last executing test programs: 2m50.596747294s ago: executing program 1 (id=740): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon12\x00', 0x0, 0x0) socket(0xa, 0x802, 0x3a) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) r0 = socket(0x25, 0x1, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(r0, &(0x7f0000000040)=@generic={0x25, "835aabaf5dc454e38226799f73aa"}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x20b82, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x20044090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 2m50.132824974s ago: executing program 1 (id=741): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) getrandom$auto(&(0x7f0000000380)='\x00', 0x7, 0x2) (async) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x8040, 0xc9, 0xa}, 0x18) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) (async) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) (async) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0x3, 0x66, 0x0, 0x0, 0x0, 0x1000000008, 0xfffffffffffffffe, 0x7ffffffffffffffd, 0x5, 0x7ffffffd, 0x6, 0x8, 0x7, 0x61, 0x40000103}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x40000, 0x0) pread64$auto(r3, &(0x7f0000000040)='/dev/tty0\x00', 0x3, 0x7) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a4080000", @ANYRES16=r1, @ANYBLOB="08002cbd7000ffdbdf25650000000800cb00000000000800c4009cf1ffff80000600c4ed19d154647c0a5266361fca901146096053706912f2ad4348178ac92b4807607dcbe77f411a82b8bbffedcb21b0133d851460b8596faaf80e19ea62d374021064b891b8b8ba60f559ef908bb106b9316c46bd933b587ab4532af66f2805cd7eaf46c13b53fc1a3effef27350008c74739e9eefb66ccd43e6b6ae3"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c001}, 0x1) (async) r4 = socket(0x11, 0x2, 0x40000f) r5 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000c40), r4) (async) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r6, &(0x7f0000000080)=""/27, 0x1b) (async) sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbde25020000000c0003000104000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'veth1_macvtap\x00', 0x0}) sendmsg$auto_ILA_CMD_FLUSH(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0456d8441000"/18, @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) capset$auto(0x0, &(0x7f0000000000)={0xfffffffe, 0x41, 0x4a}) (async) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio1/power/wakeup\x00', 0xa142, 0x0) sendfile$auto(r8, r8, 0x0, 0x1000010000001fd) (async) sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x2e, 0x0, 0x7, 0x1083}, 0x5}, 0x2, 0x100) (async) execve$auto(&(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000280)='@]^(\xc6\xa2~*#\\\x00(\f\x835\xadK\x98\x8dsU\x03\x00\'\xbb\x87\xfb\xabr\x80\n', &(0x7f0000000340)=&(0x7f0000000440)='\x00\xb9L\x04\x8e\x91\xba\xb5\x81\x93\xf3\xf5\xe9\x90z4\x9a\"\xe2t\xde\xf409lW\xfd-U\xdb\xba\xbc8\xb3 \xce\x7f\xd0\x06\x00\x00\x00\x00\xfch=\xe6\xfa/oGT\xdeY\xa54|\xa5\x95/\"l\x98\x89\xdf\x00\x7fV)\xe7\xb5Au\xb4\x9d_\x12\x98(?l\xb9\x15\x1d\xc6\xe9?\xfd\fzJ\xe0\xdf(8\x83\xb3\xae\xc4)c\x9aQ\xad+\vV\x9fN}_\xb9M\xd6\x94\xcd\xdf\xd0J\xc2\xe9\x17\x83*\x81\xcc\'Z)\xd2\xf8\x03\xb7\xc9\xdcW~&y\xd9\x7fY\xf0:m\v\xd3\xe3\x8f\x1b\xeaf\x17\xc9\xfc}\xea\xe5\xe8XWm\xac//\'{\xe7~I\xb9;]\x94\x1d\xa2\x9f\x146\xdbzn\vu\xf8\xad') 2m49.069025508s ago: executing program 1 (id=744): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) landlock_restrict_self$auto(r1, 0x1) (async) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/dev_snmp6/team_slave_1\x00', 0x86fb16d8bb90233e, 0x0) syslog$auto(0x2, &(0x7f0000000040)='/proc/self/net/dev_snmp6/team_slave_1\x00', 0x400) pread64$auto(r2, 0x0, 0x8100000041, 0x413e) (async) r3 = gettid() (async) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_ifindex, 0x11, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0x400000000001}, 0x7) (async) r4 = getpid() rt_tgsigqueueinfo$auto(r4, r3, 0x21, 0x0) 2m47.80279075s ago: executing program 1 (id=746): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)=""/65, 0x41) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x200000002000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) madvise$auto(0x0, 0x200007, 0x19) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 2m43.827800542s ago: executing program 3 (id=758): adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000211e789c0000000a00ffff0000000014002000ff01faffffff00000000000000000000060002000100"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r3, 0x0, 0xffff, 0x830) write$auto(r2, 0x0, 0x100) read$auto(0x3, 0x0, 0x80) unshare$auto(0x40000080) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYBLOB="080001002e53520008000200299604044fd4a51b3fe6069c9828ee7b3a5e16ba6775e89c1262b0563d7c891b267fcf6ddb51c53725c0c3f6a943674a41ccec006a142932a4d7289ac6f2c824c09ff3119ea2cfc72b15d43e993d3c327652f1a5427b014be7d9c98d988e59c0c0918d4e09077ad2be00371f57ba208c7301a71c72390bc3c511734141cb81bcc13a2df82cd95bd7", @ANYRES32=0x9, @ANYBLOB="0800070004"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0xc0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m42.870417514s ago: executing program 1 (id=759): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x81, 0xfffff0b6, 0x45, 0x101, 0xac1, 0x2, 0xcf, 0x6, 0x3bb, 0xba95, 0xffff, 0xa1f, 0x81, 0x68198}, 0x6f3) (async) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram0/queue/nomerges\x00', 0xe3102, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) signalfd4$auto(r0, &(0x7f0000000000)={0x400}, 0x7, 0x5) open(0x0, 0x22040, 0x75) (async) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m42.590704932s ago: executing program 1 (id=760): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x50) r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x688a00, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x48041, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x5}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0xc}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590820806"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x10000, 0xffffffffffffd2e4, 0x8, 0x6, 0x6da, 0x1, 0x1, 0x6, 0x8, 0x4, 0x2, 0x80, 0x3, 0x200000000008, 0xdd2, 0x5, 0xe91, 0x6, 0x81, 0x0, 0x401}, 0x7fff, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800021d00020000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x88) socket(0x2, 0x6, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) ioctl$auto(0x1, 0x890b, 0x8) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000080)="5a7859fb32024682", 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="8b2e59d76f7716400068e1132ed5", 0x2}, 0x65b, &(0x7f0000000280)="2cc0441f6148e5441dace1a27794b512e6ad00ef30694244f75e3c7ca0cb92e8a3f3c4620fa9b02ddd261fb5240d62c0347fdb4f4bf1f516feb6f040f95ff089ac83766bb4faf5f79ff2a18c12ae52f80992c9b9a41dd3895528ca161864e3f272cc54accc66a47390434ea616cfdc498dc17e6a74d41032c0dd34dfd7e75b79392739cddf6dafa5d109a874ff826387eaab306fad892938240cdfc97b5243a020a250303049ab7fee50de3670d571be60c9493483d5d7466f47afbdc1d829eccaa0c0ce912efb", 0x3ff, 0x9}, 0x2b}, 0x10001, 0x1) 2m42.359215959s ago: executing program 3 (id=761): ioperm$auto(0x5, 0x9, 0x3ffffffc) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x3, 0x8, 0x8, 0x17, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x0, 0x3, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r0, 0x10f, 0x1000, 0x0, 0x10) socket(0x10, 0x3, 0x6) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x2) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYRES16=r1, @ANYRESOCT, @ANYBLOB="fc959fc988"], 0x38}, 0x1, 0x0, 0x0, 0x2c050811}, 0x10) ioperm$auto(0x4, 0x2, 0x9) mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801) chmod$auto(&(0x7f0000000040)='./file0\x00', 0x10fe) 2m41.286451971s ago: executing program 3 (id=764): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101900, 0x0) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x4, 0xeb5, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x6, 0x3) r1 = socket(0x11, 0x80003, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_ECHOREQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="7f0025bd7000ffdbdf2503000000080001000400000008000200cd0d0000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) socket(0xa, 0x1, 0x0) ioctl$auto(0x3, 0x894b, 0x38) semget$auto(0x0, 0x13c, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@SMC_PNETID_ETHNAME={0xc, 0x2, '+o*#\x90\x80\x8b\x00'}, @SMC_PNETID_NAME={0xb, 0x1, 'netdev\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0) semctl$auto(0x0, 0x9, 0x0, 0x2) munmap$auto(0x2, 0x1a525c0f) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0x8004) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x2, 0x0) epoll_create$auto(0x4) fcntl$auto(0x3, 0x4, 0xa553) 2m40.905004101s ago: executing program 3 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x42201, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x142, 0x0) (async) r2 = io_uring_setup$auto(0x9, 0x0) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x2}, 0x7) (async) ioctl$auto_TIOCSWINSZ2(r1, 0x5414, &(0x7f0000000100)="2404dab99eca132e64612a07bf3566927735d05e4fc8ffaa7a5f52488010747894e7fc6f89f7e31a61cc") (async) close_range$auto(0x2, 0xa, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) (async) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fremovexattr$auto(r4, &(0x7f00000001c0)='/proc/tty/driver/serial\x00') (async) r5 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000040), r2) (async) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000140)=0x200) (async) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_POST(r6, 0x5008, 0x0) (async) sendmsg$auto_NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x44, r5, 0x2, 0x2, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x40}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xa}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x1caa}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x539ca6c852742868}, 0x854) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) r7 = socket(0x10, 0x2, 0xf) (async) close_range$auto(0x0, 0xffffeffe, 0x2) (async) pipe$auto(0x0) socket(0xa, 0x3, 0xff) (async) pipe$auto(0x0) (async) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r7, 0xffffffff}, 0xd) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xc) (async) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x1, 0x400008, 0x7f, 0xffffffff, 0x80000}, "0dd7fd00490000080000000008f75b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 2m40.467151943s ago: executing program 3 (id=768): mmap$auto(0x0, 0x4, 0x4000000000de, 0x40eb1, 0x401, 0x300000000000) socket(0x2, 0x3, 0xa) r0 = socketpair$auto(0x1, 0x55, 0x4, 0x0) pipe$auto(0x0) setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000) mmap$auto(0x0, 0x20009, 0x4000000000dd, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x3, 0x5, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000)={0x43, 0x7, 0x9, 0xabe, 0x4, 0xc, "0924ca419dc4d8e4e1226f5fb4d8c264fe2de51f1c10b355c2333c335b0c767b2f4fcc6608d94bdba4a45745e84fbc35d2758e98981cb0abe163c77fa96bb62a"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = getpid() prctl$auto(0x4, 0x6, r3, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) prctl$auto(0x26, 0x7, 0x0, 0x0, 0x5) mlock$auto(0x81, 0x4) bind$auto(0x3, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x6d) write$auto_console_fops_tty_io(r0, &(0x7f0000000240)="facb3d2a63dde8156f939cbdf3911a6a59d802acd1fd24560615e1b1367ae1e7f3d72400b7329e00e8af382a72dce15cfc2661e9d76c7df4195dbca7efe11369aeaf664e2a5021dd81d153c01136427a50263b79c98bf0c8acacba998bf6323de6ba9f4adb2f7d57ac3a832e4e58e6f980e170a00a07892cbd03ca15881f9749ba801f071c1672595230fc6aae7e30bd2f947a4abb50eaf3111c7094ad5e38f518fcf596453469d4feb2925a02386334ab87562999121044b67d237f5f3f3e1a534fe0cc77062018a735", 0xca) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram3/trace/end_lba\x00', 0x2062, 0x0) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) connect$auto(0x3, &(0x7f00000000c0)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x55) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) r5 = socket(0x2, 0x5, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000200)={r5, &(0x7f0000000100)="558dcd8d619d", 0x1, &(0x7f0000000140)="364ae9db900896851d2bf128ab1a2d4bb82660d19ae691ef2600d0a45ccd495e015450201c3b6b03658f4c10596890185c03e959e89e8982a2", 0x1, &(0x7f0000000340)="a69b0aacab1422ab3d61925f333379da106a8f14f5da30e1590d80dc65481cd977991faef855195e843efc66bb7df3928b6a808dee995f2a2e200559f6ab4a", &(0x7f00000001c0)=0x9}) 2m40.271454613s ago: executing program 3 (id=769): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x50) r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x688a00, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x48041, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x5}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0xc}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590820806"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x10000, 0xffffffffffffd2e4, 0x8, 0x6, 0x6da, 0x1, 0x1, 0x6, 0x8, 0x4, 0x2, 0x80, 0x3, 0x200000000008, 0xdd2, 0x5, 0xe91, 0x6, 0x81, 0x0, 0x401}, 0x7fff, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800021d00020000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x88) socket(0x2, 0x6, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) ioctl$auto(0x1, 0x890b, 0x8) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000080)="5a7859fb32024682", 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="8b2e59d76f7716400068e1132ed5", 0x2}, 0x65b, &(0x7f0000000280)="2cc0441f6148e5441dace1a27794b512e6ad00ef30694244f75e3c7ca0cb92e8a3f3c4620fa9b02ddd261fb5240d62c0347fdb4f4bf1f516feb6f040f95ff089ac83766bb4faf5f79ff2a18c12ae52f80992c9b9a41dd3895528ca161864e3f272cc54accc66a47390434ea616cfdc498dc17e6a74d41032c0dd34dfd7e75b79392739cddf6dafa5d109a874ff826387eaab306fad892938240cdfc97b5243a020a250303049ab7fee50de3670d571be60c9493483d5d7466f47afbdc1d829eccaa0c0ce912efb", 0x3ff, 0x9}, 0x2b}, 0x10001, 0x1) 2m37.489875086s ago: executing program 0 (id=772): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) socket(0xa, 0x1, 0x100) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r1}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = syz_genetlink_get_family_id$auto_psample(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x801) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x5, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x7, 0x2, 0x6]}, 0x0) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004240)=ANY=[@ANYBLOB="c4260000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x26c4}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc850}, 0x8800) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x10, 0x7) listen$auto(0x3, 0x8d) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0xf7d, 0x4, 0x1}) 2m36.521878057s ago: executing program 0 (id=773): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x2, 0x1, 0x106) r0 = getsockopt$auto(0xffffffffffffffff, 0x110, 0x9, 0xffffffffffffffff, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x1e, 0x805, 