8004) ioctl$auto_RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x4, 0x7, 0x9, 0x0, 0xfffff0d3, 0x2, 0x6, 0x6, 0xa}) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) (async) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRESHEX=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x2100, 0x0) ioctl$auto(r1, 0x400c4d02, r1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0c/sub7/hw_params\x00', 0x680, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/178, 0xb2) (async) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) r3 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/prev\x00', 0x101002, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x7) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) io_setup$auto(0x7ffe, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal$auto_SIGCONT(r3, 0x12, &(0x7f0000000300)={@siginfo_0_0={0x10001, 0x2, 0x51a9, @_timer={r4, 0x80, @sival_ptr=&(0x7f0000000280)="d47dfe51f9", 0x4e1}}}, 0xd2) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(r5, 0x3, 0x0, 0x400000000006) 1m36.883749115s ago: executing program 7 (id=500): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x3, 0x6) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x20044001) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r4, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) readv$auto(0x3, 0x0, 0x8) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x8}, 0x9}, 0x106, 0x300) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 1m36.322248495s ago: executing program 7 (id=501): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) ioctl$auto(r0, 0xab01, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/186, 0xba) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="1200", @ANYRESHEX], 0x1ac}, 0x1, 0x0, 0x0, 0x84}, 0x40000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x7}, 0x6}, 0xffffbff9, 0x10, 0x0) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) mmap$auto(0x4, 0x400008, 0xa, 0x9b7f, 0xffffffffffffffff, 0x0) setns$auto(0xffffffffffffffff, 0x173f1891) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a3) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a69d9ed48ff79661ba9ec4a84dd222d3b40e4abf56222b97db9aa646a67e5031a57d570030f41b09529298f1acddbcd1f0ff6a30cb2a2d5eaecd774bbf897477cc1e55488f3493b6aa6908d24b032cbda24f956f7f262d992838923efde7e8ed0558872451d7bd6a4769ecd47c6d0a125a6e638df6f67793901a67071c506d010930b01ce541aa43f9110d874311d18a8ea50fb1907e8d17c3932e0c12c7d6f7c145209ab81105649fc0c5266063bd8c6a16319a82ff5d236122d53e15d6a7fcb16245d7754f3ffbf659a141cbd29286176fe445deebd5dd18baae1bbdfedbe4bd3453c50fb2f6c22505ecd768ad0703624ebf7b924dc7e8e93ea94c8a6a9f0372351b5a4aaadf89a86faf5241e47be7e6790676fbf8abcc6ef89b9f6ce10600e21815ec6d2c580b5c30ada6b956a07d9964e93419856df00b06245d0743ac2b595097007165cbb17c6a492a6eb0559712e5f89ee86b7a2c46acf9b8d8b2c7a85092966aca97f114635c64f6eb44ad927423a3bc434b267c23d364ee5671d3dcbcca02ffbb633b3c9e6f2058c3b43dd46344b92e000a029e6daf42c4d12e3a470487eb5cca6e2014b87e5a5aee1c6b9485472d18aaea4ebefe77c6901cd52e303083d6b2e47f4be756fb4dd02acd4938e6ae5f7178623b3b4bad0a83c2c511fd4a9e1da40efff3ca03326278860a6c507e50717f0ea9288daa0a33748cdaa74ec20f7b5671ab50d2a0ea649b9c1b258fa833e808ce0f0fb537e75e9e4c8e1b5c7fe8ca456e6c32fdb86b88c0bc30e44c5ec22634cf5b6b78574a5aae4cfd5b011095e2ea022a2fd15495319ddfad5b3fdabcf012d8f182af76c9ea3b083b66fb34b0ba87957fcd34cb0a55478bfb857bb79b52ec8cf52fcdaf09a20b743b765310cb24d4b05e55790ebbc410cc1342c3dc27facd2ae8c2ea0916bbe0e1372c09f2b98d486294c1ad0776828ec7feebdd969af66b82f708494c4abd5841d70a71ed0c6c7eef68559527ea4c43fe26e8889f9410cda85b13dc02bd03692198ce526997cb45b322a6354d58344e94944f9fa25950ae239c17b75d313f75405c012d959eeb2991130ec84e703193d749671264f3aafd55cfcfb2f5762979724318d6f1ed0b5e570d0b050ed9282a71de1533cb642ea831444a4bb7668745bf9814a180b18835e7c61d907e4321c25b5400be50d0117537ca13190ffde1bb077eb0cd74f6163abcb87a2b1e261b2c2084224d743b27b67f404b3b2d66a9c12892fb6894cd87c018e4018cfe5cb05b6114b90fb7faff3e591e4f60803318cc54783f9c1473276b33f59a3e545340299036ce3eefeb5775b4ddc00759012e5a408ea73b702c05c102740c6ba5b140a89cef6a7e9591c9afca16e478698cd9a3b4d103a553a194cc30e498b14c2315c61e5e6c329722c5cb50b6c114e4901c067ccfdb54268eb51b1d43b0cf36b78c2e91abf18675c3b69614e0d10c3f15014d69067a97953ba58e7da1b625ae43465346bb7cff85515f83c1934956b2195cebef82db5fd2e9083da8240e4d7d1ade0d4f2be992f2f23197df1054c89bb1b7ad9c03a3c3cecb278221889cb30374987dd72d0d58015dfee54acb6db2127dc467ba3ce0a2353e809622b23d03a6b52666f10cde5a2abb02571b845d58d6590afc59bd16caa59ae4026888efa3f6b1d0f879afb71a580486005db5a411073f8f4964f73103efa972ecf481118b12ae48ba55c50a5fd7c31991b73242bb7448bcb4e412427a4ab9657a0e1f8ff3332e9da5b6f695dfcc4e6fbeb5f2cea1c70703f7fe4b685feb246b27601163c9", 0x796) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) 1m34.285054748s ago: executing program 7 (id=504): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x84, 0x4, 0x0, &(0x7f0000000080)=0x9c8) close_range$auto(r2, 0xfffffffffffff000, 0xfff) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 1m28.580332247s ago: executing program 7 (id=511): r0 = socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x450381, 0x0) mmap$auto(0x0, 0x2020009, 0xfe9, 0x10000000000eb1, 0xfffffffffffffffa, 0x8000) r1 = open(0x0, 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x36281, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0xc2000, 0x0) ioctl$auto(r2, 0x4611, r2) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x61, 0x2) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$auto(r1, 0x0, 0x100000001) mmap$auto(0x0, 0x8, 0x80004000000000df, 0x10004000eb1, r0, 0x8000008000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb5, 0xffffffffffffffff, 0x7ffd) r3 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) timer_create$auto(0x2, 0x0, 0x0) setitimer$auto(0x0, &(0x7f0000000140)={{0x40000000002, 0x3}, {0x20000, 0x8}}, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000a40)=""/4096, 0x1000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m13.35342s ago: executing program 38 (id=511): r0 = socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x450381, 0x0) mmap$auto(0x0, 0x2020009, 0xfe9, 0x10000000000eb1, 0xfffffffffffffffa, 0x8000) r1 = open(0x0, 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x36281, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0xc2000, 0x0) ioctl$auto(r2, 0x4611, r2) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x61, 0x2) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$auto(r1, 0x0, 0x100000001) mmap$auto(0x0, 0x8, 0x80004000000000df, 0x10004000eb1, r0, 0x8000008000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb5, 0xffffffffffffffff, 0x7ffd) r3 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) timer_create$auto(0x2, 0x0, 0x0) setitimer$auto(0x0, &(0x7f0000000140)={{0x40000000002, 0x3}, {0x20000, 0x8}}, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000a40)=""/4096, 0x1000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m4.546601317s ago: executing program 6 (id=558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/location\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) r2 = getpid() r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x288800, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$auto(0x9, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, r3, 0x9, 0x0, 0xffffffffffffffff, @relative_fd, 0x1}, 0x17) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000040)={@inferred=r2, 0x555c, 0xffff, 0x1, "8f9638544ae4bbdf48e497dbb5a3760f9b6b2c854e493a712fcbb4034dde3ba72adae5bfa41dba811bf5488f", @inferred=r2}) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) sendmsg$auto_GTP_CMD_NEWPDP(r0, 0x0, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x1, 0x3, 0x9, 0x6, 0xfffff0d3, 0x2, 0x6, 0x6, 0xa}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRESHEX=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x0, 0x0) ioctl$auto(r6, 0x400c4d02, r6) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r7, &(0x7f0000000180)=""/178, 0xb2) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) 1m1.134603204s ago: executing program 6 (id=564): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc3, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r0, 0x410, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000f7, 0x3, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, 0x38) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) madvise$auto(0x10000, 0x8ed3, 0x3) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fchmod$auto(r2, 0x2) 58.216685439s ago: executing program 6 (id=568): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x64, 0x0, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xc0501, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x1, 0x84) capset$auto(0x0, 0x0) open(0x0, 0x22240, 0x154) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) mmap$auto(0x0, 0x2020002, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x0, 0x10007}, {0x400002000c}}, 0x0) timer_gettime$auto(0x0, 0x0) r1 = socket(0x1a, 0x6, 0x6) syz_genetlink_get_family_id$auto_netdev(0x0, r1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) bind$auto(r3, 0x0, 0x3) 57.746728521s ago: executing program 6 (id=569): mmap$auto(0x0, 0x402000c, 0xdd, 0xcb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xf, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) 56.59025121s ago: executing program 6 (id=572): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x4f) r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000d40)=""/16, 0x10) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x6c000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x6, 0x0) acct$auto(&(0x7f0000000280)='/dev/vhci\x00') mount$auto(0x0, &(0x7f0000000300)='}[,&*}\x00', &(0x7f0000000580)='nfsd\x00\xa8\x91\xf0\xd3\x12ji\xe9{9~C\xd8C\x95\xa89\x18\x0f\xb1\b0[\xb67\xd0\x8e`\x85\xd9Y\"\x811\xf9\x15X\rF\x82`b\xa2\xa9\xa2\x9c\xd2\xa0\xfa\xcd \a\xcd\xb969[T\xfbG\x11\x1e[\xfe>\xeb\xeb?N\xd0\xea\x11\n\xcbR<\x17;\xda\xb0K\xd8&\xb8\xcd\x81{\x9c\xc4\x1d}1]\xf4\xf8M\xb8\xfe\xa2x+\xeb\x86e\x91\xb8U\xa4va0\x1c\x8d\xdc\x00\x00\x005\x86rTq\x8c\x1e\xed\b\x85\xfa\x8f\xb3\xeaF\xc3F\x15/\xfe\xd6O\xd9\xe1\xb7P[F\x86\xa5\x86\x8an}\x90\x9dz\x81:\xb5\x12\x15\xdb\xca]tsg\xf7B\xe2\xb4\xb8w\xf4\x88.\t\x01\x84\x02\xdfcJ\x8d\xaf`\x8a\x04\xbc\'\xee\x93\a\xe9\x98\xebg\xb8\xd5\xc1k\x8e0K\x98~\xf98&\a\x1ef^4\xaf\xfb9Si\x83\xb5\v\xd9f\xfd\x88E@\xf0\x89\'\xdcQW\xa4E\xd9/\x1c\xcb\x86\xce-]D\x7fh\xb9!\x19\xdb\xf5\"7\xb4B0>qn^\xbb\n\xbf\xb5wy7\xcft\t\x16\x1f\r\xf8\xe8\x0f\xe0\xaa\xe9\x1b\x96\xed/\x11vH>\x89\x83q\x14jb3\xbb\xdd/', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x80) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ptyee/power/runtime_status\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000440)=""/227, 0xe3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) 52.6817795s ago: executing program 6 (id=580): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0x2) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0xb, 0x4, "ef20bbf0b6e731"}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x7, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) mmap$auto(0x3, 0xfffffffffffff1f9, 0x4e, 0xfffffffffffffffe, r2, 0x8f6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200000000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x9) ioctl$auto_XFS_IOC_COMMIT_RANGE(r4, 0x40585883, &(0x7f0000000100)={r5, 0x0, 0x9, 0x80, 0x5b57, 0xfff, [0x5, 0x3, 0xffffffffffffff81, 0x1, 0x3, 0x4]}) write$auto(0xca, &(0x7f00000001c0)='\x04\x18\xdc\xec7z\rM\xf8Q\x15\f', 0x2d9) madvise$auto(0x0, 0x8000000000000000, 0x15) landlock_add_rule$auto(0xffffffffffffffff, 0x2, 0x0, 0xd) 37.278194376s ago: executing program 39 (id=580): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0x2) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0xb, 0x4, "ef20bbf0b6e731"}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x7, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) mmap$auto(0x3, 0xfffffffffffff1f9, 0x4e, 0xfffffffffffffffe, r2, 0x8f6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200000000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x9) ioctl$auto_XFS_IOC_COMMIT_RANGE(r4, 0x40585883, &(0x7f0000000100)={r5, 0x0, 0x9, 0x80, 0x5b57, 0xfff, [0x5, 0x3, 0xffffffffffffff81, 0x1, 0x3, 0x4]}) write$auto(0xca, &(0x7f00000001c0)='\x04\x18\xdc\xec7z\rM\xf8Q\x15\f', 0x2d9) madvise$auto(0x0, 0x8000000000000000, 0x15) landlock_add_rule$auto(0xffffffffffffffff, 0x2, 0x0, 0xd) 18.702110644s ago: executing program 8 (id=657): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.events\x00', 0x60640, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000010c0)=""/4111, 0x100f) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) write$auto(0x3, 0x0, 0x7fffffff) (async, rerun: 32) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (rerun: 32) write$auto(0x3, 0x0, 0x100000000) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/027/001\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.prio.class\x00', 0x183042, 0x0) sendfile$auto(r2, r2, 0x0, 0x10001) (async) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 18.195877861s ago: executing program 8 (id=658): unshare$auto(0x40000080) r0 = socket(0x1e, 0x4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x400007, 0x10000, 0x100009b72, 0xffffffffffffffff, 0x8) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(r0, &(0x7f00000001c0)={0x0, 0x1000}, 0x3) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r3, &(0x7f00000001c0)={0x0, 0xfffffffffffffd45, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf250d00000008000100", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="04000280e25956fc23594597ff7766d3f40b3b7af77e89cb4dadb69ed9828236b087fa44f67907cc1e928a5616c86e7936973ca689b8f04609b2df3c874b9416aef766d8cda0a7dea78313aa15a48e52d38d8b72620146b4bfad8263bfa3d1593ea7dfbc3f650b5b63e65fbe1127ceb6abd778cebd81306f2c856efca3516a8c1becb0c49e00dd9a3f79931d746579b124794c58f7bc480a707aea7d019b5072dc21e7b79808d9db24afd64d"], 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYBLOB="010026b29d4669aa39733d00000004005e8008000300", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40800) r9 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r9, 0xffffffffffdffe00, &(0x7f0000000140)='+') sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r4, @ANYBLOB="040029bd7000fddbdf250d000000080003003d8b5267ec029710d3affc113832b73723a42c1d4d6aeb81fb57120b07a7fe7909f34128f7599e8b0093c63f25a760278ab6538c91713cc0063d4ecffb448aeebe1f24", @ANYRES32=r9, @ANYBLOB="2c00028008000300d4ac0000080003000c0000000800030001040000080001000200000008000100100000002c000280080003000200000008000300030000000800010004000000080001000101000008000100446800002c00028008000100de5e00000800010000740000080001000800000008000300000000000800010005000000"], 0xa0}, 0x1, 0x0, 0x0, 0x200020c0}, 0x8004) 16.464432652s ago: executing program 8 (id=664): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r1 = wait4$auto(0x0, &(0x7f00000000c0)=0x2, 0x5b80, &(0x7f0000000380)={{0x8, 0x4}, {0xfffffffffffffffb, 0x100000001}, 0xac6d, 0x0, 0x1, 0x3, 0x2, 0x0, 0x2, 0x4cd, 0x86, 0x9, 0x3, 0x4, 0x4, 0x100}) prctl$auto_SIGCONT(0xfffffffd, 0x12, r1, 0x1139, 0xfffffffffffff428) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x5, 0x0) ioctl$auto(r3, 0x8941, 0x8) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/27, 0x1b) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) (async) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) (async) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) (async) wait4$auto(0x0, &(0x7f00000000c0)=0x2, 0x5b80, &(0x7f0000000380)={{0x8, 0x4}, {0xfffffffffffffffb, 0x100000001}, 0xac6d, 0x0, 0x1, 0x3, 0x2, 0x0, 0x2, 0x4cd, 0x86, 0x9, 0x3, 0x4, 0x4, 0x100}) (async) prctl$auto_SIGCONT(0xfffffffd, 0x12, r1, 0x1139, 0xfffffffffffff428) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) (async) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xa, 0x5, 0x0) (async) ioctl$auto(r3, 0x8941, 0x8) (async) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/27, 0x1b) (async) 16.084240231s ago: executing program 8 (id=665): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/pcm0c/sub2/info\x00', 0x80280, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x55, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x29f, 0x2, 0x83, 0x4, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000140)={0x400, 0x10002, 0x7f, 0x4, 0x6, 0x5, r0, [], {0x2, 0x1, 0x6, 0x2, 0x40, 0x4, 0x8, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x9, 0x6, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) timer_create$auto(0x9, 0x0, 0x0) socket(0xa, 0x1, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptyd3\x00', 0x68000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fb, 0x7, 0xfffffffffffffffb, 0xc40, 0x4, 0x3, 0x3, 0x3, 0x3, 0x1ff, 0x8000000000400000, 0x2, 0x6d3c, 0x1000000000000003, 0x2, 0x8000000000000006]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000) socket(0x1d, 0x5, 0x2073) socket(0x2, 0x1, 0x84) 13.670278938s ago: executing program 8 (id=669): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x4f) r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r0, &(0x7f00000003c0)=""/32, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x3821) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8020009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x68b82, 0x0) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, &(0x7f0000001480)={0x3, [0x0, 0x5, 0x1, 0x80000006, 0x69f7]}) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={&(0x7f00000014c0)={0x139c, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_COORDINATOR={0x1380, 0x1e, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @ipv4=@empty}, @generic="a032d50f03a22f0b975f4798d80bce3fa84eb3e684b9ee7e160a325b6a5fdb9ccf38f37b53692df66de24ead37176789bcb3990ef491bd2a0a58cbd6b8573dfa8d8361e4e586e5f38fafa49fc6c54f463b01aac7cd9e52be9afb9c5738a6a39d87f3f874ed255617f5214bcf87a821c94c149cfdcc05784b7790a717aeb1960c2bbe36a15de59f1e4a7a09a679ab116011ed419a6c868a4819dd371fbb9f42ba6a1bef8e133294ed7a9ff5bae43900ea0e6470848c23f401eb45d54811df4af807ec0eb32644a701a607b32a2e828a55735ef57f0b22892caec2e060c9aaa9528dd0ba9f62a590ffec4bbe92e7a4c244", @typed={0x8, 0x108, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}}, @generic, @generic="380ab6000000000000042287aa8ff561d7fdae44", @nested={0x35, 0x5c, 0x0, 0x1, [@generic="ee5aff52490a31f3fe44bf4ba78f9c7a66976c53decf52f013d2", @generic="8983204549a9a45aa521cc2dab2b8a8b815a5283e51662"]}, @nested={0xa0, 0xa3, 0x0, 0x1, [@generic="3b8b65a074f188ffa9f95147ec3c27c8f22ea1b5af1c9646416fd61502a53107e4f7410beefa506ee2000cd7753c4adb119996e6bc42826c80ba0dd6a561041e6b203d1e0e5186c1c2e4a0675fdb6746eea576ecae408583", @typed={0x8, 0x142, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x25, 0x138, 0x0, 0x0, @str='/sys/kernel/debug/tracing/README\x00'}, @typed={0x8, 0x118, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0x1b}, @typed={0x8, 0x73, 0x0, 0x0, @u32=0x7f}]}, @generic="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", @nested={0x18f, 0x14e, 0x0, 0x1, [@nested={0xb1, 0xe6, 0x0, 0x1, [@generic="bb1a13f554bb57e30c69bb0ccbec37ba1ebfaa42d30b8a530709e34f90f20c161ea7a6c1211a06155d012a983024a1385286fedf26cf8f30510154bea1af416253490fd3746bb654bc7040af60893486ef4d2b24cdcae7c63e0c60a16d82c18ac49cc4fd439efb5bab1eccb142a97ae0823bdb1ed86acebfe7302fd66f97c137a0d157d756a6dafb3df4c62cd1d300fbfed935e033e175399a8fc5491925d4f108a501dc3f1b925a56", @nested={0x4, 0x3a}]}, @generic="2faf7b815599da4a1df1cb1f93e1cb76af6118793cee0540d5a4373477793ebe85d46f584b586d2e40299ba7c8854f461cd758211d23e2c1525497e99cd193321ba55727f0a90e5281843fb3f5a19a2db23dc0d2d1970f426eb26cbfc89a5df36f8cabfdbdf686dbea575de4cb277202f7169623416aea559e64b67bed16f11114bc3a7f9eb32b7b69e1a13742515f54198f9b2da368d730f852318690a19d7f1af02b901aa897d92b163f27952d6fae87c8585f2640e87ae23fd84eb5de5e7a028c4b47fec9c3", @typed={0x4, 0x169}, @typed={0xc, 0x26, 0x0, 0x0, @u64=0x8}]}]}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x2}]}, 0x139c}, 0x1, 0x0, 0x0, 0x4c811}, 0x20004000) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket(0x2, 0x80002, 0x73) socket(0x2, 0xa, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) ioctl$auto(0x1, 0x890b, 0x8) unshare$auto(0x6c000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4) clock_gettime$auto(0x6, 0x0) acct$auto(&(0x7f0000000280)='/dev/vhci\x00') mount$auto(0x0, &(0x7f0000000300)='}[,&*}\x00', &(0x7f0000000580)='nfsd\x00\xa8\x91\xf0\xd3\x12ji\xe9{9~C\xd8C\x95\xa89\x18\x0f\xb1\b0[\xb67\xd0\x8e`\x85\xd9Y\"\x811\xf9\x15X\rF\x82`b\xa2\xa9\xa2\x9c\xd2\xa0\xfa\xcd \a\xcd\xb969[T\xfbG\x11\x1e[\xfe>\xeb\xeb?N\xd0\xea\x11\n\xcbR<\x17;\xda\xb0K\xd8&\xb8\xcd\x81{\x9c\xc4\x1d}1]\xf4\xf8M\xb8\xfe\xa2x+\xeb\x86e\x91\xb8U\xa4va0\x1c\x8d\xdc\x00\x00\x005\x86rTq\x8c\x1e\xed\b\x85\xfa\x8f\xb3\xeaF\xc3F\x15/\xfe\xd6O\xd9\xe1\xb7P[F\x86\xa5\x86\x8an}\x90\x9dz\x81:\xb5\x12\x15\xdb\xca]tsg\xf7B\xe2\xb4\xb8w\xf4\x88.