last executing test programs: 8m2.724859985s ago: executing program 32 (id=445): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r1 = socket(0xa, 0x3, 0x8) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r2, 0x110, 0x4, 0x0, 0x4) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r1, 0x400454ca, r1) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) (async) write$auto(0x3, 0x0, 0xfdef) (async) pipe$auto(&(0x7f0000000040)=r0) 2m54.249743489s ago: executing program 33 (id=1432): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xffffffd1, r2, 0x400, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x2000000001, 0x200, 0x200000000000df, 0x80000011, 0x40000000000a5, 0x9) mremap$auto(0x4000, 0x7fff, 0x200013fd4, 0x7, 0xfffff000) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bda6, 0x25dfdbfd}, 0x14}}, 0x20004800) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x468040, 0x0) pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x810004, 0xffc, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) clone3$auto(&(0x7f00000000c0)={0xd, 0xb2, 0x0, 0x5, 0x5, 0xc, 0x1, 0xfffffffffffffff9, 0x3, 0x480000, 0x81}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 2m16.688045466s ago: executing program 34 (id=1538): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xffffffffffffffff, 0x400009, 0xfffffffffffffff9, 0x16, r0, 0x0) mmap$auto(0x7, 0x40009, 0x8000000000000009, 0x9b71, 0xffffffffffffffff, 0x4028000) r1 = openat$auto_random_fops_random(0xffffffffffffff9c, 0x0, 0x161000, 0x0) read$auto_random_fops_random(r1, 0x0, 0x5) sendmsg$auto_NETDEV_CMD_NAPI_GET(0xffffffffffffffff, 0x0, 0x4000090) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, 0x0, 0x40002, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x2c, 0x0) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000001440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xb8\xc0\x1f\xe6\x9f\x9cy\xa9\xad\x96\x19Fy\x11}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdf\x17\xe4\xcbA\xa5[\x1aG\xa6\x94\xe0\xdf\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(W| \xce\xcc\xdd%\xcf\xab\xa8\xafhM\x0f%\xc4C9~\xfe\x02]\xedVfQ', 0xf) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x8408, 0xfff, 0x400004, 0x200000000040000d}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x1c}}, 0x8040) r4 = setfsuid$auto(0x0) setresuid$auto(0x0, r4, 0x0) msgctl$auto_IPC_INFO(0xb6b7, 0x3, &(0x7f0000000680)={{0x8, 0xffffffffffffffff, 0x0, 0x8000, 0x0, 0xb, 0xbd}, 0x0, 0x0, 0x400, 0x8d, 0x6a9, 0x5, 0x0, 0x1f2b, 0x37, 0xcd8, @inferred=0xffffffffffffffff}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/gretap0/queues/rx-0/rps_cpus\x00', 0x183042, 0x0) mprotect$auto(0x200000000000, 0x806122, 0xc) sendfile$auto(r6, r6, 0x0, 0x8000) r7 = setfsuid$auto(0xee01) setresuid$auto(r5, 0x0, r7) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(0xffffffffffffffff, 0x0, 0x4008010) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) read$auto(r0, 0x0, 0x15) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r8, &(0x7f0000000140), 0x0) 2m11.673348522s ago: executing program 35 (id=1554): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x40040, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x2, 0x0) read$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000080)=""/41, 0x29) msgget$auto(0x2, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000000)=0xc) setsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x85, 0x43, &(0x7f0000000300)='\x00\xda\x1d\x8d3\r\xb0\re7\xa1\x1dH,\xfb@ \xf1o/\xed\xd1\xab\x06U5P+\x88R\x11f\v\xcd\xfb\b\x18\x8f\xd1\xf2\x10\x8eaN\x13\b\xd1\xa6\n1\xf5\xb5\x04\xf2\x10\x89\a\x94\x9f\x9cG\xcdV\x17\xf3\xcd:\x9cK\xb8\x8d=\xafq\xcc\x13\xa9\fQNrs\xd2\x00\x80\x00\x00\x8c\xbc9\xf9\xc3\xed\xcaMnP\xe9\xe9\xfb\x96\x81\x94\xb9\x12m\xc0\'\x86\xe3Y\vm\xac\x96\xc9h\x85\x9dt\x12\xde!\x91E\x10\x99zL\x1f\r(\xbfTm\x92B\x1d\xbc|\x05\xe2.\x9d\xb4\x84\x15\x88+\xda\xcd\xe6tC\xea\xa2zkv,\xb5!H\xe6~\x89\xad\xbe\xd3L`Yb\x12Xi\x95j\x7f{\xb5\xa0\xb4\xa1\xf5\x03\xe7|\xb7\xc3\x04\x00\x11?\xc2%\xb2\x86\xccU\xb0\x8bg\x15\r\xa9\xbe\x90\xc3\x89\xc0FZ\x7f-', 0x2000fffd) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) prctl$auto(0x20032, 0x40004, 0x0, 0x7f, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x1, 0x8e051, r1, 0x4000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8300, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x9, 0x7fffffff, 0x80000000c1, 0x1fffff, r1, 0xffffffffffff8001) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/179, 0xb3) madvise$auto(0x3, 0x1010001, 0x800) r3 = io_uring_setup$auto(0x406, 0x0) sendfile$auto(0x1, r3, 0x0, 0x5) socket(0xa, 0x801, 0x86) mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, r2, 0x8000) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x2c0182, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x8006, 0x8, 0x20000000000005) 2m6.319961573s ago: executing program 36 (id=1572): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:10/max_ratio\x00', 0x2002, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xff4fe636e6ca8df0, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) prctl$auto(0x29, 0x0, 0x8, 0x0, 0x0) (async) prctl$auto(0x29, 0x0, 0x8, 0x0, 0x0) r2 = memfd_create$auto(&(0x7f0000000000)='\x00', 0x6) io_uring_setup$auto(0x996, 0x0) (async) io_uring_setup$auto(0x996, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000001600), 0x101082, 0x0) ioctl$auto_I2C_PEC(r3, 0x708, &(0x7f0000001640)) (async) ioctl$auto_I2C_PEC(r3, 0x708, &(0x7f0000001640)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x7, 0x2}, 0x10001}, 0x5, 0x20000003) io_uring_setup$auto(0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) (async) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x7fff, 0x0, 0xf) read$auto(0x3, 0x0, 0x80) (async) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_rtc_dev_fops_dev(r2, &(0x7f0000000180)=""/162, 0xa2) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) io_uring_setup$auto(0xa, 0x0) (async) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, r1, 0x8000) 1m37.791710079s ago: executing program 8 (id=1643): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x7, 0x9, 0x3, 0xeb1, 0x7, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0xa2500, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_CONTROL32(0xffffffffffffffff, 0xc0105500, &(0x7f0000000080)={0x2, 0x7, 0x9, 0x0, 0x0, 0x3, 0x10}) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x40004008) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000240), r0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x701, 0x70bd2c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0xb, 0x2, 'nlctrl\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x11, 0x4, 0xfffffffe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) readv$auto(r4, 0x0, 0x2) close_range$auto(r2, r3, 0xfffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x58) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r5, 0x0, 0x39b8) socketcall$auto_SYS_RECVMSG(0x11, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m36.769416618s ago: executing program 8 (id=1645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x14, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x10, 0x1, "5e1f970f497f9f23d63e7285"}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x8040, 0xc9, 0xa}, 0x18) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r4, r4, 0x0, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x801f, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) 1m34.280729019s ago: executing program 37 (id=1621): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) signalfd4$auto(0xffffffffffffffff, 0x0, 0x8, 0x800) (async, rerun: 32) read$auto(0x3, 0x0, 0x80) (rerun: 32) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0xc, 0x0, 0x0) (async, rerun: 64) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) ioctl$auto_PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0x4) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) ioctl$auto_PPPIOCSMAXCID(r1, 0x40047451, 0x0) (async, rerun: 32) read$auto(r0, 0x0, 0x20) (async, rerun: 32) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xa2903, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) setreuid$auto(0x0, 0x5) (async) unshare$auto(0x40000080) 1m30.3566578s ago: executing program 38 (id=1629): setgroups$auto(0xa1, &(0x7f0000000000)=0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00') readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40010) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={"dd0aaf13ca4b961d4d48df153d837559b1dadb0d9cfe27f1f72956e6d5741567", 0x6, 0x5, 0xffffffff, 0x7, 0x4}) (async) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={"dd0aaf13ca4b961d4d48df153d837559b1dadb0d9cfe27f1f72956e6d5741567", 0x6, 0x5, 0xffffffff, 0x7, 0x4, 0x0}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2cc, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x8}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x3}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xd4, 0x1a, "fc7ac134c9f904c864fc98f9c08bb4d20de0cdb50b66696825ffab125e350d2d94abd42c7385130e42daef39cd79e1a7bb9cc9242d4851355cdcd7d102728564be6b1c8abcf18b455ffb47388570f56e8167d317c17767b1428a41505e8d1c4db2d15fe875f42bab4707ae9f4f899097cc01c09063e37bb35ba2c351b5855519507471d7c6fabb3d03c48944d889899d1d17e4371e1a6993f7b1cc769546d74442434f951b9cb8e6d35bdafac0e3bcd2581bbff88e1a37198e018df5ddf86359c09a8dabcdb8531802a5b3f37cc42ab4"}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, "e938"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x35}, @NL80211_ATTR_HE_OBSS_PD={0x10c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xdb, 0x4, "6337a0e9051024f64431125f385c6bdec8fa678489231f89b1b13e64fe45f4def22700ea9a14f53cdb26585158d5acb92398eeb5a2e036bde35d41b1ce30201d473da0f35369f5790c6591d9ef2a7cf656db9fc4cfbbbb8a0960c39efbb6b582821d084b495563660276b078f4c05567463bcf854179440f193de6ac4c175a27c9f124001a3fa2a6cb420be3dd80b3039b7ed1dcc0ae461c9889a18b85d479829c8095b482bc59600abae369157dbf9fa6ed6ab08d004d88bdc9c5ec70c50dec03d9048e27653f0c6e5bb4ae2506a41e163f09d6577e11"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0x23, 0x4, "813a08ddb8f59fca1bbdd0e64fe95084812fd4c61fe3a0915b9d427624e9f0"}]}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xb}, @NL80211_ATTR_STA_FLAGS={0xa3, 0x11, 0x0, 0x1, [@typed={0x8, 0x10a, 0x0, 0x0, @pid=r2}, @generic="30fc7a79dcf0584e28d1f0a1932247fa1b80a74fd24cc26c85ffff5295c614cf1a51561a25b76fecd0146079975d776b4ae1dad7e862ab4a850e05fa73edd9e31dfc4628c910c4f82517e3d932f5d3644a3531762ffb075d4b90f65241f9c4278263875ff62db5446d9fcfa1a2593fa1a4551171a6e32c27faf87ab4e994f211cfd77332a28ea401a870d9876e9c6667f3e18876974227"]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0xc0}, 0x850) (async) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2cc, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x8}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x3}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xd4, 0x1a, "fc7ac134c9f904c864fc98f9c08bb4d20de0cdb50b66696825ffab125e350d2d94abd42c7385130e42daef39cd79e1a7bb9cc9242d4851355cdcd7d102728564be6b1c8abcf18b455ffb47388570f56e8167d317c17767b1428a41505e8d1c4db2d15fe875f42bab4707ae9f4f899097cc01c09063e37bb35ba2c351b5855519507471d7c6fabb3d03c48944d889899d1d17e4371e1a6993f7b1cc769546d74442434f951b9cb8e6d35bdafac0e3bcd2581bbff88e1a37198e018df5ddf86359c09a8dabcdb8531802a5b3f37cc42ab4"}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, "e938"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x35}, @NL80211_ATTR_HE_OBSS_PD={0x10c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xdb, 0x4, "6337a0e9051024f64431125f385c6bdec8fa678489231f89b1b13e64fe45f4def22700ea9a14f53cdb26585158d5acb92398eeb5a2e036bde35d41b1ce30201d473da0f35369f5790c6591d9ef2a7cf656db9fc4cfbbbb8a0960c39efbb6b582821d084b495563660276b078f4c05567463bcf854179440f193de6ac4c175a27c9f124001a3fa2a6cb420be3dd80b3039b7ed1dcc0ae461c9889a18b85d479829c8095b482bc59600abae369157dbf9fa6ed6ab08d004d88bdc9c5ec70c50dec03d9048e27653f0c6e5bb4ae2506a41e163f09d6577e11"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0x23, 0x4, "813a08ddb8f59fca1bbdd0e64fe95084812fd4c61fe3a0915b9d427624e9f0"}]}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xb}, @NL80211_ATTR_STA_FLAGS={0xa3, 0x11, 0x0, 0x1, [@typed={0x8, 0x10a, 0x0, 0x0, @pid=r2}, @generic="30fc7a79dcf0584e28d1f0a1932247fa1b80a74fd24cc26c85ffff5295c614cf1a51561a25b76fecd0146079975d776b4ae1dad7e862ab4a850e05fa73edd9e31dfc4628c910c4f82517e3d932f5d3644a3531762ffb075d4b90f65241f9c4278263875ff62db5446d9fcfa1a2593fa1a4551171a6e32c27faf87ab4e994f211cfd77332a28ea401a870d9876e9c6667f3e18876974227"]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0xc0}, 0x850) 1m28.861298475s ago: executing program 9 (id=1650): r0 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x400c865) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010072e0fa60fddbdf250000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x6) connect$auto(0x3, 0x0, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x9b2, 0x400007, 0xdd, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) acct$auto(&(0x7f0000000e40)='/dev/snd/seq\x00') r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd7\x00', 0x109202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c05, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x5) madvise$auto(0x201000, 0x2003f0, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) setrlimit$auto(0x6, &(0x7f0000000080)={0x8, 0x6f}) mmap$auto(0x3, 0x602000d, 0x9, 0xeb1, r1, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) sendmmsg$auto(r2, &(0x7f0000000340)={{0x0, 0x539fafba, &(0x7f0000000280)={0x0}, 0x4, &(0x7f00000002c0), 0x2, 0x2}, 0x7}, 0xffff7fff, 0x30) 1m26.904035484s ago: executing program 9 (id=1660): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ptype\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x18, 0x2, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) accept4$auto(r0, &(0x7f0000000500)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, &(0x7f0000000540)=0xf, 0xfffffffc) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r3) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf250f00000005002e000000000008000300", @ANYRES32=r4, @ANYBLOB="c4bd7377b86ee73966953490e23f587b925584d3c987fcaa6177e2df1de4b68b106b4bd34a20118626b1583092bb91c00f6f0d47db82d97f3834ebc35786ecae4d32190f33e0d50482e39d904ffed47b348d410f14f3f163cab22cba6547ee08b6ab90083ab46a3defd3ee2bf0ef1ac468f38499b755d4494267bd714ded93044aa57e3d9544364056bb29b763566d0000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netpci0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r9 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002bbd7000fedbdf250b00000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="e569dcf196e06ae7c308000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040020) r12 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x1000b5, 0x4010, 0x8, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x1, 0x7, 0xe5, 0x3}, 0x800) mmap$auto(0x0, 0xa, 0xd7, 0x9b72, r12, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000280)=0x1000c0) ioctl$auto_FICLONERANGE(r1, 0x4020940d, 0x10000) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x16001, 0x0) setgroups$auto(0xe32, 0x0) 1m26.432804539s ago: executing program 9 (id=1661): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x2000009b72, 0x7, 0x80) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x2000009b72, 0x7, 0x80) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptybe\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(0xffffffffffffffff, 0x1d3b, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(r2, 0x1, 0x10, 0x0, 0x9) (async) setsockopt$auto(r2, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r4, 0x705, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) sendmsg$auto_NL80211_CMD_VENDOR(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r4, 0x705, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x2) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000300)={0x17c, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_STA_FLAGS2={0xee, 0x43, "87532be8c02e498868e569265e669fd84a305dc4c62b77b095a40153ac0cf0655a39203f0736ec578cd1e084e4fb456d3395612d42421513a220613332b5a26756c1b3db74d84dfaa704db093e28416b4d65d7c6eb74838535e4a959b6400d4a5814218dc585274fe7241544b870e6cca0b3134437383ffd08bf8db152598bc885326465771475f3252dc87ffd433573975f5e608e97945e0f3cf65677f7df0c5656ca9a9cdb55bf8ea8bfea389071756152f39621a03c5877e6050e36753eae4540aa87ab8d8ebf3b182b9077bb7dcd36b1d15fb76e4229563e21311509be48ff6e9fcc4e04225ed5ef"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_BEACON_TAIL={0x47, 0xf, "12f3d77ca4aefbf49c1ee72dc9996d47a3dec57ccbd1fbae41b5c31b03c37d3aced5254e85e4b951d4ab55f83e957722387a47d34be31c5dea59ff6e78ad6208ddb8fb"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) 1m26.061771709s ago: executing program 9 (id=1662): mmap$auto(0x0, 0x202000c, 0x1, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x384252d666b148c, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x2100, 0x0) lseek$auto(r1, 0x9, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) ioctl$auto(0x3, 0x8030ae7c, r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4c810) socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x106) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/binder/parameters/stop_on_user_error\x00', 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0xd9, 0x7, 0x34, 0x3ff, 0x1ffde, 0x7, 0x9, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb2, 0x9, 0x0, 0xfffd, 0x0, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x7, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) read$auto(r0, 0x0, 0x20) 1m25.161989079s ago: executing program 9 (id=1665): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, 0x0, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x1000007, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r4, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x880, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r5) sendmsg$auto_OVS_DP_CMD_NEW(r5, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0x9, 0x9b72, r5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x8) 1m22.989420441s ago: executing program 9 (id=1668): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ptype\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x18, 0x2, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) accept4$auto(r0, &(0x7f0000000500)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, &(0x7f0000000540)=0xf, 0xfffffffc) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r3) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf250f00000005002e000000000008000300", @ANYRES32=r4, @ANYBLOB="c4bd7377b86ee73966953490e23f587b925584d3c987fcaa6177e2df1de4b68b106b4bd34a20118626b1583092bb91c00f6f0d47db82d97f3834ebc35786ecae4d32190f33e0d50482e39d904ffed47b348d410f14f3f163cab22cba6547ee08b6ab90083ab46a3defd3ee2bf0ef1ac468f38499b755d4494267bd714ded93044aa57e3d9544364056bb29b763566d0000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netpci0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r9 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002bbd7000fedbdf250b00000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="e569dcf196e06ae7c308000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040020) r12 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x1000b5, 0x4010, 0x8, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x1, 0x7, 0xe5, 0x3}, 0x800) mmap$auto(0x0, 0xa, 0xd7, 0x9b72, r12, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000280)=0x1000c0) ioctl$auto_FICLONERANGE(r1, 0x4020940d, 0x10000) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x16001, 0x0) setgroups$auto(0xe32, 0x0) 1m21.123141138s ago: executing program 39 (id=1645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x14, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x10, 0x1, "5e1f970f497f9f23d63e7285"}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x8040, 0xc9, 0xa}, 0x18) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r4, r4, 0x0, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x801f, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) 1m17.911229724s ago: executing program 6 (id=1672): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x100c, 0xfffffffffffffff9, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x2, 0x0) getsockopt$auto(r0, 0x10f, 0x1087, 0x0, 0x0) socket(0x10, 0x2, 0x4) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x80000, 0x0) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x40000000}, 0x68) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) rename$auto(&(0x7f0000000040)=':,\x00', &(0x7f0000000080)='./file0\x00') r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="04040000080000000900000007000000ffffff7f070000000000008004000000ff00000000000000020000000a000000ff010000010000000b0000007200000005000000080000000900000005000000ffffffff0000400002000000008000000700000002000000dc0400000700000043ec0200000003000000060600006d00000008000000000000000000"]) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/bond0/queues/rx-4/rps_cpus\x00', 0xa0666, 0x0) write$auto(r2, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m16.583851114s ago: executing program 6 (id=1674): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r0, 0x800064be, 0x1e6) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/001/001\x00', 0xa9202, 0x0) r2 = io_uring_setup$auto(0x8, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={"dfdab3e99232706ccf670c1ab70597b5c3c68cdcc7a30feb91871cc15b5bc254", 0xff0e, 0x10000, 0x6, 0x200, 0xfadb}) ioctl$auto_MEMERASE64(r2, 0x40104d14, &(0x7f0000000100)={0x1ff, 0x80000}) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000240), r2) read$auto_stats_fops_(r2, &(0x7f0000000080)=""/40, 0x28) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, r1, 0x47f) open(0x0, 0x12da40, 0x121) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x11, 0x3, 0x9) r4 = socket(0x11, 0x80003, 0x300) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/use_carrier\x00', 0x103b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x8080000001) io_uring_register$auto_IORING_UNREGISTER_FILES(r3, 0x3, &(0x7f0000000180)="501f11cd51de88f13153a7cb365555a4280569454a3c8b852a352f7e05548bc1b45e7bef45bc28fb2a7878a2e0a4f99bf0380521990d56746c65905633b61bc385", 0x0) sendfile$auto(0x1, r4, 0x0, 0x8fb5) mmap$auto(0x0, 0x40000a, 0x80000001, 0x9b72, 0xffffffffffffffff, 0x8000) 1m16.029643387s ago: executing program 6 (id=1675): socket(0x15, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x1c9002, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/3t\x00', 0x4312edeb2b6146c3, 0x0) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x24400, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) semtimedop$auto(0xfffffffe, &(0x7f00000001c0)={0x6, 0x7, 0x36ec}, 0x10, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r4, 0xc0045520, r3) getsockopt$auto_SO_MEMINFO(r2, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r1, r0, 0x5) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) r5 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r5, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) r6 = socket(0x18, 0x1, 0x80) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x111100, 0x0) close_range$auto(0x2, 0x8, 0x0) kcmp$auto(0x1, 0x100000001, 0x1, 0x4, 0x24000) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x12d445, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto(r6, 0x1, r7) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0x42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) 1m15.030034634s ago: executing program 6 (id=1676): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) mmap$auto(0x0, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(r1, 0x0, 0x8) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0xfffff80000000000, 0x2020009, 0x10000003, 0xeb1, r0, 0xf) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x571) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000004640), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r4, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000010", @ANYRESOCT, @ANYRES32=r0, @ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) fcntl$auto_F_ADD_SEALS(r3, 0x410, 0x3) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) r6 = io_uring_setup$auto(0x6, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r6) sendmsg$auto_NL80211_CMD_SET_BSS(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES16=r7, @ANYBLOB="00002bbd7000ffdbdf251900000005003901040000000500190006000000040008010400d000"], 0x2c}, 0x1, 0x0, 0x0, 0x6040}, 0x855) 1m13.933227026s ago: executing program 6 (id=1678): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) unshare$auto(0x8000000) shmget$auto(0x0, 0xfffffffffeffffff, 0x69c2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x14) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0xfffffffa) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xb, 0x80000, 0x84) setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0) exit$auto(0x5eb) 1m12.59832059s ago: executing program 6 (id=1679): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x20000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x20841, 0x0) r1 = prctl$auto(0x3e, 0x40001, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3dc) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) mmap$auto(0x7ff, 0x4020009, 0x4, 0x14, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_safesetid_uid_file_fops_securityfs(r1, &(0x7f00000002c0)="fa6ebe3040048d3613bf95b78886c58c99d647270e3e3266259bc07d51c7cb22a567d23be34b57b6809815590fc298c4ec3b39aa97ed016d0db24ba7374c007197efd5025dde2cd8904e80df546ea27b73ea77d818f8cf4719b2c1aef1d2290fbbe871ba08931adc9e3e52606d793db109fe52e240feaf5211768e855dfdcc24553f8d4643586eb426907cc4536e7c773b211c804a4b5c6400c6380406aae3dac516772d0ad3c207e7a65f3848f024bf7680be63fa", 0xb5) statmount$auto(0x0, 0x0, 0x800, 0x0) madvise$auto(0x0, 0x6, 0x15) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000200), r1) madvise$auto(0xfffffffffffffffd, 0xe9d, 0x20018) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) arch_prctl$auto_ARCH_SHSTK_LOCK(0x5003, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x408000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(r0, 0x9, r2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x2}) sendmsg$auto_L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40) 1m9.141209848s ago: executing program 0 (id=1684): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf2502000000080001009e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000040) r2 = socket(0x2, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000080009005c2f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) r5 = getsockopt$auto(r2, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x1e) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory1/online\x00', 0x40, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) fallocate$auto(0xffffffffffffffff, 0x0, 0x10, 0xccbd5d) r6 = socket(0x2, 0x2, 0x1) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) socket(0xa, 0x1, 0x3) write$auto(0xca, &(0x7f0000000380)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe9\xb4\xe4\xfc1v\x19\x1b\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5l\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8)6O\x81\x84\x96\x970\xcd\xbc\xc2\xf9\x1c \x15\xce\xda\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xb2\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\x86\x11\x97^\xd6r\xc0\xca', 0x55) sendmsg$auto_NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200182}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048800}, 0x20004000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28200, 0x0) io_uring_setup$auto(0x5, 0x0) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000002c0)={{0x9, 0x3, 0x400, 0x2}, "d9828c76139a4283e433d996c031e8f4f541f12b887484aca63cac7e4412f02deabdb4b4004eeec5c15928d5c6c975aa97051ef10d1d8d9b04e27ec53a50bcce02c65a8c59526c711b8acf0b490f7ce7", 0x280}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'nr0\x00'}) 1m8.14035157s ago: executing program 0 (id=1686): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "ab0000000000000000000000000000000000000000001400"}) r0 = fanotify_init$auto(0x5, 0x2000000000002) r1 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r0, 0x9, 0x9, r1, 0x0) mkdir$auto(&(0x7f0000000500)='./file0\x00', 0x6) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000000180), 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\b\x00w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x8c)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x14&\x99?