0x0) sysfs$auto(0x2, 0x1a, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x3, &(0x7f0000000000)='4\x93f\x06\x04\x00\x00', &(0x7f0000000040), 0x7f) r2 = socket(0x1d, 0x2, 0x6) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x44080) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fff) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, "3d9edbcae59962e1f32288e406bf3fe188db494145070e006870880e6e53ecf5b8b526f1212e9f345498c7fbbeba"}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x7}]}, 0x50}}, 0x40845) sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_AUTH_DATA={0xb7, 0x9c, "ee0c0b6cac17ff712fa7326ba1fc3f08fa429dee13e6c6b9c90ecf5501104df2f2047755764542fc4bdcb84d1ec649badef6e4a43af4ba1737e5b37f6d0325754306f86143127049235e4539bc25c5278131e957e790ff21738e91c54c51f1c6c4f5eb6ff6cdc146da9df2730e7a2556ca50c12b25d2d333ccf57f70828559bdbed6bd81f500fac627b219f5906c0c2b32e00658ef7e8f926a8a39ebc02c35b14e212f0f7b9fb6162974c25fb19fe1390f6754"}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x7}]}, 0xd4}}, 0x4011) 2m36.34037011s ago: executing program 0 (id=774): r0 = socket(0x2, 0x80002, 0x73) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b788a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x9, 0x7, 0x7, 0x6}, 0x10) (async) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) socket(0xa, 0x2, 0x0) (async) setsockopt$auto(0x400000000000003, 0x29, 0x3a, 0x0, 0x1000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) (async) lseek$auto(0x3, 0x20000, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x18, 0x5, 0x0) socket(0xa, 0x2, 0x73) (async) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r1) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, "b6d1adf6be165a7d3d9f7c810a23cd7d5120e008b1d7ac3018d1068d21d7464962a1a4d02920a69a9ff1c3b2349eac01d0c5deed02422af4c367bb1db20db6cd83837b1c6cfda7935560daba2f74e141cfbce4b211174c1cbb3b4269d1bb394fa9992bb7107c4552d551877d38cead810c2538239cc039327f618d6234e7014aae9df7694490b9f066aac79a31f45abc2f0530033e3e10bff36cec62c11a88c4a76f7ec303f453560df950b9aff896"}, 0xc4}, 0x1, 0x0, 0x0, 0x40850}, 0x488d0) (async) socket(0x2, 0x80002, 0x73) (async) bind$auto(0x3, &(0x7f0000000080), 0x6b) 2m36.226905292s ago: executing program 0 (id=775): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xf2, 0x0, 0x1f, 0x9}, 0x800009}, 0x3, 0x20000000) sendto$auto(0x3, 0x0, 0xe7, 0xfd, 0x0, 0x403) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r1 = bpf$auto(0x0, 0x0, 0x6f3) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x82842, 0x85) read$auto(r2, 0x0, 0x1) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r1, 0x4004550d, &(0x7f0000000080)=0x7fffffff) write$auto(r3, 0x0, 0x6) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x9eff, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="14004cc605f41d94d2be5108c99fc4ce0000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000014}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m36.067203515s ago: executing program 0 (id=776): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x20, 0xf1, 0xb0, @raw=0xfffff030}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f41) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x9, 0x800000000df, 0x9b72, 0xea8a, 0x8000) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x80) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x8, 0x0, 0x0, 0x440a48d3) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid_for_children\x00') write$auto(0x3, 0x0, 0x7fffffff) 2m35.799625361s ago: executing program 0 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000280)=ANY=[@ANYBLOB="e8a4002e736ea48d256825a65293d77c068f3d64ce39ad00000000200000000000000000000065e42a1a51d17ff267b0c0c8a964bb0c82e6cf3e6bea52bd4c40fca839d7bdda4eb320936fd4b1eba8f44201b446d08dd69a65471237985b63e0a6351003004686ff1a2276a54a0f0d3e02dd8775915b", @ANYRES16=r2, @ANYBLOB="010028bd7000ffad5a5a7cdadbdf35060000006ae97548edd9f4bb111ad532ce023e589a0b693dcd80189476271161514b76"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$auto_NFSD_CMD_THREADS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) r4 = fspick$auto(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffff00) mmap$auto(0xfffffffffffffff8, 0x9, 0x7, 0x16, r4, 0x4000000000000004) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r3, 0x4000807c) r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r5, &(0x7f0000000180)="b953e6ca6360e45b4fd8ecccc52782d28ddb740407f4571929f3c0f5962cf000e2d2cac4c602", 0x26) r6 = socketpair$auto(0x1, 0x9, 0x8000000000000000, 0x0) r7 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r7, 0x107, 0x5, 0x0, 0x8004) mmap$auto(0x0, 0x2, 0x10, 0x40eb1, 0x602, 0x20300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) r9 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0) setreuid$auto(0x8, 0x9d7) write$auto_proc_reg_file_ops_compat_inode(r10, 0x0, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(r6, 0x40085874, &(0x7f0000000100)={r7}) splice$auto(r9, &(0x7f0000000080)=0xb, r11, &(0x7f0000000140)=0x9, 0x9, 0xcd) sendfile$auto(r6, r8, 0x0, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0\x00', 0x468300, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty39\x00', 0x32bf40, 0x0) write$auto(0x3, 0x0, 0x7ffffffa) 2m28.929908537s ago: executing program 32 (id=753): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) mmap$auto(0x0, 0x20006, 0xe2, 0xeb1, 0x405, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x100000000000037, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000080)={0x38, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}, @NFSD_A_SOCK_ADDR={0x14, 0x1, "df9b201bba5d82e832454bc5b9c949fd"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 2m27.403005792s ago: executing program 33 (id=760): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x50) r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x688a00, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x48041, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x5}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0xc}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590820806"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x10000, 0xffffffffffffd2e4, 0x8, 0x6, 0x6da, 0x1, 0x1, 0x6, 0x8, 0x4, 0x2, 0x80, 0x3, 0x200000000008, 0xdd2, 0x5, 0xe91, 0x6, 0x81, 0x0, 0x401}, 0x7fff, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800021d00020000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x88) socket(0x2, 0x6, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) ioctl$auto(0x1, 0x890b, 0x8) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000080)="5a7859fb32024682", 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="8b2e59d76f7716400068e1132ed5", 0x2}, 0x65b, &(0x7f0000000280)="2cc0441f6148e5441dace1a27794b512e6ad00ef30694244f75e3c7ca0cb92e8a3f3c4620fa9b02ddd261fb5240d62c0347fdb4f4bf1f516feb6f040f95ff089ac83766bb4faf5f79ff2a18c12ae52f80992c9b9a41dd3895528ca161864e3f272cc54accc66a47390434ea616cfdc498dc17e6a74d41032c0dd34dfd7e75b79392739cddf6dafa5d109a874ff826387eaab306fad892938240cdfc97b5243a020a250303049ab7fee50de3670d571be60c9493483d5d7466f47afbdc1d829eccaa0c0ce912efb", 0x3ff, 0x9}, 0x2b}, 0x10001, 0x1) 2m24.948447458s ago: executing program 34 (id=769): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x50) r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x688a00, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x48041, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x5}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0xc}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590820806"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x10000, 0xffffffffffffd2e4, 0x8, 0x6, 0x6da, 0x1, 0x1, 0x6, 0x8, 0x4, 0x2, 0x80, 0x3, 0x200000000008, 0xdd2, 0x5, 0xe91, 0x6, 0x81, 0x0, 0x401}, 0x7fff, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800021d00020000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x88) socket(0x2, 0x6, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) ioctl$auto(0x1, 0x890b, 0x8) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000080)="5a7859fb32024682", 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="8b2e59d76f7716400068e1132ed5", 0x2}, 0x65b, &(0x7f0000000280)="2cc0441f6148e5441dace1a27794b512e6ad00ef30694244f75e3c7ca0cb92e8a3f3c4620fa9b02ddd261fb5240d62c0347fdb4f4bf1f516feb6f040f95ff089ac83766bb4faf5f79ff2a18c12ae52f80992c9b9a41dd3895528ca161864e3f272cc54accc66a47390434ea616cfdc498dc17e6a74d41032c0dd34dfd7e75b79392739cddf6dafa5d109a874ff826387eaab306fad892938240cdfc97b5243a020a250303049ab7fee50de3670d571be60c9493483d5d7466f47afbdc1d829eccaa0c0ce912efb", 0x3ff, 0x9}, 0x2b}, 0x10001, 0x1) 2m20.694232321s ago: executing program 35 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000280)=ANY=[@ANYBLOB="e8a4002e736ea48d256825a65293d77c068f3d64ce39ad00000000200000000000000000000065e42a1a51d17ff267b0c0c8a964bb0c82e6cf3e6bea52bd4c40fca839d7bdda4eb320936fd4b1eba8f44201b446d08dd69a65471237985b63e0a6351003004686ff1a2276a54a0f0d3e02dd8775915b", @ANYRES16=r2, @ANYBLOB="010028bd7000ffad5a5a7cdadbdf35060000006ae97548edd9f4bb111ad532ce023e589a0b693dcd80189476271161514b76"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$auto_NFSD_CMD_THREADS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) r4 = fspick$auto(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffff00) mmap$auto(0xfffffffffffffff8, 0x9, 0x7, 0x16, r4, 0x4000000000000004) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r3, 0x4000807c) r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r5, &(0x7f0000000180)="b953e6ca6360e45b4fd8ecccc52782d28ddb740407f4571929f3c0f5962cf000e2d2cac4c602", 0x26) r6 = socketpair$auto(0x1, 0x9, 0x8000000000000000, 0x0) r7 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r7, 0x107, 0x5, 0x0, 0x8004) mmap$auto(0x0, 0x2, 0x10, 0x40eb1, 0x602, 0x20300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) r9 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0) setreuid$auto(0x8, 0x9d7) write$auto_proc_reg_file_ops_compat_inode(r10, 0x0, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(r6, 0x40085874, &(0x7f0000000100)={r7}) splice$auto(r9, &(0x7f0000000080)=0xb, r11, &(0x7f0000000140)=0x9, 0x9, 0xcd) sendfile$auto(r6, r8, 0x0, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0\x00', 0x468300, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty39\x00', 0x32bf40, 0x0) write$auto(0x3, 0x0, 0x7ffffffa) 2m18.677565135s ago: executing program 5 (id=791): close_range$auto(0x2, 0x8, 0x2) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa1\x00', 0x20042, 0x0) r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x8400, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000ff, 0xa, 0x80, 0xaab, 0x5, 0x7]}, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) gettid() r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = clone$auto(0xfffffffffffffffe, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) ioperm$auto(0xc5, 0x3, 0xc115) socket(0x1d, 0x3, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$auto(r3, 0x0, 0x4, r0, r2) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) wait4$auto(0x0, 0x0, 0x2, 0x0) prctl$auto(0x21, 0xfffb, 0x0, 0x70cf, 0x5712) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto_SO_INCOMING_CPU(r0, 0x12, 0x31, &(0x7f0000000080)='!\x00', 0x40) uname$auto(0x0) 2m17.896280066s ago: executing program 5 (id=792): inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x20, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x55) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0xffffffffffffff7f, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="00569559", @ANYRES16=0x0, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x98001, 0x0) pipe$auto(&(0x7f0000000040)=r1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) 2m17.57262238s ago: executing program 5 (id=794): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x0, 0x1, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x3) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/sda/requeue_list\x00', 0x40802, 0x0) mq_timedsend$auto(r0, &(0x7f0000000040)='s}@\x00', 0x3c96, 0x0, &(0x7f0000000080)={0x55, 0x40}) io_pgetevents$auto(0x8, 0x8001, 0x0, &(0x7f00000000c0)={0x7, 0x3ff, 0x4, 0xaf2f}, &(0x7f0000000100)={0x10, 0x8000000000000000}, &(0x7f0000000180)={&(0x7f0000000140)={0x9}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0xff, r1, @relative_fd=0xffffffffffffffff, 0xe600}, 0xf) mmap$auto(0x2, 0x1, 0x2, 0x15, r5, 0x3) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb) mmap$auto(0x0, 0x1000000400008, 0xdf, 0x9b72, 0x2, 0x8001) 2m16.634675073s ago: executing program 5 (id=796): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x81) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) sysfs$auto(0x1000006, 0x1, 0x0) r1 = fcntl$auto(0x3, 0x4, 0xa553) ioctl$auto(0x3, 0x541b, r1) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x42006, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000002c40)=0xd2) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000001c0)={r2, 0x476bfb01, 0xffffffff, 0x1ef4}) close_range$auto(r3, r4, 0x2) r5 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) fsopen$auto(&(0x7f00000000c0)='/dev/net/tun\x00', 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) lseek$auto(r5, 0x7f, 0x2a21) sysfs$auto(0x2, 0x1, 0x0) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) 2m14.724394556s ago: executing program 5 (id=798): openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = open(0x0, 0xc2ec0, 0x1d4) execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) read$auto(r0, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x27fff) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, 0x0, 0x5, 0x80000000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r3, 0x0, 0x40) 2m13.926515142s ago: executing program 5 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000080)={0x18, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x4) 1m58.846469143s ago: executing program 36 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000080)={0x18, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x4) 1m39.403249322s ago: executing program 8 (id=921): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x24004805) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x31, 0x7f, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x0, 0x800000007ffffffb, 0x5, 0xffffffff80000003, 0x2, 0xe, 0x401}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0) read$auto_def_blk_fops_fs(r2, &(0x7f0000000140)=""/194, 0xc2) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0xa, 0x2, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r6 = socket(0x18, 0x5, 0x1) connect$auto(r6, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) getsockname$auto(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex, 0x3, 0x40081, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1, 0x4}}, 0x81) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/bond_slave_0/accept_ra_pinfo\x00', 0x2729a0, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0) 1m39.115299001s ago: executing program 8 (id=923): close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, r1, 0x4, r1}, 0x10) r2 = bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x10001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x8], {0x9, 0x1, 0xe, 0x0, 0x420, 0x1001, 0x3fdc, 0x3, 0x5}, {0x2, 0x140, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0x3}}) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x6, 0x0) listen$auto(0x3, 0x9) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) open(0x0, 0x22040, 0x75) socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000300)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4) r5 = getsockopt$auto(r3, 0x29, 0x16, 0x0, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04, 0x0) ioctl$auto(r2, 0xea7a, r2) 1m38.613342514s ago: executing program 8 (id=925): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4001, 0x0) r0 = socket(0xa, 0x3, 0x5) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) mmap$auto(0x0, 0x101, 0x0, 0xeb0, r0, 0xfffffffffffffe00) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) epoll_create$auto(0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) epoll_ctl$auto(0x5, 0x3, r1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x0, 0xa, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e6]}, 0x1fe, 0x200d) gettid() sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r4], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0) unshare$auto(0x40000080) 1m37.476743517s ago: executing program 8 (id=929): mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x401, 0x20000008000) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4) getsockopt$auto_SO_DEBUG(r0, 0x1, 0x1, &(0x7f0000000000)='(\x00', &(0x7f0000000040)) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) 1m37.082253484s ago: executing program 8 (id=931): mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0xc001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) removexattr$auto(&(0x7f0000000040)='}[,&*}\x00', &(0x7f00000001c0)='}){\\:-\x00') keyctl$auto(0xc, 0x4, 0xfffffffffffffffd, 0x7c, 0x5) lremovexattr$auto(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='nfsd\x00') mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0xc001) (async) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) (async) removexattr$auto(&(0x7f0000000040)='}[,&*}\x00', &(0x7f00000001c0)='}){\\:-\x00') (async) keyctl$auto(0xc, 0x4, 0xfffffffffffffffd, 0x7c, 0x5) (async) lremovexattr$auto(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='nfsd\x00') (async) 1m36.638259363s ago: executing program 8 (id=935): r0 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/ht40allow_map\x00', 0x0, 0x0) read$auto_ht40allow_map_ops_debugfs(r0, &(0x7f0000000280)=""/168, 0xa8) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x3a, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x21, 0x1, 0x40) mmap$auto(0xfffffffffffffffc, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf251c"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x7fffffffffffffff}, 0x2bc) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/projid_map\x00', 0x100000, 0x0) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x101842, 0x61) read$auto(r1, 0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) select$auto(0xfffffffb, 0x0, &(0x7f0000000500)={[0x1, 0x101, 0x3c, 0x4, 0x3, 0x7, 0x0, 0x3, 0x3, 0xf, 0x51c7, 0x87, 0x8, 0x9, 0x1, 0x8000000000000001]}, &(0x7f0000000580)={[0x9, 0x8, 0xfffffffffffffc01, 0x4, 0xfffd, 0x9, 0x6, 0x7fffffff, 0x8, 0x120000004000000, 0x69, 0x9, 0x5, 0x81, 0x5]}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_SESSION_GET(r2, 0x0, 0x20000091) 1m20.961781156s ago: executing program 37 (id=935): r0 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/ht40allow_map\x00', 0x0, 0x0) read$auto_ht40allow_map_ops_debugfs(r0, &(0x7f0000000280)=""/168, 0xa8) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x3a, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x21, 0x1, 0x40) mmap$auto(0xfffffffffffffffc, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf251c"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x7fffffffffffffff}, 0x2bc) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/projid_map\x00', 0x100000, 0x0) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x101842, 0x61) read$auto(r1, 0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) select$auto(0xfffffffb, 0x0, &(0x7f0000000500)={[0x1, 0x101, 0x3c, 0x4, 0x3, 0x7, 0x0, 0x3, 0x3, 0xf, 0x51c7, 0x87, 0x8, 0x9, 0x1, 0x8000000000000001]}, &(0x7f0000000580)={[0x9, 0x8, 0xfffffffffffffc01, 0x4, 0xfffd, 0x9, 0x6, 0x7fffffff, 0x8, 0x120000004000000, 0x69, 0x9, 0x5, 0x81, 0x5]}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_SESSION_GET(r2, 0x0, 0x20000091) 1m6.353026756s ago: executing program 9 (id=974): r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = socket(0x15, 0x5, 0x0) timer_settime$auto(0x6, 0x1, &(0x7f0000000400)={{0xe80, 0x6}, {0xfcf, 0xd7ad}}, &(0x7f0000000440)={{0x1fffffffc0000000}, {0xe0e, 0x7}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) ioctl$auto_TIOCSCTTY(r1, 0x540e, &(0x7f0000000400)) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'xfrm0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="dbdf250300000008000300000200000800020000009b72f31057", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0a000500ffffffffffff00000a000100aaaaaaaaaabb00000a0001000180c200000e0000080003003600000006000700ff0000000a000100aaaaaaaaaabb0000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r5 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000100), r4) sendmsg$auto_SMC_NETLINK_DISABLE_HS_LIMITATION(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000229bd7000fcdbdf2512000000e3c74265fc46948319c3f37d6e8a9a79dc51e8dfa4ff0d5c6edd25ff2e5e66857d087593b0acdb6771e1b6419c56ce9aca14a11bef724018b01cc14037b81433734f688b95c01584da9b0a7219c722ceb7c6356090bacee5f4bfc69ab1f048df81beb2ac5152a40000000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x80c0}, 0x24000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x4, 0x5}, 0x7, 0x0, 0x0, 0x8) setsockopt$auto(r6, 0x1, 0x1b, &(0x7f00000000c0)=')[\x00', 0x9) 1m4.664985227s ago: executing program 9 (id=1027): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebd, 0x401, 0x8400) (async) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) (async) r1 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) socket(0x2c, 0x1, 0x8) r2 = prctl$auto(0x3c, 0x7fffffff, 0x0, 0xfffffffffffffffc, 0xc) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x1, 0x8fd6, 0x948b, 0x3, 0xfff, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffbfffe]}, 0x0) (async) write$auto_event_trigger_fops_trace(r2, &(0x7f0000000340)="087a5fc885515accc34eb3c38a3a401bd245bdd75afcd2d75b35e79aaa1b0ef394e53c131e1cfc1a56d3a4b62413e7e10888135be1fabcd32641a9ce6a8e2af9eb715dcb518d6ed52cf5fe7db8422ba456f512a013f3b7da508d006908a53c9278190e211ae4b99973e46802f9af29cbf9c5a886def835e78a18d917430b73d52c9cb5a9433e8fe6f1027f96de", 0x8d) (async) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9eJ\xc6\xc0\'\xdbV\xd4\xee\x92\xe7H\xe1::0\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97\x15\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\x06\xa7tU\x14w\xb4\x14\x9dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xa2VdArdW\x8c\x01\x9e\xa2y\xb3\x95\x00`\xb1hYB\x1c\xdb,\x9es9\x05;\xd1\xfe-\x8c\x18zsq\xff\xed\xe3\"%\x86n\x13\v\xdb\xf8\t\xaa2g\xfa\x9a\x00?@\xad*av\x88\xacB\x1b\xc4\xf8@\x91\x8a\xb6\xad\xf4-i\xc2\x7f\xc3\x1a\xc8\xc06\x96\x1a\xd2\xbd\xc6\xbd\x8f^.\x8d\xcd\xff\xa0\x9di\xb7ES\x00\xa6\xb0]\xfc\x86\x8b\rjy\x94\xb3p\xb3\xabln\xf4\xa5w#\x89\x86\x1c?\xb7\x87\xcf~\xb5\xa5\xdfNc\xce\xcf\x00\xe0\xf9\x96\xf3~\x0eI\xa5_`\xb9\xb0\xa8\xf9\xc8Z\x89\x8b1\xf5b\va\f\xb0\xfc\xe7\xd1\xf6\xed\xad=', 0x8) (async) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) (async) write$auto(0x3, 0x0, 0xffd8) (async) unshare$auto(0x40000080) (async) process_mrelease$auto(0xffffffffffffffff, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8884) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) readahead$auto(r1, 0x2, 0x9) (async) msync$auto(0x3ff, 0x180000000000002, 0x6) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) mincore$auto(0xffd, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) 49.364563409s ago: executing program 38 (id=1027): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebd, 0x401, 0x8400) (async) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) (async) r1 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) socket(0x2c, 0x1, 0x8) r2 = prctl$auto(0x3c, 0x7fffffff, 0x0, 0xfffffffffffffffc, 0xc) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x1, 0x8fd6, 0x948b, 0x3, 0xfff, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffbfffe]}, 0x0) (async) write$auto_event_trigger_fops_trace(r2, &(0x7f0000000340)="087a5fc885515accc34eb3c38a3a401bd245bdd75afcd2d75b35e79aaa1b0ef394e53c131e1cfc1a56d3a4b62413e7e10888135be1fabcd32641a9ce6a8e2af9eb715dcb518d6ed52cf5fe7db8422ba456f512a013f3b7da508d006908a53c9278190e211ae4b99973e46802f9af29cbf9c5a886def835e78a18d917430b73d52c9cb5a9433e8fe6f1027f96de", 0x8d) (async) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9eJ\xc6\xc0\'\xdbV\xd4\xee\x92\xe7H\xe1::0\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97\x15\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\x06\xa7tU\x14w\xb4\x14\x9dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xa2VdArdW\x8c\x01\x9e\xa2y\xb3\x95\x00`\xb1hYB\x1c\xdb,\x9es9\x05;\xd1\xfe-\x8c\x18zsq\xff\xed\xe3\"%\x86n\x13\v\xdb\xf8\t\xaa2g\xfa\x9a\x00?@\xad*av\x88\xacB\x1b\xc4\xf8@\x91\x8a\xb6\xad\xf4-i\xc2\x7f\xc3\x1a\xc8\xc06\x96\x1a\xd2\xbd\xc6\xbd\x8f^.\x8d\xcd\xff\xa0\x9di\xb7ES\x00\xa6\xb0]\xfc\x86\x8b\rjy\x94\xb3p\xb3\xabln\xf4\xa5w#\x89\x86\x1c?\xb7\x87\xcf~\xb5\xa5\xdfNc\xce\xcf\x00\xe0\xf9\x96\xf3~\x0eI\xa5_`\xb9\xb0\xa8\xf9\xc8Z\x89\x8b1\xf5b\va\f\xb0\xfc\xe7\xd1\xf6\xed\xad=', 0x8) (async) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) (async) write$auto(0x3, 0x0, 0xffd8) (async) unshare$auto(0x40000080) (async) process_mrelease$auto(0xffffffffffffffff, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8884) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) readahead$auto(r1, 0x2, 0x9) (async) msync$auto(0x3ff, 0x180000000000002, 0x6) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) mincore$auto(0xffd, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) 9.451506376s ago: executing program 4 (id=1193): mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/devices\x00', 0x40081, 0x0) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) (fail_nth: 3) 8.810781127s ago: executing program 4 (id=1195): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xe1, 0x9b74, 0x7, 0x28000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x80003, 0x300) (async) sendto$auto(0x3, 0x0, 0x34, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, 0x0, 0x10}, 0x22) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) socket(0x18, 0xa, 0x1) (async) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), 0xffffffffffffffff) (async) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x2}, 0x55) (async) semctl$auto(0x1, 0x10351, 0xe, 0xfffffffffffffffe) (async) lsm_list_modules$auto(0x0, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000000)={{0x0, 0x4, 0x0, 0x109, 0x0, 0x6c, 0x697c}, 0xed71394}, 0x9aa, 0xff00) (async) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x4) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0xf, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) clone$auto(0x20003b4b, 0x8000000000000000, 0x0, 0x0, 0x1b0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x2, 0x73) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) (async) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) 8.437050505s ago: executing program 4 (id=1197): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db"], 0xf8}}, 0x10004010) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/arch_status\x00', 0x100182, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x8, 0x3) 7.590888366s ago: executing program 4 (id=1200): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04) sysfs$auto(0x2, 0x101000000000007, 0x0) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) r1 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r1, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) io_setup$auto(0x80002, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(0xffffffffffffffff, 0x40084149, &(0x7f0000001080)=0x7) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0) mmap$auto(0x6, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) mmap$auto(0x0, 0x400008, 0x5f, 0x1b5e, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000001040), 0x40, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) fcntl$auto(0x2, 0x401, 0x80000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) r3 = prctl$auto_PR_SET_MM_START_BRK(0xb, 0x6, 0xffffffffffffffff, 0x80000000, 0x7) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001100), r1) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r3, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYBLOB="34bb00017864318b03f980f53c5ed1bdba02410c5c3c6958d620db8c34340f01347b8ee1b489e1fe5bb36580275e853a2e3df31306e80982eaf32307c58c5316e50213d544ffb983cf3da4a98963f422e0abe3c75c67fadc890e2760a952bc021f91633d", @ANYRES16=r4, @ANYBLOB="000126bd7000fbdbdf251600000008000e000200000005001a000900000008000100050000000500130008000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r5 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r5, &(0x7f0000000040)=""/4096, 0xfffffe82) 6.440004033s ago: executing program 6 (id=1202): mbind$auto(0xfffffffffffff000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12) (async) write$auto(0x3, 0x0, 0x100082) (async) clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) (async) io_uring_setup$auto(0x6, 0x0) (async) madvise$auto(0x0, 0x200007, 0x19) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x40001, 0x0) setgroups$auto(0xf7f3, &(0x7f0000000000)=0x4) (async) write$auto(r0, 0x0, 0xfffffdef) 5.346387916s ago: executing program 2 (id=1203): mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/devices\x00', 0x40081, 0x0) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) (fail_nth: 4) 4.698722218s ago: executing program 2 (id=1205): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0x2, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x1, 0x20000084) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) io_uring_setup$auto(0x7ff, 0x0) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x0, 0x7) dup2$auto(r1, r1) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040c4) set_mempolicy$auto(0x5, &(0x7f0000000140)=0x2000002, 0x7fffffffffffffff) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x7, 0x0, 0x1, 0x0, 0x4, 0x8}, 0x800}, 0x10a, 0xc, 0x0) ioctl$auto_PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x5, 0x9, 0x9}}) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) socketpair$auto(0x23, 0x4, 0x200007, 0x0) msgsnd$auto(0x1, 0x0, 0x2000, 0x800) 4.269726022s ago: executing program 6 (id=1206): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3], 0x14}}, 0x10040) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r4) 3.981954522s ago: executing program 4 (id=1207): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000480), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x106) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0xfffffffffffffffe, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) mbind$auto(0x0, 0x2091d2, 0x5, 0x0, 0x5122, 0x4) socket(0x10, 0x2, 0x14) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000b80), r1) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000080)=ANY=[@ANYBLOB="06e2cf4558cd5030944ffed9884533d8060a9f13c3d0c0fbfc08f7161c74", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25050000000800040003000000"], 0x1c}}, 0x40040) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x1000e, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3b, 0x1, 0x100000000, 0x7, 0x7fffffff, 0xffffffffffffffff, 0x5, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x40000002, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x101, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) 3.021605968s ago: executing program 6 (id=1209): fanotify_init$auto(0x1000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x100000000000032, 0x0) r0 = fsopen$auto(0x0, 0x1) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x1, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r1, 0x80045700, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mlockall$auto(0x7) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) r5 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setuid$auto(0x1f) ioctl$auto(r4, 0x1, r5) ioctl$auto(r2, 0x5608, r3) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000100)={0x8, r0}) r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r6, 0x0, 0x1f40) socket(0x23, 0x2, 0x53f0800) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/vlan1/accept_ra_pinfo\x00', 0x22202, 0x0) sendfile$auto(0xffffffffffffffff, r7, 0x0, 0x1) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3) clock_settime$auto(0x1, &(0x7f0000000080)={0x8f59, 0x8}) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0xffeb) 2.63068504s ago: executing program 7 (id=1211): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x24004805) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x31, 0x7f, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x0, 0x800000007ffffffb, 0x5, 0xffffffff80000003, 0x2, 0xe, 0x401}) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x642, 0x0) read$auto_def_blk_fops_fs(r3, &(0x7f0000000140)=""/194, 0xc2) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0xa, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r7 = socket(0x18, 0x5, 0x1) connect$auto(r7, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) getsockname$auto(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex, 0x3, 0x40081, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1, 0x4}}, 0x81) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/bond_slave_0/accept_ra_pinfo\x00', 0x2729a0, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r8, 0x0, 0x0) 2.382925185s ago: executing program 7 (id=1212): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) utimensat$auto(0xffffffffffffffff, &(0x7f0000001c80)='\x00', 0x0, 0x1000) 2.363510456s ago: executing program 2 (id=1213): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getcwd$auto(0x0, 0xffffffffffffffff) renameat$auto(0x6, 0x0, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="85d70836", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a0004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562791c933b3c4d62b28a702b72e0a87126700294f2350000000c0001800800030000000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) r0 = socket(0xa, 0x801, 0x84) listen$auto(r0, 0x3) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.270481872s ago: executing program 4 (id=1214): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0x22, 0x2, 0x4) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r3 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r5, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r7}, @NET_SHAPER_A_HANDLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) bpf$auto(0x4, &(0x7f0000000080)=@bpf_attr_5={@target_fd, r2, 0x40, 0x4, r3, @relative_id=0x40, 0xffffffffffffff7f}, 0x80000001) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) setfsuid$auto(0x0) r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0) read$auto(r8, 0x0, 0xfff) write$auto(0x3, 0x0, 0x100082) 2.143852363s ago: executing program 6 (id=1215): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x90f1) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo$auto(r2, r1, 0xb, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x3, 0x3, @_sigchld={0x0, 0x0, 0xceb, 0x5, 0x4}}}) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ksm_merging_pages\x00', 0x181100, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000040)=""/137, 0x89) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0) semctl$auto(0xb47, 0x100002, 0x13, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x560a, 0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000040)=0x5) read$auto_snd_ctl_f_ops_control(r5, 0x0, 0x0) ioctl$auto(0x3, 0xae44, 0x10000000000402) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x10, 0x9, 0x100000, 0x7ffffffff003, 0x632, 0x40000000000003, 0x0, 0xeb, 0xfffffffffffffffa, 0x8003, 0xfffffffffffffffc, 0x6}) r6 = socket(0xa, 0xa, 0x84) r7 = getpid() process_vm_readv$auto(r7, &(0x7f00000000c0)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) setsockopt$auto(r6, 0x10000000084, 0x9, 0x0, 0x9c) 2.097631053s ago: executing program 7 (id=1216): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) (async) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) open(0x0, 0x22240, 0x154) (async) open(0x0, 0x22240, 0x154) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r0, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x5eea, 0x7, [{r1, 0x0, 0x4, 0x6}]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = socket(0xa, 0x801, 0x84) clock_nanosleep$auto(0x5, 0x1ff, &(0x7f0000000000)={0x7, 0x8}, &(0x7f0000000040)={0x7, 0x7}) (async) clock_nanosleep$auto(0x5, 0x1ff, &(0x7f0000000000)={0x7, 0x8}, &(0x7f0000000040)={0x7, 0x7}) getsockopt$auto(r3, 0x84, 0x6f, 0x0, 0x0) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) 1.688066811s ago: executing program 2 (id=1217): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00a9"], 0x24}}, 0x4000000) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r7, &(0x7f0000002200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7aac854a18b76ff16e4cab4b61107cdae019761b2830", 0x5c) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8932, &(0x7f0000000780)={'tunl0\x00', 0x0}) r10 = socket(0x15, 0x4, 0x0) r11 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x400, 0x0) bpf$auto(0x7f80, &(0x7f00000000c0)=@bpf_attr_0={0x5, 0xfffffff8, 0x0, 0x7ff, 0x6, r11, 0x7f74f388, "b31847959e25eae44d0629b2f85e82e5", r9, r7, 0x4929, 0x7, 0x8000, 0x1, r7, r10}, 0xfffffff9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pimreg\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = socket(0xa, 0x2, 0x88) r17 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r18, r17, 0x4, 0x1, r16, @relative_id=0x13, 0xe600}, 0xf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r20 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r20, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r21, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000ffdbdf250900000060000180080003000700000008000300000000001400020068737230000000000000000000000000140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f62617461647600080003007f0000003c00018014000200776c616e3000000000000000000000001400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYRES8=r22, @ANYRES32=r2, @ANYBLOB="2c00018008000100", @ANYRES8=r6, @ANYBLOB="08000300060000000800030000002c00080003000002000008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="38000180080003000000000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="140002007767320000000000000000000000000008000100", @ANYRES32=r18, @ANYBLOB="0104000000000000", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="140002007669727400000000"], 0x154}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r23 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)=ANY=[@ANYBLOB="040400009c49e6aef866f577d9de9969dec894229ba2cfa96c7045dbd28bd81ec54f9b87e43707bc2da2f8cc9acc37cd", @ANYRES16=r23, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x404}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 1.35075143s ago: executing program 7 (id=1218): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mtd/mtd0/mtdblock0/trace/pid\x00', 0x1a1842, 0x0) (async) socket(0x21, 0x2, 0x2) (async) mmap$auto(0x0, 0x20009, 0x4000000000e0, 0xeb1, 0x401, 0x8000) (async) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) (async) r0 = prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) (async) r1 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r1, &(0x7f0000000040)=""/159, 0x9f) (async) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r2 = socket(0x10, 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf250a00000004100280"], 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sysfs$auto(0x2, 0x10000000000002a, 0x0) (async, rerun: 64) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/136, 0x88) (rerun: 64) fsopen$auto(0x0, 0x1) (async, rerun: 32) setsockopt$auto_SO_TIMESTAMP_NEW(r2, 0x7ff, 0x3f, &(0x7f0000000380)='ethtool\x00', 0x7) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0xffffffff) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) (async) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01007050a7f82fc634b10f"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3cb45d76d82908eb82fb312d688c7428876a6cd77fd38b728fb990ad08e7ea678b5ab0615f03759153068359cb0b76555c9f4e0b49c5675c2db7b460c636bdfb17f288bc2d3bc52a0dcbf64c2cb0a25162a636c9c23fafae3b87badb6ca5b3e0d1d0069479dcca2c1fcb31055de42d020315493387f4d53876768b7bd57cf2ec80b9c615a32a38d179cdd7799679bfb7cb87efd45e19ea39a7c5f1974f8f78643231c998d3859d2c89730d74947cca26be24fd1901c200", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) setsockopt$auto(0x3, 0x115, 0x3, 0xffffffffffffffff, 0x1) (rerun: 32) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000440), 0x327402, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) 1.287341913s ago: executing program 2 (id=1219): close_range$auto(0x0, 0xfffffffffffff000, 0x2) epoll_create$auto(0x3e) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:01.0/uevent\x00', 0x103c40, 0x0) eventfd$auto(0x0) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x2284, r0) 1.159706553s ago: executing program 7 (id=1220): symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)={0x0, 0x97}, 0x18) mknodat$auto(r0, &(0x7f0000000340)='./file0\x00', 0x7, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x5e9c, 0x400000000000, 0x7, 0x6, 0xee00, 0xffffffffffffffff, 0x0, 0x6, 0x2, 0xfe3, 0x1, 0x800, 0x7e, 0x800, 0x5, 0x101, 0xb288}, 0x0) chdir$auto(&(0x7f0000000280)='}[,&*}\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000280)={0x9, 0xffffff93, 0x0}) rename$auto(&(0x7f0000000140)='}[,&*}\x00', &(0x7f0000000180)='./file0\x00') rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 1.059414633s ago: executing program 2 (id=1221): r0 = fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x1ff, 0x2) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xebd, r0, 0x5) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x8004) brk$auto(0xffffffffffffff66) 900.250043ms ago: executing program 7 (id=1222): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) ioprio_set$auto(0x80000003, 0x800000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ubifs/chk_orphans\x00', 0x426a2, 0x0) write$auto_dfs_global_fops_debug(r0, &(0x7f0000000d80)='0', 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x401, 0xfffffffffffffffd, 0xd4, 0x4, 0x28c, 0x0, 0x3, 0x368e, 0x9, {0xfffffffe, 0x10000}, 0x9, 0x3, 0xfffffffffff7fffd, 0x1007ffd, 0x0, 0xfe, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0xa, 0x801, 0x84) r3 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x480000, 0x0) getsockopt$auto_SO_MEMINFO(r3, 0x7, 0x37, &(0x7f0000000100)='/dev/usbmon0\x00', &(0x7f0000000140)=0x8) getsockopt$auto(r2, 0x84, 0x7d, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) timer_create$auto(0x3, 0x0, 0x0) 590.00096ms ago: executing program 6 (id=1223): r0 = socket(0x25, 0x1, 0x0) connect$auto(r0, &(0x7f0000000180), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) socket(0x2, 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x7, 0x2, 0x100000001, 0x1, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x7fffffffffffffff, 0x1, 0x7fffffff, 0x5, 0x8000000000007, 0x7, 0x7d6, 0x40000103}) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x55) getdents64$auto(0x2, 0xfffffffffffffffe, 0x1) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop12/trace/pid\x00', 0x202282, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000280)={0x7, 0x492b3385, 0x0, 0x3, 0x17, 0x2, r5, [0x3, 0x2, 0xab], {0x4, 0x40, 0xf, 0xb, 0x7, 0x8, 0x3, 0xafe, 0x2}, {0x4, 0x7f, 0x0, 0x3, 0x5, 0x3, 0x7a, 0x8, 0x7fff}}) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0x14, 0x1, 'wg0\x00'}, @IEEE802154_ATTR_PHY_NAME={0xb, 0x1f, 'netdev\x00'}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0xfffffffffffffff8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2c004080) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 0s ago: executing program 6 (id=1224): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) (async, rerun: 32) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x8000000}, 0x3, 0xf8, 0x10) (rerun: 32) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x0) read$auto(r1, 0x0, 0x0) (async) mmap$auto(0x6e, 0x20006, 0xe2, 0x939b, 0x405, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r2, 0x8, 0x0) (async, rerun: 64) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (rerun: 64) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82) getcwd$auto(&(0x7f00000011c0)='/^ev/hwrng\x00U\xbbll\x8c\x92\v[\xaa\xf5\xc9\xf1\xf7\x7f\x94Q\xc0\xc3\xbe\xea\xf8<\xdf\xee_!