last executing test programs:

6m45.874230355s ago: executing program 1 (id=54):
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x60)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, r0, 0x4000000000002)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) (async, rerun: 32)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket(0x1e, 0x1, 0x0) (async, rerun: 32)
sendto$auto(0x3, 0x0, 0x13, 0x0, &(0x7f0000000440)=@tipc=@id={0x1e, 0x3, 0x9e92128a2118151c, {0x4e24, 0x3}}, 0x20) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14)
r1 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r0, @ANYRES32], 0x18}}, 0x80) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10048884) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xc8, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x8}, @NL80211_ATTR_MNTR_FLAGS={0x77, 0x17, "8bc339720c8d34186f2a0e15067407ef0bf95ad7ae949721b9aed77dafab54dce0c3858689d6d5d7ee584d69d3009a27ee86e64b277ddddc67b9e1178fcf3ccfdaee2079b17cfd75ff523ca689e10667915d9898563ec94727602e595a77c7d258ec391621aaed46af40c4c6a39eaa582074e1"}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1}, @NL80211_ATTR_FILS_KEK={0x27, 0xf2, "38b05df92487cc1089f8f5339fbb2228f593ee368e62a1eb8e2c36f7a69dcd789e1964"}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}]}, 0xc8}}, 0x0)

6m45.366167053s ago: executing program 1 (id=57):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r0, 0x1, 0x8, 0xfffffffffffffffc, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x802, 0x0)
socket(0x18, 0x4, 0x87)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x1, 0x5, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3)
r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r4=>0x0})
sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {0xf, 0x0, 0x8000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4)
clock_nanosleep$auto(0xfffffffe, 0x64d0, &(0x7f0000000100)={0x100, 0xffc00000}, 0x0)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x1, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r5 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x28c200, 0x0)
ioctl$auto_TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)=0x3)
pipe2$auto(0x0, 0x80)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
ioperm$auto(0x3, 0x5, 0x149)
get_mempolicy$auto(0x0, 0x0, 0x2d0000000000000, 0x59, 0x4)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r6)

6m44.658252819s ago: executing program 1 (id=64):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000)
r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090027bd7000fbdbdf2502000000", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000)
connect$auto(0x4, 0x0, 0x10)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
select$auto(0x5, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x8000000000000201, 0x9, 0x3, 0x6, 0x7, 0xd886, 0x5e58296b, 0x341, 0x41, 0x7, 0x200, 0x8, 0xc]}, 0x0, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = open(0x0, 0x22240, 0x55)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
r6 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0)
ppoll$auto(&(0x7f00000000c0)={<r7=>r6, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8)
r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/ip6gre0/ignore_routes_with_linkdown\x00', 0x202, 0x0)
sendfile$auto(r8, r7, 0x0, 0x401)
mount_setattr$auto(r5, &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000080)={0x5, 0x4, 0x9, @raw=0x8}, 0xe3e3)

6m43.548056488s ago: executing program 1 (id=70):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52204b}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x2, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x880)
madvise$auto(0x100000, 0xffffffffffff0005, 0x19)
madvise$auto(0xff, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x402000b, 0xdf, 0x10000000000eb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0xa, 0x2, 0x0)
prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0x40, 0x0, 0x9cb)
dup3$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x50c9fc, 0x12)
write$auto(0x3, 0x0, 0x100082)
openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/short_retry_limit\x00', 0x0, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0)
read$auto(r1, &(0x7f0000000040)='\x00', 0x3)
madvise$auto(0x0, 0x200007, 0x19)
bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
eventfd$auto(0x8c)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0)
ioctl$auto(0x3, 0x40103e05, 0x38)

6m41.646277432s ago: executing program 1 (id=75):
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8880)
process_vm_readv$auto(0xbd4, &(0x7f0000000040)={0x0}, 0x3ff, 0x0, 0x46, 0x0)
r0 = socket(0x0, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1)
sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="000827bd7000fddbdf25680000000400050108000c018e0000006700e380b85985b9c8e2db550e09dd7241fc1bb3e0b0612a693f5f62c7ec66f284b1dd5459054d155af30da4178382213996e41173a92e54112ecfd6acc1faebc345fd28766cd16db5262be589ca1f61a6aa60d3124f06b0c30d682b7d976408004a800400ae800008004d01050000001c00e7001ebd838c9ca4d2f2967836c8806b372508061f98783c5b5d"], 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x4080)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
r3 = socket(0x2, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28002200a3ada5fd05628023", @ANYRESHEX=r0, @ANYBLOB="010325bd7000ffdbdf250a00000008000a00060000000b0002005449504376320000"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x28044001)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
connect$auto(0x4, 0x0, 0x10)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0x9, 0x0, 0xfffffffffffffffe, 0x7ff, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0)
recvfrom$auto(0x3, 0x0, 0x2395, 0x40000100, 0x0, 0xfffffffffffffffd)
close_range$auto(0x2, 0x8000, 0x0)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)

6m41.201227397s ago: executing program 1 (id=78):
madvise$auto(0x0, 0x2000040080000004, 0xe)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', <r3=>0x0})
sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000280)={0x1c, r1, 0x3abba0b2ae0bab93, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc811}, 0x10)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r4, 0x0)
r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb1\x00', 0x0, 0x0)
mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x12, r5, 0x80000000000000)
socket$nl_generic(0x10, 0x3, 0x10)
move_pages$auto(0x1, 0x2000000000003, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x100000000004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r6 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r6, 0x84, 0x72, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r6)
r7 = getuid()
setpriority$auto(0x9c, r7, 0x4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403)
r8 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r8, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)="435f38825b", 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd)
openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2000, 0x0)
getdents$auto(0x600000000, 0xfffffffffffffffd, 0xd00)
mbind$auto(0x85e, 0x8000000000000001, 0x100000000, 0x0, 0x5, 0x20000082)
r9 = socket(0x11, 0x80003, 0x304)
setsockopt$auto(r9, 0x800107, 0x5, 0x0, 0x24)

6m25.987296071s ago: executing program 32 (id=78):
madvise$auto(0x0, 0x2000040080000004, 0xe)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', <r3=>0x0})
sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000280)={0x1c, r1, 0x3abba0b2ae0bab93, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc811}, 0x10)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r4, 0x0)
r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb1\x00', 0x0, 0x0)
mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x12, r5, 0x80000000000000)
socket$nl_generic(0x10, 0x3, 0x10)
move_pages$auto(0x1, 0x2000000000003, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x100000000004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r6 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r6, 0x84, 0x72, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r6)
r7 = getuid()
setpriority$auto(0x9c, r7, 0x4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403)
r8 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r8, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)="435f38825b", 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd)
openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2000, 0x0)
getdents$auto(0x600000000, 0xfffffffffffffffd, 0xd00)
mbind$auto(0x85e, 0x8000000000000001, 0x100000000, 0x0, 0x5, 0x20000082)
r9 = socket(0x11, 0x80003, 0x304)
setsockopt$auto(r9, 0x800107, 0x5, 0x0, 0x24)

2m4.639919612s ago: executing program 2 (id=749):
r0 = pipe$auto(&(0x7f0000000000)=<r1=>0xffffffffffffffff)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/125, 0x7d)
preadv$auto(r0, &(0x7f00000001c0)={&(0x7f00000000c0)="aca7bd23e6587422e205f72d677aef839907ada6116875e4fdd8d1a6ebfcc72a6ba9b7aff1f35c0cac3e6867d6a0a3a6e70df5e92c07fb890d30c50173457fa78a5e35ffc7dc3565e7d30d85db754a2bc743816ab68e2fcee1c292d4ed6d4332e7487890ebaea86c2795f2d43ad7f837059c03d54af457b18893e6d27f078eff69ab12535f34773cccbb600aea68c41c282fc4f2d1558fb11659de01ab205371f500d68b17bd1b1f3a5c266edcfb16064d2d81ceb339dc08f01c7c11209cd69c85acf05888ba37", 0x9}, 0x5, 0x39000000000, 0x278b)
read$auto_proc_uid_map_operations_base(r0, &(0x7f0000000200)=""/69, 0x45)
r2 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ubifs/chk_index\x00', 0xc000, 0x0)
read$auto(r2, &(0x7f00000002c0)='$*{*\x00', 0x80)
openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000300)='/dev/etherd/interfaces\x00', 0x84000, 0x0)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r0)
sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x148, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xf2, 0x0, 0x0, @fd=r0}, @generic="93d383e7255a3918"]}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x108, 0x6e, 0x0, 0x1, [@generic="02875a7c44c2573803586276a916eb753ed03336753c4ba23e194aaf1d046403d5a9d509538b67b06c6f0dce4ba7f00e444aab83d8652331673c08b67be27e079817e16d7dde8f945ac22de59f1682ba896fcd15ba4375e6d591f3710eb9163ce505a6d4987f553314dec89b41e9df915642850307c7b78a320dfdd5e0324090e2aab3f18ad402cea02a46ac7cf576e0957e47aeeec86cd892ef3cc16f173e49a2fce51378c66ecbafbde9556440a1c351a7b0bb2367e2b2f746dd8183800e1de8bae2ea9ef24a989aa244ea0c7cde1239498c1045347402c82701fe5805c8e221bd43dc06d10e4473eec089344618ad", @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@empty}]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x148}, 0x1, 0x0, 0x0, 0x24000880}, 0x40005)
r4 = socket(0x2, 0x5, 0xd2e)
r5 = socket(0x3a, 0x1, 0x3)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000005c0), r4)
syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000600), r4)
setsockopt$auto(r1, 0x481, 0x3fc00000, &(0x7f0000000640)=')\x01\x00', 0x39)
r6 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000680)='/dev/binderfs/binder1\x00', 0x8e0c0, 0x0)
r7 = epoll_create1$auto(0x5)
close_range$auto(r6, r7, 0xa)
r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000700), r5)
sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NFSD_A_SERVER_SCOPE={0xb, 0x4, '@}\x9c/(^\x00'}, @NFSD_A_SERVER_SCOPE={0x6, 0x4, '}\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7}, @NFSD_A_SERVER_SCOPE={0xa, 0x4, '])\\-[\x00'}, @NFSD_A_SERVER_SCOPE={0x6, 0x4, '*\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7f}, @NFSD_A_SERVER_THREADS={0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffc00}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000001)
mmap$auto_def_blk_fops_fs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200001e, 0x80010, r1, 0x7)
r9 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000880), r5)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r5, &(0x7f0000000a80)={&(0x7f0000000840), 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x168, r9, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xc, 0x1}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0xa, 0x9}, @THERMAL_GENL_ATTR_TZ_GOV={0x7d, 0xd, 0x0, 0x1, [@generic="3f0dd999214d84041731ee51f19f84d93b3f70c13bcf99c02f3e425c5dbd7d0bbff97c292d9500d105cf8b4d5bb3c91b18287be10a2af0ae2492ea249c3cae495923fa084f96f44f25902aa4587be8853b08362e47ec73e9e850ae5f125568b861", @typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x83, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x22, 0x0, 0x0, @u32=0x9}]}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x16, 0x1bb}, @THERMAL_GENL_ATTR_CDEV={0x88, 0xf, 0x0, 0x1, [@generic="ab3729a72fed184cbc16d91903b2a1f0b1f26c6fcfc4cff29aa1d3ed3c48188e3bdb3f4a42dfe782f63ce1ff67fa790540fa85", @generic="c513aecff31a87513729679c7632cd309a1f7c39a38466d3b882b758e66b792afbb6de275e91ba658595452977f4cbb3b26a6dec14a54602c4a5e40cfe87f6ab63a5adcfd77fa981d3207c89c5710a45ff"]}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x13, 'wg1\x00'}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x13, 'dvmrp1\x00'}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0x4}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x16, 0x7}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x20004041)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/self/net/rxrpc/locals\x00', 0x40000, 0x0)
mmap$auto(0x3, 0x7fffffffffffffff, 0x1, 0x1ff, r2, 0x4)
r10 = syz_clone3(&(0x7f0000000c80)={0x10200, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80), {0xd}, &(0x7f0000000bc0)=""/53, 0x35, &(0x7f0000000c00)=""/19, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
r11 = prctl$auto(0x7, 0x0, r10, 0x5a1, 0x1)
sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x77}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xf6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x204c081}, 0x4008885)
openat$dir(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x4400, 0x48)
signalfd4$auto(r4, &(0x7f0000000e80)={0x6}, 0x8, 0x3c3)
sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r11, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240000c0}, 0x20008011)