\xe6\xe5I\xe2\xae,\x95k \x97\x18VBAo', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, r2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdd, 0x9b72, 0xffffffffffffffff, 0x8001) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100002, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 1m7.148165593s ago: executing program 40 (id=1668): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ptype\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x18, 0x2, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) accept4$auto(r0, &(0x7f0000000500)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, &(0x7f0000000540)=0xf, 0xfffffffc) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r3) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf250f00000005002e000000000008000300", @ANYRES32=r4, @ANYBLOB="c4bd7377b86ee73966953490e23f587b925584d3c987fcaa6177e2df1de4b68b106b4bd34a20118626b1583092bb91c00f6f0d47db82d97f3834ebc35786ecae4d32190f33e0d50482e39d904ffed47b348d410f14f3f163cab22cba6547ee08b6ab90083ab46a3defd3ee2bf0ef1ac468f38499b755d4494267bd714ded93044aa57e3d9544364056bb29b763566d0000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netpci0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r9 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002bbd7000fedbdf250b00000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="e569dcf196e06ae7c308000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040020) r12 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x1000b5, 0x4010, 0x8, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x1, 0x7, 0xe5, 0x3}, 0x800) mmap$auto(0x0, 0xa, 0xd7, 0x9b72, r12, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000280)=0x1000c0) ioctl$auto_FICLONERANGE(r1, 0x4020940d, 0x10000) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x16001, 0x0) setgroups$auto(0xe32, 0x0) 1m7.120325545s ago: executing program 0 (id=1689): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) link$auto(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)='./file2\x00') ioctl$auto_FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000080)="6be78eb78f542f605ee96b7499e9c00fdcd4a7f8a6394f295e42d045b19254d37d2f2be106224cef06c20741a8b247711561c5c9dd663d3afe03e102aefe8e6aaa4cea887bf55474043783f469ac6b1ee30733fb1747ee2745c8e2aeaeaf330e54c5f580c5ae67240deb128be370156d7a4f307d72d297666b0952af463df50f54181e4b15d61329db509bebb02627289e7e2406fd34225cd397dd6d") mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3d, 0x0) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_seg6(0xfffffffffffffffd, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7\xff\x0f\x00\x00\x00\x00\x00\x00\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xcc\xe8\xcb?(\xfaI\xe2\xaf,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x00\x00\x00\x00\x00\x00\xec\x1c\x00.\x98\x14\xc0?9?\xd5\xa18=F-\xf1mc\xa0\x99xVM\x8f\xc9\xe5\n\xa9\x82f\xca\x8a\x041\xc4\f`iV\xfd\x991\x81%\x1d\xe8\xf1\xe4\x00\xbc\xdbT\x88\x87\xff\xeaA\x8d\br\xfd\xaa\xcc\x10\xafr\xed \xbb(\xc0Q\xbe\xeb\xbe\x19\x1a\x9cL\xd7\a\xc6\xdd\xd4\xe1\x03\xe8\x97M\x85-\x96Z\xb8<\xaa\x99\xef\xacZ\x90M%\xe4\xf4\xe2O\xeb!\xbb\x11\x1aM\x1a.\xef \xc2\xbe`\xba\xfb\xbf6n\b\x7f\xbd\xb4\xc6\x88O0=\xd7`D\xe4\x87\xacV\xe6\x10\x15Qc\xc2\xcc7F\x17\xc4g\xa2/*\x8ae5>I\a9+&\x13\x9c\x91t\x1e;\xff\x00\x9b\n\x11\xbb\xb5l|\x8d5$$\xfd\x03\xb2\x1c', 0x6) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4\x00', 0x101000, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x2000000000003, 0xeb1, r2, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop15/integrity/write_generate\x00', 0xa80, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x11, 0x3, 0x3a) ioctl$auto(r3, 0x8916, 0x1) 1m6.197079798s ago: executing program 0 (id=1691): msgsnd$auto(0x0, 0x0, 0x8, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x109802, 0x0) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0xffffffffffffffff) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r4, 0x77bed28568c43d3b, 0x70b52a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}, 0x1, 0x3f000000}, 0x80) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ROUTER={0xa, 0x1d, @local}, @BATADV_ATTR_TPMETER_COOKIE={0x8, 0xd, 0x8}, @BATADV_ATTR_FLAG_BEST={0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_BANDWIDTH_DOWN={0x8, 0x1c, 0x8}, @BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @BATADV_ATTR_BLA_CRC={0x6, 0x22, 0x4e4}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') ioctl$auto_MEMGETOOBSEL(r7, 0x80c84d0a, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r8 = open(0x0, 0x22240, 0x55) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, 0x2, 0xae) socket(0xa, 0x2, 0x73) connect$auto(0x3, 0x0, 0x55) io_uring_setup$auto(0x6, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000300), r8) sendmsg$auto_IPVS_CMD_SET_SERVICE(r9, 0x0, 0x4000000) unshare$auto(0x40000080) 1m4.904010507s ago: executing program 0 (id=1693): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c0") openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x8000) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec26\x00', 0xc0000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000180)={'\x00\x00\b\x00', 0x0, 0x5, 0x2, 0x997, 0x9, '\x00', '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "6c6529a30418fffffffff300", "ef5bc49241b4ce278e7426d8", ' \x00\x00\x00\x00\x00\t\x00']}) close_range$auto(r3, r2, 0x9) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, 0x0) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x0, 0x53, 0x0, 0x0) 1m4.0820482s ago: executing program 0 (id=1694): mknod$auto(&(0x7f0000000040)='./bus\x00', 0xffd, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f00000002c0)='./file0\x00', 0x161342, 0x100) ioctl$auto_PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x8, 0x1}) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_reset\x00', 0x20000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/workqueue/nvmet-wq/affinity_strict\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)='-7', 0xfffffc49) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r2, 0x4b2f, 0x0) mmap$auto(0x0, 0x20002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) unshare$auto(0x20000) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(0xffffffffffffffff, 0x4004550a, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/swradio13\x00', 0x8a2c0, 0x0) prctl$auto_PR_GET_AUXV(0x41555856, 0x5400000000000000, 0x5, 0x0, 0x5) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000001c0)=""/213, 0xd5) ioctl$auto(r3, 0x5646, r3) r4 = pidfd_open$auto(0x1, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) setns(r4, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x153326100, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0xa7) r5 = setfsuid$auto(0xee00) ioctl$auto(r3, 0x2, r1) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$auto(0xffffffffffffffff, 0x8936, 0x1) read$auto(r2, &(0x7f0000000200)='\xe4\xff', 0x6) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40700, 0x0) setfsuid$auto(0xee00) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0) 1m0.186125657s ago: executing program 3 (id=1704): r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x10000100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x10101, 0x876c5, 0xc9, 0x3}}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop14/queue/virt_boundary_mask\x00', 0x400, 0x0) r2 = socket(0x11, 0x3, 0x2) getsockopt$auto(r2, 0x107, 0x8, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x8f, 0x25, 0x0, 0x1, [@generic="e1bfd6fc3993ca4e16ef4713746bfb9cbae55f05ce1269441243d40068853084e61a2f5a42931ea92c2f7379470f06873df49ebf1d00ef007201f5f8e56c66fa4123beb37b56cfaa782e3523ae336b280a8d359800cd1453bee138e1536c10327650f7e916cdc43700cd04e0f3572c761329407b68f80ae2602450f7568fd2546d7dbbd5ee88b02358034a"]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) read$auto(r1, &(0x7f0000000500)='\a\x00\xff\x0f\x00\x00\x00\x00\x00\x00cH\x1a\xef\xdb-\xe7\x1cI\xe4\x8a\xc8L\x0e\x91\xdb\xd8\xc4\xcbA\xb6\t4\x06\xd5\xdf\xdd\x88\x8c\xd3y\xd3\x1f\x13R\x83\xaf\x03\xc4\xcdp\xe4jZM?7\x17[\xc0\x80>\xa7\t\xd0\xe6\xcaLr\x1c\xb2Knq\x8e\xc0\xb6\x06S\xb0kh\xc1\x7fC\xf6\xaa\xbf\x1dx\x7f\x15\xa0j\x96\xe3\x91\x177\xfe?\xb1\x10X=\x02#\xa7EMk\x99C\xfd\xe1k\xe1mL\xed\x81\x87\x03\xffx\xa3\xbcR\x8b\xdc\xee\x9ep\x054\a3\xba\xecs\x95\x89X\x10\xb7\x7fy\x1a\x8az\x83$\xefd\xcd5\xbcci\r\xe8\b\xcf\x8e\xec\xf3\xd1C\xf5P\x93\x86\x05\x83\x0f:\xb5\xc0\x18\x8b9\xbdR\xf30qj\xcdl0\x04\xf7\x9fu\x8eC\xbbb^5\x15\xf1\xe3J\x8b\t+\x8b\xb4\xb9\x98L+\xcd\xea\x18ZI\x87~@\xd8\fW\xads\x0eu\xdc1\x87)\x92\xad\x1a\xba\xec\xed\xc4\x8e\xbf\xc6p\x03A$}\xa1\xe4j\xc7e\x1a\xfa\x06\xab\x90\xc3\xb1+\a\x1e\xcc*\xd9;?\xbe.\xef\xe3PU*F\xa9N\f\xff{\xbf\xe5\xd5\xf6\xa0M 2\x87,\xd5F\xc6\x8bK#\x9a\xd0#e\xd6\xfa\x19&?C\x84A\xbf>\xa3\x19\xbc\n(\xb8[u\r^\x93\xfb\xbf~\xc6\xafx\xa8I\xb5\xb9?9\'}$\xd7\xd1\xe9\x02\x81\xdd>\xe0\xe6\xc8\x15\xa2\xf9\a\xe1\xf3B\x02#\xce\xf5\xa7Z\xca\xbb,d\f* cbc\xd6\x18\x9eY\xfb\n#\xe8>\xc8\x85$\x84P\x18\x9b\xe6N\xff=\xd8\xd9+\x98\xe3n\xd5\xfc\xe4\xba7\x87\x85\xba\xe4\xa5\xf0\xc4\xff\x9c\xca\x9a.{+\x14#N\x06\xb6\xa9\x88\xcbu\xa9\xf2p\xb3\vF\xec\x11\x91\x17\x19\xc11\'\xa3\xb8\x15\xe9o\xa1\xcdF\x90\xb1\x9f\\\x01\x1c\xd1\n\xe8\x04\x8f\xe2\"\x00\xffl\xdao\x81-\x0f\xb9\xb0,\xe2T\xf9 \xf3\x12WG\xaaB\x99tG\xab\xd0\x04X\xcenI \xc6\xb6\xb3\xeb8\xdd%\xed\xe2\x864\'r\x88\x8ez\xb6s\x92\xa7\'u\xf3a:\x88<\x0fMOd\xbb\xec\x8a\xd5ROT@\xab\xd3\x97\xf7\xbad\xc1)\x97\x91\x19C~\x00\x00\x00\x00\x00\x00\x00\x9b\x0f\xa6\x03p\x95\xc3J\x1a\x11\xecIf\x8d', 0x9) io_uring_register$auto(r0, 0x14, 0x0, 0x9) 1m0.015222431s ago: executing program 3 (id=1705): bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)=@info={0xffffffffffffffff, 0x7, 0x81}, 0x7fff) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x10002, 0x7, 0x18, r0, 0xa) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(r0, 0x81, 0x5, 0x0, 0xd) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x90, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x800000003, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x37, 0xe75, 0xfffffff6, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x9e5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}, 0x1fe, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x18, 0x800, 0x2) mmap$auto(0x4, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7ffd) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x4) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x101080, 0x0) r4 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/self/ns/cgroup\x00', 0x800, 0x0) open_by_handle_at$auto(r4, &(0x7f0000005e00)={0x20, 0xf1, "0300"/16}, 0x800000a8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x109802, 0x0) 59.289293164s ago: executing program 3 (id=1706): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) getpgrp(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_CDEV_ID={0x8, 0xf, 0x62}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = prctl$auto(0x26, 0x1, 0x0, 0xffffffffffffffff, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) r5 = waitid$auto(0x8, r4, &(0x7f0000000080)={@_si_pad}, 0xa, &(0x7f0000000100)={{0x9, 0x7}, {0x4, 0x9f5}, 0x3, 0x5, 0x0, 0x0, 0x7, 0x8001, 0x5, 0x4, 0x0, 0x1, 0xfff, 0xffffffffffff3dcb, 0x80000000}) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf251400000008002a00090000000800210003000000080027000100008008001c00", @ANYRES32=r5, @ANYBLOB="050029003db1dc3302dddc96ea74be126be83983e656fe46ce00070000000009000700000006000d00", @ANYRES32=r3, @ANYBLOB="0500110005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x10) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000640)={&(0x7f00000000c0), 0x1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x200}, @THERMAL_GENL_ATTR_TZ={0x18, 0x1, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @pid=r5}, @typed={0xc, 0x108, 0x0, 0x0, @u64=0x3}]}, @THERMAL_GENL_ATTR_TZ_GOV={0xcd, 0xc, 0x0, 0x1, [@generic="cfcb1641a8193b276cdc9bd47420168af4db06627f1e3225ad669edaacbca79284b6f1c19b0600000035c7ad3ec72cb4fa9cc8e6e34c8e16be54e687d4d69c932e0b3969822a0c9856de6edd123fb116515d9451317bc80d3d67685d917af6c7af5d72e333047523de00ff6cd347176b170ee3727b973d0944261ca57dc779d31327f6034cdd5bd4369d22f19c1defbb9ce3544e6528df22633f9e4744bb5d0066bf37ac2977fc2a421ed359e1322bc50fc3e1949ca1d3115aae9f7a933ee47a"]}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000800}, 0x40000000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r7, @ANYBLOB="01002ebd5100fbcbdf250100000004000180c802018004000680bd020480fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400af80cee0bd49dab2a617b70e1a2e040e6ba448f301800a8999cec0bec67eb0617ad3f9a0977d09fa35f0e26b923a2713f1104ff7a5b18a2629bbee5de69b17f06e13870462f79e9deb527b97fd65fc8b156b0f525dfca9340f14dc75ef0881c14f5b87a6c615ee754d72289dcac3c322002b00", @ANYRES32=0x0, @ANYBLOB="6000f68004004880f6c5cccd25852c755b4331229a68ba8457bb2c5bc855fc277901cc018a78610faf86906cfd8f50da20a3cfe74a23710a32b0bd28cfddfe8fbcc03a4f9178ec9a0400de8004004380040078800c00a700feffffffffffffff0000"], 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x4) r8 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r8, 0x4018620d, 0x9) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x80101, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000680)=""/4096, 0x1000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0c02, 0x0) write$auto(r9, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x4) 58.248646447s ago: executing program 3 (id=1708): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x54) r1 = prctl$auto(0x3, 0x1, 0x0, 0xa, 0x1) connect$auto(0x3, 0x0, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x1000000006, 0x0, 0x7, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9d8d774a8135dba3302b6550d680855c46da431e779e1800f6bbe41b01cfc0650dc7451ddf7d9d6f8a333cbfed24cebef74c8eb322c79de57db5c840c9d6a85190", @ANYRESDEC=r1], 0x1144}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r4) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000000000000009bdf2500000000756d6d793000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000001580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x5) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(r6, 0x40045567, r6) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf250100000004ff060003000000050005000800000008000300ff03784f2026a2723b6900000c00040045001f0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) fsopen$auto(&(0x7f00000000c0)='nl802154\x00', 0x7) 57.605722s ago: executing program 41 (id=1679): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x20000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x20841, 0x0) r1 = prctl$auto(0x3e, 0x40001, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3dc) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) mmap$auto(0x7ff, 0x4020009, 0x4, 0x14, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_safesetid_uid_file_fops_securityfs(r1, &(0x7f00000002c0)="fa6ebe3040048d3613bf95b78886c58c99d647270e3e3266259bc07d51c7cb22a567d23be34b57b6809815590fc298c4ec3b39aa97ed016d0db24ba7374c007197efd5025dde2cd8904e80df546ea27b73ea77d818f8cf4719b2c1aef1d2290fbbe871ba08931adc9e3e52606d793db109fe52e240feaf5211768e855dfdcc24553f8d4643586eb426907cc4536e7c773b211c804a4b5c6400c6380406aae3dac516772d0ad3c207e7a65f3848f024bf7680be63fa", 0xb5) statmount$auto(0x0, 0x0, 0x800, 0x0) madvise$auto(0x0, 0x6, 0x15) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000200), r1) madvise$auto(0xfffffffffffffffd, 0xe9d, 0x20018) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) arch_prctl$auto_ARCH_SHSTK_LOCK(0x5003, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x408000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(r0, 0x9, r2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x2}) sendmsg$auto_L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40) 57.205474108s ago: executing program 3 (id=1711): socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x10001) syncfs$auto(0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x300000, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x100000000008, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) pread64$auto(r3, 0x0, 0x54c8, 0x9) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r4, 0xae03, 0x4a) r5 = socket(0xa, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd12\x00', 0x40c301, 0x0) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf259500000008001001ffff000017001501c338aea97beaad80326a55e7e54ef0bf29e646003e00758008006d00ffffffff331cd5e6996930000000bc1c31d7d6929ce634e1717b3dcf698338bf8d9223063681b39bd3000076001501aa1f2f8503093dd93500772e45ba414a28b68761b6c48a779b892e0fb0360a9adf3d0c52bb819b991135c5d1f37ba92a5e31cf22839fb2f79d6a8945d607003b51f5f66ab5558a82db7b33d9d9d6b28b4d80106e36f90d24d742f4d89b18a1a6c05c0848ebc4bfffb2a0189055deb2e79eb300"/230], 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x1) r6 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) socketpair$auto(0x4004, 0x2, 0xfff, 0x0) ioctl$auto(r6, 0xc0105303, r6) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/035/001\x00', 0xa901, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r5, 0x1d, 0x0, 0x9) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xafefa9ff3f168676, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r7, 0x4004510d, &(0x7f0000000240)="8c4f") 56.366951817s ago: executing program 3 (id=1714): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) ioctl$auto_PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x8, 0x3}) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_reset\x00', 0x20000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/workqueue/nvmet-wq/affinity_strict\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)='-7', 0xfffffc49) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r2, 0x4b2f, 0x0) mmap$auto(0x0, 0x20002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) unshare$auto(0x20000) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(0xffffffffffffffff, 0x4004550a, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/swradio13\x00', 0x8a2c0, 0x0) prctl$auto_PR_GET_AUXV(0x41555856, 0x5400000000000000, 0x5, 0x0, 0x5) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000001c0)=""/213, 0xd5) ioctl$auto(r3, 0x5646, r3) r4 = pidfd_open$auto(0x1, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) setns(r4, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x153326100, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0xa7) r5 = setfsuid$auto(0xee00) ioctl$auto(r3, 0x2, r1) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$auto(0xffffffffffffffff, 0x8936, 0x1) read$auto(r3, &(0x7f0000000200)='{\x00', 0x4) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x500, 0x0) setfsuid$auto(0xee00) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0) 54.020126717s ago: executing program 2 (id=1717): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async, rerun: 64) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4103000024d5c9bb6a09f74fdd5fbfee241c34a7b037f41307c77c8970d7b73519e93d81db42a74416b7b5745d20b353319ad83d3369ad4c144b01cf3b47fc7bafa15100afe650f51ac396a0d7a267d1c5688e1299fca4b60cdd12ec07add719276c40662bc1f3359ccc4e2862147cf0469dd58ce121ed22958fef861a384c8c33afe8213b4571eaf1fa6043835ff545d370bd6995fe2fd9e0fafb02c52b28a4336fcccb9bd4c07f502c9c29e57a93376588e17156bc03d7dfd069ce667088385159bacbf7acc8c269d07450ee02c074664b1f2dfbb7a54109f8a3e596cc99b5122e4e2099e9b7a5c246cc767176f450ae1bc7d1d4d7", @ANYRES16=r3, @ANYBLOB="010228bd700003dcdf250100000005000800080000000c0001001c00000000000004050007000900000008000400", @ANYRES32=r5, @ANYBLOB="050008000900000008000400", @ANYRES32=r5, @ANYBLOB="0c0001000600000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x38) bpf$auto(0x9, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) (async) r6 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r6, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_I_TEI={0x8, 0x8, 0xb7b}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) write$auto(0x3, 0x0, 0x9) r7 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x8801, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000800)={"93f84575", 0x0, 0x2, 0x5, 0x9b8, 0x9, "e219df43f641bff500000000000010", '\x00', "00010247", '\x00', ["22dfffffffefffff480400", "08e2ffe91000", "b06f8c66ee00006f17c800", "5f0600000091148db1ca2a92"]}) write$auto(r0, &(0x7f0000000180)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8T\x8b\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xccBV\xa4\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0\x88\x0f\x9a\xd5\xa7\x14\f};\xab|\xd1ak\xe5\x98\xea\xe3\xb8\xc0\x1f\xe6\x9f\x9cy\xa9\xad\x96\x19Fy\x11}\x10\xab\f_\x19\x9b\x11\xb25\xff\x03K\x93\xcdf\x17\xe4\xcbA\xa5[\x1aG\xa6\x94\xe0\xdf\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(W| \xce\xcc\xdd%\xcf\xab\xa8\xafhM\x0f%\xc4C9~\xfe\x02]\xedVfQ', 0xf) 53.844201227s ago: executing program 2 (id=1718): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2001084}, 0x2004c040) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x2}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r0) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0b9739addba39b011e8fd0e1b740840c6f0300b735e143bd19bcdaacb05435ab4232280d1ce12402499639be7026db1a826c4ffefb824e45a5983a619e682a7757012838eac73d8d524c45ce3e9e9ccd1b70c7c1484d66c033a3a492bbaeb9351b2315e608d9b97232fe32d40acc1f293677a1df318a81a9676e6385c700f1047f709fe0843da2b69259db7bdf751f9196d52cbd1eb487f0c4a3453e9e", @ANYRES8=r0, @ANYBLOB="01faffff8f000eff00010009ecd58082d934b398b9dbdb3c2fdbf4cb70e8d821532e2a1fe2c0967efabc13c962266b8054f35fc422d80d021fc0e5bdf1e6cd5e3ea9689d1b2a6d7f5ecf5dcb9d907f31326d362a0dc51876cc4d4b4206e5e4"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x200048c0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fsconfig$auto_FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000300)="83998abbee79f83e98bad84c556079432f5ef5ed572676f27e481e7aee914dfff3801602fba88a17ae84e18688d328e35899d21031453918817e4bb29307b026f661d70fdcb9f40c0e87433c0db850b98cf9192619f09a9292625253de18fd9494ab901d260fcb4195042da706804e84d14ad21173045e5e9f5c14a92cfd0bc9ae4b68933d4339cce1810807040a9c6298ec2182eece5f459a56ebc2e20cfc8bad250b21547cd5f61d6e3a12f1158b3b57439615ff41fd96e6856afca27ff28cdb38cf1d6d72b9f527da033cb446", 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) truncate$auto(0x0, 0x5) capset$auto(0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x105000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0xc2, 0x4, 0x10}]}) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0xffffffffffffffff, 0x2000010f, 0x86, 0x0, 0x14) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 51.755124994s ago: executing program 2 (id=1719): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2000804}, 0x8000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x2}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r0) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x6c}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x40c0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fsconfig$auto_FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000300)="83998abbee79f83e98bad84c556079432f5ef5ed572676f27e481e7aee914dfff3801602fba88a17ae84e18688d328e35899d21031453918817e4bb29307b026f661d70fdcb9f40c0e87433c0db850b98cf9192619f09a9292625253de18fd9494ab901d260fcb4195042da706804e84d14ad21173045e5e9f5c14a92cfd0bc9ae4b68933d4339cce1810807040a9c6298ec2182eece5f459a56ebc2e20cfc8bad250b21547cd5f61d6e3a12f1158b3b57439615ff41fd96e6856afca27ff28cdb38cf1d6d72b9f527da033cb446", 0x9) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) truncate$auto(0x0, 0x5) capset$auto(0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) mount$auto(0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000640)) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x101d0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) setsockopt$auto(0x3, 0x200000, 0x28, 0xfffffffffffffffc, 0x70) setresuid$auto(0x0, 0x0, 0xee01) writev$auto(0x3, 0x0, 0x8) socket(0x10, 0x2, 0x0) 50.512512832s ago: executing program 2 (id=1721): mmap$auto(0x3, 0x80002020009, 0x7, 0xfa, 0xffffffffffffffff, 0x400) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) setitimer$auto(0x10000, &(0x7f00000010c0)={{0x4, 0x8}, {0xfffffffffffffffe, 0x8}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x112, 0x80006) (async) mlock$auto(0x112, 0x80006) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0xa802, 0x0) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) r1 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000001200)='/dev/dri/card1\x00', 0x303000, 0x0) ioctl$auto(r2, 0x92106406, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x10100, 0x0) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(r1, &(0x7f0000001040)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYRES16, @ANYRESDEC=r5, @ANYRESOCT=r3], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) (async) sendmsg$auto_SEG6_CMD_DUMPHMAC(r1, &(0x7f0000001040)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYRES16, @ANYRESDEC=r5, @ANYRESOCT=r3], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001140)='/dev/snd/midiC2D2\x00', 0x1, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) sendfile$auto(r0, r0, 0x0, 0x80000000003) mprotect$auto(0x200000000000, 0x806121, 0x8) (async) mprotect$auto(0x200000000000, 0x806121, 0x8) landlock_create_ruleset$auto(&(0x7f0000000140)={0x100000daa0, 0x401, 0x9}, 0x7ffd, 0x0) (async) landlock_create_ruleset$auto(&(0x7f0000000140)={0x100000daa0, 0x401, 0x9}, 0x7ffd, 0x0) pwrite64$auto(r0, &(0x7f0000001180)='C#\x00', 0x6, 0xe) (async) pwrite64$auto(r0, &(0x7f0000001180)='C#\x00', 0x6, 0xe) mbind$auto(0x0, 0x2091d2, 0xffffffffffff7c71, 0x0, 0x5a9, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 49.705101559s ago: executing program 2 (id=1723): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1fRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x002\xd5\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x1b\x8cB\x0e\a\x97\xf3\xd6\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xfa\xc1\xeb\xact\xee\xc9\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b\xe0\xa7NsR\xb4\f2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\nl8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9\x13\x98\xa2\x10@\x99\xc55\vTjw\a\xcc\x8a\xc4\n:\xe6\xa9\xd9', 0x3c, 0x200001000) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) (async) r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8947, &(0x7f0000000000)={'bond0\x00'}) getdents64$auto(r0, 0x0, 0xdd) (async) getdents64$auto(r0, 0x0, 0xdd) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) (async) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r2, 0x0, 0x18) (async) getdents64$auto(r2, 0x0, 0x18) getdents64$auto(r2, 0x0, 0x400) 49.388992885s ago: executing program 2 (id=1724): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0xa0282, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0xb, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x5a7b7e00, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x2000000000, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e]}, 0x1ff, 0x2000000d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/saved_tgids\x00', 0x2000, 0x0) r2 = socket(0x3, 0x80000, 0x4) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) io_uring_register$auto_IORING_UNREGISTER_FILES(r2, 0x3, &(0x7f0000000380)="1b7fbb62002ac6a5ed3e2fb0c07b6463d25149ae9a1ff73094031600f22ddec3add60b93ab367ad5acf36dc167ff19e091b2392cf3b7d3b424dc762c1aca41b2a3eb1f04717b77337df3727806471a", 0x9) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)=@bpf_attr_1={0xffffffffffffffff, 0x21f, @next_key=0x2f17, 0xff}, 0x6) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0x4068aea3, 0x0) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x20000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) 48.969187541s ago: executing program 42 (id=1694): mknod$auto(&(0x7f0000000040)='./bus\x00', 0xffd, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f00000002c0)='./file0\x00', 0x161342, 0x100) ioctl$auto_PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x8, 0x1}) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_reset\x00', 0x20000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/workqueue/nvmet-wq/affinity_strict\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)='-7', 0xfffffc49) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r2, 0x4b2f, 0x0) mmap$auto(0x0, 