\xc2$c\'%yh\xbb\x0f\xcca\xdd\xeb', 0xc32) (async) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/version\x00', 0x40802, 0x0) pread64$auto(r4, 0x0, 0xffff, 0xa) (async) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000001080), 0x10000, 0x0) ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0x0) rt_sigaction$auto(0xfff, &(0x7f00000012c0)={&(0x7f0000001200)=&(0x7f0000001040)=0xb, 0x7, &(0x7f0000001280)=&(0x7f0000001240)=0x2b, {0x706}}, &(0x7f0000001400)={&(0x7f0000001340)=&(0x7f0000001300)=0x8, 0x2, &(0x7f00000013c0)=&(0x7f0000001380)=0x2}, 0x8) (async) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)={0x10cc, r6, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x44, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x40, 0x2, 'G\x15\xc6\x02\xc8,\xe3\n\x1f5\x8d\"0\xd44\"\xd6wX1\xf3\xcbg\r\xb5\x8ct\xec}\xe4\xf8\x9d\x1b;\xd8\xeb\x8d\xb8\xa8\x98m\x8eB\xa5s\x02\x00rFI,\xa4t\x19\x9dv\xfc\xef\xfc\x1a'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x1070, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '}&\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '$\\\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_ADDR={0x1004, 0x1, "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"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x40, 0x2, 'G\x15\xc6\x02\xc8,\xe3\n\x1f5\x8d\"0\xd44\"\xd6wX1\xf3\xcbg\r\xb5\x8ct\xec}\xe4\xf8\x9d\x1b;\xd8\xeb\x8d\xb8\xa8\x98m\x8eB\xa5s\x02\x00rFI,\xa4t\x19\x9dv\xfc\xef\xfc\x1a'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '}&\x00'}]}]}, 0x10cc}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     [ 345.608135][ T9720] FAULT_INJECTION: forcing a failure. [ 345.608135][ T9720] name failslab, interval 1, probability 0, space 0, times 0 [ 345.657228][ T9661] hsr_slave_0: entered promiscuous mode [ 345.663996][ T9720] CPU: 1 UID: 0 PID: 9720 Comm: syz.7.864 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 345.664046][ T9720] Tainted: [U]=USER [ 345.664057][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 345.664075][ T9720] Call Trace: [ 345.664086][ T9720] [ 345.664098][ T9720] dump_stack_lvl+0x16c/0x1f0 [ 345.664144][ T9720] should_fail_ex+0x512/0x640 [ 345.664186][ T9720] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 345.664225][ T9720] should_failslab+0xc2/0x120 [ 345.664272][ T9720] __kmalloc_cache_node_noprof+0x6d/0x420 [ 345.664308][ T9720] ? __get_vm_area_node+0x101/0x300 [ 345.664363][ T9720] __get_vm_area_node+0x101/0x300 [ 345.664418][ T9720] __vmalloc_node_range_noprof+0x277/0x1540 [ 345.664471][ T9720] ? n_tty_open+0x1a/0x170 [ 345.664529][ T9720] ? n_tty_open+0x1a/0x170 [ 345.664576][ T9720] ? __ldsem_down_write_nested+0x10e/0x850 [ 345.664626][ T9720] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 345.664688][ T9720] ? n_tty_open+0x1a/0x170 [ 345.664730][ T9720] vzalloc_noprof+0x6b/0x90 [ 345.664776][ T9720] ? n_tty_open+0x1a/0x170 [ 345.664814][ T9720] ? __pfx_n_tty_open+0x10/0x10 [ 345.664851][ T9720] n_tty_open+0x1a/0x170 [ 345.664890][ T9720] ? __pfx_n_tty_open+0x10/0x10 [ 345.664933][ T9720] tty_ldisc_open+0x9c/0x120 [ 345.664964][ T9720] tty_ldisc_setup+0x40/0x100 [ 345.664997][ T9720] tty_init_dev.part.0+0x1ec/0x500 [ 345.665039][ T9720] tty_open+0xa50/0xf90 [ 345.665086][ T9720] ? __pfx_tty_open+0x10/0x10 [ 345.665124][ T9720] ? chrdev_open+0x10b/0x6a0 [ 345.665163][ T9720] ? __pfx_tty_open+0x10/0x10 [ 345.665201][ T9720] chrdev_open+0x231/0x6a0 [ 345.665233][ T9720] ? __pfx_apparmor_file_open+0x10/0x10 [ 345.665278][ T9720] ? __pfx_chrdev_open+0x10/0x10 [ 345.665313][ T9720] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 345.665366][ T9720] do_dentry_open+0x741/0x1c10 [ 345.665400][ T9720] ? __pfx_chrdev_open+0x10/0x10 [ 345.665441][ T9720] vfs_open+0x82/0x3f0 [ 345.665487][ T9720] path_openat+0x1e5e/0x2d40 [ 345.665533][ T9720] ? __pfx_path_openat+0x10/0x10 [ 345.665573][ T9720] do_filp_open+0x20b/0x470 [ 345.665604][ T9720] ? __pfx_do_filp_open+0x10/0x10 [ 345.665664][ T9720] ? alloc_fd+0x471/0x7d0 [ 345.665723][ T9720] do_sys_openat2+0x11b/0x1d0 [ 345.665764][ T9720] ? __pfx_do_sys_openat2+0x10/0x10 [ 345.665810][ T9720] ? __fget_files+0x20e/0x3c0 [ 345.665866][ T9720] __x64_sys_openat+0x174/0x210 [ 345.665908][ T9720] ? __pfx___x64_sys_openat+0x10/0x10 [ 345.665948][ T9720] ? ksys_write+0x1b9/0x240 [ 345.665978][ T9720] ? rcu_is_watching+0x12/0xc0 [ 345.666020][ T9720] do_syscall_64+0xcd/0x230 [ 345.666062][ T9720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.666092][ T9720] RIP: 0033:0x7ff85f78e969 [ 345.666116][ T9720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.666146][ T9720] RSP: 002b:00007ff86059a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 345.666175][ T9720] RAX: ffffffffffffffda RBX: 00007ff85f9b6080 RCX: 00007ff85f78e969 [ 345.666195][ T9720] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 345.666214][ T9720] RBP: 00007ff86059a090 R08: 0000000000000000 R09: 0000000000000000 [ 345.666232][ T9720] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 345.666249][ T9720] R13: 0000000000000000 R14: 00007ff85f9b6080 R15: 00007ffc204862e8 [ 345.666297][ T9720] [ 345.666888][ T9720] tty tty26: ldisc open failed (-12), clearing slot 25 [ 345.931372][ T9661] hsr_slave_1: entered promiscuous mode [ 346.045987][ T9661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.060087][ T9661] Cannot create hsr debugfs directory [ 346.382079][ T55] Bluetooth: hci8: command tx timeout syzkaller syzkaller login: [ 347.318530][ T9751] Invalid ELF header magic: != ELF [ 347.715484][ T9661] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 347.762901][ T9661] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 347.931915][ T9661] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 347.973312][ T9661] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 348.466154][ T55] Bluetooth: hci8: command tx timeout [ 349.210548][ T9661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.286514][ T9661] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.340690][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.347976][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.450286][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.457590][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.961114][ T9798] block2mtd: parameter too long [ 350.526514][ T9661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.542548][ T55] Bluetooth: hci8: command tx timeout [ 351.508850][ T9661] veth0_vlan: entered promiscuous mode [ 351.576410][ T9661] veth1_vlan: entered promiscuous mode [ 351.948238][ T9661] veth0_macvtap: entered promiscuous mode [ 352.019389][ T9661] veth1_macvtap: entered promiscuous mode [ 352.118989][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.140613][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.160960][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.179473][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.206883][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.249089][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.288390][ T55] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 352.316280][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.331998][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.342296][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.356436][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.366424][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.377121][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.389226][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.399920][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.413249][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.459453][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.544165][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.589455][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.631961][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.662105][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.672957][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.682902][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.693596][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.703943][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.714452][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.724373][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.735054][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.746292][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.967162][ T9661] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.004633][ T9661] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.056766][ T9661] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.076937][ T9661] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.068344][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.094336][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.199401][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.208004][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.614739][ T9839] FAULT_INJECTION: forcing a failure. [ 354.614739][ T9839] name failslab, interval 1, probability 0, space 0, times 0 [ 354.683407][ T9839] CPU: 1 UID: 0 PID: 9839 Comm: syz.7.889 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 354.683462][ T9839] Tainted: [U]=USER [ 354.683474][ T9839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 354.683494][ T9839] Call Trace: [ 354.683505][ T9839] [ 354.683516][ T9839] dump_stack_lvl+0x16c/0x1f0 [ 354.683579][ T9839] should_fail_ex+0x512/0x640 [ 354.683623][ T9839] ? __kmalloc_noprof+0xbf/0x510 [ 354.683663][ T9839] ? drm_atomic_state_init+0xe4/0x320 [ 354.683705][ T9839] should_failslab+0xc2/0x120 [ 354.683745][ T9839] __kmalloc_noprof+0xd2/0x510 [ 354.683791][ T9839] drm_atomic_state_init+0xe4/0x320 [ 354.683834][ T9839] ? __kasan_kmalloc+0xaa/0xb0 [ 354.683869][ T9839] drm_atomic_state_alloc+0xd3/0x120 [ 354.683914][ T9839] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 354.683957][ T9839] ? __pfx___might_resched+0x10/0x10 [ 354.683994][ T9839] ? rcu_is_watching+0x12/0xc0 [ 354.684023][ T9839] ? trace_contention_end+0xdd/0x130 [ 354.684067][ T9839] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 354.684155][ T9839] drm_client_modeset_commit_locked+0x14d/0x580 [ 354.684203][ T9839] drm_client_modeset_commit+0x4f/0x80 [ 354.684244][ T9839] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 354.684282][ T9839] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 354.684329][ T9839] drm_fbdev_client_restore+0x2c/0x40 [ 354.684374][ T9839] drm_client_dev_restore+0x1f3/0x2a0 [ 354.684420][ T9839] drm_release+0x2c4/0x360 [ 354.684459][ T9839] ? __pfx_drm_release+0x10/0x10 [ 354.684493][ T9839] __fput+0x3ff/0xb70 [ 354.684541][ T9839] task_work_run+0x14d/0x240 [ 354.684604][ T9839] ? __pfx_task_work_run+0x10/0x10 [ 354.684660][ T9839] ? __pfx___do_sys_close_range+0x10/0x10 [ 354.684689][ T9839] ? rcu_is_watching+0x12/0xc0 [ 354.684728][ T9839] syscall_exit_to_user_mode+0x27b/0x2a0 [ 354.684771][ T9839] do_syscall_64+0xda/0x230 [ 354.684814][ T9839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.684847][ T9839] RIP: 0033:0x7ff85f78e969 [ 354.684873][ T9839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.684906][ T9839] RSP: 002b:00007ff8605bb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 354.684936][ T9839] RAX: 0000000000000000 RBX: 00007ff85f9b5fa0 RCX: 00007ff85f78e969 [ 354.684957][ T9839] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 354.684976][ T9839] RBP: 00007ff85f810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 354.684996][ T9839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.685016][ T9839] R13: 0000000000000000 R14: 00007ff85f9b5fa0 R15: 00007ffc204862e8 [ 354.685061][ T9839] [ 355.384958][ T9851] netlink: 28 bytes leftover after parsing attributes in process `syz.6.891'. [ 355.462798][ T9854] ICMPv6: process `syz.8.892' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 355.855359][ T9862] netlink: 93 bytes leftover after parsing attributes in process `syz.6.894'. [ 356.166953][ T9868] FAULT_INJECTION: forcing a failure. [ 356.166953][ T9868] name failslab, interval 1, probability 0, space 0, times 0 [ 356.190816][ T9868] CPU: 1 UID: 0 PID: 9868 Comm: syz.8.893 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 356.190870][ T9868] Tainted: [U]=USER [ 356.190881][ T9868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 356.190901][ T9868] Call Trace: [ 356.190911][ T9868] [ 356.190924][ T9868] dump_stack_lvl+0x16c/0x1f0 [ 356.190970][ T9868] should_fail_ex+0x512/0x640 [ 356.191015][ T9868] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 356.191073][ T9868] should_failslab+0xc2/0x120 [ 356.191114][ T9868] __kmalloc_cache_noprof+0x6a/0x3e0 [ 356.191166][ T9868] ? __mutex_lock+0x1ca/0xb90 [ 356.191215][ T9868] ? alloc_tty_struct+0x96/0x8c0 [ 356.191264][ T9868] alloc_tty_struct+0x96/0x8c0 [ 356.191303][ T9868] ? __pfx___mutex_lock+0x10/0x10 [ 356.191354][ T9868] ? __pfx_alloc_tty_struct+0x10/0x10 [ 356.191394][ T9868] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 356.191445][ T9868] tty_init_dev.part.0+0x1e/0x500 [ 356.191487][ T9868] tty_init_dev+0x60/0x80 [ 356.191527][ T9868] ? __pfx_ptmx_open+0x10/0x10 [ 356.191572][ T9868] ptmx_open+0x10d/0x360 [ 356.191621][ T9868] ? __pfx_ptmx_open+0x10/0x10 [ 356.191671][ T9868] chrdev_open+0x231/0x6a0 [ 356.191701][ T9868] ? __pfx_apparmor_file_open+0x10/0x10 [ 356.191740][ T9868] ? __pfx_chrdev_open+0x10/0x10 [ 356.191774][ T9868] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 356.191843][ T9868] do_dentry_open+0x741/0x1c10 [ 356.191874][ T9868] ? __pfx_chrdev_open+0x10/0x10 [ 356.191915][ T9868] vfs_open+0x82/0x3f0 [ 356.191959][ T9868] path_openat+0x1e5e/0x2d40 [ 356.192004][ T9868] ? __pfx_path_openat+0x10/0x10 [ 356.192043][ T9868] do_filp_open+0x20b/0x470 [ 356.192073][ T9868] ? __pfx_do_filp_open+0x10/0x10 [ 356.192129][ T9868] ? alloc_fd+0x471/0x7d0 [ 356.192231][ T9868] do_sys_openat2+0x11b/0x1d0 [ 356.192274][ T9868] ? __pfx_do_sys_openat2+0x10/0x10 [ 356.192331][ T9868] __x64_sys_openat+0x174/0x210 [ 356.192375][ T9868] ? __pfx___x64_sys_openat+0x10/0x10 [ 356.192422][ T9868] ? rcu_is_watching+0x12/0xc0 [ 356.192462][ T9868] do_syscall_64+0xcd/0x230 [ 356.192506][ T9868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.192538][ T9868] RIP: 0033:0x7fb8c758e969 [ 356.192563][ T9868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.192594][ T9868] RSP: 002b:00007fb8c849b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 356.192623][ T9868] RAX: ffffffffffffffda RBX: 00007fb8c77b6080 RCX: 00007fb8c758e969 [ 356.192644][ T9868] RDX: 0000000000020540 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 356.192664][ T9868] RBP: 00007fb8c7610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 356.192683][ T9868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.192703][ T9868] R13: 0000000000000000 R14: 00007fb8c77b6080 R15: 00007fff46339948 [ 356.192745][ T9868] [ 357.279319][ T9891] netlink: 93 bytes leftover after parsing attributes in process `syz.6.904'. [ 357.980312][ T9901] ubi0: attaching mtd0 [ 357.983574][ T9901] ubi0: scanning is finished [ 357.983717][ T9901] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 358.229389][ T9901] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 358.857111][ T9902] kexec: Could not allocate control_code_buffer [ 359.119525][ T9919] Debayer A: ================= START STATUS ================= [ 359.138506][ T9919] Debayer A: Debayer Mean Window Size: 3 [ 359.171986][ T9919] Debayer A: ================== END STATUS ================== [ 360.258512][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.918'. [ 361.508347][ T9955] sd 0:0:1:0: device reset [ 362.382626][ T9979] netlink: 338 