2m4.252906815s ago: executing program 2 (id=751):
r0 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x4000, 0x0) (async)
r1 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/blk_cgroup\x00', 0x20000, 0x0) (async)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x800, 0x0)
ioctl$auto_TCFLSH2(r2, 0x540b, 0x0) (async)
setxattr$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='d\x00', &(0x7f0000000140)="1a35c0a73bf72e4b041206a27bd3e7e157a1213e25c78b4e884f81e92da2bf5504c057", 0x4, 0x1) (async)
ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000180)={0x7f1, 0x1, [0x690, 0x101, 0xd, 0x7fff]}) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x44bb21f80857ee2, 0x0)
r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x8040, 0x0)
close_range$auto(r2, r3, 0x80000001) (async)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x80)
removexattrat$auto(r4, &(0x7f0000000280)='./file0\x00', 0x9, &(0x7f00000002c0)='/dev/sequencer\x00') (async)
r5 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/bluetooth/hci7/force_devcoredump\x00', 0x12a00, 0x0)
sendto$auto(r5, &(0x7f0000000340)="1762863a9c69435ac79db1c3de6485124b0dd957a44f429bb26d1233", 0x1, 0x7fffffff, &(0x7f0000000380)=@llc={0x1a, 0x108, 0x8, 0x8, 0x1, 0x58, @random="26ecb31bdc38"}, 0xf) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x10000, 0x0) (async)
r6 = io_uring_setup$auto(0x4, &(0x7f0000000400)={0x0, 0xe, 0x2, 0x0, 0x1, 0x10, <r7=>r1, [0x2, 0x80000001], {0x10000, 0x2, 0x5, 0x9, 0xfffffff7, 0xb3, 0x200, 0x8, 0x5}, {0x6, 0x7, 0x5dd, 0x7, 0x4c, 0x1000, 0x80000000, 0x3, 0xc204}})
landlock_restrict_self$auto(r6, 0x0)
r8 = gettid() (async)
r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/loop2\x00', 0x200100, 0x0) (async)
setsockopt$auto(r7, 0x1, 0x7, &(0x7f00000004c0)='/dev/loop2\x00', 0xb) (async)
r10 = openat2$auto(r6, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0xd, 0x9, 0x100000000}, 0x0) (async)
r11 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000005c0), r7)
r12 = getsid$auto(r8)
sendmsg$auto_OVS_DP_CMD_DEL(r10, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r11, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r8}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0xfffffff7}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x5) (async)
ioctl$auto(r9, 0xf8bf, r0)
r13 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000700), r5)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(r6, &(0x7f0000000d00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000740)={0x54c, r13, 0xfc81a05896283430, 0x70bd2c, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x18, 0x4}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x9, 0x7}, @THERMAL_GENL_ATTR_CPU_CAPABILITY={0x3f2, 0x15, 0x0, 0x1, [@nested={0xda, 0x67, 0x0, 0x1, [@generic="5b182053a29e018a9efc1719cfba6e59c2c67002c8a3f4305adfd2109f11c903026f724c2a7c69fe886469bab02fbfb5fa685ee6d1448f8f1aef6d9b3a0d0aad564f41d8d2ab215bf8c7da2e4e15502e96d0845d8be92413bcc882eb67bc9ded7f86041304974ca6edca4ec08a57c08580e9868d61e488a5918a99a62834a553239626d76a72bebddd2dd4cb70552a1c6cbc77880cd2facd92afb4c624c742ef48759c1ad3b3fc20b5812f4faa44ef6c3341eafa", @generic="3c647649519dfe59f55d27e36cf86e0f077306df03bc1303cc13f69b3e12d9b5e0a6"]}, @nested={0x18, 0xc5, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @u32=0xa}, @typed={0xc, 0x67, 0x0, 0x0, @u64=0x1}]}, @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@local}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}}, @nested={0x1ee, 0x4e, 0x0, 0x1, [@generic="69e1649486112bb2c5c338fe8b8dfb7ac87764159a722c0ca1fff0bd44ae928658a37a9a0fc7c0a98d2433340a3a59bec94964243aedcd0d4982", @nested={0x4, 0x1e}, @generic="51ee89bd0783167e599f9183e6e91c60536d64f1f789c5a47d8e0de9e1958635f52415ee5300393cbd572abd48360e10bf3894e2a8388fcd39a9a12062f46a0645845296f6960d0e9976f98711b1732c11cf8b8cbca417e1e0c9b5f8aac4a3335939e251d2542e858c9ad1cd00f90acfaf2e540a6ebf6abd103209b9bfaf60e4848aaf4bd10def95e79bd2f4e176511749a664d07498ee54e3facc152f4c6d0992ba6c8937d4d9f9b69bbfe30f4abff38d622592fc14238cca141ef759a8cea54a62b86498da5e45f8c3c7239233eab78f5d152cfc375f44a87790ec89f1e168b920435fe3af1c2554ba9369ca35196b539435fd", @nested={0x4, 0xd7}, @generic="55ea9bf4cebdd412e9128c883a5dafd45a029713316ec63acc91f19772b09546379c19e5bd6b58bd5bfe32c31c057982a1d87713f50540429279e5248e97c34b9879f4de7c98886a2b78227aeaefcb12b47a7e3b9f98321d22bcb70497c338a7f6ff7a62f40eb495254dd5e10ff0d0c2ee23cc21c1344160f69442e853454b4827be6bdf1f3f3f81b3feaf1c94256e85adebf449540c30ec6ff33a6baf3f2c135c3e83a0625ac2fe8828331880002ef87e63ecb4"]}, @generic="4cac338cbb92d69adb1332530d591837e927cea3d9ad65190b15a8395e5d0b6314df6f8ff7d4d9a3fb879c5d986c9c06726ba5a53f50ed921a22aaac1318db3089c78bfc8d16a698f56586de31ef7f633d5cea0e81fcd5512505d632525b2414c5514b735c3a62567c608b968361acf89d9396626ddaf4c9237188370668841ba8bfe74f3984bdfb96415d5a297a305f862fa6f6c2317d8ebf4d4ad5d16c37feb717cbd878891a3891fd953e2ab6030bd817570528299e7fc51ee0831b9e77bad40ad63405bf15ee5c09df195ffea82da253a88bd92ef05f4e3819c9e060e4a868b5621878057b43f902e3cb05b8"]}, @THERMAL_GENL_ATTR_CDEV={0xc6, 0xf, 0x0, 0x1, [@typed={0x5, 0x57, 0x0, 0x0, @str='\x00'}, @generic="e27fcad29271411a66b6f0d3f81c5c61e1c60096059923655cc719c798ceab5953247e7308a1fc430b523e82b42b2815f3c74972924f6a9729ad9be8747bfe5f11c887c16c13d9456cf72726f07c54ed212013bbbb822f9bfc29482832e3a64dc7e694b0af6afd99f976ed57ff7ce0a888893799b5c008022670ea9dd9064cb7a6cdbda4e649c643cb7032ba3414137c853632ec84afea79cfecc6e73097e99caa171c19838d0b1fe8ba7ec386f2757badd38bb24bc26b5c78f6"]}, @THERMAL_GENL_ATTR_TZ={0x69, 0x1, 0x0, 0x1, [@generic, @generic="828a3840779da97ef00f50b6a7988d02520e1f5bf1778e5131ea6bd672a7e53ecbd0a2330cd8072353a52d2a2d80fa7f989a15e82774b625ff2ab527c1b94a634a7435c135087e2fdb57437cd0a396f453a6827b5d4a33bc4c61a8aa08846b7525d862e610"]}]}, 0x54c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async)
mknod$auto(&(0x7f0000000d40)='./file0\x00', 0x800, 0xfffffff9) (async)
socket(0xa, 0xa, 0x4)
fanotify_init$auto(0x0, 0x80)
syz_open_procfs$namespace(0x0, &(0x7f0000000e00)='ns/ipc\x00')

2m3.84619543s ago: executing program 2 (id=753):
mmap$auto(0x4, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000001100), 0x2141, 0x0)
writev$auto(r0, &(0x7f0000001180)={0x0, 0x100}, 0x9)
r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x6c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x81}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xe}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @local}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF2_SEQ={0x0, 0x7, 0x4}, @HSR_A_IF1_AGE={0x1, 0x3, 0x3e}, @HSR_A_IF2_SEQ={0x0, 0x7, 0x6}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fedbdf2502000000080003008000400008001d"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
pread64$auto(r1, 0x0, 0x800, 0x1)

2m3.579569762s ago: executing program 2 (id=754):
r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0)
sendmsg$auto(r0, &(0x7f00000002c0)={&(0x7f0000000080)="134243b9477f02fb30d6c8b99247b9843e626d1110d9d057a603f53d9cb50d858a9122fd204281098d9fe56d52a1d43a0eb15fa22b4ed94400aefb0dc816bf2c40bc30ff47dfd4b6cd09d8fb505a677ae10f49d2f6d137454bd05cb14d9bc4edb4f46b79723dfc5308db0964ef72f576fa1c751475e8671443e7dad3e00a2a82c43d329deb1172aed41ece8d9062254c8acbab8683b23f3a432ecdb19e619d93988255e48ef61a9173de9704df44c4161445a1bb3de275e753e5d0a3adecc0d46790b68997d83b146773923f6423f6fe8a29d3b3361d160f2aed3484ca03e5", 0x2, &(0x7f0000000200)={&(0x7f0000000180)="ec7bd02a5ba35846467bc612d718643870cd54be06e6c4aeec6e9c2cc6a770bed62614474953f313774d06b55eb713eda681fbea17b307c0da64b45a1f6556725d827e85756b705fe7b31ce82827e6852499c08b44f11bbe3932ca5b7a249fa544925bb9d0c99db1153bb4f1ad6a40d346f02f037a8a7e476826", 0x6}, 0x5e, &(0x7f0000000240)="d32fff39ed94048c1431e9964bdf91a45738fe331719850f48cb6fbfbc614909555bba297c8739fbafcc0bb4ffd6dc086831b51e17acb46b97df24edf721593839a75fa2bbcba4aa0c8763be0c82af64b5fb532b141e49d646", 0x8000, 0x25b1}, 0xa)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.list\x00', 0x48a22, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r1)
getcwd$auto(&(0x7f0000000340)='-[+\'\'#)\x91\\\x00', 0x831)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0xfffffffffffffffc, 0x1000, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
ioctl$auto_evdev_fops_evdev(r3, 0x80084502, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x2, 0x1)
setsockopt$auto(0x3, 0x0, 0xc, 0x0, 0x5)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x80002, 0x73)
r4 = socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
unlink$auto(&(0x7f0000000100)='./file0\x00')
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
write$auto(0x3, 0x0, 0x3f00)
mount_setattr$auto(0x5, 0x0, 0x8000, &(0x7f0000000640)={0x1f, 0xf6, 0x100000}, 0x283)

1m58.927884787s ago: executing program 2 (id=761):
socket(0x23, 0x5, 0x0) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
pipe2$auto(&(0x7f0000000040), 0x0) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
ioctl$auto(r0, 0x540a, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
r1 = socket(0x2, 0x6, 0x0)
getsockopt$auto(r1, 0x4, 0xc, 0x0, &(0x7f0000000000)=0xb)
connect$auto(0x3, &(0x7f0000000140)=@phonet={0x23, 0x7, 0x6, 0x2}, 0x52)

1m58.386252217s ago: executing program 2 (id=763):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rxrpc/calls\x00', 0x100, 0x0) (async)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) (async, rerun: 64)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
socket(0x10, 0x2, 0x0) (async, rerun: 32)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32)
socketpair$auto(0x9f, 0x1, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64)
time$auto(0x0) (async, rerun: 64)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
sysfs$auto(0x2, 0x4, 0x4) (async, rerun: 64)
mincore$auto(0x1000, 0x8001, 0x0) (async, rerun: 64)
r0 = io_uring_setup$auto(0x877, 0x0)
io_uring_enter$auto(r0, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff)
recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) (async)
socket(0x8, 0x2, 0xb) (async)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0x1000, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x80000000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysinfo$auto(0x0)

1m43.285516458s ago: executing program 33 (id=763):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rxrpc/calls\x00', 0x100, 0x0) (async)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) (async, rerun: 64)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
socket(0x10, 0x2, 0x0) (async, rerun: 32)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32)
socketpair$auto(0x9f, 0x1, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64)
time$auto(0x0) (async, rerun: 64)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
sysfs$auto(0x2, 0x4, 0x4) (async, rerun: 64)
mincore$auto(0x1000, 0x8001, 0x0) (async, rerun: 64)
r0 = io_uring_setup$auto(0x877, 0x0)
io_uring_enter$auto(r0, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff)
recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) (async)
socket(0x8, 0x2, 0xb) (async)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0x1000, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x80000000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysinfo$auto(0x0)

11.115421241s ago: executing program 5 (id=1024):
r0 = accept4$auto(0xffffffffffffffff, 0x0, 0x0, 0x6)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/module/vhost/parameters/max_mem_regions\x00', 0x181400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/255, 0xff)
ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x1, 0x12, 0x0, 0xa4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r2 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r2, 0x84, 0x72, 0x0, 0x0)
madvise$auto(0x0, 0x1010001, 0x100000003)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
accept4$auto(r0, &(0x7f0000000080)=@hci={0x1f, 0x0, 0x1}, &(0x7f00000000c0)=0x8d05, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0x19d0, 0xfffffffffffffffa, 0x8000)
futex_waitv$auto(&(0x7f0000000000)={0xf, 0x100000000005d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
recvmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000100)="3a909a22f98801f9df2178", 0xb0, &(0x7f0000000140)={&(0x7f0000000200)="6831d5eebba2d4f72a19404848c0b0e59536f4eb8032d516b76f163f47003b3d9c58b5551bfb513f7f82798291147122f47a73fe2fe3a5ffb28457d1876a1ce59c67470ad489632d4d72b6ec9bc3603f48e0f937a4202eabb3ee97852f24f0f5b80dbf9fb3b3ddb976866a7e3499d1dcafa2ee8c175fc1ec53f8f10ddb4790edfd9970d6e307eb6a5f23ec3946f615138850dc3cb28bb0ad8a", 0x4}, 0x8, &(0x7f00000002c0)="f10756ae04495e923fd026004955dcc9fea66895ef5ef4f69c0a28cfb534a62b53f39b629cab97e8388eebf52e8a8148e8bcd8a416007bc5cf1ff880d297a744b446c1f450f5605c6e297eb919d86e25b7fd00ccecead05ddf8ca68efcd1e60e9304080430bc085abb68018864466707114ad77d556fea9eccb4b608623ab4b615713af404a2bc547f40fb8ffce7c10c52853392701181cbbdf46e03ceebdebaf408b295661f4480a1126fa60a1d84dbeb12a87aff0a0030fab75da1410d6c114b88a7fe2862d71284e4e5327a49856fe6986b257d7e1f1c15d28eba60f7b88be8ed727c3951fc99ab2b6f2188e44111f49b0bfc", 0x5, 0x9}, 0x6}, 0x3, 0x5, &(0x7f00000003c0)={0x4, 0x81})
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
clone$auto(0x440f, 0x6, 0x0, 0x0, 0x8)
openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x121040, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x5], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0x0, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}})
r3 = getuid()
lstat$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000440)={0x6, 0x0, 0x9, 0x0, <r4=>0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x6, 0x400, 0x9, 0x6, 0x1, 0x4, 0x6, 0x2, 0x9b57})
r5 = setfsgid$auto(0x0)
keyctl$auto(0xa, r3, r4, r5, 0x1)
madvise$auto(0x108000, 0x800034, 0x9)
times$auto(&(0x7f00000001c0)={0x7fffffff, 0x4, 0x9, 0x4})