0x20002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) unshare$auto(0x20000) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(0xffffffffffffffff, 0x4004550a, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/swradio13\x00', 0x8a2c0, 0x0) prctl$auto_PR_GET_AUXV(0x41555856, 0x5400000000000000, 0x5, 0x0, 0x5) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000001c0)=""/213, 0xd5) ioctl$auto(r3, 0x5646, r3) r4 = pidfd_open$auto(0x1, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) setns(r4, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x153326100, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0xa7) r5 = setfsuid$auto(0xee00) ioctl$auto(r3, 0x2, r1) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$auto(0xffffffffffffffff, 0x8936, 0x1) read$auto(r2, &(0x7f0000000200)='\xe4\xff', 0x6) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40700, 0x0) setfsuid$auto(0xee00) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0) 41.144391753s ago: executing program 43 (id=1714): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) ioctl$auto_PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x8, 0x3}) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_reset\x00', 0x20000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/workqueue/nvmet-wq/affinity_strict\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)='-7', 0xfffffc49) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r2, 0x4b2f, 0x0) mmap$auto(0x0, 0x20002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) unshare$auto(0x20000) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(0xffffffffffffffff, 0x4004550a, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/swradio13\x00', 0x8a2c0, 0x0) prctl$auto_PR_GET_AUXV(0x41555856, 0x5400000000000000, 0x5, 0x0, 0x5) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000001c0)=""/213, 0xd5) ioctl$auto(r3, 0x5646, r3) r4 = pidfd_open$auto(0x1, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) setns(r4, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x153326100, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0xa7) r5 = setfsuid$auto(0xee00) ioctl$auto(r3, 0x2, r1) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$auto(0xffffffffffffffff, 0x8936, 0x1) read$auto(r3, &(0x7f0000000200)='{\x00', 0x4) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x500, 0x0) setfsuid$auto(0xee00) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0) 38.011096857s ago: executing program 5 (id=1741): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x703d27, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfe}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x381400, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000700}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) (async) r3 = clone$auto(0x2, 0x9, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x9b, 0xa35) prctl$auto(0x0, 0x1, r3, 0x5, 0x7f) unshare$auto(0x40000080) 35.943104875s ago: executing program 5 (id=1744): open(&(0x7f00000002c0)='./file0\x00', 0xc2243, 0x1c7) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000001140)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x0, 0x0) mmap$auto(0x8, 0x3, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (fail_nth: 2) removexattr$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f') 34.331517834s ago: executing program 44 (id=1724): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0xa0282, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0xb, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x5a7b7e00, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x2000000000, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e]}, 0x1ff, 0x2000000d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/saved_tgids\x00', 0x2000, 0x0) r2 = socket(0x3, 0x80000, 0x4) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) io_uring_register$auto_IORING_UNREGISTER_FILES(r2, 0x3, &(0x7f0000000380)="1b7fbb62002ac6a5ed3e2fb0c07b6463d25149ae9a1ff73094031600f22ddec3add60b93ab367ad5acf36dc167ff19e091b2392cf3b7d3b424dc762c1aca41b2a3eb1f04717b77337df3727806471a", 0x9) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)=@bpf_attr_1={0xffffffffffffffff, 0x21f, @next_key=0x2f17, 0xff}, 0x6) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0x4068aea3, 0x0) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x20000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) 32.093640415s ago: executing program 5 (id=1748): socket(0x1d, 0x806, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0xa, 0x5, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x7, 0xf, 0x1, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) ioctl$auto(0x4000000000000c8, 0x400454d8, 0x3) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x18) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket(0x10, 0x2, 0x15) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (rerun: 64) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r1 = socket(0x200000000000011, 0x2, 0x0) (rerun: 64) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x220200, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x89b0, &(0x7f0000000080)={'bond0\x00'}) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x40800) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xfffffffffffffffd, 0x4}, 0x7}, 0x3, 0x0) (rerun: 32) rt_sigqueueinfo$auto(0x0, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x2877, 0x7, 0xffffffc4, @_sigsys={0x0, 0xfffffffe, 0x5}}}) r2 = ioctl$auto_NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) bpf$auto(0x0, &(0x7f0000000300)=@iter_create={r2}, 0x10) (async) bpf$auto(0x18, &(0x7f0000000040)=@prog_bind_map={r0, 0xffffffffffffffff, 0x4}, 0xb2) 31.738955684s ago: executing program 5 (id=1749): r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x0, 0x10, 0x0, 0x17) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/cpu/isolated\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)=""/66, 0x42) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) r2 = bpf$auto(0x4, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xabf, 0x2, 0x36242398, 0xfffff5ae, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x6819a}, 0x6f3) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async, rerun: 32) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x1, 0x0) (rerun: 32) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000002c0)=0xffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) (async, rerun: 32) preadv$auto(r2, &(0x7f0000001300)={&(0x7f0000000300)="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", 0x1}, 0x4, 0xfff, 0xa131) (rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 32) mmap$auto(0x0, 0x4020009, 0xe2, 0xeb1, 0x401, 0x8000) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0x8, 0x0, 0x409) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 32) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async, rerun: 32) close_range$auto(0x2, 0xa, 0x0) (rerun: 32) 30.361500965s ago: executing program 5 (id=1751): mmap$auto(0x0, 0x400007, 0x3ff, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x2, 0x5, 0xffffffffffffffff, 0x90, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f0000000080)="7a0a82b4a658635d206745778de6a48c53844f8b8e3dcbba610e2af6c72589cc5a431ab3a6fa381497bd7d0a4b5ea0612087e1d75aa1a77850579b5ce86b9e10679d9396e155a90f", 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r1, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x9, 0x41, 0x0, 0x88) write$auto(0x3, 0x0, 0x1) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0x7fffffff) socket(0xa, 0x5, 0x84) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x200007, 0x19) r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x600000, 0x0) getsockopt$auto_SO_TIMESTAMPING_NEW(r5, 0x5, 0x41, &(0x7f0000000040)='\xb2(\x00', &(0x7f0000000140)=0x3) mmap$auto(0x9, 0x80, 0x3, 0x12, r5, 0xfffffffffffffffb) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 29.27853688s ago: executing program 5 (id=1752): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x8200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, 0x0, 0x0) read$auto(0x3, 0x0, 0x400000000f34) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x900, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x67, 0x3f, 0x7fff, 0x2005, 0x80000000007, 0x1, 0x6, 0xff, 0x5, 0x7f, 0xfbfffffe, 0xfff, 0x7fb, 0x4, 0x9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x110) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macsec0\x00'}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, 0x0, 0x4000040) socket(0x10, 0x2, 0x9) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x600c004) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200001, 0x0) fchown$auto(0x2, 0xffffffff, 0xa1a9) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x101200, 0x0) pread64$auto(r1, 0x0, 0xa86, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x10001) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) 19.670690509s ago: executing program 7 (id=1769): r0 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, 0x0, 0x860440, 0x0) read$auto_lowpan_control_fops_6lowpan(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) statmount$auto(0x0, &(0x7f0000001440)={0x3, 0x1, 0x9, 0x7352, 0x10000, 0x65f, 0x4, 0x7, 0xf0, 0x1, 0xb, 0x3, 0x5, 0x101, 0xb3, 0x200, 0x4, 0x7f00000, 0x84, 0x4, 0x0, 0x9, 0x22000, 0xcd, 0x0, 0xf, 0x2, 0x0, 0x1, 0x1e53d0c2, 0xfffffff8, [0xa, 0xfffffffffffffffe, 0x80000801, 0xfffffffffffffffe, 0x3, 0x7, 0x0, 0x1c00000000, 0xfffffffffffffffe, 0x4, 0x8000000000000001, 0x7ffffffffffff, 0x2, 0x100000000000, 0x0, 0x9, 0x2000000000, 0x0, 0x0, 0x2, 0x339, 0x20000000920, 0xfffffffffffffffe, 0x108001, 0x0, 0x0, 0x0, 0x4, 0x1000000000000, 0x0, 0xfffffffffffffffc, 0x4, 0x1, 0x0, 0x1, 0x3, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x3, 0x800000000000000, 0x48]}, 0xffffffffffffffff, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0x7, 0x0, 0x5, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r1, 0x8000) fdatasync$auto(r1) madvise$auto(0x0, 0x400053, 0x9) futex_wait$auto(0x0, 0x80000000, 0x21b1, 0x80, 0x0, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptytd\x00', 0x4d8902, 0x0) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram13\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(&(0x7f00000011c0)='\x10\x13\xa4\x18\xc22\x99\xa2\xd2\xc6jP\x03\x04]\x8c\xf9\x11R\xb2\xed\x9e\xaa\x05aO\x9bP\xbe\n\xd3\xfa\xee\x8a\xefr\x13\vW\ti\xd1\xa9\f\xfe\x97\xb58A\xb9Q\x17V\x02YW\xba\x9b\x11mA\x9fT\xf0\xdd\x12\xcc\x9d\xc3&F\xd4\xa1aRZ\xc4\xaf\x7f\xd8\x9a\xee\x13Y\xf4\xc7\xd4\xf0>q\xb9\x97\xcapk\xbcx\xfe\xee\b4\xfa(\xc7\x1f\x17;\xe4\xd5\x9d\xd5R\xd8\xcf\x9c4&\x7fz\x8e.7*LO\xf3\x1cX\x9b\x80\xb8\x89\x9d\xd1\x1e\x13Nsa\x8d\x04\xd5~\xdb\xc3\x01mb%.;\xad\xdc _\xb8T\xf0oN/:\xf2\xe0)WlU;\f\a(v\xbc\f\x10\xef\xe5t\\?\x9a\xb1\b\xb0=\xfa\xde&\xfbp\xbbi}i\xd5h\xb4\x82\x93\xba\'\xfa\xb9\xbb\x06w\x9f\x11|x\x13\x99\xb1\xd6]\x14k\x0f\xd4\x80\x00\xf5\x16\x1b\xd9K\xc1\xbaWD2v:\xc8/o\xf0 +=\\&\xb0\xfa\xc4\xe5\xcbY\xed\xe9\x94\xcemC\x11h\xc1\x9b\x8a\xb4_\x05.\xa2ww\xb4\x92+\x84C8o#\x1e\vWr\xbfi\xa0\xc7\xb6P\xda\"Z\xe9\xbb;\x8e\xda=I\xfa\xdbx[\x8emD\xa9\xd2\xb6\xac*\x17WEi1\x9a\x93W\xb1\x0f-\xa9\ff\xa1\xeca\x98\x06M\xdc\xa1\f\xca\xd7\xe4X\xaf<\xb6\x8c\x91\xc9\x8d\\\x00\xa3\x18\xd8\x8f\x1e\xa4\xa8\x11\x01w\xb7\xcc\x10)<\xe2X\x81\xfa\xc28\r\x00\x16\x84\x90\xda-3\x0e\x83\xed\x91 \xb7\x96<,\x87\xc9\xbd\xafD\x90\x9c\xa1_U\xe0u\xb5\xf7{\x1a\x7f\x84\xf8jL\xcd\x19_\xb7`^&\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\xa2\xa86\xd2\xb8l\xe4\xd9^r\x99i1$\x8aDj\x8f\b\x81rn\xd9\x0f\xb3pR~ \xd1MA\x7f\x8e\x8b\xcby4\xf5A\xfdS\xa6\xd1\xe22\xaa\xfe\xa0\x87\x14]5\xbf\x16\xa8\x89\xe9?\x16\xf7\xcd\xd8%:\x047K\x11z~\x97\xd2AA\xfe\t\xf1\xac\xc5I)\xdd\xa6\x85J\xba\xf2\xb8\xf4\xb5wW\x1e\xd3n.\x1bm\x982\r\xca\xe3\b\xe9\x99\xee\xf4\t\r\x95`\xa6\x84\xb0\xc8X\x01e\nDb\x92\x0e\xd1\bh\xe2\x83~\x85\x93\x87\bT\"/\xf5{\xd1\x16\xc3\x81\xcc\xd3\xec^\xfd\xbe\x927*\xfa\xba\xa7\x95\x13\x829a\xe1/\xba)\xa2t\xd7', 0x4) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x4c, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x1, &(0x7f0000000000)='Q**\x00', &(0x7f0000001640)="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"/435, 0x0) io_uring_setup$auto(0xa, 0x0) madvise$auto(0x3, 0x81, 0x8896) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2000000006, 0x2) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r3 = socket(0x6, 0x2, 0x3b14) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="20024541", @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x810}, 0x40000) 17.259648278s ago: executing program 7 (id=1774): mmap$auto(0x2, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xa, 0x3, 0xef1, 0xfffffffffffffffa, 0x8) socket(0x2b, 0x1, 0x1) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) ioctl$auto_FS_IOC_GETFLAGS(r1, 0x80086601, 0x7fffffffbfffffff) ioctl$auto_TIOCMGET(r0, 0x5415, &(0x7f0000000180)="4cc1f6bcff7ed3449524f40be72daf62fab57078ed612a279925cdcf1749c224646988c97f7f33ef3bba3c7cb1cf73af2689bd1324cee99fc01aff87c4f85b4119cefe85d58391384a5a680acd902d85ffab9a1287f7173265f2680e340808ca62b155966d10989181b9ad8d9a6f19b098cccebe6e521dc46a60cc4893501b36192aa4875123f451f951544f00107f03cc1ae5f381a051c7306ce7beb9153e3c23f98fbf482126e52108783523a1e97d90d3709f73ffc999f89f836efc35fd12a67434f6e5be26be060ba0a27e7bac42580fe526e9bdf9ea8be294c1fea0f7b06b97f8b913532bbb1479e7ac0f134560fe") (async) ioctl$auto_TIOCMGET(r0, 0x5415, &(0x7f0000000180)="4cc1f6bcff7ed3449524f40be72daf62fab57078ed612a279925cdcf1749c224646988c97f7f33ef3bba3c7cb1cf73af2689bd1324cee99fc01aff87c4f85b4119cefe85d58391384a5a680acd902d85ffab9a1287f7173265f2680e340808ca62b155966d10989181b9ad8d9a6f19b098cccebe6e521dc46a60cc4893501b36192aa4875123f451f951544f00107f03cc1ae5f381a051c7306ce7beb9153e3c23f98fbf482126e52108783523a1e97d90d3709f73ffc999f89f836efc35fd12a67434f6e5be26be060ba0a27e7bac42580fe526e9bdf9ea8be294c1fea0f7b06b97f8b913532bbb1479e7ac0f134560fe") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0xa2382, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0xa2382, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0xe, 0x0, 0x7, 0x0) (async) waitid$auto_P_ALL(0x0, 0xe, 0x0, 0x7, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r3, 0x0, 0x400) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)='+') (async) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)='+') openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/sg/devices\x00', 0xa502, 0x0) (async) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/sg/devices\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, 0x0, 0x0) (async) read$auto_proc_iter_file_ops_compat_inode(r5, 0x0, 0x0) ioctl$auto(0x3, 0x40086200, 0x38) 17.014259471s ago: executing program 7 (id=1775): close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@batch={0x8000000000009, 0x80000001, 0x10005, 0x1f, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x103) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000c5000700c1007cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04700395778e7935c99f6a38f6f3e56e7d8a18d15791b3b4f9378d743a8f0cbbe1c604a782030626ead26826f4790233f19c29fbaf1da77e1b84522d05ca0f4237b24aead87b47d41805fa9967d02ad2deba1895652b8d630c30213ed8f72c1066f1bb9fb1b242d08a55d32398d8d3c635008f2c61049c8abf600a98d1d2d0b0027aecaf27d20b6ff4129883e111e1c858000000dc00090069fccb38f57447a8af8c40a03b92af7adc0c48af4308483b99aa587ed8711b4a79a383c263698842365af6807d1be1800fd492770983a6df345fb472e9fa41b667af43bc36d7063b6b93ab7661925e8d71452acd95b788c31a32ae903b96b9ed9a5e3542c625105e8f21a5b41ff3d17f8704581f4b8b75ae741d0fba8cab2e187c93eeea89f6cf6ab7cc496e0bd9759cc0b408bbe0c6eae2aa29c2d97d48a55fc0ff937c90173d61cf652f97cb301e4d7e3bac0026732e22eadd3a6c5ffa4faed6855a86814c920a650a61936305d2713db1c92a238e265c080001007f0e00000c0002"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0xa, 0x1, 0x84) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x30000, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000580), 0x240, 0x0) ioctl$auto_RTC_EPOCH_SET(r1, 0x4008700e, &(0x7f00000005c0)=0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) socket(0x2, 0x801, 0x106) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram0\x00', 0x16f300, 0x0) sendfile$auto(0x3, r4, 0x0, 0x400000000006) recvmsg$auto(r2, &(0x7f0000000540)={&(0x7f0000000280)="9e7e1a134c939f5edda191e03860f28c0d076da67c3954b93c2ccc040c22c34c98414ef19f87e56c119913650caaf2aa63f7c7e273da4d388dc4fbc7567b57fd8518eca336b18a154a209be50c045579c34c9a8675959d7ac35a3459ac6ad7d484c9ab7a4d5424d6969349", 0x9, &(0x7f0000000400)={&(0x7f0000000300)="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", 0x1000000000009}, 0xfffffffffffff155, &(0x7f0000000440)="60f6d628ddc48658e0e2313b088980498f49af6ae34f77dd126bb87fcbbd4a510e8f6be6bee37f4d523147f3d2b1d3cb8d9d8f1cd2a5e6f136e13287010a5884858853a8fcc78fc48daa98965ddd69a8b012bb3be89db6ee181f03e154085cebce46995a38e58973b68e9d1a6ffe8e833af35f76e188708c007556f4c5911e53b281fe2e8dcddce185933122e29ca8e8bd9a0f449c6829b0d8d74f2e2ed3db4cfe2b2260353da70541e407759b5c8ad07459dc9492a62e78b75f3e69297db6018a7ad1f5ba2347968872222501bb94", 0x7, 0x9}, 0x3) shutdown$auto(0x200000003, 0x2) io_cancel$auto(0x2, 0x0, 0x0) r5 = socket(0x2, 0xa, 0x1) ioctl$auto_BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000001200)={@raw=0x6, "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"}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r5, 0x10000}, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r3) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r6, 0x325, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x2}, @ETHTOOL_A_COALESCE_TX_AGGR_MAX_BYTES={0x8, 0x1a, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000) 16.22072122s ago: executing program 7 (id=1778): mmap$auto(0x0, 0x2020006, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a473010") mmap$auto(0xd, 0x4d20, 0x1, 0x7fffffff, r0, 0x1) writev$auto(r0, &(0x7f0000000100)={0x0, 0x7112}, 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) 15.920726748s ago: executing program 7 (id=1779): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000000400)={0x40081200, 0x0, 0x0, &(0x7f0000000200), {0x41}, &(0x7f0000000240)=""/129, 0x81, &(0x7f0000000300)=""/179, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) process_madvise$auto_MADV_PAGEOUT(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x1) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) fcntl$auto(0x2, 0x401, 0x80000001) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x802, 0x0) select$auto(0x45, 0x0, &(0x7f0000000080)={[0x9, 0x9, 0xfffffffffffffff9, 0x4000000800009, 0x7ff, 0x3, 0x6, 0x2, 0x5, 0xffff, 0x1ff, 0x10, 0x3, 0x6db, 0xb, 0x8]}, 0x0, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, 0x6a) listen$auto(0x3, 0x81) read$auto(r1, 0x0, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_FS_IOC_SETFLAGS2(0xffffffffffffffff, 0x40086602, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x7fffffffffffffff, 0x2, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x7ff, 0x401, 0x300000000000) close_range$auto(0x2, r1, 0x0) socket(0x2, 0x80002, 0x73) r3 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000100)={0x3, 0x80000000}) 14.454830736s ago: executing program 7 (id=1783): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0x10000eb1, 0xffffffffffffffff, 0x8002) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_udc.7/udc/dummy_udc.7/soft_connect\x00', 0x2062, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x3) sysfs$auto(0x2, 0x100000000000027, 0x0) r1 = fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x1, 0x8, 0x11, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x6, 0x7, 0x6, 0x7, 0x0, 0xdfffffee, 0x2a17, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x80, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x27, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) sendfile$auto(r3, r2, 0x0, 0x40002000000a) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), r1) fchmod$auto(r1, 0x8) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r5, 0x100000003, 0x0) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050080df47c4c492ef107adc0720000000", @ANYRES16=r4, @ANYBLOB="040027bd7000fbdbdf25030000000c0008000900000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x11) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 13.986696808s ago: executing program 45 (id=1752): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x8200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, 0x0, 0x0) read$auto(0x3, 0x0, 0x400000000f34) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x900, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x67, 0x3f, 0x7fff, 0x2005, 0x80000000007, 0x1, 0x6, 0xff, 0x5, 0x7f, 0xfbfffffe, 0xfff, 0x7fb, 0x4, 0x9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x110) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macsec0\x00'}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, 0x0, 0x4000040) socket(0x10, 0x2, 0x9) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x600c004) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200001, 0x0) fchown$auto(0x2, 0xffffffff, 0xa1a9) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x101200, 0x0) pread64$auto(r1, 0x0, 0xa86, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x10001) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) 7.894542773s ago: executing program 1 (id=1798): socketcall$auto(0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x17, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x1, 0x7, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$auto(0x3, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptyq0\x00', 0x197800, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/ib-comp-unb-wq/nice\x00', 0xcaa02, 0x0) sendfile$auto(r2, r2, 0x0, 0x7ffff000) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r3) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000100)="a407e0ebb5d24d765188d1de7342edde2eca59336f1735d12ff5d3b66c7b1e93dd64aaa4adc1204fe71e44d02bb9c446b926e12f5c42bb5521103f06c47c90c13106eba7c3a8fad2b56e25e7f154d0ea2967ee19f4642c268607bada374abf20e236d806e66ae34b1fc64c0597b220e647749db95218b9aad04a4a54ca568f593eee0cd3c84a2dd651afa178a3379bc8c099b7bd131f593779bd01962fe0c454b2cc5eae7c1cf36e", 0xbb, &(0x7f00000001c0)="442db9379ec8aa7ffa47ea7c6cb485fb575acbd5cc81d725a2c849331c8d789c21459a69af3e3f1a231c12dbce3cca108de52f2951ed85a0e49265e7d68bf79f6a85d4fd8293f532170f08ab9df6d76d2c45105dbc7dd2", 0x6, &(0x7f0000000240)="2b17d4ace040a4027e8f3b3cfab3fa4a866c63c7af3634c00a843fbbeb4151a774b7e35d2d9b5ab0a315c8eb0000898aaf2850d50657a1ec8f82a48a23c1b5d17d20fdb6234e1c06aad44bc6ee35168cd7f3e45fb566548bbd977210a93fc0374b81f84dc1cd2c360a4f3735d27a3d7cf22ff857d893793b9ffcbd41a4522f2fcc435bd31c6e2630d79d740cf38c1e09b59b9f3ec411fa3df9e6b00bb979d3b428dc862cab116b776466186955a1756470728a821b278f3c3459aac9fb5930d632a89f881debda04c8fb677aba5efa", &(0x7f0000000340)=0x3}) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) brk$auto(0x8) madvise$auto(0x1001, 0x8000000000000001, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rt_sigprocmask$auto(0xffffffff, 0x0, 0x0, 0x8) r4 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40080, 0x0) lseek$auto(r4, 0x7ff, 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x800, 0x0) 6.74193791s ago: executing program 4 (id=1800): madvise$auto(0x1, 0x7, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$auto(0x3, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptyq0\x00', 0x197800, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/ib-comp-unb-wq/nice\x00', 0xcaa02, 0x0) sendfile$auto(r2, r2, 0x0, 0x7ffff000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xfc, r3, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_BSSID={0xd6, 0xf5, "95723e31d080c0447e64f64629cd138642ed09dd88963beb253771f7050ec84543fa225909c3776bd2e5cb26427e4175cff1803eceaed8b04497b180d50020c5136e386cef063c4012eddd15454a5f9f8130a1a40e0e2fb7476e1f287ff600fdaecc62b374471e80106b9484e5e03cade52e2a8080989b208bbca7459220af30b8556b8eb161dea14bc6de85626c4445f0f901f84a2f967317e7d6f06f2df5ca7b8eed6c3decc05e38db9b3f5e29a76a15c8261051c38f7571d5a9420370d11b13c22b38f5893b4aa1113c3285547fcbc7d0"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xd}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r4) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000100)="a407e0ebb5d24d765188d1de7342edde2eca59336f1735d12ff5d3b66c7b1e93dd64aaa4adc1204fe71e44d02bb9c446b926e12f5c42bb5521103f06c47c90c13106eba7c3a8fad2b56e25e7f154d0ea2967ee19f4642c268607bada374abf20e236d806e66ae34b1fc64c0597b220e647749db95218b9aad04a4a54ca568f593eee0cd3c84a2dd651afa178a3379bc8c099b7bd131f593779bd01962fe0c454b2cc5eae7c1cf36e", 0xbb, &(0x7f00000001c0)="442db9379ec8aa7ffa47ea7c6cb485fb575acbd5cc81d725a2c849331c8d789c21459a69af3e3f1a231c12dbce3cca108de52f2951ed85a0e49265e7d68bf79f6a85d4fd8293f532170f08ab9df6d76d2c45105dbc7dd2", 0x6, &(0x7f0000000240)="2b17d4ace040a4027e8f3b3cfab3fa4a866c63c7af3634c00a843fbbeb4151a774b7e35d2d9b5ab0a315c8eb0000898aaf2850d50657a1ec8f82a48a23c1b5d17d20fdb6234e1c06aad44bc6ee35168cd7f3e45fb566548bbd977210a93fc0374b81f84dc1cd2c360a4f3735d27a3d7cf22ff857d893793b9ffcbd41a4522f2fcc435bd31c6e2630d79d740cf38c1e09b59b9f3ec411fa3df9e6b00bb979d3b428dc862cab116b776466186955a1756470728a821b278f3c3459aac9fb5930d632a89f881debda04c8fb677aba5efa", &(0x7f0000000340)=0x3}) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) brk$auto(0x8) 6.392444501s ago: executing program 1 (id=1801): close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x240, 0x0) setsockopt$auto_SO_PROTOCOL(0xffffffffffffffff, 0x2, 0x26, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x9) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) adjtimex$auto(0x0) ioctl$auto(0x3, 0x540d, r1) write$auto_aoe_fops_aoechr(0xffffffffffffffff, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa9202, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc) setreuid$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8ef, 0x0, 0x0, 0x9, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) 5.498653998s ago: executing program 4 (id=1802): open(&(0x7f00000002c0)='./file0\x00', 0xc2243, 0x1c7) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000001140)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x0, 0x0) mmap$auto(0x8, 0x3, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x2000c, 0xde, 0x20eb1, 0xff1, 0x7) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2c00, 0x0) ioctl$auto_EVIOCSMASK(r0, 0x40104593, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r1, 0x84, 0x1d, 0x0, 0x0) close_range$auto(0x2, 0x8, 0xa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) removexattr$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f') 4.787632194s ago: executing program 4 (id=1803): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x2b, 0x1, 0x1) write$auto_console_fops_tty_io(r0, &(0x7f00000000c0)="c80d1b5d399b58116143ff9d524529f94c9b16d4a3444befb1767965a7b84b407741f36c8abe079d5f089ad5f0be89ae4b277ef6417c16a45b8e3a9907ed045a695e6517db43475709e0ffcc1d40689b503600d12f142b098f80864904cbc8c703c0ee645564962683e5a24d167cbdb9b145a1ee2552dac57b50bee0bbe351584981c54da4b181f84727739c8e727cabecadffb6cf34d025c6b2035316a45970e6a95f3856f1353395320a1b9da849fa42ce63d95bf6900fe217af", 0xbb) mprotect$auto(0x4, 0x100, 0x70) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x50100, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_BLKRRPART(r1, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STOP_OLD(r2, 0x5421, &(0x7f0000000200)="20d26ba21509a91590812d02db6cc93dcab06591a2805f5b483d62e51cecd6eb4977775a7fd78c05b16c206b4526779b214b6eb20278a476d45877b89ba49b92e18af9a889d28d14c2e89d9b2adf5e4ad5e1aa721f395e8c7438fa52c9e33e4d7ae890f6f3384403") io_uring_setup$auto(0x6, 0x0) fstatfs$auto(0x3, 0x0) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) ioctl$auto_BLKRRPART(r1, 0x125f, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1018}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) getpid() getsockopt$auto(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000080)=0x3ff) unshare$auto(0x40000080) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x6) 4.343510834s ago: executing program 8 (id=1784): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/kdamond_pid\x00', 0x0, 0x0) mmap$auto(0x4, 0x5, 0x4000004000df, 0x48000000000010, 0x401, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/rndis_host/uevent\x00', 0x100000, 0x0) ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) unshare$auto(0x40000080) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0x3, @none, 0x9}, 