\t\x01\x84\x02\xdfcJ\x8d\xaf`\x8a\x04\xbc\'\xee\x93\a\xe9\x98\xebg\xb8\xd5\xc1k\x8e0K\x98~\xf98&\a\x1ef^4\xaf\xfb9Si\x83\xb5\v\xd9f\xfd\x88E@\xf0\x89\'\xdcQW\xa4E\xd9/\x1c\xcb\x86\xce-]D\x7fh\xb9!\x19\xdb\xf5\"7\xb4B0>qn^\xbb\n\xbf\xb5wy7\xcft\t\x16\x1f\r\xf8\xe8\x0f\xe0\xaa\xe9\x1b\x96\xed/\x11vH>\x89\x83q\x14jb3\xbb\xdd/', 0xf, 0x0) 10.009027442s ago: executing program 8 (id=675): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, 0x0, 0x0) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000100)='/proc/self/net/arp_tables_targets\x00', 0x8, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0xa, 0x80000001, 0x9b72, 0x2, 0x8000) timer_create$auto(0x0, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000000)={0x6, 0x2, 0x6, 0x3ff, 0x4, 0xffffffffffffffff}) prctl$auto(0x74a2, 0x5, r2, 0x7fffffff, 0x4) mmap$auto(0x0, 0x4020009, 0x800000db, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 6.531920173s ago: executing program 2 (id=686): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) read$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffffff, &(0x7f00000004c0)=""/132, 0x84) r5 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r5, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r2, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400d0}, 0x40) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(r6, 0x0, 0x7, 0x4008) fanotify_init$auto(0x65, 0x2) 4.765042777s ago: executing program 2 (id=689): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000200), 0x260540, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001840)="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", 0x1d9) ioctl$auto(0x3, 0x80000541b, 0x38) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r2 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x420003, 0x0) r3 = socket(0x35, 0x5, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendfile$auto(r2, r3, &(0x7f00000001c0)=0x3ff, 0xe) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x7f83, 0x0) mmap$auto(0x0, 0x202000c, 0x7, 0xebf, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40000403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x6f29, 0x0) io_uring_setup$auto(0x5, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1adf82, 0x0) ioctl$auto(0x3, 0x80286f4e, r5) 4.673619113s ago: executing program 3 (id=690): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/dev_snmp6/batadv_slave_0\x00', 0x40040, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000080), r1) (async) r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000080), r1) sendmsg$auto_KSMBD_EVENT_SHUTTING_DOWN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) close_range$auto(0x0, r0, 0xfffffffe) (async) close_range$auto(0x0, r0, 0xfffffffe) eventfd$auto(0x1004) (async) r4 = eventfd$auto(0x1004) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0x4004af07, r4) (async) ioctl$auto(r5, 0x4004af07, r4) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x1e, 0x805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x5, 0x0) fsopen$auto(0x0, 0x1) (async) fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000400)=""/232, 0xe8) 3.843993545s ago: executing program 3 (id=691): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) getcwd$auto(0x0, 0xffffffffffffffff) r0 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r0, 0x0, 0x80000000) kexec_load$auto(0x7fffffff, 0x2, 0x0, 0xfffffffffffffffb) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x2, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) r2 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r3, &(0x7f0000000000)='\\@-,@n', 0x60) r4 = fcntl$auto_F_DUPFD_CLOEXEC(r3, 0x406, r2) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_SE_IO(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x300040c0}, 0x24000080) sendmsg$auto_NFC_CMD_DEV_DOWN(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="40001800", @ANYRES16=r5, @ANYBLOB="200028bd70005900000003000000080001000900000005000c000500000008000e00ff7f000004001400060011000b000000050010007f000000"], 0x40}}, 0x1) sendmsg$auto_NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x840) removexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G') r6 = geteuid() r7 = getegid() setregid$auto(r7, r7) fchown$auto(r0, r6, r7) 3.774345076s ago: executing program 2 (id=692): bind$auto(0xffffffffffffffff, 0x0, 0x69) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x189002, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4, 0x0) socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS1\x00', 0x201, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x40100, 0x0) socket(0xa, 0x3, 0x3b) r0 = socket(0x11, 0x2, 0x300) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x40000080) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/fs/ext4/sda1/options\x00', 0x181202, 0x0) pread64$auto(r3, 0x0, 0x400100000001, 0x1ff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x55) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) 3.597108899s ago: executing program 9 (id=693): sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x40004) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind$auto(0x5, 0x5, 0x78, 0x0, 0x8000000000000001, 0x2) readv$auto(r0, 0x0, 0x6) r1 = socket(0xa, 0x801, 0x84) fcntl$auto_F_GETFD(r1, 0x1, 0xffffffff) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r4, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}, @NET_SHAPER_A_HANDLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8, 0xfd}, 0x6a) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r4, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x10004011) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r9, 0x1, 0x7ff) r10 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rc/name\x00', 0x2, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r10, 0x0, 0x0) sendmsg$auto_NL802154_CMD_ASSOCIATE(r1, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000009c0)={0x464, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_WPAN_PHY_CAPS={0x437, 0x18, 0x0, 0x1, [@generic="1ad83a5342279a96a0376a031f64fd460170e89d0a6c083353b26cee9f3935beb97f77a613b520caa9f7fb64f3745a57aa467f970c67025d5d1e0ee82c4df603ab828e451689d20020105ae250ed3c18eaebb43ead4b606fcc1b55fc46234464", @generic="f299ec36f5f8beb7b639e6a93826f4f6d354fc1f32ad1d4762017f36a59ca3292edff749cb26211fcdce83d572ddaa3b322138769387a804b459c334e99b696aee144b3a975c0645908ef19bbdc7e13a19790df85b3e98d492f0fdf73e92be8aba015d397ca6d8ffaafc70acf5d08607d1c5429f609331318286da93e3cd7d9ba59b7aa8d369b47f8d0c2e9f2691645a", @nested={0x114, 0x158, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @nested={0x4, 0xc1}, @generic="90647e4cba9d07b94e6accf31ff4125c6887ccb13630585669a37401b7ea3cbd802c2f5d87b7e4073bfcd192739a5ad647e6a820249eccf6ef43afd3c3a74a182ff6f7f58bf725", @generic="8dc4934daecae53d7baa36ca082065e53f9442051cfc614454295b47c78e175bf30c3e38243b8f50764dc48dbda40ffba549413ce47243911cf8d23fbf9cc92e", @generic="f11ba1bdc57014de891b4e788d09044bb7a5cf3a7eaf13422a501765a1ea368c9b4fd3cf704eedbbaadaeb318d13345e92c96464ce2202e1e0301a12b036d29cc1c0063b3c3289a36896bee1f5ff33cbefaae87bd01e71c2cc1a384695c111a3a34c3ef3810015fb521007bc2fda57b9ce134f3912459d790b1b21b255"]}, @generic="86bd304d3af7a4f5ede591b50aad749764db93bbc0d579d884ea5c29aef76aeda6bbd483bc176b48e40087dfb265fc78e81dccea803e76074a326b4a6a64deb51b4e5af53c8d670eccb8ad95f7e7001bb88577b068f04a80c7799a5f5fecfd176155b8ae81058d472523c3f66a9c563324bb9d", @nested={0x44, 0x64, 0x0, 0x1, [@typed={0x17, 0x145, 0x0, 0x0, @str='/proc/self/pagemap\x00'}, @typed={0x14, 0x3d6f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @nested={0x4, 0x12b}, @nested={0x4, 0xf2}, @nested={0x4, 0x10a}, @typed={0x8, 0x8a, 0x0, 0x0, @fd=r10}]}, @generic, @nested={0x176, 0x17, 0x0, 0x1, [@generic="ba2e89ae5551bfa3b96de13b20d0e47ff8538e109ac1be8d14d360a613fa3683f293499223f3779827cf71da37f50d98c33107753f9b885f3a887462f425700932e1523ad4c523af10e2540483a353c3e0fedd9f4fbc1bdca7c3eae5e15fc909de88bf4c0b33776b0821e0ac6f199a9b15924446b67899accd8a0a4469a28537aee1c047b4243c7b514a9caa7e4390b33f66650cc844f7b63691c4729d1acddbc20c1d6600909af9481e947a7d354d890a4f36ecd8b4683a0dc18114f2af18ad207f", @typed={0xc, 0x5d, 0x0, 0x0, @u64=0x2}, @typed={0x91, 0x50, 0x0, 0x0, @binary="7447e7ad1db31250fb5dffbf5ac699e4f7f87a4d2b2436335b549a6096669d82c5278a2ca9def08d8e4a8db7f98cf171f7306d271d05e47ea113f63bf62f55bcb50a901fd13ba32e7a4228d5f3eca79dc40be21c3864d2c364a4d3294a34e98f78157327963c2bc7c656359abc2b29325cddc544e2cbfefb8a8069863552b32e93f805a369be330fe45b7f9673"}, @nested={0x4, 0x2a}, @nested={0x4, 0x104}, @typed={0x4, 0xea}, @nested={0x4, 0x136}]}]}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x9}]}, 0x464}}, 0x20008000) r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop15/queue/atomic_write_boundary_bytes\x00', 0x141900, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r11, &(0x7f0000000040)=""/124, 0x7c) r12 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r12, 0x0, 0x39b8) seccomp$auto(0x4255, 0x0, &(0x7f0000000000)="1aee99d2b67293888c8fab794e85f5f76927417c72f7879ec11df67dc022fb3cf0f490b36b82a3249520e9b511877f14c95de9c0f42b9ada3d2d99") 3.271329367s ago: executing program 3 (id=694): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r1, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) readv$auto(0x3, 0x0, 0x8) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x8}, 0x9}, 0x106, 0x300) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 3.217422893s ago: executing program 9 (id=695): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x26, "57af1e71115dce30d9ae0ff2ce58"}, 0x2) r0 = semctl$auto_GETPID(0x5, 0xe7e, 0xb, 0x100400000) move_pages$auto(r0, 0xcef4, 0x0, 0x0, 0x0, 0x7f) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sg0\x00', 0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/pcm0c/sub0/hw_params\x00', 0x161740, 0x0) write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xad\x86\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xfb\xff\xc9\xd6\x84\xef\xf5\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xed\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\x05\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd?\x13\xe2\xad\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH', 0x8) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f0000000000)={"f0c265b75f29d6a2085b0d0d9a5c09000818b5a97ca80a6f00", 0xfffd, 0xf9f, 0xc, 0xa089, 0x8, 0xffffffffffffffff}) capset$auto(&(0x7f0000000080)={0xaac1, r3}, &(0x7f00000000c0)={0xfffffffe, 0x5, 0x3}) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r1, 0x6, &(0x7f0000000240)={@_si_pad}, 0x2) setrlimit$auto(0x8, 0x0) socket(0x11, 0x3, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0xfffffffffffffffc, 0x40008, 0xdb, 0x39, 0x7, 0x28000) io_uring_setup$auto(0xfa3, 0x0) bpf$auto(0x5, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x100, 0x0) socketpair$auto(0x2001e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x7) ioctl$auto_IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000140)) ioctl$auto(0x3, 0x4048aec9, r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c00, 0x0) set_mempolicy$auto(0x0, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x200007, 0x19) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x3b9ac9ff}) adjtimex$auto(0x0) 3.014119757s ago: executing program 9 (id=696): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) (async, rerun: 64) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) socket(0xa, 0x3, 0x3b) (rerun: 32) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_sco_debugfs_fops_(r0, 0x0, 0x0) (async) mprotect$auto(0x200000000000, 0x806122, 0xc) r1 = socket(0x2, 0x80802, 0x0) getsockopt$auto_SO_OOBINLINE(r1, 0x11, 0xa, 0x0, &(0x7f0000000200)=0xfffffffa) (async) write$auto_fops_u16_(r0, &(0x7f0000000040)="69eac74e67f600625d26d5320e71", 0xe) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) (async, rerun: 32) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, 0x0, 0x0) (rerun: 32) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/ip_vs_app\x00', 0x40, 0x0) pread64$auto(r3, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) (async) prctl$auto(0x0, 0xe, 0x4, 0x800, 0x7) unshare$auto(0x40000080) 2.950081626s ago: executing program 3 (id=697): unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) socket(0xa, 0x1, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82042, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x200000000003, 0x9, 0x15) faccessat2$auto(0x1, 0x0, 0x4, 0x1200) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_STATUS(r3, 0x0, 0x40) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) 2.307664535s ago: executing program 2 (id=698): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a0001"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='O'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x20040000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000200), r2) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r2, &(0x7f00000014c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={&(0x7f0000000440)={0x1014, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, "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"}, 0x1014}, 0x1, 0x0, 0x0, 0x4008890}, 0xc004) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, 0x0, 0x4000010) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1c0b02, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', 0xa3182, 0x0) sendfile$auto(r4, r4, 0x0, 0xffffffff) 1.648797944s ago: executing program 2 (id=699): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) socket(0x11, 0x3, 0x9) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto(r2, 0x6f41, 0x38) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r0) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/ports/0/pp_hold\x00', 0x2201c3, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r3, 0x541c, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8085}, 0x8000) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x86}, 0x4000841) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.063961117s ago: executing program 9 (id=700): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x89b0, &(0x7f0000000080)={'bond0\x00'}) getsockopt$auto_SO_SNDBUF(r1, 0x8, 0x7, &(0x7f00000001c0)='$\x00', &(0x7f0000000280)=0x6) r2 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r2, 0x0, 0x2) inotify_add_watch$auto(r2, 0x0, 0x80000000) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000180)={0x4, 0x3, 0x4, 0x81, 0x7, 0x5, &(0x7f0000000140)="49cff726cd2b47c53f14f7f7c842a4630f007390f871ac476c3c1ed88e6a01e7a2"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) 894.593077ms ago: executing program 3 (id=701): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd12/queue/atomic_write_unit_min_bytes\x00', 0x80800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/93, 0x5d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x3, 0x2) setsockopt$auto(r1, 0x0, 0xcc, 0xfffffffffffffffc, 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000d36a7dfe2a716048d6ef506605836d", @ANYRES16=r2, @ANYBLOB="00022cbd7000fbdbdf25300000000500a20004000000"], 0x1c}}, 0x5) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x9c, 0xbd, "b8c0b31026d08271e3578c8367495437fd26a2b56fd7b837d80f557e0447f2d90b6682ecafe6d92f53ca5d5b4dca0caf1f613de45889437a072680c4305f4aaa6b0524f43475825263aa69e0889b0b5585fb6e506059f2ae23a53bfb21cff3c364cb2accdc816c0ed2d68a0ede57962757345ec5393ec3c23a258fbd6bb9b1b859dd41d8d23672ac88bfd57050f071587a2703f50e3c6106"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) open_by_handle_at$auto(r3, &(0x7f0000000280)={0x57, 0x7, "3a1bf3fef1cbb19f6baa4380959756e88b901e07e1cf7ad8b5e806a4e196e9810a9bb23df32a1fc642f9a4db36658e6aa3183b3db2d10799c47eb62e0b81fe7a404caf47974580aa251eabe1dbd89383bcfecc04e7a884"}, 0x41) 806.716484ms ago: executing program 9 (id=702): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0xdb) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r2 = socket(0x11, 0x3, 0x2) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x10000000000, 0x11, 0x3, 0x100000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8955, 0x0) 420.325136ms ago: executing program 9 (id=703): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) inotify_init1$auto(0x4000000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) r2 = fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = socket(0xa, 0x1, 0x84) mprotect$auto(0x200000000000, 0x806122, 0xc) getsockopt$auto(r3, 0x84, 0x85, 0x0, &(0x7f0000000000)=0x7ffe) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) renameat$auto(r4, 0x0, r4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r2, 0x205, 0xa, 0x4, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x30) ioctl$auto(r1, 0xc038563b, r0) 29.182189ms ago: executing program 3 (id=704): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0xfffffffffffffff8, 0x4, 0x9f, 0x800000000801e, 0xffffffffffffffff, 0x8) mprotect$auto(0x1000, 0x401000, 0x4) epoll_create$auto(0x15) mmap$auto(0xffffffffdffffffc, 0x2020006, 0x202, 0x14, 0xfffffffffffffffa, 0x400006) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb2, 0x602, 0x300000000000) ioctl$auto_BLKFRAGET(r0, 0x1265, 0x0) ioprio_set$auto(0x9, 0xee00, 0x6) socket(0x15, 0x5, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4001af84, 0x0) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000080), r1) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) fsconfig$auto_HIDEPID_INVISIBLE(r3, 0x2, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0), 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) pwrite64$auto(r4, &(0x7f00000000c0)='/dev/virtual_nci\x00', 0x7, 0xc) pwrite64$auto(r5, &(0x7f0000000100)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x0, 0x2) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram1\x00', 0x20001, 0x0) 0s ago: executing program 2 (id=705): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r1, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) readv$auto(0x3, 0x0, 0x8) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x8}, 0x9}, 0x106, 0x300) close_range$auto(0x2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ) entered blocking state [ 89.242488][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.250079][ T5631] bridge_slave_0: entered allmulticast mode [ 89.257993][ T5631] bridge_slave_0: entered promiscuous mode [ 89.267928][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.279960][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.291766][ T5633] team0: Port device team_slave_0 added [ 89.297969][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.305139][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.312425][ T5631] bridge_slave_1: entered allmulticast mode [ 89.319889][ T5631] bridge_slave_1: entered promiscuous mode [ 89.329862][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.341502][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.352771][ T5633] team0: Port device team_slave_1 added [ 89.451136][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.463577][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.474954][ T5632] team0: Port device team_slave_0 added [ 89.483366][ T5630] team0: Port device team_slave_0 added [ 89.491108][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.498156][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.524321][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.547841][ T5632] team0: Port device team_slave_1 added [ 89.555285][ T5630] team0: Port device team_slave_1 added [ 89.575453][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.582718][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.608721][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.663958][ T5631] team0: Port device team_slave_0 added [ 89.681002][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.688345][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.714597][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.729370][ T5631] team0: Port device team_slave_1 added [ 89.735711][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.742723][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.769108][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.781077][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.788489][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.814547][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.846034][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.853331][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.879418][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.936039][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.943208][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.969768][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.000128][ T5633] hsr_slave_0: entered promiscuous mode [ 90.006961][ T5633] hsr_slave_1: entered promiscuous mode [ 90.015972][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.023007][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.049089][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.108790][ T5630] hsr_slave_0: entered promiscuous mode [ 90.115157][ T5630] hsr_slave_1: entered promiscuous mode [ 90.121819][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 90.127930][ T5630] Cannot create hsr debugfs directory [ 90.150013][ T5632] hsr_slave_0: entered promiscuous mode [ 90.156299][ T5632] hsr_slave_1: entered promiscuous mode [ 90.162847][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 90.168717][ T5632] Cannot create hsr debugfs directory [ 90.289261][ T5631] hsr_slave_0: entered promiscuous mode [ 90.296098][ T5631] hsr_slave_1: entered promiscuous mode [ 90.303166][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 90.308985][ T5631] Cannot create hsr debugfs directory [ 90.687539][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.704612][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.712880][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.724354][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.732534][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.743027][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.752843][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.765185][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.855195][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.865765][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.874458][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.885130][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.894352][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.912004][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.920723][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.934131][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.050255][ T5630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.063363][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.066719][ T5645] Bluetooth: hci0: command tx timeout [ 91.072493][ T5634] Bluetooth: hci2: command tx timeout [ 91.075909][ T50] Bluetooth: hci3: command tx timeout [ 91.081344][ T4950] Bluetooth: hci1: command tx timeout [ 91.096304][ T5630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.106486][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.114985][ T5630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.125389][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.134079][ T5630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.143681][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.261415][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.273333][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.288302][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.298804][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.328100][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.344153][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.355779][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.363795][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.373434][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.436253][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.480391][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.488067][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.513039][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.520184][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.531909][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.612117][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.636125][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.643299][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.682322][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.689495][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.718592][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.768985][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.830267][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.868635][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.875954][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.910833][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.929840][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.937106][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.970537][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.977792][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.029453][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.036760][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.193660][ T10] cfg80211: failed to load regulatory.db [ 92.927122][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.110694][ T5633] veth0_vlan: entered promiscuous mode [ 93.146874][ T4950] Bluetooth: hci1: command tx timeout [ 93.152850][ T5634] Bluetooth: hci2: command tx timeout [ 93.152899][ T50] Bluetooth: hci3: command tx timeout [ 93.162075][ T5633] veth1_vlan: entered promiscuous mode [ 93.164303][ T5645] Bluetooth: hci0: command tx timeout [ 93.282109][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.328756][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.358392][ T5633] veth0_macvtap: entered promiscuous mode [ 93.373201][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.395186][ T5633] veth1_macvtap: entered promiscuous mode [ 93.439704][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.474619][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.509228][ T5630] veth0_vlan: entered promiscuous mode [ 93.530313][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.540970][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.569098][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.578764][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.595175][ T5632] veth0_vlan: entered promiscuous mode [ 93.629163][ T5630] veth1_vlan: entered promiscuous mode [ 93.684377][ T5632] veth1_vlan: entered promiscuous mode [ 93.694000][ T5631] veth0_vlan: entered promiscuous mode [ 93.753840][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.765517][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.777113][ T5631] veth1_vlan: entered promiscuous mode [ 93.843748][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.852359][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.889788][ T5630] veth0_macvtap: entered promiscuous mode [ 93.903048][ T5632] veth0_macvtap: entered promiscuous mode [ 93.936208][ T5630] veth1_macvtap: entered promiscuous mode [ 93.964958][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.969542][ T5631] veth0_macvtap: entered promiscuous mode [ 93.990491][ T5632] veth1_macvtap: entered promiscuous mode [ 94.010457][ T5631] veth1_macvtap: entered promiscuous mode [ 94.039545][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.084863][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.104887][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.137206][ T1173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.148992][ T1173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.161963][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.172897][ T5786] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.184712][ T1173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.194631][ T1173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.205901][ T5786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.210768][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.225668][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.255443][ T5786] bond0: (slave bond_slave_0): Releasing backup interface [ 94.301520][ T1173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.311500][ T1173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.316905][ T5786] Zero length message leads to an empty skb [ 94.361200][ T1173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.371766][ T1173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.402122][ T1173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.439713][ T1173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.467328][ T1173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.487640][ T1173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.633929][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.648310][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.734066][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.746131][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.820320][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.839797][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.890629][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.904684][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.004530][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.024249][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.090795][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.109306][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.207559][ T5791] process 'syz.2.5' launched '/dev/fd/7' with NULL argv: empty string added [ 95.226584][ T50] Bluetooth: hci0: command tx timeout [ 95.232968][ T50] Bluetooth: hci3: command tx timeout [ 95.233212][ T5645] Bluetooth: hci1: command tx timeout [ 95.238796][ T4950] Bluetooth: hci2: command tx timeout [ 97.098874][ T5814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 97.287597][ T5800] smpboot: CPU 1 is now offline [ 97.388084][ T5814] bond0: (slave bond_slave_0): Releasing backup interface [ 97.538681][ T5803] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.590800][ T5803] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.684488][ T5803] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.779577][ T5803] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.840733][ T5803] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.930579][ T5803] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.049479][ T5803] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.105846][ T5803] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.171673][ T5803] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.225564][ T5803] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.270464][ T5803] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.333887][ T5803] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.174588][ T5824] vivid-007: ================= START STATUS ================= [ 99.210796][ T5824] vivid-007: Generate PTS: true [ 99.253552][ T5824] vivid-007: Generate SCR: true [ 99.277082][ T5824] tpg source WxH: 320x240 (Y'CbCr) [ 99.310648][ T5824] tpg field: 1 [ 99.333337][ T5824] tpg crop: (0,0)/320x240 [ 99.342734][ T5831] binder: 5828:5831 ioctl 400c620e 0 returned -14 [ 99.383732][ T5824] tpg compose: (0,0)/320x240 [ 99.427983][ T5824] tpg colorspace: 8 [ 99.454095][ T5824] tpg transfer function: 0/0 [ 99.507822][ T5824] tpg Y'CbCr encoding: 0/0 [ 99.547842][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.565810][ T5824] tpg quantization: 0/0 [ 99.595498][ T5824] tpg RGB range: 0/2 [ 99.628523][ T5824] vivid-007: ================== END STATUS ================== [ 99.787158][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.107399][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.267903][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.628102][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.723977][ T5874] FAULT_INJECTION: forcing a failure. [ 101.723977][ T5874] name failslab, interval 1, probability 0, space 0, times 1 [ 101.787726][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(full) [ 101.787753][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.787763][ T5874] Call Trace: [ 101.787769][ T5874] [ 101.787777][ T5874] dump_stack_lvl+0x100/0x190 [ 101.787810][ T5874] should_fail_ex.cold+0x5/0xa [ 101.787832][ T5874] should_failslab+0xc2/0x120 [ 101.787871][ T5874] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 101.787925][ T5874] ? ext4_alloc_io_end_vec+0x2b/0x1c0 [ 101.787955][ T5874] ext4_alloc_io_end_vec+0x2b/0x1c0 [ 101.787982][ T5874] ext4_do_writepages+0x1765/0x3f20 [ 101.788000][ T5874] ? do_raw_spin_lock+0x128/0x260 [ 101.788029][ T5874] ? hrtimer_start_range_ns+0x860/0x1a50 [ 101.788054][ T5874] ? __pfx_ext4_do_writepages+0x10/0x10 [ 101.788084][ T5874] ? ext4_writepages+0x347/0x790 [ 101.788102][ T5874] ext4_writepages+0x347/0x790 [ 101.788121][ T5874] ? __pfx_ext4_writepages+0x10/0x10 [ 101.788151][ T5874] ? __pfx_ext4_writepages+0x10/0x10 [ 101.788170][ T5874] do_writepages+0x278/0x600 [ 101.788194][ T5874] ? __pfx_do_writepages+0x10/0x10 [ 101.788215][ T5874] ? do_raw_spin_unlock+0x145/0x1e0 [ 101.788234][ T5874] ? _raw_spin_unlock+0x28/0x50 [ 101.788258][ T5874] filemap_writeback+0x22d/0x2e0 [ 101.788282][ T5874] ? __pfx_filemap_writeback+0x10/0x10 [ 101.788335][ T5874] ? mt_find+0x45e/0x8e0 [ 101.788362][ T5874] ? __pfx_mt_find+0x10/0x10 [ 101.788392][ T5874] file_write_and_wait_range+0xcd/0x140 [ 101.788421][ T5874] ext4_sync_file+0x358/0xb90 [ 101.788441][ T5874] ? __pfx_ext4_sync_file+0x10/0x10 [ 101.788457][ T5874] ? __up_read+0x290/0x6e0 [ 101.788477][ T5874] ? __pfx___up_read+0x10/0x10 [ 101.788494][ T5874] ? __do_sys_msync+0x39b/0x590 [ 101.788512][ T5874] ? __pfx_ext4_sync_file+0x10/0x10 [ 101.788527][ T5874] vfs_fsync_range+0x9b/0x190 [ 101.788553][ T5874] __do_sys_msync+0x3ca/0x590 [ 101.788574][ T5874] do_syscall_64+0x115/0x840 [ 101.788598][ T5874] ? clear_bhb_loop+0x40/0x90 [ 101.788619][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.788638][ T5874] RIP: 0033:0x7fae4099ce59 [ 101.788653][ T5874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.788670][ T5874] RSP: 002b:00007fae41856028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 101.788687][ T5874] RAX: ffffffffffffffda RBX: 00007fae40c15fa0 RCX: 00007fae4099ce59 [ 101.788698][ T5874] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 101.788708][ T5874] RBP: 00007fae40a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 101.788718][ T5874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.788728][ T5874] R13: 00007fae40c16038 R14: 00007fae40c15fa0 R15: 00007ffd03ca6f18 [ 101.788751][ T5874] [ 102.366869][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.373748][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.380124][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.707207][ T4950] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.427759][ T4950] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.434168][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.440539][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.247556][ T5913] syz.2.24 (5913) used greatest stack depth: 19720 bytes left [ 107.925689][ T5908] mmap: syz.3.23 (5908) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.975454][ T5936] Line length is too long: Should be less than 4094 [ 108.233528][ T5907] Process accounting resumed [ 110.456033][ T5956] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.472079][ T5960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.33'. [ 110.766268][ T5960] bond0: (slave bond_slave_0): Releasing backup interface [ 111.332191][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36'. [ 111.498574][ T5967] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.513390][ T5975] netlink: 337 bytes leftover after parsing attributes in process `syz.0.34'. [ 115.219016][ T6028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.47'. [ 115.404840][ T6028] bond0: (slave bond_slave_0): Releasing backup interface [ 116.789454][ T6036] syz.0.49 uses obsolete (PF_INET,SOCK_PACKET) [ 116.826985][ T4950] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.835986][ T6018] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 116.934279][ T6042] FAULT_INJECTION: forcing a failure. [ 116.934279][ T6042] name fail_futex, interval 1, probability 0, space 0, times 1 [ 117.024765][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT(full) [ 117.024792][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.024802][ T6042] Call Trace: [ 117.024809][ T6042] [ 117.024815][ T6042] dump_stack_lvl+0x100/0x190 [ 117.024849][ T6042] should_fail_ex.cold+0x5/0xa [ 117.024871][ T6042] get_futex_key+0x1d2/0x1510 [ 117.024900][ T6042] ? __pfx_get_futex_key+0x10/0x10 [ 117.024931][ T6042] ? __pfx_uart_ioctl+0x10/0x10 [ 117.024958][ T6042] futex_wake+0xea/0x530 [ 117.024981][ T6042] ? __pfx_futex_wake+0x10/0x10 [ 117.025003][ T6042] ? tty_jobctrl_ioctl+0x152/0xce0 [ 117.025031][ T6042] ? __pfx_uart_ioctl+0x10/0x10 [ 117.025055][ T6042] ? tty_ioctl+0x345/0x1640 [ 117.025079][ T6042] do_futex+0x32b/0x350 [ 117.025097][ T6042] ? __pfx_do_futex+0x10/0x10 [ 117.025116][ T6042] ? find_held_lock+0x2b/0x80 [ 117.025141][ T6042] __x64_sys_futex+0x34f/0x4d0 [ 117.025168][ T6042] ? __fget_files+0x21f/0x3d0 [ 117.025189][ T6042] ? __pfx___x64_sys_futex+0x10/0x10 [ 117.025210][ T6042] ? rcu_is_watching+0x12/0xc0 [ 117.025233][ T6042] do_syscall_64+0x115/0x840 [ 117.025257][ T6042] ? clear_bhb_loop+0x40/0x90 [ 117.025279][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.025297][ T6042] RIP: 0033:0x7f747159ce59 [ 117.025313][ T6042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.025330][ T6042] RSP: 002b:00007f746f7d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.025348][ T6042] RAX: ffffffffffffffda RBX: 00007f7471816098 RCX: 00007f747159ce59 [ 117.025359][ T6042] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f747181609c [ 117.025369][ T6042] RBP: 00007f7471816090 R08: 0000000000000001 R09: 0000000000000000 [ 117.025379][ T6042] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 117.025389][ T6042] R13: 00007f7471816128 R14: 00007ffc5744ffa0 R15: 00007ffc57450088 [ 117.025410][ T6042] [ 117.519058][ T6018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.540121][ T6018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.597718][ T6018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.835951][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.52'. [ 118.988037][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.627042][ T4950] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.634379][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.791330][ T6098] netlink: 186 bytes leftover after parsing attributes in process `syz.0.63'. [ 124.643232][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.68'. [ 124.897943][ T6153] ptp ptp0: only physical clock in use now [ 124.966870][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.112606][ T6146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.033120][ T6168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.72'. [ 127.150476][ T5634] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 131.869917][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.893370][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.095571][ T6321] FAULT_INJECTION: forcing a failure. [ 135.095571][ T6321] name failslab, interval 1, probability 0, space 0, times 0 [ 135.242472][ T6321] CPU: 0 UID: 0 PID: 6321 Comm: syz.2.89 Not tainted syzkaller #0 PREEMPT(full) [ 135.242499][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.242510][ T6321] Call Trace: [ 135.242516][ T6321] [ 135.242523][ T6321] dump_stack_lvl+0x100/0x190 [ 135.242557][ T6321] should_fail_ex.cold+0x5/0xa [ 135.242580][ T6321] should_failslab+0xc2/0x120 [ 135.242602][ T6321] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 135.242630][ T6321] ? alloc_empty_file+0x5b/0x1c0 [ 135.242667][ T6321] alloc_empty_file+0x5b/0x1c0 [ 135.242693][ T6321] alloc_file_pseudo+0x13a/0x230 [ 135.242720][ T6321] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 135.242746][ T6321] ? alloc_fd+0x476/0x790 [ 135.242771][ T6321] sock_alloc_file+0x50/0x210 [ 135.242792][ T6321] __sys_socket+0x1c0/0x260 [ 135.242816][ T6321] ? __pfx___sys_socket+0x10/0x10 [ 135.242843][ T6321] ? ksys_write+0x1ac/0x250 [ 135.242868][ T6321] __x64_sys_socket+0x72/0xb0 [ 135.242891][ T6321] ? lockdep_hardirqs_on+0x78/0x100 [ 135.242916][ T6321] do_syscall_64+0x115/0x840 [ 135.242939][ T6321] ? clear_bhb_loop+0x40/0x90 [ 135.242960][ T6321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.242977][ T6321] RIP: 0033:0x7fae4099ce59 [ 135.242993][ T6321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.243009][ T6321] RSP: 002b:00007fae41856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 135.243026][ T6321] RAX: ffffffffffffffda RBX: 00007fae40c15fa0 RCX: 00007fae4099ce59 [ 135.243037][ T6321] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 135.243047][ T6321] RBP: 00007fae40a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 135.243057][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.243067][ T6321] R13: 00007fae40c16038 R14: 00007fae40c15fa0 R15: 00007ffd03ca6f18 [ 135.243088][ T6321] [ 136.144346][ T6339] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 136.963656][ T6347] FAULT_INJECTION: forcing a failure. [ 136.963656][ T6347] name fail_futex, interval 1, probability 0, space 0, times 0 [ 136.976982][ T6347] CPU: 0 UID: 0 PID: 6347 Comm: syz.3.94 Not tainted syzkaller #0 PREEMPT(full) [ 136.977007][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.977017][ T6347] Call Trace: [ 136.977024][ T6347] [ 136.977030][ T6347] dump_stack_lvl+0x100/0x190 [ 136.977064][ T6347] should_fail_ex.cold+0x5/0xa [ 136.977086][ T6347] should_fail_futex+0x4c/0x60 [ 136.977114][ T6347] futex_lock_pi_atomic+0x12d/0xaf0 [ 136.977140][ T6347] ? futex_hash+0x141/0x370 [ 136.977170][ T6347] futex_lock_pi+0x245/0x7a0 [ 136.977193][ T6347] ? __pfx_futex_lock_pi+0x10/0x10 [ 136.977235][ T6347] ? __pfx_futex_wake_mark+0x10/0x10 [ 136.977261][ T6347] ? ksys_write+0x190/0x250 [ 136.977280][ T6347] ? ksys_write+0x190/0x250 [ 136.977304][ T6347] do_futex+0x18a/0x350 [ 136.977323][ T6347] ? __pfx_do_futex+0x10/0x10 [ 136.977346][ T6347] __x64_sys_futex+0x34f/0x4d0 [ 136.977367][ T6347] ? __pfx___x64_sys_futex+0x10/0x10 [ 136.977384][ T6347] ? ksys_write+0x1ac/0x250 [ 136.977406][ T6347] ? rcu_is_watching+0x12/0xc0 [ 136.977435][ T6347] do_syscall_64+0x115/0x840 [ 136.977460][ T6347] ? clear_bhb_loop+0x40/0x90 [ 136.977482][ T6347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.977501][ T6347] RIP: 0033:0x7f8314d9ce59 [ 136.977517][ T6347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.977533][ T6347] RSP: 002b:00007f8315d17028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 136.977551][ T6347] RAX: ffffffffffffffda RBX: 00007f8315015fa0 RCX: 00007f8314d9ce59 [ 136.977562][ T6347] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 136.977572][ T6347] RBP: 00007f8314e32d6f R08: 0000000000000000 R09: 000000008000fff5 [ 136.977583][ T6347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.977593][ T6347] R13: 00007f8315016038 R14: 00007f8315015fa0 R15: 00007ffc20811958 [ 136.977616][ T6347] [ 138.285157][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.98'. [ 138.874967][ T6375] ubi31: attaching mtd0 [ 139.023734][ T6375] ubi31: scanning is finished [ 139.023756][ T6375] ubi31: empty MTD device detected [ 140.124845][ T6375] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 140.175343][ T6375] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 140.175367][ T6375] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 140.175381][ T6375] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 140.175397][ T6375] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 140.175411][ T6375] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 140.175426][ T6375] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4225685114 [ 140.175443][ T6375] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 140.176896][ T6390] ubi31: background thread "ubi_bgt31d" started, PID 6390 [ 140.688717][ T6369] Process accounting paused [ 141.276990][ T6397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.105'. [ 147.222067][ T5634] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 147.596807][ T6459] can: request_module (can-proto-3) failed. [ 149.307590][ T4950] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.388129][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.334375][ T4950] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 153.678456][ T6504] Console: switching to colour VGA+ 80x25 [ 154.197741][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.125'. [ 155.354033][ T6535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.129'. [ 155.403920][ T29] audit: type=1800 audit(1781398689.614:2): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.130" name="dbroot" dev="configfs" ino=12781 res=0 errno=0 [ 155.898457][ T6545] ubi: mtd0 is already attached to ubi31 [ 156.409555][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 158.268817][ T6569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.136'. [ 158.938652][ T6575] netlink: 'syz.2.138': attribute type 2 has an invalid length. [ 160.169884][ T6580] netlink: 'syz.3.139': attribute type 16 has an invalid length. [ 160.260645][ T6580] netlink: 306 bytes leftover after parsing attributes in process `syz.3.139'. [ 160.566080][ T6584] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 160.821040][ T6584] pci 0000:00:01.3: PCI INT A: no GSI [ 164.450646][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.150'. [ 167.302229][ T6629] &#$@\]\-: entered promiscuous mode [ 167.435310][ T29] audit: type=1400 audit(1781398701.644:3): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6672 comm="syz.0.156" [ 168.880423][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'. [ 169.414002][ T6700] netlink: 222 bytes leftover after parsing attributes in process `syz.3.163'. [ 170.387001][ T6674] kexec: Could not allocate control_code_buffer [ 170.690026][ T6707] Process accounting resumed [ 171.685846][ T6735] Invalid input. Must be >= 4608 [ 172.462691][ T6737] FAULT_INJECTION: forcing a failure. [ 172.462691][ T6737] name failslab, interval 1, probability 0, space 0, times 0 [ 172.678733][ T6737] CPU: 0 UID: 0 PID: 6737 Comm: syz.3.168 Not tainted syzkaller #0 PREEMPT(full) [ 172.678759][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.678769][ T6737] Call Trace: [ 172.678775][ T6737] [ 172.678782][ T6737] dump_stack_lvl+0x100/0x190 [ 172.678817][ T6737] should_fail_ex.cold+0x5/0xa [ 172.678840][ T6737] should_failslab+0xc2/0x120 [ 172.678863][ T6737] __kvmalloc_node_noprof+0xfa/0xa00 [ 172.678881][ T6737] ? io_uring_setup.cold+0x171/0x1c6e [ 172.678908][ T6737] ? lockdep_init_map_type+0x5c/0x250 [ 172.678940][ T6737] io_uring_setup.cold+0x171/0x1c6e [ 172.678979][ T6737] ? __pfx_io_uring_setup+0x10/0x10 [ 172.679008][ T6737] ? do_futex+0x192/0x350 [ 172.679026][ T6737] ? __pfx_do_futex+0x10/0x10 [ 172.679052][ T6737] ? xfd_validate_state+0x129/0x190 [ 172.679074][ T6737] __x64_sys_io_uring_setup+0xc2/0x170 [ 172.679103][ T6737] do_syscall_64+0x115/0x840 [ 172.679127][ T6737] ? clear_bhb_loop+0x40/0x90 [ 172.679149][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.679167][ T6737] RIP: 0033:0x7f8314d9ce59 [ 172.679182][ T6737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.679199][ T6737] RSP: 002b:00007f8315cf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 172.679216][ T6737] RAX: ffffffffffffffda RBX: 00007f8315016090 RCX: 00007f8314d9ce59 [ 172.679227][ T6737] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 172.679237][ T6737] RBP: 00007f8314e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 172.679247][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.679257][ T6737] R13: 00007f8315016128 R14: 00007f8315016090 R15: 00007ffc20811958 [ 172.679278][ T6737] [ 174.004291][ T6761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.173'. [ 176.199844][ T6814] RGB/YUV Input: ================= START STATUS ================= [ 176.352975][ T6814] RGB/YUV Input: Test Pattern: 75% Colorbar [ 176.551110][ T6814] RGB/YUV Input: Show Information: All [ 176.670993][ T6814] RGB/YUV Input: Vertical Flip: false [ 176.776871][ T6814] RGB/YUV Input: Horizontal Flip: false [ 176.900979][ T6814] RGB/YUV Input: Brightness: 128 [ 177.064177][ T6823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.181'. [ 177.087495][ T6814] RGB/YUV Input: Contrast: 128 [ 177.198560][ T6814] RGB/YUV Input: Hue: 0 [ 177.302249][ T6814] RGB/YUV Input: Saturation: 128 [ 177.443002][ T6814] RGB/YUV Input: Pixel Rate: 160000000 [ 177.552813][ T6814] RGB/YUV Input: Horizontal Blanking: 800 [ 177.645152][ T6814] RGB/YUV Input: Vertical Blanking: 3223 [ 177.746874][ T6814] RGB/YUV Input: ================== END STATUS ================== [ 178.882703][ T6839] HSR: entered promiscuous mode [ 179.705608][ T6826] kexec: Could not allocate control_code_buffer [ 180.072709][ T6855] zswap: compressor  not available [ 180.655562][ T6871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.191'. [ 181.142499][ T6880] ima: policy update failed [ 181.182477][ T29] audit: type=1802 audit(1781398715.394:4): pid=6880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.194" res=0 errno=0 [ 182.053991][ T6890] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.086229][ T6890] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.133428][ T6890] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.165690][ T6890] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 182.277364][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 182.927520][ T6923] input: f as /devices/virtual/input/input6 [ 183.466995][ T4950] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.106759][ T4950] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.186532][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.193504][ T4950] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.215970][ T6961] random: crng reseeded on system resumption [ 186.430762][ T7001] FAULT_INJECTION: forcing a failure. [ 186.430762][ T7001] name failslab, interval 1, probability 0, space 0, times 0 [ 186.572342][ T7001] CPU: 0 UID: 0 PID: 7001 Comm: syz.3.212 Not tainted syzkaller #0 PREEMPT(full) [ 186.572368][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.572378][ T7001] Call Trace: [ 186.572384][ T7001] [ 186.572391][ T7001] dump_stack_lvl+0x100/0x190 [ 186.572425][ T7001] should_fail_ex.cold+0x5/0xa [ 186.572447][ T7001] ? lsm_blob_alloc+0x68/0x90 [ 186.572473][ T7001] should_failslab+0xc2/0x120 [ 186.572493][ T7001] __kmalloc_noprof+0xe0/0x850 [ 186.572520][ T7001] ? trace_kmem_cache_alloc+0xd5/0x100 [ 186.572545][ T7001] lsm_blob_alloc+0x68/0x90 [ 186.572571][ T7001] security_cred_alloc_blank+0x28/0x260 [ 186.572602][ T7001] cred_alloc_blank+0x61/0xa0 [ 186.572620][ T7001] keyctl_session_to_parent+0x55/0xae0 [ 186.572644][ T7001] __do_sys_keyctl+0x2b1/0x5a0 [ 186.572664][ T7001] do_syscall_64+0x115/0x840 [ 186.572689][ T7001] ? clear_bhb_loop+0x40/0x90 [ 186.572711][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.572729][ T7001] RIP: 0033:0x7f8314d9ce59 [ 186.572744][ T7001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.572761][ T7001] RSP: 002b:00007f8315cf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 186.572778][ T7001] RAX: ffffffffffffffda RBX: 00007f8315016090 RCX: 00007f8314d9ce59 [ 186.572789][ T7001] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 186.572799][ T7001] RBP: 00007f8314e32d6f R08: 0000000000000001 R09: 0000000000000000 [ 186.572809][ T7001] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 186.572819][ T7001] R13: 00007f8315016128 R14: 00007f8315016090 R15: 00007ffc20811958 [ 186.572842][ T7001] [ 187.125272][ T7007] FAULT_INJECTION: forcing a failure. [ 187.125272][ T7007] name fail_futex, interval 1, probability 0, space 0, times 0 [ 187.227581][ T7007] CPU: 0 UID: 0 PID: 7007 Comm: syz.1.213 Not tainted syzkaller #0 PREEMPT(full) [ 187.227607][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.227617][ T7007] Call Trace: [ 187.227623][ T7007] [ 187.227630][ T7007] dump_stack_lvl+0x100/0x190 [ 187.227664][ T7007] should_fail_ex.cold+0x5/0xa [ 187.227686][ T7007] get_futex_key+0x1d2/0x1510 [ 187.227717][ T7007] ? __pfx_get_futex_key+0x10/0x10 [ 187.227746][ T7007] ? __pfx_core_sys_select+0x10/0x10 [ 187.227771][ T7007] futex_wake+0xea/0x530 [ 187.227794][ T7007] ? __pfx_futex_wake+0x10/0x10 [ 187.227818][ T7007] ? poll_select_finish+0x36e/0x670 [ 187.227838][ T7007] ? __pfx_poll_select_finish+0x10/0x10 [ 187.227860][ T7007] do_futex+0x32b/0x350 [ 187.227878][ T7007] ? __pfx_do_futex+0x10/0x10 [ 187.227909][ T7007] __x64_sys_futex+0x34f/0x4d0 [ 187.227931][ T7007] ? __pfx___x64_sys_futex+0x10/0x10 [ 187.227952][ T7007] ? rcu_is_watching+0x12/0xc0 [ 187.227974][ T7007] do_syscall_64+0x115/0x840 [ 187.227999][ T7007] ? clear_bhb_loop+0x40/0x90 [ 187.228021][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.228039][ T7007] RIP: 0033:0x7f3d0f79ce59 [ 187.228054][ T7007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.228070][ T7007] RSP: 002b:00007f3d106cd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 187.228088][ T7007] RAX: ffffffffffffffda RBX: 00007f3d0fa16188 RCX: 00007f3d0f79ce59 [ 187.228099][ T7007] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3d0fa1618c [ 187.228109][ T7007] RBP: 00007f3d0fa16180 R08: 0000000000000001 R09: 0000000000000000 [ 187.228119][ T7007] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 187.228129][ T7007] R13: 00007f3d0fa16218 R14: 00007ffcdb138a40 R15: 00007ffcdb138b28 [ 187.228150][ T7007] [ 187.577237][ T7016] futex_wake_op: syz.0.215 tries to shift op by -2048; fix this program [ 187.586841][ T7016] futex_wake_op: syz.0.215 tries to shift op by -2048; fix this program [ 187.933424][ T7024] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 188.909078][ T7026] hub 1-0:1.0: USB hub found [ 188.976271][ T7026] hub 1-0:1.0: 1 port detected [ 189.115636][ T7037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.220'. [ 192.579790][ T7089] Invalid ELF header magic: != ELF [ 192.635740][ T7092] Invalid ELF header magic: != ELF [ 193.318120][ T7113] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 193.661293][ T7122] netlink: 222 bytes leftover after parsing attributes in process `syz.3.238'. [ 194.164199][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.239'. [ 194.249546][ T7135] veth1_macvtap: left promiscuous mode [ 194.339346][ T7142] netlink: 222 bytes leftover after parsing attributes in process `syz.1.241'. [ 194.588880][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.597659][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.937420][ T7175] FAULT_INJECTION: forcing a failure. [ 195.937420][ T7175] name failslab, interval 1, probability 0, space 0, times 0 [ 195.993981][ T7175] CPU: 0 UID: 0 PID: 7175 Comm: syz.0.247 Not tainted syzkaller #0 PREEMPT(full) [ 195.994008][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.994018][ T7175] Call Trace: [ 195.994025][ T7175] [ 195.994032][ T7175] dump_stack_lvl+0x100/0x190 [ 195.994066][ T7175] should_fail_ex.cold+0x5/0xa [ 195.994089][ T7175] should_failslab+0xc2/0x120 [ 195.994110][ T7175] __kmalloc_cache_noprof+0x7a/0x6f0 [ 195.994135][ T7175] ? nfc_genl_rcv_nl_event+0xc1/0x300 [ 195.994167][ T7175] nfc_genl_rcv_nl_event+0xc1/0x300 [ 195.994196][ T7175] notifier_call_chain+0x99/0x400 [ 195.994227][ T7175] blocking_notifier_call_chain+0x69/0xa0 [ 195.994256][ T7175] netlink_release+0x167a/0x2030 [ 195.994283][ T7175] ? netlink_release+0x1e0/0x2030 [ 195.994307][ T7175] ? __pfx_netlink_release+0x10/0x10 [ 195.994332][ T7175] ? __pfx_locks_remove_file+0x10/0x10 [ 195.994361][ T7175] __sock_release+0xb3/0x260 [ 195.994380][ T7175] ? __pfx_sock_close+0x10/0x10 [ 195.994398][ T7175] sock_close+0x1c/0x30 [ 195.994415][ T7175] __fput+0x3ff/0xb50 [ 195.994444][ T7175] fput_close_sync+0x118/0x250 [ 195.994470][ T7175] ? __pfx_fput_close_sync+0x10/0x10 [ 195.994502][ T7175] __x64_sys_close+0x8b/0x120 [ 195.994530][ T7175] do_syscall_64+0x115/0x840 [ 195.994553][ T7175] ? clear_bhb_loop+0x40/0x90 [ 195.994574][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.994592][ T7175] RIP: 0033:0x7f747155d68e [ 195.994607][ T7175] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.994624][ T7175] RSP: 002b:00007f746f7f4f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 195.994641][ T7175] RAX: ffffffffffffffda RBX: 00007f746f7f66c0 RCX: 00007f747155d68e [ 195.994652][ T7175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 195.994661][ T7175] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 195.994671][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.994681][ T7175] R13: 00007f7471816038 R14: 00007f7471815fa0 R15: 00007ffc57450088 [ 195.994702][ T7175] [ 198.401352][ T7206] nvme_fabrics: missing parameter 'transport=%s' [ 198.429750][ T7206] nvme_fabrics: missing parameter 'nqn=%s' [ 198.538462][ T7204] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 199.584924][ T7247] netlink: 222 bytes leftover after parsing attributes in process `syz.0.262'. [ 199.839310][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 201.561445][ T7267] Process accounting paused [ 201.992475][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 202.278787][ T5742] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 202.643861][ T7317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 