10.129676476s ago: executing program 4 (id=1027):
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async)
read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', <r1=>0x0}) (async, rerun: 64)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) (async)
socket(0xa, 0x5, 0x84) (async)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e21, @rand_addr=0xfffffffe}, 0x55)
io_uring_setup$auto(0x2, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8)
socket(0x2, 0xa, 0xe57a)
r2 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100cda4429629bd7100f9db5f250200000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) (async)
getsockopt$auto(r2, 0x4, 0x80, &(0x7f0000000140)='%%,),{/\x00', &(0x7f0000000380)=0x9) (async)
sendmmsg$auto(r2, &(0x7f0000000580)={{&(0x7f00000003c0)="8d8e805a", 0x1, &(0x7f0000000480)={&(0x7f0000000400)="b21d210646632fb1494b6b441d56f5cb45a15066bc760a776e77373487053103993fcda373e1bc8584bbe7f43c297f97c6af794566f9ab25a9d8e85e6c522f9321625c6a1fc55348b637e4bdb564e40f2425bb385b06ee749afa4224ff049387bccd6b95df", 0x5}, 0x8000000000000001, &(0x7f00000004c0)="dd947f27870181f2f7f5db31066368bdd04f36783d58e3b48aa20dd10e1cee913825d88a5b5955c08e01b5f29fcfd87efcdceef8c031c0ef746d62ecd12cfa763cfe57a19677a9cda044ed163f8acf1aee46027c7b5349197403094a95fa3830ced1433894e77c7c5b2bb124e07aefd75df3494f85d1c714b06abf3f4157921527d7ab6545ead6333c612c7f2033b2d54c3343747df307873cd9467151fd2161c57ea0e7d9c3ece95e21f540624470d2ae7b95", 0x2, 0xffff}, 0x1}, 0x669c, 0xfffffff7) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x2000000000000004, 0x1ffffffffffd, 0xb4, 0xffffffffffffffff, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x22000, 0xc5, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0x8, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x8, 0x8, 0x0, 0x6, 0x200000000000000, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x4, 0xfffffffffffffe00, 0x0, 0x0, 0x5, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x1, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x8, 0xa38, 0x0, 0x80000003, 0xfffffffffffffffc, 0x2, 0x1, 0x7, 0xc567]}, 0x1fe, 0xd)
r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
rmdir$auto(&(0x7f00000005c0)='./file0\x00') (async)
ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd03, &(0x7f00000001c0)) (async)
r4 = socket(0x10, 0x2, 0x0)
bind$auto(r0, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0xa042) (async)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000140), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x8, 0x4008) (async)
mlock$auto(0x4, 0x7)

8.906163932s ago: executing program 4 (id=1031):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
socket$nl_generic(0x10, 0x3, 0x10)
getrandom$auto(&(0x7f0000000240)='\x00', 0x8080000, 0x5)
madvise$auto(0x108000, 0x2, 0x200000b)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
socket(0x15, 0x3, 0x0)
adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4})
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f000000a500), 0xffffffffffffffff)
socket(0x1e, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
socket(0xa, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
recvmmsg$auto(0x5, 0x0, 0x3, 0x6, 0x0)
statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000000, 0x208, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5}, 0x800, 0x0)
poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1)
sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20008000)
setfsuid$auto(0xee00)
sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0)

8.725532402s ago: executing program 3 (id=1032):
ioperm$auto(0x4, 0xbc6, 0x81)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
userfaultfd$auto(0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = socket(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x801, 0x106)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=r0, 0x4, @old_prog_fd=r1}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x5, 0x7, 0x9, 0x7f, @count=0x7, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
flistxattr$auto(0x3, 0x0, 0x3)

7.750811694s ago: executing program 5 (id=1033):
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/memory/memory0/online\x00', 0x123902, 0x0)
socket(0xa, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55)
write$auto(r1, &(0x7f00000001c0)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\xec\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91<x\xe6\xc3q{KWa\xc6\x7f\xc7j\xa7\xaan8\xc3\xb5%\x8d(\x85\xcc&GH\xf4\x06\xda\xc4\xcc\xb5U?\xf3a(yG\xe2\xd7<W\xa1\xa5\xf2\x12\xdb\xca\xca\xf3\xd9\x95\x1d\xe5\x11\xcb\xdf\x85\xa3vU]?M\xd4\x9d\x10\xcb\x15\x92gp%\xae\x14`da\xc0', 0x2)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r2 = socket(0x2, 0x80002, 0x73)
r3 = semctl$auto(0x1, 0x5, 0x2, 0x8)
socket(0x2, 0x6, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
fcntl$auto(r0, 0x3, r3)
mmap$auto(0x0, 0x76d6000, 0x4000000400e1, 0x40eb1, 0x401, 0x300000000000)
r4 = socket(0x6, 0x4, 0x5)
setsockopt$auto(r4, 0x6a, 0x4, 0x0, 0x4)
bind$auto(0x2, 0x0, 0x5)
getpeername$auto(0x3, 0x0, 0x0)
setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x7})
unshare$auto(0x20000080)
setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0)
unshare$auto(0x40000080)
connect$auto(0xffffffffffffffff, &(0x7f0000000100)=@can, 0x55)
mprotect$auto(0x4, 0xe3f, 0x7f)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r2)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/15/affinity_hint\x00', 0x18240, 0x0)

7.567187399s ago: executing program 3 (id=1034):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000340)={0x18, 0x0, 0x4, 0x1, 0x8, 0x1, 0x0, 0x6, 0x5, 0x200, 0xffff7ffe, 0x80000000, 0x7ff, 0x7, 0x9})
r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2)
sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x18, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x6}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x4010)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffeff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x5}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x4}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x6}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xcd20}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000081)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r4 = socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r5 = getpid()
capset$auto(&(0x7f00000001c0)={0x7, r5}, &(0x7f0000000200)={0x94df, 0xb, 0xfa11})
fcntl$auto(r1, 0x10001, r5)
getcwd$auto(0x0, 0xffffffffffffffff)
connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = socket(0x29, 0x2, 0x0)
r7 = socket(0x10, 0x2, 0x0)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r7, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r6, 0x89f2, 0x24)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$auto(r8, &(0x7f0000001340)={{0x0, 0x5, &(0x7f00000012c0)={&(0x7f00000000c0), 0x8000000000000001}, 0x9, 0x0, 0xffffffffffff2e00, 0x3}, 0xff}, 0xd, 0x400, &(0x7f0000001380)={0x0, 0xfffffffffffffffe})
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001440), r8)
setsockopt$auto(r8, 0x10000000084, 0x100000d, 0x0, 0x4)

7.227981753s ago: executing program 0 (id=1035):
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyy6\x00', 0x61aa02, 0x0)
write$auto(r0, 0x0, 0xeffd) (async)
r1 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x80080, 0x0)
ioctl$auto(0x3, 0x9, r1) (async)
getrandom$auto(0x0, 0x6000000, 0x3) (async, rerun: 64)
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, 0x0, 0x2201, 0x0) (async, rerun: 64)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)

6.433158448s ago: executing program 3 (id=1036):
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x5, 0xfffffffffffffffc, 0x20000008, 0x7, 0x100000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
setfsuid$auto(0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b3b, 0x1)
setresuid$auto(0x0, 0xffffffff, 0x9)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
capset$auto(0x0, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
clone$auto(0x9001, 0x6, 0xffffffffffffffff, 0xfffffffffffffffc, 0x7)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x82, 0x0)
pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9)
r1 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0)
pwrite64$auto(r1, 0x0, 0x2, 0x0)
socketpair$auto(0x1d, 0x9, 0x2, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop12/queue/wbt_lat_usec\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x8)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)

6.006273971s ago: executing program 0 (id=1037):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf252800000005003e000800000031004801a289c1c1f3026f75a4d3a66a76f9f65578159c8a96f55e156e69b5114d651d9ec494a3d7791ee432bb9c"], 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1)
r2 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
pipe$auto(0x0)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100004000)
madvise$auto(0x0, 0x200007, 0x19)
io_uring_setup$auto(0x81c5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
getsockopt$auto(r2, 0x84, 0x1b, 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x2, 0x1, 0x0)
sendmmsg$auto(r3, 0x0, 0x5, 0x20000000)
write$auto(0x3, 0x0, 0xfffffdef)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0)
epoll_create$auto(0x3e)

4.631900637s ago: executing program 5 (id=1038):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fdcbdf2501000000100007800c00018008000180000000000c000200"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48080)
signalfd4$auto(r2, &(0x7f0000000080)={0x2}, 0xf, 0x8)
r4 = socket(0x10, 0x2, 0x4)
r5 = mq_open$auto(&(0x7f0000000000)='P\x02\xb9\xd5\x02r\xbc\xd0\t^\xc0!\x7f\xc0\xdd8\xb0\x80\xfa;\x97\x05n\xf4~Z\x05\xf1\xef\xd1\xf1\b\xd9J\x9bp\xdf\xe7\xcd\x1f\x84-\xbb\x05\xa5\xb8\xfc\xf7v<)\xddR\x02\xd8\r_\x03\xe7\x8eWta\xfa\xbd\xaf\x06kG\xf7\xaa6\x1ch\vmD\xfc|v\xd4Q', 0x7e, 0x9, 0x0)
socket(0x18, 0x4, 0x3)
mmap$auto_comedi_fops_comedi_fops(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r5, 0x8)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x0, 0x221, 0x70bd2c, 0x25dfdbeb}, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
socket(0x1, 0x1, 0x0)
write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb)

4.373436321s ago: executing program 4 (id=1039):
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0)
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = socket(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0)
read$auto_mon_fops_binary_mon_bin(r2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
sysfs$auto(0x2, 0x11, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x80, 0x0)
ioctl$auto_evdev_fops_evdev(r4, 0x80104592, 0x0)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0)
chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba)
write$auto(r5, &(0x7f0000000100)='%\t\x00*@,,,\xc6_X~\x0e\x00\xfd\xb6\x93\x8b\x87\x03 5\x91\xe5C\x13\x0f\xcc)j\xa6H\t\v>q;\xf2\xa6&|\xe5~\xf9K\x91\xb9U$>\xa6kdIY\xc0\n/Y\xb1lJ\xd9\x8cj\xa3\xe5\xd3*\xd4N\xc6\x02\xb9x8\x8b}\xbc\xa3\xbb\xb8\xeb\"\xe70[i\x87pi\x7f\x88\x1d\x93 @\xa6j\xea\xb1o[\xc3\x05u\xdf\xde\x1e\x88v4\x97\x14\xad\xcf\x1f\xc3p\xd8\x1dK\v\x1f\x8c\x95\xfd', 0x101)
close_range$auto(0x2, 0x8, 0x0)
execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022cbd7000ffdbdf254300000004005f0005000800ae0000000400ff00"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x240020d0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1d, 0x2, 0x5, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)

3.570266688s ago: executing program 5 (id=1040):
fcntl$auto(0xff80000000000000, 0x406, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000000), r1)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x10080, 0x0)
sendmsg$auto_OVS_METER_CMD_FEATURES(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf250100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8881}, 0x20008000)
mmap$auto(0x8000000000000001, 0x100000000007, 0x7, 0xeb1, r0, 0x7fff)
write$auto(0x3, 0x0, 0x100082)

3.446472433s ago: executing program 0 (id=1041):
openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy17/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats_csv\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
fstat$auto(0xffffffffffffffff, 0x0)
fchown$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv$auto(0xffffffffffffffff, 0x0, 0x410)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/hw_conf\x00', 0x20486, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x1cdd81, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c00, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x0)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e22}, 0x55)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/features\x00', 0x181000, 0x0)
read$auto(r2, 0x0, 0x8)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x0, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x2)
close_range$auto(0x2, 0xa, 0x0)
sendmmsg$auto(0x3, 0x0, 0x7, 0x2d000000)
ioctl$auto_PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d, &(0x7f0000000100)={0x0, 0x3, 0xa9f4})

2.855893859s ago: executing program 5 (id=1042):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x4000, 0x0)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
ppoll$auto(&(0x7f0000000300)={0xffffffffffffffff, 0x8, 0x67}, 0xb, 0x0, 0x0, 0x8)
socket(0x18, 0xa, 0x1)
mmap$auto(0xfffffffffffffffd, 0x20009, 0xe6, 0xeb1, 0x405, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=<r3=>r0], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44062)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYRESOCT=r3, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008890)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x400c800)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r0, @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x800, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0xa101, 0x0)
mmap$auto(0x0, 0x400005, 0xffffffff, 0x9b72, 0x2, 0x8000)
read$auto(r0, 0x0, 0x84)
r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0)
ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0)

1.973240826s ago: executing program 0 (id=1043):
mmap$auto(0x0, 0x4000a, 0xdb, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1d, 0x2, 0x7)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, <r3=>r2}, 0x6a)
sendto$auto(r0, 0x0, 0xfdef, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r3}, 0x36)
close_range$auto(0x2, 0x8000, 0x0)

1.826693497s ago: executing program 3 (id=1044):
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x40, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, [0x0, 0x0, 0x0, 0x100, 0x0, 0x2000, 0xfffffffffffffffd, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x1, 0x4, 0x7, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x200000000000, 0x0, 0xffffffffefffffff, 0x3, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x400000000005b8, 0xc, 0x4000000000, 0x8, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x800000000000a, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x6, 0x0, 0x100000]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={"c86e00", 0x6, 0x6, 0x3, 0x9b4, 0x9, "ce25aafc24b9952f997e703f222ce1", '\x00', '\x00', '\x00', ["f5404de9641f0000000060c1", "70d90100", "efbc5a665600000000000100"]})
r1 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

1.729197031s ago: executing program 4 (id=1045):
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x2, 0x1, 0x0)
r0 = socket(0x1e, 0x1, 0x0)
socket(0x10, 0x2, 0x0)
memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4)
mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000)
ftruncate$auto(0x3, 0x0)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="011f00bd", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x24048080}, 0x80)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x22, 0x0, 0x4, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0xa)
ioctl$auto_def_blk_fops_fs(r1, 0x5393, &(0x7f0000000000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000240), r0)
sendmsg$auto_SMC_NETLINK_ADD_UEID(r2, &(0x7f0000001480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000014c0)=ANY=[@ANYBLOB="70110000", @ANYRES16=r3, @ANYBLOB="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"], 0x1170}, 0x1, 0x0, 0x0, 0x4000044}, 0x44000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x7, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000180), r4)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x7, 0x311)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x8000000000, 0x9}, 0x7}, 0x3, 0x0)

