last executing test programs: 2m11.817299364s ago: executing program 2 (id=376): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x5c8) (async) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) (async) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) (async) openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/auxv\x00', 0x204082, 0x0) 2m11.644990644s ago: executing program 2 (id=377): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1e, 0x5, 0x3, 0x0) r1 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2842, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x22c100, 0x0) ioctl$auto(r2, 0x90006442, r2) close_range$auto(r2, r0, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) write$auto_sg_fops_sg(r3, &(0x7f0000000440)="bf5b1a8c24000900dbcbc7a996eea7f3804ca6c7591afff6578d2f5f520f687f316ba7327b581cd8d58309037c0ae2c71a5f4dc67b2d3f9cd10be284724ddaa35932ad245d26539d61b2c80000000000000006fe96d4017f4e64f30cab79c0bb12bba782655ca9c53f4f46a380b163807690897120caf8037cafd946aa24cfbfb55dcebaa106b342b2155ae529f1fb4248635d2ab14dbfa5a64fa0a7fd238d825ed466d8ae8b0a65a2cb3b603ad1d000456ef69c997ad5708534298cd7e18c1624345e9ae6483133ea59a0deefe12a46da5a775d030416d8bc907957c707b0f7145b4b5c193e8dea078bae01c66925c08488825c334e2c9cb5f4bbd9903bbd773cbdf3d42d389db6196a3aeee83974000b865f950c78a8aa2509c99361e10e8ec107083d84f0ed48c14e209ed83a45330672c663bc1237905344e38dcc9f3e5bc19dec9c3ac4f045bb29722b8932a1a2d55168fe8d842f1a4e4e388e359b9cc4da224408222219af69d2657cf0343ef4581230fa35bf9cb228bd293665c1791150b1cc9a8f9590eb2a68d9e16e294f21f6260694b993271bb802917c3f4851890a78e41aade1be38fda24b1b9ff5b24ad564e875e80b13cb9327ec2f4476fe9cab4cce67f38c0733", 0xfffffffffffffe80) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) r4 = socket(0x2, 0xa, 0x105) getsockopt$auto_SO_NOFCS(r4, 0x5, 0x2b, 0x0, &(0x7f0000000080)=0x7ff) connect$auto(0xffffffffffffffff, 0x0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd14\x00', 0x54be00, 0x0) write$auto(r0, 0x0, 0x800000000c) capget$auto(0x0, 0x0) close_range$auto(r1, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@phonet={0x23, 0xf, 0x8}, 0x55) listen$auto(0x3, 0x81) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) connect$auto(0x3, &(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x1, 0x3) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D1\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 2m11.417995695s ago: executing program 2 (id=379): getrandom$auto(&(0x7f0000000000)='#\x00', 0x1, 0x7f) rt_sigaction$auto(0x2000000, &(0x7f0000000140)={&(0x7f0000000080)=&(0x7f0000000040)=0x2, 0xe, &(0x7f0000000100)=&(0x7f00000000c0)=0x4b}, &(0x7f0000000280)={&(0x7f00000001c0)=&(0x7f0000000180)=0x4, 0x9, &(0x7f0000000240)=&(0x7f0000000200)=0x3, {0xd}}, 0x8) truncate$auto(&(0x7f00000002c0)='./file0\x00', 0x100000000) rt_sigaction$auto(0x65d24bcd, &(0x7f0000000400)={&(0x7f0000000340)=&(0x7f0000000300)=0x5, 0xd9, &(0x7f00000003c0)=&(0x7f0000000380)=0x40, {0x9}}, &(0x7f0000000540)={&(0x7f0000000480)=&(0x7f0000000440)=0x4, 0x80000000, &(0x7f0000000500)=&(0x7f00000004c0)=0x4, {0xd33}}, 0x8) capset$auto(&(0x7f0000000580)={0x9c, 0xffffffffffffffff}, &(0x7f00000005c0)={0xfffff827, 0x3, 0x3}) r1 = prctl$auto(0x3, 0x8, r0, 0x1, 0x0) r2 = bpf$auto(0xb, &(0x7f0000000600)=@link_detach={r1}, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000700), r3) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xe8f4}, @IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x2}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x49fd}, @IOAM6_ATTR_SC_NONE={0x4}]}, 0x38}}, 0x20000000) r6 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000840), r3) sendmsg$auto_NFC_CMD_DISABLE_SE(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r6, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x1c, 0x13, 0x0, 0x1, [@nested={0x18, 0x122, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xc2}, @typed={0x8, 0x40, 0x0, 0x0, @ipv4=@remote}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x80) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000980), r4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x1d4, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xe}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x2}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1a7, 0x75, 0x0, 0x1, [@nested={0xab, 0xaf, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xb, 0x128, 0x0, 0x0, @str='`(+[^)\x00'}, @generic="eb0107a839543ef1b6a9e76cda1cc75899a1f5521aa2da9005d59aaa287e2e564a08b62459061eaeeb320f254e27b41d96f3fbf280994840f4ca591ea49a560459c134c4bf42a2c0c83fc554c96a48bbcfc1b544258dbc4b1dcce713d0ee744f9fd85a510d55df159aac8d8aa42149c07225f4002020271e2dee35f90d022898eb2243167770e3", @typed={0x8, 0x12d, 0x0, 0x0, @str='nfc\x00'}, @nested={0x4, 0xfa}]}, @generic="588bd63a530d88e93e5054b0cea2af2c621447b4a9fb903df61ea91a0f01dbfa4cb3ab13f4d6ef3834840cd3338a844ef84203afff83f612a691cc00fd427882a40c72f2ff3c608e0e7b0e01224270f75f39e1dc0d25c7163936fbbcddc616c5d14c75531a7ed996e54119f9f72a4f690f62880a5b7e18e970589608d3846ff60af7af8e0e37f37c33033325d1b9f95ff567786b44fca495a284152f657cc396a1fd", @generic="2e606b80b6fb9a40b95f937cd17b516a6246f98f9e631fde806beb9650ba97bf06e020c5cdfe6a24df1b2de3b7968a", @typed={0xc, 0xc1, 0x0, 0x0, @u64=0xa269}, @generic="a70d2f3d3620fd2ac96189ec5aefad88ef5480dc57b71b3350e3"]}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x58d4}, 0x20000040) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r1, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xec, r7, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_QOS_MAP={0xd8, 0xc7, "734600183e04600d11c584b4250165b7a4dad5e644181797ce64c855b12000f8a019f7a8dbf2a9ff4b2332afea0f65749843b82e448964e859475a5051a9726b9af19d6f93ab730da7277da3a178acb54c6d885f35ee7faa153d633d556d31bbdf9b85f07ec1b81070c031fbe316ee5d2a287cf15871428e0660f3dce4b1c233baccdb2d22885d157ebcc3b31c4123faf09ff0de674fd2fdfe5fc27e93cbd1a72ab062cc14e23c287483024620d1697079a7c7be2a35d7538123271870b55e8d43796c91a7f3ff6391445139e82bee24f4d4d7a3"}]}, 0xec}, 0x1, 0x0, 0x0, 0x48800}, 0x80) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000e40), r4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e80)={'veth0_to_bond\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ec0)={'dvmrp1\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x48000800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x58, r8, 0x340, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ALGO_NAME={0x5, 0x2, 'k'}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'geneve0\x00'}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0xa90f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fc}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$auto_VFIO_IOMMU_GET_INFO(r2, 0x3b70, 0x0) r11 = signalfd$auto(r4, &(0x7f0000001000)={0x5}, 0x6) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000001040)="46a632e30950053738b9b12687d9386d7e1b5ba57b7df1ce26bcf806dec2cde00e7ce5d36447cf8fb1886895cfe996b8946c2236ff") openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/lru_gen\x00', 0x541001, 0x0) r12 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001100), r3) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r12, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_COLOR_CHANGE_COUNT={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001240), r3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001280)={'wlan1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r13, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x34, r14, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r10}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r10}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r9}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x240c0052) ioctl$auto_NS_GET_MNTNS_ID(r2, 0x8008b705, &(0x7f0000001380)=0x100000001) 2m11.307453492s ago: executing program 2 (id=380): socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x106) (async) socket(0xf, 0x3, 0x2) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x6, 0x8000000000000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x6a, 0x948b, 0x6, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d41, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async) clone$auto(0x4000002, 0x104, 0xfffffffffffffffd, 0xffffffffffffffff, 0x400000000000005) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) (async) prctl$auto(0x34, 0x1, 0x0, 0x0, 0x0) (async) r6 = socket(0x10, 0x3, 0x6) (async) r7 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r7, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008080) sendmsg$auto_KSMBD_EVENT_RPC_RESPONSE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r9 = socket(0x10, 0x3, 0x9) write$auto(r9, 0x0, 0x5) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="810b27bd7000ffdbdf250100000008000300", @ANYRES32=r10, @ANYBLOB="81f04ae3a1fba319db14fd2e61267a38d73aef6e36ffc491f70191acb1920637417c730583e096226e3d66dfa5ae89e98e8a238ce667ddce7573cda6276e77acec3b31627bfbd4bf5e748a0a227960a76d7b041d41afa262c9cc340f2c4cf8620a5923d56f4b5034db0638768d4aeefb5df2f954e40fc9bbe0698d2104f16df9ce5c8697f79abed6c855f167a338188aad81ad5dc790c792005e756ec80eebec5662407caeb0403c12a7e51c61bd19bc6628b8fa46e8755be15ac7fae6af53c57089d10f7aef0a65c5fa646600fe04a7"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7017ffdbdf25100000000c00018008000100", @ANYRES32=r11, @ANYBLOB="0800090002000000"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80000) 2m10.865154111s ago: executing program 2 (id=383): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x4000000810004, 0x80000ffb, 0x19, 0x3, 0x8) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async, rerun: 64) mbind$auto(0x1, 0x6, 0x4e, &(0x7f00000000c0)=0x2, 0x7fffffff, 0x1) (rerun: 64) mmap$auto(0x4, 0x7ff, 0x8, 0xeb1, 0x401, 0x200) sysfs$auto(0x2, 0x1c800000000000, 0x0) (async) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', 0x0, 0x0) openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x40102, 0x0) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socket(0x10, 0x2, 0x2) mq_open$auto(0x0, 0x7e, 0x9, 0x0) (async) socket(0x1, 0x1, 0x0) (async) write$auto(r1, 0x0, 0x2fb) io_uring_setup$auto(0x8000002, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) memfd_create$auto(0x0, 0xe) rseq$auto(&(0x7f0000000440)={0x10, 0x0, 0xa, 0x6, 0x7fff, 0x2, "ddfdc12681e30a2b3defa5b232c8907dc75bef7426b9d4081070c2853b327eb4a36671d933f404774d39b917912ef0ee5bc04bc0e1c0e78d05fa4138730493bf2a3da7af14eb17f49a8a9c5a187f3e1b65c96a9268484fde7606c1d4bc43f25d195dbefe6ded000000"}, 0x40008000, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) (async) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0) (async) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, 0x0) (async) socket(0x2, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0x3, 0x0, 0x100082) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x44b, 0x7, 0x5, 0x100717e, 0xd1, 0x7, 0x7, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x5, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x0, 0x864, 0x5623, 0x22000, 0x200, 0x4, 0x1, 0x0, 0xfffffffc, 0x9, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40]}, 0xa, 0xd) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x83, 0x1ff, 0x3, @_sigpoll}}, 0x5, &(0x7f0000000380)={{0xb, 0x8}, {0x100000000, 0x6}, 0x0, 0x9, 0x0, 0x80000000, 0x40000006, 0x4, 0x3, 0x3, 0x7, 0x3, 0x4, 0x2bb7, 0xffffffffffff50a3, 0x9}) 2m9.743275407s ago: executing program 1 (id=386): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x8000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x400053, 0x9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) read$auto_null_fops_mem(0xffffffffffffffff, &(0x7f0000000180)=""/234, 0xea) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x6f4ccf2bee9fe3e6, 0x0) read$auto_null_fops_mem(r0, &(0x7f0000000100)=""/98, 0x62) r1 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, &(0x7f0000000180)="250d64bfc576cd1e565cf4d0f924367e69f4de80a3bb3ef6293b25de0c87cc0cdb7dabba1c2989daf6592e65c715e3fd6acc0758d8a8") unshare$auto(0x40000080) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) 2m9.576651472s ago: executing program 2 (id=388): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) r1 = socket(0x21, 0x2, 0x2) shutdown$auto(r1, 0xfffffff9) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) stat$auto(&(0x7f0000000240)='}[,&*}/../file0\x00', 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000000)=&(0x7f0000000200)=' ') setsockopt$auto(r0, 0xffffffff, 0xff, &(0x7f0000000040)=' ', 0x2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x24048804) 2m7.59756878s ago: executing program 1 (id=395): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x406, 0x0) io_uring_enter$auto(r0, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) ioctl$auto_TIOCMGET2(r0, 0x5415, &(0x7f0000000180)="356ef81fcc143864f85fab091a6547a46e8e6f6f7ad33016b5010832d04310eab79e75b13bdaf3337dd4084e6aebebdf85c7816dab819ed5ba17ac4ada71666b66f2e2fa85e1c30732442e0031ce6d470a82af08a649e69289ff2de47873eaed67a73ff918c8310b4fcb4d9e48cac873150729d04cd83025437dbc29f90b5f6315de6391bb418b1226b8069b73852b2e23210f653a3b5907422dcdefad7dcd1c03fbbdbbbf9e733c4cf71dca1206a1b3f27eb766") write$auto(0x3, 0x0, 0x7fffffff) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0x8}, 0x8, 0x8, 0x5) r1 = eventfd$auto(0xffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x18, r3, 0x301, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x88) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000dc0)={0x534, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_PROBE_RESP={0x3ec, 0x91, "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"}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc7c}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xe}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x124, 0x131, 0x0, 0x1, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x403}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PMKID={0xc, 0x55, "78a80f6dd66a8076"}, @NL80211_ATTR_S1G_CAPABILITY={0xfd, 0x128, "2f70d273a24b85198cf9e1e307f0dbdb7c2d3fd0d9000000000000cea6e4566d738600bf275a82ba9b049bc761728288d904be14253902618b983373234a34a4b2664423d195b6a893179787c95d42d0c2ff23bae156e03e48a485a68a06cea2190c492b5d088da77c23e888edef56d89989b53fa1571c513c5d710792830bbf052fd74e2ad540cc852178d05d271b8368d05b2cd6f6b56192743906ff6f411bce8d065fb104902325fc3d96a3f4f706ef3c65794ce803a4312345c0874db4b503444779438d5cde43b2507931070538a4650da404ea8a24c9711c95859c09b50ee5e131a049443ef3ccf245b5cda667378d2e549800ceea3c"}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x9}]}]}, 0x534}, 0x1, 0x0, 0x0, 0x9dac96bed1c6fe88}, 0x44801) 2m7.32377527s ago: executing program 1 (id=396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_SE_IO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xfc}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x2}]}, 0x24}}, 0x8c1) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card1\x00', 0x80, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/swradio2\x00', 0x40000, 0x0) write$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000001c0)="f218218864903964fcd6df095a4461335b241a47b81359404d96334a5f45b8ac182553c2c13236094ce0c21853eb834c38ac2a2acd33503f71f38365da59778a0b1e5a900687ebbe7810f89d4ee2e3", 0x4f) execve$auto(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000280)='/dev/dri/card1\x00', &(0x7f0000000340)=&(0x7f0000000300)='nfc\x00') r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000003c0), r0) r4 