202.681707][ T7317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 203.373673][ T7337] FAULT_INJECTION: forcing a failure. [ 203.373673][ T7337] name failslab, interval 1, probability 0, space 0, times 0 [ 203.442181][ T7337] CPU: 0 UID: 0 PID: 7337 Comm: syz.2.284 Not tainted syzkaller #0 PREEMPT(full) [ 203.442209][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.442219][ T7337] Call Trace: [ 203.442226][ T7337] [ 203.442233][ T7337] dump_stack_lvl+0x100/0x190 [ 203.442269][ T7337] should_fail_ex.cold+0x5/0xa [ 203.442295][ T7337] ? __pfx_cgroup_show_path+0x10/0x10 [ 203.442321][ T7337] should_failslab+0xc2/0x120 [ 203.442342][ T7337] ? __pfx_cgroup_show_path+0x10/0x10 [ 203.442366][ T7337] __kmalloc_cache_noprof+0x7a/0x6f0 [ 203.442391][ T7337] ? cgroup_show_path+0xb2/0x730 [ 203.442415][ T7337] ? find_held_lock+0x2b/0x80 [ 203.442439][ T7337] ? __pfx_cgroup_show_path+0x10/0x10 [ 203.442463][ T7337] cgroup_show_path+0xb2/0x730 [ 203.442491][ T7337] ? __pfx_cgroup_show_path+0x10/0x10 [ 203.442516][ T7337] kernfs_sop_show_path+0xe9/0x160 [ 203.442533][ T7337] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 203.442550][ T7337] show_path+0x9e/0x100 [ 203.442575][ T7337] show_mountinfo+0x1d8/0x820 [ 203.442597][ T7337] ? __pfx_show_mountinfo+0x10/0x10 [ 203.442615][ T7337] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 203.442639][ T7337] seq_read_iter+0xbce/0x1270 [ 203.442674][ T7337] ? __pfx_seq_read_iter+0x10/0x10 [ 203.442694][ T7337] vfs_read+0x825/0xb30 [ 203.442716][ T7337] ? __pfx_vfs_read+0x10/0x10 [ 203.442750][ T7337] ksys_read+0x12a/0x250 [ 203.442769][ T7337] ? __pfx_ksys_read+0x10/0x10 [ 203.442790][ T7337] ? rcu_is_watching+0x12/0xc0 [ 203.442813][ T7337] do_syscall_64+0x115/0x840 [ 203.442837][ T7337] ? clear_bhb_loop+0x40/0x90 [ 203.442858][ T7337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.442876][ T7337] RIP: 0033:0x7fae4099ce59 [ 203.442892][ T7337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.442908][ T7337] RSP: 002b:00007fae41856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.442926][ T7337] RAX: ffffffffffffffda RBX: 00007fae40c15fa0 RCX: 00007fae4099ce59 [ 203.442938][ T7337] RDX: 0000000000001036 RSI: 0000200000000040 RDI: 0000000000000003 [ 203.442948][ T7337] RBP: 00007fae40a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 203.442958][ T7337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.442968][ T7337] R13: 00007fae40c16038 R14: 00007fae40c15fa0 R15: 00007ffd03ca6f18 [ 203.442991][ T7337] [ 205.098530][ T7360] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5632] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7360] [ 206.390233][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.294'. [ 209.512526][ T7447] binder: 7445:7447 ioctl c018620c 200000000040 returned -22 [ 212.283709][ T7493] netlink: 326 bytes leftover after parsing attributes in process `syz.2.309'. [ 212.739202][ T7504] FAULT_INJECTION: forcing a failure. [ 212.739202][ T7504] name failslab, interval 1, probability 0, space 0, times 0 [ 212.831456][ T7504] CPU: 0 UID: 0 PID: 7504 Comm: syz.2.311 Not tainted syzkaller #0 PREEMPT(full) [ 212.831481][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.831498][ T7504] Call Trace: [ 212.831505][ T7504] [ 212.831512][ T7504] dump_stack_lvl+0x100/0x190 [ 212.831547][ T7504] should_fail_ex.cold+0x5/0xa [ 212.831570][ T7504] should_failslab+0xc2/0x120 [ 212.831592][ T7504] __kmalloc_cache_node_noprof+0x7d/0x770 [ 212.831611][ T7504] ? __get_vm_area_node+0x101/0x330 [ 212.831637][ T7504] __get_vm_area_node+0x101/0x330 [ 212.831658][ T7504] ? kasan_save_stack+0x3f/0x50 [ 212.831675][ T7504] ? vb2_vmalloc_alloc+0x135/0x410 [ 212.831696][ T7504] __vmalloc_node_range_noprof+0x228/0x1630 [ 212.831720][ T7504] ? vb2_vmalloc_alloc+0x135/0x410 [ 212.831738][ T7504] ? vfs_read+0x1e4/0xb30 [ 212.831755][ T7504] ? ksys_read+0x12a/0x250 [ 212.831772][ T7504] ? do_syscall_64+0x115/0x840 [ 212.831795][ T7504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.831820][ T7504] ? vb2_vmalloc_alloc+0x135/0x410 [ 212.831845][ T7504] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.831878][ T7504] ? vb2_vmalloc_alloc+0x135/0x410 [ 212.831897][ T7504] vmalloc_user_noprof+0x9e/0xe0 [ 212.831920][ T7504] ? vb2_vmalloc_alloc+0x135/0x410 [ 212.831939][ T7504] vb2_vmalloc_alloc+0x135/0x410 [ 212.831958][ T7504] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 212.831979][ T7504] __vb2_queue_alloc+0x8d5/0x1160 [ 212.832007][ T7504] vb2_core_reqbufs+0x899/0xf30 [ 212.832030][ T7504] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 212.832060][ T7504] __vb2_init_fileio+0x32d/0x1000 [ 212.832079][ T7504] ? aa_file_perm+0x7f3/0x14d0 [ 212.832109][ T7504] __vb2_perform_fileio+0x91e/0x1380 [ 212.832134][ T7504] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 212.832153][ T7504] ? __pfx___might_resched+0x10/0x10 [ 212.832177][ T7504] vb2_fop_read+0x211/0x520 [ 212.832201][ T7504] v4l2_read+0x229/0x2c0 [ 212.832227][ T7504] ? __pfx_v4l2_read+0x10/0x10 [ 212.832253][ T7504] vfs_read+0x1e4/0xb30 [ 212.832275][ T7504] ? __pfx_vfs_read+0x10/0x10 [ 212.832293][ T7504] ? find_held_lock+0x2b/0x80 [ 212.832313][ T7504] ? __fget_files+0x215/0x3d0 [ 212.832333][ T7504] ? __fget_files+0x215/0x3d0 [ 212.832356][ T7504] ? __fget_files+0x21f/0x3d0 [ 212.832382][ T7504] ksys_read+0x12a/0x250 [ 212.832409][ T7504] ? __pfx_ksys_read+0x10/0x10 [ 212.832431][ T7504] ? rcu_is_watching+0x12/0xc0 [ 212.832453][ T7504] do_syscall_64+0x115/0x840 [ 212.832476][ T7504] ? clear_bhb_loop+0x40/0x90 [ 212.832504][ T7504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.832523][ T7504] RIP: 0033:0x7fae4099ce59 [ 212.832538][ T7504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.832554][ T7504] RSP: 002b:00007fae41856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.832572][ T7504] RAX: ffffffffffffffda RBX: 00007fae40c15fa0 RCX: 00007fae4099ce59 [ 212.832583][ T7504] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004 [ 212.832593][ T7504] RBP: 00007fae40a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 212.832603][ T7504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.832613][ T7504] R13: 00007fae40c16038 R14: 00007fae40c15fa0 R15: 00007ffd03ca6f18 [ 212.832636][ T7504] [ 212.832777][ T7504] syz.2.311: vmalloc error: size 4096, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 214.404997][ T7504] CPU: 0 UID: 0 PID: 7504 Comm: syz.2.311 Not tainted syzkaller #0 PREEMPT(full) [ 214.405023][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.405032][ T7504] Call Trace: [ 214.405038][ T7504] [ 214.405044][ T7504] dump_stack_lvl+0x100/0x190 [ 214.405078][ T7504] warn_alloc.cold+0x95/0x1c1 [ 214.405096][ T7504] ? __pfx_warn_alloc+0x10/0x10 [ 214.405124][ T7504] ? trace_kmalloc+0xe3/0x110 [ 214.405146][ T7504] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 214.405167][ T7504] ? __kasan_kmalloc+0x8a/0xb0 [ 214.405185][ T7504] ? __get_vm_area_node+0x208/0x330 [ 214.405208][ T7504] ? vb2_vmalloc_alloc+0x135/0x410 [ 214.405229][ T7504] __vmalloc_node_range_noprof+0xccd/0x1630 [ 214.405252][ T7504] ? vfs_read+0x1e4/0xb30 [ 214.405269][ T7504] ? ksys_read+0x12a/0x250 [ 214.405287][ T7504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.405320][ T7504] ? vb2_vmalloc_alloc+0x135/0x410 [ 214.405345][ T7504] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.405381][ T7504] ? vb2_vmalloc_alloc+0x135/0x410 [ 214.405400][ T7504] vmalloc_user_noprof+0x9e/0xe0 [ 214.405423][ T7504] ? vb2_vmalloc_alloc+0x135/0x410 [ 214.405442][ T7504] vb2_vmalloc_alloc+0x135/0x410 [ 214.405461][ T7504] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 214.405482][ T7504] __vb2_queue_alloc+0x8d5/0x1160 [ 214.405511][ T7504] vb2_core_reqbufs+0x899/0xf30 [ 214.405541][ T7504] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 214.405572][ T7504] __vb2_init_fileio+0x32d/0x1000 [ 214.405591][ T7504] ? aa_file_perm+0x7f3/0x14d0 [ 214.405621][ T7504] __vb2_perform_fileio+0x91e/0x1380 [ 214.405646][ T7504] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 214.405665][ T7504] ? __pfx___might_resched+0x10/0x10 [ 214.405690][ T7504] vb2_fop_read+0x211/0x520 [ 214.405710][ T7504] v4l2_read+0x229/0x2c0 [ 214.405736][ T7504] ? __pfx_v4l2_read+0x10/0x10 [ 214.405762][ T7504] vfs_read+0x1e4/0xb30 [ 214.405785][ T7504] ? __pfx_vfs_read+0x10/0x10 [ 214.405806][ T7504] ? find_held_lock+0x2b/0x80 [ 214.405827][ T7504] ? __fget_files+0x215/0x3d0 [ 214.405846][ T7504] ? __fget_files+0x215/0x3d0 [ 214.405869][ T7504] ? __fget_files+0x21f/0x3d0 [ 214.405895][ T7504] ksys_read+0x12a/0x250 [ 214.405914][ T7504] ? __pfx_ksys_read+0x10/0x10 [ 214.405935][ T7504] ? rcu_is_watching+0x12/0xc0 [ 214.405962][ T7504] do_syscall_64+0x115/0x840 [ 214.405986][ T7504] ? clear_bhb_loop+0x40/0x90 [ 214.406007][ T7504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.406024][ T7504] RIP: 0033:0x7fae4099ce59 [ 214.406039][ T7504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.406055][ T7504] RSP: 002b:00007fae41856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.406072][ T7504] RAX: ffffffffffffffda RBX: 00007fae40c15fa0 RCX: 00007fae4099ce59 [ 214.406083][ T7504] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004 [ 214.406093][ T7504] RBP: 00007fae40a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 214.406103][ T7504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.406112][ T7504] R13: 00007fae40c16038 R14: 00007fae40c15fa0 R15: 00007ffd03ca6f18 [ 214.406135][ T7504] [ 215.054135][ T7504] Mem-Info: [ 215.057380][ T7504] active_anon:17045 inactive_anon:26 isolated_anon:0 [ 215.057380][ T7504] active_file:11014 inactive_file:49855 isolated_file:0 [ 215.057380][ T7504] unevictable:768 dirty:641 writeback:0 [ 215.057380][ T7504] slab_reclaimable:10768 slab_unreclaimable:92996 [ 215.057380][ T7504] mapped:35324 shmem:10628 pagetables:1192 [ 215.057380][ T7504] sec_pagetables:0 bounce:0 [ 215.057380][ T7504] kernel_misc_reclaimable:0 [ 215.057380][ T7504] free:1313051 free_pcp:8682 free_cma:0 [ 215.156955][ T7504] Node 0 active_anon:69272kB inactive_anon:104kB active_file:45408kB inactive_file:199216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142440kB dirty:2564kB writeback:0kB shmem:42120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11680kB pagetables:4716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 215.268618][ T7504] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 215.344273][ T7537] netlink: 'syz.0.317': attribute type 1 has an invalid length. [ 215.357911][ T7504] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.420181][ T7504] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 215.431775][ T7504] Node 0 DMA32 free:1311048kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72432kB inactive_anon:104kB active_file:46464kB inactive_file:199220kB unevictable:1540kB writepending:2568kB zspages:0kB present:3129332kB managed:2537488kB mlocked:4kB bounce:0kB free_pcp:10296kB local_pcp:10296kB free_cma:0kB [ 215.526742][ T7504] lowmem_reserve[]: 0 0 1 1 1 [ 215.536291][ T7504] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.599138][ T7504] lowmem_reserve[]: 0 0 0 0 0 [ 215.609357][ T7504] Node 1 Normal free:3919728kB boost:0kB min:55824kB low:69780kB high:83736kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23904kB local_pcp:23904kB free_cma:0kB [ 215.683905][ T7504] lowmem_reserve[]: 0 0 0 0 0 [ 215.693253][ T7504] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 215.721582][ T7504] Node 0 DMA32: 2403*4kB (UM) 2036*8kB (UME) 1284*16kB (UME) 768*32kB (UM) 555*64kB (UM) 259*128kB (UME) 124*256kB (UME) 24*512kB (UM) 16*1024kB (UM) 7*2048kB (UM) 264*4096kB (M) = 1295788kB [ 215.762509][ T7504] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 215.794995][ T7504] Node 1 Normal: 6*4kB (U) 5*8kB (U) 3*16kB (U) 10*32kB (U) 15*64kB (UM) 12*128kB (U) 6*256kB (U) 5*512kB (U) 1*1024kB (U) 2*2048kB (UM) 954*4096kB (M) = 3919728kB [ 215.851352][ T7504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.893465][ T7504] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.929104][ T7504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.968358][ T7504] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.009954][ T7504] 77863 total pagecache pages [ 216.030601][ T7504] 0 pages in swap cache [ 216.048393][ T7504] Free swap = 124996kB [ 216.065234][ T7504] Total swap = 124996kB [ 216.084475][ T7504] 2097051 pages RAM [ 216.103586][ T29] audit: type=1800 audit(1781398750.313:5): pid=7544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.318" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 216.128418][ T7504] 0 pages HighMem/MovableOnly [ 216.161663][ T7504] 430786 pages reserved [ 216.179551][ T7504] 0 pages cma reserved [ 216.412580][ T7550] FAULT_INJECTION: forcing a failure. [ 216.412580][ T7550] name failslab, interval 1, probability 0, space 0, times 0 [ 216.529798][ T7550] CPU: 0 UID: 0 PID: 7550 Comm: syz.3.319 Not tainted syzkaller #0 PREEMPT(full) [ 216.529824][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.529834][ T7550] Call Trace: [ 216.529841][ T7550] [ 216.529848][ T7550] dump_stack_lvl+0x100/0x190 [ 216.529882][ T7550] should_fail_ex.cold+0x5/0xa [ 216.529904][ T7550] should_failslab+0xc2/0x120 [ 216.529929][ T7550] __kmalloc_cache_noprof+0x7a/0x6f0 [ 216.529955][ T7550] ? alloc_tty_struct+0x96/0x8c0 [ 216.529984][ T7550] alloc_tty_struct+0x96/0x8c0 [ 216.530009][ T7550] ? __pfx_alloc_tty_struct+0x10/0x10 [ 216.530039][ T7550] tty_init_dev.part.0+0x20/0x470 [ 216.530066][ T7550] tty_open+0xa63/0xfa0 [ 216.530092][ T7550] ? __pfx_tty_open+0x10/0x10 [ 216.530114][ T7550] ? chrdev_open+0x589/0x6a0 [ 216.530135][ T7550] ? chrdev_open+0x589/0x6a0 [ 216.530161][ T7550] ? __pfx_tty_open+0x10/0x10 [ 216.530184][ T7550] chrdev_open+0x234/0x6a0 [ 216.530206][ T7550] ? __pfx_chrdev_open+0x10/0x10 [ 216.530229][ T7550] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 216.530256][ T7550] do_dentry_open+0x6ab/0x14d0 [ 216.530277][ T7550] ? __pfx_chrdev_open+0x10/0x10 [ 216.530303][ T7550] vfs_open+0x82/0x3f0 [ 216.530331][ T7550] path_openat+0x208c/0x31a0 [ 216.530360][ T7550] ? __pfx_path_openat+0x10/0x10 [ 216.530390][ T7550] do_file_open+0x20e/0x430 [ 216.530414][ T7550] ? __pfx_do_file_open+0x10/0x10 [ 216.530452][ T7550] ? alloc_fd+0x476/0x790 [ 216.530475][ T7550] ? do_getname+0x191/0x390 [ 216.530502][ T7550] do_sys_openat2+0x10d/0x1e0 [ 216.530535][ T7550] ? __pfx_do_sys_openat2+0x10/0x10 [ 216.530563][ T7550] ? __fget_files+0x21f/0x3d0 [ 216.530588][ T7550] __x64_sys_openat+0x12d/0x210 [ 216.530615][ T7550] ? __pfx___x64_sys_openat+0x10/0x10 [ 216.530646][ T7550] ? rcu_is_watching+0x12/0xc0 [ 216.530668][ T7550] do_syscall_64+0x115/0x840 [ 216.530692][ T7550] ? clear_bhb_loop+0x40/0x90 [ 216.530713][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.530731][ T7550] RIP: 0033:0x7f8314d9ce59 [ 216.530747][ T7550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.530764][ T7550] RSP: 002b:00007f8315cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.530782][ T7550] RAX: ffffffffffffffda RBX: 00007f8315016090 RCX: 00007f8314d9ce59 [ 216.530793][ T7550] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 216.530804][ T7550] RBP: 00007f8314e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 216.530814][ T7550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.530824][ T7550] R13: 00007f8315016128 R14: 00007f8315016090 R15: 00007ffc20811958 [ 216.530847][ T7550] [ 217.458863][ T7569] synth uevent: /devices/virtual/tty/ptyb7: unknown uevent action string [ 217.561340][ T7569] tty ptyb7: uevent: failed to send synthetic uevent: -22 [ 217.611165][ T7568] syz.3.323(7568): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 217.857948][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 218.006732][ T7576] FAULT_INJECTION: forcing a failure. [ 218.006732][ T7576] name fail_futex, interval 1, probability 0, space 0, times 0 [ 218.240100][ T7576] CPU: 0 UID: 0 PID: 7576 Comm: syz.3.324 Not tainted syzkaller #0 PREEMPT(full) [ 218.240125][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.240135][ T7576] Call Trace: [ 218.240140][ T7576] [ 218.240147][ T7576] dump_stack_lvl+0x100/0x190 [ 218.240181][ T7576] should_fail_ex.cold+0x5/0xa [ 218.240203][ T7576] get_futex_key+0x1d2/0x1510 [ 218.240233][ T7576] ? __pfx_get_futex_key+0x10/0x10 [ 218.240268][ T7576] ? __fput+0x68d/0xb50 [ 218.240290][ T7576] ? stack_trace_save+0x8e/0xc0 [ 218.240315][ T7576] futex_wait_setup+0x83/0x510 [ 218.240341][ T7576] __futex_wait+0x19f/0x300 [ 218.240364][ T7576] ? __pfx___futex_wait+0x10/0x10 [ 218.240389][ T7576] ? __pfx_futex_wake_mark+0x10/0x10 [ 218.240412][ T7576] ? futex_hash+0x2ad/0x370 [ 218.240440][ T7576] ? futex_hash+0x141/0x370 [ 218.240468][ T7576] futex_wait+0xe6/0x370 [ 218.240490][ T7576] ? __pfx_futex_wait+0x10/0x10 [ 218.240521][ T7576] do_futex+0x1ef/0x350 [ 218.240545][ T7576] ? __pfx_do_futex+0x10/0x10 [ 218.240562][ T7576] ? __pfx___might_resched+0x10/0x10 [ 218.240580][ T7576] ? blkcg_maybe_throttle_current+0x5e8/0xeb0 [ 218.240611][ T7576] __x64_sys_futex+0x34f/0x4d0 [ 218.240632][ T7576] ? __pfx___x64_sys_futex+0x10/0x10 [ 218.240648][ T7576] ? exit_to_user_mode_loop+0xf3/0x670 [ 218.240675][ T7576] ? rcu_is_watching+0x12/0xc0 [ 218.240694][ T7576] ? exit_to_user_mode_loop+0xf3/0x670 [ 218.240722][ T7576] ? rcu_is_watching+0x12/0xc0 [ 218.240744][ T7576] do_syscall_64+0x115/0x840 [ 218.240767][ T7576] ? clear_bhb_loop+0x40/0x90 [ 218.240787][ T7576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.240805][ T7576] RIP: 0033:0x7f8314d9ce59 [ 218.240820][ T7576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.240836][ T7576] RSP: 002b:00007f8315cf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 218.240852][ T7576] RAX: ffffffffffffffda RBX: 00007f8315016098 RCX: 00007f8314d9ce59 [ 218.240863][ T7576] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8315016098 [ 218.240873][ T7576] RBP: 00007f8315016090 R08: 0000000000000000 R09: 0000000000000000 [ 218.240883][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.240892][ T7576] R13: 00007f8315016128 R14: 00007ffc20811870 R15: 00007ffc20811958 [ 218.240913][ T7576] [ 220.242400][ T7585] FAULT_INJECTION: forcing a failure. [ 220.242400][ T7585] name failslab, interval 1, probability 0, space 0, times 0 [ 220.301689][ T7585] CPU: 0 UID: 0 PID: 7585 Comm: syz.2.325 Not tainted syzkaller #0 PREEMPT(full) [ 220.301717][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 220.301727][ T7585] Call Trace: [ 220.301733][ T7585] [ 220.301740][ T7585] dump_stack_lvl+0x100/0x190 [ 220.301774][ T7585] should_fail_ex.cold+0x5/0xa [ 220.301796][ T7585] should_failslab+0xc2/0x120 [ 220.301817][ T7585] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 220.301846][ T7585] ? __d_alloc+0x34/0xa40 [ 220.301867][ T7585] ? lockdep_hardirqs_on+0x78/0x100 [ 220.301892][ T7585] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 220.301913][ T7585] __d_alloc+0x34/0xa40 [ 220.301938][ T7585] d_alloc_pseudo+0x1c/0xc0 [ 220.301955][ T7585] alloc_file_pseudo+0xcf/0x230 [ 220.301983][ T7585] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 220.302008][ T7585] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 220.302033][ T7585] create_pipe_files+0x360/0x970 [ 220.302058][ T7585] do_pipe2+0xbd/0x1e0 [ 220.302079][ T7585] ? __pfx_do_pipe2+0x10/0x10 [ 220.302099][ T7585] ? xfd_validate_state+0x129/0x190 [ 220.302115][ T7585] ? exit_to_user_mode_loop+0xf3/0x670 [ 220.302148][ T7585] __x64_sys_pipe+0x33/0x50 [ 220.302170][ T7585] do_syscall_64+0x115/0x840 [ 220.302193][ T7585] ? clear_bhb_loop+0x40/0x90 [ 220.302214][ T7585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.302232][ T7585] RIP: 0033:0x7fae4099ce59 [ 220.302246][ T7585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.302262][ T7585] RSP: 002b:00007fae41856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 220.302279][ T7585] RAX: ffffffffffffffda RBX: 00007fae40c15fa0 RCX: 00007fae4099ce59 [ 220.302290][ T7585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.302300][ T7585] RBP: 00007fae40a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 220.302310][ T7585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.302319][ T7585] R13: 00007fae40c16038 R14: 00007fae40c15fa0 R15: 00007ffd03ca6f18 [ 220.302341][ T7585] [ 220.566038][ T7592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.328'. [ 220.575072][ T7592] nbd: must specify at least one socket [ 221.957218][ T7618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.332'. [ 222.229772][ T7622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.333'. [ 226.193049][ T7680] sctp: [Deprecated]: syz.2.344 (pid 7680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.193049][ T7680] Use struct sctp_sack_info instead [ 229.032055][ T7719] netlink: 'syz.0.352': attribute type 1 has an invalid length. [ 229.522279][ T7729] random: crng reseeded on system resumption [ 231.670056][ T7753] : Can't lookup blockdev [ 232.118551][ T7731] Process accounting resumed [ 235.064659][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.367'. [ 236.891856][ T7828] netlink: 222 bytes leftover after parsing attributes in process `syz.2.375'. [ 238.555654][ T7856] zswap: compressor not available [ 240.105485][ T7949] random: crng reseeded on system resumption [ 240.275239][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 240.371483][ T7958] cover enable write trace failed, mode=0 [ 240.371522][ T7958] (errno 9) [ 240.396723][ T7953] hub 1-0:1.0: USB hub found [ 240.468504][ T7953] hub 1-0:1.0: 1 port detected [ 240.479503][ T7959] cover enable write trace failed, mode=0 [ 240.479542][ T7959] (errno 9) [ 241.424849][ T7972] ======================================================= [ 241.424849][ T7972] WARNING: The mand mount option has been deprecated and [ 241.424849][ T7972] and is ignored by this kernel. Remove the mand [ 241.424849][ T7972] option from the mount to silence this warning. [ 241.424849][ T7972] ======================================================= syzkaller syzkaller login: [ 242.935154][ T7990] netlink: 222 bytes leftover after parsing attributes in process `syz.3.403'. [ 243.148318][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.404'. [ 246.008375][ T8049] netlink: 222 bytes leftover after parsing attributes in process `syz.0.413'. [ 246.640827][ T8060] zswap: compressor not available [ 252.582410][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 253.482594][ T8198] random: crng reseeded on system resumption [ 253.590708][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 253.627792][ T8200] random: crng reseeded on system resumption [ 254.852646][ T8215] MTRR 0 not used [ 256.030190][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.039912][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.023492][ T8228] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.275353][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.289109][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.298703][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.307599][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.320031][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.994696][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.021449][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.048062][ T8272] bridge_slave_0: entered allmulticast mode [ 265.066982][ T8272] bridge_slave_0: entered promiscuous mode [ 265.086122][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.103767][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.131892][ T8272] bridge_slave_1: entered allmulticast mode [ 265.148877][ T8272] bridge_slave_1: entered promiscuous mode [ 265.237965][ T8272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.275609][ T8272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.387820][ T5634] Bluetooth: hci4: command tx timeout [ 265.429857][ T8272] team0: Port device team_slave_0 added [ 265.472157][ T8272] team0: Port device team_slave_1 added [ 265.610280][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.633788][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.693357][ T8272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.732634][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.756256][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.839475][ T8272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.142401][ T8272] hsr_slave_0: entered promiscuous mode [ 266.165278][ T8272] hsr_slave_1: entered promiscuous mode [ 266.185500][ T8272] debugfs: 'hsr0' already exists in 'hsr' [ 266.205720][ T8272] Cannot create hsr debugfs directory [ 266.720628][ T8307] ubi: mtd0 is already attached to ubi31 [ 267.018251][ T8272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.058293][ T8272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.087068][ T8272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.125571][ T8272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.148931][ T8272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.185062][ T8272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.212110][ T8272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.268174][ T8272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.468563][ T5634] Bluetooth: hci4: command tx timeout [ 267.502906][ T8272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.544656][ T8272] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.585186][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.592349][ T7885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.649503][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.656794][ T7885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.124533][ T5633] Process accounting paused [ 268.542902][ T4950] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.554678][ T4950] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.562994][ T4950] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.578252][ T4950] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.588716][ T4950] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.075096][ T8272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.548176][ T4950] Bluetooth: hci4: command tx timeout [ 270.056333][ T8272] veth0_vlan: entered promiscuous mode [ 270.120149][ T8272] veth1_vlan: entered promiscuous mode [ 270.238055][ T8272] veth0_macvtap: entered promiscuous mode [ 270.303000][ T8272] veth1_macvtap: entered promiscuous mode [ 270.507883][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.636807][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.669776][ T4950] Bluetooth: hci5: command tx timeout [ 270.681907][ T8326] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.700152][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.722023][ T8326] bridge_slave_0: entered allmulticast mode [ 270.744825][ T8326] bridge_slave_0: entered promiscuous mode [ 270.775166][ T8326] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.800970][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.831113][ T8326] bridge_slave_1: entered allmulticast mode [ 270.857421][ T8326] bridge_slave_1: entered promiscuous mode [ 271.211681][ T7926] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.548549][ T8326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.606735][ T8326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.629525][ T4950] Bluetooth: hci4: command tx timeout [ 271.744982][ T7926] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.798324][ T7926] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.072899][ T7926] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.465737][ T8326] team0: Port device team_slave_0 added [ 272.492047][ T8326] team0: Port device team_slave_1 added [ 272.747122][ T4950] Bluetooth: hci5: command tx timeout [ 272.979173][ T8326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.001258][ T8326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.086551][ T8326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.326673][ T8326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.353442][ T8326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.436721][ T8326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.677757][ T8326] hsr_slave_0: entered promiscuous mode [ 273.685754][ T8326] hsr_slave_1: entered promiscuous mode [ 273.705395][ T8326] debugfs: 'hsr0' already exists in 'hsr' [ 273.737308][ T8326] Cannot create hsr debugfs directory [ 273.753179][ T7878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.782014][ T7878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.935488][ T7926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.975082][ T7926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.689967][ T8326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 274.700597][ T8368] random: crng reseeded on system resumption [ 274.743577][ T8326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 274.779821][ T8326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 274.827444][ T4950] Bluetooth: hci5: command tx timeout [ 274.841822][ T8326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 274.878999][ T8326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 274.915459][ T8326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 274.953132][ T8326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 275.011997][ T8326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.362142][ T8326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.460907][ T8326] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.505999][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.513162][ T7926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.577237][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.584361][ T7926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.907344][ T4950] Bluetooth: hci5: command tx timeout [ 277.033632][ T5634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.045804][ T5634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.054733][ T5634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.073805][ T5634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.082975][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.501184][ T8326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.529866][ T8326] veth0_vlan: entered promiscuous mode [ 278.622590][ T8326] veth1_vlan: entered promiscuous mode [ 278.789976][ T8326] veth0_macvtap: entered promiscuous mode [ 278.832357][ T8326] veth1_macvtap: entered promiscuous mode [ 278.951663][ T8326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.008311][ T8326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.092807][ T7885] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.125255][ T7885] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.149350][ T5634] Bluetooth: hci6: command tx timeout [ 279.196732][ T7885] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.221412][ T7885] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.616230][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.626055][ T8390] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.660912][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.671687][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.691355][ T8390] bridge_slave_0: entered allmulticast mode [ 279.718653][ T8390] bridge_slave_0: entered promiscuous mode [ 279.803131][ T8390] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.826647][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.850557][ T8390] bridge_slave_1: entered allmulticast mode [ 279.874487][ T8390] bridge_slave_1: entered promiscuous mode [ 279.988235][ T8390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.030049][ T7878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.043207][ T8390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.068698][ T7878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.182120][ T8390] team0: Port device team_slave_0 added [ 280.221050][ T8390] team0: Port device team_slave_1 added [ 280.339670][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.388230][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.517832][ T8390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.580800][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.612920][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.728281][ T8390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.919651][ T8390] hsr_slave_0: entered promiscuous mode [ 280.949797][ T8390] hsr_slave_1: entered promiscuous mode [ 280.978736][ T8390] debugfs: 'hsr0' already exists in 'hsr' [ 281.011953][ T8390] Cannot create hsr debugfs directory [ 281.227849][ T5634] Bluetooth: hci6: command tx timeout [ 281.940385][ T8390] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 281.978971][ T8390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.008263][ T8390] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.038443][ T8390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.046191][ T8390] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.109801][ T8390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 282.128622][ T8390] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.191161][ T8390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 282.439660][ T8390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.499230][ T8390] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.533133][ T7878] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.540426][ T7878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.596208][ T7878] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.603481][ T7878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.306823][ T5634] Bluetooth: hci6: command tx timeout [ 283.682186][ T8390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.391146][ T5634] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 284.898641][ T8390] veth0_vlan: entered promiscuous mode [ 284.944534][ T8390] veth1_vlan: entered promiscuous mode [ 285.064738][ T8390] veth0_macvtap: entered promiscuous mode [ 285.104648][ T8390] veth1_macvtap: entered promiscuous mode [ 285.162354][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.199617][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.247480][ T7923] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.278411][ T7923] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.313829][ T7923] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.349732][ T7923] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.386684][ T5634] Bluetooth: hci6: command tx timeout [ 285.583129][ T7926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.623775][ T7926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.904105][ T7885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.951219][ T7885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.315920][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 288.195443][ T8478] syz.6.469 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 288.562972][ T8481] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 291.414186][ T8488] ima: policy update failed [ 291.462238][ T29] audit: type=1802 audit(1781398825.673:6): pid=8488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.473" res=0 errno=0 [ 291.723031][ T8495] misc userio: The device must be registered before sending interrupts [ 291.851574][ T8495] device-mapper: ioctl: Invalid ioctl structure: name d, dev 800000000 [ 293.950511][ T4950] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 293.962484][ T4950] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 293.972215][ T4950] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 293.982570][ T4950] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 293.996864][ T4950] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 295.753151][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.789374][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.816617][ T8510] bridge_slave_0: entered allmulticast mode [ 295.834244][ T8510] bridge_slave_0: entered promiscuous mode [ 295.862808][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.897019][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.923802][ T8510] bridge_slave_1: entered allmulticast mode [ 295.948225][ T8510] bridge_slave_1: entered promiscuous mode [ 296.026877][ T4950] Bluetooth: hci7: command tx timeout [ 296.241051][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.291683][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.388468][ T8510] team0: Port device team_slave_0 added [ 296.408831][ T8510] team0: Port device team_slave_1 added [ 296.530381][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.562323][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.663290][ T8510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.729648][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.752271][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.816386][ T8510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.840884][ T8542] netlink: 222 bytes leftover after parsing attributes in process `syz.6.482'. [ 296.963749][ T8510] hsr_slave_0: entered promiscuous mode [ 296.981719][ T8510] hsr_slave_1: entered promiscuous mode [ 297.012207][ T8510] debugfs: 'hsr0' already exists in 'hsr' [ 297.035255][ T8510] Cannot create hsr debugfs directory [ 297.686066][ T5634] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 297.700498][ T5634] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 297.715990][ T5634] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 297.732180][ T5634] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 297.743658][ T5634] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 298.060604][ T8510] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 298.099583][ T8510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 298.116392][ T5634] Bluetooth: hci7: command tx timeout [ 298.133002][ T8510] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 298.197200][ T8510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 298.234513][ T8510] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 298.289184][ T8510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.325717][ T8563] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 298.337788][ T8510] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 298.384703][ T8510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.900176][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.199391][ T8510] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.279261][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.286468][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.386104][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.393279][ T7926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.789509][ T5634] Bluetooth: hci8: command tx timeout [ 300.188046][ T5634] Bluetooth: hci7: command tx timeout [ 300.229901][ T8554] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.265407][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.304241][ T8554] bridge_slave_0: entered allmulticast mode [ 300.331101][ T8554] bridge_slave_0: entered promiscuous mode [ 300.376257][ T8554] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.402845][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.426068][ T8554] bridge_slave_1: entered allmulticast mode [ 300.450900][ T8554] bridge_slave_1: entered promiscuous mode [ 300.593104][ T8554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.643565][ T8554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.785268][ T8554] team0: Port device team_slave_0 added [ 300.816079][ T8554] team0: Port device team_slave_1 added [ 300.934145][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.968246][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.086796][ T8554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.138858][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.172794][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.298909][ T8554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.407580][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.551480][ T8554] hsr_slave_0: entered promiscuous mode [ 301.581280][ T8554] hsr_slave_1: entered promiscuous mode [ 301.610215][ T8554] debugfs: 'hsr0' already exists in 'hsr' [ 301.638934][ T8554] Cannot create hsr debugfs directory [ 301.867216][ T4950] Bluetooth: hci8: command tx timeout [ 302.267499][ T4950] Bluetooth: hci7: command tx timeout [ 302.706760][ T5634] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 302.725800][ T5634] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 302.734308][ T5634] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 302.742581][ T5634] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 302.757665][ T5634] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 302.789984][ T8554] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 302.845970][ T8554] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.886913][ T8554] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 302.935954][ T8554] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.974107][ T8554] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 303.022186][ T8554] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.073528][ T8510] veth0_vlan: entered promiscuous mode [ 303.102797][ T8554] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 303.144560][ T8554] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.262815][ T8510] veth1_vlan: entered promiscuous mode [ 303.454089][ T8510] veth0_macvtap: entered promiscuous mode [ 303.545373][ T8510] veth1_macvtap: entered promiscuous mode [ 303.681017][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.755231][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.831792][ T8554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.895408][ T7885] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.930388][ T7885] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.950543][ T5634] Bluetooth: hci8: command tx timeout [ 304.002357][ T7885] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.042376][ T7885] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.160602][ T8554] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.242662][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.249863][ T7926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.344137][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.351305][ T7926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.626546][ T7886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.673274][ T7886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.788504][ T8631] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.810975][ T8631] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.836504][ T5634] Bluetooth: hci9: command tx timeout [ 304.855655][ T8631] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 304.886212][ T7923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.928546][ T8631] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.953184][ T7923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.976925][ T8631] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 305.013348][ T8631] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 305.039739][ T8631] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 305.109699][ T8631] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 305.153186][ T8631] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 305.185155][ T8631] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 305.238728][ T8631] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 305.295066][ T8631] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 305.331273][ T8631] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 305.412791][ T8631] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 305.442385][ T8631] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 305.465396][ T8631] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 305.514895][ T8631] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 305.564667][ T8631] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 305.598688][ T8631] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 305.636301][ T8631] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 305.675183][ T8631] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 305.710745][ T8631] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 305.744965][ T8631] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 306.338030][ T8650] : Can't lookup blockdev [ 306.798088][ T8554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.826822][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 306.832898][ T4950] Bluetooth: hci2: command 0x0c1a tx timeout [ 306.974093][ T8605] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.986512][ T4950] Bluetooth: hci3: command 0x0c1a tx timeout [ 306.992588][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 307.037181][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.066478][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 307.079783][ T8605] bridge_slave_0: entered allmulticast mode [ 307.126774][ T8605] bridge_slave_0: entered promiscuous mode [ 307.146190][ T5634] Bluetooth: hci5: command 0x0c1a tx timeout [ 307.199615][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.256533][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.289616][ T8605] bridge_slave_1: entered allmulticast mode [ 307.305151][ T5634] Bluetooth: hci6: command 0x0c1a tx timeout [ 307.346273][ T8605] bridge_slave_1: entered promiscuous mode [ 307.464241][ T5634] Bluetooth: hci7: command 0x0c1a tx timeout [ 307.623341][ T5634] Bluetooth: hci8: command 0x0c1a tx timeout [ 307.689569][ T8605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.703199][ T5634] Bluetooth: hci9: command 0x040f tx timeout [ 307.788486][ T8605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.137629][ T8605] team0: Port device team_slave_0 added [ 308.184801][ T8605] team0: Port device team_slave_1 added [ 308.273761][ T2176] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 308.297943][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.333858][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.503038][ T8605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.566077][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.601372][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.662302][ T8678] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 308.721072][ T8605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.736188][ T8678] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 308.881226][ T8680] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 308.898646][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 308.982413][ T8680] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 308.993989][ T8605] hsr_slave_0: entered promiscuous mode [ 309.011617][ T8605] hsr_slave_1: entered promiscuous mode [ 309.031020][ T8605] debugfs: 'hsr0' already exists in 'hsr' [ 309.050064][ T8605] Cannot create hsr debugfs directory [ 309.136410][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 309.169286][ T8554] veth0_vlan: entered promiscuous mode [ 309.215212][ T5634] Bluetooth: hci5: command 0x0c1a tx timeout [ 309.374748][ T5634] Bluetooth: hci6: command 0x0c1a tx timeout [ 309.533102][ T5634] Bluetooth: hci7: command 0x0c1a tx timeout [ 309.589118][ T8554] veth1_vlan: entered promiscuous mode [ 309.692821][ T5634] Bluetooth: hci8: command 0x0c1a tx timeout [ 309.775407][ T5634] Bluetooth: hci9: command 0x040f tx timeout [ 309.905515][ T8688] MTRR 0 not used [ 310.183074][ T8554] veth0_macvtap: entered promiscuous mode [ 310.237123][ T8554] veth1_macvtap: entered promiscuous mode [ 310.802126][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.938286][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.084049][ T7926] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.124932][ T7926] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.193353][ T7926] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.204989][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 311.262334][ T7926] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.284107][ T5634] Bluetooth: hci5: command 0x0c1a tx timeout [ 311.310981][ T8605] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 311.361769][ T8605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.423991][ T8605] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 311.444049][ T5634] Bluetooth: hci6: command 0x0c1a tx timeout [ 311.497442][ T8605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 311.569644][ T8605] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 311.605477][ T5634] Bluetooth: hci7: command 0x0c1a tx timeout [ 311.650848][ T8605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.709613][ T8605] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 311.761920][ T5634] Bluetooth: hci8: command 0x0c1a tx timeout [ 311.800756][ T8605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.842165][ T5634] Bluetooth: hci9: command 0x040f tx timeout [ 312.076477][ T7923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.131805][ T7923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.265174][ T7923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.308405][ T7923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.471535][ T8605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.589965][ T8605] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.669925][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.678114][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.834438][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.841662][ T7886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.920507][ T8718] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 312.962585][ T8706] syz.6.499 (8706): attempted to duplicate a private mapping with mremap. This is not supported. [ 313.910680][ T5634] Bluetooth: hci9: command 0x040f tx timeout [ 315.237100][ T8743] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 315.980360][ T5634] Bluetooth: hci9: command 0x040f tx timeout [ 316.251554][ T8605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.432358][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.439131][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.102726][ T8605] veth0_vlan: entered promiscuous mode [ 318.190826][ T8605] veth1_vlan: entered promiscuous mode [ 318.340751][ T8605] veth0_macvtap: entered promiscuous mode [ 318.397609][ T8605] veth1_macvtap: entered promiscuous mode [ 319.401314][ T8605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.746653][ T8605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.131159][ T1012] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.174722][ T1012] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.219923][ T1012] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.303932][ T1012] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.663718][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.729169][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.908475][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.991014][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.466731][ T8796] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 321.712051][ T5709] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 322.711212][ T5741] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 323.597368][ T8795] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 323.709141][ T8829] netlink: 222 bytes leftover after parsing attributes in process `syz.6.514'. [ 324.159543][ T8844] sctp: [Deprecated]: syz.9.516 (pid 8844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.159543][ T8844] Use struct sctp_sack_info instead [ 326.231585][ T8871] syz.8.519 (8871): drop_caches: 0 [ 326.738858][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.6.521'. [ 327.019532][ T8882] netlink: 'syz.8.522': attribute type 5 has an invalid length. [ 327.063044][ T8882] netlink: 4158 bytes leftover after parsing attributes in process `syz.8.522'. [ 328.361969][ T8897] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 329.312321][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.529'. [ 329.690400][ T8923] netlink: 'syz.8.530': attribute type 10 has an invalid length. [ 329.735652][ T8923] netlink: 330 bytes leftover after parsing attributes in process `syz.8.530'. [ 330.208938][ T8929] HfR: entered promiscuous mode [ 330.486996][ T8932] netlink: 222 bytes leftover after parsing attributes in process `syz.8.532'. [ 330.851256][ T8933] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 330.888659][ T8942] netlink: 2412 bytes leftover after parsing attributes in process `syz.8.533'. [ 330.933858][ T8942] netlink: 47344 bytes leftover after parsing attributes in process `syz.8.533'. [ 331.235459][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.8.534'. [ 332.541331][ T8929] netlink: 32 bytes leftover after parsing attributes in process `syz.9.531'. [ 333.177736][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.537'. [ 333.296904][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.537'. [ 335.482109][ T8993] syz.6.545 (8993): /proc/8991/oom_adj is deprecated, please use /proc/8991/oom_score_adj instead. [ 335.609134][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz.6.545'. [ 335.724990][ T8997] virt_wifi0: entered allmulticast mode [ 336.835174][ T4950] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 336.849715][ T4950] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 336.858704][ T4950] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 336.876268][ T4950] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 336.886060][ T4950] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 338.980086][ T4950] Bluetooth: hci10: command tx timeout [ 340.799036][ T9042] ACPI: button: Initial lid state set to 'ignore' [ 340.939210][ T29] audit: type=1800 audit(1781400923.322:7): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.551" name="lu_gp_id" dev="configfs" ino=30539 res=0 errno=0 [ 341.049497][ T4950] Bluetooth: hci10: command tx timeout [ 341.800590][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.849257][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.899307][ T9012] bridge_slave_0: entered allmulticast mode [ 341.950909][ T9012] bridge_slave_0: entered promiscuous mode [ 341.998439][ T9012] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.040342][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.086035][ T9012] bridge_slave_1: entered allmulticast mode [ 342.123181][ T9012] bridge_slave_1: entered promiscuous mode [ 342.538659][ T9069] futex_wake_op: syz.8.555 tries to shift op by -2048; fix this program [ 342.712299][ T9012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.953743][ T9012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.118559][ T4950] Bluetooth: hci10: command tx timeout [ 343.230999][ T9012] team0: Port device team_slave_0 added [ 343.266784][ T9012] team0: Port device team_slave_1 added [ 343.583379][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.628912][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.746659][ T9012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.054710][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.084350][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.213123][ T9012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.561254][ T9012] hsr_slave_0: entered promiscuous mode [ 344.598884][ T9012] hsr_slave_1: entered promiscuous mode [ 344.646320][ T9012] debugfs: 'hsr0' already exists in 'hsr' [ 344.692857][ T9012] Cannot create hsr debugfs directory [ 345.188487][ T4950] Bluetooth: hci10: command tx timeout [ 346.117807][ T9012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.297762][ T9100] MTRR 0 not used [ 346.568489][ T9012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.027019][ T9012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.241905][ T9012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.376254][ T9012] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.459565][ T9012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 348.520763][ T9012] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.573829][ T9012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 348.622744][ T9012] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.691017][ T9012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 348.732139][ T9012] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.836520][ T9012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 348.903747][ T9107] FAULT_INJECTION: forcing a failure. [ 348.903747][ T9107] name failslab, interval 1, probability 0, space 0, times 0 [ 349.022748][ T9107] CPU: 0 UID: 0 PID: 9107 Comm: syz.9.562 Not tainted syzkaller #0 PREEMPT(full) [ 349.022775][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.022785][ T9107] Call Trace: [ 349.022791][ T9107] [ 349.022798][ T9107] dump_stack_lvl+0x100/0x190 [ 349.022897][ T9107] should_fail_ex.cold+0x5/0xa [ 349.022942][ T9107] should_failslab+0xc2/0x120 [ 349.022983][ T9107] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 349.023007][ T9107] ? x509_cert_parse+0x2b6/0x910 [ 349.023112][ T9107] kmemdup_noprof+0x29/0x60 [ 349.023141][ T9107] x509_cert_parse+0x2b6/0x910 [ 349.023164][ T9107] ? kasan_save_stack+0x3f/0x50 [ 349.023180][ T9107] ? kasan_save_stack+0x30/0x50 [ 349.023196][ T9107] ? kasan_save_track+0x14/0x30 [ 349.023216][ T9107] pkcs7_extract_cert+0xa4/0x380 [ 349.023247][ T9107] asn1_ber_decoder+0x12b3/0x2170 [ 349.023301][ T9107] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 349.023334][ T9107] pkcs7_parse_message+0x289/0x870 [ 349.023365][ T9107] verify_pkcs7_signature+0x30/0xa0 [ 349.023386][ T9107] valid_regdb+0x211/0x590 [ 349.023463][ T9107] ? __pfx_valid_regdb+0x10/0x10 [ 349.023487][ T9107] reg_reload_regdb+0x11a/0x460 [ 349.023510][ T9107] ? __pfx_reg_reload_regdb+0x10/0x10 [ 349.023533][ T9107] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 349.023585][ T9107] ? nl80211_pre_doit+0x19a/0xae0 [ 349.023614][ T9107] genl_family_rcv_msg_doit+0x214/0x300 [ 349.023692][ T9107] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 349.023718][ T9107] ? genl_get_cmd+0x3e7/0x760 [ 349.023762][ T9107] ? bpf_lsm_capable+0x9/0x10 [ 349.023787][ T9107] ? security_capable+0x80/0x260 [ 349.023839][ T9107] genl_rcv_msg+0x560/0x800 [ 349.023867][ T9107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.023893][ T9107] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 349.023919][ T9107] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 349.023953][ T9107] ? __pfx_nl80211_post_doit+0x10/0x10 [ 349.023989][ T9107] netlink_rcv_skb+0x159/0x420 [ 349.024012][ T9107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.024038][ T9107] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.024070][ T9107] ? netlink_deliver_tap+0x1ae/0xcc0 [ 349.024095][ T9107] genl_rcv+0x28/0x40 [ 349.024117][ T9107] netlink_unicast+0x585/0x850 [ 349.024144][ T9107] ? __pfx_netlink_unicast+0x10/0x10 [ 