1.417224601s ago: executing program 0 (id=1046):
execve$auto(0x0, 0x0, 0x0)
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, 0x0, 0x4010)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
faccessat2$auto(0xffffffffffffff9c, 0x0, 0x1, 0xbc6c)
r2 = socket(0xa, 0x1, 0x84)
connect$auto(r0, &(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e1e, 0x3}}, 0x291f)
r3 = open(0x0, 0x101800, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, r2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(r1, r3, 0x81)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x341, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
read$auto_proc_pid_smaps_operations_internal(r3, 0x0, 0x43)
mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getpriority$auto(0x1, 0x0)
ioctl$auto(r4, 0x5419, 0x38)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/bridge_slave_0/mtu\x00', 0xa0443, 0x0)
r5 = socket(0x11, 0x3, 0x9)
ioctl$auto(0xffffffffffffffff, 0x4b47, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000001a00), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x800)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x2400c800)

1.40612277s ago: executing program 3 (id=1047):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/gspca_gl860/parameters/sensor\x00', 0x22001, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1)
futex$auto(0x0, 0x3, 0x8243, 0x0, 0x0, 0x4)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)="322e6ab0ac46bc", 0x7)

1.212271931s ago: executing program 4 (id=1048):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
write$auto(0x3, 0x0, 0x2)
write$auto(r0, 0x0, 0xfffffdef)
sched_setattr$auto(0x0, &(0x7f0000000040)={0x9, 0xfff, 0x8, 0x5, 0x800, 0x4, 0x0, 0x200, 0xaf, 0x6}, 0xb3)

823.250506ms ago: executing program 3 (id=1049):
io_cancel$auto(0x8, 0x0, &(0x7f0000000140)={0x0, 0x100000001, 0x2, 0x6})
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = socket(0x10, 0x2, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socketpair$auto(0xfff, 0x5, 0x10, 0x0) (async)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async)
mknod$auto(0x0, 0xc9, 0xc8) (async)
execve$auto(0x0, 0x0, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x6f, 0x3, 0x40, 0x6, 0x5, 0x3, 0x2000000000010006, 0x9, 0x3, 0x5, 0x0, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x2, 0x0, 0x2, [0x1b16, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x9, 0xfffffffffffffffd, 0x0, 0x1f9e, 0x0, 0xc06f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4799ecdc, 0x0, 0x0, 0x3287, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81) (async)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/net/bonding_masters\x00', 0x100, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa801, 0x0) (async)
r1 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x521000, 0x0)
read$auto_wakeup_sources_stats_fops_wakeup(r1, &(0x7f0000000040)=""/125, 0x7d) (async)
read$auto_wakeup_sources_stats_fops_wakeup(r1, &(0x7f00000001c0)=""/171, 0xab) (async)
socket(0x2, 0x3, 0xa) (async)
bind$auto(0x3, &(0x7f0000000100), 0x6b)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_NEW(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000480)=ANY=[@ANYBLOB="e2000081", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf250100000008000900040000000600030500000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) (async)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0) (async)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0)
ioctl$auto(0x3, 0xc0481273, 0x38)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(0x3, 0x1276, 0x7) (async)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0)
sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d0020000", @ANYRES16=r4, @ANYBLOB="04002abd7000ffdbdf254f000000040073000800220105000000280217800500060003000000b4000400714669a52e74232fb89275d9faf453fbac394aa349d2032609e67e0e9b3c31e6e1e5131195f85799c6beaf71ef96d4b78865a585e44976ee0bf49c93a8d7334171c134ffc19020dd2ac51bdfec8d46ed5335e6c9bab657e2510d23c36def2a1480ac8f6acd3ed8e228e13a2ca21d194a8a5855f43e03cde75e762cc802cea968812a2193644fb70acd952d384d79ac5923bc50e10540fe256c5addcbefc98187a50c7a4c4439c2e1a4bbfff986e489bad4000400ff15590be19a5e8ada416ecc9ce38c290bab5ed8ef344c6000d6dea50df20948594e296736ee92c64db1a858e1c142bb636d2cf10751b82e08d3eb2af8ddd66f54889acf04d073a900d7656ee042a7979fe374f61e70aad1f82092d50f93b2a2a0b5441e34118f5d74e40b9a62b450e01af1798b9056e713036b8aa655b14e86c7a81ba24b52777789072c26a7380f5eab345123dae14cbd9130eb4e6c21375b763d73b785f4b4c6b96cc02276de41bf6852856a0a06b999a789d4a708e1b9851ccaea0fb29fb61af04172eb75c168af05000200040000000500060003000000550004005e21709302bb0234ad0817c3dc33d329df31ef4821c722b70f76b449f9b97a621bdce1864c935a994d39069b6987eb39eea8d52032815b7902a840ae617767d18075ac82f797aee7cbef9f87654ce37a1a00000029000500e42f94dd03fcf7a93061946b1a0906017ac882f8117579aef7949e11710a7b6d125f09c7500000007d004f00ca7ad424253cd850fa2906c4a2a0a5c1d1230835549beab163bd0cc36bec5fb0eb7c06884069e00298945231c2cb1f0f8dfc0e999aa9a2660769a86e037755f49b955a8a2ed0e9917fe80e3265a60ac6c0b144e672390378a543ea7f896ee8b99eda101ee2889981a2368ad178a617715a0adf9d3129c2791e0000000500590004000000"], 0x2d0}, 0x1, 0x0, 0x0, 0x240080d5}, 0x850)

536.6932ms ago: executing program 5 (id=1050):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff)
mmap$auto(0x9, 0x21009, 0xdf, 0xeb1, 0x40000000000a5, 0x8004)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x11, 0x80003, 0x300)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4)
sendto$auto(0x3, 0x0, 0x8, 0xf034, &(0x7f0000000340)=@hci={0x1f, 0x0, 0x3}, 0x22)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000d53f6231e336d483ba2eb1bf300c048585d7a8f7cfdd8c191d1440346ea4c3d6dedfe731d496dc7d0667d7236d82a0a028eec610942978ab8980c07a076dbc98dc08c4068ca165338b685eb8518d7100ff969ce8f4e055b1ad98ae0a518bf440164ac573", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbcf250b0000000800020005000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
unshare$auto(0x40000080) (async)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) (async)
mmap$auto(0x9, 0x21009, 0xdf, 0xeb1, 0x40000000000a5, 0x8004) (async)
close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x11, 0x80003, 0x300) (async)
io_uring_setup$auto(0x6, 0x0) (async)
setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4) (async)
sendto$auto(0x3, 0x0, 0x8, 0xf034, &(0x7f0000000340)=@hci={0x1f, 0x0, 0x3}, 0x22) (async)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000d53f6231e336d483ba2eb1bf300c048585d7a8f7cfdd8c191d1440346ea4c3d6dedfe731d496dc7d0667d7236d82a0a028eec610942978ab8980c07a076dbc98dc08c4068ca165338b685eb8518d7100ff969ce8f4e055b1ad98ae0a518bf440164ac573", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbcf250b0000000800020005000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x800) (async)

370.341045ms ago: executing program 0 (id=1051):
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x0, @multicast}, 0x6a)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x3, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x11, 0x3, 0x2)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto_def_blk_fops_fs(r0, 0x1277, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)
r1 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, r1, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)