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000400)={@_si_pad}, 0x3, &(0x7f0000000480)={{0x8000000000000001, 0x2}, {0x3, 0x6}, 0x180, 0x3, 0x3ff, 0x2, 0x71e, 0x10000, 0x72a3c674, 0x6, 0x8, 0x5, 0x1, 0x4, 0x2, 0x1000000000000000}) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000540)={0x3b0, r3, 0x200, 0x3, 0x25dfdbff, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x10, 0x19, 0x0, 0x1, [@typed={0xc, 0xd, 0x0, 0x0, @u64=0xc}]}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x7ff}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_SEC_LEVEL={0x340, 0x2d, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @ipv4=@remote}, @typed={0xd, 0x147, 0x0, 0x0, @str='\'[@-\xd5/-e\x00'}, @typed={0x12, 0x138, 0x0, 0x0, @str='/dev/swradio2\x00'}, @generic="e00f6e55d09c00c569ecb8db918d", @nested={0xc, 0xce, 0x0, 0x1, [@typed={0x8, 0x11c, 0x0, 0x0, @fd=r2}]}, @nested={0x237, 0x3b, 0x0, 0x1, [@nested={0x4, 0xae}, @nested={0x4, 0xc5}, @generic="bfda7a2b36b320db2e334183272ea322d6e670c2d04faafb7b5f80feab28166803560d9fa116218d08af4c8769df6311ccf2e000436f2d4408273189b6d25d73a5eaa88bbd519d6b4722e34330e284ea7c9c02c25e64d033e115cb33edfc4d2547cdc4cf37937c4719f0d933593fb9abaf4ee18de786204905b2a6903462b834cc47396a009881b68a69d49ae01bb8dcf678edbbb3d64adc308ed0fc99d075d241467339c9660657975589015cbfc40a9d50990cf183c50fbde57038ad7be7e620c17f6d5001feb1fc9c9ab69b732af759481b47930669920dd6cffc1d61ffe6d88aae4df991", @generic="3ce28b0c7518b47d97621cf69a8e52babca2ebb88468f4daf34dacf1a7e710afc4b19a907bf49ebfd677484179b0a503dd9d5013fba2e3a8b52d832afe2d81e49bdcd5eb0ea4c9213a768f99f8600a760843b562b8350a2a6ac4370ea3", @typed={0x8, 0x111, 0x0, 0x0, @ipv4=@local}, @typed={0xe0, 0xb8, 0x0, 0x0, @binary="a2139edf34790298fb6100d7ab836a68600eae3232c3036332d3e4b5c5f70ddd275675709a2a0db716406d12451951753dad2cacf2d4439348ca65ccaeded98fa13a60da351fd7a43f900a897118263b5a0404fbee7ac853e1d996a733a3deda882e614123df431683f2f5b9a92934d5de3c2be4a4a846b0d97e5662adb6366bdbc81b2e791b4a7415d1c37547216ef51ba06090ee76cf08d7527a47be108b7e8f1178ed45b776917eb178d2ebb40bcc03ba02bc02c144e7d518b0697622084ccbc5a363265ff7b866a8c5ea788dd5c52e12d9e950d3ff036e648ca2"}]}, @generic="45c6fd0d1a06d0ae7541c35678b8bca5439cafece6408dd5fbbf820465d0eb5fb4932aaa42839fecd2b8fdc212d66f2edf757df77b60ac00c1ec6dbe6dad4f4853510b127f5a4e952908d9cf0856b9e0c76f16df47c924e4a38cf660e539e9fe90408bb52b0d96ae32c8552ba3fdbf3e0652b9ba0ac3f885bf3e6d091fd43c8f6ac1e244ba0cf0e7ec4e8e2969bb48c8442948c929822a1c615d011c18a62c7d265ed01aad18377d66932ce4c984ce05c3f77b02e6ce5d46bcf3b03b8fda"]}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'veth0_to_hsr\x00'}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x890}, 0x8800) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000980)='/sys/devices/virtual/tty/ptyxa/power/runtime_suspended_time\x00', 0x6980, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000009c0)=""/124, 0x7c) setgroups$auto(0x1, &(0x7f0000000a40)=0x6) readv$auto(r0, &(0x7f0000001a80)={&(0x7f0000000a80)="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", 0x9e8b}, 0x527c) setgroups$auto(0x4, &(0x7f0000001ac0)=0x5) r6 = fanotify_init$auto(0x1, 0xb82) mlock$auto(0x6, 0x5) read$auto(r6, &(0x7f0000001b00)='nl802154\x00', 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b80), r6) msgctl$auto_IPC_INFO(0xcdd, 0x3, &(0x7f0000001c40)={{0x9b, 0xee01, 0xffffffffffffffff, 0x9, 0x52e8, 0xffffffff, 0x4}, &(0x7f0000001bc0)=0xe, &(0x7f0000001c00)=0x8f, 0x800, 0x0, 0x2, 0xfef, 0x3ff, 0x9, 0x4, 0x40, @inferred=r4, @inferred=r4}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r7, &(0x7f0000002200)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000021c0)={&(0x7f0000001cc0)={0x4cc, r8, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0xa8, 0x129, "9aec765c593adde145f2320088e8b07c802e91558c1cd3dbc1899bf0c80b49c98fb7b641ba797c5f044e7a9962ed92280a496d314fade642009d82e493203033426bb667ceaca9ddf8a258a1537564decb9f01d08bca36875a88318a56b43f2be4b7ed763f20c5af2ba555c11cad8e05b0520655ee58fe897b88ab185292c247eed2a79af783a4c0d618a592704640dccb74b3ce8dd8863b1e6110f0c24ddbf6e6f71872"}, @NL80211_ATTR_MNTR_FLAGS={0x95, 0x17, "a6bd4e8fe7ce67b36c1f6ac569fa9102ce0086b774abc5f1c8c615eb39bd33434344c744de777df8601fec0480b2d636456e029d02217fc3043d7cc255daad87af57d1b624cedad0d9cd57118f7bc84ae2981637dad203c83bad0ef50cb9ac65c9dce6dcc3fefc10f339890ce85f969ea4fb823c44da659d9b564e4f5604d900240c93745fc7a35ebfef015d07c9db1628"}, @NL80211_ATTR_QOS_MAP={0xce, 0xc7, "aed624dadf2853bfd6fd10035fa3f6208f32373b29f85893a7861b238013e5c8fa5874009fd690c7c1819c7cf4dc2cfc22b801848a9a0d17e8bfe1ce6d47bab5dc3b43c3a85198715afd2a7431514445901c57c438054d18d50020539501af97fb107aa02ef8a6321a72326322db51767f850f3c371ebb6b62b423006dc693452c63d91beec0ad65c8b47f03bcf1c6c5a1a9fdaf587ef06702372b98db21b3d5f9298c707d11abbce5949c2b66fddd0e041ccf9c6928ed679c837bd79c8839e2c8e50ea1a3a5573f222d"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x29d, 0x124, 0x0, 0x1, [@nested={0xc2, 0xdf, 0x0, 0x1, [@generic="248d890d546c29d35f4f2b542ce5d516ff8461b07784c404f8152f1435fc7372e5516742efe89248c5dece1225e539122d9e8f65fab44964b0193241f3eb95865f043ee397eb8c71190a3d4ac6a70e03d3fd9313594fe490d37b971a63b24aa8c5be6be4b263737a01ea9e5b928122ce61965103220d8af1aaea5235f33e914ba46493affcf8ea046e16fdef70775395b873cd4f99cc9b44d7b5532e63a5c9e6a34dbf0864f5c42f02e6", @typed={0x4, 0x7}, @typed={0xc, 0x120, 0x0, 0x0, @u64=0x43}, @nested={0x4, 0x93}]}, @generic="e4d527778c7d490c317f0e59d20abf6bf0ec4ee750d30b9e365a0e23b36e1492b3ef1f98fd9e1088d40b0cbdfb09889c0a826e74592d53122662999be77219200325b5b5008759d2c2b7c38ccd2a97b32c381cbc3fa3d740a619f4be", @generic="00a158a0a7c33e706ac5980bd0d2714a5e014ed6d074985a79a1dbeec22a4b48ad6331afb09e34e7d855973e7046be078d61caa4a265d182cac6b58494adb5b1656000d946e76a19feaa28330442f1ee9b8522e1333413fcc6a9a4768b9ad4a99e3bc8a70ecc3b1b687d15b00021bdc3d049e2c166794fca0ffe3220a2f23d18482753218f46fa84b2e996343c5539620a4a70b5c301d986a1312a0a2de83c73884fe8370268e55e9deb4b7fff3979c458d3635a36b4c39b05779333315a3fd153b11c5028033f94b903ff0e8d26705fdb5755981d47561c01f0d6423755d62b3b7104abfbe4d73fffce0cf635", @generic="f72f0842855169af473a5e3b3f646ab2d096f41e2a5ee3492f80c946ab5fe25eeb587240537e8ddf39333ecbd07af6ffd36b55bbffa4d4e785cdcec0c4d82acfa95edab574b4964917ec8a94b2e22b106fcf51b237ea2aaf51ddec9abda6db5341ca5bb423ab98834c409d14c88ba2f6", @typed={0x14, 0x13e, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x14c, 0x0, 0x0, @uid=r9}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$auto(0xdb2, 0x9, 0xc4a3, &(0x7f0000002240)) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000002280), 0x84000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000022c0)='/sys/devices/platform/vhci_hcd.2/usb13/13-0:1.0/usb13-port7/power/pm_qos_no_power_off\x00', 0x48000, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_ENABLE_SE(r10, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x3c, r1, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'nl802154\x00'}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x7}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xa4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4081) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002440)='/sys/devices/virtual/net/nr8/statistics/rx_errors\x00', 0x800, 0x0) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000002480)='/proc/self/comm\x00', 0x80000, 0x0) setsockopt$auto_SO_ATTACH_FILTER(0xffffffffffffffff, 0x7, 0x1a, &(0x7f0000002500)='$\x00', 0x38cf6d7e) 2m7.226924384s ago: executing program 1 (id=397): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000019c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000019c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a00)=ANY=[@ANYBLOB="810081ff", @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf25030000000800010006000000"], 0x1c}, 0x63, 0x0, 0x0, 0x4}, 0x4040010) (async) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a00)=ANY=[@ANYBLOB="810081ff", @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf25030000000800010006000000"], 0x1c}, 0x63, 0x0, 0x0, 0x4}, 0x4040010) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) (async) madvise$auto(0x0, 0x20499d, 0x9) setsockopt$auto(r3, 0x6, 0x3, &(0x7f0000000040)='/dev/ram7\x00', 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) ioctl$auto(0xffffffffffffffff, 0x541d, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2m6.182974808s ago: executing program 1 (id=401): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r0, 0x80184132, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/security/tomoyo/manager\x00', 0x200, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D1\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC1D1p\x00', 0x80900, 0x0) mmap$auto(0x0, 0x40009, 0xdd, 0xfd, 0x7, 0x28000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x700000000000000) ioctl$auto_FS_IOC_GETFSUUID(r1, 0x80111500, 0xffffffff) r5 = open(0x0, 0x345242, 0x1c0) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) mmap$auto(0x2, 0x2020009, 0x200000000007, 0xeb1, r5, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fcntl$auto(r6, 0x400, 0x1) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7f) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0xeee00, 0x31) mmap$auto(0x1, 0x2020006, 0x3, 0xeb1, r3, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') socket(0x21, 0x2, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xffffffffffffc318, 0x948b, 0x3, 0x15f4da06, 0x3, 0x40000003, 0x62, 0x8000001f, 0x9, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 2m5.001448191s ago: executing program 1 (id=405): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x806, 0x40a00006, 0x2, 0x11, 0x602, 0x0) mmap$auto(0x800000, 0x8, 0x0, 0x40eb2, 0x401, 0x300000000000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1, 0x400008, 0xdf, 0x100000009b72, r0, 0x7ffe) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f0000000180)=@generic={0xb, "00000000000600"}, 0x3) sendmmsg$auto(0x3, 0x0, 0x9a4, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x4, 0x400008, 0x1fc, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x1, 0x100000004, 0x100000004, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth1_macvtap/locktime\x00', 0x103142, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/ip_mr_vif\x00', 0x100, 0x0) pread64$auto(r3, 0x0, 0x3, 0x5) userfaultfd$auto(0x80000000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r4, r2, 0x0, 0x6) r5 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x7, 0x4) wait4$auto(r5, 0x0, 0x80000001, &(0x7f0000000040)={{0xff, 0xffffffffffffffff}, {0x6, 0xffffffffffffffaf}, 0x4, 0x810, 0x3, 0xa5a5, 0x9, 0x20001, 0x1, 0x100000001, 0x3ff, 0x6, 0x4, 0x2000, 0x5, 0x8000000000000001}) getpgrp(r5) getpgid(r5) socketpair$auto(0x800, 0xffffff79, 0x6, &(0x7f0000000100)=0x8) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) 1m54.214222781s ago: executing program 32 (id=388): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) r1 = socket(0x21, 0x2, 0x2) shutdown$auto(r1, 0xfffffff9) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) stat$auto(&(0x7f0000000240)='}[,&*}/../file0\x00', 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000000)=&(0x7f0000000200)=' ') setsockopt$auto(r0, 0xffffffff, 0xff, &(0x7f0000000040)=' ', 0x2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x24048804) 1m49.510254355s ago: executing program 33 (id=405): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x806, 0x40a00006, 0x2, 0x11, 0x602, 0x0) mmap$auto(0x800000, 0x8, 0x0, 0x40eb2, 0x401, 0x300000000000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1, 0x400008, 0xdf, 0x100000009b72, r0, 0x7ffe) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f0000000180)=@generic={0xb, "00000000000600"}, 0x3) sendmmsg$auto(0x3, 0x0, 0x9a4, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x4, 0x400008, 0x1fc, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x1, 0x100000004, 0x100000004, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth1_macvtap/locktime\x00', 0x103142, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/ip_mr_vif\x00', 0x100, 0x0) pread64$auto(r3, 0x0, 0x3, 0x5) userfaultfd$auto(0x80000000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r4, r2, 0x0, 0x6) r5 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x7, 0x4) wait4$auto(r5, 0x0, 0x80000001, &(0x7f0000000040)={{0xff, 0xffffffffffffffff}, {0x6, 0xffffffffffffffaf}, 0x4, 0x810, 0x3, 0xa5a5, 0x9, 0x20001, 0x1, 0x100000001, 0x3ff, 0x6, 0x4, 0x2000, 0x5, 0x8000000000000001}) getpgrp(r5) getpgid(r5) socketpair$auto(0x800, 0xffffff79, 0x6, &(0x7f0000000100)=0x8) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) 59.760524417s ago: executing program 4 (id=639): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x40000000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r1 = socket(0xa, 0x1, 0x84) rseq$auto(&(0x7f0000000300)={0x12, 0x401, 0x0, 0x6, 0xffffffff, 0xffffffff}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) getsockopt$auto(r1, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x646b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder0\x00', 0x80400, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) getdents$auto(0x0, 0x0, 0x700) socket(0xa, 0x5, 0x0) ioctl$auto(0x1, 0x8941, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xc000, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x2b, 0xa, 0xf11) unshare$auto(0x8000000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800009}, 0x1, 0x20000000) madvise$auto(0x6, 0x1, 0x200) prctl$auto_PR_SME_SET_VL(0x3f, 0x80000000, 0x0, 0x6, 0x6) ioctl$auto_VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, 0x0) 57.305925147s ago: executing program 4 (id=648): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x1, 0x15) mmap$auto(0x1000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200006, 0x19) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram10/io-timeout-fail\x00', 0xe3102, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="18a580e6", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25040000000400120004001900"], 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x4004040) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x10, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x8, 0x100000000000001c, 0x280000000000, 0x7, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x80000008040000a, 0x40000402, 0x3, 0x8, 0xffffffff80000000, 0x8000000000009, 0x7, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/sisusb/new_id\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d63882a712, 0x0) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, 0x0, 0x0) 55.877638508s ago: executing program 4 (id=654): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x4a83}, @HSR_A_IF1_AGE={0x8, 0x3, 0xe}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xe}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xfffffffffffffd97}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev}, @HSR_A_IF1_SEQ={0x0, 0x6, 0x1}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40011) r0 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xda, 0xeb1, 0x405, 0x0) sysfs$auto(0x2, 0x100000000000037, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0xe, 0x0, 0x4) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2d, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) kill$auto(0x0, 0x21) utime$auto(0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 54.980852484s ago: executing program 4 (id=659): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) copy_file_range$auto(0x6, 0x0, 0x9, 0x0, 0x7fffffff, 0x2) add_key$auto(0x0, 0x0, 0x0, 0xf9f9, 0x8001) r2 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) ioperm$auto(0x3, 0x5, 0x149) kill$auto(r2, 0x11) timer_create$auto(0x9, &(0x7f0000000280)={@sival_ptr=&(0x7f0000000300)="fa0c1b6cfa58766326b7dafb0524d9af304336254849d69639133f602ddcfd1d78e099f4261f4749b4d51ac140d9797dd0d9bc117d68ed13b66b5c17d55fe7b07a25d53478a4530f53e99a145299a4417df36aec32a6b6a9b2494ff941cc916078a989a261a1cae96ffad4156f0c404b98ec53ca4a8ef7bbd9ff6b6dff5c9ba8ce735c65886058024a27b691b37d3fdee28e639b5f03dc35434402ddd9512f87439e9612afb30805e8a7b0ed25346dd5fee2a6a0405c8a73ac8b3ee2838da0cec4d4ca4d9def8e6b757c55d3afbf9ec1a22e65bfa377fe73c4863b5f905b89192115a8646f36af3e17def2732969272ad1ef301da759bf8dd038f8bba787e82af19048745c11cd20f127dc0d57795e3bf22ec20379fa637d01cb35396fb7a01c4041994d3e6c86bde82608044381b2bd7cd92e5cb3beee6db4813e3782b339ceeb0ed6b097f095b192d0f57ff147889f6b547689c89c25e19d4ede2b54ff306be3bc7522976f249eb066add97b7de8b8d6f61218e8420ca1a3973d1ad1cc9a4a3af2e808713b21dde75df9233fff47293bb2eaf8c0e110c2c7a415089a175ffd8b23c9a500458a113e49659aca64eacef516364a90a594cb899cc4da948c34235c550a7c7bc7392ec02363c3206a123ea98a497dd2dc64764423bec527aebeb70ab573fc65364dda5ae911b60e275a106244585f77a258ab05146cb69027a9672f10883d800e56b4101c2eba92b248eb41eaab9ebb02fc1567b8ab07906ca884123b53cc796bba57c0b6ef874e7fe2d80a1df96ff39eeed798dccad753fa62d4caa8d5dadb8bf0dcd46b08a04172fba60b04bf037fd209de02ee2f4910a54c83ac86c071e23f004b997749e4502dae61ae19e2be6c6e055db1f0c7dab6789b60986fea38372f8cc077be587ef34a496a23f60466715e4fd8494374cf8327b0c24f10e6639c13f064ac61b968a13f58dcf1f50ffb4bb6ef3d5b8e42a6675cc563777eb998eb5a8e03c65eb234e7d5d8cc0fb01f550b7283132d2c906220bc13e0b205f0d1dd2adfaf9efab47243668ca0456d50d300416c911e5dc6ea083eaf9daef85707127fa74152b50292eafdfca849d6b0c8990a8202404ffeb24732800dbf0b37488d496d7291bc8b5bc72f2d4bb377fbf74477de7fdefc167fe2d79903eeb38268a6a3dc05b58a50f4417a2534c4fbc57d339a19c014cd27af27299ded3754781c144cf3fa05defb87c36ee13fb16e893a6b45bd0217ceb1b99bf049eea34767212af22bee84baf40a5c6836173ac7cc9ef7269c4042b5f5da312d193479faa79c570610e2a93ec266160bc71b16c59aaf00c2f48eb38b8d0e67d2aa3c996717a66b6f549fa30868bd244f149b5a8996a1daf8fc329a04788300811f12bff8b890912d506a71274fd06267e54f939dfeb0b3eeeda654b3034e89a36417c30f1251188b53aada83f7904ef30ca4b4e442e7aca64b31dd168f961e1e2158fd54522b90d3384325a3131f1d5a71299708890a25f2c0b1965082b30985e638002774602d92523868efb325a73de7fc484712f90bfe4ee11a2240e01beae154444c38468c894e2adc4388ba626f15ded7e2f2341e11615ab2b0e68bf36cf3f37a053b03a5269d7db9075600387dc9530c9cb75abf18c9c4ca4f924705bf3d00bf10a1a72ae70271ac4b56364d2cd3253939fd266e60e412d0d988d30c638e73a2d7367dee010e8d06fc6fdd3b163358557b25831471cd068f6ae31e36bfb0ad0b44c2ced167b974f0f2826cce49ec4309c35f29efe00599aee5f6d3f81229346079009ac3a45299080d1ca48ee27f550dd20b5e0707c8ae381d2a5eec135684226d7c2e423baa128f904a776bf6eb31081ca95d9e13e66670b60633db303b242f87da663404a15eac4bc2c51a96252ca551fa75a29a2371952fd9bb6356da96f59f4e2479b33fa0971cb42bde17932b2af514d1500f8c8f79dbf5d0ece37cd4ea0f2b7f7e8b84f3163e0cadba20b7a76b76fc807b83a57b79d08639d7d281b7068e055dfd9b1e7f4f1a43d3c12af301fb858dd44143a7163fd4fb7d60ea190b79b2561272625ae9f1cc604b42eda240e22c11a1c2ac03255cb7b50ace8505d7a0bd9c4f76405f52c183753f876cd6ea74d7e2b9f46ea7fb2ae5cdb499e77e653db05fb63000c3afd8714c0ddebf2e3ffafb29005db8320524951b8476381e19bc257977ce5ca76cb7a0da4eae01afb10eb90e57273f6d451707134af88b08aa29c1ad3a8aef7e578ebf86699ac07fcec12d388e5521abf512af9a4b687faee93bb8a21301f544fdf48dbf28ae70fa8f7b3787fbcbc4e41db627b3d24aff70907f7c21a5a58953b2328cfa122a5e0d14dd731950713e3d1a4398f21533a158b8cee0d62a12cdbc0e6a2cf52e76bfcec9fe1987105b4c7d38a290fa5fbea37e374d34cb1a5e906d845ac78e5ded75c9f0ed6be67423d4bc0d9ad85853b736e11d461d2fb6c85f29bd2cb2b8ee8897d9117357185c6840042aa153cb7affc46d96fa157e0da0f7df5347801c1ae16d0db89f3ad6ce1614139488614459716d32d017317817016b4538029472579aaa917494e2a98ee99c6336d69abf110d5eaebaf5d088dfbee0b35e379a74e194e4ce116e88eb9d1b90882c3d84937e7cc4f5e047c1c8fb32a8bbb4032e53282ee8d4bbbc4716aa1ac9a37d1b1fecac3c05f41dfcf866ca3776d773ad009e1ec9363079ad29dabfb88bf0c36839bfd54265823c9bb8da4e55139dea65055e0cac59cdfe09c95578c4353e523d44e759845056c3694d3e00c49bec145456bbd87651cfa92c62051c2aea1fe7604f987a406a4ab30019ea6500a8c7d34ca68513746fde4c93439daa3a6edba38db3eb8fc1094fdf9f79b415f786bf5344e5278da4f2c6691c88eabf50480e1f2742fd7c04fb78866bf54c483071fd0460e9ac874614ae15fd28d33bc40590a1f0b89e40dc9f81323131321fce48ee25ba4cda467ee4492291d8897c4e66dcde44054e0dc9134a0cc1ce3e1b9ddf3f619d8a92723eaa04efdb71c225b365aee0491eb2ca604c0191e035bee507c1355a1df56d9aaeebb603d60b4f8e09a4bbee7bc14b96aad1e1593b5b6465af36e37e83efa25a96c2344369d3462f6f0008af99ff51c78b5a4209b6acdc566d093333dffd6c96c97fdfd1fbf04809c5a9b9a23b072906d7e7e24f264e08aba67d9c52745a61c2d84e7e272719695ca33dc30a6c3ebcb9b4cd27ac2c696eb077f67c45d082e1614f90d24df9268a106275bf62e43e44e630232a149de8a34850becd68e7b59febf1ceec66f15169701ced7f98dcb93c64be2731f5322cde9b9aedc2bd54a8a626d8b5b1f589498d9b5fd373907985c6d90beb7b43380fe52a742db9245e601f307bd6ccea47989d5530b073c8c2e2e304df717b1b205389c490f99db074bc754d75f1c196748ac4a7816bf80cf5dd077bf85ca6acd35eeb0e6fbd02f388f0a2e07b78e350e226f980f537632003166d1e1e8ba27b0531cf78d72bb50bdeed287faf6016fe50cd57f62011864e52cbaaa89bbe9cdcc962ba807f9c1c67a3d926f23c07609078000dc0369640048b3330a4285b8a1adf0167be7041272910ca4b681282cc317582e232e6b648ba89b7dc66b2a5543b9b37274eac4e8913b89f17bb3700cc5777a304cd326fa62db77f30e0553b82ec7fdcb76a18e4c0cb3e62cdb1d49c74c538d0d61909769150703f38682f2795516e3e5f85211f27b776a0126accd25497cc23cf3672824de1665cdc242bf45c37e094e1cec62eb5d4b16f6929188e867843f38e4dc9209b8d6812fc52edf623f2c7a6a993f06f90b258d024855f417f37845ddb39744c9b47f8d7fd6cf3c685a51e2142965f359900aa9688abc8227b7dedc75682de850bfe2a90b888cbb1f2f7340eb25eb8566ca444c066589451c173e719f1c4243b8b9828ef70d0c41e619cebdd66bcf71915c3f32d8ec6675c9ef4ee2631d7bf78f0c1286192d6c3548b83de52d94f3c1aea28b7f64ea6e592774f2ce440ecf766f1c51be1a6eea31a4ff2a57f4eab4bcec11a881841092fd363a905e9395aa7dbee2d09fb1b827ffb49a02ea6814e0f85bb61d352a088f802758e77f94fc1fae0810bf6bb87438ef6e6f27f706b20f53fea34970647cef2175a4e894a04febb45c6928deed327514983b8a5228f293a8cdeef360f39d5079eecad3c54410866630009371fa92f71da85b7476a874f672e70f9a717077943bfb0cc3dbc767247d2fe5be28d9a681d443d9cd1768ce77c7b367fbba0de2d7a8c476681f8b533cab06361814c3b5eb43afd95d2d3286081272e1488cbcfeb49a76e44c2e45e5cf45a3a18d9614bac520ad8a326bd9f09027484cfae50e04137d953db503548fa61c3683cf4619fe964826e40b2e664c08914cd959e42d3e3f604aac8f3b33f84418bd34d4eb8bd6a64b9ee43ab6ca7a99ccf04fff755632e044b2dbf2311d9670558404519afb8532e4c3e10c59f47fc1083f43aab0d76be435a4d5d95843d9e8f9b6da2b3c7e79c0a7403da2a40b41de27c1005f55a9fa8c4c50ebc897b3b989fcbdc4e2e6e7869fc9def5bec9cd963288e1b76aa4a8a7502c67252db17a0fad2b410d655843c336d9ff690601f8a3ca0fda7afca4bb7b2f6a3bd819060c3550817099f91b8f2cb249e7f0f0d2a8ba6a35a63bc31a5d29ba0337282f2ad0c9dad1d6e26eb8637c3b2cf4d8d65057bbd918d5ae4af620d14cfce88c56b7d407d8f0d73ae5f66d9acf329d087e903940150cd67adfd5ab9343b26f5565aa4aa89fb14adf5840f13980158a095a55970379e574fc77adc7f24c703addc69dc4367228c912d60892b26828fcf0b11fd611681ef81f73c67559de5a59c6bf5068b3f620248101b52fc1ad8924df3dce32f886d51b5f5baf5d016706e1e09c3649b5cf9d1a91a0010dd1fa30d663d630aca4a1e5b2cafa0cff6706c712b67543c5dd344aa9a1131328d186ce8b8f1c24737953abce9a7dd9d522e4ac8ee7fda651d4582678f349d9e7309fc7a5b62a31f89fee2e60640aecb8dfa69104cbb634e33f209a4649adbdbd5437626ebbaec7afd73cc1d16163ef3007a82639b8b49db77c3908fe93d7249ca2a580d6a593bf764bcf8c58c2e4e3e9353393a9052809f375eb2b42fe9fa39b96e6f39bbc72982042cb02a2836c154fa5d3f709c627a03b56492d8702928c689d22ea0a7d49908e646dca65b3f7e41cb6300d66b1f415af7c2d9ea2c7559db50b91f54e64f5259c714532f97e752ef35f31e835b41a61c687114419e04ae786035cf5eb1c9756b0d372bfed0a16f633fe16bd1cc8a4f3c71d0a35ea0455e592324bdaa82f1069c386e5739e4451fa8f0d073b9454d75ffe5c731a75e9c6ec43a5da34ea218bf8f82ffc2936c848f3d4637cf0b36e5dedeb729c9be3434ae26348997596c38583db25c81241a0fe46551d70ae878c6d28c75cf28dcf46c9a7b266d1a79f4fbaad31818c1373fb3882afcc0cd158efab9fe4d6cd302641ee64109b8f2b9499d7c0c45dab91570618fccd45aa1e1bbae75361fb1491f5114bdf817ad2c8dfd0267f6c147f2edbd1f8b36da59a0b6651251da8575534f54bba658edbe8cd15e5423d55b4890409829d0120f8ce015ab40f3fce2c32900251cf66587374cbe19009b165306c8640819e02e9c27387d3b1ba6b9d22fc3bc2c302b9b8ac1713adcdd87b052f3bf2456dcadb4f608ca5a1677f792db9a70a049ff981cc2c963c0ac22", @inferred=r1, 0x4, @_tid=r2}, &(0x7f0000001300)=0x3) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x1ff, 0x100, 0x83, 0x101, 0x6, 0x6}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x876c5, 0x8, 0x100000000}}) set_tid_address$auto(&(0x7f0000000000)=0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa3700000800040010000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 53.461979547s ago: executing program 4 (id=665): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x10001, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') umount2$auto(&(0x7f0000000000)='.\x00', 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', 0x0, 0x44000, 0x0) close_range$auto(0xffffffffffffffff, r1, 0xfffffffd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x0, 0x3, 0x4a83}, @HSR_A_IF1_AGE={0x8, 0x3, 0xe}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xe}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev}, @HSR_A_IF1_AGE={0x8, 0x3, 0x3b}, @HSR_A_IFINDEX={0x5}, @HSR_A_IF2_AGE={0x8, 0x4, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40011) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = clone$auto(0x6, 0x4, &(0x7f00000000c0)=0x3, &(0x7f0000000180)=0x80, 0x7fffffff) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd27, 0x259fdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = semctl$auto(0x9b, 0x5, 0x6, 0xb74) shmctl$auto_IPC_SET(0x10, 0x1, &(0x7f0000000480)={{0x6, 0xffffffffffffffff, 0x0, 0x5, 0x6, 0x10000, 0x4}, 0x50e, 0xc, 0x100, 0x7, @inferred=r4, @inferred=r4, 0xb, 0x0, &(0x7f0000000300)="0df7a18643b24e05d14c1d81ac2dfa2ddfb7df4f8118060dba3475f14c286f8737d6c521ab5dd2d371a25cbd5b89d41405a1605454342b45637bb5f89543bd2b43275a1bcfcd5c597720af40e009918cf04a31bcd42af9d9b77633c1bc11754ee1ed7b8b9d9eab57e65bfac9994687bdfe2e35feb0b36266ac558d928d1065ef3d6b796861e0f1037443b3fb717c84d55fa1fe36494598e68ff7f01bfec295dc3dfec0be53a82d2d08e1a0ab90caa27a59f2e986", &(0x7f00000003c0)="3af8864fb4490b3340801826878d3274befc448d52a0cc92094fb5dee272a81784d8e6f82c372241e77b22cb9572edab1a891ca3968571491533e5c9edaee3877a276564b10b5cac1e95cd1e90b6947f4016a2e2d5b8e26e5fe28eead2f5a07058eccd161d107257b3c94dedada34952835314cc148f1833416b42a1f0da7f466233983ec09851f9035106c11f38a8e052033877a5b8233494a5cac6a35de58dad61972cf1324ed05b"}) rt_sigqueueinfo$auto(r6, 0x100, &(0x7f0000000500)={@siginfo_0_0={0x71, 0x6, 0x9, @_rt={r4, r7, @sival_int=0x3}}}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x18, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c8}, 0x0) 53.001403271s ago: executing program 4 (id=668): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xea) r1 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/ieee80211/phy3/rc/name\x00', 0x20100, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb-serial/drivers/epic/uevent\x00', 0xc002, 0x0) mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1c8) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/236, 0xec) 37.764401979s ago: executing program 34 (id=668): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xea) r1 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/ieee80211/phy3/rc/name\x00', 0x20100, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb-serial/drivers/epic/uevent\x00', 0xc002, 0x0) mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1c8) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/236, 0xec) 28.715797544s ago: executing program 0 (id=744): openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/media11\x00', 0x1, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x12002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4) sendmmsg$auto(r1, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00'}) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, r0, 0x8000) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0) r4 = socket(0x28, 0x4, 0x107) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/bdi/7:10/max_ratio\x00', 0x68e00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000001c0)=""/112, 0x70) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r6) sendmsg$auto_TIPC_NL_MEDIA_SET(r6, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r8, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 27.125078149s ago: executing program 0 (id=751): mmap$auto(0x5, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x6, 0x1, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/i8042/serio0/softraw\x00', 0x141042, 0x0) write$auto(r0, &(0x7f0000000000)='\x01\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4a\xb5\x1b\xad0\x10\x19b\xbf\xb7\xa5`\x97\xddzG\x01[{\x17\x05I\xe0\xb1d\x00\x00\x00\x00L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2z\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00', 0x3) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000080), 0x101880, 0x0) 20.480747754s ago: executing program 0 (id=761): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x1, 0x15) mmap$auto(0x1000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200006, 0x19) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram10/io-timeout-fail\x00', 0xe3102, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="18a580e6", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25040000000400120004001900"], 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x4004040) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x10, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x8, 0x100000000000001c, 0x280000000000, 0x7, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x80000008040000a, 0x40000402, 0x3, 0x8, 0xffffffff80000000, 0x8000000000009, 0x7, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/sisusb/new_id\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d63882a712, 0x0) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000000100)="4ceac02070916ed1dc1f91f3c388b5622aa1990800e1d0ae2ef23f241bb2bfd9", 0x20) 19.459420488s ago: executing program 0 (id=764): socket(0x5, 0x3, 0x8) socket(0x22, 0x1, 0x80000000) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f0000000340)=""/179, 0xb3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x8001, 0xd04, 0xfffffffe) socket(0xa, 0x2, 0x88) r0 = socket(0x11, 0x3, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) select$auto(0x1d8cd6be, &(0x7f0000000040)={[0xa4, 0x0, 0xe7b, 0x5, 0x6, 0x6, 0xfffffffeffffffff, 0x36, 0x0, 0x7, 0x4, 0x2aff, 0x4000000000000, 0x4, 0x1, 0x6]}, &(0x7f0000000140)={[0x0, 0x6, 0xe, 0xfffc000000000000, 0x0, 0x6, 0x200, 0x7ff, 0x7f, 0x2, 0x0, 0x3ff, 0xc30, 0x3, 0xffffffffffffffff, 0x7]}, 0x0, &(0x7f0000000240)={0x4, 0x7}) mprotect$auto(0x0, 0x8000000000000001, 0x6) bind$auto(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x200000000003, 0x8) mbind$auto(0x0, 0x2091d2, 0x0, 0x0, 0x8000000000000000, 0xffffffff) mmap$auto(0x0, 0x7, 0x1bffd, 0x9b72, r0, 0x8002) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/dummy_hcd.7/usb8/8-0:1.0/bInterfaceNumber\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001100)=""/4088, 0xff8) r4 = ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) read$auto_binder_features_fops_(r4, &(0x7f00000001c0)=""/74, 0x4a) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x20000, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x4, 0x4}, {0x0, 0x83}}, 0x0) 18.61089258s ago: executing program 0 (id=766): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/fail-nth\x00', 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) fcntl$auto(r0, 0x402, 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/apparmor/exec\x00', 0x68000, 0x0) connect$auto(0x3, 0x0, 0x7f) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x20100, 0x0) pread64$auto(r1, 0x0, 0x40000000f42c, 0x2) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2e902, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_STOP_POLL(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x1b4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x4}, @NFC_ATTR_SE_APDU={0xe6, 0x19, "2edfd08d596a23c114d7ca5cc839222ed3721b9ff490bfa26ce5384f12dc4929faf1b347d5ad89aa2c5cfd6395d1cb9d7457c505d68e0895b3a8b5dad7f55b37a8e63dda04c9254a43c7600568c1bbb85ab84c35622a957b46641a76d80253c38b62e80fda6f99e9c0cbd7bc7702119641c9bfa79783fdd53144e643e115b779bfd44a5ae0f9cda59fd477f7fe2d199405c0567be1f11bddbf0a8fa6e93cc45eca0862c5ea413dfe0ac71549568dfaa9deecb217b9edbf28e4bd242c0a8670983c13e849f591e6fbae3d36c911de6bcd396ee46b83652a01ccc66066a263f094b367"}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x12}, @NFC_ATTR_SE_APDU={0xa7, 0x19, "2c7f5dcbc2288bf6cc6f4ccbc62aa98fd0fa606a4c54219cc3ffffff7f000000008f935d094d007ef76c27e988118d9fa79d88394cc9dd1989f2eec9ef0143851f4f2dd7b17f4b2378d5ca8440a5aadda6f975bc31d6540e408b3f76dfb4aa72421e1fc829d23ed178e1e402ffe9c5db921cd3ec86207cfda2d696aed85432f330f47936669e87cbf9e5fd1a94295faf6b3f43f1c38a95f82c784cc18765c58e344215"}]}, 0x1b4}}, 0x8040) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd0\x00', 0xdd01, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/neigh/tunl0/anycast_delay\x00', 0x400, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0) r7 = socket(0x18, 0x5, 0x0) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x4, 0x422, 0x8b3d) ioctl$sock_SIOCGIFINDEX(r7, 0x40047452, 0x0) mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) 17.413934147s ago: executing program 0 (id=767): socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000", @ANYRES64, @ANYBLOB="010600bd7000fbdbdf250a000000080044822d6463e6059099bd07987c297b23d51e34395f847b8f4684d2f10bdcddcbda944d428f3f6f83d282ddf9f60306f285192e56982c1de1fe380398201cbe2b266f03a003a0480caaa0c4b5610e5babab9ef6bcd394e62ee0fb6a685a4f929e4368c7a7aa694618f3dc6473fc843c29c3e54770051c859e6c50c3e1196a0b5b41d65836219039f8ffd11bc1fca3f157f93c2539f689e67f0b8b9a670c81cabb596a087c5baa67b13990d8c44df92e", @ANYRES32=0xffffffffffffffff], 0x1c}}, 0x20008810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb0, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60044094}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r2, 0x4010ae67, r3) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x240102, 0x0) mmap$auto(0x1, 0x4020009, 0x6, 0x10, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), r3) msgctl$auto_MSG_STAT_ANY(0x10006, 0xd, &(0x7f0000001140)={{0x7, 0xee01, 0xee00, 0x7f, 0x85a3, 0x6, 0x9}, &(0x7f00000010c0)=0x3, &(0x7f0000001100)=0x3, 0x7, 0x8000000000000000, 0x7, 0x8000000000000001, 0x5, 0x200, 0x8, 0xfffd, @inferred=0xffffffffffffffff}) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f0000001200)={"37eb252912afbfe7875d1e06dbdeceb293381a1fc28782ca9573af75406ce89e", 0x0, 0x20000000, 0x401, 0x6, 0xe8}) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000001540)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={0x0, 0x26c}, 0x1, 0x0, 0x0, 0x8004005}, 0x40) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r5, 0x609, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x7}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x3}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x11e, 0x0, 0x0, @fd=r4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) 8.920830253s ago: executing program 3 (id=793): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x101000, 0x0) mmap$auto(0x0, 0xfffffffffffffffd, 0xdf, 0x10, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x80000, 0x6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/team0/base_reachable_time\x00', 0x8202, 0x0) sendfile$auto(r3, r2, 0x0, 0x7fffe000) socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x6, 0x400008, 0xe2, 0x9b72, r0, 0x8000) r4 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000480), 0x101100, 0x0) pread64$auto(r4, 0x0, 0x7, 0x8001) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2a801, 0x0) pwrite64$auto(r5, &(0x7f0000000040)='/dev/vcsa\x00', 0x7b05, 0x5) 8.617057704s ago: executing program 6 (id=794): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x111000, 0x0) mmap$auto(0x0, 0x400005, 0xdb, 0x16, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x8, 0x400008, 0xdf, 0x111, 0x2, 0x8004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x3a3c02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) capset$auto(0x0, 0x0) setsockopt$auto(r1, 0x10000000084, 0x8, 0x0, 0xd) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) mmap$auto(0x0, 0x1, 0x7fffffff, 0x44eb1, 0x3, 0x300000000000) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c04, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0x67) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) socket(0xa, 0x3, 0x3) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) getpid() 5.606085635s ago: executing program 3 (id=800): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) lseek$auto(0x3, 0x8, 0x3) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) munmap$auto(0x8000, 0xffffffff) semctl$auto_GETPID(0x6, 0x8, 0xb, 0xff) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000100)=0x7f) r0 = getpid() prctl$auto(0x3e, 0x1, r0, 0x1, 0x0) clone$auto(0x2ab, 0x7, &(0x7f0000000180)=0x7, &(0x7f00000002c0)=0x40, 0x2) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) read$auto_posix_clock_file_operations_posix_clock(r1, 0x0, 0x0) r2 = semctl$auto_GETPID(0x6, 0x1, 0xb, 0xb7d2) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r2, 0x5, 0x8) msgctl$auto_IPC_INFO(0x44, 0x3, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x2, 0x57e, 0xffff8001}, 0x0, 0x0, 0x0, 0x9, 0x400, 0xfffffffffffffff9, 0x2, 0x18, 0x0, 0xfff8}) kcmp$auto(r2, 0x0, 0x0, r1, r1) getpid() capset$auto(&(0x7f0000000300)={0x101}, &(0x7f0000000340)={0x3, 0xf, 0x5}) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) 4.48866352s ago: executing program 6 (id=802): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f00000001c0)="06067400bd1373ade283e29ef03b962ce2532b902d293cb9ffbe57505c7425ffcc92c9a9d8602b56a825a02f8e7d905e4856d3295886aba91b45", 0x3a) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) read$auto(0x3, 0x0, 0xf34) read$auto(r0, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x5) write$auto(0x3, 0x0, 0xffd8) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019c6139ce8761b5d52", 0x60) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.050020541s ago: executing program 3 (id=803): recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000f80)={{0x0, 0x9, 0x0, 0x5, 0x0, 0x1, 0x80}, 0x8}, 0x10000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x801, 0x100) listen$auto(0x3, 0x81) poll$auto(&(0x7f0000000180)={r1, 0x6, 0x6}, 0x6, 0x8) listen$auto(r2, 0x1004) mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0xffffffffffffffff, 0x0, 0xffe) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0x9b, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f00000010c0)=""/22, 0x16) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/io\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r4, &(0x7f00000051c0)=""/103, 0x67) sendmsg$auto_TIPC_NL_PUBL_GET(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESHEX=0x0], 0x1354}}, 0x40001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 3.553965401s ago: executing program 6 (id=804): mmap$auto(0x0, 0x8001, 0xdf, 0xdcbf, 0xffffffffffffffff, 0x28000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1d, 0x2, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x8000, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) read$auto(r2, 0x0, 0x1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYRES64=r3, @ANYBLOB="060b42bc5f", @ANYRES16=r3], 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) ioperm$auto(0x3, 0xe, 0x2000000000000149) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto(0x2, 0x0, 0x0, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1800, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000feb000/0x12000)=nil, 0x12000, 0x9, 0x4010, r4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0xc34d, 0x2, 0xfffffffffffffffd]}, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r5, 0x0, 0x6) 2.956842333s ago: executing program 5 (id=806): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040084}, 0x40011) r0 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xda, 0xeb1, 0x405, 0x0) sysfs$auto(0x2, 0x100000000000037, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0xe, 0x0, 0x4) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2d, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) kill$auto(0x0, 0x21) utime$auto(0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.44617255s ago: executing program 6 (id=807): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/vlan/vlan1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYBLOB="4687eb"], 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x2004080d) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x802}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x82840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x28050811}, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1fe, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) close_range$auto(r2, 0xfffffffffffff000, 0xeb46) 2.319310328s ago: executing program 35 (id=767): socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000", @ANYRES64, @ANYBLOB="010600bd7000fbdbdf250a000000080044822d6463e6059099bd07987c297b23d51e34395f847b8f4684d2f10bdcddcbda944d428f3f6f83d282ddf9f60306f285192e56982c1de1fe380398201cbe2b266f03a003a0480caaa0c4b5610e5babab9ef6bcd394e62ee0fb6a685a4f929e4368c7a7aa694618f3dc6473fc843c29c3e54770051c859e6c50c3e1196a0b5b41d65836219039f8ffd11bc1fca3f157f93c2539f689e67f0b8b9a670c81cabb596a087c5baa67b13990d8c44df92e", @ANYRES32=0xffffffffffffffff], 0x1c}}, 0x20008810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb0, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60044094}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r2, 0x4010ae67, r3) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x240102, 0x0) mmap$auto(0x1, 0x4020009, 0x6, 0x10, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), r3) msgctl$auto_MSG_STAT_ANY(0x10006, 0xd, &(0x7f0000001140)={{0x7, 0xee01, 0xee00, 0x7f, 0x85a3, 0x6, 0x9}, &(0x7f00000010c0)=0x3, &(0x7f0000001100)=0x3, 0x7, 0x8000000000000000, 0x7, 0x8000000000000001, 0x5, 0x200, 0x8, 0xfffd, @inferred=0xffffffffffffffff}) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f0000001200)={"37eb252912afbfe7875d1e06dbdeceb293381a1fc28782ca9573af75406ce89e", 0x0, 0x20000000, 0x401, 0x6, 0xe8}) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000001540)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={0x0, 0x26c}, 0x1, 0x0, 0x0, 0x8004005}, 0x40) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r5, 0x609, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x7}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x3}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x11e, 0x0, 0x0, @fd=r4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) 2.277274479s ago: executing program 5 (id=809): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) ioctl$auto_TCFLSH2(r0, 0x540b, 0xfffffffffffffffd) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r1, 0x5453, 0x0) write$auto(0x3, 0x0, 0xfdef) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0xffffffffffffffff, 0x0, 0x55) socket(0x11, 0x800, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r2) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="495f3237fdb3b8e09c9a66284652800d556977c13f59a5ea3359750964ebe9e39e905c886925cb2d70881f7c46d2413c5cebbcd88eebbb90ee7a34f0672b56552c9f24bb4b8dbde9f4f1bc22799220fc58a17ea0deb29755c0642f642134013188424a62cd16b5b4f653c02cd066828622f8090434cdc8bbaed908000000fe69c4f291121189527a3f437df00f288acd5233d74aceb2fdbdf0476cc5682fee6ed95513dcb8ef7249c3a6c00766324549e356f51b9a0488db8f639cf76f590f9e3bdc5618d9317d5d573908e65baef2285104013fc85abaff0fe82f15bbd2496d52ae729a6564cd05528df7b5ddb9dea751bb182a8fd0b60000000000", @ANYRES16=r3], 0x1094}, 0x1, 0x0, 0x0, 0x80}, 0x40040) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0xc40, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0xc0603d06, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffdfffffff, 0x3, 0x62, 0x84000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xd, 0x1, 0x1f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d40, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto(r2, 0x57, 0xffffffffffffffff) prctl$auto(0x41, 0x201, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0xbe, 0x401, 0x300000000002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/authorized_default\x00', 0x141000, 0x0) 1.42930975s ago: executing program 6 (id=810): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x400000008000) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x4e24, @multicast1}, 0x6a) close_range$auto(0x2, 0x8, 0x0) 1.310057134s ago: executing program 5 (id=811): rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0xee01) pread64$auto(0xffffffffffffffff, 0x0, 0xa0, 0xf86) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCEXCL2(r0, 0x540c, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) (async) setresuid$auto(0x0, 0x7, 0x8080) (async) setfsuid$auto(0xee01) (async) pread64$auto(0xffffffffffffffff, 0x0, 0xa0, 0xf86) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) (async) ioctl$auto_TIOCEXCL2(r0, 0x540c, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) (async) 1.13629327s ago: executing program 3 (id=812): socket(0xa, 0x801, 0x84) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x20089, 0x4000000000df, 0xeb1, 0x401, 0x2000000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) io_pgetevents$auto(0x5, 0x3, 0xffffffff, &(0x7f0000000000)={0x8000000000000001, 0xd8, 0x800, 0xa}, &(0x7f0000000040)={0x7, 0x8}, &(0x7f00000001c0)={&(0x7f0000000180)={0x2}}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/025/001\x00', 0x200, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0xa0000000000d, 0xea, 0x0, 0xf, 0x2, 0x3, 0x5, 0x2000000000000002, 0x8000000009, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x90, 0x14006]}, 0x0, 0x0) 1.13576033s ago: executing program 5 (id=813): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0), 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) r0 = fanotify_init$auto(0x3, 0x2010000000000) sysfs$auto(0x2, 0x1e, 0x0) fsopen$auto(0x0, 0x1) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x21, 0x2, 0xa) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000005) socket(0x1a, 0x2, 0x819) sendmsg$auto_MACSEC_CMD_ADD_TXSA(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) read$auto(0xffffffffffffffff, &(0x7f0000000000)=',}`}($\x00', 