0x6c) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sysfs$auto(0x2, 0x3b, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x841, 0x0) write$auto(r1, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4040050) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf25030000568cedbd00", @ANYRES32=0x0, @ANYBLOB="0a000500c862a41184f600000a00010000000000000000000a00010070b28a70c5dc0000080004000300000006000700ff"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40094) r2 = set_tid_address$auto(0x0) capset$auto(&(0x7f0000000040)={0x19980330, r2}, 0x0) 2.992718262s ago: executing program 4 (id=1804): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101f81, 0x0) ioctl$auto(0xffffffffffffffff, 0x200, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x93, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c2, 0x2081, 0x3f, 0x7ffc, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x200000003004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x1000, 0x401ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0x4, 0x2, [0x7249, 0xa9d, 0x0, 0x1000000000000000, 0x0, 0x7, 0x2, 0x0, 0x0, 0x200000000000000, 0xfc6a, 0x1000000, 0x10000, 0x40000000000, 0x0, 0x500000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0x2, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xb, 0xfffffffffffffffc, 0x400000000000002, 0xfffffffffffffffc, 0x3, 0x1, 0x5, 0xfffffffffffffffc, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0], 0x3c}}, 0x2400c080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000019}, 0x40001) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfa, &(0x7f0000000100)={0x0, 0xffff}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0x7, 0x75d3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r2) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000002480)={0x7c, r3, 0xa02, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x57f}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_NONE={0x38, 0x0, "ea53051a47b375c5e87a4da1b2fb59b956f3c1809752f0947ed306542a0bfcf0b953dcac6f29573fe4b1fad44a2d193bc8312206"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x2e0541, 0x0) 2.951480835s ago: executing program 8 (id=1805): fcntl$auto(0x0, 0x402, 0x80000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) lstat$auto(0x0, &(0x7f0000000180)={0x3, 0xa, 0xf, 0x5, 0x0, 0xee01, 0x0, 0x0, 0x7, 0x7, 0x23, 0x5319, 0x71, 0x6, 0xfffffffffffffff8, 0x40, 0x8b8}) (async) timerfd_create$auto(0x9, 0x0) r1 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, r0, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) (async, rerun: 64) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, 0x0, 0x81, 0x9}, 0xfffffffb}, 0x4, 0x8, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) (async, rerun: 32) ioctl$auto(0x3, 0x4040ae77, 0x38) (rerun: 32) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 32) syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x3, 0x2) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async, rerun: 64) futex$auto(0x0, 0x8c, 0x1, 0x0, &(0x7f0000000180)=0x8e, 0x0) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x35}}, 0x54) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) 2.343647343s ago: executing program 4 (id=1806): unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2020004, 0x203, 0xeb1, 0xffffffffffffffff, 0x208000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x3, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\xf5\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\t\x00\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00\r\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) bind$auto(0x3, 0x0, 0x6d) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2, 0x801, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = prctl$auto(0x10, 0x6, 0x7, 0xffffffffffffff78, 0x8) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r4) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYBLOB='$\x00\x00\x00', @ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x80d4}, 0x40000) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x80101, 0x0) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0d02, 0x0) ioctl$auto(r6, 0xc0045543, r7) timer_create$auto(0x9, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="05082dbd7000ecdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000680)="c18dac9b2938b650c5c0ce3e4713758b5417556b18726eccb5b861721dbd54b464612e013be81d2c568301f887383317a4d96d8eb0ab526127c4d8d5db020891a4e1fa25460375b58bd775d1f533128ecdc2995f9eb516d7e4e1a2bc4b5963eea190473e8884c50457067fad245411600b186bdfecb9379d20faaa7c36159d65123079f3271b0f66") madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 1.86568764s ago: executing program 8 (id=1807): mmap$auto(0x0, 0x2020006, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a47301037954c081c9a0bb04ef84993eab91abe1686f43e43d786e91365f04455bd620de9f3fb6d25e6c078c1a672c549dbc7876cb528ba08") read$auto(0xffffffffffffffff, 0x0, 0x1f40) read$auto(0x3, 0x0, 0x8080) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) recvmmsg$auto(r0, &(0x7f0000002100)={{&(0x7f0000000000), 0x4, &(0x7f00000002c0)={0x0, 0x5}, 0x7, 0x0, 0x4, 0x8}, 0x10001}, 0x800, 0x7fffffff, &(0x7f0000002140)={0x3, 0x8}) writev$auto(r0, &(0x7f0000000100)={0x0, 0x7112}, 0x8) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xe5}, 0x6, 0xffffffffffffffff, 0x808000000000000, 0x2f) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket(0x10, 0x2, 0x0) r1 = io_uring_setup$auto(0xee, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, 0xffffffffffffffff, [0x1, 0xf, 0x1000], {0x8, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x690, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES64=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x5}, 0x40000d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='f'], 0x1ac}}, 0x40000) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x81, 0x4, 0x9d81, 0x6) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2d0440, 0x0) write$auto(r2, 0x0, 0x40400) getsockopt$auto_SO_SELECT_ERR_QUEUE(0xffffffffffffffff, 0x8001, 0x2d, &(0x7f0000000080)='/dev/mtd0\x00', &(0x7f0000000100)=0x3) r3 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x206c1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) preadv$auto(r3, 0x0, 0x8, 0x7, 0x89) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 1.849344557s ago: executing program 1 (id=1808): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c0") openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x8000) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec26\x00', 0xc0000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000180)={'\x00\x00\b\x00', 0x0, 0x5, 0x2, 0x997, 0x9, '\x00', '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "6c6529a30418fffffffff300", "ef5bc49241b4ce278e7426d8", ' \x00\x00\x00\x00\x00\t\x00']}) close_range$auto(r3, r2, 0x9) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x0, 0x53, 0x0, 0x0) 1.25318921s ago: executing program 8 (id=1809): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/mm/ksm/advisor_max_pages_to_scan\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x2) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r1) r3 = getpgid(0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000002bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000001180)={0x19fc, r2, 0x122, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x10, 0x19, 0x0, 0x1, [@typed={0x9, 0x130, 0x0, 0x0, @binary="1ed22d576a"}]}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x2}, @NL802154_ATTR_SEC_KEY={0x19b7, 0x30, 0x0, 0x1, [@generic="ef317909d83557bedbfe13e904d74b3e4d23d405fbf15895a5a79556fe76c2ae01802fc625ed78a9b8f41271ad96beeb20efb0aa20cebabec3c1c8b9731f6e24b5dfc514d69ab835941ad3dfc289fe541f88e2f2fa5067a0da2c4d4c9141906b21772d76c6299b9cef241105a6dd3fd38873f7289e862c6902cb6821c7afb000b2fe38fe42e867458aa24d", @nested={0x17d, 0x47, 0x0, 0x1, [@generic="06b6fa5ff9300e6f4afa890da741116d72f004d4dd0317373407050899d4b38ae8468fa208c3a57cb4e73842c773e85743383d9e7a011906f21ef2d06db9f3fff92fa56b5d1a1b02a2d6f5d12cd62a09496c775b6c85b71f0dd03b4470fc19b5ecb6f3b3220a51b421749637d425b23129358072d4403a9db8b49d3945953d900e7b62f3903a304e4e07198acceb4e0fe46eb0a7fbc77bf01dafc77a74e2c8cd303b97060f050b5c1fea67bc47296cd6c693ff4504bcaa81eed818bf43e8ab1ad7deab735735b812196c124d80901e758e15092ef76a752fcda94175d9949b05f508864c7b2b", @nested={0x4, 0x3a}, @nested={0x4, 0x9c}, @generic="9d93257a654446b7787c0ad732ea68e7bb0cda010b5c66a3bade42b51ed9a4a4ba14e62e3336a06e394711b5514490d6f70a503f6414054eadc842751debc54129c481899e23ae5554af386eec2fabbbf94f9eeb48e500c7f3cfd294ceb25165de91bd619909c3e19035426e0dd133d4f05267c71cd873c056970c5053cec08dd591b46944087d0af64591"]}, @nested={0x289, 0x98, 0x0, 0x1, [@generic="536cd946e136a8c560d0a1bbdaa96b59f663754627731c276e4f91e166f5bc2c81b1c097802c58fb14380f4bd1f4ed248ac60d707e1fe6bf03dbb5f7b1a5588d18145e6be32637b4cc8d8bcbddf8eba5f6f297b91f9289ad77a39e44379b1b62bb5e4dd57fe2fad2174d36", @nested={0x4, 0x133}, @generic="7c56af78b964cf996a765a3fd3c49534089d1b91767eddd031a56c51bbc8c8b5c0bbc46e06be136561e597e1ba475c3e19d1ffef64c60386ab0b2adc6375688e930a9cdc71da7c73b724b30a388491c2af4afee579f36f11ee58e03b10c3", @generic="95923f9d21fa16973a4b08e185bdbd36e209d0e07eef753dd04e18c6b717d00ecf53e3452183fd1438623fe8d1fd0cd676d9ca4ad8ac9641483d061d0c40f231d72c0d4191c9782a31a7e542412809de6202b4ebb8aadda118e894bd325d813094abe38c0c92a6d927005305bbaff53b65cf4632e2f3a794319f2a5631351c227d35879358e90854be6d0b9ce760bae80fa9ae4942f83b4c221a95ffebb9c16616933a32786bd5205ed66d956f10cd3d28ca07ae7277e9067cc4dacff13a234a11cb13fbecaeab79731a46e556ce", @generic="07409ab8cf51e47da6b61bc5a43655207a34f6e6f84515a09a8db8ee13fcb40d70e1232952f87d8f579d721f409d9db0555a4b1cae4e54a377badfb47ed4befdc8c8e00b5a42", @generic="9098b77dc80d75461ed52e2cb7b8b3ed3add08e1dc51976d76929b763335832491eaa4ca4cabc2bfbfcb11cc7c69d517f05882ead1af937135d12322febb983e791817317b70a67edb27ac0f42e9f16cb7554a08ef369ad8b3609702d738aa57de5018628063a8958cf0264d47146e778161fff796edc3380f31feb2df6bc904947eb80fce097af010a4056f", @typed={0x14, 0x15e, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2b}}, @typed={0x4, 0x15b}]}, @generic="dda80be691a49e112d3ad86e0346615b8a3fdcb51a8baf325226981597bc848b96481edd2e3e5d3e4d5e83ae4d905263862a45f2c3bc6fd8ce2a620754483ab841ccd929eddff3c1f43283a8693e90836ccf87f471bc27be2f46d7f5f696990d64aae4d9b4d8c2e29051b0459774e7ee73df510f0f2e57e98d5d157c677a97a9a738b23b23bad5491128b4175ab96642d30f57cc39ba3806a11ffed6d4675d7a765e5a17214c133809336e6c1b16be897e1ed5e49417109aea40af4d2539f63c73e0659dbc8f905274948da1f1296d19d179a1fa77", @generic="af47d5a7c2ed310c2edbc84fe31092d4a177cd", @nested={0xbc, 0x53, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@multicast1}, @generic="c09d8f3eda3622c883e65d7001f4efe5630b1cc9223829ec560a0ad481d5f067adcac7521252d7fed217c6c8c189b34f9d33ace3cd937c8ab81c6a349dbcdcc93934b39d1c9c2b9e5906cb3db887d567530e07d9885266278597c4068757455639ce754a0c7b2b4cb614415b90dd1fc9785d70483fc3414b8258cf9709a3078cbdae87ff7c5519042aed04f3546089785d4c03f1", @typed={0x8, 0xba, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xc, 0x102, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x51}, @nested={0x4, 0x39}]}, @typed={0x14, 0x10e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @generic="c3f832754f8cc85e07223393afe85687d791cd01fe8cf6c2d60d0fb33a59b9867299ff22747ad2ed73bcd4120e052978abe7c202381ef03dd1cc0f8bbcf68e6fb4d45aaf68a09b8231073366461aaed9f04fdd74686588a9f91fd174357cf5e85f7e4f7e6c88395ffca7257dd798173b9c4cda2e20dcb4a4c1a3dc7437afd724492c73788049df488c98c88210d6a1bca2e2f5888cf50e60a338b0d7", @nested={0x1149, 0x5c, 0x0, 0x1, [@generic="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", @generic="a492db9385477e4ea2e4ec9b1fa8e650db7f9397af0230c948b07c1a5319aa1253a8eb7bdb84e046dd7abb341f46417eb1001b71bb254f78a9669de00ff6ef685dd4980938bb2c76562d56e20256fbfbf7e45112952763414d6a3d91df995c2e82d8e56986bc3a730ee7c3dd7ebefd87c7d5aea56f1c17be135cb33ef49f06022840f638ea16019918b555a0e2b5f19c3a9fc822e6c0f0e7bce5b1cc4750d1ce33a8b3a3bbaf7dc8", @generic="38d892c44bb21d2a3c3cf6bff2d680152666223e8eafa0d5c8970a5d3f0a658e01acf68bd3bf1769952c19fe4bbe68e5f92414a7431be3a80931e20ec644f6d270bd7ac23c4ad406d8bcc90bcfaf616a6048c310ad8c7ef3b8e9216c2d7ae1792bae327a47411e1622bc4604557b876b61a52aa9002620279fcd203e5d7296aa8e1be0c3de783233215ba459cf33367ace8c6292ae2a056d40d3e1ee28"]}, @nested={0x179, 0x121, 0x0, 0x1, [@generic="45033612addaec8f56fc5f4f8e08263a9c1606d2e82facea595722137d5f6434eca429cb79fc3fc536445d749466e6051afffe03fa38415606a9cf7bd84e4a0e03909ee6a7b367bce573165d7d5ffd42fc256b8140cb03b0d87427165859455b8044b0bbffc3f2009d31f105a3bb7fc465f6c94d5ac8b68aa160d4c54623fe6c9e84bc19a011b4f9fc3f44d6e75f5af19c97cdd1866898422a270765e4e9fcaedbd64fb5185f228f5623f9807a40383c8d3ee39e98020c1a30fee1773ec01d5593345ba5fd1ab19a762ba3220768d9b8645e3e31af2cd086961e18ab34bbd55255ee612326ea5af03f0f928a43b3ef9b16e497b938f16d", @typed={0x24, 0x48, 0x0, 0x0, @str='/proc/sys/kernel/task_delayacct\x00'}, @nested={0x4, 0xa}, @generic="c03c6bd690f6fe9139f0834d93202602dabe3e01429def013fab1166605eeac03ebe77375fce2fb9b65fae819cde13f127a9b4da42d8b4937bc06530e781e8fdaf63b4cac528f2a4c33f906762fd60da273232b15a91"]}]}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4a}]}, 0x19fc}, 0x1, 0x0, 0x0, 0x20000890}, 0x2094) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r4, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) select$auto(0x4, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0x7, 0x3, 0x1, 0x7, 0x1000000000000004, 0x15f4da0a, 0x4000000400039, 0x3, 0x2bffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) shutdown$auto(0x200000003, 0x2) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 840.909901ms ago: executing program 1 (id=1810): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x90001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyub\x00', 0x4000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) recvfrom$auto(r1, 0x0, 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) r2 = socket(0x1d, 0x2, 0x7) setsockopt$auto(r2, 0x6b, 0x1, 0x0, 0x4) (async) setsockopt$auto(r2, 0x6b, 0x1, 0x0, 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket(0xa, 0x1, 0x84) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0xd, 0xf6ad) write$auto(r3, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bbf, 0x7ff, 0x3, 0xff, 0x81, 0x1, 0x3, 0x8005, 0xfffffffffffffffe, 0x80000001, 0x335b0ef1, 0xffffdfffffffff81, 0x4]}, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x1f, 0x0, 0x6, 0x48001, 0x6, 0xac, 0xa, 0x8, 0xffffffff, 0x6, 0x1, 0x1003, 0x2, 0x20000000000008, 0x400]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(r4, r0, 0x3) (async) close_range$auto(r4, r0, 0x3) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/stat\x00', 0x478581, 0x0) modify_ldt$auto(0x5, 0x0, 0x11) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) pipe$auto(0x0) (async) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x149942, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf25040000002d0011"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) 405.677129ms ago: executing program 1 (id=1811): socket(0x2, 0x1, 0x106) fcntl$auto(0x3, 0x4, 0xa553) listen$auto(0x3, 0x81) shutdown$auto(0x200000003, 0x2) r0 = socket(0x2, 0x1, 0x84) setsockopt$auto(r0, 0x84, 0x21, &(0x7f0000000180)='$+l\x00', 0xd4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x3, 0x717e, 0x0, 0x7, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x9ffffffffffd, 0x224a, 0x8, 0x7, 0x6, 0x6, 0x7b, 0x1, 0xa, 0x4, 0x33f, 0x6, 0x84, 0x3, 0x0, 0x4, 0x2, 0xfffffffc, [0x56, 0xe, 0x0, 0x401, 0x0, 0x5, 0x0, 0xffffffff80000000, 0x0, 0x42, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x8, 0x4, 0x400, 0x430, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x210, 0x0, 0xc60, 0x0, 0x5, 0x14, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0x83, 0x1, 0x6, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) 219.8788ms ago: executing program 1 (id=1812): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/5/smp_affinity_list\x00', 0x125000, 0x0) unshare$auto(0x40000080) mmap$auto(0x3, 0x5, 0xffffffffffffffff, 0x13, r0, 0xbb2) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffe) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r2 = socket(0x2, 0x2, 0x0) r3 = getsockopt$auto(r2, 0x0, 0x1, 0xfffffffffffffffc, 0x0) read$auto(r1, 0x0, 0x20) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/dummy_hcd.5/usb6/bMaxPower\x00', 0x80, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mq_getsetattr$auto(0x3, 0x0, &(0x7f0000000100)={0x8, 0x8, 0x2, 0x1}) mmap$auto(0xfffffffffffffffd, 0x8, 0xe2, 0x9b72, r4, 0x6) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0xfffffffe) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000cceece7ff5a945f687a0ae40d2d3bff4fdc819ed729c955ccadc56ba990e11abea0d852360270bc4869e22955bd891b2a5cdab431928150000000004211477006e256ec7cc87825a3c853bcff605dd5d4b692bdf000000000000000000", @ANYRES16, @ANYBLOB="000326bd7000fedbdf25020000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x403c6f2b, 0x0) pread64$auto(r0, 0x0, 0x100006, 0xc982) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 0s ago: executing program 4 (id=1813): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0xffffffffffffffff, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1203000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x8) r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) sysfs$auto(0x2, 0xe, 0x0) setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) madvise$auto(0x9, 0x8001, 0x8) write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000440)="110000000500"/17, 0x11) select$auto(0xebe, &(0x7f0000000000)={[0x8, 0x2, 0x3, 0x40, 0x8000, 0xd3ee, 0xfffffffffffffff8, 0x2, 0x640c, 0x3, 0x200000000000, 0x6, 0x0, 0x1000, 0xffff, 0x3]}, &(0x7f0000000080)={[0x7d3d5788, 0x5, 0x9, 0x8, 0x6, 0x80, 0x7, 0xffff, 0x7000000, 0xa, 0x7, 0xfffffffffffffff0, 0xfbe, 0x6, 0xf64f, 0x2]}, &(0x7f0000000180)={[0x0, 0x20000000000005, 0x6, 0x6b, 0x28, 0x2, 0x100000001, 0x625, 0x8000, 0x1, 0x4, 0x7, 0x9, 0x100000001, 0xbd, 0x6]}, &(0x7f0000000200)={0x4, 0xca05}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/ptypd/uevent\x00', 0x88000, 0x0) kernel console output (not intermixed with test programs): [ 535.220226][T13127] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 535.220249][T13127] ? _raw_spin_unlock+0x28/0x50 [ 535.220276][T13127] ? alloc_fd+0x471/0x7a0 [ 535.220305][T13127] __anon_inode_getfile+0xe8/0x280 [ 535.220380][T13127] __anon_inode_getfd+0x5c/0xe0 [ 535.220404][T13127] map_create+0x16f6/0x3120 [ 535.220440][T13127] ? __pfx_map_create+0x10/0x10 [ 535.220473][T13127] ? __might_fault+0xc5/0x140 [ 535.220499][T13127] __sys_bpf+0x2a6e/0x4e80 [ 535.220530][T13127] ? __pfx___sys_bpf+0x10/0x10 [ 535.220546][T13127] ? __pfx_futex_hash+0x10/0x10 [ 535.220580][T13127] ? futex_wait+0x11e/0x370 [ 535.220603][T13127] ? __pfx_futex_wait+0x10/0x10 [ 535.220629][T13127] ? percpu_counter_add_batch+0xb9/0x230 [ 535.220676][T13127] ? errseq_sample+0x51/0x70 [ 535.220716][T13127] ? __x64_sys_futex+0x34f/0x4d0 [ 535.220733][T13127] ? __x64_sys_futex+0x358/0x4d0 [ 535.220752][T13127] ? __sys_socket+0xac/0x260 [ 535.220782][T13127] ? xfd_validate_state+0x129/0x190 [ 535.220804][T13127] ? __x64_sys_bpf+0xce/0x140 [ 535.220821][T13127] __x64_sys_bpf+0xce/0x140 [ 535.220839][T13127] ? do_syscall_64+0x90/0x840 [ 535.220856][T13127] do_syscall_64+0x115/0x840 [ 535.220872][T13127] ? clear_bhb_loop+0x40/0x90 [ 535.220893][T13127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.220913][T13127] RIP: 0033:0x7f1515b9de59 [ 535.220929][T13127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.220947][T13127] RSP: 002b:00007f1516a20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 535.220965][T13127] RAX: ffffffffffffffda RBX: 00007f1515e26090 RCX: 00007f1515b9de59 [ 535.220977][T13127] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000000 [ 535.220987][T13127] RBP: 00007f1515c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 535.220998][T13127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.221008][T13127] R13: 00007f1515e26128 R14: 00007f1515e26090 R15: 00007ffe3b7a5c38 [ 535.221030][T13127] [ 537.155373][T13158] FAULT_INJECTION: forcing a failure. [ 537.155373][T13158] name failslab, interval 1, probability 0, space 0, times 0 [ 537.372249][T13158] CPU: 0 UID: 0 PID: 13158 Comm: syz.2.1445 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.372282][T13158] Tainted: [L]=SOFTLOCKUP [ 537.372289][T13158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 537.372299][T13158] Call Trace: [ 537.372305][T13158] [ 537.372312][T13158] dump_stack_lvl+0x100/0x190 [ 537.372337][T13158] should_fail_ex.cold+0x5/0xa [ 537.372358][T13158] should_failslab+0xc2/0x120 [ 537.372383][T13158] __kmalloc_cache_noprof+0x91/0x6c0 [ 537.372411][T13158] ? find_held_lock+0x2b/0x80 [ 537.372432][T13158] ? rcu_read_unlock+0x17/0x60 [ 537.372457][T13158] ? alloc_mnt_ns+0xce/0x520 [ 537.372485][T13158] alloc_mnt_ns+0xce/0x520 [ 537.372511][T13158] copy_mnt_ns+0x308/0x1180 [ 537.372543][T13158] ? rcu_is_watching+0x12/0xc0 [ 537.372564][T13158] ? __pfx_copy_mnt_ns+0x10/0x10 [ 537.372585][T13158] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 537.372606][T13158] ? create_new_namespaces+0x30/0xac0 [ 537.372641][T13158] create_new_namespaces+0xd3/0xac0 [ 537.372671][T13158] ? bpf_lsm_capable+0x9/0x10 [ 537.372689][T13158] ? security_capable+0x80/0x260 [ 537.372720][T13158] unshare_nsproxy_namespaces+0xf2/0x220 [ 537.372741][T13158] ksys_unshare+0x438/0xab0 [ 537.372765][T13158] ? __pfx_ksys_unshare+0x10/0x10 [ 537.372794][T13158] __x64_sys_unshare+0x31/0x40 [ 537.372815][T13158] do_syscall_64+0x115/0x840 [ 537.372832][T13158] ? clear_bhb_loop+0x40/0x90 [ 537.372854][T13158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.372873][T13158] RIP: 0033:0x7f74abf9de59 [ 537.372889][T13158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.372906][T13158] RSP: 002b:00007f74ace5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 537.372924][T13158] RAX: ffffffffffffffda RBX: 00007f74ac226270 RCX: 00007f74abf9de59 [ 537.372936][T13158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008100000 [ 537.372947][T13158] RBP: 00007f74ac033e6f R08: 0000000000000000 R09: 0000000000000000 [ 537.372957][T13158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.372968][T13158] R13: 00007f74ac226308 R14: 00007f74ac226270 R15: 00007ffe741e9978 [ 537.372990][T13158] [ 538.428388][T13168] netlink: 202 bytes leftover after parsing attributes in process `syz.1.1449'. [ 540.964772][ T5721] Process accounting resumed [ 541.203972][T13203] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1456'. [ 542.352541][T13224] ubi9: attaching mtd2 [ 542.370080][T13224] ubi9 error: ubi_attach_mtd_dev: bad VID header (10) or data offsets (74) [ 545.116842][T13257] blktrace: Concurrent blktraces are not allowed on loop2 [ 545.441242][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1468'. [ 545.512325][T13267] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1469'. [ 545.606565][T13263] can: request_module (can-proto-5) failed. [ 546.387737][T13260] : entered promiscuous mode [ 547.266237][T13282] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 547.397835][T13285] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 5 with max blocks 1 with error 117 [ 547.474695][T13285] EXT4-fs (sda1): This should not happen!! Data will be lost [ 547.474695][T13285] [ 547.825432][ T7475] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 547.841264][ T7475] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 547.851249][ T7475] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 547.863990][ T7475] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 547.879768][ T7475] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 549.951327][ T7475] Bluetooth: hci1: command tx timeout [ 550.586934][T13294] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.603682][T13294] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.619227][T13294] bridge_slave_0: entered allmulticast mode [ 550.634316][T13294] bridge_slave_0: entered promiscuous mode [ 550.652329][T13294] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.674023][T13294] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.690835][T13294] bridge_slave_1: entered allmulticast mode [ 550.707176][T13294] bridge_slave_1: entered promiscuous mode [ 550.800582][T13294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.821591][T13294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.900023][T13294] team0: Port device team_slave_0 added [ 550.920310][T13294] team0: Port device team_slave_1 added [ 550.977037][T13294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.993865][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.047693][T13294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.075496][T13294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.091590][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.150577][T13294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.255442][T13294] hsr_slave_0: entered promiscuous mode [ 551.268756][T13294] hsr_slave_1: entered promiscuous mode [ 551.282237][T13294] debugfs: 'hsr0' already exists in 'hsr' [ 551.295744][T13294] Cannot create hsr debugfs directory [ 552.020625][ T7475] Bluetooth: hci1: command tx timeout [ 552.164191][T13344] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1481'. [ 552.699766][T13294] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 553.062222][T13294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 553.272919][T13355] netlink: 'syz.4.1482': attribute type 3 has an invalid length. [ 553.350744][T13355] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1482'. [ 553.415482][T13294] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 553.490580][T13294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.525326][T13294] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 553.604693][T13294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.649070][T13294] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 553.699730][T13294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.090187][ T7475] Bluetooth: hci1: command tx timeout [ 554.116570][T13294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.204186][T13294] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.260341][ T9389] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.267504][ T9389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.336675][ T9389] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.343863][ T9389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.519943][T13294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 555.956947][T13294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.159796][ T7475] Bluetooth: hci1: command tx timeout [ 556.295438][T13415] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1491'. [ 557.446298][T13294] veth0_vlan: entered promiscuous mode [ 557.487903][T13294] veth1_vlan: entered promiscuous mode [ 557.609642][T13294] veth0_macvtap: entered promiscuous mode [ 557.659485][T13294] veth1_macvtap: entered promiscuous mode [ 557.693205][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 557.812146][T13294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.934075][T13294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.018570][ T7823] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.078404][ T7823] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.164834][ T7823] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.222389][ T7823] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.601329][ T9388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.653407][ T9388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.984454][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'. [ 559.053775][ T6390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.093761][ T6390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.871823][T13501] vivid-011: ================= START STATUS ================= [ 559.920215][T13501] vivid-011: Radio HW Seek Mode: Bounded [ 559.964359][T13501] vivid-011: Radio Programmable HW Seek: false [ 560.055796][T13501] vivid-011: RDS Rx I/O Mode: Block I/O [ 560.114451][T13501] vivid-011: Generate RBDS Instead of RDS: false [ 560.141118][T13501] vivid-011: RDS Reception: true [ 560.176650][T13501] vivid-011: RDS Program Type: 0 inactive [ 560.222918][T13501] vivid-011: RDS PS Name: inactive [ 560.265450][T13501] vivid-011: RDS Radio Text: inactive [ 560.306288][T13501] vivid-011: RDS Traffic Announcement: false inactive [ 560.351783][T13501] vivid-011: RDS Traffic Program: false inactive [ 560.390775][T13501] vivid-011: RDS Music: false inactive [ 560.425184][T13501] vivid-011: ================== END STATUS ================== [ 560.888228][T13523] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1506'. [ 561.002076][T13523] mac80211_hwsim hwsim27 : renamed from wlan0 (while UP) [ 561.047219][T13522] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1506'. [ 561.177288][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.189490][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.650392][T13530] hub 1-0:1.0: USB hub found [ 561.766244][T13530] hub 1-0:1.0: 1 port detected [ 563.132179][T13572] netlink: 'syz.2.1515': attribute type 2 has an invalid length. [ 563.158832][T13572] netlink: 'syz.2.1515': attribute type 3 has an invalid length. [ 563.189827][T13572] netlink: 158 bytes leftover after parsing attributes in process `syz.2.1515'. [ 564.212359][T13593] blktrace: Concurrent blktraces are not allowed on loop2 [ 565.249655][T13609] netlink: 202 bytes leftover after parsing attributes in process `syz.1.1521'. [ 565.341985][T13610] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 565.542047][T13612] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1522'. [ 565.584617][T13612] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1522'. [ 565.721461][T13605] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 566.751489][ T29] audit: type=1800 audit(8277292123.901:22): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1524" name="dbroot" dev="configfs" ino=54359 res=0 errno=0 [ 567.987924][T13669] kAFS: Invalid Command on /proc/fs/afs/cells file [ 568.216619][T13676] netlink: 202 bytes leftover after parsing attributes in process `syz.5.1533'. [ 568.450232][T13678] netlink: 'syz.4.1534': attribute type 3 has an invalid length. [ 569.273157][T13689] netlink: 'syz.5.1537': attribute type 2 has an invalid length. [ 569.310860][T13689] netlink: 'syz.5.1537': attribute type 3 has an invalid length. [ 569.344414][T13689] netlink: 158 bytes leftover after parsing attributes in process `syz.5.1537'. [ 569.408890][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1537'. [ 570.564584][T13709] random: crng reseeded on system resumption [ 571.002505][T13720] netlink: 202 bytes leftover after parsing attributes in process `syz.5.1545'. [ 571.765023][ T7475] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 571.775461][ T7475] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 574.792249][T13790] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 576.870746][T13828] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1563'. [ 577.960724][T13848] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[8042] was attempted by "NW6\x0aV4j$5]hmtK!h<a0UGZA!D]nM~K7~{O٧(Mo(\x07Eh_\x0d\x1bПl7oNX\x1b8V]CbK-8IR;\x5cफ़'C4tAH*#/Qls璫+ \x0bƩل&-\x1b%Ea Q!