0s ago: executing program 4 (id=1052):
socket(0xa, 0x801, 0x80000000)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vbi17\x00', 0x121180, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250200000a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090)
r1 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)
read$auto_v4l2_fops_v4l2_dev(r0, 0x0, 0x0)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
unshare$auto(0x200)
r2 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x44800, 0x0)
io_uring_setup$auto(0x0, &(0x7f0000000180)={0x5, 0x81, 0x26, 0x6, 0x2, 0x7d, r2, [0x9e5d, 0x30000000, 0x2], {0x7, 0x9, 0x40, 0x6, 0x8bd, 0x200, 0x6e0, 0x0, 0x8001}, {0x4, 0xfff, 0x10, 0x1, 0x8, 0x2, 0x6, 0x80000001, 0x1}})
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040))
fcntl$auto(r3, 0x402, 0x2)
fcntl$auto(r3, 0x402, 0x400000fffffffd)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
unshare$auto(0x0)
setns(r4, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x3, 0x800005411, 0x38)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.15.197' (ED25519) to the list of known hosts.
[   65.137593][ T5818] cgroup: Unknown subsys name 'net'
[   65.247171][ T5818] cgroup: Unknown subsys name 'cpuset'
[   65.256043][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.606654][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.348997][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.357764][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.367275][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.374798][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.375847][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   68.382463][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.398305][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.407547][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.415079][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.415436][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   68.429639][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   68.432187][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   68.437034][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.445485][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   68.450977][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.458426][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   68.467908][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.474296][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   68.484544][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.497342][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   68.506241][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.513688][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.523955][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   68.535018][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.886023][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   68.920390][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   68.969089][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   69.051371][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   69.108314][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.116326][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.123624][ T5828] bridge_slave_0: entered allmulticast mode
[   69.131180][ T5828] bridge_slave_0: entered promiscuous mode
[   69.153685][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.161325][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.168757][ T5834] bridge_slave_0: entered allmulticast mode
[   69.176001][ T5834] bridge_slave_0: entered promiscuous mode
[   69.192935][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.200252][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.207855][ T5828] bridge_slave_1: entered allmulticast mode
[   69.214717][ T5828] bridge_slave_1: entered promiscuous mode
[   69.228788][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.235946][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.243162][ T5834] bridge_slave_1: entered allmulticast mode
[   69.250685][ T5834] bridge_slave_1: entered promiscuous mode
[   69.300948][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.311267][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.319079][ T5833] bridge_slave_0: entered allmulticast mode
[   69.328520][ T5833] bridge_slave_0: entered promiscuous mode
[   69.338448][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.364259][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.373564][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.380953][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.388237][ T5833] bridge_slave_1: entered allmulticast mode
[   69.395402][ T5833] bridge_slave_1: entered promiscuous mode
[   69.403272][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.421473][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.428660][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.436034][ T5827] bridge_slave_0: entered allmulticast mode
[   69.442603][ T5827] bridge_slave_0: entered promiscuous mode
[   69.451260][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.488139][ T5834] team0: Port device team_slave_0 added
[   69.496701][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.503794][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.511438][ T5827] bridge_slave_1: entered allmulticast mode
[   69.519358][ T5827] bridge_slave_1: entered promiscuous mode
[   69.542455][ T5834] team0: Port device team_slave_1 added
[   69.566394][ T5828] team0: Port device team_slave_0 added
[   69.583321][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.600611][ T5828] team0: Port device team_slave_1 added
[   69.608637][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.620443][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.630629][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.637796][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.663793][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.677551][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.684621][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.710712][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.731508][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.779167][ T5827] team0: Port device team_slave_0 added
[   69.792751][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.799911][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.825996][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.845539][ T5827] team0: Port device team_slave_1 added
[   69.863920][ T5833] team0: Port device team_slave_0 added
[   69.870351][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.880185][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.906283][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.942676][ T5833] team0: Port device team_slave_1 added
[   69.965549][ T5834] hsr_slave_0: entered promiscuous mode
[   69.972151][ T5834] hsr_slave_1: entered promiscuous mode
[   69.979757][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.986967][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.018044][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.038750][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.045780][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.071853][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.086666][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.093651][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.120118][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.140083][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.147253][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.173403][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.212974][ T5828] hsr_slave_0: entered promiscuous mode
[   70.219794][ T5828] hsr_slave_1: entered promiscuous mode
[   70.226738][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.234698][ T5828] Cannot create hsr debugfs directory
[   70.306767][ T5833] hsr_slave_0: entered promiscuous mode
[   70.313931][ T5833] hsr_slave_1: entered promiscuous mode
[   70.320574][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.328475][ T5833] Cannot create hsr debugfs directory
[   70.360415][ T5827] hsr_slave_0: entered promiscuous mode
[   70.367235][ T5827] hsr_slave_1: entered promiscuous mode
[   70.373274][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.381135][ T5827] Cannot create hsr debugfs directory
[   70.490094][ T5842] Bluetooth: hci0: command tx timeout
[   70.564261][ T5842] Bluetooth: hci2: command tx timeout
[   70.564322][ T5839] Bluetooth: hci1: command tx timeout
[   70.570026][ T5842] Bluetooth: hci3: command tx timeout
[   70.625086][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   70.637487][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   70.661250][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   70.675999][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   70.701297][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.710474][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.731318][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.740375][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.795057][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.803890][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.825847][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.838737][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.897020][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.920768][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.930565][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.940095][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.036637][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.054089][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.107891][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   71.123250][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   71.140947][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.148315][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.158771][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.165907][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.196676][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.210244][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.217408][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.245308][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.257487][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.264639][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.285819][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   71.320409][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   71.341635][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.348763][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.365421][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.372532][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.387125][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.394255][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.437327][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.463093][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.470300][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.568319][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.671966][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.772969][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[   71.786446][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[   71.797203][ T5834] veth0_vlan: entered promiscuous mode
[   71.838662][ T5834] veth1_vlan: entered promiscuous mode
[   71.877947][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.919692][ T5828] veth0_vlan: entered promiscuous mode
[   71.939868][ T5828] veth1_vlan: entered promiscuous mode
[   71.958183][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.985045][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.021694][ T5834] veth0_macvtap: entered promiscuous mode
[   72.040958][ T5834] veth1_macvtap: entered promiscuous mode
[   72.053545][ T5828] veth0_macvtap: entered promiscuous mode
[   72.067289][ T5828] veth1_macvtap: entered promiscuous mode
[   72.088142][ T5833] veth0_vlan: entered promiscuous mode
[   72.103865][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.125840][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.148363][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.157974][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.168481][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.178353][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.191585][ T5827] veth0_vlan: entered promiscuous mode
[   72.198238][ T5833] veth1_vlan: entered promiscuous mode
[   72.209891][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.220842][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.232588][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.257245][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.267933][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.279766][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.291549][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.300803][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.309825][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.318764][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.330419][ T5827] veth1_vlan: entered promiscuous mode
[   72.397518][ T5827] veth0_macvtap: entered promiscuous mode
[   72.407409][ T5833] veth0_macvtap: entered promiscuous mode
[   72.448022][ T5833] veth1_macvtap: entered promiscuous mode
[   72.461950][ T5827] veth1_macvtap: entered promiscuous mode
[   72.498407][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.506846][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.529892][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.542425][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.553752][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.564451][ T5842] Bluetooth: hci0: command tx timeout
[   72.570585][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.581556][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.601627][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.613316][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.623437][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.635035][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.644809][ T5842] Bluetooth: hci3: command tx timeout
[   72.647431][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.650341][   T53] Bluetooth: hci1: command tx timeout
[   72.657508][ T5839] Bluetooth: hci2: command tx timeout
[   72.680546][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.691663][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.702722][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.713338][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.723450][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.736508][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.747630][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.764735][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.773483][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.783024][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.793831][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.812623][  T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.816359][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.826638][  T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.835598][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.849265][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.859782][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.870113][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.880651][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.891573][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.910027][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.921048][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.935705][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.945851][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.959035][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.968757][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.012723][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   73.028335][  T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.038307][  T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.135988][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.143856][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.240798][ T5892] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.269467][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.281459][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.331041][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.355154][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.408805][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.424264][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.841220][ T5907] process 'syz.3.6' launched '/dev/fd/4/./file1' with NULL argv: empty string added
[   74.645069][   T53] Bluetooth: hci0: command tx timeout
[   74.724207][   T53] Bluetooth: hci1: command tx timeout
[   74.734602][   T53] Bluetooth: hci3: command tx timeout
[   74.740037][   T53] Bluetooth: hci2: command tx timeout
[   75.578518][   T29] audit: type=1806 audit(1737200282.272:2): xattr="" res=-22
[   76.726333][   T53] Bluetooth: hci0: command tx timeout
[   76.806988][   T53] Bluetooth: hci2: command tx timeout
[   76.812445][   T53] Bluetooth: hci3: command tx timeout
[   76.819329][ T5842] Bluetooth: hci1: command tx timeout
[   78.005024][ T5983] Invalid ELF header magic: != ELF
[   78.449575][ T6019] Process accounting resumed
[   79.241881][ T6036] Zero length message leads to an empty skb
[   79.945799][ T6054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.35'.
[   81.554161][ T6072] netlink: 'syz.0.41': attribute type 11 has an invalid length.
[   81.573451][ T6072] netlink: 'syz.0.41': attribute type 11 has an invalid length.
[   81.581920][ T6072] netlink: 112 bytes leftover after parsing attributes in process `syz.0.41'.
[   81.908092][ T6074] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   83.089678][ T6090] Process accounting resumed
[   84.146945][ T6104] sctp: [Deprecated]: syz.2.46 (pid 6104) Use of int in maxseg socket option.
[   84.146945][ T6104] Use struct sctp_assoc_value instead
[   84.289406][ T6113] netlink: 330 bytes leftover after parsing attributes in process `syz.0.49'.
[   86.109842][ T6156] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[6156]
[   86.124961][ T6156] =======================================================
[   86.124961][ T6156] WARNING: The mand mount option has been deprecated and
[   86.124961][ T6156]          and is ignored by this kernel. Remove the mand
[   86.124961][ T6156]          option from the mount to silence this warning.
[   86.124961][ T6156] =======================================================
[   86.746911][ T6167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.64'.
[   86.941166][ T6189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.67'.
[   87.064666][ T6189] hsr_slave_1 (unregistering): left promiscuous mode
[   87.136159][  T976] cfg80211: failed to load regulatory.db
[   88.431200][ T6207] Process accounting resumed
[   88.439368][ T6203] GUP no longer grows the stack in syz.2.73 (6203): 8000-409000 (0)
[   88.480387][ T6203] CPU: 1 UID: 0 PID: 6203 Comm: syz.2.73 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[   88.490950][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   88.501049][ T6203] Call Trace:
[   88.504356][ T6203]  <TASK>
[   88.507311][ T6203]  dump_stack_lvl+0x16c/0x1f0
[   88.512034][ T6203]  gup_vma_lookup+0x1d2/0x220
[   88.516838][ T6203]  __get_user_pages+0x236/0x3b50
[   88.521820][ T6203]  ? __pfx_rwsem_read_trylock+0x10/0x10
[   88.527403][ T6203]  ? __gup_longterm_locked+0x123/0x1870
[   88.532993][ T6203]  ? __gup_longterm_locked+0x123/0x1870
[   88.538587][ T6203]  ? __pfx___get_user_pages+0x10/0x10
[   88.543998][ T6203]  ? down_read_killable+0xcc/0x380
[   88.549164][ T6203]  ? __pfx_down_read_killable+0x10/0x10
[   88.554755][ T6203]  ? __pfx___lock_acquire+0x10/0x10
[   88.559990][ T6203]  __gup_longterm_locked+0x211/0x1870
[   88.565413][ T6203]  ? __pfx___gup_longterm_locked+0x10/0x10
[   88.571257][ T6203]  ? gup_fast_fallback+0x84c/0x2690
[   88.576506][ T6203]  ? __pfx_lock_release+0x10/0x10
[   88.581561][ T6203]  ? lock_acquire+0x2f/0xb0
[   88.586091][ T6203]  ? ___pte_offset_map+0x42/0x540
[   88.591177][ T6203]  gup_fast_fallback+0x1802/0x2690
[   88.596347][ T6203]  ? __pfx_gup_fast_fallback+0x10/0x10
[   88.601843][ T6203]  ? do_syscall_64+0xcd/0x250
[   88.606555][ T6203]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.612687][ T6203]  get_user_pages_fast+0xa8/0x100
[   88.617748][ T6203]  ? __pfx_get_user_pages_fast+0x10/0x10
[   88.623429][ T6203]  get_futex_key+0x1f5/0x1000
[   88.628163][ T6203]  ? __pfx_get_futex_key+0x10/0x10
[   88.633318][ T6203]  ? kasan_save_track+0x14/0x30
[   88.638213][ T6203]  ? __kasan_kmalloc+0xaa/0xb0
[   88.643016][ T6203]  futex_lock_pi+0x282/0x7a0
[   88.647642][ T6203]  ? __pfx_futex_lock_pi+0x10/0x10
[   88.652789][ T6203]  ? __pfx___futex_wait+0x10/0x10
[   88.657876][ T6203]  ? futex_wait+0x121/0x380
[   88.662420][ T6203]  ? __pfx_futex_wake_mark+0x10/0x10
[   88.667743][ T6203]  ? lock_acquire.part.0+0x11b/0x380
[   88.673057][ T6203]  ? find_held_lock+0x2d/0x110
[   88.677873][ T6203]  do_futex+0x11b/0x350
[   88.682069][ T6203]  ? __pfx_do_futex+0x10/0x10
[   88.686797][ T6203]  ? __pfx_task_mm_cid_work+0x10/0x10
[   88.692208][ T6203]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   88.697613][ T6203]  ? __pfx___might_resched+0x10/0x10
[   88.702933][ T6203]  __x64_sys_futex+0x1e1/0x4c0
[   88.707745][ T6203]  ? __pfx___x64_sys_futex+0x10/0x10
[   88.713070][ T6203]  ? rcu_is_watching+0x12/0xc0
[   88.717890][ T6203]  do_syscall_64+0xcd/0x250
[   88.722434][ T6203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.728368][ T6203] RIP: 0033:0x7fe2e5185d29
[   88.732814][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.752459][ T6203] RSP: 002b:00007fe2e5f2b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   88.760912][ T6203] RAX: ffffffffffffffda RBX: 00007fe2e5375fa0 RCX: 00007fe2e5185d29
[   88.768919][ T6203] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000
[   88.776922][ T6203] RBP: 00007fe2e5201b08 R08: 0000000000000000 R09: 0000000080000001
[   88.784927][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.792929][ T6203] R13: 0000000000000000 R14: 00007fe2e5375fa0 R15: 00007fff4dbf3598
[   88.800960][ T6203]  </TASK>
[   91.004078][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'.
[   91.049132][ T6252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.065058][ T6252] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.097392][ T6252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.125557][ T6252] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.243786][ T6253] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[6253]
[   91.726159][ T6271] delete_channel: no stack
[   91.768778][ T6270] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[6270]
[   93.218064][ T6290] netlink: 346 bytes leftover after parsing attributes in process `syz.2.93'.
[   94.588306][ T6276] syz.3.90: vmalloc error: size 3870720, failed to allocated page array size 7560, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   94.638754][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.3.90 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[   94.649325][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   94.659604][ T6276] Call Trace:
[   94.662910][ T6276]  <TASK>
[   94.665868][ T6276]  dump_stack_lvl+0x16c/0x1f0
[   94.670584][ T6276]  warn_alloc+0x24d/0x3a0
[   94.674950][ T6276]  ? __pfx_warn_alloc+0x10/0x10
[   94.679864][ T6276]  ? __get_vm_area_node+0x1b0/0x2f0
[   94.685108][ T6276]  ? __get_vm_area_node+0x1dc/0x2f0
[   94.690365][ T6276]  __vmalloc_node_range_noprof+0x1105/0x1530
[   94.696439][ T6276]  ? ip_set_sockfn_get+0x185/0xc50
[   94.701600][ T6276]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   94.707968][ T6276]  ? __get_vm_area_node+0x1b0/0x2f0
[   94.713206][ T6276]  ? __get_vm_area_node+0x1dc/0x2f0
[   94.718450][ T6276]  __vmalloc_node_range_noprof+0xd85/0x1530
[   94.724391][ T6276]  ? ip_set_sockfn_get+0x185/0xc50
[   94.729558][ T6276]  ? __pfx___lock_acquire+0x10/0x10
[   94.734815][ T6276]  ? ip_set_sockfn_get+0x185/0xc50
[   94.739987][ T6276]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   94.746370][ T6276]  ? apparmor_capable+0x114/0x1d0
[   94.751438][ T6276]  ? ip_set_sockfn_get+0x185/0xc50
[   94.756586][ T6276]  vmalloc_noprof+0x6b/0x90
[   94.761130][ T6276]  ? ip_set_sockfn_get+0x185/0xc50
[   94.766281][ T6276]  ip_set_sockfn_get+0x185/0xc50
[   94.771256][ T6276]  ? __pfx_lock_release+0x10/0x10
[   94.776313][ T6276]  ? __pfx_ip_set_sockfn_get+0x10/0x10
[   94.781815][ T6276]  ? nf_sockopt_find.constprop.0+0x221/0x290
[   94.787844][ T6276]  nf_getsockopt+0x79/0xe0
[   94.792394][ T6276]  ip_getsockopt+0x18e/0x1e0
[   94.792544][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'.
[   94.797015][ T6276]  ? __pfx_ip_getsockopt+0x10/0x10
[   94.797047][ T6276]  ? __schedule+0xe60/0x5ad0
[   94.797078][ T6276]  ipv6_getsockopt+0x230/0x280
[   94.797110][ T6276]  ? __pfx_ipv6_getsockopt+0x10/0x10
[   94.797140][ T6276]  ? __pfx_mark_lock+0x10/0x10
[   94.830542][ T6276]  ? psi_task_change+0x1a2/0x2d0
[   94.835539][ T6276]  sctp_getsockopt+0x1d2/0x7ae0
[   94.840439][ T6276]  ? hlock_class+0x4e/0x130
[   94.844979][ T6276]  ? mark_lock+0xb5/0xc60
[   94.849353][ T6276]  ? aa_label_sk_perm+0x19d/0x5a0
[   94.854426][ T6276]  ? __pfx_sctp_getsockopt+0x10/0x10
[   94.859759][ T6276]  ? __lock_acquire+0x15a9/0x3c40
[   94.864835][ T6276]  ? __pfx___lock_acquire+0x10/0x10
[   94.870079][ T6276]  ? find_held_lock+0x2d/0x110
[   94.874884][ T6276]  ? __might_fault+0x13b/0x190
[   94.879696][ T6276]  ? __pfx_lock_release+0x10/0x10
[   94.884799][ T6276]  ? trace_lock_acquire+0x14e/0x1f0
[   94.890049][ T6276]  ? lock_acquire+0x2f/0xb0
[   94.894586][ T6276]  ? __might_fault+0xe3/0x190
[   94.899320][ T6276]  ? __might_fault+0xe3/0x190
[   94.904048][ T6276]  ? __pfx_sock_common_getsockopt+0x10/0x10
[   94.909976][ T6276]  ? do_sock_getsockopt+0x3fe/0x870
[   94.915209][ T6276]  do_sock_getsockopt+0x3fe/0x870
[   94.920276][ T6276]  ? __pfx_do_sock_getsockopt+0x10/0x10
[   94.925854][ T6276]  ? lock_acquire+0x2f/0xb0
[   94.930390][ T6276]  ? __fget_files+0x40/0x3a0
[   94.935021][ T6276]  ? __fget_files+0x206/0x3a0
[   94.939743][ T6276]  __sys_getsockopt+0x12f/0x260
[   94.944639][ T6276]  __x64_sys_getsockopt+0xbd/0x160
[   94.949789][ T6276]  ? do_syscall_64+0x91/0x250
[   94.954521][ T6276]  ? lockdep_hardirqs_on+0x7c/0x110
[   94.959748][ T6276]  do_syscall_64+0xcd/0x250
[   94.964288][ T6276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.970216][ T6276] RIP: 0033:0x7fe606585d29
[   94.974655][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.994294][ T6276] RSP: 002b:00007fe6072d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   95.002741][ T6276] RAX: ffffffffffffffda RBX: 00007fe606775fa0 RCX: 00007fe606585d29
[   95.010737][ T6276] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000005
[   95.018731][ T6276] RBP: 00007fe606601b08 R08: 0000000020000040 R09: 0000000000000000
[   95.026722][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.034716][ T6276] R13: 0000000000000000 R14: 00007fe606775fa0 R15: 00007ffd54151ac8
[   95.042739][ T6276]  </TASK>
[   95.112511][ T6276] Mem-Info:
[   95.143569][ T6276] active_anon:12964 inactive_anon:0 isolated_anon:0
[   95.143569][ T6276]  active_file:14833 inactive_file:38705 isolated_file:0
[   95.143569][ T6276]  unevictable:768 dirty:838 writeback:0
[   95.143569][ T6276]  slab_reclaimable:9950 slab_unreclaimable:93766
[   95.143569][ T6276]  mapped:23665 shmem:9293 pagetables:700
[   95.143569][ T6276]  sec_pagetables:0 bounce:0
[   95.143569][ T6276]  kernel_misc_reclaimable:0
[   95.143569][ T6276]  free:1276678 free_pcp:1643 free_cma:0
[   95.188733][    C1] vkms_vblank_simulate: vblank timer overrun
[   95.203071][ T6276] Node 0 active_anon:51856kB inactive_anon:0kB active_file:59332kB inactive_file:154804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94660kB dirty:3352kB writeback:0kB shmem:35636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:10816kB pagetables:2800kB sec_pagetables:0kB all_unreclaimable? no
[   95.235740][    C1] vkms_vblank_simulate: vblank timer overrun
[   95.244266][ T6276] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[   95.274428][    C1] vkms_vblank_simulate: vblank timer overrun
[   95.291645][ T6276] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   95.320127][ T6276] lowmem_reserve[]: 0 2491 2492 0 0
[   95.325524][ T6276] Node 0 DMA32 free:1189496kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:51756kB inactive_anon:0kB active_file:59332kB inactive_file:154720kB unevictable:1536kB writepending:4188kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:2100kB local_pcp:192kB free_cma:0kB
[   95.356208][ T6276] lowmem_reserve[]: 0 0 0 0 0
[   95.361071][ T6276] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[   95.388558][ T6276] lowmem_reserve[]: 0 0 0 0 0
[   95.394005][ T6276] Node 1 Normal free:3900228kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4752kB local_pcp:4504kB free_cma:0kB
[   95.423338][    C1] vkms_vblank_simulate: vblank timer overrun
[   95.429966][ T6276] lowmem_reserve[]: 0 0 0 0 0
[   95.435040][ T6276] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   95.460344][ T6276] Node 0 DMA32: 758*4kB (UM) 504*8kB (UM) 644*16kB (UME) 306*32kB (UME) 130*64kB (UM) 104*128kB (ME) 59*256kB (ME) 27*512kB (UME) 13*1024kB (UME) 4*2048kB (UM) 266*4096kB (M) = 1188760kB
[   95.480175][ T6276] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   95.492468][ T6276] Node 1 Normal: 8*4kB (UME) 11*8kB (UME) 10*16kB (UME) 179*32kB (UME) 88*64kB (UME) 30*128kB (UME) 17*256kB (UME) 9*512kB (UM) 3*1024kB (UE) 3*2048kB (UME) 944*4096kB (M) = 3900280kB
[   95.511581][ T6276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   95.521563][ T6276] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   95.531236][ T6276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   95.541071][ T6276] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   95.551032][ T6276] 61820 total pagecache pages
[   95.556132][ T6276] 0 pages in swap cache
[   95.560423][ T6276] Free swap  = 124456kB
[   95.564792][ T6276] Total swap = 124996kB
[   95.569052][ T6276] 2097051 pages RAM
[   95.572954][ T6276] 0 pages HighMem/MovableOnly
[   95.577806][ T6276] 427367 pages reserved
[   95.582103][ T6276] 0 pages cma reserved
[   97.453164][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'.
[   97.488659][ T6344] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[   97.529086][ T6344] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   99.791123][   T53] Bluetooth: hci3: Malformed Event: 0x02
[  103.006357][ T6407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.120'.
[  106.027162][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  106.037909][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  106.046888][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  106.199670][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  106.212693][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  106.220477][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  107.483283][ T6446] chnl_net:caif_netlink_parms(): no params data found
[  108.281768][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.305398][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.326122][ T5842] Bluetooth: hci4: command tx timeout
[  108.994414][ T6446] bridge_slave_0: entered allmulticast mode
[  109.003025][ T6446] bridge_slave_0: entered promiscuous mode
[  109.027260][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.044251][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.051498][ T6446] bridge_slave_1: entered allmulticast mode
[  109.059148][ T6446] bridge_slave_1: entered promiscuous mode
[  109.100739][ T6465] netlink: 326 bytes leftover after parsing attributes in process `syz.2.127'.
[  109.542758][ T6446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.565130][ T6446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.683821][ T6446] team0: Port device team_slave_0 added
[  109.715799][ T6446] team0: Port device team_slave_1 added
[  109.885893][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.892876][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.985952][ T6446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.044042][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.084078][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.135185][ T6446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.277868][ T6446] hsr_slave_0: entered promiscuous mode
[  110.298273][ T6446] hsr_slave_1: entered promiscuous mode
[  110.344748][ T6446] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.369564][ T6446] Cannot create hsr debugfs directory
[  110.404733][ T5842] Bluetooth: hci4: command tx timeout
[  110.848666][ T6446] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  110.908955][ T6446] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  110.943777][ T6446] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  111.016850][ T6446] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  111.303490][ T6446] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.363665][ T6446] 8021q: adding VLAN 0 to HW filter on device team0
[  111.397121][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.404278][ T5981] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.449214][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.456391][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.655665][ T6446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.141227][ T6446] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.484852][ T5842] Bluetooth: hci4: command tx timeout
[  112.880521][ T6446] veth0_vlan: entered promiscuous mode
[  112.887686][ T6533] capability: warning: `syz.0.139' uses 32-bit capabilities (legacy support in use)
[  112.924524][ T6446] veth1_vlan: entered promiscuous mode
[  113.000431][ T6446] veth0_macvtap: entered promiscuous mode
[  113.039885][ T6446] veth1_macvtap: entered promiscuous mode
[  113.098320][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.125737][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.158325][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.174349][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.206865][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.227679][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.335430][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.375559][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.394240][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.420076][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.449324][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.474194][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.551784][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.620441][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.681885][ T6446] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.748150][ T6446] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.797277][ T6446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.826486][ T6446] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.034227][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.059741][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.139137][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.164686][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.421760][ T6553] ICMPv6: process `syz.4.123' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead
[  114.577566][ T5842] Bluetooth: hci4: command tx timeout
[  116.043862][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'.
[  116.199467][ T6560] sctp: [Deprecated]: syz.2.144 (pid 6560) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.199467][ T6560] Use struct sctp_sack_info instead
[  116.324782][ T6569] syz.4.146 uses obsolete (PF_INET,SOCK_PACKET)
[  119.624937][ T6611] random: crng reseeded on system resumption
[  126.096288][ T6672] tipc: Started in network mode
[  126.165760][ T6672] tipc: Node identity ffffffff, cluster identity 4711
[  126.172568][ T6672] tipc: Node number set to 4294967295
[  127.230785][ T6701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'.
[  127.830729][ T6683] kexec: Could not allocate control_code_buffer