0xd) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7fffffffffffffff, 0x9}, 0x7}, 0x3, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) mmap$auto(0x8, 0x5, 0x2, 0x12, 0xffffffffffffffff, 0x1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mptcp/pm_type\x00', 0xe0002, 0x0) sendfile$auto(0x1, r1, 0x0, 0xc01) symlink$auto(&(0x7f0000001500)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00') mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) 1.00883618s ago: executing program 5 (id=814): mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)={0x9, 0xffffff90, 0x0}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1e, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 755.215308ms ago: executing program 3 (id=815): mlockall$auto(0x6) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r0, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x9, &(0x7f0000000040)="cac259ba72e3ae5f2ded0cc687960941303f2ad882b7a8c4f93550c85cdd7e398235a429e39eb848fa7c6cf2b9c16f8830f4b4186e98d3a2436f215aa9e461a72fd2f6de7a3a161647461691c029560dc6f7ead607ba73be4f85fa33c1763c6a01cf544534082fada5ab3cb93e0f18b3") ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) 500.278203ms ago: executing program 6 (id=816): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) lseek$auto(0x3, 0x8, 0x3) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) munmap$auto(0x8000, 0xffffffff) semctl$auto_GETPID(0x6, 0x8, 0xb, 0xff) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000100)=0x7f) r0 = getpid() prctl$auto(0x3e, 0x1, r0, 0x1, 0x0) clone$auto(0x2ab, 0x7, &(0x7f0000000180)=0x7, &(0x7f00000002c0)=0x40, 0x2) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) read$auto_posix_clock_file_operations_posix_clock(r1, 0x0, 0x0) r2 = semctl$auto_GETPID(0x6, 0x1, 0xb, 0xb7d2) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r2, 0x5, 0x8) msgctl$auto_IPC_INFO(0x44, 0x3, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x2, 0x57e, 0xffff8001}, 0x0, 0x0, 0x0, 0x9, 0x400, 0xfffffffffffffff9, 0x2, 0x18, 0x0, 0xfff8}) kcmp$auto(r2, 0x0, 0x0, r1, r1) getpid() capset$auto(&(0x7f0000000300)={0x101}, &(0x7f0000000340)={0x3, 0xf, 0x5}) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) 473.653954ms ago: executing program 3 (id=817): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = dup$auto(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)={0x2, 0x0, "8ce3cca0932057312ef9be259b7b7df7", "105aaa3396c04f8e8226a55c96cf852e", "66694af9c3153abc8239a69871113bdaa57957457fe3a0bd42f82d3e51e57ccf", "4512fe968be92c9d520d940b596a7f5e9d09fa185c12279ef1a9b2f0004f996dc7441572cbcc953158468a268fca3dc3301df9bb8a305835aaaf7245ceaf20204a4dfd49f04134d3b42c833ad64443fa", "2fbe7cb67fd0ec8cefe4056804e237f7", "714bafcde5d7583fd6f5ac502aa34906bbfbb000414eaec2e5c7b9e8298da083d79481d9618df102be1c36f2972a442652a171f3b53f7089a34d06309c53187594ff460fa62439e747aeadf02d3ca06d", "e641306c7dd6770ec567df06f891d0d94610b3b4f2fc9dd61f677af25f935ff76e2ac2cbedc7a81e8daaff7ec75eb3ba9d47f9a8e35f41f4fc23c60eed6055e8bfb2680ed198fb3c49a68fef3f9b8eab8e302ffc21dc49ad37e3a0ffecf705260f35ad30af9502f7d56790bac28ee74e6945ad86b358afcc7a82f6f2826af00d"}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048081}, 0x4044040) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyu6\x00', 0x80002, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f00000001c0)="06067400bd1373ade283e29ef03b962ce2532b902d293cb9ffbe57505c7425ffcc92c9a9d8602b56a825a02f8e7d905e4856d3295886aba91b45", 0x3a) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop12/queue/nr_requests\x00', 0x80302, 0x0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8002008000) write$auto(0x3, 0x0, 0x3f00) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) read$auto(0x3, 0x0, 0xf34) read$auto(r1, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x5) write$auto(0x3, 0x0, 0xffd8) openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/auxv\x00', 0x101100, 0x0) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019c6139ce8761b5d52", 0x60) 0s ago: executing program 5 (id=818): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, r1) ioctl$auto_KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000000)={0x401, 0x0, 0x200, 0x9}) shmctl$auto(0x3, 0x1000, &(0x7f0000000180)={{0x19, r1, r3, 0xff, 0x6, 0x3, 0x6}, 0x228, 0xffffffffffffffff, 0x6, 0x3, @raw=0x1, @raw=0x7c, 0x1, 0x0, &(0x7f0000000040)="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", &(0x7f0000000140)="828889622d4efb32b1ce0086c49024fc8030266c54e7e6acf4afa6b367eea913fabf8346eb85dbd4365aa551aec75ad1b8f7c48fb0076276ff4388"}) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) sysfs$auto(0x4, 0x0, 0x6) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    syzkaller syzkaller login: [ 188.831258][ T7924] netlink: 342 bytes leftover after parsing attributes in process `syz.0.429'. [ 188.848765][ T7924] netlink: 118 bytes leftover after parsing attributes in process `syz.0.429'. [ 190.083196][ T30] audit: type=1800 audit(6042264315.723:5): pid=7942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.436" name="dbroot" dev="configfs" ino=17195 res=0 errno=0 [ 190.410397][ T7948] netlink: 330 bytes leftover after parsing attributes in process `syz.0.437'. [ 191.657893][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.442'. [ 191.846996][ T7970] netlink: 330 bytes leftover after parsing attributes in process `syz.0.441'. [ 191.913197][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.443'. [ 193.001118][ T5836] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 194.282849][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.296321][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.302843][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.309636][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.320833][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.329286][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.337062][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.595787][ T8007] chnl_net:caif_netlink_parms(): no params data found [ 194.724534][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.731856][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.740156][ T8007] bridge_slave_0: entered allmulticast mode [ 194.748503][ T8007] bridge_slave_0: entered promiscuous mode [ 194.757518][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.765459][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.772833][ T8007] bridge_slave_1: entered allmulticast mode [ 194.780691][ T8007] bridge_slave_1: entered promiscuous mode [ 194.825591][ T8007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.838486][ T8007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.926197][ T8007] team0: Port device team_slave_0 added [ 194.940930][ T8007] team0: Port device team_slave_1 added [ 194.980054][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.996834][ T8018] FAULT_INJECTION: forcing a failure. [ 194.996834][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 195.013262][ T8018] CPU: 0 UID: 0 PID: 8018 Comm: syz.0.452 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 195.013301][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.013315][ T8018] Call Trace: [ 195.013323][ T8018] [ 195.013333][ T8018] dump_stack_lvl+0x16c/0x1f0 [ 195.013372][ T8018] should_fail_ex+0x512/0x640 [ 195.013403][ T8018] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 195.013424][ T8018] should_failslab+0xc2/0x120 [ 195.013442][ T8018] __kmalloc_cache_noprof+0x6a/0x3e0 [ 195.013456][ T8018] ? alloc_tty_struct+0x96/0x8c0 [ 195.013477][ T8018] alloc_tty_struct+0x96/0x8c0 [ 195.013496][ T8018] ? __pfx_alloc_tty_struct+0x10/0x10 [ 195.013520][ T8018] pty_common_install+0x1c7/0xb30 [ 195.013537][ T8018] ? __pfx_pty_unix98_install+0x10/0x10 [ 195.013552][ T8018] tty_init_dev.part.0+0x99/0x500 [ 195.013572][ T8018] tty_init_dev+0x60/0x80 [ 195.013589][ T8018] ? __pfx_ptmx_open+0x10/0x10 [ 195.013601][ T8018] ptmx_open+0x10d/0x360 [ 195.013614][ T8018] ? __pfx_ptmx_open+0x10/0x10 [ 195.013627][ T8018] chrdev_open+0x231/0x6a0 [ 195.013643][ T8018] ? __pfx_apparmor_file_open+0x10/0x10 [ 195.013661][ T8018] ? __pfx_chrdev_open+0x10/0x10 [ 195.013678][ T8018] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 195.013702][ T8018] do_dentry_open+0x741/0x1c10 [ 195.013717][ T8018] ? __pfx_chrdev_open+0x10/0x10 [ 195.013736][ T8018] vfs_open+0x82/0x3f0 [ 195.013756][ T8018] path_openat+0x1e5e/0x2d40 [ 195.013777][ T8018] ? __pfx_path_openat+0x10/0x10 [ 195.013796][ T8018] do_filp_open+0x20b/0x470 [ 195.013810][ T8018] ? __pfx_do_filp_open+0x10/0x10 [ 195.013838][ T8018] ? alloc_fd+0x471/0x7d0 [ 195.013856][ T8018] do_sys_openat2+0x11b/0x1d0 [ 195.013874][ T8018] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.013900][ T8018] __x64_sys_openat+0x174/0x210 [ 195.013919][ T8018] ? __pfx___x64_sys_openat+0x10/0x10 [ 195.013939][ T8018] ? rcu_is_watching+0x12/0xc0 [ 195.013961][ T8018] do_syscall_64+0xcd/0x230 [ 195.013983][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.013997][ T8018] RIP: 0033:0x7f67cb38e969 [ 195.014009][ T8018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.014023][ T8018] RSP: 002b:00007f67cc164038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.014043][ T8018] RAX: ffffffffffffffda RBX: 00007f67cb5b6080 RCX: 00007f67cb38e969 [ 195.014053][ T8018] RDX: 0000000000002200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 195.014061][ T8018] RBP: 00007f67cb410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 195.014069][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.014077][ T8018] R13: 0000000000000000 R14: 00007f67cb5b6080 R15: 00007ffc7c93ccf8 [ 195.014095][ T8018] [ 195.022937][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.322052][ T30] audit: type=1800 audit(6042264320.943:6): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.452" name="trace_pipe" dev="tracefs" ino=1251 res=0 errno=0 [ 195.342349][ T8007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.355620][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.362560][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.391744][ T8007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.504653][ T8007] hsr_slave_0: entered promiscuous mode [ 195.511326][ T8007] hsr_slave_1: entered promiscuous mode [ 195.890222][ T8007] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 195.906779][ T8007] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.920994][ T8007] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.990579][ T8007] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.172718][ T8007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.208992][ T8007] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.222444][ T3030] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.229570][ T3030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.247068][ T7533] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.254180][ T7533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.355970][ T5833] Bluetooth: hci4: command tx timeout [ 196.479471][ T8007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.739906][ T8007] veth0_vlan: entered promiscuous mode [ 196.759576][ T8007] veth1_vlan: entered promiscuous mode [ 196.800468][ T8007] veth0_macvtap: entered promiscuous mode [ 196.816300][ T8007] veth1_macvtap: entered promiscuous mode [ 196.848617][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.861550][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.879205][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.890628][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.904749][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.921522][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.936362][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.949736][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.970923][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.005255][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.035248][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.053410][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.064037][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.074038][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.084544][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.096762][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.108009][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.119875][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.157953][ T8007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.167400][ T8007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.176524][ T8007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.185827][ T8007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.274099][ T8052] Console: switching to colour frame buffer device 128x48 [ 197.362801][ T7535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.362851][ T7535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.411993][ T797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.412017][ T797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.018527][ T8067] FAULT_INJECTION: forcing a failure. [ 198.018527][ T8067] name failslab, interval 1, probability 0, space 0, times 0 [ 198.032405][ T8067] CPU: 1 UID: 0 PID: 8067 Comm: syz.4.458 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 198.032439][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.032454][ T8067] Call Trace: [ 198.032463][ T8067] [ 198.032473][ T8067] dump_stack_lvl+0x16c/0x1f0 [ 198.032513][ T8067] should_fail_ex+0x512/0x640 [ 198.032546][ T8067] ? __kmalloc_noprof+0xbf/0x510 [ 198.032577][ T8067] ? __netlink_kernel_create+0x17f/0x750 [ 198.032608][ T8067] should_failslab+0xc2/0x120 [ 198.032638][ T8067] __kmalloc_noprof+0xd2/0x510 [ 198.032669][ T8067] ? __netlink_create+0x208/0x2c0 [ 198.032699][ T8067] __netlink_kernel_create+0x17f/0x750 [ 198.032734][ T8067] ? __pfx___netlink_kernel_create+0x10/0x10 [ 198.032785][ T8067] ? __pfx_diag_net_init+0x10/0x10 [ 198.032810][ T8067] diag_net_init+0xbd/0x140 [ 198.032836][ T8067] ? __pfx_diag_net_init+0x10/0x10 [ 198.032860][ T8067] ? find_held_lock+0x2b/0x80 [ 198.032886][ T8067] ? __pfx_sock_diag_rcv+0x10/0x10 [ 198.032908][ T8067] ? __pfx_sock_diag_bind+0x10/0x10 [ 198.032935][ T8067] ? __raw_spin_lock_init+0x3a/0x110 [ 198.032973][ T8067] ? __pfx_cma_init_net+0x10/0x10 [ 198.033003][ T8067] ops_init+0x1df/0x5f0 [ 198.033037][ T8067] setup_net+0x21e/0x850 [ 198.033072][ T8067] ? __pfx_setup_net+0x10/0x10 [ 198.033101][ T8067] ? lockdep_init_map_type+0x5c/0x280 [ 198.033132][ T8067] ? __pfx_down_read_killable+0x10/0x10 [ 198.033161][ T8067] ? debug_mutex_init+0x37/0x70 [ 198.033190][ T8067] copy_net_ns+0x2a6/0x5f0 [ 198.033229][ T8067] create_new_namespaces+0x3ea/0xad0 [ 198.033266][ T8067] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 198.033298][ T8067] ksys_unshare+0x45b/0xa40 [ 198.033332][ T8067] ? __pfx_ksys_unshare+0x10/0x10 [ 198.033363][ T8067] ? xfd_validate_state+0x5d/0x180 [ 198.033390][ T8067] ? rcu_is_watching+0x12/0xc0 [ 198.033424][ T8067] __x64_sys_unshare+0x31/0x40 [ 198.033456][ T8067] do_syscall_64+0xcd/0x230 [ 198.033492][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.033516][ T8067] RIP: 0033:0x7f5c5ef8e969 [ 198.033535][ T8067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.033558][ T8067] RSP: 002b:00007f5c5fe0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 198.033580][ T8067] RAX: ffffffffffffffda RBX: 00007f5c5f1b5fa0 RCX: 