349.024173][ T9107] netlink_sendmsg+0x8b0/0xda0 [ 349.024199][ T9107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.024221][ T9107] ? __import_iovec+0x1d2/0x640 [ 349.024284][ T9107] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 349.024325][ T9107] ____sys_sendmsg+0x9e1/0xb70 [ 349.024379][ T9107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.024403][ T9107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.024431][ T9107] ? __pfx_futex_wake_mark+0x10/0x10 [ 349.024474][ T9107] ___sys_sendmsg+0x190/0x1e0 [ 349.024500][ T9107] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.024552][ T9107] __sys_sendmsg+0x170/0x220 [ 349.024572][ T9107] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.024589][ T9107] ? __x64_sys_futex+0x34f/0x4d0 [ 349.024616][ T9107] ? rcu_is_watching+0x12/0xc0 [ 349.024652][ T9107] do_syscall_64+0x115/0x840 [ 349.024771][ T9107] ? clear_bhb_loop+0x40/0x90 [ 349.024803][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.024822][ T9107] RIP: 0033:0x7f249eb9ce59 [ 349.024838][ T9107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.024855][ T9107] RSP: 002b:00007f249fa04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.024872][ T9107] RAX: ffffffffffffffda RBX: 00007f249ee15fa0 RCX: 00007f249eb9ce59 [ 349.024884][ T9107] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 349.024894][ T9107] RBP: 00007f249ec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 349.024904][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.024915][ T9107] R13: 00007f249ee16038 R14: 00007f249ee15fa0 R15: 00007fffe3b3fac8 [ 349.024938][ T9107] [ 351.198283][ T9012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.296833][ T9012] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.384160][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.391349][ T7926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.515266][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.522457][ T7926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.155945][ T9184] random: crng reseeded on system resumption [ 354.462198][ T9012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.129734][ T9012] veth0_vlan: entered promiscuous mode [ 355.188899][ T9012] veth1_vlan: entered promiscuous mode [ 355.601433][ T9012] veth0_macvtap: entered promiscuous mode [ 355.671357][ T9012] veth1_macvtap: entered promiscuous mode [ 355.698418][ T9199] ecryptfs_miscdev_write: Invalid packet size [192] [ 355.761685][ T9012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.824266][ T9012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.906003][ T7886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.951473][ T7886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.981079][ T9203] sg_write: data in/out 124/2 bytes for SCSI command 0x61-- guessing data in; [ 355.981079][ T9203] program syz.8.579 not setting count and/or reply_len properly [ 356.032489][ T7886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.068620][ T7886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.416249][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.482861][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.491011][ T4950] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 356.719440][ T7885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.782837][ T7885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.308142][ T9210] netlink: 'syz.3.547': attribute type 10 has an invalid length. [ 357.419592][ T9210] netlink: 330 bytes leftover after parsing attributes in process `syz.3.547'. [ 359.542157][ T9230] input: f as /devices/virtual/input/input8 [ 360.483984][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.582'. [ 361.251194][ T9261] vhci_hcd vhci_hcd.3: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 361.289681][ T9265] bridge0: port 3(veth1) entered blocking state [ 361.303537][ T9265] bridge0: port 3(veth1) entered disabled state [ 361.349123][ T9265] veth1: entered allmulticast mode [ 361.405476][ T9265] veth1: entered promiscuous mode [ 361.449710][ T9265] bridge0: port 3(veth1) entered blocking state [ 361.457335][ T9265] bridge0: port 3(veth1) entered forwarding state [ 364.790372][ T9329] random: crng reseeded on system resumption [ 364.902579][ T9329] hub 1-0:1.0: USB hub found [ 364.902871][ T9329] hub 1-0:1.0: 1 port detected [ 372.857850][ T5634] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 372.870237][ T5634] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 372.881558][ T5634] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 372.897786][ T5634] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 372.905736][ T5634] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 374.953066][ T4950] Bluetooth: hci11: command tx timeout [ 376.512393][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.556452][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.606781][ T9435] bridge_slave_0: entered allmulticast mode [ 376.631246][ T9435] bridge_slave_0: entered promiscuous mode [ 376.674520][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.726703][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.761037][ T9435] bridge_slave_1: entered allmulticast mode [ 376.810170][ T9435] bridge_slave_1: entered promiscuous mode [ 377.024521][ T4950] Bluetooth: hci11: command tx timeout [ 377.036912][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.119645][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.596907][ T9435] team0: Port device team_slave_0 added [ 377.695091][ T9435] team0: Port device team_slave_1 added [ 377.972630][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.018747][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.198472][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.402111][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.450979][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.560173][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.569417][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.642168][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.091459][ T4950] Bluetooth: hci11: command tx timeout [ 379.647854][ T9512] ubi: mtd0 is already attached to ubi31 [ 379.992661][ T9435] hsr_slave_0: entered promiscuous mode [ 380.034290][ T9435] hsr_slave_1: entered promiscuous mode [ 380.072721][ T9435] debugfs: 'hsr0' already exists in 'hsr' [ 380.111592][ T9435] Cannot create hsr debugfs directory [ 381.160674][ T4950] Bluetooth: hci11: command tx timeout [ 382.629036][ T9435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.883185][ T9435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.259203][ T9435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.551951][ T9435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.678085][ T9435] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.723475][ T9435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.751930][ T9435] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.792484][ T9435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.826885][ T9435] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.884805][ T9435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.912051][ T9435] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.950666][ T9435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.263415][ T9435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.337310][ T9435] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.396910][ T7883] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.404119][ T7883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.487887][ T7883] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.495183][ T7883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.948486][ T4950] Bluetooth: hci9: unexpected event for opcode 0x7c89 [ 388.443872][ T9435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.710066][ T9435] veth0_vlan: entered promiscuous mode [ 388.868087][ T9599] Process accounting resumed [ 388.985977][ T9435] veth1_vlan: entered promiscuous mode [ 389.166973][ T9627] netlink: 25 bytes leftover after parsing attributes in process `syz.8.651'. [ 389.240899][ T9435] veth0_macvtap: entered promiscuous mode [ 389.495033][ T9435] veth1_macvtap: entered promiscuous mode [ 389.654276][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.802108][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.903985][ T7878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.949464][ T7878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.027378][ T7878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.081570][ T7878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.628460][ T7878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.682386][ T7878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.042178][ T7886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.114328][ T7886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.089825][ T9736] Process accounting resumed [ 399.142744][ T4950] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 400.396252][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 404.279692][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 404.856900][ T4950] Bluetooth: hci9: unexpected event for opcode 0x7c89 [ 405.141608][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 405.193664][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 408.619092][ T9889] netlink: 306 bytes leftover after parsing attributes in process `syz.9.700'. [ 409.723132][ T30] INFO: task syz.1.447:8258 blocked for more than 143 seconds. [ 409.746295][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 409.776316][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.837716][ T30] task:syz.1.447 state:D stack:26904 pid:8258 tgid:8257 ppid:5630 task_flags:0x400140 flags:0x00080002 [ 409.936664][ T30] Call Trace: [ 409.969920][ T30] [ 410.004853][ T30] __schedule+0x1295/0x67a0 [ 410.032749][ T30] ? __pfx___schedule+0x10/0x10 [ 410.056858][ T30] ? find_held_lock+0x2b/0x80 [ 410.072458][ T30] ? schedule+0x2bf/0x390 [ 410.086828][ T30] schedule+0xdd/0x390 [ 410.107467][ T30] schedule_preempt_disabled+0x13/0x30 [ 410.125009][ T30] __mutex_lock+0xced/0x1b10 [ 410.140567][ T30] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 410.160782][ T30] ? __nla_validate_parse+0x1e7/0x28b0 [ 410.180823][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 410.194921][ T30] ? net_generic+0xea/0x2a0 [ 410.214067][ T30] ? net_generic+0xea/0x2a0 [ 410.230743][ T30] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 410.250177][ T30] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 410.271537][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 410.290124][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 410.320497][ T30] ? genl_get_cmd+0x3e7/0x760 [ 410.339410][ T30] ? bpf_lsm_capable+0x9/0x10 [ 410.349848][ T30] ? security_capable+0x80/0x260 [ 410.366943][ T30] genl_rcv_msg+0x560/0x800 [ 410.382093][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.396252][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 410.430989][ T30] netlink_rcv_skb+0x159/0x420 [ 410.437123][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.450220][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.461475][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 410.479101][ T30] genl_rcv+0x28/0x40 [ 410.483167][ T30] netlink_unicast+0x585/0x850 [ 410.497334][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 410.504331][ T30] netlink_sendmsg+0x8b0/0xda0 [ 410.532111][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.538464][ T30] ? __import_iovec+0x1d2/0x640 [ 410.547144][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 410.560029][ T30] ____sys_sendmsg+0x9e1/0xb70 [ 410.576851][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.582181][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.598885][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 410.607245][ T30] ___sys_sendmsg+0x190/0x1e0 [ 410.626542][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.637761][ T30] __sys_sendmsg+0x170/0x220 [ 410.648968][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.668025][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 410.673335][ T30] ? rcu_is_watching+0x12/0xc0 [ 410.686194][ T30] do_syscall_64+0x115/0x840 [ 410.697972][ T30] ? clear_bhb_loop+0x40/0x90 [ 410.708072][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.726568][ T30] RIP: 0033:0x7f3d0f79ce59 [ 410.736167][ T30] RSP: 002b:00007f3d1070f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.758424][ T30] RAX: ffffffffffffffda RBX: 00007f3d0fa15fa0 RCX: 00007f3d0f79ce59 [ 410.777070][ T30] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 410.795617][ T30] RBP: 00007f3d0f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 410.807993][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.838917][ T30] R13: 00007f3d0fa16038 R14: 00007f3d0fa15fa0 R15: 00007ffcdb138b28 [ 410.855284][ T30] [ 410.909260][ T30] [ 410.909260][ T30] Showing all locks held in the system: [ 410.967655][ T30] 1 lock held by pool_workqueue_/3: [ 411.002244][ T30] #0: ffff8880b843b620 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 411.062712][ T30] 3 locks held by kworker/0:0/9: [ 411.088979][ T30] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 411.159403][ T30] #1: ffffc900000e7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 411.199028][ T30] #2: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 411.258163][ T30] 1 lock held by khungtaskd/30: [ 411.276966][ T30] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 411.334357][ T30] 2 locks held by kworker/u8:3/47: [ 411.357503][ T30] #0: ffff88801eb5a140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 411.416949][ T30] #1: ffffc90000b87d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 411.469613][ T30] 5 locks held by kworker/u8:55/7926: [ 411.499058][ T30] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 411.542839][ T30] #1: ffffc9000336fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 411.567487][ T30] #2: ffffffff905edfc8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 411.591481][ T30] #3: ffffffff90606d20 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 411.618269][ T30] #4: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 411.651934][ T30] 2 locks held by getty/7986: [ 411.662940][ T30] #0: ffff88803342e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 411.691647][ T30] #1: ffffc900024ce2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 411.706388][ T30] 1 lock held by syz.3.420/8103: [ 411.722476][ T30] 2 locks held by syz.2.432/8192: [ 411.736825][ T30] #0: ffffffff906b5228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.754572][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 411.775987][ T30] 2 locks held by syz.1.447/8258: [ 411.787505][ T30] #0: ffffffff906b5228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.813527][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 411.849700][ T30] 2 locks held by syz-executor/8272: [ 411.855757][ T30] #0: ffff88805a1f40d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 411.879929][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 411.900434][ T30] 2 locks held by syz-executor/8326: [ 411.910408][ T30] #0: ffff8880369c20d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 411.940864][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 411.961129][ T30] 2 locks held by syz-executor/8390: [ 411.978893][ T30] #0: ffff888077e580d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 411.999013][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 412.019761][ T30] 2 locks held by syz.0.467/8466: [ 412.026368][ T30] #0: ffffffff906b5228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.058373][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 412.078270][ T30] 2 locks held by syz-executor/8510: [ 412.085059][ T30] #0: ffff88802c4f80d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 412.110021][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 412.129155][ T30] 2 locks held by syz-executor/8554: [ 412.148492][ T30] #0: ffff88807a94a0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 412.169290][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 412.189428][ T30] 1 lock held by syz.9.589/9251: [ 412.207550][ T30] #0: ffff888078080ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 412.221287][ T30] 1 lock held by syz-executor/9435: [ 412.238579][ T30] #0: ffff888057830ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 412.268245][ T30] 1 lock held by syz.3.704/9909: [ 412.276764][ T30] #0: ffff88805c2acea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 412.297032][ T30] [ 412.325917][ T30] ============================================= [ 412.325917][ T30] [ 412.390117][ T30] NMI backtrace for cpu 0 [ 412.390136][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 412.390161][ T30] Tainted: [L]=SOFTLOCKUP [ 412.390167][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.390185][ T30] Call Trace: [ 412.390193][ T30] [ 412.390200][ T30] dump_stack_lvl+0x100/0x190 [ 412.390235][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 412.390255][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 412.390299][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 412.390366][ T30] sys_info+0x141/0x190 [ 412.390398][ T30] watchdog+0xcb1/0x1030 [ 412.390426][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 412.390467][ T30] ? __pfx_watchdog+0x10/0x10 [ 412.390493][ T30] ? __kthread_parkme+0x18c/0x230 [ 412.390518][ T30] ? kthread+0x13a/0x450 [ 412.390541][ T30] ? __pfx_watchdog+0x10/0x10 [ 412.390563][ T30] kthread+0x370/0x450 [ 412.390587][ T30] ? __pfx_kthread+0x10/0x10 [ 412.390613][ T30] ret_from_fork+0x72b/0xd50 [ 412.390633][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 412.390652][ T30] ? __switch_to+0x800/0x1100 [ 412.390680][ T30] ? __switch_to_asm+0x39/0x70 [ 412.390701][ T30] ? __pfx_kthread+0x10/0x10 [ 412.390727][ T30] ret_from_fork_asm+0x1a/0x30 [ 412.390757][ T30] [ 412.900453][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 412.907339][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 412.918019][ T30] Tainted: [L]=SOFTLOCKUP [ 412.922343][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.932403][ T30] Call Trace: [ 412.935683][ T30] [ 412.938721][ T30] dump_stack_lvl+0x100/0x190 [ 412.943416][ T30] vpanic+0x552/0x970 [ 412.947401][ T30] ? __pfx_vpanic+0x10/0x10 [ 412.951904][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 412.958064][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 412.964235][ T30] panic+0xd1/0xe0 [ 412.967973][ T30] ? __pfx_panic+0x10/0x10 [ 412.972404][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 412.978578][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 412.984735][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 412.990897][ T30] ? watchdog.cold+0x1ec/0x234 [ 412.995665][ T30] ? watchdog+0xcc1/0x1030 [ 413.000087][ T30] watchdog.cold+0x1fd/0x234 [ 413.004705][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 413.010529][ T30] ? __pfx_watchdog+0x10/0x10 [ 413.015215][ T30] ? __kthread_parkme+0x18c/0x230 [ 413.020265][ T30] ? kthread+0x13a/0x450 [ 413.024531][ T30] ? __pfx_watchdog+0x10/0x10 [ 413.029211][ T30] kthread+0x370/0x450 [ 413.033314][ T30] ? __pfx_kthread+0x10/0x10 [ 413.037915][ T30] ret_from_fork+0x72b/0xd50 [ 413.042533][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 413.047647][ T30] ? __switch_to+0x800/0x1100 [ 413.052337][ T30] ? __switch_to_asm+0x39/0x70 [ 413.057120][ T30] ? __pfx_kthread+0x10/0x10 [ 413.061728][ T30] ret_from_fork_asm+0x1a/0x30 [ 413.066508][ T30] [ 413.069584][ T30] Kernel Offset: disabled [ 413.073920][ T30] Rebooting in 86400 seconds..