syzkaller
syzkaller login: [  129.078940][ T6718] netlink: 146 bytes leftover after parsing attributes in process `syz.4.174'.
[  129.104739][ T6701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.146064][ T6701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.213508][ T6701] bond0 (unregistering): Released all slaves
[  129.327757][ T6720] netlink: 146 bytes leftover after parsing attributes in process `syz.4.174'.
[  129.536431][ T6729] bridge0: port 3(team0) entered blocking state
[  129.542849][ T6729] bridge0: port 3(team0) entered disabled state
[  129.584661][ T6729] team0: entered allmulticast mode
[  129.620047][ T6729] team_slave_0: entered allmulticast mode
[  129.650485][ T6729] team_slave_1: entered allmulticast mode
[  129.685199][ T6729] team0: entered promiscuous mode
[  129.717326][ T6729] team_slave_0: entered promiscuous mode
[  129.751918][ T6729] team_slave_1: entered promiscuous mode
[  129.785743][ T6729] bridge0: port 3(team0) entered blocking state
[  129.792446][ T6729] bridge0: port 3(team0) entered forwarding state
[  130.633060][ T6627] Process accounting resumed
[  132.631280][ T6769] mmap: syz.3.183 (6769) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  133.233935][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  133.258032][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  135.089930][ T6780] warning: `syz.4.188' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  135.286954][ T6780] netlink: 74 bytes leftover after parsing attributes in process `syz.4.188'.
[  135.982744][ T6775] Invalid ELF header magic: != ELF
[  136.047374][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'.
[  140.043864][ T6848] netlink: 342 bytes leftover after parsing attributes in process `syz.0.197'.
[  142.160496][ T6896] bridge0: port 3(team0) entered blocking state
[  142.254531][ T6896] bridge0: port 3(team0) entered disabled state
[  142.314371][ T6896] team0: entered allmulticast mode
[  142.319545][ T6896] team_slave_0: entered allmulticast mode
[  142.408858][ T6896] team_slave_1: entered allmulticast mode
[  142.498698][ T6896] team0: entered promiscuous mode
[  142.503777][ T6896] team_slave_0: entered promiscuous mode
[  142.629555][ T6896] team_slave_1: entered promiscuous mode
[  142.746251][ T6896] bridge0: port 3(team0) entered blocking state
[  142.752639][ T6896] bridge0: port 3(team0) entered forwarding state
[  143.304271][ T5842] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  144.799152][ T6930] device-mapper: ioctl: Unable to rename non-existent device,  to „
[  144.888536][ T6930] lo: entered allmulticast mode
[  144.968397][ T6933] lo: left allmulticast mode
[  144.970306][   T29] audit: type=1800 audit(1737200372.656:3): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.215" name="lu_gp_id" dev="configfs" ino=13391 res=0 errno=0
[  149.069819][ T6998] sp0: Synchronizing with TNC
[  149.115022][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'.
[  149.702406][ T7013] netlink: 'syz.2.233': attribute type 2 has an invalid length.
[  149.865360][ T7013] netlink: 'syz.2.233': attribute type 2 has an invalid length.
[  151.823787][ T7020] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  152.834038][ T7042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  154.069363][ T7054] futex_wake_op: syz.2.243 tries to shift op by 64; fix this program
[  154.202969][ T7057] loop6: detected capacity change from 0 to 8192
[  154.296434][ T7059] random: crng reseeded on system resumption
[  154.491330][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'.
[  156.450382][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'.
[  158.345801][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.253'.
[  162.132768][ T7118] Process accounting paused
[  162.564629][ T7147] devpts: called with bogus options
[  165.178922][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.270'.
[  165.711911][ T7183] MTRR 1 not used
[  167.699990][ T7188] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  167.869013][ T7207] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  169.325511][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'.
[  170.011545][ T7204] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  172.205026][ T7244] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16
[  172.843414][ T7272] random: crng reseeded on system resumption
[  174.508304][ T7322] netlink: 326 bytes leftover after parsing attributes in process `syz.3.300'.
[  174.828906][ T7322] bridge0: port 3(team0) entered disabled state
[  175.301652][ T7333] netlink: 'syz.0.305': attribute type 21 has an invalid length.
[  175.324310][ T7333] netlink: 326 bytes leftover after parsing attributes in process `syz.0.305'.
[  178.564516][ T5842] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  182.299775][ T7432] nfs: Unknown parameter 'nl80211'
[  191.782746][ T5145] Bluetooth: hci3: command 0x0406 tx timeout
[  191.788915][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  191.795400][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  191.801420][ T5835] Bluetooth: hci0: command 0x0406 tx timeout
[  192.147944][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.358'.
[  192.491237][ T7562] Process accounting resumed
[  193.601691][ T7566] netlink: 334 bytes leftover after parsing attributes in process `syz.3.355'.
[  194.646687][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  194.653212][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  195.483405][ T7614] netlink: 'syz.2.365': attribute type 4 has an invalid length.
[  200.209146][   T29] audit: type=1400 audit(1737200451.895:4): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7667 comm="syz.3.379"
[  212.953676][ T7858] nl80211: entered promiscuous mode
[  214.544038][ T7868] netlink: 'syz.0.419': attribute type 11 has an invalid length.
[  214.574888][ T7868] netlink: 'syz.0.419': attribute type 11 has an invalid length.
[  214.680654][ T7868] mkiss: ax0: crc mode is auto.
[  214.728024][ T5842] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  215.671308][ T7874] svc: failed to register nfsdv3 RPC service (errno 111).
[  215.743633][ T7874] svc: failed to register nfsaclv3 RPC service (errno 111).
[  219.034547][ T7893] netlink: 93 bytes leftover after parsing attributes in process `syz.3.426'.
[  219.064612][ T7891] netlink: 93 bytes leftover after parsing attributes in process `syz.3.426'.
[  222.992159][ T7943] netlink: 'syz.2.436': attribute type 3 has an invalid length.
[  223.044304][ T7943] netlink: 306 bytes leftover after parsing attributes in process `syz.2.436'.
[  223.605270][ T7949] netlink: 'syz.2.436': attribute type 27 has an invalid length.
[  223.629977][ T7949] netlink: 146 bytes leftover after parsing attributes in process `syz.2.436'.
[  223.915410][ T7937] Process accounting paused
[  224.410628][ T7960] sctp: [Deprecated]: syz.2.444 (pid 7960) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.410628][ T7960] Use struct sctp_sack_info instead
[  224.514917][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'.
[  224.661098][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'.
[  226.307484][ T7986] Invalid ELF header magic: != ELF
[  226.881191][ T7993] netlink: 'syz.3.450': attribute type 1 has an invalid length.
[  227.919769][ T7986] netlink: 330 bytes leftover after parsing attributes in process `syz.2.448'.
[  230.464656][ T8043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.459'.
[  230.777438][ T8043] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  232.224550][ T8078] syz.3.464 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  232.575814][ T5831] Bluetooth: hci4: command 0x0406 tx timeout
[  232.635327][ T8086] FAULT_INJECTION: forcing a failure.
[  232.635327][ T8086] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  232.649074][ T8086] CPU: 0 UID: 0 PID: 8086 Comm: syz.2.468 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[  232.659788][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  232.669875][ T8086] Call Trace:
[  232.673168][ T8086]  <TASK>
[  232.676131][ T8086]  dump_stack_lvl+0x16c/0x1f0
[  232.680856][ T8086]  should_fail_ex+0x497/0x5b0
[  232.685572][ T8086]  _copy_to_user+0x32/0xd0
[  232.690025][ T8086]  simple_read_from_buffer+0xd0/0x160
[  232.695423][ T8086]  proc_fail_nth_read+0x198/0x270
[  232.700483][ T8086]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  232.706078][ T8086]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  232.711661][ T8086]  vfs_read+0x1df/0xbe0
[  232.715842][ T8086]  ? __fget_files+0x1fc/0x3a0
[  232.720545][ T8086]  ? __pfx___mutex_lock+0x10/0x10
[  232.725613][ T8086]  ? __pfx_vfs_read+0x10/0x10
[  232.730325][ T8086]  ? __fget_files+0x206/0x3a0
[  232.735039][ T8086]  ksys_read+0x12b/0x250
[  232.739304][ T8086]  ? __pfx_ksys_read+0x10/0x10
[  232.744101][ T8086]  do_syscall_64+0xcd/0x250
[  232.748639][ T8086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.754565][ T8086] RIP: 0033:0x7fe2e518473c
[  232.759004][ T8086] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  232.778633][ T8086] RSP: 002b:00007fe2e5f2b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  232.787068][ T8086] RAX: ffffffffffffffda RBX: 00007fe2e5375fa0 RCX: 00007fe2e518473c
[  232.795060][ T8086] RDX: 000000000000000f RSI: 00007fe2e5f2b0a0 RDI: 0000000000000004
[  232.803052][ T8086] RBP: 00007fe2e5f2b090 R08: 0000000000000000 R09: 0000000000000000
[  232.811044][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.819032][ T8086] R13: 0000000000000000 R14: 00007fe2e5375fa0 R15: 00007fff4dbf3598
[  232.827046][ T8086]  </TASK>
	