00007f5c5ef8e969 [ 198.033596][ T8067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 198.033611][ T8067] RBP: 00007f5c5f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 198.033627][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.033641][ T8067] R13: 0000000000000000 R14: 00007f5c5f1b5fa0 R15: 00007ffd84722d28 [ 198.033676][ T8067] [ 198.446295][ T5833] Bluetooth: hci4: command tx timeout [ 198.714559][ T8072] netlink: 330 bytes leftover after parsing attributes in process `syz.3.460'. [ 198.848584][ T8074] CIFS mount error: No usable UNC path provided in device string! [ 198.848584][ T8074] [ 198.859331][ T8074] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 199.415305][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 199.433054][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 199.443174][ T8096] sctp: [Deprecated]: syz.0.468 (pid 8096) Use of int in max_burst socket option deprecated. [ 199.443174][ T8096] Use struct sctp_assoc_value instead [ 199.459666][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 199.474927][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 199.485889][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 199.832528][ T8098] chnl_net:caif_netlink_parms(): no params data found [ 200.068429][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.127126][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.136615][ T8098] bridge_slave_0: entered allmulticast mode [ 200.148710][ T8098] bridge_slave_0: entered promiscuous mode [ 200.162286][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.175486][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.186562][ T8098] bridge_slave_1: entered allmulticast mode [ 200.196507][ T8098] bridge_slave_1: entered promiscuous mode [ 200.283025][ T8098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.308952][ T8098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.441640][ T8098] team0: Port device team_slave_0 added [ 200.500785][ T8098] team0: Port device team_slave_1 added [ 200.528408][ T5833] Bluetooth: hci4: command tx timeout [ 200.690123][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.703261][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.746977][ T8098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.803990][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.811284][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.873598][ T8098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.436701][ T8143] i2c i2c-0: delete_device: Can't find device in list [ 201.460444][ T8098] hsr_slave_0: entered promiscuous mode [ 201.471911][ T8098] hsr_slave_1: entered promiscuous mode [ 201.481712][ T8151] FAULT_INJECTION: forcing a failure. [ 201.481712][ T8151] name fail_futex, interval 1, probability 0, space 0, times 0 [ 201.498309][ T8130] netlink: 330 bytes leftover after parsing attributes in process `syz.3.473'. [ 201.520227][ T8098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.556046][ T5833] Bluetooth: hci5: command tx timeout [ 201.564871][ T8098] Cannot create hsr debugfs directory [ 201.572271][ T8151] CPU: 0 UID: 0 PID: 8151 Comm: syz.0.477 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 201.572321][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.572332][ T8151] Call Trace: [ 201.572339][ T8151] [ 201.572348][ T8151] dump_stack_lvl+0x16c/0x1f0 [ 201.572390][ T8151] should_fail_ex+0x512/0x640 [ 201.572437][ T8151] get_futex_key+0x49e/0x1000 [ 201.572469][ T8151] ? __pfx_get_futex_key+0x10/0x10 [ 201.572509][ T8151] futex_wake+0xe7/0x4e0 [ 201.572542][ T8151] ? __pfx_futex_wake+0x10/0x10 [ 201.572574][ T8151] ? kmem_cache_free+0x2d4/0x4d0 [ 201.572598][ T8151] ? fd_install+0x225/0x750 [ 201.572618][ T8151] ? putname+0x154/0x1a0 [ 201.572649][ T8151] do_futex+0x1e3/0x350 [ 201.572674][ T8151] ? __pfx_do_futex+0x10/0x10 [ 201.572705][ T8151] __x64_sys_futex+0x1e0/0x4c0 [ 201.572735][ T8151] ? __x64_sys_openat+0x174/0x210 [ 201.572765][ T8151] ? __pfx___x64_sys_futex+0x10/0x10 [ 201.572794][ T8151] ? rcu_is_watching+0x12/0xc0 [ 201.572828][ T8151] do_syscall_64+0xcd/0x230 [ 201.572865][ T8151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.572891][ T8151] RIP: 0033:0x7f67cb38e969 [ 201.572911][ T8151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.572934][ T8151] RSP: 002b:00007f67cc1640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.572959][ T8151] RAX: ffffffffffffffda RBX: 00007f67cb5b6088 RCX: 00007f67cb38e969 [ 201.572976][ T8151] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f67cb5b608c [ 201.572992][ T8151] RBP: 00007f67cb5b6080 R08: 00007f67cc186000 R09: 0000000000000000 [ 201.573008][ T8151] R10: 0000000000000009 R11: 0000000000000246 R12: 00007f67cb5b608c [ 201.573025][ T8151] R13: 0000000000000000 R14: 00007ffc7c93cc10 R15: 00007ffc7c93ccf8 [ 201.573060][ T8151] [ 201.758071][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.478457][ T8098] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.511937][ T8098] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.555960][ T8098] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 202.603300][ T5833] Bluetooth: hci4: command tx timeout [ 202.634905][ T8098] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 202.804128][ T8169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.482'. [ 202.903825][ T8169] vcan0: entered promiscuous mode [ 202.930039][ T8098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.982507][ T8098] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.102114][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.109339][ T7533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.330562][ T3030] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.337714][ T3030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.634163][ T5836] Bluetooth: hci5: command tx timeout [ 203.791589][ T8165] Invalid ELF header magic: != ELF [ 204.448385][ T8098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.713721][ T5836] Bluetooth: hci5: command tx timeout [ 205.778362][ T8211] netlink: 330 bytes leftover after parsing attributes in process `syz.4.487'. [ 206.012216][ T8098] veth0_vlan: entered promiscuous mode [ 206.050430][ T8098] veth1_vlan: entered promiscuous mode [ 206.158022][ T8098] veth0_macvtap: entered promiscuous mode [ 206.194592][ T8098] veth1_macvtap: entered promiscuous mode [ 206.249069][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.261636][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.293010][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.343349][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.372069][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.396880][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.407152][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.421918][ T8226] IPVS: length: 150994944 != 15703474184 [ 206.442266][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.468259][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.503642][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.525286][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.551133][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.570290][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.596332][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.610319][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.623039][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.639370][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.650468][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.663746][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.675471][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.687069][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.699646][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.716210][ T8098] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.773557][ T8098] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.782306][ T8098] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.809122][ T8098] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.190972][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.217074][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.406528][ T7533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.415289][ T7533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.793590][ T5836] Bluetooth: hci5: command tx timeout [ 208.269648][ T8252] netlink: 330 bytes leftover after parsing attributes in process `syz.0.495'. [ 209.253475][ T5836] Bluetooth: hci5: unexpected subevent 0x01 length: 4 < 18 [ 210.424009][ T8287] FAULT_INJECTION: forcing a failure. [ 210.424009][ T8287] name failslab, interval 1, probability 0, space 0, times 0 [ 210.469741][ T8287] CPU: 0 UID: 0 PID: 8287 Comm: syz.0.501 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 210.469778][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.469792][ T8287] Call Trace: [ 210.469800][ T8287] [ 210.469810][ T8287] dump_stack_lvl+0x16c/0x1f0 [ 210.469853][ T8287] should_fail_ex+0x512/0x640 [ 210.469887][ T8287] ? fs_reclaim_acquire+0xae/0x150 [ 210.469935][ T8287] ? tomoyo_encode2+0x100/0x3e0 [ 210.469968][ T8287] should_failslab+0xc2/0x120 [ 210.469999][ T8287] __kmalloc_noprof+0xd2/0x510 [ 210.470026][ T8287] ? d_absolute_path+0x136/0x1a0 [ 210.470062][ T8287] tomoyo_encode2+0x100/0x3e0 [ 210.470102][ T8287] tomoyo_encode+0x29/0x50 [ 210.470134][ T8287] tomoyo_realpath_from_path+0x18f/0x6e0 [ 210.470179][ T8287] tomoyo_path_number_perm+0x245/0x580 [ 210.470208][ T8287] ? tomoyo_path_number_perm+0x237/0x580 [ 210.470242][ T8287] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 210.470311][ T8287] ? find_held_lock+0x2b/0x80 [ 210.470336][ T8287] ? hook_file_ioctl_common+0x145/0x410 [ 210.470373][ T8287] ? __fget_files+0x20e/0x3c0 [ 210.470403][ T8287] security_file_ioctl+0x9b/0x240 [ 210.470436][ T8287] __x64_sys_ioctl+0xb7/0x200 [ 210.470473][ T8287] do_syscall_64+0xcd/0x230 [ 210.470510][ T8287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.470536][ T8287] RIP: 0033:0x7f67cb38e969 [ 210.470556][ T8287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.470580][ T8287] RSP: 002b:00007f67cc122038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.470604][ T8287] RAX: ffffffffffffffda RBX: 00007f67cb5b6240 RCX: 00007f67cb38e969 [ 210.470621][ T8287] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 210.470636][ T8287] RBP: 00007f67cb410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 210.470650][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.470664][ T8287] R13: 0000000000000000 R14: 00007f67cb5b6240 R15: 00007ffc7c93ccf8 [ 210.470700][ T8287] [ 210.470724][ T8287] ERROR: Out of memory at tomoyo_realpath_from_path. [ 211.842974][ T8292] FAULT_INJECTION: forcing a failure. [ 211.842974][ T8292] name failslab, interval 1, probability 0, space 0, times 0 [ 211.885833][ T8292] CPU: 0 UID: 0 PID: 8292 Comm: syz.4.504 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 211.885869][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.885884][ T8292] Call Trace: [ 211.885892][ T8292] [ 211.885903][ T8292] dump_stack_lvl+0x16c/0x1f0 [ 211.885944][ T8292] should_fail_ex+0x512/0x640 [ 211.885978][ T8292] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 211.886012][ T8292] should_failslab+0xc2/0x120 [ 211.886043][ T8292] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 211.886072][ T8292] ? __kernfs_new_node+0xd2/0x8a0 [ 211.886103][ T8292] __kernfs_new_node+0xd2/0x8a0 [ 211.886131][ T8292] ? __pfx___kernfs_new_node+0x10/0x10 [ 211.886166][ T8292] ? find_held_lock+0x2b/0x80 [ 211.886192][ T8292] ? kernfs_root+0xee/0x2a0 [ 211.886224][ T8292] kernfs_new_node+0x13c/0x1e0 [ 211.886260][ T8292] __kernfs_create_file+0x53/0x350 [ 211.886297][ T8292] sysfs_add_file_mode_ns+0x207/0x3c0 [ 211.886343][ T8292] internal_create_group+0x578/0xf30 [ 211.886378][ T8292] ? __pfx_internal_create_group+0x10/0x10 [ 211.886410][ T8292] ? kernfs_create_link+0x1bd/0x240 [ 211.886449][ T8292] internal_create_groups+0x9d/0x150 [ 211.886478][ T8292] device_add+0x77f/0x1a70 [ 211.886515][ T8292] ? __pfx_device_add+0x10/0x10 [ 211.886547][ T8292] ? lockdep_init_map_type+0x5c/0x280 [ 211.886580][ T8292] ? __init_waitqueue_head+0xca/0x150 [ 211.886612][ T8292] netdev_register_kobject+0x182/0x3a0 [ 211.886651][ T8292] register_netdevice+0x13dc/0x2270 [ 211.886688][ T8292] ? idr_alloc+0xdd/0x130 [ 211.886717][ T8292] ? __pfx_register_netdevice+0x10/0x10 [ 211.886761][ T8292] ppp_dev_configure+0x99b/0xc80 [ 211.886808][ T8292] ppp_ioctl+0x17e0/0x2660 [ 211.886843][ T8292] ? find_held_lock+0x2b/0x80 [ 211.886867][ T8292] ? __pfx_ppp_ioctl+0x10/0x10 [ 211.886906][ T8292] ? __fget_files+0x20e/0x3c0 [ 211.886936][ T8292] ? __pfx_ppp_ioctl+0x10/0x10 [ 211.886970][ T8292] __x64_sys_ioctl+0x193/0x200 [ 211.887008][ T8292] do_syscall_64+0xcd/0x230 [ 211.887045][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.887071][ T8292] RIP: 0033:0x7f5c5ef8e969 [ 211.887092][ T8292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.887116][ T8292] RSP: 002b:00007f5c5fe0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.887140][ T8292] RAX: ffffffffffffffda RBX: 00007f5c5f1b5fa0 RCX: 00007f5c5ef8e969 [ 211.887157][ T8292] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 211.887172][ T8292] RBP: 00007f5c5f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 211.887188][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.887203][ T8292] R13: 0000000000000000 R14: 00007f5c5f1b5fa0 R15: 00007ffd84722d28 [ 211.887240][ T8292] [ 213.067808][ T8306] FAULT_INJECTION: forcing a failure. [ 213.067808][ T8306] name failslab, interval 1, probability 0, space 0, times 0 [ 213.080956][ T8306] CPU: 1 UID: 0 PID: 8306 Comm: syz.0.506 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 213.080991][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.081006][ T8306] Call Trace: [ 213.081015][ T8306] [ 213.081025][ T8306] dump_stack_lvl+0x16c/0x1f0 [ 213.081065][ T8306] should_fail_ex+0x512/0x640 [ 213.081100][ T8306] ? __kmalloc_noprof+0xbf/0x510 [ 213.081130][ T8306] ? ops_init+0x77/0x5f0 [ 213.081154][ T8306] should_failslab+0xc2/0x120 [ 213.081179][ T8306] __kmalloc_noprof+0xd2/0x510 [ 213.081204][ T8306] ? debug_mutex_init+0x37/0x70 [ 213.081230][ T8306] ops_init+0x77/0x5f0 [ 213.081261][ T8306] setup_net+0x21e/0x850 [ 213.081292][ T8306] ? __pfx_setup_net+0x10/0x10 [ 213.081318][ T8306] ? lockdep_init_map_type+0x5c/0x280 [ 213.081347][ T8306] ? __pfx_down_read_killable+0x10/0x10 [ 213.081375][ T8306] ? debug_mutex_init+0x37/0x70 [ 213.081398][ T8306] copy_net_ns+0x2a6/0x5f0 [ 213.081443][ T8306] create_new_namespaces+0x3ea/0xad0 [ 213.081480][ T8306] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 213.081510][ T8306] ksys_unshare+0x45b/0xa40 [ 213.081541][ T8306] ? __pfx_ksys_unshare+0x10/0x10 [ 213.081569][ T8306] ? xfd_validate_state+0x5d/0x180 [ 213.081594][ T8306] ? rcu_is_watching+0x12/0xc0 [ 213.081621][ T8306] __x64_sys_unshare+0x31/0x40 [ 213.081648][ T8306] do_syscall_64+0xcd/0x230 [ 213.081689][ T8306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.081712][ T8306] RIP: 0033:0x7f67cb38e969 [ 213.081731][ T8306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.081752][ T8306] RSP: 002b:00007f67cc164038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 213.081774][ T8306] RAX: ffffffffffffffda RBX: 00007f67cb5b6080 RCX: 00007f67cb38e969 [ 213.081790][ T8306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 