̭-С)F$/[6%\x0cp'\x0a9Vp,\x1bXut‹]Voߪ@;( '6\x0bln>mi [ 582.474011][T13890] openvswitch: netlink: Geneve option length err (len 264, max 255). [ 584.317753][ T6383] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 584.332772][ T6383] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 584.344447][ T6383] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 584.353906][ T6383] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 584.361595][ T6383] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 585.324079][T13914] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.347766][T13914] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.365366][T13914] bridge_slave_0: entered allmulticast mode [ 585.383225][T13914] bridge_slave_0: entered promiscuous mode [ 585.401338][T13914] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.418786][T13914] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.429749][T13914] bridge_slave_1: entered allmulticast mode [ 585.451940][T13914] bridge_slave_1: entered promiscuous mode [ 585.512615][T13914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.537301][T13914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.610449][T13914] team0: Port device team_slave_0 added [ 585.633013][T13914] team0: Port device team_slave_1 added [ 585.691884][T13914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.700730][T13914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.758633][T13914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.789833][T13914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.800870][T13914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.856699][T13914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.955713][T13914] hsr_slave_0: entered promiscuous mode [ 585.978173][T13914] hsr_slave_1: entered promiscuous mode [ 585.984318][T13914] debugfs: 'hsr0' already exists in 'hsr' [ 586.010288][T13914] Cannot create hsr debugfs directory [ 586.068462][T13932] netlink: 'syz.4.1582': attribute type 3 has an invalid length. [ 586.406126][ T6383] Bluetooth: hci5: command tx timeout [ 586.591875][T13914] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 586.630959][T13914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 586.665281][T13914] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 586.694110][T13914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 586.719487][T13914] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 586.773396][T13914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 586.795094][T13914] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 586.824314][T13914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 586.979237][T13914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.026577][T13914] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.056722][ T9388] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.063899][ T9388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.108733][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.115912][ T9385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.833819][T13914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.289933][T13914] veth0_vlan: entered promiscuous mode [ 588.333665][T13914] veth1_vlan: entered promiscuous mode [ 588.384556][T13914] veth0_macvtap: entered promiscuous mode [ 588.418715][T13914] veth1_macvtap: entered promiscuous mode [ 588.460870][T13914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.474803][ T6383] Bluetooth: hci5: command tx timeout [ 588.492135][T13914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.536396][ T9385] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.574123][ T9385] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.608008][ T9385] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.649264][ T9385] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.827798][ T7818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.862052][ T7818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.923657][ T9388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.943117][ T9388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.386509][ T7475] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 589.406723][ T7475] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 589.414767][ T7475] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 589.423860][ T7475] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 589.434300][ T7475] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 590.545013][ T7475] Bluetooth: hci5: command tx timeout [ 590.924896][T13983] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.959207][T13983] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.984335][T13983] bridge_slave_0: entered allmulticast mode [ 591.010300][T13983] bridge_slave_0: entered promiscuous mode [ 591.046130][T13983] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.072487][T13983] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.097292][T13983] bridge_slave_1: entered allmulticast mode [ 591.128955][T13983] bridge_slave_1: entered promiscuous mode [ 591.230732][T13983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.277078][T13983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.375874][T13983] team0: Port device team_slave_0 added [ 591.405069][T13983] team0: Port device team_slave_1 added [ 591.499470][ T7475] Bluetooth: hci6: command tx timeout [ 591.507636][T13983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.530257][T13983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.649851][T13983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.701757][T13983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.726487][T13983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.816879][T13983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.967273][T13983] hsr_slave_0: entered promiscuous mode [ 592.000279][T13983] hsr_slave_1: entered promiscuous mode [ 592.019148][T13983] debugfs: 'hsr0' already exists in 'hsr' [ 592.040842][T13983] Cannot create hsr debugfs directory [ 592.491618][T14029] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1594'. [ 592.614169][ T7475] Bluetooth: hci5: command tx timeout [ 592.827906][T13983] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 592.875026][T13983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 592.908497][T13983] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 592.933426][T13983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 592.954378][T13983] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 592.988246][T13983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.017393][T13983] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 593.058892][T13983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.568786][ T7475] Bluetooth: hci6: command tx timeout [ 593.762218][T13983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.849733][T13983] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.892939][ T7818] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.900205][ T7818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.963880][ T7818] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.971096][ T7818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.878917][ T6383] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 594.892115][ T6383] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 594.908727][ T6383] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 594.926607][ T6383] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 594.935690][ T6383] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 595.638186][ T6383] Bluetooth: hci6: command tx timeout [ 595.804389][T13983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.818513][T13983] veth0_vlan: entered promiscuous mode [ 596.898878][T13983] veth1_vlan: entered promiscuous mode [ 596.991349][ T6383] Bluetooth: hci7: command tx timeout [ 597.024663][T13983] veth0_macvtap: entered promiscuous mode [ 597.075481][T13983] veth1_macvtap: entered promiscuous mode [ 597.296682][T14107] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[8042] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[14107] [ 597.314778][T13983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.384842][ T7818] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 4 with max blocks 2 with error 117 [ 597.400420][T13983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.455324][ T7818] EXT4-fs (sda1): This should not happen!! Data will be lost [ 597.455324][ T7818] [ 597.536569][T14061] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.584244][T14061] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.613730][T14061] bridge_slave_0: entered allmulticast mode [ 597.639241][T14061] bridge_slave_0: entered promiscuous mode [ 597.680365][ T9385] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.705216][ T9385] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.714986][ T6383] Bluetooth: hci6: command tx timeout [ 597.761859][T14061] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.791049][T14061] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.816216][T14061] bridge_slave_1: entered allmulticast mode [ 597.839779][T14061] bridge_slave_1: entered promiscuous mode [ 597.864209][ T9385] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.896046][ T9385] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.043362][T14061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.116235][T14061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.318443][T14061] team0: Port device team_slave_0 added [ 598.374168][T14061] team0: Port device team_slave_1 added [ 598.486816][T14061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.514393][T14061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.600031][T14061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.638365][T14061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.660606][T14061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.750909][T14061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.803377][ T6418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.842976][ T6418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.027781][ T7818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.061394][ T6383] Bluetooth: hci7: command tx timeout [ 599.069508][ T7818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.280014][T14061] hsr_slave_0: entered promiscuous mode [ 599.305604][T14061] hsr_slave_1: entered promiscuous mode [ 599.326895][T14061] debugfs: 'hsr0' already exists in 'hsr' [ 599.345276][T14061] Cannot create hsr debugfs directory [ 599.819975][T14128] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1588'. [ 601.131278][ T6383] Bluetooth: hci7: command tx timeout [ 602.510954][T14061] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 602.547077][T14061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 602.577525][T14061] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 602.610742][T14061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.641261][T14061] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 602.709189][T14061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 602.735282][T14061] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 602.811056][T14061] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 603.201176][ T6383] Bluetooth: hci7: command tx timeout [ 603.634940][T14171] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 603.662741][T14061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.909752][T14061] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.003346][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.010534][ T9385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.123887][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.131390][ T9385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.807485][T14214] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1612'. [ 607.395179][T14061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.519587][T14256] netlink: 'syz.7.1615': attribute type 2 has an invalid length. [ 608.544830][T14061] veth0_vlan: entered promiscuous mode [ 608.622251][T14061] veth1_vlan: entered promiscuous mode [ 608.765320][T14061] veth0_macvtap: entered promiscuous mode [ 608.821648][T14061] veth1_macvtap: entered promiscuous mode [ 608.944028][T14061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.993679][T14061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.111107][ T6939] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.216688][ T6939] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.260123][ T6939] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.524433][ T6939] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.600383][T14264] CIFS mount error: No usable UNC path provided in device string! [ 609.600383][T14264] [ 609.659958][T14264] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 610.163342][ T7822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.236281][ T7822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.425488][ T7822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.471703][ T7822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.488323][T14274] FAULT_INJECTION: forcing a failure. [ 610.488323][T14274] name failslab, interval 1, probability 0, space 0, times 0 [ 610.632186][T14274] CPU: 0 UID: 0 PID: 14274 Comm: syz.6.1619 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.632218][T14274] Tainted: [L]=SOFTLOCKUP [ 610.632225][T14274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 610.632235][T14274] Call Trace: [ 610.632242][T14274] [ 610.632249][T14274] dump_stack_lvl+0x100/0x190 [ 610.632278][T14274] should_fail_ex.cold+0x5/0xa [ 610.632301][T14274] should_failslab+0xc2/0x120 [ 610.632335][T14274] __kmalloc_noprof+0xfc/0x820 [ 610.632357][T14274] ? __vb2_queue_alloc+0x23e/0x1160 [ 610.632463][T14274] __vb2_queue_alloc+0x23e/0x1160 [ 610.632492][T14274] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 610.632527][T14274] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 610.632563][T14274] vb2_core_reqbufs+0x899/0xf30 [ 610.632596][T14274] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 610.632624][T14274] ? kasan_save_track+0x14/0x30 [ 610.632645][T14274] ? __kasan_kmalloc+0xaa/0xb0 [ 610.632668][T14274] ? __vb2_init_fileio+0x18f/0x1000 [ 610.632700][T14274] __vb2_init_fileio+0x32d/0x1000 [ 610.632730][T14274] ? __pfx_clockevents_program_event+0x10/0x10 [ 610.632756][T14274] __vb2_perform_fileio+0x9ba/0x1380 [ 610.632791][T14274] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 610.632819][T14274] ? lockdep_hardirqs_on+0x78/0x100 [ 610.632847][T14274] ? irqentry_exit+0x24d/0xa00 [ 610.632882][T14274] vb2_fop_read+0x211/0x520 [ 610.632926][T14274] v4l2_read+0x229/0x2c0 [ 610.632965][T14274] ? __pfx_v4l2_read+0x10/0x10 [ 610.632989][T14274] vfs_read+0x1e4/0xb40 [ 610.633021][T14274] ? __pfx_vfs_read+0x10/0x10 [ 610.633046][T14274] ? find_held_lock+0x2b/0x80 [ 610.633067][T14274] ? __fget_files+0x215/0x3d0 [ 610.633094][T14274] ? __fget_files+0x215/0x3d0 [ 610.633126][T14274] ? __fget_files+0x21f/0x3d0 [ 610.633161][T14274] ksys_read+0x12a/0x250 [ 610.633187][T14274] ? __pfx_ksys_read+0x10/0x10 [ 610.633221][T14274] do_syscall_64+0x115/0x840 [ 610.633237][T14274] ? clear_bhb_loop+0x40/0x90 [ 610.633260][T14274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.633279][T14274] RIP: 0033:0x7f7e1d99de59 [ 610.633295][T14274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.633312][T14274] RSP: 002b:00007f7e1e8bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 610.633336][T14274] RAX: ffffffffffffffda RBX: 00007f7e1dc25fa0 RCX: 00007f7e1d99de59 [ 610.633348][T14274] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000003 [ 610.633358][T14274] RBP: 00007f7e1da33e6f R08: 0000000000000000 R09: 0000000000000000 [ 610.633369][T14274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.633380][T14274] R13: 00007f7e1dc26038 R14: 00007f7e1dc25fa0 R15: 00007ffe5aef4fe8 [ 610.633403][T14274] [ 611.310001][T14274] ubi0: attaching mtd0 [ 611.339129][T14274] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 611.395806][T14274] eraseblock attaching information dump: [ 611.468172][T14274] ec 1 [ 611.505091][T14274] pnum 0 [ 611.556303][T14274] lnum 0 [ 611.604152][T14274] scrub 0 [ 611.648244][T14274] sqnum 1 [ 611.680779][T14274] Volume identifier header dump: [ 611.739119][T14274] magic 55424921 [ 611.782802][T14274] version 1 [ 611.811854][T14274] vol_type 1 [ 611.852296][T14274] copy_flag 0 [ 611.923300][T14274] compat 5 [ 611.995983][T14274] vol_id 2147479551 [ 612.058851][T14274] lnum 0 [ 612.118892][T14274] data_size 0 [ 612.181851][T14274] used_ebs 0 [ 612.252046][T14274] data_pad 0 [ 612.328946][T14274] sqnum 1 [ 612.388730][T14274] hdr_crc 65b3bd2d [ 612.482230][T14274] Volume identifier header hexdump: [ 613.023931][T14274] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 614.309468][T14314] FAULT_INJECTION: forcing a failure. [ 614.309468][T14314] name failslab, interval 1, probability 0, space 0, times 0 [ 614.348973][T14314] CPU: 0 UID: 0 PID: 14314 Comm: syz.8.1626 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.349007][T14314] Tainted: [L]=SOFTLOCKUP [ 614.349014][T14314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 614.349024][T14314] Call Trace: [ 614.349030][T14314] [ 614.349038][T14314] dump_stack_lvl+0x100/0x190 [ 614.349064][T14314] should_fail_ex.cold+0x5/0xa [ 614.349086][T14314] should_failslab+0xc2/0x120 [ 614.349111][T14314] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 614.349133][T14314] ? start_dirop+0x79/0xb0 [ 614.349159][T14314] ? alloc_inode+0x68/0x250 [ 614.349182][T14314] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 614.349209][T14314] alloc_inode+0x68/0x250 [ 614.349231][T14314] new_inode+0x22/0x1c0 [ 614.349254][T14314] __debugfs_create_file+0x105/0x4f0 [ 614.349282][T14314] debugfs_create_file_full+0x41/0x60 [ 614.349315][T14314] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 614.349345][T14314] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 614.349372][T14314] ? ida_alloc_range+0x70d/0x830 [ 614.349407][T14314] ? kasan_save_track+0x14/0x30 [ 614.349428][T14314] ? __kasan_kmalloc+0xaa/0xb0 [ 614.349450][T14314] ? lockdep_init_map_type+0x5c/0x250 [ 614.349482][T14314] preinit_net.part.0+0x252/0x920 [ 614.349507][T14314] copy_net_ns+0x339/0x7c0 [ 614.349535][T14314] create_new_namespaces+0x3ea/0xac0 [ 614.349570][T14314] unshare_nsproxy_namespaces+0xf2/0x220 [ 614.349591][T14314] ksys_unshare+0x438/0xab0 [ 614.349614][T14314] ? __pfx_ksys_unshare+0x10/0x10 [ 614.349644][T14314] __x64_sys_unshare+0x31/0x40 [ 614.349665][T14314] do_syscall_64+0x115/0x840 [ 614.349681][T14314] ? clear_bhb_loop+0x40/0x90 [ 614.349703][T14314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.349722][T14314] RIP: 0033:0x7fed8c19de59 [ 614.349738][T14314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.349756][T14314] RSP: 002b:00007fed8d14b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 614.349774][T14314] RAX: ffffffffffffffda RBX: 00007fed8c425fa0 RCX: 00007fed8c19de59 [ 614.349786][T14314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 614.349797][T14314] RBP: 00007fed8c233e6f R08: 0000000000000000 R09: 0000000000000000 [ 614.349808][T14314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.349818][T14314] R13: 00007fed8c426038 R14: 00007fed8c425fa0 R15: 00007ffcf6dda3e8 [ 614.349841][T14314] [ 614.349848][T14314] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888056a75100' [ 614.852400][T14317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1627'. [ 614.875599][T14317] ipvlan1: entered promiscuous mode [ 614.889951][T14317] ipvlan1: entered allmulticast mode [ 614.900090][T14317] veth0_vlan: entered allmulticast mode [ 616.173489][T14335] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 617.484875][T14353] FAULT_INJECTION: forcing a failure. [ 617.484875][T14353] name fail_futex, interval 1, probability 0, space 0, times 0 [ 617.578705][T14353] CPU: 0 UID: 0 PID: 14353 Comm: syz.6.1633 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.578735][T14353] Tainted: [L]=SOFTLOCKUP [ 617.578743][T14353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 617.578753][T14353] Call Trace: [ 617.578759][T14353] [ 617.578766][T14353] dump_stack_lvl+0x100/0x190 [ 617.578791][T14353] should_fail_ex.cold+0x5/0xa [ 617.578812][T14353] get_futex_key+0x1d2/0x14f0 [ 617.578844][T14353] ? __pfx_get_futex_key+0x10/0x10 [ 617.578871][T14353] ? do_raw_spin_lock+0x128/0x260 [ 617.578893][T14353] ? reacquire_held_locks+0xce/0x1e0 [ 617.578923][T14353] futex_wake+0xf4/0x5e0 [ 617.578947][T14353] ? __pfx_futex_wake+0x10/0x10 [ 617.578969][T14353] ? __local_bh_enable_ip+0x9e/0x120 [ 617.578990][T14353] ? tipc_setsockopt+0x232/0xe30 [ 617.579088][T14353] ? __local_bh_enable_ip+0x9e/0x120 [ 617.579108][T14353] ? tipc_setsockopt+0x412/0xe30 [ 617.579134][T14353] do_futex+0x2b2/0x440 [ 617.579154][T14353] ? __pfx_do_futex+0x10/0x10 [ 617.579172][T14353] ? rcu_is_watching+0x12/0xc0 [ 617.579192][T14353] ? do_sock_setsockopt+0x101/0x1d0 [ 617.579225][T14353] ? kfree+0x1e5/0x6c0 [ 617.579255][T14353] __x64_sys_futex+0x34f/0x4d0 [ 617.579276][T14353] ? __pfx___x64_sys_futex+0x10/0x10 [ 617.579296][T14353] ? __sys_setsockopt+0x139/0x190 [ 617.579322][T14353] do_syscall_64+0x115/0x840 [ 617.579338][T14353] ? clear_bhb_loop+0x40/0x90 [ 617.579361][T14353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.579384][T14353] RIP: 0033:0x7f7e1d99de59 [ 617.579401][T14353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.579418][T14353] RSP: 002b:00007f7e1e89c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 617.579436][T14353] RAX: ffffffffffffffda RBX: 00007f7e1dc26098 RCX: 00007f7e1d99de59 [ 617.579448][T14353] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e1dc2609c [ 617.579459][T14353] RBP: 00007f7e1dc26090 R08: 0000000000000001 R09: 0000000000000000 [ 617.579470][T14353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.579480][T14353] R13: 00007f7e1dc26128 R14: 00007ffe5aef4f00 R15: 00007ffe5aef4fe8 [ 617.579503][T14353] [ 618.698349][T14359] zswap: compressor not available [ 619.627508][T14370] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1637'. [ 620.852249][T14381] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 622.316488][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.330594][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.754439][T14443] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 625.896376][T14441] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 626.685963][ T7475] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 626.705224][ T7475] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 626.722445][ T7475] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 626.735039][ T7475] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 626.743677][ T7475] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 627.733058][T14448] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.751373][T14448] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.764244][T14448] bridge_slave_0: entered allmulticast mode [ 627.778603][T14448] bridge_slave_0: entered promiscuous mode [ 627.794909][T14448] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.812110][T14448] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.834265][T14448] bridge_slave_1: entered allmulticast mode [ 627.846614][T14448] bridge_slave_1: entered promiscuous mode [ 627.905418][T14448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.938715][T14448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.000123][T14448] team0: Port device team_slave_0 added [ 628.018344][T14448] team0: Port device team_slave_1 added [ 628.074272][T14448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.091356][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.150954][T14448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.175603][T14448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.193095][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.256423][T14448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.352589][T14448] hsr_slave_0: entered promiscuous mode [ 628.359001][T14448] hsr_slave_1: entered promiscuous mode [ 628.378798][T14448] debugfs: 'hsr0' already exists in 'hsr' [ 628.391512][T14448] Cannot create hsr debugfs directory [ 628.823368][T14448] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 628.836101][ T7475] Bluetooth: hci8: command tx timeout [ 628.857680][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 628.875808][T14448] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 628.892364][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.909712][T14448] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 628.936164][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 628.955226][T14448] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 628.973275][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 629.144494][T14448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.184946][T14448] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.207738][ T7821] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.214901][ T7821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.255226][ T7821] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.262375][ T7821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.028634][T14448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.548935][T14500] __vm_enough_memory: pid: 14500, comm: syz.6.1655, bytes: 4398046457856 not enough memory for the allocation [ 630.619168][T14448] veth0_vlan: entered promiscuous mode [ 630.676846][T14448] veth1_vlan: entered promiscuous mode [ 630.772783][T14448] veth0_macvtap: entered promiscuous mode [ 630.808203][T14448] veth1_macvtap: entered promiscuous mode [ 630.901460][T10345] Bluetooth: hci8: command tx timeout [ 630.909360][ T6383] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 630.931052][ T6383] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 630.941146][ T6383] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 630.949182][ T6383] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 630.960779][ T6383] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 631.002665][T14448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.056735][T14448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.120094][ T7821] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.179934][ T7821] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.219219][ T7821] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.250068][ T7821] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.548150][ T6418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.594146][ T6418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.711003][ T7822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.741960][ T7822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.645618][T14501] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.681856][T14501] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.711935][T14501] bridge_slave_0: entered allmulticast mode [ 632.740027][T14501] bridge_slave_0: entered promiscuous mode [ 632.770598][T14501] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.799747][T14501] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.825215][T14501] bridge_slave_1: entered allmulticast mode [ 632.852161][T14501] bridge_slave_1: entered promiscuous mode [ 632.859290][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1658'. [ 632.969935][ T6383] Bluetooth: hci8: command tx timeout [ 632.977744][T14501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.034581][T14501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.048630][ T6383] Bluetooth: hci9: command tx timeout [ 633.187696][T14501] team0: Port device team_slave_0 added [ 633.215542][T14501] team0: Port device team_slave_1 added [ 633.277886][T14501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.302507][T14501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.376081][T14501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.424530][T14501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.454117][T14501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.544578][T14501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.855097][T14501] hsr_slave_0: entered promiscuous mode [ 633.874389][T14501] hsr_slave_1: entered promiscuous mode [ 633.906048][T14501] debugfs: 'hsr0' already exists in 'hsr' [ 633.931849][T14501] Cannot create hsr debugfs directory [ 635.039890][ T6383] Bluetooth: hci8: command tx timeout [ 635.057869][T14554] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1662'. [ 635.117447][ T6383] Bluetooth: hci9: command tx timeout [ 635.202616][T14559] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 4 with max blocks 1 with error 117 [ 635.297356][T14559] EXT4-fs (sda1): This should not happen!! Data will be lost [ 635.297356][T14559] [ 635.467482][T14554] veth1_vlan: entered allmulticast mode [ 636.312635][T14587] FAULT_INJECTION: forcing a failure. [ 636.312635][T14587] name failslab, interval 1, probability 0, space 0, times 0 [ 636.360986][T14587] CPU: 0 UID: 0 PID: 14587 Comm: syz.6.1666 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.361026][T14587] Tainted: [L]=SOFTLOCKUP [ 636.361033][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 636.361044][T14587] Call Trace: [ 636.361050][T14587] [ 636.361057][T14587] dump_stack_lvl+0x100/0x190 [ 636.361084][T14587] should_fail_ex.cold+0x5/0xa [ 636.361106][T14587] should_failslab+0xc2/0x120 [ 636.361130][T14587] kmem_cache_alloc_noprof+0x91/0x6a0 [ 636.361151][T14587] ? __pfx_map_id_range_down+0x10/0x10 [ 636.361199][T14587] ? security_inode_alloc+0x3b/0x2c0 [ 636.361224][T14587] security_inode_alloc+0x3b/0x2c0 [ 636.361244][T14587] inode_init_always_gfp+0xc77/0xfb0 [ 636.361277][T14587] alloc_inode+0x8e/0x250 [ 636.361300][T14587] path_from_stashed+0x25b/0x750 [ 636.361319][T14587] ? do_raw_spin_unlock+0x145/0x1e0 [ 636.361342][T14587] ns_get_path+0x60/0x80 [ 636.361399][T14587] proc_ns_get_link+0x25b/0x2e0 [ 636.361426][T14587] ? __pfx_proc_ns_get_link+0x10/0x10 [ 636.361454][T14587] ? atime_needs_update+0x8b/0x6b0 [ 636.361480][T14587] pick_link+0xd17/0x13c0 [ 636.361505][T14587] ? __pfx_proc_ns_get_link+0x10/0x10 [ 636.361533][T14587] step_into_slowpath+0x9ba/0xf90 [ 636.361562][T14587] ? rcu_is_watching+0x12/0xc0 [ 636.361582][T14587] ? __pfx_step_into_slowpath+0x10/0x10 [ 636.361606][T14587] ? find_held_lock+0x2b/0x80 [ 636.361635][T14587] path_openat+0x13b5/0x4280 [ 636.361674][T14587] ? __pfx_path_openat+0x10/0x10 [ 636.361709][T14587] do_file_open+0x20e/0x430 [ 636.361740][T14587] ? __pfx_do_file_open+0x10/0x10 [ 636.361786][T14587] ? alloc_fd+0x471/0x7a0 [ 636.361816][T14587] ? do_getname+0x191/0x390 [ 636.361838][T14587] do_sys_openat2+0x10f/0x1e0 [ 636.361862][T14587] ? __pfx_do_sys_openat2+0x10/0x10 [ 636.361885][T14587] ? _raw_spin_unlock_irq+0x23/0x50 [ 636.361918][T14587] __x64_sys_openat+0x12d/0x210 [ 636.361941][T14587] ? __pfx___x64_sys_openat+0x10/0x10 [ 636.361972][T14587] do_syscall_64+0x115/0x840 [ 636.361994][T14587] ? clear_bhb_loop+0x40/0x90 [ 636.362017][T14587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.362036][T14587] RIP: 0033:0x7f7e1d95e68e [ 636.362052][T14587] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 636.362070][T14587] RSP: 002b:00007f7e1e8bcec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 636.362089][T14587] RAX: ffffffffffffffda RBX: 00007f7e1e8bd6c0 RCX: 00007f7e1d95e68e [ 636.362101][T14587] RDX: 0000000000000002 RSI: 00007f7e1e8bcf90 RDI: ffffffffffffff9c [ 636.362113][T14587] RBP: 00007f7e1da33e6f R08: 0000000000000000 R09: 0000000000000000 [ 636.362124][T14587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.362135][T14587] R13: 00007f7e1dc26038 R14: 00007f7e1dc25fa0 R15: 00007ffe5aef4fe8 [ 636.362159][T14587] [ 637.258685][ T6383] Bluetooth: hci9: command tx timeout [ 637.442873][T14501] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 637.525291][T14501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 637.550881][T14501] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 637.570310][T14501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 637.820121][T14501] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 637.874534][T14501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 637.949477][T14501] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 638.039840][T14501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 638.419403][T14501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.502087][T14501] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.567962][T13805] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.575130][T13805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.638310][ T6387] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.645469][ T6387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.255870][ T6383] Bluetooth: hci9: command tx timeout [ 640.041982][T14501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.098818][ T29] audit: type=1807 audit(8277292197.625:23): UNKNOWN=nl80211 res=0 [ 640.176787][ T7475] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 640.193649][ T7475] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 640.203998][ T7475] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 640.215546][ T7475] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 640.223285][ T7475] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 640.279976][ T29] audit: type=1802 audit(8277292197.796:24): pid=14646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.1669" res=0 errno=0 [ 640.555162][T14501] veth0_vlan: entered promiscuous mode [ 640.615660][T14501] veth1_vlan: entered promiscuous mode [ 640.734085][T14501] veth0_macvtap: entered promiscuous mode [ 640.745693][T14640] ima: policy update failed [ 640.780654][ T29] audit: type=1802 audit(8277292198.298:25): pid=14640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1669" res=0 errno=0 [ 640.803297][T14501] veth1_macvtap: entered promiscuous mode [ 641.048363][T14501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.200513][T14501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.396141][T10171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.441347][T10171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.645790][T10171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.825287][T10171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.282856][ T7475] Bluetooth: hci10: command tx timeout [ 642.475429][T13805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.534873][T13805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.755626][T13805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.805760][T13805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.570153][T14649] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.592387][T14649] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.620257][T14649] bridge_slave_0: entered allmulticast mode [ 643.655046][T14649] bridge_slave_0: entered promiscuous mode [ 643.681501][T14649] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.711244][T14649] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.739020][T14649] bridge_slave_1: entered allmulticast mode [ 643.767678][T14649] bridge_slave_1: entered promiscuous mode [ 643.877891][T14649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.930896][T14649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.097326][T14649] team0: Port device team_slave_0 added [ 644.137406][T14649] team0: Port device team_slave_1 added [ 644.312602][T14649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.351630][ T7475] Bluetooth: hci10: command tx timeout [ 644.364968][T14649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.466783][T14649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.533952][T14649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.571145][T14649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.668715][T14649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.901287][T14649] hsr_slave_0: entered promiscuous mode [ 644.933433][T14649] hsr_slave_1: entered promiscuous mode [ 644.951476][T14649] debugfs: 'hsr0' already exists in 'hsr' [ 644.978287][T14649] Cannot create hsr debugfs directory [ 646.419579][ T7475] Bluetooth: hci10: command tx timeout [ 646.569938][T14649] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.813589][T14649] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.089021][T14649] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.335435][T14649] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.373373][T14649] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 648.403496][T14649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.450949][T14649] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 648.485907][T14649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.497511][ T7475] Bluetooth: hci10: command tx timeout [ 648.532913][T14649] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 648.570113][T14649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.600612][T14649] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 648.629942][T14649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.868651][T14649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.925634][T14649] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.972753][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.979911][ T6939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.054198][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.061357][ T6939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.251598][T14649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.386405][T14649] veth0_vlan: entered promiscuous mode [ 650.443619][T14649] veth1_vlan: entered promiscuous mode [ 650.544546][T14649] veth0_macvtap: entered promiscuous mode [ 650.585888][T14649] veth1_macvtap: entered promiscuous mode [ 650.616685][T14649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.656329][T14649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.689696][ T7821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.703865][ T7821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.749717][ T7821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.762160][T14828] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1680'. [ 650.774117][ T7821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.953897][ T6939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.989362][ T6939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.032945][T10171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.064418][T10171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.813059][T14847] netlink: 202 bytes leftover after parsing attributes in process `syz.3.1683'. [ 651.917663][ T7475] Bluetooth: hci9: unexpected event 0x1d length: 82 > 5 [ 654.035179][ T6383] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 654.059374][ T6383] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 654.071809][ T6383] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 654.089036][ T6383] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 654.102151][ T6383] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 654.814938][T14894] FAULT_INJECTION: forcing a failure. [ 654.814938][T14894] name failslab, interval 1, probability 0, space 0, times 0 [ 654.858863][T14894] CPU: 0 UID: 0 PID: 14894 Comm: syz.0.1691 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.858895][T14894] Tainted: [L]=SOFTLOCKUP [ 654.858901][T14894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 654.858912][T14894] Call Trace: [ 654.858918][T14894] [ 654.858926][T14894] dump_stack_lvl+0x100/0x190 [ 654.858951][T14894] should_fail_ex.cold+0x5/0xa [ 654.858973][T14894] should_failslab+0xc2/0x120 [ 654.858997][T14894] kmem_cache_alloc_noprof+0x91/0x6a0 [ 654.859019][T14894] ? __kernfs_new_node+0xd2/0xa10 [ 654.859052][T14894] __kernfs_new_node+0xd2/0xa10 [ 654.859083][T14894] ? __pfx___kernfs_new_node+0x10/0x10 [ 654.859117][T14894] ? find_held_lock+0x2b/0x80 [ 654.859139][T14894] ? kernfs_root+0xee/0x2a0 [ 654.859162][T14894] ? kernfs_root+0xee/0x2a0 [ 654.859192][T14894] kernfs_new_node+0x117/0x150 [ 654.859224][T14894] __kernfs_create_file+0x53/0x350 [ 654.859248][T14894] sysfs_add_file_mode_ns+0x207/0x3c0 [ 654.859278][T14894] sysfs_create_file_ns+0x145/0x1e0 [ 654.859302][T14894] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 654.859325][T14894] ? class_to_subsys+0x10f/0x150 [ 654.859356][T14894] ? do_raw_spin_unlock+0x145/0x1e0 [ 654.859378][T14894] class_create_file_ns+0x3d/0x60 [ 654.859406][T14894] bond_create_sysfs+0x142/0x200 [ 654.859500][T14894] bond_net_init+0x178/0x360 [ 654.859542][T14894] ? __pfx_bond_net_init+0x10/0x10 [ 654.859566][T14894] ops_init+0x1e2/0x5f0 [ 654.859592][T14894] setup_net+0x118/0x3a0 [ 654.859615][T14894] ? __pfx_setup_net+0x10/0x10 [ 654.859638][T14894] ? mutex_init_lockdep+0xf1/0x120 [ 654.859671][T14894] copy_net_ns+0x46f/0x7c0 [ 654.859697][T14894] create_new_namespaces+0x3ea/0xac0 [ 654.859740][T14894] unshare_nsproxy_namespaces+0xf2/0x220 [ 654.859761][T14894] ksys_unshare+0x438/0xab0 [ 654.859783][T14894] ? __pfx_ksys_unshare+0x10/0x10 [ 654.859815][T14894] __x64_sys_unshare+0x31/0x40 [ 654.859836][T14894] do_syscall_64+0x115/0x840 [ 654.859854][T14894] ? clear_bhb_loop+0x40/0x90 [ 654.859876][T14894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.859899][T14894] RIP: 0033:0x7fc84e79de59 [ 654.859915][T14894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.859933][T14894] RSP: 002b:00007fc84f6f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 654.859952][T14894] RAX: ffffffffffffffda RBX: 00007fc84ea25fa0 RCX: 00007fc84e79de59 [ 654.859963][T14894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 654.859974][T14894] RBP: 00007fc84e833e6f R08: 0000000000000000 R09: 0000000000000000 [ 654.859985][T14894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.859996][T14894] R13: 00007fc84ea26038 R14: 00007fc84ea25fa0 R15: 00007ffda18563a8 [ 654.860019][T14894] [ 656.140434][ T7475] Bluetooth: hci11: command tx timeout [ 656.287448][T14879] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.315003][T14879] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.341323][T14879] bridge_slave_0: entered allmulticast mode [ 656.371853][T14879] bridge_slave_0: entered promiscuous mode [ 656.395946][T14879] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.418558][T14879] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.445464][T14879] bridge_slave_1: entered allmulticast mode [ 656.479607][T14879] bridge_slave_1: entered promiscuous mode [ 656.552011][T14879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.585458][T14879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.674577][T14879] team0: Port device team_slave_0 added [ 656.720439][T14879] team0: Port device team_slave_1 added [ 656.824604][T14879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.851555][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.926214][T14879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.957127][T14879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.975300][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.023044][T14918] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 657.055050][T14879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.176470][T14879] hsr_slave_0: entered promiscuous mode [ 657.189618][T14879] hsr_slave_1: entered promiscuous mode [ 657.203698][T14879] debugfs: 'hsr0' already exists in 'hsr' [ 657.217262][T14879] Cannot create hsr debugfs directory [ 658.006539][T14879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 658.029300][T14879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 658.048323][T14879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 658.073016][T14879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 658.088838][T14879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 658.109009][T14879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.199347][ T7475] Bluetooth: hci11: command tx timeout [ 658.234717][T14879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 658.289008][T14879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 658.515189][T14879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.564658][T14879] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.607776][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 658.619114][ T7821] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.626223][ T7821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.704351][ T6418] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.711584][ T6418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.748404][T14957] kexec: Could not allocate control_code_buffer [ 659.925362][T14879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.042798][T14879] veth0_vlan: entered promiscuous mode [ 660.073662][T14879] veth1_vlan: entered promiscuous mode [ 660.165484][T14879] veth0_macvtap: entered promiscuous mode [ 660.186920][T14879] veth1_macvtap: entered promiscuous mode [ 660.237291][T14879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.265511][T14879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.273641][ T7475] Bluetooth: hci11: command tx timeout [ 660.289232][ T6939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.321101][ T6939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.351832][ T6939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.403880][ T6939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.619330][ T6387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.653654][ T6387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.733127][ T6387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.761195][ T6387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.027829][T14981] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 661.060979][T14976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1705'. [ 661.117034][T14976] vlan1: entered allmulticast mode [ 661.131173][T14976] veth0_vlan: entered allmulticast mode [ 662.022095][ T7475] Bluetooth: hci11: unexpected event 0x10 length: 124 > 1 [ 662.024401][ T7475] Bluetooth: hci11: hardware error 0x00 [ 662.942754][T15010] netlink: 202 bytes leftover after parsing attributes in process `syz.2.1709'. [ 663.310627][T10345] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 663.325486][T10345] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 663.333670][T10345] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 663.354482][T10345] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 663.362122][T10345] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 664.089693][ T7475] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 665.043634][T15013] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.067639][T15013] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.082784][T15013] bridge_slave_0: entered allmulticast mode [ 665.105861][T15013] bridge_slave_0: entered promiscuous mode [ 665.128965][T15013] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.145825][T15013] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.161887][T15013] bridge_slave_1: entered allmulticast mode [ 665.181680][T15013] bridge_slave_1: entered promiscuous mode [ 665.257691][T15013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.288214][T15013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.367033][T15013] team0: Port device team_slave_0 added [ 665.387309][T15013] team0: Port device team_slave_1 added [ 665.442797][ T7475] Bluetooth: hci12: command tx timeout [ 665.475904][T15013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.496477][T15013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.561998][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'. [ 665.570923][T15013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.589707][T15013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.614412][T15013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.678785][T15013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.834256][T15013] hsr_slave_0: entered promiscuous mode [ 665.849517][T15013] hsr_slave_1: entered promiscuous mode [ 665.863843][T15013] debugfs: 'hsr0' already exists in 'hsr' [ 665.879194][T15013] Cannot create hsr debugfs directory [ 666.384361][T15013] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.562774][T15013] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.732022][T15013] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.905019][T15013] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.295019][T15013] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 667.318417][T15013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.337081][T15013] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 667.372790][T15013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.388035][T15013] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 667.417091][T15013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.433333][T15013] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 667.466160][T15013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.514409][ T7475] Bluetooth: hci12: command tx timeout [ 667.639260][T15013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.687556][T15013] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.711455][ T6418] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.718611][ T6418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.763315][ T6418] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.770490][ T6418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.555811][T15013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.674711][T15013] veth0_vlan: entered promiscuous mode [ 668.717307][T15013] veth1_vlan: entered promiscuous mode [ 668.809029][T15013] veth0_macvtap: entered promiscuous mode [ 668.830317][T15013] veth1_macvtap: entered promiscuous mode [ 668.879078][T15013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.907670][T15013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.940471][T10171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.976024][T10171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.002061][T10171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.055090][T10171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.245792][T10171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.285831][T10171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.351702][T10171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.368931][T10171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.588013][ T7475] Bluetooth: hci12: command tx timeout [ 670.218640][ T7475] Bluetooth: hci1: command 0x0406 tx timeout [ 670.901581][T15115] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 671.650627][T10345] Bluetooth: hci12: command tx timeout [ 671.930612][T15127] binder: 15126:15127 ioctl c00c6211 0 returned -14 [ 672.124578][ T7475] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 672.146289][ T7475] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 672.156923][ T7475] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 672.178708][ T7475] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 672.188333][ T7475] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 673.236890][T15136] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.281258][T15136] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.300065][T15136] bridge_slave_0: entered allmulticast mode [ 673.312479][T15136] bridge_slave_0: entered promiscuous mode [ 673.331145][T15136] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.348536][T15136] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.370933][T15136] bridge_slave_1: entered allmulticast mode [ 673.391457][T15136] bridge_slave_1: entered promiscuous mode [ 673.461941][T15136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.489466][T15136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.559116][T15136] team0: Port device team_slave_0 added [ 673.581457][T15136] team0: Port device team_slave_1 added [ 673.635366][T15136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.652232][T15136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.723973][T15136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.750945][T15136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.774164][T15136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.834793][T15136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.947800][T15136] hsr_slave_0: entered promiscuous mode [ 673.966590][T15136] hsr_slave_1: entered promiscuous mode [ 673.982499][T15136] debugfs: 'hsr0' already exists in 'hsr' [ 673.998478][T15136] Cannot create hsr debugfs directory [ 674.278069][ T7475] Bluetooth: hci13: command tx timeout [ 674.402648][T15136] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.559935][T15136] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.672944][T15136] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.771793][T15136] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.141448][T15136] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 675.161377][T15136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 675.188055][T15136] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 675.207574][T15136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 675.222923][T15136] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 675.237934][T15136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 675.246152][T15136] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 675.256311][T15136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 675.516688][T15136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.558837][T15136] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.585750][ T7822] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.592946][ T7822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.640693][ T7822] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.647856][ T7822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.921681][T13805] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 4 with max blocks 8 with error 117 [ 675.957009][T13805] EXT4-fs (sda1): This should not happen!! Data will be lost [ 675.957009][T13805] [ 676.346858][ T7475] Bluetooth: hci13: command tx timeout [ 676.746583][T15136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.278608][T15136] veth0_vlan: entered promiscuous mode [ 677.300986][T15136] veth1_vlan: entered promiscuous mode [ 677.392004][T15136] veth0_macvtap: entered promiscuous mode [ 677.436682][T15136] veth1_macvtap: entered promiscuous mode [ 677.566458][T15136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.670412][T15136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.839393][ T6387] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.855317][ T6387] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.932799][ T6387] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.960550][ T6387] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.234250][T13805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.282793][T13805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.416140][ T7475] Bluetooth: hci13: command tx timeout [ 678.630529][T10171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.667935][T10171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.014613][T10345] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 680.030995][T10345] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 680.041311][T10345] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 680.059733][T10345] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 680.076311][T10345] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 680.485608][T10345] Bluetooth: hci13: command tx timeout [ 681.837505][T15224] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.860159][T15224] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.883968][T15224] bridge_slave_0: entered allmulticast mode [ 681.930381][T15224] bridge_slave_0: entered promiscuous mode [ 681.956269][T15224] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.986374][T15224] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.033912][T15224] bridge_slave_1: entered allmulticast mode [ 682.062888][T15224] bridge_slave_1: entered promiscuous mode [ 682.167939][T10345] Bluetooth: hci14: command tx timeout [ 682.182825][T15224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.211842][T15224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.291947][T15224] team0: Port device team_slave_0 added [ 682.311529][T15224] team0: Port device team_slave_1 added [ 682.381419][T15224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.397348][T15224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.465423][T15224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.495468][T15224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.511500][T15224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.586750][T15224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.742883][T15224] hsr_slave_0: entered promiscuous mode [ 682.765687][T15224] hsr_slave_1: entered promiscuous mode [ 682.811710][T15224] debugfs: 'hsr0' already exists in 'hsr' [ 682.845524][T15224] Cannot create hsr debugfs directory [ 683.439218][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.452743][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.634103][T15224] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.930571][T15224] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.123737][T15224] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.229137][T10345] Bluetooth: hci14: command tx timeout [ 684.304636][T15224] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.011684][T15224] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 685.042630][T15224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 685.077103][T15224] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 685.107689][T15224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 685.137429][T15224] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 685.189037][T15274] FAULT_INJECTION: forcing a failure. [ 685.189037][T15274] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 685.207279][T15224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 685.240159][T15224] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 685.317855][T15224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 685.360011][T15274] CPU: 0 UID: 0 PID: 15274 Comm: syz.5.1744 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.360042][T15274] Tainted: [L]=SOFTLOCKUP [ 685.360049][T15274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 685.360059][T15274] Call Trace: [ 685.360065][T15274] [ 685.360072][T15274] dump_stack_lvl+0x100/0x190 [ 685.360098][T15274] should_fail_ex.cold+0x5/0xa [ 685.360115][T15274] ? prepare_alloc_pages+0x16d/0x5f0 [ 685.360143][T15274] should_fail_alloc_page+0xeb/0x140 [ 685.360172][T15274] prepare_alloc_pages+0x1f0/0x5f0 [ 685.360200][T15274] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 685.360232][T15274] ? stack_trace_save+0x8e/0xc0 [ 685.360274][T15274] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 685.360308][T15274] ? kasan_save_stack+0x3f/0x50 [ 685.360328][T15274] ? kasan_save_stack+0x30/0x50 [ 685.360348][T15274] ? kasan_save_track+0x14/0x30 [ 685.360367][T15274] ? __kasan_kmalloc+0xaa/0xb0 [ 685.360386][T15274] ? __kmalloc_noprof+0x322/0x820 [ 685.360405][T15274] ? copy_splice_read+0x1a3/0xbb0 [ 685.360500][T15274] ? sock_splice_read+0xe9/0x110 [ 685.360522][T15274] ? do_splice_read+0x285/0x370 [ 685.360549][T15274] ? splice_file_to_pipe+0x82/0x120 [ 685.360566][T15274] ? do_sendfile+0x366/0xe20 [ 685.360590][T15274] ? __x64_sys_sendfile64+0x1d8/0x220 [ 685.360624][T15274] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 685.360653][T15274] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 685.360672][T15274] ? rcu_is_watching+0x12/0xc0 [ 685.360692][T15274] ? trace_kmalloc+0xeb/0x110 [ 685.360714][T15274] ? __kasan_kmalloc+0xaa/0xb0 [ 685.360738][T15274] ? copy_splice_read+0x1a3/0xbb0 [ 685.360771][T15274] copy_splice_read+0x1e1/0xbb0 [ 685.360802][T15274] ? trace_contention_end+0x126/0x160 [ 685.360832][T15274] ? __mutex_lock+0x26d/0x1bd0 [ 685.360852][T15274] ? __pfx_copy_splice_read+0x10/0x10 [ 685.360886][T15274] ? __pfx___mutex_lock+0x10/0x10 [ 685.360912][T15274] sock_splice_read+0xe9/0x110 [ 685.360936][T15274] ? __pfx_sock_splice_read+0x10/0x10 [ 685.360959][T15274] do_splice_read+0x285/0x370 [ 685.360992][T15274] splice_file_to_pipe+0x82/0x120 [ 685.361013][T15274] do_sendfile+0x366/0xe20 [ 685.361044][T15274] ? __pfx_do_sendfile+0x10/0x10 [ 685.361069][T15274] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 685.361101][T15274] ? __fget_files+0x21f/0x3d0 [ 685.361135][T15274] __x64_sys_sendfile64+0x1d8/0x220 [ 685.361153][T15274] ? ksys_write+0x1ac/0x250 [ 685.361181][T15274] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 685.361207][T15274] do_syscall_64+0x115/0x840 [ 685.361224][T15274] ? clear_bhb_loop+0x40/0x90 [ 685.361246][T15274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.361266][T15274] RIP: 0033:0x7fb41939de59 [ 685.361282][T15274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.361306][T15274] RSP: 002b:00007fb41a350028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 685.361324][T15274] RAX: ffffffffffffffda RBX: 00007fb419625fa0 RCX: 00007fb41939de59 [ 685.361337][T15274] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 685.361347][T15274] RBP: 00007fb41a350090 R08: 0000000000000000 R09: 0000000000000000 [ 685.361358][T15274] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 685.361370][T15274] R13: 00007fb419626038 R14: 00007fb419625fa0 R15: 00007ffec6824448 [ 685.361393][T15274] [ 686.315497][T10345] Bluetooth: hci14: command tx timeout [ 686.516123][T15284] FAULT_INJECTION: forcing a failure. [ 686.516123][T15284] name fail_futex, interval 1, probability 0, space 0, times 0 [ 686.577571][T15284] CPU: 0 UID: 0 PID: 15284 Comm: syz.1.1746 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.577601][T15284] Tainted: [L]=SOFTLOCKUP [ 686.577607][T15284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 686.577618][T15284] Call Trace: [ 686.577624][T15284] [ 686.577632][T15284] dump_stack_lvl+0x100/0x190 [ 686.577657][T15284] should_fail_ex.cold+0x5/0xa [ 686.577678][T15284] get_futex_key+0x1d2/0x14f0 [ 686.577710][T15284] ? __pfx_get_futex_key+0x10/0x10 [ 686.577746][T15284] futex_wake+0xf4/0x5e0 [ 686.577771][T15284] ? __pfx_futex_wake+0x10/0x10 [ 686.577791][T15284] ? kasan_quarantine_put+0x104/0x240 [ 686.577814][T15284] ? putname+0xb1/0x110 [ 686.577831][T15284] ? kmem_cache_free+0x127/0x6b0 [ 686.577859][T15284] ? do_sys_openat2+0x1b6/0x1e0 [ 686.577885][T15284] do_futex+0x2b2/0x440 [ 686.577903][T15284] ? __pfx_do_futex+0x10/0x10 [ 686.577920][T15284] ? __pfx_do_sys_openat2+0x10/0x10 [ 686.577943][T15284] ? __fget_files+0x21f/0x3d0 [ 686.577971][T15284] __x64_sys_futex+0x34f/0x4d0 [ 686.577990][T15284] ? __x64_sys_openat+0x12d/0x210 [ 686.578013][T15284] ? __pfx___x64_sys_futex+0x10/0x10 [ 686.578039][T15284] do_syscall_64+0x115/0x840 [ 686.578056][T15284] ? clear_bhb_loop+0x40/0x90 [ 686.578078][T15284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.578097][T15284] RIP: 0033:0x7f1c6f79de59 [ 686.578112][T15284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.578129][T15284] RSP: 002b:00007f1c6d9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 686.578147][T15284] RAX: ffffffffffffffda RBX: 00007f1c6fa25fa8 RCX: 00007f1c6f79de59 [ 686.578159][T15284] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1c6fa25fac [ 686.578170][T15284] RBP: 00007f1c6fa25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 686.578181][T15284] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 686.578192][T15284] R13: 00007f1c6fa26038 R14: 00007ffccfc2d680 R15: 00007ffccfc2d768 [ 686.578214][T15284] [ 686.816756][T15224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.831385][T15224] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.861176][T15224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 686.871584][T15224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 687.107179][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.114330][ T6939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.173507][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.180622][ T6939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.381813][ T7475] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 687.420409][ T7475] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 687.476283][ T7475] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 687.552463][ T7475] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 687.595550][ T7475] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 688.366909][T10345] Bluetooth: hci14: command tx timeout [ 688.469298][T15224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.848218][T15315] can: request_module (can-proto-4) failed. [ 689.706094][T15224] veth0_vlan: entered promiscuous mode [ 689.719402][T10345] Bluetooth: hci15: command tx timeout [ 689.993050][T15224] veth1_vlan: entered promiscuous mode [ 690.301943][T15224] veth0_macvtap: entered promiscuous mode [ 690.387905][T15224] veth1_macvtap: entered promiscuous mode [ 690.425839][T15286] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.458767][T15286] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.491429][T15286] bridge_slave_0: entered allmulticast mode [ 690.521431][T15286] bridge_slave_0: entered promiscuous mode [ 690.549762][T15286] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.576804][T15286] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.606209][T15286] bridge_slave_1: entered allmulticast mode [ 690.628379][T15286] bridge_slave_1: entered promiscuous mode [ 690.766709][T15286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.811013][T15224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.827519][T15351] FAULT_INJECTION: forcing a failure. [ 690.827519][T15351] name failslab, interval 1, probability 0, space 0, times 0 [ 690.897014][T15286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.962048][T15224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.985023][T15351] CPU: 0 UID: 0 PID: 15351 Comm: syz.5.1751 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.985055][T15351] Tainted: [L]=SOFTLOCKUP [ 690.985061][T15351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 690.985072][T15351] Call Trace: [ 690.985078][T15351] [ 690.985085][T15351] dump_stack_lvl+0x100/0x190 [ 690.985111][T15351] should_fail_ex.cold+0x5/0xa [ 690.985140][T15351] should_failslab+0xc2/0x120 [ 690.985165][T15351] __kmalloc_noprof+0xfc/0x820 [ 690.985186][T15351] ? constrain_params_by_rules+0x175/0xd20 [ 690.985289][T15351] constrain_params_by_rules+0x175/0xd20 [ 690.985316][T15351] ? stack_depot_save_flags+0x27/0x9d0 [ 690.985348][T15351] ? kasan_save_stack+0x3f/0x50 [ 690.985369][T15351] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 690.985396][T15351] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 690.985439][T15351] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 690.985464][T15351] ? snd_pcm_oss_ioctl+0x1870/0x3790 [ 690.985490][T15351] ? __x64_sys_ioctl+0x18e/0x210 [ 690.985512][T15351] ? do_syscall_64+0x115/0x840 [ 690.985543][T15351] ? snd_interval_refine+0x2d0/0x580 [ 690.985581][T15351] snd_pcm_hw_refine+0x82a/0xb40 [ 690.985610][T15351] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 690.985640][T15351] ? __kasan_kmalloc+0xaa/0xb0 [ 690.985663][T15351] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 690.985690][T15351] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 690.985716][T15351] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 690.985745][T15351] snd_pcm_hw_param_near.constprop.0+0x5d0/0x850 [ 690.985776][T15351] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 690.985805][T15351] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 690.985848][T15351] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 690.985882][T15351] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 690.985920][T15351] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 690.985948][T15351] ? __pfx___mutex_lock+0x10/0x10 [ 690.985963][T15351] ? find_held_lock+0x2b/0x80 [ 690.985985][T15351] ? tomoyo_path_number_perm+0x28f/0x580 [ 690.986022][T15351] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 690.986054][T15351] snd_pcm_oss_get_formats+0x7d/0x350 [ 690.986083][T15351] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 690.986116][T15351] snd_pcm_oss_ioctl+0x1870/0x3790 [ 690.986144][T15351] ? find_held_lock+0x2b/0x80 [ 690.986164][T15351] ? __fget_files+0x215/0x3d0 [ 690.986189][T15351] ? hook_file_ioctl_common+0x140/0x440 [ 690.986219][T15351] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 690.986249][T15351] ? __fget_files+0x21f/0x3d0 [ 690.986279][T15351] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 690.986307][T15351] __x64_sys_ioctl+0x18e/0x210 [ 690.986333][T15351] do_syscall_64+0x115/0x840 [ 690.986350][T15351] ? clear_bhb_loop+0x40/0x90 [ 690.986372][T15351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.986391][T15351] RIP: 0033:0x7fb41939de59 [ 690.986408][T15351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.986429][T15351] RSP: 002b:00007fb41a30e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.986447][T15351] RAX: ffffffffffffffda RBX: 00007fb419626180 RCX: 00007fb41939de59 [ 690.986459][T15351] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000007 [ 690.986470][T15351] RBP: 00007fb419433e6f R08: 0000000000000000 R09: 0000000000000000 [ 690.986482][T15351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.986492][T15351] R13: 00007fb419626218 R14: 00007fb419626180 R15: 00007ffec6824448 [ 690.986515][T15351] [ 691.541465][T15354] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 691.615727][T15355] FAULT_INJECTION: forcing a failure. [ 691.615727][T15355] name failslab, interval 1, probability 0, space 0, times 0 [ 691.629132][T15355] CPU: 0 UID: 0 PID: 15355 Comm: syz.5.1752 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.629162][T15355] Tainted: [L]=SOFTLOCKUP [ 691.629169][T15355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 691.629179][T15355] Call Trace: [ 691.629186][T15355] [ 691.629193][T15355] dump_stack_lvl+0x100/0x190 [ 691.629229][T15355] should_fail_ex.cold+0x5/0xa [ 691.629250][T15355] should_failslab+0xc2/0x120 [ 691.629275][T15355] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 691.629296][T15355] ? _raw_spin_unlock+0x28/0x50 [ 691.629322][T15355] ? alloc_inode+0x183/0x250 [ 691.629349][T15355] alloc_inode+0x183/0x250 [ 691.629371][T15355] new_inode+0x22/0x1c0 [ 691.629392][T15355] ? dput.part.0+0x4f/0x240 [ 691.629419][T15355] simple_fill_super+0x2d9/0x680 [ 691.629440][T15355] ? __pfx_nfsd_fill_super+0x10/0x10 [ 691.629550][T15355] nfsd_fill_super+0x98/0x560 [ 691.629577][T15355] ? __pfx_nfsd_fill_super+0x10/0x10 [ 691.629602][T15355] get_tree_keyed+0x10e/0x1d0 [ 691.629631][T15355] vfs_get_tree+0x92/0x320 [ 691.629655][T15355] path_mount+0x7d0/0x23d0 [ 691.629680][T15355] ? __pfx_path_mount+0x10/0x10 [ 691.629698][T15355] ? lockdep_hardirqs_on+0x78/0x100 [ 691.629729][T15355] ? putname+0xb1/0x110 [ 691.629745][T15355] ? kmem_cache_free+0x127/0x6b0 [ 691.629781][T15355] ? __x64_sys_mount+0x293/0x310 [ 691.629800][T15355] __x64_sys_mount+0x293/0x310 [ 691.629820][T15355] ? __pfx___x64_sys_mount+0x10/0x10 [ 691.629847][T15355] do_syscall_64+0x115/0x840 [ 691.629862][T15355] ? clear_bhb_loop+0x40/0x90 [ 691.629885][T15355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.629904][T15355] RIP: 0033:0x7fb41939de59 [ 691.629921][T15355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.629940][T15355] RSP: 002b:00007fb41a32f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 691.629958][T15355] RAX: ffffffffffffffda RBX: 00007fb419626090 RCX: 00007fb41939de59 [ 691.629970][T15355] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 691.629981][T15355] RBP: 00007fb419433e6f R08: 0000000000000000 R09: 0000000000000000 [ 691.629992][T15355] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 691.630002][T15355] R13: 00007fb419626128 R14: 00007fb419626090 R15: 00007ffec6824448 [ 691.630025][T15355] [ 691.886469][T10345] Bluetooth: hci15: command tx timeout [ 692.256595][T15286] team0: Port device team_slave_0 added [ 692.282849][T15286] team0: Port device team_slave_1 added [ 692.309995][ T6387] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.382324][ T6387] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.422426][ T6387] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.441116][T15286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.448834][T15286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.475542][T15286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.518601][ T6387] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.559191][T15286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.611498][T15286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.689696][T15286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.884666][T15286] hsr_slave_0: entered promiscuous mode [ 692.901434][T15286] hsr_slave_1: entered promiscuous mode [ 692.916536][T15286] debugfs: 'hsr0' already exists in 'hsr' [ 692.932467][T15286] Cannot create hsr debugfs directory [ 692.951657][T10171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.995919][T10171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.159584][T10171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.184292][T10171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.780637][T15286] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.937441][T10345] Bluetooth: hci15: command tx timeout [ 694.312080][T15361] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.682368][T15286] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.835327][T15286] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.935655][T15286] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.336025][T15375] program syz.1.1755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.390780][T15375] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[15013] was attempted by ""[15375] [ 695.912483][T15383] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1757'. [ 695.934822][ T7821] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.006581][T10345] Bluetooth: hci15: command tx timeout [ 696.027240][T15382] input: jJǸ-9%vJ86 as /devices/virtual/input/input40 [ 696.220975][T15286] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 696.311966][T15286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.360355][T15286] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 696.426290][T15286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.471953][T15286] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 696.536094][T15286] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.591560][T15286] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 696.652100][T15286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 697.131124][T15286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.241203][T15286] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.316946][ T7822] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.324121][ T7822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.425372][T15402] netlink: 74 bytes leftover after parsing attributes in process `syz.7.1760'. [ 697.456205][ T6418] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.463357][ T6418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.294516][T15415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1763'. [ 699.543014][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'. [ 699.783977][T15436] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1765'. [ 700.109996][T15436] bond0: (slave bond_slave_0): Releasing backup interface [ 700.329926][T15286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.401468][T15443] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1766'. [ 701.286717][ T29] audit: type=1800 audit(8277292259.117:26): pid=15453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1768" name="sr0" dev="devtmpfs" ino=2916 res=0 errno=0 [ 701.403878][T15286] veth0_vlan: entered promiscuous mode [ 701.464141][T15286] veth1_vlan: entered promiscuous mode [ 701.605061][T15286] veth0_macvtap: entered promiscuous mode [ 701.638864][T15286] veth1_macvtap: entered promiscuous mode [ 701.725351][T15286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.771951][T15286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.825291][T14227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.855516][T14227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.921569][T14227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.963311][T14227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.232814][ T6418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.269441][ T6418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.376438][T14227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.406040][T14227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.056077][T15494] FAULT_INJECTION: forcing a failure. [ 705.056077][T15494] name failslab, interval 1, probability 0, space 0, times 0 [ 705.128846][T15494] CPU: 0 UID: 0 PID: 15494 Comm: syz.4.1773 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.128878][T15494] Tainted: [L]=SOFTLOCKUP [ 705.128884][T15494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 705.128894][T15494] Call Trace: [ 705.128901][T15494] [ 705.128908][T15494] dump_stack_lvl+0x100/0x190 [ 705.128938][T15494] should_fail_ex.cold+0x5/0xa [ 705.128960][T15494] should_failslab+0xc2/0x120 [ 705.128986][T15494] __kmalloc_noprof+0xfc/0x820 [ 705.129008][T15494] ? ops_init+0x77/0x5f0 [ 705.129036][T15494] ops_init+0x77/0x5f0 [ 705.129061][T15494] setup_net+0x118/0x3a0 [ 705.129083][T15494] ? __pfx_setup_net+0x10/0x10 [ 705.129106][T15494] ? mutex_init_lockdep+0xf1/0x120 [ 705.129140][T15494] copy_net_ns+0x46f/0x7c0 [ 705.129167][T15494] create_new_namespaces+0x3ea/0xac0 [ 705.129206][T15494] unshare_nsproxy_namespaces+0xf2/0x220 [ 705.129227][T15494] ksys_unshare+0x438/0xab0 [ 705.129250][T15494] ? __pfx_ksys_unshare+0x10/0x10 [ 705.129280][T15494] __x64_sys_unshare+0x31/0x40 [ 705.129302][T15494] do_syscall_64+0x115/0x840 [ 705.129321][T15494] ? clear_bhb_loop+0x40/0x90 [ 705.129345][T15494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.129364][T15494] RIP: 0033:0x7fd729d9de59 [ 705.129380][T15494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.129398][T15494] RSP: 002b:00007fd72abed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 705.129417][T15494] RAX: ffffffffffffffda RBX: 00007fd72a025fa0 RCX: 00007fd729d9de59 [ 705.129428][T15494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 705.129439][T15494] RBP: 00007fd729e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 705.129450][T15494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.129460][T15494] R13: 00007fd72a026038 R14: 00007fd72a025fa0 R15: 00007ffe8d2ab208 [ 705.129482][T15494] [ 705.658067][T15525] FAULT_INJECTION: forcing a failure. [ 705.658067][T15525] name fail_futex, interval 1, probability 0, space 0, times 0 [ 705.713653][T15525] CPU: 0 UID: 0 PID: 15525 Comm: syz.7.1779 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.713685][T15525] Tainted: [L]=SOFTLOCKUP [ 705.713692][T15525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 705.713703][T15525] Call Trace: [ 705.713709][T15525] [ 705.713716][T15525] dump_stack_lvl+0x100/0x190 [ 705.713741][T15525] should_fail_ex.cold+0x5/0xa [ 705.713762][T15525] get_futex_key+0x1d2/0x14f0 [ 705.713795][T15525] ? __pfx_get_futex_key+0x10/0x10 [ 705.713822][T15525] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 705.713847][T15525] ? userfaultfd_unmap_complete+0x267/0x380 [ 705.713879][T15525] ? do_mmap+0x93f/0x12f0 [ 705.713902][T15525] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 705.713936][T15525] futex_wake+0xf4/0x5e0 [ 705.713961][T15525] ? __pfx_futex_wake+0x10/0x10 [ 705.713981][T15525] ? up_write+0x2e5/0x5c0 [ 705.714001][T15525] ? vm_mmap_pgoff+0x103/0x470 [ 705.714029][T15525] do_futex+0x2b2/0x440 [ 705.714056][T15525] ? __pfx_do_futex+0x10/0x10 [ 705.714080][T15525] __x64_sys_futex+0x34f/0x4d0 [ 705.714099][T15525] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 705.714123][T15525] ? __pfx___x64_sys_futex+0x10/0x10 [ 705.714149][T15525] do_syscall_64+0x115/0x840 [ 705.714167][T15525] ? clear_bhb_loop+0x40/0x90 [ 705.714189][T15525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.714208][T15525] RIP: 0033:0x7f06abb9de59 [ 705.714223][T15525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.714242][T15525] RSP: 002b:00007f06acad50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 705.714261][T15525] RAX: ffffffffffffffda RBX: 00007f06abe25fa8 RCX: 00007f06abb9de59 [ 705.714273][T15525] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f06abe25fac [ 705.714284][T15525] RBP: 00007f06abe25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 705.714295][T15525] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 705.714306][T15525] R13: 00007f06abe26038 R14: 00007ffd8986ee10 R15: 00007ffd8986eef8 [ 705.714329][T15525] [ 706.207128][T10345] Bluetooth: hci5: command 0x0406 tx timeout [ 706.636074][T15545] random: crng reseeded on system resumption [ 706.694970][T15546] FAULT_INJECTION: forcing a failure. [ 706.694970][T15546] name failslab, interval 1, probability 0, space 0, times 0 [ 706.999505][T15546] CPU: 0 UID: 0 PID: 15546 Comm: syz.1.1782 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.999537][T15546] Tainted: [L]=SOFTLOCKUP [ 706.999543][T15546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 706.999553][T15546] Call Trace: [ 706.999560][T15546] [ 706.999566][T15546] dump_stack_lvl+0x100/0x190 [ 706.999593][T15546] should_fail_ex.cold+0x5/0xa [ 706.999613][T15546] should_failslab+0xc2/0x120 [ 706.999642][T15546] __kmalloc_noprof+0xfc/0x820 [ 706.999662][T15546] ? rcu_is_watching+0x12/0xc0 [ 706.999683][T15546] ? tomoyo_realpath_from_path+0xb6/0x690 [ 706.999717][T15546] tomoyo_realpath_from_path+0xb6/0x690 [ 706.999747][T15546] tomoyo_check_open_permission+0x2af/0x3c0 [ 706.999772][T15546] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 706.999800][T15546] ? hook_file_open+0x24f/0x8f0 [ 706.999838][T15546] ? path_get+0x61/0x80 [ 