		
	

	

	

	

	
		
	

	
		
	

	
		
	

	
		
	
	

	
		
	

	
		
	

	
		

	
				
	
	



	

	

	
	
	
	
	
	
	
	

	
		
	

	
		
	

	
		
	
	

	

	
		
		
		


	
			
	

	
				
		
		


	




		




	
	
			
	

	

	



	

	
		
	
	

	
	
	

	
		
	

	
		
	

	
		
	
	
	

	
		
	

	



	


	


		
	
	

	
	
	
	

	
	
	
	

	
	
	
	

	
	
	

	
		
	

	
		
	

	
		
			

			

			

			

			

			

			

			

			

			

	

	
		
	

	
	

	
		


	
		
			
			


	

	
	
	
	
	
	
	

	


	

	
		


		
	



		


			


	

	





	
		

	


	
	

		
	
		
	






			








	

	






		



		

		




	
	
	
	





	




	




	


	
	


	






	




	





		








	
	
	

	
		

	


	


	




	
	
	


		

	

	

		

	
			





	
				
	
	



	
			
	
			




	
			




	
			




	
			




	
			




	

	
		

	

	
			




	
		
	
	
			
	

	
		
	
	

	

	

	
		
	
		
			


	
				
	
	



	
			

	


		

	


	

	
		
	

	
		


	
	
	
	
	
	
	


		



		



	





	
	
	
	
	
	
	
		

	

	

		
	




	
	

	

		
		

		
		


	

	

	
	
		
		

		
		


	

	

	
	
	
	


	
	


		
	
	


	
	


		
	
	
	

	
		
	
	

	



	



	


	



	
	

	









		









	



	
	






			
	

		

	
	







		



	
		

	






		









	



	
	






			
	

		

	





		



	
		

	
	
	

	

	

	
		






	
			

			

			

			


	
		

	
		

		
		

		
	
	

		
		

		
	
	


	
		



	

	
[  403.618405][ T9515] veth0_macvtap: entered promiscuous mode
[  403.638877][ T9515] veth1_macvtap: entered promiscuous mode
[  403.659947][ T9515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.693237][ T9515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!