213.081803][ T8306] RBP: 00007f67cb410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 213.081818][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.081833][ T8306] R13: 0000000000000000 R14: 00007f67cb5b6080 R15: 00007ffc7c93ccf8 [ 213.081866][ T8306] [ 217.173189][ T8365] bridge0: port 3(team0) entered blocking state [ 217.179654][ T8365] bridge0: port 3(team0) entered disabled state [ 217.295857][ T8365] team0: entered allmulticast mode [ 217.301318][ T8365] team_slave_0: entered allmulticast mode [ 217.357860][ T8365] team_slave_1: entered allmulticast mode [ 217.369997][ T8365] team0: entered promiscuous mode [ 217.385590][ T8365] team_slave_0: entered promiscuous mode [ 217.391545][ T8365] team_slave_1: entered promiscuous mode [ 217.586782][ T8383] futex_wake_op: syz.3.521 tries to shift op by 64; fix this program [ 218.757857][ T8410] FAULT_INJECTION: forcing a failure. [ 218.757857][ T8410] name failslab, interval 1, probability 0, space 0, times 0 [ 218.773766][ T8410] CPU: 1 UID: 0 PID: 8410 Comm: syz.5.526 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 218.773797][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.773810][ T8410] Call Trace: [ 218.773818][ T8410] [ 218.773827][ T8410] dump_stack_lvl+0x16c/0x1f0 [ 218.773863][ T8410] should_fail_ex+0x512/0x640 [ 218.773894][ T8410] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 218.773940][ T8410] should_failslab+0xc2/0x120 [ 218.773968][ T8410] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 218.773998][ T8410] ? vfs_parse_fs_string+0xc3/0x150 [ 218.774026][ T8410] kmemdup_nul+0x49/0xf0 [ 218.774056][ T8410] vfs_parse_fs_string+0xc3/0x150 [ 218.774080][ T8410] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 218.774101][ T8410] ? kasan_save_track+0x14/0x30 [ 218.774129][ T8410] ? tracefs_init_fs_context+0xc8/0x110 [ 218.774159][ T8410] ? __pfx_tracefs_init_fs_context+0x10/0x10 [ 218.774189][ T8410] ? alloc_fs_context+0x59b/0x9c0 [ 218.774218][ T8410] vfs_kern_mount.part.0+0x6d/0x170 [ 218.774251][ T8410] vfs_submount+0xb6/0xd0 [ 218.774283][ T8410] trace_automount+0x3b/0x90 [ 218.774306][ T8410] __traverse_mounts+0x192/0x790 [ 218.774342][ T8410] step_into+0x5aa/0x2270 [ 218.774382][ T8410] ? __pfx_step_into+0x10/0x10 [ 218.774411][ T8410] ? __d_lookup+0x266/0x4a0 [ 218.774443][ T8410] ? lookup_fast+0x156/0x610 [ 218.774478][ T8410] walk_component+0xfc/0x5b0 [ 218.774512][ T8410] link_path_walk.part.0.constprop.0+0x685/0xd60 [ 218.774560][ T8410] path_openat+0x227/0x2d40 [ 218.774581][ T8410] ? __x64_sys_openat+0x174/0x210 [ 218.774626][ T8410] ? __pfx_path_openat+0x10/0x10 [ 218.774661][ T8410] do_filp_open+0x20b/0x470 [ 218.774685][ T8410] ? __pfx_do_filp_open+0x10/0x10 [ 218.774736][ T8410] ? alloc_fd+0x471/0x7d0 [ 218.774767][ T8410] do_sys_openat2+0x11b/0x1d0 [ 218.774797][ T8410] ? __pfx_do_sys_openat2+0x10/0x10 [ 218.774842][ T8410] __x64_sys_openat+0x174/0x210 [ 218.774872][ T8410] ? __pfx___x64_sys_openat+0x10/0x10 [ 218.774911][ T8410] ? rcu_is_watching+0x12/0xc0 [ 218.774944][ T8410] do_syscall_64+0xcd/0x230 [ 218.774979][ T8410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.775003][ T8410] RIP: 0033:0x7f927198e969 [ 218.775022][ T8410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.775044][ T8410] RSP: 002b:00007f9272823038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.775067][ T8410] RAX: ffffffffffffffda RBX: 00007f9271bb6080 RCX: 00007f927198e969 [ 218.775083][ T8410] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 218.775098][ T8410] RBP: 00007f9271a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 218.775112][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.775126][ T8410] R13: 0000000000000000 R14: 00007f9271bb6080 R15: 00007fff1b1af008 [ 218.775159][ T8410] [ 219.073591][ T8410] FAULT_INJECTION: forcing a failure. [ 219.073591][ T8410] name fail_futex, interval 1, probability 0, space 0, times 0 [ 219.117890][ T8410] CPU: 1 UID: 0 PID: 8410 Comm: syz.5.526 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 219.117923][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.117936][ T8410] Call Trace: [ 219.117944][ T8410] [ 219.117952][ T8410] dump_stack_lvl+0x16c/0x1f0 [ 219.117989][ T8410] should_fail_ex+0x512/0x640 [ 219.118025][ T8410] get_futex_key+0x49e/0x1000 [ 219.118054][ T8410] ? __pfx_get_futex_key+0x10/0x10 [ 219.118076][ T8410] ? stack_trace_save+0x8e/0xc0 [ 219.118099][ T8410] ? __pfx_stack_trace_save+0x10/0x10 [ 219.118122][ T8410] ? stack_depot_save_flags+0x28/0xa50 [ 219.118153][ T8410] ? __lock_acquire+0xaa4/0x1ba0 [ 219.118185][ T8410] futex_wait_setup+0x78/0x290 [ 219.118213][ T8410] ? kasan_save_free_info+0x3b/0x60 [ 219.118245][ T8410] ? __x64_sys_openat+0x174/0x210 [ 219.118278][ T8410] __futex_wait+0x266/0x3c0 [ 219.118308][ T8410] ? __pfx___futex_wait+0x10/0x10 [ 219.118345][ T8410] ? __pfx_futex_wake_mark+0x10/0x10 [ 219.118388][ T8410] futex_wait+0xe8/0x380 [ 219.118416][ T8410] ? __pfx_futex_wait+0x10/0x10 [ 219.118450][ T8410] ? kmem_cache_free+0x2d4/0x4d0 [ 219.118473][ T8410] ? fd_install+0x225/0x750 [ 219.118490][ T8410] ? putname+0x154/0x1a0 [ 219.118523][ T8410] do_futex+0x229/0x350 [ 219.118548][ T8410] ? __pfx_do_futex+0x10/0x10 [ 219.118582][ T8410] __x64_sys_futex+0x1e0/0x4c0 [ 219.118612][ T8410] ? __pfx___x64_sys_futex+0x10/0x10 [ 219.118640][ T8410] ? rcu_is_watching+0x12/0xc0 [ 219.118673][ T8410] do_syscall_64+0xcd/0x230 [ 219.118708][ T8410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.118730][ T8410] RIP: 0033:0x7f927198e969 [ 219.118749][ T8410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.118770][ T8410] RSP: 002b:00007f92728230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 219.118792][ T8410] RAX: ffffffffffffffda RBX: 00007f9271bb6088 RCX: 00007f927198e969 [ 219.118812][ T8410] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9271bb6088 [ 219.118825][ T8410] RBP: 00007f9271bb6080 R08: 0000000000000000 R09: 0000000000000000 [ 219.118839][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9271bb608c [ 219.118854][ T8410] R13: 0000000000000000 R14: 00007fff1b1aef20 R15: 00007fff1b1af008 [ 219.118894][ T8410] [ 220.110674][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.530'.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            syzkaller syzkaller login: [ 296.089734][ T9695] ptrace attach of "./syz-executor exec"[9348] was attempted by "./syz-executor exec"[9695] [ 296.212315][ T9697] netlink: 504 bytes leftover after parsing attributes in process `syz.5.785'. mjb4ϙb&`& F$_"2g֏hȏ\qLogĀ`q'siw-G=*X@b ^0G^?:$2dƵuI<}EMvձ[mZ\2T!O|K~53hĥ/A(fnk!R!V.-@fK}j٘LH5:@ D2wy|\t5+D2dY[!JOiY ܰ 8e 8zWt1=mոQ]J|Cblh8,k`'<RT hv$A|j@fe?:c&]O`n9@L6{ZlѨWgJ;;ȥbrPdXk&` 1P|迕iE+w6`+6M@X<ޮ U!^ ;en\H y~xO s *7]>U9>k'6,T\?7Ph3WFbdJ'mwⴉ~ka({F-3(찷gd1jxiO9XEL5{E\0aIַ`F;]Q$l -5 pB#ֳT)+qe+=ә#mf7hȚ (w*kd=I94I~`fO;ss1eTD ZSVxJ-ɝpMaq:t(}M͜2t%qim[c\TЕi 3w12:W!G62EnIH-i$sxja~k]w|0ivG\<2Yp)LMt!n]uhcRȋ Kӥ٨,c0,2O&({wȋV`RO2CUDV6$岖\} +|;mYL,y?4S 4Z39;+CG.3_*D Mg52H/ ?s䢹sMj0䰼e %vS}jo)Exa ԙm+NiqB,IEawN aU(Ie/?(W.e#ySϝ7q^o.5wwOo;8@ /"-ω_Ej f+'\cqcurr(:rJ*{EPL.mTBOq(Mud #ȩ7T[7(r"yuS58..|ÏS6Q: q'ZiC'ZQu%hvciWtnng%Gvx,gmN\Vn@īM6xtTqG!_ ݦ[K+IJ:J`I0|Gd*,}~BSqm v.+`Q>=*X){xPV”Ԣi&q l&<wnE13i)x*8d~}SE(w99NvrD1hݐ3f^E 37juGMMF]|=EgR0 yyUe ŷVʤIN JijZh(iT-2)"!3=02ЭFn+ VV $msmA]Y68p94yiaVG41f=w[נ_NQ@KI⅕`J4u޹D+InB6f]<{j tL,dX0ɿh`^H,=7gTfb#Z|Ѥ2'5I]i~t,A$q^BouyӃYRcr*%rS9>~ܘtIEs-zKQ&Zf{c-'߳GTliw¬S3:Vr'Kt&ƛ;x㝌ȝB;,\wj sTL%^gdW>Pr`KykOH&D-| )D]y\sc+i$XL<?#y#_a~56%=ai6ŹpR7R=ƕ}" Ȕ.pMԚfޚNVPay8l!"=g:Ԭ=[a"f2{kKU8C#ʋ;t>T?՞!MC#%ZzsvQ(w1L幌姛&߆5yP-~:.ն;qM|$ aA :fnJҭ@ Dc0 36z'Tq[ffH +LHx':mAW)&&>.4 8RK!1 ЍM͜q?`isS{uUB.@lEɇEp4yc/VC8e;FR maimP F<'leWt:N$[`O|E߂u˹) 86d |lWyWB%aH!twSGջe| zBfiL=JZ.c0( h2{MffЕANv,ҁH֟0F5n@`i͘IQ;FdХӧE{V]w0Cre>_L1o-a.w͔G&tt;0I3tqhu͚YgN8reyx1ns.ވlY| J-'qbo\$,H Qh0;hݛtTP Y[<y\^ηE;x^;'m1 L19Fj@+Eftu&u+Wܸ<DMؔdQ')Yk ᗆ<~rʂrde G#kiŸ _Ih8z/#pYKCa Q:5Yl:bm GT[jd0#pEnlKOR,c}LfRiy̤))Os9Rj&6>wCeF:|U&rý^(@[>*1b5ٰ' -fYJX۫Pp|MPg9P}Y-^bRV3)TdЁC9Dgw1*k\T3,RJP{%{,u9,/S'Xσ%|j628h0uLYKШ͍CQ_B?|hGkA2CH a"Լ\1CŵsRVUelX ad@o@^έT}.>|9$ŮJ\i0%y(,RIΠuy||z.^)fA}-󌅈w(u]@ 5w^{V9]!;{{jA:6pdf Hsü\sJTlE{$i!/]͈&R`;'?Z4Ͳ(")Nf.|f*WV?t+Scmњ6-`^Ae)#aq΅;_r2Х/>M ؞$_(C<҅R-*|G .q9Qљ0o 1k:)ʎmDrD8F~U60s!']f˥h/)qSZ H?@w8[z8[BDL!.;\p\O^,1FP hӥR,lO]k$ާZy3&wER*JP|x͕O< U׈88OQlba݄rQwiH=íuSB1=Pj_tF /O$k lWa(VO ^(аe~ȹ؟/dI9 aCsƣ$,6t4w L,;҃㠔DBSN /Ct.( KpspP\!>zv̖>3{:+Wc+qoBݓ>gǹ0V[xz$xD̰\ݤ̒+¨յ2Q6a~9)Yaslx1_6/|=Ql ['0uJSVջYE} .xe"WʚPxLz\Fn}U8p[6AQλ? &7\`hsŵrҝ Jrԙ5jA8ҝ~AhomrCbvh^۠K1ɰ8U?kn"IfVf܃ O|6T={X7 D=#6mS9o,tƬD?>K:J&p;m2%F^a,~K[QKd"}ܧlQ,/"F h;2b÷ hABN 6ޡ4u);RyыqIsEbQ${DrKc ApɷbR8*D"n#x @ fMٵ-vOeYZDo?C#pCׂqxДBzg8֞fV_*A/qc{ QFc8M5a^ ]Fɫ#I V/T^cX_?վK 6X.ڬ-_vľ6ER^@~I耛lڞ|6:*乵CqI# AwvV^A_u}~oHiKF&2𥪉1Q|e0E2Ӧu-&VU@wpoGz_Uq&)Sѧ2n%ox,Ni8YQmR.-ejnWf#j[ 301.752628][ T9763] netlink: 28 bytes leftover after parsing attributes in process `syz.5.798'. [ 302.142786][ T9763] team0: Port device team_slave_0 removed [ 302.504057][ T9767] sysfs_service_op_store: Client not running :-5: [ 302.548512][ T9767] FAULT_INJECTION: forcing a failure. [ 302.548512][ T9767] name failslab, interval 1, probability 0, space 0, times 0 [ 302.563063][ T9767] CPU: 0 UID: 0 PID: 9767 Comm: syz.5.799 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 302.563098][ T9767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.563113][ T9767] Call Trace: [ 302.563122][ T9767] [ 302.563131][ T9767] dump_stack_lvl+0x16c/0x1f0 [ 302.563174][ T9767] should_fail_ex+0x512/0x640 [ 302.563211][ T9767] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 302.563240][ T9767] should_failslab+0xc2/0x120 [ 302.563271][ T9767] __kmalloc_cache_noprof+0x6a/0x3e0 [ 302.563293][ T9767] ? __lock_acquire+0xaa4/0x1ba0 [ 302.563324][ T9767] ? snd_timer_instance_new+0x47/0x2e0 [ 302.563360][ T9767] snd_timer_instance_new+0x47/0x2e0 [ 302.563395][ T9767] snd_seq_timer_open+0x1cc/0x5e0 [ 302.563427][ T9767] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 302.563470][ T9767] ? find_held_lock+0x2b/0x80 [ 302.563501][ T9767] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 302.563535][ T9767] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.563570][ T9767] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 302.563607][ T9767] queue_use+0xe3/0x250 [ 302.563644][ T9767] snd_seq_queue_alloc+0x2e5/0x550 [ 302.563675][ T9767] snd_seq_ioctl_create_queue+0xa9/0x380 [ 302.563708][ T9767] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 302.563747][ T9767] alloc_seq_queue+0xda/0x180 [ 302.563779][ T9767] ? __pfx_alloc_seq_queue+0x10/0x10 [ 302.563835][ T9767] ? mark_held_locks+0x49/0x80 [ 302.563865][ T9767] ? _raw_spin_unlock_irq+0x23/0x50 [ 302.563899][ T9767] snd_seq_oss_open+0x38c/0xa20 [ 302.563939][ T9767] odev_open+0x6f/0x90 [ 302.563967][ T9767] ? __pfx_odev_open+0x10/0x10 [ 302.563997][ T9767] soundcore_open+0x409/0x580 [ 302.564031][ T9767] ? __pfx_soundcore_open+0x10/0x10 [ 302.564061][ T9767] chrdev_open+0x231/0x6a0 [ 302.564088][ T9767] ? __pfx_apparmor_file_open+0x10/0x10 [ 302.564119][ T9767] ? __pfx_chrdev_open+0x10/0x10 [ 302.564151][ T9767] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 302.564196][ T9767] do_dentry_open+0x741/0x1c10 [ 302.564225][ T9767] ? __pfx_chrdev_open+0x10/0x10 [ 302.564262][ T9767] vfs_open+0x82/0x3f0 [ 302.564298][ T9767] path_openat+0x1e5e/0x2d40 [ 302.564339][ T9767] ? __pfx_path_openat+0x10/0x10 [ 302.564374][ T9767] do_filp_open+0x20b/0x470 [ 302.564401][ T9767] ? __pfx_do_filp_open+0x10/0x10 [ 302.564461][ T9767] ? alloc_fd+0x471/0x7d0 [ 302.564495][ T9767] do_sys_openat2+0x11b/0x1d0 [ 302.564525][ T9767] ? __pfx_do_sys_openat2+0x10/0x10 [ 302.564571][ T9767] __x64_sys_openat+0x174/0x210 [ 302.564604][ T9767] ? __pfx___x64_sys_openat+0x10/0x10 [ 302.564640][ T9767] ? rcu_is_watching+0x12/0xc0 [ 302.564675][ T9767] do_syscall_64+0xcd/0x230 [ 302.564712][ T9767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.564738][ T9767] RIP: 0033:0x7f927198e969 [ 302.564758][ T9767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.564784][ T9767] RSP: 002b:00007f9272844038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 302.564808][ T9767] RAX: ffffffffffffffda RBX: 00007f9271bb5fa0 RCX: 00007f927198e969 [ 302.564826][ T9767] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 302.564844][ T9767] RBP: 00007f9271a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 302.564860][ T9767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.564876][ T9767] R13: 0000000000000000 R14: 00007f9271bb5fa0 R15: 00007fff1b1af008 [ 302.564911][ T9767] [ 304.656994][ T9789] FAULT_INJECTION: forcing a failure. [ 304.656994][ T9789] name failslab, interval 1, probability 0, space 0, times 0 [ 304.693607][ T9789] CPU: 0 UID: 0 PID: 9789 Comm: syz.6.804 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 304.693645][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.693660][ T9789] Call Trace: [ 304.693670][ T9789] [ 304.693680][ T9789] dump_stack_lvl+0x16c/0x1f0 [ 304.693720][ T9789] should_fail_ex+0x512/0x640 [ 304.693755][ T9789] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 304.693786][ T9789] should_failslab+0xc2/0x120 [ 304.693817][ T9789] __kmalloc_cache_noprof+0x6a/0x3e0 [ 304.693844][ T9789] ? snd_seq_create_port+0xf7/0xad0 [ 304.693882][ T9789] snd_seq_create_port+0xf7/0xad0 [ 304.693925][ T9789] snd_seq_ioctl_create_port+0x253/0x950 [ 304.693959][ T9789] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 304.693993][ T9789] ? kasan_save_stack+0x42/0x60 [ 304.694018][ T9789] ? kasan_save_stack+0x33/0x60 [ 304.694042][ T9789] ? kasan_save_track+0x14/0x30 [ 304.694073][ T9789] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 304.694112][ T9789] create_port+0x197/0x260 [ 304.694144][ T9789] ? __pfx_create_port+0x10/0x10 [ 304.694183][ T9789] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 304.694218][ T9789] ? __pfx_free_devinfo+0x10/0x10 [ 304.694288][ T9789] ? mark_held_locks+0x49/0x80 [ 304.694321][ T9789] ? _raw_spin_unlock_irq+0x23/0x50 [ 304.694357][ T9789] snd_seq_oss_open+0x36c/0xa20 [ 304.694398][ T9789] odev_open+0x6f/0x90 [ 304.694427][ T9789] ? __pfx_odev_open+0x10/0x10 [ 304.694457][ T9789] soundcore_open+0x409/0x580 [ 304.694491][ T9789] ? __pfx_soundcore_open+0x10/0x10 [ 304.694521][ T9789] chrdev_open+0x231/0x6a0 [ 304.694548][ T9789] ? __pfx_apparmor_file_open+0x10/0x10 [ 304.694581][ T9789] ? __pfx_chrdev_open+0x10/0x10 [ 304.694611][ T9789] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 304.694657][ T9789] do_dentry_open+0x741/0x1c10 [ 304.694685][ T9789] ? __pfx_chrdev_open+0x10/0x10 [ 304.694720][ T9789] vfs_open+0x82/0x3f0 [ 304.694757][ T9789] path_openat+0x1e5e/0x2d40 [ 304.694798][ T9789] ? __pfx_path_openat+0x10/0x10 [ 304.694834][ T9789] do_filp_open+0x20b/0x470 [ 304.694861][ T9789] ? __pfx_do_filp_open+0x10/0x10 [ 304.694916][ T9789] ? alloc_fd+0x471/0x7d0 [ 304.694950][ T9789] do_sys_openat2+0x11b/0x1d0 [ 304.694982][ T9789] ? __pfx_do_sys_openat2+0x10/0x10 [ 304.695031][ T9789] __x64_sys_openat+0x174/0x210 [ 304.695064][ T9789] ? __pfx___x64_sys_openat+0x10/0x10 [ 304.695099][ T9789] ? rcu_is_watching+0x12/0xc0 [ 304.695135][ T9789] do_syscall_64+0xcd/0x230 [ 304.695173][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.695198][ T9789] RIP: 0033:0x7f187f78e969 [ 304.695219][ T9789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.695250][ T9789] RSP: 002b:00007f1880660038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 304.695275][ T9789] RAX: ffffffffffffffda RBX: 00007f187f9b5fa0 RCX: 