706.999860][T15546] tomoyo_file_open+0x6b/0x90 [ 706.999890][T15546] security_file_open+0xb5/0x1e0 [ 706.999914][T15546] do_dentry_open+0x588/0x14d0 [ 706.999948][T15546] vfs_open+0x82/0x3f0 [ 706.999998][T15546] path_openat+0x2873/0x4280 [ 707.000037][T15546] ? __pfx_path_openat+0x10/0x10 [ 707.000073][T15546] do_file_open+0x20e/0x430 [ 707.000104][T15546] ? __pfx_do_file_open+0x10/0x10 [ 707.000149][T15546] ? alloc_fd+0x471/0x7a0 [ 707.000179][T15546] ? do_getname+0x191/0x390 [ 707.000203][T15546] do_sys_openat2+0x10f/0x1e0 [ 707.000226][T15546] ? __pfx_do_sys_openat2+0x10/0x10 [ 707.000258][T15546] __x64_sys_openat+0x12d/0x210 [ 707.000282][T15546] ? __pfx___x64_sys_openat+0x10/0x10 [ 707.000313][T15546] do_syscall_64+0x115/0x840 [ 707.000330][T15546] ? clear_bhb_loop+0x40/0x90 [ 707.000353][T15546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.000372][T15546] RIP: 0033:0x7f1c6f79de59 [ 707.000389][T15546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.000406][T15546] RSP: 002b:00007f1c6d9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 707.000425][T15546] RAX: ffffffffffffffda RBX: 00007f1c6fa26180 RCX: 00007f1c6f79de59 [ 707.000436][T15546] RDX: 000000000014fa02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 707.000448][T15546] RBP: 00007f1c6f833e6f R08: 0000000000000000 R09: 0000000000000000 [ 707.000459][T15546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.000470][T15546] R13: 00007f1c6fa26218 R14: 00007f1c6fa26180 R15: 00007ffccfc2d768 [ 707.000494][T15546] [ 707.339331][T10345] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 707.350783][T10345] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 707.358994][T10345] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 707.366767][T10345] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 707.386724][T10345] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 707.602536][T15546] ERROR: Out of memory at tomoyo_realpath_from_path. [ 707.957878][T15568] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1787'. [ 708.985568][T15552] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.993827][T15552] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.001544][T15552] bridge_slave_0: entered allmulticast mode [ 709.031718][T15552] bridge_slave_0: entered promiscuous mode [ 709.051767][T15552] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.070920][T15552] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.085897][T15552] bridge_slave_1: entered allmulticast mode [ 709.102273][T15552] bridge_slave_1: entered promiscuous mode [ 709.296764][T15552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.340572][T15552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.451762][T15552] team0: Port device team_slave_0 added [ 709.457802][ T7475] Bluetooth: hci16: command tx timeout [ 709.482526][T15552] team0: Port device team_slave_1 added [ 709.976610][T15596] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 4 with max blocks 3 with error 117 [ 710.031989][T15552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.051313][T15599] FAULT_INJECTION: forcing a failure. [ 710.051313][T15599] name fail_futex, interval 1, probability 0, space 0, times 0 [ 710.076506][T15596] EXT4-fs (sda1): This should not happen!! Data will be lost [ 710.076506][T15596] [ 710.086221][T15552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.156748][T15552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.167773][T15599] CPU: 0 UID: 0 PID: 15599 Comm: syz.4.1792 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.167804][T15599] Tainted: [L]=SOFTLOCKUP [ 710.167812][T15599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 710.167823][T15599] Call Trace: [ 710.167829][T15599] [ 710.167836][T15599] dump_stack_lvl+0x100/0x190 [ 710.167862][T15599] should_fail_ex.cold+0x5/0xa [ 710.167884][T15599] get_futex_key+0x1d2/0x14f0 [ 710.167916][T15599] ? __pfx_get_futex_key+0x10/0x10 [ 710.167944][T15599] ? __pfx___up_read+0x10/0x10 [ 710.167968][T15599] ? do_user_addr_fault+0x7de/0x12f0 [ 710.167991][T15599] ? do_user_addr_fault+0x7de/0x12f0 [ 710.168020][T15599] futex_wake+0xf4/0x5e0 [ 710.168042][T15599] ? irqentry_exit+0x24d/0xa00 [ 710.168072][T15599] ? lockdep_hardirqs_on+0x78/0x100 [ 710.168101][T15599] ? __pfx_futex_wake+0x10/0x10 [ 710.168133][T15599] do_futex+0x2b2/0x440 [ 710.168158][T15599] ? __pfx_do_futex+0x10/0x10 [ 710.168177][T15599] ? __do_sys_capset+0xfb/0x460 [ 710.168209][T15599] __x64_sys_futex+0x34f/0x4d0 [ 710.168230][T15599] ? __pfx___x64_sys_futex+0x10/0x10 [ 710.168256][T15599] do_syscall_64+0x115/0x840 [ 710.168271][T15599] ? clear_bhb_loop+0x40/0x90 [ 710.168294][T15599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.168318][T15599] RIP: 0033:0x7fd729d9de59 [ 710.168336][T15599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.168353][T15599] RSP: 002b:00007fd72abcc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 710.168371][T15599] RAX: ffffffffffffffda RBX: 00007fd72a026098 RCX: 00007fd729d9de59 [ 710.168392][T15599] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd72a02609c [ 710.168403][T15599] RBP: 00007fd72a026090 R08: 0000000000000001 R09: 0000000000000000 [ 710.168414][T15599] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 710.168426][T15599] R13: 00007fd72a026128 R14: 00007ffe8d2ab120 R15: 00007ffe8d2ab208 [ 710.168450][T15599] [ 710.399828][T15552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.406870][T15552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.433330][T15552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.477613][T15552] hsr_slave_0: entered promiscuous mode [ 710.484101][T15552] hsr_slave_1: entered promiscuous mode [ 710.490239][T15552] debugfs: 'hsr0' already exists in 'hsr' [ 710.496811][T15552] Cannot create hsr debugfs directory [ 710.675373][T15552] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.973828][ T7475] Bluetooth: hci6: command 0x0406 tx timeout [ 711.078948][T15552] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.232794][T15552] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.304322][T15604] input: f as /devices/virtual/input/input41 [ 711.414046][T15552] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.527431][T10345] Bluetooth: hci16: command tx timeout [ 711.655247][T15610] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1795'. [ 712.082695][T15615] FAULT_INJECTION: forcing a failure. [ 712.082695][T15615] name failslab, interval 1, probability 0, space 0, times 0 [ 712.150327][T15615] CPU: 0 UID: 0 PID: 15615 Comm: syz.1.1797 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.150358][T15615] Tainted: [L]=SOFTLOCKUP [ 712.150365][T15615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 712.150376][T15615] Call Trace: [ 712.150383][T15615] [ 712.150390][T15615] dump_stack_lvl+0x100/0x190 [ 712.150416][T15615] should_fail_ex.cold+0x5/0xa [ 712.150437][T15615] should_failslab+0xc2/0x120 [ 712.150465][T15615] __kmalloc_cache_noprof+0x91/0x6c0 [ 712.150496][T15615] ? snd_seq_oss_writeq_new+0xb5/0x2b0 [ 712.150585][T15615] snd_seq_oss_writeq_new+0xb5/0x2b0 [ 712.150607][T15615] ? __pfx_snd_seq_oss_writeq_new+0x10/0x10 [ 712.150627][T15615] ? trace_kmalloc+0xeb/0x110 [ 712.150655][T15615] ? lockdep_init_map_type+0x5c/0x250 [ 712.150685][T15615] ? __raw_spin_lock_init+0x3a/0x110 [ 712.150707][T15615] snd_seq_oss_open+0x7bc/0xa10 [ 712.150752][T15615] odev_open+0x6f/0x90 [ 712.150774][T15615] ? __pfx_odev_open+0x10/0x10 [ 712.150796][T15615] soundcore_open+0x2e3/0x5a0 [ 712.150861][T15615] ? __pfx_soundcore_open+0x10/0x10 [ 712.150886][T15615] chrdev_open+0x234/0x6a0 [ 712.150902][T15615] ? __pfx_apparmor_file_open+0x10/0x10 [ 712.150922][T15615] ? __pfx_chrdev_open+0x10/0x10 [ 712.150960][T15615] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 712.150986][T15615] do_dentry_open+0x6ab/0x14d0 [ 712.151014][T15615] ? __pfx_chrdev_open+0x10/0x10 [ 712.151048][T15615] vfs_open+0x82/0x3f0 [ 712.151073][T15615] path_openat+0x2873/0x4280 [ 712.151111][T15615] ? __pfx_path_openat+0x10/0x10 [ 712.151147][T15615] do_file_open+0x20e/0x430 [ 712.151178][T15615] ? __pfx_do_file_open+0x10/0x10 [ 712.151224][T15615] ? alloc_fd+0x471/0x7a0 [ 712.151253][T15615] ? do_getname+0x191/0x390 [ 712.151276][T15615] do_sys_openat2+0x10f/0x1e0 [ 712.151299][T15615] ? __pfx_do_sys_openat2+0x10/0x10 [ 712.151330][T15615] __x64_sys_openat+0x12d/0x210 [ 712.151353][T15615] ? __pfx___x64_sys_openat+0x10/0x10 [ 712.151384][T15615] do_syscall_64+0x115/0x840 [ 712.151402][T15615] ? clear_bhb_loop+0x40/0x90 [ 712.151424][T15615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.151443][T15615] RIP: 0033:0x7f1c6f79de59 [ 712.151460][T15615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.151477][T15615] RSP: 002b:00007f1c6d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 712.151496][T15615] RAX: ffffffffffffffda RBX: 00007f1c6fa25fa0 RCX: 00007f1c6f79de59 [ 712.151509][T15615] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 712.151520][T15615] RBP: 00007f1c6f833e6f R08: 0000000000000000 R09: 0000000000000000 [ 712.151531][T15615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.151543][T15615] R13: 00007f1c6fa26038 R14: 00007f1c6fa25fa0 R15: 00007ffccfc2d768 [ 712.151567][T15615] [ 712.457058][T15552] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 712.500301][T15552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 712.509620][T15552] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 712.551269][T15552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 712.559771][T15552] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 712.570746][T15552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 712.583685][T15552] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 712.603562][T15552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 712.680605][T15552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.703977][T15552] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.737314][T15552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 712.748720][T15552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 712.808983][T15486] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.816156][T15486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.840030][T15486] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.847202][T15486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.600159][T10345] Bluetooth: hci16: command tx timeout [ 713.885811][T15552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.649962][T15552] veth0_vlan: entered promiscuous mode [ 714.692882][T15552] veth1_vlan: entered promiscuous mode [ 714.834725][T15552] veth0_macvtap: entered promiscuous mode [ 714.909999][T15552] veth1_macvtap: entered promiscuous mode [ 715.096728][T15552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.143258][T15552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.236653][ T7821] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.267416][ T7821] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.314679][ T7821] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.375613][ T7821] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.666257][T10345] Bluetooth: hci16: command tx timeout [ 715.951258][T14227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.006365][T14227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.267430][T15491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.292297][T15491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.459075][T15669] random: crng reseeded on system resumption [ 718.548103][T15486] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 5 with max blocks 1 with error 117 [ 718.663750][T15486] EXT4-fs (sda1): This should not happen!! Data will be lost [ 718.663750][T15486] [ 719.224183][T15696] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1806: iget: checksum invalid [ 719.389583][T15698] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 719.414540][T15696] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 719.495272][T15696] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1806: iget: checksum invalid [ 719.615113][T15696] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 719.688158][T15696] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1806: iget: checksum invalid [ 719.770261][T15696] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 719.881020][T15696] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1806: iget: checksum invalid [ 720.001106][T15696] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 720.138857][T15696] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 720.246240][T15696] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 720.945820][T15724] FAULT_INJECTION: forcing a failure. [ 720.945820][T15724] name failslab, interval 1, probability 0, space 0, times 0 [ 721.000301][ T30] INFO: task syz-executor:5627 blocked for more than 143 seconds. [ 721.022197][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 721.057009][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 721.090594][T15724] CPU: 0 UID: 0 PID: 15724 Comm: syz.1.1812 Tainted: G L syzkaller #0 PREEMPT(full) [ 721.090625][T15724] Tainted: [L]=SOFTLOCKUP [ 721.090632][T15724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 721.090642][T15724] Call Trace: [ 721.090649][T15724] [ 721.090657][T15724] dump_stack_lvl+0x100/0x190 [ 721.090683][T15724] should_fail_ex.cold+0x5/0xa [ 721.090704][T15724] should_failslab+0xc2/0x120 [ 721.090728][T15724] __kmalloc_cache_noprof+0x91/0x6c0 [ 721.090756][T15724] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 721.090785][T15724] ? vidtv_psi_sdt_service_init+0x52/0x200 [ 721.090822][T15724] vidtv_psi_sdt_service_init+0x52/0x200 [ 721.090846][T15724] vidtv_channel_si_init+0x5d4/0x18f0 [ 721.090875][T15724] vidtv_mux_init+0x522/0xbf0 [ 721.090903][T15724] vidtv_start_feed+0x34e/0x500 [ 721.090936][T15724] ? __pfx_vidtv_start_feed+0x10/0x10 [ 721.090964][T15724] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 721.091005][T15724] dmx_section_feed_start_filtering+0x3a8/0x660 [ 721.091045][T15724] dvb_dmxdev_filter_start+0x767/0xdd0 [ 721.091080][T15724] dvb_demux_do_ioctl+0xe64/0x1200 [ 721.091114][T15724] dvb_usercopy+0x167/0x340 [ 721.091138][T15724] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 721.091168][T15724] ? __pfx_dvb_usercopy+0x10/0x10 [ 721.091201][T15724] ? __fget_files+0x21f/0x3d0 [ 721.091233][T15724] dvb_demux_ioctl+0x29/0x40 [ 721.091257][T15724] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 721.091282][T15724] __x64_sys_ioctl+0x18e/0x210 [ 721.091308][T15724] do_syscall_64+0x115/0x840 [ 721.091325][T15724] ? clear_bhb_loop+0x40/0x90 [ 721.091348][T15724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.091367][T15724] RIP: 0033:0x7f1c6f79de59 [ 721.091382][T15724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.091400][T15724] RSP: 002b:00007f1c6d9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.091419][T15724] RAX: ffffffffffffffda RBX: 00007f1c6fa26090 RCX: 00007f1c6f79de59 [ 721.091431][T15724] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 721.091443][T15724] RBP: 00007f1c6f833e6f R08: 0000000000000000 R09: 0000000000000000 [ 721.091454][T15724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.091464][T15724] R13: 00007f1c6fa26128 R14: 00007f1c6fa26090 R15: 00007ffccfc2d768 [ 721.091487][T15724] [ 721.471560][T15710] Process accounting resumed [ 721.505162][ T30] task:syz-executor state:D stack:23832 pid:5627 tgid:5627 ppid:1 task_flags:0x400140 flags:0x00080002 [ 721.517247][ T30] Call Trace: [ 721.520534][ T30] [ 721.523464][ T30] __schedule+0x125c/0x6730 [ 721.528075][ T30] ? do_raw_spin_lock+0x128/0x260 [ 721.533127][ T30] ? __pfx___schedule+0x10/0x10 [ 721.538050][ T30] ? find_held_lock+0x2b/0x80 [ 721.547028][ T30] ? schedule+0x225/0x2c0 [ 721.551439][ T30] schedule+0xdd/0x2c0 [ 721.555517][ T30] schedule_preempt_disabled+0x13/0x30 [ 721.561169][ T30] __mutex_lock+0xccc/0x1bd0 [ 721.565825][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 721.571120][ T30] ? __lock_acquire+0x49f/0x1a40 [ 721.576120][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 721.581154][ T30] ? net_generic+0xea/0x2a0 [ 721.585697][ T30] ? net_generic+0xea/0x2a0 [ 721.590220][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 721.595596][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 721.600714][ T30] nfsd_umount+0x3b/0x60 [ 721.604977][ T30] deactivate_locked_super+0xc1/0x1b0 [ 721.610414][ T30] deactivate_super+0xe7/0x110 [ 721.615191][ T30] cleanup_mnt+0x21f/0x450 [ 721.636333][ T30] task_work_run+0x150/0x240 [ 721.656717][T10345] Bluetooth: hci7: command 0x0406 tx timeout [ 721.665999][ T30] ? __pfx_task_work_run+0x10/0x10 [ 721.691814][ T30] exit_to_user_mode_loop+0x1d8/0x6f0 [ 721.717376][ T30] ? rcu_is_watching+0x12/0xc0 [ 721.736052][ T30] do_syscall_64+0x652/0x840 [ 721.761041][ T30] ? clear_bhb_loop+0x40/0x90 [ 721.776178][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.809195][ T30] RIP: 0033:0x7f1515b9f097 [ 721.830205][ T30] RSP: 002b:00007ffe3b7a4ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 721.866014][ T30] RAX: 0000000000000000 RBX: 00007f1515c332ca RCX: 00007f1515b9f097 [ 721.882253][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3b7a4f60 [ 721.905295][ T30] RBP: 00007ffe3b7a4f60 R08: 00007ffe3b7a5f60 R09: 00000000ffffffff [ 721.924075][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe3b7a5ff0 [ 721.938499][ T30] R13: 00007f1515c332ca R14: 000000000008c7f3 R15: 00007ffe3b7a6030 [ 721.959936][ T30] [ 721.963030][ T30] INFO: task syz-executor:5628 blocked for more than 144 seconds. [ 721.971048][ T30] Tainted: G L syzkaller #0 [ 721.977900][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 721.987180][ T30] task:syz-executor state:D stack:23192 pid:5628 tgid:5628 ppid:1 task_flags:0x400140 flags:0x00080002 [ 721.999443][ T30] Call Trace: [ 722.002743][ T30] [ 722.005771][ T30] __schedule+0x125c/0x6730 [ 722.010435][ T30] ? do_raw_spin_lock+0x128/0x260 [ 722.015926][ T30] ? __pfx___schedule+0x10/0x10 [ 722.020807][ T30] ? find_held_lock+0x2b/0x80 [ 722.025616][ T30] ? schedule+0x225/0x2c0 [ 722.031163][ T30] schedule+0xdd/0x2c0 [ 722.037091][ T30] schedule_preempt_disabled+0x13/0x30 [ 722.042613][ T30] __mutex_lock+0xccc/0x1bd0 [ 722.058096][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 722.063617][ T30] ? __lock_acquire+0x49f/0x1a40 [ 722.069099][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 722.075984][ T30] ? net_generic+0xea/0x2a0 [ 722.080545][ T30] ? net_generic+0xea/0x2a0 [ 722.085392][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 722.090718][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 722.102907][ T30] nfsd_umount+0x3b/0x60 [ 722.111752][ T30] deactivate_locked_super+0xc1/0x1b0 [ 722.125581][ T30] deactivate_super+0xe7/0x110 [ 722.143840][ T30] cleanup_mnt+0x21f/0x450 [ 722.148320][ T30] task_work_run+0x150/0x240 [ 722.172571][ T30] ? __pfx_task_work_run+0x10/0x10 [ 722.179225][ T30] exit_to_user_mode_loop+0x1d8/0x6f0 [ 722.278331][ T30] ? rcu_is_watching+0x12/0xc0 [ 722.311916][ T30] do_syscall_64+0x652/0x840 [ 722.340783][ T30] ? clear_bhb_loop+0x40/0x90 [ 722.384871][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.422080][ T30] RIP: 0033:0x7f74abf9f097 [ 722.452858][ T30] RSP: 002b:00007ffe741e8be8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 722.506969][ T30] RAX: 0000000000000000 RBX: 00007f74ac0332ca RCX: 00007f74abf9f097 [ 722.543681][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe741e8ca0 [ 722.584715][ T30] RBP: 00007ffe741e8ca0 R08: 00007ffe741e9ca0 R09: 00000000ffffffff [ 722.621938][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe741e9d30 [ 722.675666][ T30] R13: 00007f74ac0332ca R14: 000000000008b543 R15: 00007ffe741e9d70 [ 722.719206][ T30] [ 722.782090][ T30] [ 722.782090][ T30] Showing all locks held in the system: [ 722.840318][ T30] 1 lock held by khungtaskd/30: [ 722.873058][ T30] #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 722.935679][ T30] 2 locks held by khugepaged/37: [ 722.963005][ T30] 2 locks held by syz-executor/5627: [ 722.998298][ T30] #0: ffff88807f5520d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 723.093780][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 723.112432][ T30] 2 locks held by syz-executor/5628: [ 723.118071][ T30] #0: ffff888025b360d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 723.130696][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 723.141180][ T30] 2 locks held by kworker/0:4/5721: [ 723.146395][ T30] #0: ffff88801bc07140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 723.164441][ T30] #1: ffffc900046a7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 723.181095][ T30] 2 locks held by kworker/u10:3/6390: [ 723.186506][ T30] #0: ffff88801f73d940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 723.197656][ T30] #1: ffffc9000692fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 723.209420][ T30] 4 locks held by kworker/u11:2/7475: [ 723.214830][ T30] #0: ffff88807ae1c940 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 723.225493][ T30] #1: ffffc9000602fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 723.240752][ T30] #2: ffff888041188ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 723.251801][ T30] #3: ffff8880411880b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 723.261807][ T30] 2 locks held by kworker/u10:13/7823: [ 723.277325][ T30] #0: ffff88801f73d940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 723.288557][ T30] #1: ffffc90003be7d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 723.300456][ T30] 2 locks held by getty/8843: [ 723.305176][ T30] #0: ffff88803682e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 723.316819][ T30] #1: ffffc90003ac52e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 723.327254][ T30] 5 locks held by kworker/u10:17/9387: [ 723.332775][ T30] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 723.343650][ T30] #1: ffffc9000580fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 723.356053][ T30] #2: ffffffff90a86148 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 723.368291][ T30] #3: ffffffff90a9ed40 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 723.392142][ T30] #4: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 723.402769][ T30] 2 locks held by syz.3.1432/13070: [ 723.408217][ T30] #0: ffffffff90b4d948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 723.416789][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 723.427185][ T30] 2 locks held by syz.5.1572/13865: [ 723.432762][ T30] #0: ffffffff90b4d948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 723.441332][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 723.451713][ T30] 2 locks held by syz-executor/13914: [ 723.459680][ T30] #0: ffff8880555760d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 723.470866][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 723.490304][ T30] 2 locks held by syz-executor/13983: [ 723.496515][ T30] #0: ffff88806b1400d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 723.507283][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 723.517164][ T30] 2 locks held by syz.4.1629/14326: [ 723.522376][ T30] #0: ffffffff90b4d948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 723.530891][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 723.541285][ T30] 2 locks held by syz.8.1645/14411: [ 723.554012][ T30] #0: ffffffff90b4d948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 723.562548][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 723.584199][ T30] 2 locks held by syz-executor/14448: [ 723.589978][ T30] #0: ffff88802a7b20d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 723.603702][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 723.614321][ T30] 2 locks held by syz-executor/14879: [ 723.620201][ T30] #0: ffff88807a59e0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 723.630767][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 723.640678][ T30] 2 locks held by syz.0.1694/14916: [ 723.646134][ T30] #0: ffff88807a7980d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 723.656697][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 723.666605][ T30] 1 lock held by syz-executor/15013: [ 723.671902][ T30] #0: ffff88809fe60ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 723.691803][ T30] 2 locks held by syz.3.1714/15039: [ 723.697299][ T30] #0: ffff88802b2fe0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 723.715270][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 723.725369][ T30] 2 locks held by syz-executor/15224: [ 723.730767][ T30] #0: ffff8880769860d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 723.741402][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 723.751255][ T30] 1 lock held by syz-executor/15286: [ 723.756764][ T30] #0: ffff8880b02a0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 723.766642][ T30] 2 locks held by syz.5.1752/15355: [ 723.771864][ T30] #0: ffff88802a4d00d8 (&type->s_umount_key#51/1){+.+.}-{4:4}, at: sget_fc+0x3c8/0x1d80 [ 723.793594][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 723.807139][ T30] 2 locks held by kworker/u10:27/15486: [ 723.812723][ T30] #0: ffff88801f73d940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 723.828845][ T30] #1: ffffc90005c9fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 723.841385][ T30] 1 lock held by syz-executor/15552: [ 723.847293][ T30] #0: ffff8880a7058ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 723.947442][ T30] [ 723.964201][ T30] ============================================= [ 723.964201][ T30] [ 724.031636][ T30] NMI backtrace for cpu 0 [ 724.031656][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 724.031682][ T30] Tainted: [L]=SOFTLOCKUP [ 724.031689][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 724.031699][ T30] Call Trace: [ 724.031705][ T30] [ 724.031712][ T30] dump_stack_lvl+0x100/0x190 [ 724.031736][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 724.031760][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 724.031783][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 724.031813][ T30] sys_info+0x141/0x190 [ 724.031834][ T30] watchdog+0xcb1/0x1030 [ 724.031863][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 724.031899][ T30] ? __pfx_watchdog+0x10/0x10 [ 724.031925][ T30] ? __kthread_parkme+0x18c/0x230 [ 724.031946][ T30] ? kthread+0x13a/0x450 [ 724.031967][ T30] ? __pfx_watchdog+0x10/0x10 [ 724.031991][ T30] kthread+0x370/0x450 [ 724.032012][ T30] ? __pfx_kthread+0x10/0x10 [ 724.032036][ T30] ret_from_fork+0x72b/0xd50 [ 724.032057][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 724.032079][ T30] ? __switch_to+0x800/0x10f0 [ 724.032105][ T30] ? __switch_to_asm+0x39/0x70 [ 724.032130][ T30] ? __pfx_kthread+0x10/0x10 [ 724.032154][ T30] ret_from_fork_asm+0x1a/0x30 [ 724.032188][ T30] [ 724.457054][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 724.463952][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 724.474637][ T30] Tainted: [L]=SOFTLOCKUP [ 724.478966][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 724.489029][ T30] Call Trace: [ 724.492319][ T30] [ 724.495258][ T30] dump_stack_lvl+0x100/0x190 [ 724.499958][ T30] vpanic+0x552/0x970 [ 724.503949][ T30] ? __pfx_vpanic+0x10/0x10 [ 724.508479][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 724.514647][ T30] panic+0xd1/0xe0 [ 724.518369][ T30] ? __pfx_panic+0x10/0x10 [ 724.522825][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 724.528985][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 724.535149][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 724.541310][ T30] ? watchdog.cold+0x1ec/0x234 [ 724.546075][ T30] ? watchdog+0xcc1/0x1030 [ 724.550506][ T30] watchdog.cold+0x1fd/0x234 [ 724.555124][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 724.560943][ T30] ? __pfx_watchdog+0x10/0x10 [ 724.565628][ T30] ? __kthread_parkme+0x18c/0x230 [ 724.570658][ T30] ? kthread+0x13a/0x450 [ 724.574903][ T30] ? __pfx_watchdog+0x10/0x10 [ 724.579587][ T30] kthread+0x370/0x450 [ 724.583661][ T30] ? __pfx_kthread+0x10/0x10 [ 724.588257][ T30] ret_from_fork+0x72b/0xd50 [ 724.592873][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 724.597990][ T30] ? __switch_to+0x800/0x10f0 [ 724.602773][ T30] ? __switch_to_asm+0x39/0x70 [ 724.607564][ T30] ? __pfx_kthread+0x10/0x10 [ 724.612174][ T30] ret_from_fork_asm+0x1a/0x30 [ 724.616961][ T30] [ 724.620033][ T30] Kernel Offset: disabled [ 724.624354][ T30] Rebooting in 86400 seconds..