syzkaller
[  403.720199][ T9515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
syzkaller login: [  403.753319][ T9515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.794194][ T9515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.830786][ T9515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.873698][ T9515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.891785][ T9515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.919126][ T9515] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.988379][ T9515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.045273][ T9515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.111530][ T9515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.174535][ T9515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.219977][ T9515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.266628][ T9515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.297974][ T9515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.352345][ T9515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.394826][ T9515] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.462324][ T9515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.493686][ T9515] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.534267][ T9515] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.570784][ T9515] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.826916][ T5980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.873557][ T5980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.954174][ T5980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.294315][ T5980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.667797][ T9675] bridge0: port 1(veth1_to_hsr) entered blocking state
[  407.692797][ T9675] bridge0: port 1(veth1_to_hsr) entered disabled state
[  407.722241][ T9675] veth1_to_hsr: entered allmulticast mode
[  407.739898][ T9681] futex_wake_op: syz.0.815 tries to shift op by 64; fix this program
[  407.743455][ T9675] veth1_to_hsr: entered promiscuous mode
[  407.804702][ T9675] bridge0: port 1(veth1_to_hsr) entered blocking state
[  407.812352][ T9675] bridge0: port 1(veth1_to_hsr) entered forwarding state
[  408.069449][ T9687] openvswitch: nl80211: Dropping previously announced user features
[  408.635853][ T9693] ecryptfs_parse_packet_length: Error parsing packet length
[  408.643915][ T9693] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22]
[  408.795550][ T9704] futex_wake_op: syz.3.820 tries to shift op by 64; fix this program
[  409.014665][ T9706] tipc: Started in network mode
[  409.020052][ T9706] tipc: Node identity ee00, cluster identity 4711
[  409.027820][ T9706] tipc: Node number set to 60928
[  409.200363][ T9693] Process accounting resumed
[  409.813731][ T9724] FAULT_INJECTION: forcing a failure.
[  409.813731][ T9724] name fail_futex, interval 1, probability 0, space 0, times 1
[  409.848999][ T9724] CPU: 0 UID: 0 PID: 9724 Comm: syz.4.824 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[  409.860713][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  409.871799][ T9724] Call Trace:
[  409.875415][ T9724]  <TASK>
[  409.878649][ T9724]  dump_stack_lvl+0x16c/0x1f0
[  409.883819][ T9724]  should_fail_ex+0x497/0x5b0
[  409.888987][ T9724]  ? stack_trace_save+0x95/0xd0
[  409.894351][ T9724]  get_futex_key+0x4a3/0x1000
[  409.899529][ T9724]  ? __pfx_get_futex_key+0x10/0x10
[  409.905173][ T9724]  ? kasan_save_stack+0x42/0x60
[  409.910544][ T9724]  ? kasan_save_stack+0x33/0x60
[  409.915908][ T9724]  ? kasan_save_track+0x14/0x30
[  409.921273][ T9724]  ? __kasan_slab_alloc+0x89/0x90
[  409.926822][ T9724]  ? kmem_cache_alloc_noprof+0x1c8/0x3b0
[  409.933036][ T9724]  ? security_file_alloc+0x34/0x2b0
[  409.938776][ T9724]  ? init_file+0x93/0x480
[  409.943562][ T9724]  ? alloc_empty_file+0x91/0x1e0
[  409.949027][ T9724]  futex_wait_setup+0x72/0x290
[  409.954297][ T9724]  __futex_wait+0x267/0x3c0
[  409.959270][ T9724]  ? __pfx___futex_wait+0x10/0x10
[  409.964823][ T9724]  ? __pfx_futex_wake_mark+0x10/0x10
[  409.970663][ T9724]  futex_wait+0xe9/0x380
[  409.975348][ T9724]  ? __pfx_futex_wait+0x10/0x10
[  409.980717][ T9724]  ? lock_acquire.part.0+0x11b/0x380
[  409.986552][ T9724]  ? find_held_lock+0x2d/0x110
[  409.991820][ T9724]  do_futex+0x22b/0x350
[  409.996422][ T9724]  ? __pfx_do_futex+0x10/0x10
[  410.001611][ T9724]  __x64_sys_futex+0x1e1/0x4c0
[  410.006876][ T9724]  ? __sys_socket+0xad/0x260
[  410.011952][ T9724]  ? __pfx___x64_sys_futex+0x10/0x10
[  410.017827][ T9724]  ? rcu_is_watching+0x12/0xc0
[  410.023103][ T9724]  do_syscall_64+0xcd/0x250
[  410.028176][ T9724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.034682][ T9724] RIP: 0033:0x7f71dd985d29
[  410.039549][ T9724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  410.061149][ T9724] RSP: 002b:00007f71de7e10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  410.070479][ T9724] RAX: ffffffffffffffda RBX: 00007f71ddb75fa8 RCX: 00007f71dd985d29
[  410.079279][ T9724] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f71ddb75fa8
[  410.088065][ T9724] RBP: 00007f71ddb75fa0 R08: 0000000000000000 R09: 0000000000000000
[  410.096872][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f71ddb75fac
[  410.105662][ T9724] R13: 0000000000000000 R14: 00007ffef67a4d70 R15: 00007ffef67a4e58
[  410.114467][ T9724]  </TASK>
[  410.805007][ T5831] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  411.618222][ T9736] Invalid ELF header magic: != ELF
[  413.256703][ T9758] netlink: 342 bytes leftover after parsing attributes in process `syz.3.833'.
[  414.707323][ T9772] netlink: 338 bytes leftover after parsing attributes in process `syz.4.837'.
[  418.634645][   T29] audit: type=1326 audit(1737200670.315:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9834 comm="syz.4.855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71dd985d29 code=0x0
[  418.658353][    C0] vkms_vblank_simulate: vblank timer overrun
[  418.718034][ T9840] Process accounting resumed
[  420.965879][ T9855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.857'.
[  423.697527][ T9890] random: crng reseeded on system resumption
[  423.938786][ T9892] Invalid ELF header magic: != ELF
[  425.836305][ T9901] mmap: syz.3.867 (9901): VmData 37728256 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  427.575504][ T9928] netlink: 330 bytes leftover after parsing attributes in process `syz.0.874'.
[  427.673456][ T9928] 
: renamed from gre0 (while UP)
[  428.152693][ T9928] netlink: 330 bytes leftover after parsing attributes in process `syz.0.874'.
[  432.517002][ T9982] openvswitch: netlink: Duplicate key (type 15).
[  434.399187][   T29] audit: type=1800 audit(1737200826.088:10): pid=10003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.888" name="SYSV00000001" dev="hugetlbfs" ino=0 res=0 errno=0
[  438.359619][T10039] sg_write: data in/out 2059/167 bytes for SCSI command 0x57-- guessing data in;
[  438.359619][T10039]    program syz.4.897 not setting count and/or reply_len properly
[  438.671568][T10039] sg_write: data in/out 2059/167 bytes for SCSI command 0x57-- guessing data in;
[  438.671568][T10039]    program syz.4.897 not setting count and/or reply_len properly
[  438.830524][T10039] sg_write: data in/out 2059/167 bytes for SCSI command 0x57-- guessing data in;
[  438.830524][T10039]    program syz.4.897 not setting count and/or reply_len properly
[  439.729972][T10044] kexec: Could not allocate control_code_buffer
[  440.055818][T10054] serio: Serial port ptm1
[  440.408295][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  440.417369][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  443.253293][T10109] ptrace attach of "./syz-executor exec"[6446] was attempted by "./syz-executor exec"[10109]
[  448.379796][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'.
[  454.351343][T10211] openvswitch: netlink: IPv4 tunnel dst address is zero
[  454.914402][   T29] audit: type=1800 audit(4294967316.920:11): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.947" name="discovery_nqn" dev="configfs" ino=25503 res=0 errno=0
[  455.945814][T10243] bridge0: port 4(macsec0) entered blocking state
[  455.953074][T10243] bridge0: port 4(macsec0) entered disabled state
[  455.960505][T10243] macsec0: entered allmulticast mode
[  455.966548][T10243] veth1_macvtap: entered allmulticast mode
[  455.974230][T10243] macsec0: entered promiscuous mode
[  455.980823][T10243] bridge0: port 4(macsec0) entered blocking state
[  455.988027][T10243] bridge0: port 4(macsec0) entered forwarding state
[  457.863296][T10269] FAULT_INJECTION: forcing a failure.
[  457.863296][T10269] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  458.729862][T10269] CPU: 0 UID: 0 PID: 10269 Comm: syz.3.955 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[  458.741653][T10269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  458.752726][T10269] Call Trace:
[  458.756344][T10269]  <TASK>
[  458.759575][T10269]  dump_stack_lvl+0x16c/0x1f0
[  458.764743][T10269]  should_fail_ex+0x497/0x5b0
[  458.769907][T10269]  _copy_from_user+0x2e/0xd0
[  458.774976][T10269]  ppp_ioctl+0x12e9/0x2590
[  458.779864][T10269]  ? __pfx_lock_release+0x10/0x10
[  458.785418][T10269]  ? trace_lock_acquire+0x14e/0x1f0
[  458.791157][T10269]  ? __pfx_ppp_ioctl+0x10/0x10
[  458.796443][T10269]  ? __fget_files+0x206/0x3a0
[  458.801611][T10269]  ? __pfx_ppp_ioctl+0x10/0x10
[  458.806874][T10269]  __x64_sys_ioctl+0x190/0x200
[  458.812144][T10269]  do_syscall_64+0xcd/0x250
[  458.817130][T10269]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.823637][T10269] RIP: 0033:0x7fe606585d29
[  458.828504][T10269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.850085][T10269] RSP: 002b:00007fe6043f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  458.859359][T10269] RAX: ffffffffffffffda RBX: 00007fe606776080 RCX: 00007fe606585d29
[  458.868148][T10269] RDX: 0000000000000000 RSI: 000000004010744d RDI: 0000000000000003
[  458.876939][T10269] RBP: 00007fe6043f6090 R08: 0000000000000000 R09: 0000000000000000
[  458.885736][T10269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.894518][T10269] R13: 0000000000000000 R14: 00007fe606776080 R15: 00007ffd54151ac8
[  458.903318][T10269]  </TASK>
[  459.566959][T10284] can: request_module (can-proto-0) failed.
[  463.311939][T10331] MTRR 1 not used
[  463.532756][ T5842] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  464.003752][T10327] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  464.041076][T10327] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  464.177977][T10327] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  464.224487][T10327] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  464.345135][T10327] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  464.383931][T10327] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  464.445738][T10327] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  464.452294][T10327] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  464.649860][T10327] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  464.671417][T10327] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  464.747441][T10327] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  465.180253][T10345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.974'.
[  465.444273][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  466.008292][T10367] program syz.4.980 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  466.249290][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  466.404342][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  466.484563][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  466.724380][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout
[  467.392326][T10381] netlink: 346 bytes leftover after parsing attributes in process `syz.0.984'.
[  467.527566][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  467.745702][T10381] netlink: 346 bytes leftover after parsing attributes in process `syz.0.984'.
[  467.905052][T10381] netlink: 346 bytes leftover after parsing attributes in process `syz.0.984'.
[  468.024602][T10381] netlink: 346 bytes leftover after parsing attributes in process `syz.0.984'.
[  468.124630][T10381] netlink: 346 bytes leftover after parsing attributes in process `syz.0.984'.
[  468.205510][T10381] netlink: 346 bytes leftover after parsing attributes in process `syz.0.984'.
[  468.325544][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  468.484532][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  468.571581][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  468.804291][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout
[  469.151963][T10409] netlink: set zone limit has 4 unknown bytes
[  469.795509][T10419] sg_read: process 968 (syz.4.992) changed security contexts after opening file descriptor, this is not allowed.
[  470.867218][T10428] futex_wake_op: syz.4.994 tries to shift op by 64; fix this program
[  470.884266][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout
[  472.032003][T10443] svc: failed to register nfsdv3 RPC service (errno 111).
[  472.092809][T10443] svc: failed to register nfsaclv3 RPC service (errno 111).
[  472.718372][T10446] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  475.343255][T10468] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  475.642191][T10481] IPVS: length: 11322 != 8
[  476.124652][T10489] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1009'.
[  477.987773][T10521] delete_channel: no stack
[  479.204845][T10550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1023'.
[  479.728832][T10550] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  481.645593][T10575] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.536870912.4294967293), cmd(3)
[  486.735612][T10635] random: crng reseeded on system resumption
[  486.803746][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1038'.
[  488.451878][T10652] can: request_module (can-proto-5) failed.
[  489.817666][T10670] gspca_gl860.sensor: string doesn't fit in 6 chars.
[  490.047161][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880724f0400: rx timeout, send abort
[  490.556265][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880724f0400: abort rx timeout. Force session deactivation
[  491.151121][T10686] ==================================================================
[  491.160025][T10686] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0
[  491.168542][T10686] Read of size 8 at addr ffff8881436e1218 by task syz.0.1051/10686
[  491.177224][T10686] 
[  491.179781][T10686] CPU: 0 UID: 0 PID: 10686 Comm: syz.0.1051 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[  491.191624][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  491.202693][T10686] Call Trace:
[  491.206303][T10686]  <TASK>
[  491.209533][T10686]  dump_stack_lvl+0x116/0x1f0
[  491.214731][T10686]  print_report+0xc3/0x620
[  491.219610][T10686]  ? __virt_addr_valid+0x5e/0x590
[  491.225152][T10686]  ? __phys_addr+0xc6/0x150
[  491.230129][T10686]  kasan_report+0xd9/0x110
[  491.235005][T10686]  ? dvb_device_open+0x36a/0x3b0
[  491.240450][T10686]  ? dvb_device_open+0x36a/0x3b0
[  491.245898][T10686]  ? __pfx_dvb_device_open+0x10/0x10
[  491.251723][T10686]  dvb_device_open+0x36a/0x3b0
[  491.256973][T10686]  ? __pfx_dvb_device_open+0x10/0x10
[  491.262902][T10686]  chrdev_open+0x237/0x6a0
[  491.267776][T10686]  ? __pfx_apparmor_file_open+0x10/0x10
[  491.273890][T10686]  ? __pfx_chrdev_open+0x10/0x10
[  491.279341][T10686]  do_dentry_open+0xf59/0x1ea0
[  491.284602][T10686]  ? __pfx_chrdev_open+0x10/0x10
[  491.290053][T10686]  ? inode_permission+0xdd/0x5f0
[  491.295521][T10686]  vfs_open+0x82/0x3f0
[  491.300014][T10686]  ? may_open+0x1f2/0x400
[  491.304783][T10686]  path_openat+0x1e6a/0x2d60
[  491.309850][T10686]  ? __pfx_path_openat+0x10/0x10
[  491.315297][T10686]  ? __pfx___lock_acquire+0x10/0x10
[  491.321020][T10686]  ? lock_acquire.part.0+0x11b/0x380
[  491.326838][T10686]  ? find_held_lock+0x2d/0x110
[  491.332095][T10686]  do_filp_open+0x20c/0x470
[  491.337080][T10686]  ? __pfx_do_filp_open+0x10/0x10
[  491.342636][T10686]  ? find_held_lock+0x2d/0x110
[  491.347911][T10686]  ? alloc_fd+0x41f/0x760
[  491.352696][T10686]  do_sys_openat2+0x17a/0x1e0
[  491.357869][T10686]  ? __pfx_do_sys_openat2+0x10/0x10
[  491.363615][T10686]  __x64_sys_openat+0x175/0x210
[  491.368982][T10686]  ? __pfx___x64_sys_openat+0x10/0x10
[  491.374919][T10686]  do_syscall_64+0xcd/0x250
[  491.379887][T10686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.386385][T10686] RIP: 0033:0x7f1d21585d29
[  491.391240][T10686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  491.412820][T10686] RSP: 002b:00007f1d2236e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  491.422084][T10686] RAX: ffffffffffffffda RBX: 00007f1d21775fa0 RCX: 00007f1d21585d29
[  491.430862][T10686] RDX: 0000000000000080 RSI: 00000000200000c0 RDI: ffffffffffffff9c
[  491.439646][T10686] RBP: 00007f1d21601b08 R08: 0000000000000000 R09: 0000000000000000
[  491.448424][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  491.457195][T10686] R13: 0000000000000000 R14: 00007f1d21775fa0 R15: 00007ffc52ef1138
[  491.465975][T10686]  </TASK>
[  491.469303][T10686] 
[  491.471852][T10686] Allocated by task 10223:
[  491.476701][T10686]  kasan_save_stack+0x33/0x60
[  491.481857][T10686]  kasan_save_track+0x14/0x30
[  491.487005][T10686]  __kasan_kmalloc+0xaa/0xb0
[  491.492059][T10686]  sample_init_net+0x56/0x270
[  491.497205][T10686]  ops_init+0x1df/0x5f0
[  491.501791][T10686]  setup_net+0x21f/0x860
[  491.506470][T10686]  copy_net_ns+0x2b4/0x6c0
[  491.511328][T10686]  create_new_namespaces+0x3ea/0xad0
[  491.517143][T10686]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  491.523344][T10686]  ksys_unshare+0x45d/0xa40
[  491.528307][T10686]  __x64_sys_unshare+0x31/0x40
[  491.533553][T10686]  do_syscall_64+0xcd/0x250
[  491.538515][T10686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.545005][T10686] 
[  491.547555][T10686] Freed by task 10223:
[  491.552022][T10686]  kasan_save_stack+0x33/0x60
[  491.557175][T10686]  kasan_save_track+0x14/0x30
[  491.562326][T10686]  kasan_save_free_info+0x3b/0x60
[  491.567856][T10686]  __kasan_slab_free+0x51/0x70
[  491.573102][T10686]  kfree+0x14f/0x4b0
[  491.577395][T10686]  sample_exit_net+0xaf/0x130
[  491.582544][T10686]  ops_exit_list+0x128/0x180
[  491.587605][T10686]  setup_net+0x4fe/0x860
[  491.592281][T10686]  copy_net_ns+0x2b4/0x6c0
[  491.597139][T10686]  create_new_namespaces+0x3ea/0xad0
[  491.602960][T10686]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  491.609160][T10686]  ksys_unshare+0x45d/0xa40
[  491.614156][T10686]  __x64_sys_unshare+0x31/0x40
[  491.619404][T10686]  do_syscall_64+0xcd/0x250
[  491.624369][T10686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.630866][T10686] 
[  491.633416][T10686] The buggy address belongs to the object at ffff8881436e1200
[  491.633416][T10686]  which belongs to the cache kmalloc-256 of size 256
[  491.648871][T10686] The buggy address is located 24 bytes inside of
[  491.648871][T10686]  freed 256-byte region [ffff8881436e1200, ffff8881436e1300)
[  491.663952][T10686] 
[  491.666502][T10686] The buggy address belongs to the physical page:
[  491.673556][T10686] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881436e1200 pfn:0x1436e0
[  491.684726][T10686] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  491.694075][T10686] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  491.703519][T10686] page_type: f5(slab)
[  491.707902][T10686] raw: 057ff00000000240 ffff88801ac41b40 ffffea000511ac10 ffffea000530d410
[  491.717348][T10686] raw: ffff8881436e1200 000000000010000f 00000001f5000000 0000000000000000
[  491.726805][T10686] head: 057ff00000000240 ffff88801ac41b40 ffffea000511ac10 ffffea000530d410
[  491.736358][T10686] head: ffff8881436e1200 000000000010000f 00000001f5000000 0000000000000000
[  491.745901][T10686] head: 057ff00000000001 ffffea00050db801 ffffffffffffffff 0000000000000000
[  491.755443][T10686] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000
[  491.764975][T10686] page dumped because: kasan: bad access detected
[  491.772030][T10686] page_owner tracks the page as allocated
[  491.778310][T10686] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14580731355, free_ts 0
[  491.800008][T10686]  post_alloc_hook+0x2d1/0x350
[  491.805279][T10686]  get_page_from_freelist+0xfce/0x2f80
[  491.811306][T10686]  __alloc_pages_noprof+0x223/0x25b0
[  491.817134][T10686]  alloc_pages_mpol_noprof+0x2c8/0x620
[  491.823151][T10686]  new_slab+0x2c9/0x410
[  491.827740][T10686]  ___slab_alloc+0xce2/0x1650
[  491.832908][T10686]  __slab_alloc.constprop.0+0x56/0xb0
[  491.838833][T10686]  __kmalloc_cache_noprof+0xf6/0x420
[  491.844662][T10686]  bus_add_driver+0x92/0x690
[  491.849721][T10686]  driver_register+0x15c/0x4b0
[  491.854974][T10686]  i2c_register_driver+0xd9/0x1c0
[  491.860516][T10686]  do_one_initcall+0x128/0x630
[  491.865765][T10686]  kernel_init_freeable+0x58f/0x8b0
[  491.871496][T10686]  kernel_init+0x1c/0x2b0
[  491.876276][T10686]  ret_from_fork+0x45/0x80
[  491.881137][T10686]  ret_from_fork_asm+0x1a/0x30
[  491.886393][T10686] page_owner free stack trace missing
[  491.892290][T10686] 
[  491.894855][T10686] Memory state around the buggy address:
[  491.901043][T10686]  ffff8881436e1100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  491.909927][T10686]  ffff8881436e1180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  491.918806][T10686] >ffff8881436e1200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  491.927676][T10686]                             ^
[  491.933012][T10686]  ffff8881436e1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  491.941887][T10686]  ffff8881436e1300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  491.950749][T10686] ==================================================================
[  492.093102][T10695] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1052'.
[  492.396350][T10686] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  492.404304][T10686] CPU: 0 UID: 0 PID: 10686 Comm: syz.0.1051 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[  492.416153][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  492.427217][T10686] Call Trace:
[  492.430824][T10686]  <TASK>
[  492.434048][T10686]  dump_stack_lvl+0x3d/0x1f0
[  492.439113][T10686]  panic+0x71d/0x800
[  492.443426][T10686]  ? __pfx_panic+0x10/0x10
[  492.448298][T10686]  ? irqentry_exit+0x3b/0x90
[  492.453356][T10686]  ? lockdep_hardirqs_on+0x7c/0x110
[  492.459086][T10686]  ? preempt_schedule_thunk+0x1a/0x30
[  492.465011][T10686]  ? preempt_schedule_common+0x44/0xc0
[  492.471030][T10686]  check_panic_on_warn+0xab/0xb0
[  492.476474][T10686]  end_report+0x117/0x180
[  492.481246][T10686]  kasan_report+0xe9/0x110
[  492.486119][T10686]  ? dvb_device_open+0x36a/0x3b0
[  492.491565][T10686]  ? dvb_device_open+0x36a/0x3b0
[  492.497008][T10686]  ? __pfx_dvb_device_open+0x10/0x10
[  492.502830][T10686]  dvb_device_open+0x36a/0x3b0
[  492.508080][T10686]  ? __pfx_dvb_device_open+0x10/0x10
[  492.513922][T10686]  chrdev_open+0x237/0x6a0
[  492.518807][T10686]  ? __pfx_apparmor_file_open+0x10/0x10
[  492.524923][T10686]  ? __pfx_chrdev_open+0x10/0x10
[  492.530382][T10686]  do_dentry_open+0xf59/0x1ea0
[  492.535642][T10686]  ? __pfx_chrdev_open+0x10/0x10
[  492.541085][T10686]  ? inode_permission+0xdd/0x5f0
[  492.546538][T10686]  vfs_open+0x82/0x3f0
[  492.551032][T10686]  ? may_open+0x1f2/0x400
[  492.555798][T10686]  path_openat+0x1e6a/0x2d60
[  492.560864][T10686]  ? __pfx_path_openat+0x10/0x10
[  492.566308][T10686]  ? __pfx___lock_acquire+0x10/0x10
[  492.572028][T10686]  ? lock_acquire.part.0+0x11b/0x380
[  492.577843][T10686]  ? find_held_lock+0x2d/0x110
[  492.583117][T10686]  do_filp_open+0x20c/0x470
[  492.588088][T10686]  ? __pfx_do_filp_open+0x10/0x10
[  492.593629][T10686]  ? find_held_lock+0x2d/0x110
[  492.598990][T10686]  ? alloc_fd+0x41f/0x760
[  492.603765][T10686]  do_sys_openat2+0x17a/0x1e0
[  492.608926][T10686]  ? __pfx_do_sys_openat2+0x10/0x10
[  492.614667][T10686]  __x64_sys_openat+0x175/0x210
[  492.620016][T10686]  ? __pfx___x64_sys_openat+0x10/0x10
[  492.625947][T10686]  do_syscall_64+0xcd/0x250
[  492.630917][T10686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.637416][T10686] RIP: 0033:0x7f1d21585d29
[  492.642273][T10686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  492.663852][T10686] RSP: 002b:00007f1d2236e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  492.673113][T10686] RAX: ffffffffffffffda RBX: 00007f1d21775fa0 RCX: 00007f1d21585d29
[  492.681884][T10686] RDX: 0000000000000080 RSI: 00000000200000c0 RDI: ffffffffffffff9c
[  492.690653][T10686] RBP: 00007f1d21601b08 R08: 0000000000000000 R09: 0000000000000000
[  492.699432][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  492.708205][T10686] R13: 0000000000000000 R14: 00007f1d21775fa0 R15: 00007ffc52ef1138
[  492.716985][T10686]  </TASK>
[  492.720550][T10686] Kernel Offset: disabled
[  492.725296][T10686] Rebooting in 86400 seconds..