00007f187f78e969 [ 304.695293][ T9789] RDX: 0000000000008000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 304.695310][ T9789] RBP: 00007f187f810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 304.695327][ T9789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.695342][ T9789] R13: 0000000000000000 R14: 00007f187f9b5fa0 R15: 00007ffd1f71ec88 [ 304.695378][ T9789] [ 304.695389][ T9789] ALSA: seq_oss: can't create port [ 306.210090][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.220438][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.229633][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.238391][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.252658][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 306.865167][ T9813] chnl_net:caif_netlink_parms(): no params data found [ 307.448828][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.472779][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.507445][ T9813] bridge_slave_0: entered allmulticast mode [ 307.517062][ T9813] bridge_slave_0: entered promiscuous mode [ 307.531451][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.539641][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.585932][ T9813] bridge_slave_1: entered allmulticast mode [ 307.604103][ T9813] bridge_slave_1: entered promiscuous mode [ 307.720092][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.868216][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.242651][ T9813] team0: Port device team_slave_0 added [ 308.326594][ T9813] team0: Port device team_slave_1 added [ 308.353534][ T5836] Bluetooth: hci7: command tx timeout [ 308.463611][ T9854] [ 308.466209][ T9854] ====================================================== [ 308.473931][ T9854] WARNING: possible circular locking dependency detected [ 308.481653][ T9854] 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 Not tainted [ 308.489472][ T9854] ------------------------------------------------------ [ 308.497183][ T9854] syz.3.817/9854 is trying to acquire lock: [ 308.503641][ T9854] ffff888143761958 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 308.514443][ T9854] [ 308.514443][ T9854] but task is already holding lock: [ 308.522535][ T9854] ffff888143761428 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 308.534868][ T9854] [ 308.534868][ T9854] which lock already depends on the new lock. [ 308.534868][ T9854] [ 308.546306][ T9854] [ 308.546306][ T9854] the existing dependency chain (in reverse order) is: [ 308.556197][ T9854] [ 308.556197][ T9854] -> #2 (&q->q_usage_counter(io)#29){++++}-{0:0}: [ 308.565654][ T9854] blk_alloc_queue+0x619/0x760 [ 308.571488][ T9854] blk_mq_alloc_queue+0x179/0x290 [ 308.577610][ T9854] __blk_mq_alloc_disk+0x29/0x120 [ 308.583724][ T9854] loop_add+0x496/0xb70 [ 308.588871][ T9854] loop_init+0x164/0x270 [ 308.594114][ T9854] do_one_initcall+0x120/0x6e0 [ 308.599943][ T9854] kernel_init_freeable+0x5c2/0x900 [ 308.606238][ T9854] kernel_init+0x1c/0x2b0 [ 308.611568][ T9854] ret_from_fork+0x48/0x80 [ 308.616992][ T9854] ret_from_fork_asm+0x1a/0x30 [ 308.622808][ T9854] [ 308.622808][ T9854] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 308.630741][ T9854] fs_reclaim_acquire+0x102/0x150 [ 308.636847][ T9854] kmem_cache_alloc_noprof+0x53/0x3b0 [ 308.643335][ T9854] __kernfs_new_node+0xd2/0x8a0 [ 308.649246][ T9854] kernfs_new_node+0x13c/0x1e0 [ 308.655059][ T9854] kernfs_create_dir_ns+0x4c/0x1a0 [ 308.661249][ T9854] sysfs_create_dir_ns+0x13a/0x2b0 [ 308.667449][ T9854] kobject_add_internal+0x2c4/0x9b0 [ 308.673734][ T9854] kobject_add+0x16e/0x240 [ 308.679161][ T9854] elv_register_queue+0xd3/0x2a0 [ 308.685168][ T9854] blk_register_queue+0x3c4/0x560 [ 308.691264][ T9854] add_disk_fwnode+0x911/0x13a0 [ 308.697171][ T9854] nbd_dev_add+0x78e/0xbb0 [ 308.702594][ T9854] nbd_init+0x181/0x320 [ 308.707736][ T9854] do_one_initcall+0x120/0x6e0 [ 308.713550][ T9854] kernel_init_freeable+0x5c2/0x900 [ 308.719841][ T9854] kernel_init+0x1c/0x2b0 [ 308.725171][ T9854] ret_from_fork+0x48/0x80 [ 308.730589][ T9854] ret_from_fork_asm+0x1a/0x30 [ 308.736401][ T9854] [ 308.736401][ T9854] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 308.745001][ T9854] __lock_acquire+0x1173/0x1ba0 [ 308.750906][ T9854] lock_acquire+0x179/0x350 [ 308.756427][ T9854] __mutex_lock+0x199/0xb90 [ 308.761969][ T9854] queue_requests_store+0x1c7/0x310 [ 308.768269][ T9854] queue_attr_store+0x270/0x310 [ 308.774187][ T9854] sysfs_kf_write+0xef/0x150 [ 308.779811][ T9854] kernfs_fop_write_iter+0x354/0x510 [ 308.786199][ T9854] vfs_write+0x5bd/0x1180 [ 308.791524][ T9854] ksys_write+0x12a/0x240 [ 308.796851][ T9854] do_syscall_64+0xcd/0x230 [ 308.802379][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.809427][ T9854] [ 308.809427][ T9854] other info that might help us debug this: [ 308.809427][ T9854] [ 308.820666][ T9854] Chain exists of: [ 308.820666][ T9854] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#29 [ 308.820666][ T9854] [ 308.835781][ T9854] Possible unsafe locking scenario: [ 308.835781][ T9854] [ 308.843966][ T9854] CPU0 CPU1 [ 308.849851][ T9854] ---- ---- [ 308.855739][ T9854] lock(&q->q_usage_counter(io)#29); [ 308.861652][ T9854] lock(fs_reclaim); [ 308.868808][ T9854] lock(&q->q_usage_counter(io)#29); [ 308.877488][ T9854] lock(&q->elevator_lock); [ 308.882530][ T9854] [ 308.882530][ T9854] *** DEADLOCK *** [ 308.882530][ T9854] [ 308.891471][ T9854] 6 locks held by syz.3.817/9854: [ 308.896980][ T9854] #0: ffff888031ffb0b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 308.906940][ T9854] #1: ffff888035ba8420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 308.916811][ T9854] #2: ffff888035ea8488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 308.927539][ T9854] #3: ffff888141bb6968 (kn->active#81){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 308.938559][ T9854] #4: ffff888143761428 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 308.951395][ T9854] #5: ffff888143761460 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 308.964532][ T9854] [ 308.964532][ T9854] stack backtrace: [ 308.971001][ T9854] CPU: 1 UID: 0 PID: 9854 Comm: syz.3.817 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 308.971027][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.971039][ T9854] Call Trace: [ 308.971047][ T9854] [ 308.971054][ T9854] dump_stack_lvl+0x116/0x1f0 [ 308.971086][ T9854] print_circular_bug+0x275/0x350 [ 308.971114][ T9854] check_noncircular+0x14c/0x170 [ 308.971141][ T9854] __lock_acquire+0x1173/0x1ba0 [ 308.971172][ T9854] lock_acquire+0x179/0x350 [ 308.971196][ T9854] ? queue_requests_store+0x1c7/0x310 [ 308.971218][ T9854] ? __pfx___might_resched+0x10/0x10 [ 308.971240][ T9854] ? do_raw_spin_lock+0x12c/0x2b0 [ 308.971269][ T9854] __mutex_lock+0x199/0xb90 [ 308.971296][ T9854] ? queue_requests_store+0x1c7/0x310 [ 308.971317][ T9854] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 308.971342][ T9854] ? queue_requests_store+0x1c7/0x310 [ 308.971360][ T9854] ? lockdep_hardirqs_on+0x7c/0x110 [ 308.971387][ T9854] ? __pfx___mutex_lock+0x10/0x10 [ 308.971416][ T9854] ? __pfx_autoremove_wake_function+0x10/0x10 [ 308.971444][ T9854] ? queue_requests_store+0x1c7/0x310 [ 308.971462][ T9854] queue_requests_store+0x1c7/0x310 [ 308.971482][ T9854] ? __pfx_queue_requests_store+0x10/0x10 [ 308.971504][ T9854] ? __mutex_trylock_common+0xe9/0x250 [ 308.971530][ T9854] ? __pfx_queue_requests_store+0x10/0x10 [ 308.971550][ T9854] queue_attr_store+0x270/0x310 [ 308.971581][ T9854] ? __pfx_queue_attr_store+0x10/0x10 [ 308.971616][ T9854] ? find_held_lock+0x2b/0x80 [ 308.971635][ T9854] ? sysfs_file_kobj+0xe4/0x290 [ 308.971662][ T9854] ? __pfx_queue_attr_store+0x10/0x10 [ 308.971691][ T9854] sysfs_kf_write+0xef/0x150 [ 308.971718][ T9854] kernfs_fop_write_iter+0x354/0x510 [ 308.971742][ T9854] ? __pfx_sysfs_kf_write+0x10/0x10 [ 308.971770][ T9854] vfs_write+0x5bd/0x1180 [ 308.971790][ T9854] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 308.971815][ T9854] ? __pfx___mutex_lock+0x10/0x10 [ 308.971842][ T9854] ? __pfx_vfs_write+0x10/0x10 [ 308.971874][ T9854] ksys_write+0x12a/0x240 [ 308.971892][ T9854] ? __pfx_ksys_write+0x10/0x10 [ 308.971915][ T9854] do_syscall_64+0xcd/0x230 [ 308.971943][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.971964][ T9854] RIP: 0033:0x7fef91d8e969 [ 308.971981][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.972001][ T9854] RSP: 002b:00007fef92b84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 308.972020][ T9854] RAX: ffffffffffffffda RBX: 00007fef91fb6160 RCX: 00007fef91d8e969 [ 308.972034][ T9854] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 308.972046][ T9854] RBP: 00007fef91e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 308.972059][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.972071][ T9854] R13: 0000000000000001 R14: 00007fef91fb6160 R15: 00007ffed6fba718 [ 308.972090][ T9854] [ 309.305445][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.313101][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.342052][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 309.663987][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.671755][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.720237][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.131850][ T9323] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.278028][ T9323] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.356948][ T9323] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.439050][ T9323] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.509227][ T9323] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.557086][ T9323] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.617103][ T9323] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.678866][ T9323] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.784869][ T9323] team0: left allmulticast mode [ 310.790295][ T9323] team_slave_0: left allmulticast mode [ 310.798150][ T9323] team_slave_1: left allmulticast mode [ 310.805690][ T9323] team0: left promiscuous mode [ 310.810943][ T9323] team_slave_0: left promiscuous mode [ 310.819031][ T9323] team_slave_1: left promiscuous mode [ 310.825431][ T9323] bridge0: port 3(team0) entered disabled state [ 310.835574][ T9323] bridge_slave_1: left allmulticast mode [ 310.841784][ T9323] bridge_slave_1: left promiscuous mode [ 310.850455][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.860252][ T9323] bridge_slave_0: left allmulticast mode [ 310.866659][ T9323] bridge_slave_0: left promiscuous mode [ 310.874514][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.884985][ T9323] bridge_slave_1: left allmulticast mode [ 310.891195][ T9323] bridge_slave_1: left promiscuous mode [ 310.901177][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.911391][ T9323] bridge_slave_0: left allmulticast mode [ 310.917943][ T9323] bridge_slave_0: left promiscuous mode [ 310.924503][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.127903][ T9323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.140156][ T9323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.151322][ T9323] bond0 (unregistering): Released all slaves [ 311.165345][ T9323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.177448][ T9323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.188156][ T9323] bond0 (unregistering): Released all slaves [ 311.648467][ T9323] hsr_slave_0: left promiscuous mode [ 311.654927][ T9323] hsr_slave_1: left promiscuous mode [ 311.661266][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.674430][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.682913][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.692207][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.705362][ T9323] hsr_slave_0: left promiscuous mode [ 311.711699][ T9323] hsr_slave_1: left promiscuous mode [ 311.718686][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.727054][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.735910][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.744240][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.760677][ T9323] veth1_macvtap: left promiscuous mode [ 311.766952][ T9323] veth0_macvtap: left promiscuous mode [ 311.773073][ T9323] veth1_vlan: left promiscuous mode [ 311.779318][ T9323] veth0_vlan: left promiscuous mode [ 311.786141][ T9323] veth1_macvtap: left promiscuous mode [ 311.792209][ T9323] veth0_macvtap: left promiscuous mode [ 311.798494][ T9323] veth1_vlan: left promiscuous mode [ 311.806867][ T9323] veth0_vlan: left promiscuous mode [ 311.982031][ T9323] team0 (unregistering): Port device team_slave_1 removed [ 312.002087][ T9323] team0 (unregistering): Port device team_slave_0 removed [ 312.142774][ T9323] team0 (unregistering): Port device team_slave_1 removed [ 312.665602][ T9323] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.720860][ T9323] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.778543][ T9323] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.818862][ T9323] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.929264][ T9323] team0: left allmulticast mode [ 312.942313][ T9323] team_slave_0: left allmulticast mode [ 312.949601][ T9323] team_slave_1: left allmulticast mode [ 312.955760][ T9323] team0: left promiscuous mode [ 312.961002][ T9323] team_slave_0: left promiscuous mode [ 312.967610][ T9323] team_slave_1: left promiscuous mode [ 312.974136][ T9323] bridge0: port 3(team0) entered disabled state [ 312.982311][ T9323] bridge_slave_1: left allmulticast mode [ 312.989189][ T9323] bridge_slave_1: left promiscuous mode [ 312.998213][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.009139][ T9323] bridge_slave_0: left allmulticast mode [ 313.015915][ T9323] bridge_slave_0: left promiscuous mode [ 313.022610][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.033620][ T9323] bridge_slave_1: left allmulticast mode [ 313.039843][ T9323] bridge_slave_1: left promiscuous mode [ 313.046898][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.057075][ T9323] bridge_slave_0: left allmulticast mode [ 313.064385][ T9323] bridge_slave_0: left promiscuous mode [ 313.070628][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.319021][ T9323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.329372][ T9323] bond0 (unregistering): Released all slaves [ 313.339097][ T9323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.349623][ T9323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.361678][ T9323] bond0 (unregistering): Released all slaves [ 313.752836][ T9323] hsr_slave_0: left promiscuous mode [ 313.761251][ T9323] hsr_slave_1: left promiscuous mode [ 313.774729][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.783025][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.796203][ T9323] veth1_macvtap: left promiscuous mode [ 313.802260][ T9323] veth0_macvtap: left promiscuous mode [ 313.809222][ T9323] veth1_vlan: left promiscuous mode [ 313.815402][ T9323] veth0_vlan: left promiscuous mode [ 314.015367][ T9323] team0 (unregistering): Port device team_slave_1 removed [ 314.038087][ T9323] team0 (unregistering): Port device team_slave_0 removed [ 314.173127][ T9323] team0 (unregistering): Port device team_slave_1 removed [ 314.187496][ T9323] team0 (unregistering): Port device team_slave_0 removed [ 317.158621][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.165746][ T1299] ieee802154 phy1 wpan1: encryption failed: -22