bytes leftover after parsing attributes in process `syz.8.925'. [ 362.552218][ T9984] netlink: 338 bytes leftover after parsing attributes in process `syz.8.925'. [ 363.627007][T10005] sd 0:0:1:0: device reset [ 364.035344][T10014] Invalid ELF header magic: != ELF [ 368.160162][ T5142] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 368.167922][ T5142] Bluetooth: hci7: Ignoring HCI_Connection_Complete for existing connection [ 369.782514][T10084] could not allocate digest TFM handle [ 373.290576][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.957'. [ 376.060601][T10164] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 376.102184][T10164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 376.128148][T10164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.148916][T10164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 376.161975][T10164] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 376.177954][T10164] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 376.273043][T10164] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 376.344322][T10164] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 376.350453][T10164] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 376.421526][T10164] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 376.432919][T10164] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 376.439081][T10164] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 376.486909][T10175] HfR: entered promiscuous mode [ 376.522862][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.537038][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.549616][T10164] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 376.579098][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.592206][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.619102][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.640370][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.650811][T10164] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 376.658733][T10164] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 376.673085][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.684741][T10164] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 376.697194][T10164] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 376.720819][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.730008][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.739583][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.748955][T10164] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 376.774760][T10164] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 376.785244][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.794647][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.805217][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.814363][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.824774][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.833846][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.842870][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.851967][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.861173][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.871215][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.880409][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.890925][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.900061][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.909525][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.920170][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.933078][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.945031][T10164] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 376.957806][T10175] openvswitch: HfR: Dropping previously announced user features [ 376.979965][T10175] openvswitch: HfR: Dropping previously announced user features [ 377.003261][T10175] openvswitch: HfR: Dropping previously announced user features [ 377.241033][T10186] ERROR: Out of memory at tomoyo_memory_ok. [ 377.251808][T10185] netlink: 28 bytes leftover after parsing attributes in process `syz.6.967'. [ 377.324775][T10186] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /usr/sbin/sshd /usr/sbin/sshd /bin/sh /root/syz-executor /root/syz-executor /newroot/47/file0' not defined. [ 377.454722][T10184] ERROR: Out of memory at tomoyo_memory_ok. [ 377.558670][T10185] bond0: (slave bond_slave_0): Releasing backup interface [ 377.581950][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 378.142060][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 378.151157][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 378.223536][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 378.230730][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 378.382012][ T5142] Bluetooth: hci5: command 0x0c1a tx timeout [ 378.471726][ T55] Bluetooth: hci6: command 0x0c1a tx timeout [ 378.701789][ T55] Bluetooth: hci7: command 0x0c1a tx timeout [ 378.781755][ T55] Bluetooth: hci8: command 0x0c1a tx timeout [ 379.850560][ T26] ERROR: Out of memory at tomoyo_memory_ok. [ 380.302388][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 380.473242][ T55] Bluetooth: hci5: command 0x0c1a tx timeout [ 380.545539][ T55] Bluetooth: hci6: command 0x0c1a tx timeout [ 380.781760][ T55] Bluetooth: hci7: command 0x0c1a tx timeout [ 380.861873][ T55] Bluetooth: hci8: command 0x0c1a tx timeout [ 381.034271][ T5142] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 381.045390][ T5142] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 381.046521][ T5142] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 381.048047][ T5142] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 381.049424][ T5142] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 381.729146][T10239] program syz.7.978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.381916][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 382.394136][T10248] [ 382.543258][ T55] Bluetooth: hci5: command 0x0c1a tx timeout [ 382.622576][ T55] Bluetooth: hci6: command 0x0c1a tx timeout [ 382.693872][T10230] chnl_net:caif_netlink_parms(): no params data found [ 382.864336][ T55] Bluetooth: hci7: command 0x0c1a tx timeout [ 382.941945][ T55] Bluetooth: hci8: command 0x0c1a tx timeout [ 383.181831][ T55] Bluetooth: hci9: command tx timeout [ 383.756380][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.762946][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.850321][T10230] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.858890][T10230] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.866905][T10230] bridge_slave_0: entered allmulticast mode [ 383.875508][T10230] bridge_slave_0: entered promiscuous mode [ 383.888970][T10230] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.906671][T10230] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.914838][T10230] bridge_slave_1: entered allmulticast mode [ 383.924232][T10230] bridge_slave_1: entered promiscuous mode [ 383.987955][T10230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.004439][T10230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.155078][T10230] team0: Port device team_slave_0 added [ 384.188249][T10230] team0: Port device team_slave_1 added [ 384.288243][T10230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.307191][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.359314][T10230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.387085][T10230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.406451][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.434604][T10286] netlink: 93 bytes leftover after parsing attributes in process `syz.6.989'. [ 384.449257][T10230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.802363][T10230] hsr_slave_0: entered promiscuous mode [ 384.820968][T10230] hsr_slave_1: entered promiscuous mode [ 384.840539][T10230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.849230][T10230] Cannot create hsr debugfs directory [ 384.943872][ T55] Bluetooth: hci7: command 0x0c1a tx timeout [ 385.261831][ T55] Bluetooth: hci9: command tx timeout [ 386.264033][T10318] syz.6.996 (10318): attempted to duplicate a private mapping with mremap. This is not supported. [ 386.360462][T10321] netlink: zone id is out of range [ 386.376009][T10321] netlink: zone id is out of range [ 386.381218][T10321] netlink: zone id is out of range [ 386.461299][T10321] netlink: zone id is out of range [ 386.472499][T10321] netlink: zone id is out of range [ 386.489234][T10321] netlink: zone id is out of range [ 386.508143][T10321] netlink: zone id is out of range [ 386.549056][T10321] netlink: zone id is out of range [ 386.564612][T10321] netlink: zone id is out of range [ 386.612219][T10321] netlink: zone id is out of range [ 386.671301][T10230] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 386.683389][T10230] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 386.739997][T10230] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 386.800006][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.7.997'. [ 386.881530][T10230] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 387.349257][ T55] Bluetooth: hci9: command tx timeout [ 387.826542][T10230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.949706][T10230] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.030192][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.037547][T10095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.116804][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.124112][T10096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.460614][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1002'. [ 388.566365][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.841592][T10355] bridge_slave_1 (unregistering): left allmulticast mode [ 388.917113][T10355] bridge_slave_1 (unregistering): left promiscuous mode [ 388.952958][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.431738][ T55] Bluetooth: hci9: command tx timeout [ 390.095803][T10230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.811139][T10398] netlink: 93 bytes leftover after parsing attributes in process `syz.6.1009'. [ 391.150955][T10230] veth0_vlan: entered promiscuous mode [ 391.230304][T10230] veth1_vlan: entered promiscuous mode [ 391.822714][T10230] veth0_macvtap: entered promiscuous mode [ 392.064625][T10230] veth1_macvtap: entered promiscuous mode [ 392.173707][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.188702][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.199024][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.209717][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.219845][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.231349][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.241417][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.257112][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.268927][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.269037][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.269152][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.269247][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.269357][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.269449][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.269566][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.269656][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.290325][T10230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.327350][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.327375][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.327389][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.327404][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.327416][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.327432][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.327447][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.327463][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.327476][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.327515][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.327527][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.327544][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.327556][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.327572][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.328707][T10230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.344995][T10230] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.345049][T10230] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.345094][T10230] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.345136][T10230] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.954144][T10432] mkiss: ax0: crc mode is auto. [ 393.272431][T10094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.272463][T10094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.573226][T10096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.597546][T10096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.074909][T10451] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1018'. [ 395.126091][T10458] netlink: 326 bytes leftover after parsing attributes in process `syz.9.974'. [ 395.688752][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 396.353865][T10472] FAULT_INJECTION: forcing a failure. [ 396.353865][T10472] name failslab, interval 1, probability 0, space 0, times 0 [ 396.427033][T10472] CPU: 0 UID: 0 PID: 10472 Comm: syz.4.1025 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 396.427089][T10472] Tainted: [U]=USER [ 396.427101][T10472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 396.427120][T10472] Call Trace: [ 396.427130][T10472] [ 396.427140][T10472] dump_stack_lvl+0x16c/0x1f0 [ 396.427189][T10472] should_fail_ex+0x512/0x640 [ 396.427227][T10472] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 396.427266][T10472] should_failslab+0xc2/0x120 [ 396.427299][T10472] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 396.427332][T10472] ? rcu_is_watching+0x12/0xc0 [ 396.427355][T10472] ? ipv6_route_sysctl_init+0x28/0x2e0 [ 396.427397][T10472] kmemdup_noprof+0x29/0x60 [ 396.427431][T10472] ipv6_route_sysctl_init+0x28/0x2e0 [ 396.427469][T10472] ipv6_sysctl_net_init+0x9a/0x2b0 [ 396.427498][T10472] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 396.427524][T10472] ops_init+0x1df/0x5f0 [ 396.427554][T10472] setup_net+0x21e/0x850 [ 396.427584][T10472] ? __pfx_setup_net+0x10/0x10 [ 396.427609][T10472] ? lockdep_init_map_type+0x5c/0x280 [ 396.427644][T10472] ? __pfx_down_read_killable+0x10/0x10 [ 396.427685][T10472] ? debug_mutex_init+0x37/0x70 [ 396.427735][T10472] copy_net_ns+0x2a6/0x5f0 [ 396.427772][T10472] create_new_namespaces+0x3ea/0xad0 [ 396.427808][T10472] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 396.427841][T10472] ksys_unshare+0x45b/0xa40 [ 396.427877][T10472] ? __pfx_ksys_unshare+0x10/0x10 [ 396.427912][T10472] ? xfd_validate_state+0x5d/0x180 [ 396.427957][T10472] ? rcu_is_watching+0x12/0xc0 [ 396.427988][T10472] __x64_sys_unshare+0x31/0x40 [ 396.428024][T10472] do_syscall_64+0xcd/0x230 [ 396.428059][T10472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.428086][T10472] RIP: 0033:0x7f420a78e969 [ 396.428108][T10472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.428136][T10472] RSP: 002b:00007f420b5a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 396.428161][T10472] RAX: ffffffffffffffda RBX: 00007f420a9b5fa0 RCX: 00007f420a78e969 [ 396.428188][T10472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 396.428205][T10472] RBP: 00007f420a810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 396.428222][T10472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.428238][T10472] R13: 0000000000000000 R14: 00007f420a9b5fa0 R15: 00007ffd88e991e8 [ 396.428272][T10472] [ 398.978133][T10497] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 399.505546][T10502] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input25 [ 399.543521][ T5187] ERROR: Out of memory at tomoyo_memory_ok. [ 400.817567][T10516] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1037'. [ 402.232480][T10539] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 402.239006][T10539] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 402.264830][T10539] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 402.290015][T10539] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 402.303916][T10539] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 402.321944][T10539] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 402.328903][T10539] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 402.349263][T10539] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 402.370892][T10539] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 402.410244][T10539] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 402.431824][T10539] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 402.603153][T10539] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 402.964992][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1041'. [ 403.248180][T10555] Invalid ELF header magic: != ELF [ 403.868189][T10560] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 403.868189][T10560] The task syz.4.1042 (10560) triggered the difference, watch for misbehavior. [ 404.302569][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 404.302588][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 404.302637][ T5142] Bluetooth: hci1: command 0x0406 tx timeout [ 404.308650][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 404.382303][ T5839] Bluetooth: hci8: command 0x0c1a tx timeout [ 404.388549][ T55] Bluetooth: hci7: command 0x0c1a tx timeout [ 404.394670][ T55] Bluetooth: hci6: command 0x0c1a tx timeout [ 404.400831][ T55] Bluetooth: hci5: command 0x0c1a tx timeout [ 404.401734][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 404.421443][T10569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1045'. [ 404.472866][ T5142] Bluetooth: hci9: command 0x0c1a tx timeout [ 404.615101][T10569] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 406.433554][T10609] ubi0: attaching mtd0 [ 406.439099][T10609] ubi0: scanning is finished [ 406.443969][T10609] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 406.560262][ T5142] Bluetooth: hci9: command 0x0c1a tx timeout [ 406.629213][T10609] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 408.631766][ T5142] Bluetooth: hci9: command 0x0c1a tx timeout [ 409.261374][ T5142] Bluetooth: hci6: unexpected event 0x02 length: 726 > 260 [ 409.551549][ T5142] Bluetooth: hci6: unexpected subevent 0x01 length: 122 > 18 [ 409.567675][ T5142] Bluetooth: hci6: Invalid handle: 0x1e1a > 0x0eff [ 410.580899][T10696] random: crng reseeded on system resumption [ 411.313376][T10703] ERROR: Out of memory at tomoyo_memory_ok. [ 412.576476][ T5829] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 412.588322][ T5829] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 412.598078][ T5829] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 412.607195][ T5829] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 412.615018][ T5829] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 413.922098][ T5829] Bluetooth: hci4: unexpected subevent 0x01 length: 127 > 18 [ 414.713461][ T5142] Bluetooth: hci10: command tx timeout [ 415.063719][T10723] chnl_net:caif_netlink_parms(): no params data found [ 415.981795][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 416.083423][T10723] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.098466][T10723] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.111930][T10723] bridge_slave_0: entered allmulticast mode [ 416.120197][T10723] bridge_slave_0: entered promiscuous mode [ 416.268282][T10723] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.276088][T10723] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.285091][T10723] bridge_slave_1: entered allmulticast mode [ 416.303886][T10723] bridge_slave_1: entered promiscuous mode [ 416.428931][T10723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.453635][T10723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.556790][T10723] team0: Port device team_slave_0 added [ 416.575475][T10723] team0: Port device team_slave_1 added [ 416.781804][ T5142] Bluetooth: hci10: command tx timeout [ 416.982791][T10723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.989898][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.057285][T10723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.090319][T10772] Invalid ELF header magic: != ELF [ 417.097645][T10723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.114626][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.163321][T10723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.684058][T10723] hsr_slave_0: entered promiscuous mode [ 417.690907][T10723] hsr_slave_1: entered promiscuous mode [ 417.723911][T10723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.751777][T10723] Cannot create hsr debugfs directory [ 418.787786][T10723] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.864004][ T5142] Bluetooth: hci10: command tx timeout [ 419.495646][T10723] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.889829][T10723] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.003506][T10785] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 420.376473][T10723] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.941983][ T5142] Bluetooth: hci10: command tx timeout [ 420.999786][T10797] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1091'. [ 421.080280][T10797] bridge_slave_1: left allmulticast mode [ 421.086587][T10797] bridge_slave_1: left promiscuous mode [ 421.093037][T10797] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.164610][T10797] bridge_slave_0: left allmulticast mode [ 421.170358][T10797] bridge_slave_0: left promiscuous mode [ 421.202671][T10797] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.914813][T10723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 422.106752][T10723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 422.469750][T10723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 422.490678][T10723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 423.279454][T10723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.399470][T10723] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.456240][T10723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.466889][T10723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.486930][T10690] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.494172][T10690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.572538][T10690] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.579766][T10690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.936304][T10826] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 424.084997][T10723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.219404][T10723] veth0_vlan: entered promiscuous mode [ 424.264892][T10723] veth1_vlan: entered promiscuous mode [ 424.355725][T10723] veth0_macvtap: entered promiscuous mode [ 424.399464][T10723] veth1_macvtap: entered promiscuous mode [ 424.471866][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.492219][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.513282][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.566189][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.589550][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.616884][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.648734][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.675202][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.696065][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.721771][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.741778][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.759086][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.784278][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.803874][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.819133][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.830029][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.840445][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.853228][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.865647][T10723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.881317][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.894117][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.904750][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.916194][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.927908][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.938559][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.953035][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.971677][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.981846][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.000637][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.010786][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.021604][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.031493][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.042645][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.060686][T10723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.071573][T10723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.092870][T10723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.104935][T10852] lo: entered allmulticast mode [ 425.127344][T10723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.138211][T10723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.147201][T10723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.158281][T10723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.204806][T10852] lo: left allmulticast mode [ 425.809090][T10094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.834990][T10094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.147435][T10094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.211067][T10094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.442942][ T30] audit: type=1800 audit(6040618880.539:6): pid=10887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1108" name="file0" dev="tmpfs" ino=645 res=0 errno=0 [ 436.198879][T11038] netlink: 93 bytes leftover after parsing attributes in process `syz.6.1141'. [ 436.320869][T11036] netlink: 93 bytes leftover after parsing attributes in process `syz.6.1141'. [ 436.682767][T11044] FAULT_INJECTION: forcing a failure. [ 436.682767][T11044] name failslab, interval 1, probability 0, space 0, times 0 [ 436.775151][T11044] CPU: 1 UID: 0 PID: 11044 Comm: syz.7.1142 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 436.775220][T11044] Tainted: [U]=USER [ 436.775231][T11044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 436.775250][T11044] Call Trace: [ 436.775260][T11044] [ 436.775272][T11044] dump_stack_lvl+0x16c/0x1f0 [ 436.775318][T11044] should_fail_ex+0x512/0x640 [ 436.775363][T11044] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 436.775421][T11044] should_failslab+0xc2/0x120 [ 436.775461][T11044] __kmalloc_cache_noprof+0x6a/0x3e0 [ 436.775515][T11044] ? ring_buffer_read_prepare+0x101/0x320 [ 436.775550][T11044] ? lockdep_init_map_type+0x5c/0x280 [ 436.775597][T11044] ring_buffer_read_prepare+0x101/0x320 [ 436.775635][T11044] tracing_open+0x925/0xf90 [ 436.775673][T11044] do_dentry_open+0x741/0x1c10 [ 436.775708][T11044] ? __pfx_tracing_open+0x10/0x10 [ 436.775746][T11044] vfs_open+0x82/0x3f0 [ 436.775792][T11044] path_openat+0x1e5e/0x2d40 [ 436.775840][T11044] ? __pfx_path_openat+0x10/0x10 [ 436.775894][T11044] do_filp_open+0x20b/0x470 [ 436.775925][T11044] ? __pfx_do_filp_open+0x10/0x10 [ 436.775985][T11044] ? alloc_fd+0x471/0x7d0 [ 436.776045][T11044] do_sys_openat2+0x11b/0x1d0 [ 436.776086][T11044] ? __pfx_do_sys_openat2+0x10/0x10 [ 436.776145][T11044] __x64_sys_openat+0x174/0x210 [ 436.776188][T11044] ? __pfx___x64_sys_openat+0x10/0x10 [ 436.776241][T11044] ? rcu_is_watching+0x12/0xc0 [ 436.776281][T11044] do_syscall_64+0xcd/0x230 [ 436.776325][T11044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.776356][T11044] RIP: 0033:0x7ff85f78e969 [ 436.776381][T11044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.776413][T11044] RSP: 002b:00007ff8605bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.776443][T11044] RAX: ffffffffffffffda RBX: 00007ff85f9b5fa0 RCX: 00007ff85f78e969 [ 436.776464][T11044] RDX: 0000000000000600 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 436.776484][T11044] RBP: 00007ff85f810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 436.776503][T11044] R10: 000000000000ffeb R11: 0000000000000246 R12: 0000000000000000 [ 436.776521][T11044] R13: 0000000000000000 R14: 00007ff85f9b5fa0 R15: 00007ffc204862e8 [ 436.776563][T11044] [ 437.229508][T11053] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1143'. [ 437.236653][T11050] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1143'. [ 437.350735][T11047] netlink: 93 bytes leftover after parsing attributes in process `syz.6.1143'. [ 437.684686][T11052] WARNING! power/level is deprecated; use power/control instead [ 439.479715][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1150'. [ 440.049789][T11074] bond0: (slave bond_slave_0): Releasing backup interface [ 440.667931][T11084] vivid-003: ================= START STATUS ================= [ 440.718486][T11084] vivid-003: Radio HW Seek Mode: Bounded [ 440.767157][T11084] vivid-003: Radio Programmable HW Seek: false [ 440.846674][T11084] vivid-003: RDS Rx I/O Mode: Block I/O [ 440.914738][T11084] vivid-003: Generate RBDS Instead of RDS: false [ 440.977542][T11084] vivid-003: RDS Reception: true [ 441.007308][T11084] vivid-003: RDS Program Type: 0 inactive [ 441.084259][T11084] vivid-003: RDS PS Name: inactive [ 441.100599][T11084] vivid-003: RDS Radio Text: inactive [ 441.121491][T11084] vivid-003: RDS Traffic Announcement: false inactive [ 441.168725][T11084] vivid-003: RDS Traffic Program: false inactive [ 441.208167][T11084] vivid-003: RDS Music: false inactive [ 441.222434][T11084] vivid-003: ================== END STATUS ================== [ 442.139553][ T30] audit: type=1800 audit(6040618895.219:7): pid=11112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1158" name="dummy_udc" dev="gadgetfs" ino=5921 res=0 errno=0 [ 442.847148][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 442.866088][T11129] veth1_macvtap: entered allmulticast mode [ 442.882876][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 443.001122][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 443.013144][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 443.042044][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 443.066497][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 443.091996][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 443.127872][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 443.144062][T11137] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1162'. [ 443.167914][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 443.202579][T11137] veth1_macvtap: entered allmulticast mode [ 444.157650][T11174] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 445.007294][T11198] FAULT_INJECTION: forcing a failure. [ 445.007294][T11198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.154429][T11198] CPU: 1 UID: 0 PID: 11198 Comm: syz.2.1173 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 445.154481][T11198] Tainted: [U]=USER [ 445.154491][T11198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 445.154509][T11198] Call Trace: [ 445.154519][T11198] [ 445.154531][T11198] dump_stack_lvl+0x16c/0x1f0 [ 445.154575][T11198] should_fail_ex+0x512/0x640 [ 445.154632][T11198] _copy_from_user+0x2e/0xd0 [ 445.154682][T11198] __x64_sys_epoll_ctl+0x131/0x1e0 [ 445.154731][T11198] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 445.154775][T11198] ? rcu_is_watching+0x12/0xc0 [ 445.154815][T11198] do_syscall_64+0xcd/0x230 [ 445.154858][T11198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.154890][T11198] RIP: 0033:0x7f2a35f8e969 [ 445.154915][T11198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.154945][T11198] RSP: 002b:00007f2a36dcd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 445.154975][T11198] RAX: ffffffffffffffda RBX: 00007f2a361b5fa0 RCX: 00007f2a35f8e969 [ 445.154997][T11198] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 445.155016][T11198] RBP: 00007f2a36dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 445.155036][T11198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.155055][T11198] R13: 0000000000000000 R14: 00007f2a361b5fa0 R15: 00007ffc21e8cb78 [ 445.155095][T11198] [ 445.311022][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.320919][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.332200][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.459210][T11180] Invalid ELF header magic: != ELF [ 447.386773][T11247] FAULT_INJECTION: forcing a failure. [ 447.386773][T11247] name failslab, interval 1, probability 0, space 0, times 0 [ 447.436309][T11247] CPU: 1 UID: 0 PID: 11247 Comm: syz.2.1184 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 447.436349][T11247] Tainted: [U]=USER [ 447.436356][T11247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 447.436370][T11247] Call Trace: [ 447.436377][T11247] [ 447.436386][T11247] dump_stack_lvl+0x16c/0x1f0 [ 447.436419][T11247] should_fail_ex+0x512/0x640 [ 447.436449][T11247] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 447.436478][T11247] should_failslab+0xc2/0x120 [ 447.436505][T11247] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 447.436531][T11247] ? do_epoll_ctl+0x1158/0x3590 [ 447.436568][T11247] do_epoll_ctl+0x1158/0x3590 [ 447.436599][T11247] ? vfs_write+0x316/0x1180 [ 447.436618][T11247] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 447.436660][T11247] ? __pfx_do_epoll_ctl+0x10/0x10 [ 447.436690][T11247] ? find_held_lock+0x2b/0x80 [ 447.436710][T11247] ? __might_fault+0xe3/0x190 [ 447.436734][T11247] ? __might_fault+0xe3/0x190 [ 447.436770][T11247] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 447.436801][T11247] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 447.436835][T11247] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 447.436866][T11247] ? rcu_is_watching+0x12/0xc0 [ 447.436894][T11247] do_syscall_64+0xcd/0x230 [ 447.436925][T11247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.436953][T11247] RIP: 0033:0x7f2a35f8e969 [ 447.436972][T11247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.436994][T11247] RSP: 002b:00007f2a36dcd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 447.437015][T11247] RAX: ffffffffffffffda RBX: 00007f2a361b5fa0 RCX: 00007f2a35f8e969 [ 447.437031][T11247] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 447.437044][T11247] RBP: 00007f2a36dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 447.437058][T11247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.437072][T11247] R13: 0000000000000000 R14: 00007f2a361b5fa0 R15: 00007ffc21e8cb78 [ 447.437100][T11247] [ 447.645722][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.181854][T11236] tipc: can't start tipc receive workqueue [ 451.301397][T11298] FAULT_INJECTION: forcing a failure. [ 451.301397][T11298] name failslab, interval 1, probability 0, space 0, times 0 [ 451.351157][T11298] CPU: 1 UID: 0 PID: 11298 Comm: syz.4.1193 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 451.351212][T11298] Tainted: [U]=USER [ 451.351222][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 451.351239][T11298] Call Trace: [ 451.351249][T11298] [ 451.351260][T11298] dump_stack_lvl+0x16c/0x1f0 [ 451.351301][T11298] should_fail_ex+0x512/0x640 [ 451.351340][T11298] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 451.351375][T11298] should_failslab+0xc2/0x120 [ 451.351409][T11298] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 451.351442][T11298] ? do_epoll_ctl+0x22ea/0x3590 [ 451.351489][T11298] do_epoll_ctl+0x22ea/0x3590 [ 451.351546][T11298] ? __pfx_do_epoll_ctl+0x10/0x10 [ 451.351585][T11298] ? find_held_lock+0x2b/0x80 [ 451.351611][T11298] ? __might_fault+0xe3/0x190 [ 451.351642][T11298] ? __might_fault+0xe3/0x190 [ 451.351691][T11298] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 451.351733][T11298] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 451.351780][T11298] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 451.351824][T11298] ? rcu_is_watching+0x12/0xc0 [ 451.351874][T11298] do_syscall_64+0xcd/0x230 [ 451.351917][T11298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.351948][T11298] RIP: 0033:0x7f420a78e969 [ 451.351972][T11298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.352003][T11298] RSP: 002b:00007f420b5a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 451.352033][T11298] RAX: ffffffffffffffda RBX: 00007f420a9b5fa0 RCX: 00007f420a78e969 [ 451.352054][T11298] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 451.352073][T11298] RBP: 00007f420b5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 451.352092][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.352111][T11298] R13: 0000000000000000 R14: 00007f420a9b5fa0 R15: 00007ffd88e991e8 [ 451.352152][T11298] [ 452.355393][T11314] __nla_validate_parse: 59 callbacks suppressed [ 452.355421][T11314] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1197'. [ 452.462388][T11312] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1197'. [ 453.150501][T11325] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 453.218006][T11325] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 453.342173][T11325] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 453.427946][T11325] raw: 0000000000000000 0000000000000000 0000000200000000 0000000000000000 [ 453.462380][T11326] could not allocate digest TFM handle binfmt_misc [ 453.486887][T11325] page dumped because: unmovable page [ 453.519517][T11325] page_owner tracks the page as allocated [ 453.544656][T11325] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5824, tgid 5824 (syz-executor), ts 95810662067, free_ts 92484244699 [ 453.589039][T11325] post_alloc_hook+0x181/0x1b0 [ 453.609702][T11325] get_page_from_freelist+0x135c/0x3920 [ 453.683560][T11325] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 453.689595][T11325] alloc_pages_mpol+0x1fb/0x550 [ 453.780046][T11325] alloc_pages_noprof+0x131/0x390 [ 453.787818][T11325] __vmalloc_node_range_noprof+0x732/0x1540 [ 453.840325][T11325] vmalloc_user_noprof+0x6b/0x90 [ 453.902347][T11325] kcov_ioctl+0x4c/0x730 [ 453.906692][T11325] __x64_sys_ioctl+0x190/0x200 [ 454.031667][T11325] do_syscall_64+0xcd/0x230 [ 454.036273][T11325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.084770][T11325] page last free pid 5817 tgid 5817 stack trace: [ 454.091185][T11325] __free_frozen_pages+0x69d/0xff0 [ 454.138255][T11325] vfree+0x176/0x960 [ 454.176704][T11325] kcov_close+0x34/0x60 [ 454.182664][T11325] __fput+0x3ff/0xb70 [ 454.186729][T11325] fput_close_sync+0x15e/0x1e0 [ 454.191562][T11325] __x64_sys_close+0x8b/0x120 [ 454.340111][T11325] do_syscall_64+0xcd/0x230 [ 454.345377][T11325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.325715][T11349] FAULT_INJECTION: forcing a failure. [ 455.325715][T11349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.381957][T11349] CPU: 0 UID: 0 PID: 11349 Comm: syz.2.1203 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 455.382010][T11349] Tainted: [U]=USER [ 455.382020][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 455.382038][T11349] Call Trace: [ 455.382049][T11349] [ 455.382061][T11349] dump_stack_lvl+0x16c/0x1f0 [ 455.382104][T11349] should_fail_ex+0x512/0x640 [ 455.382153][T11349] _copy_to_user+0x32/0xd0 [ 455.382202][T11349] simple_read_from_buffer+0xcb/0x170 [ 455.382250][T11349] proc_fail_nth_read+0x197/0x270 [ 455.382294][T11349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.382341][T11349] ? rw_verify_area+0xcf/0x680 [ 455.382385][T11349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.382430][T11349] vfs_read+0x1de/0xc70 [ 455.382466][T11349] ? __pfx_vfs_read+0x10/0x10 [ 455.382496][T11349] ? __pfx_do_epoll_ctl+0x10/0x10 [ 455.382548][T11349] ? find_held_lock+0x2b/0x80 [ 455.382576][T11349] ? __might_fault+0xe3/0x190 [ 455.382610][T11349] ? __might_fault+0xe3/0x190 [ 455.382642][T11349] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 455.382701][T11349] ksys_read+0x12a/0x240 [ 455.382730][T11349] ? __pfx_ksys_read+0x10/0x10 [ 455.382757][T11349] ? rcu_is_watching+0x12/0xc0 [ 455.382797][T11349] do_syscall_64+0xcd/0x230 [ 455.382839][T11349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.382871][T11349] RIP: 0033:0x7f2a35f8d37c [ 455.382896][T11349] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 455.382928][T11349] RSP: 002b:00007f2a36dcd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 455.382958][T11349] RAX: ffffffffffffffda RBX: 00007f2a361b5fa0 RCX: 00007f2a35f8d37c [ 455.382985][T11349] RDX: 000000000000000f RSI: 00007f2a36dcd0a0 RDI: 0000000000000002 [ 455.383005][T11349] RBP: 00007f2a36dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 455.383024][T11349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.383043][T11349] R13: 0000000000000000 R14: 00007f2a361b5fa0 R15: 00007ffc21e8cb78 [ 455.383084][T11349] [ 455.750031][T11350] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input27 [ 455.872474][ T5187] ERROR: Out of memory at tomoyo_memory_ok. [ 457.313020][T11371] netlink: 93 bytes leftover after parsing attributes in process `syz.7.1208'. [ 457.373285][T11369] netlink: 93 bytes leftover after parsing attributes in process `syz.7.1208'. [ 460.545113][ T31] INFO: task syz.1.760:9178 blocked for more than 143 seconds. [ 460.562359][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 460.591684][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 460.641755][ T31] task:syz.1.760 state:D stack:27784 pid:9178 tgid:9177 ppid:5833 task_flags:0x400140 flags:0x00000004 [ 460.741676][ T31] Call Trace: [ 460.745062][ T31] [ 460.748036][ T31] __schedule+0x116f/0x5de0 [ 460.781770][ T31] ? save_trace+0x4e/0x380 [ 460.789658][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 460.815931][ T31] ? __pfx___schedule+0x10/0x10 [ 460.820887][ T31] ? find_held_lock+0x2b/0x80 [ 460.861796][ T31] ? schedule+0x2d7/0x3a0 [ 460.866233][ T31] schedule+0xe7/0x3a0 [ 460.870352][ T31] schedule_preempt_disabled+0x13/0x30 [ 460.913854][ T31] __mutex_lock+0x6c7/0xb90 [ 460.918467][ T31] ? expkey_flush+0x20/0x90 [ 460.961695][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 460.966861][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 460.992303][ T31] ? _raw_spin_unlock+0x28/0x50 [ 460.997273][ T31] ? __pfx_cache_clean+0x10/0x10 [ 461.031711][ T31] ? __pfx___might_resched+0x10/0x10 [ 461.041995][ T31] ? __pfx_expkey_flush+0x10/0x10 [ 461.047139][ T31] ? expkey_flush+0x20/0x90 [ 461.081682][ T31] expkey_flush+0x20/0x90 [ 461.104986][ T31] write_flush.constprop.0+0x2d3/0x3f0 [ 461.141350][ T31] ? __pfx_write_flush.constprop.0+0x10/0x10 [ 461.151646][ T31] ? iovec_from_user+0xbb/0x140 [ 461.156603][ T31] ? __pfx_write_flush_procfs+0x10/0x10 [ 461.201689][ T31] proc_reg_write+0x23d/0x330 [ 461.211973][ T31] ? __pfx_proc_reg_write+0x10/0x10 [ 461.217362][ T31] vfs_writev+0x6c4/0xdc0 [ 461.271648][ T31] ? __pfx___mutex_trylock_common+0x10/0x10 [ 461.277675][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 461.321689][ T31] ? __mutex_lock+0x1ca/0xb90 [ 461.326477][ T31] ? kmem_cache_free+0x2d4/0x4d0 [ 461.331476][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 461.381709][ T31] ? __fget_files+0x20e/0x3c0 [ 461.386680][ T31] ? do_writev+0x132/0x330 [ 461.391159][ T31] do_writev+0x132/0x330 [ 461.421758][ T31] ? __pfx_do_writev+0x10/0x10 [ 461.426641][ T31] ? rcu_is_watching+0x12/0xc0 [ 461.431470][ T31] do_syscall_64+0xcd/0x230 [ 461.471743][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.477762][ T31] RIP: 0033:0x7f2e2f58e969 [ 461.514833][ T31] RSP: 002b:00007f2e3040b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 461.571653][ T31] RAX: ffffffffffffffda RBX: 00007f2e2f7b5fa0 RCX: 00007f2e2f58e969 [ 461.579723][ T31] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000004 [ 461.662041][ T31] RBP: 00007f2e2f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 461.670105][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.711666][ T31] R13: 0000000000000000 R14: 00007f2e2f7b5fa0 R15: 00007ffe095acd68 [ 461.719759][ T31] [ 461.761723][ T31] INFO: task syz.3.769:9223 blocked for more than 144 seconds. [ 461.769369][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 [ 461.804803][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.844354][ T31] task:syz.3.769 state:D stack:27784 pid:9223 tgid:9222 ppid:5834 task_flags:0x400140 flags:0x00000004 [ 461.856807][ T31] Call Trace: [ 461.860122][ T31] [ 461.863570][ T31] __schedule+0x116f/0x5de0 [ 461.868155][ T31] ? __pfx___schedule+0x10/0x10 [ 461.873573][ T31] ? find_held_lock+0x2b/0x80 [ 461.878305][ T31] ? schedule+0x2d7/0x3a0 [ 461.883167][ T31] schedule+0xe7/0x3a0 [ 461.887383][ T31] schedule_preempt_disabled+0x13/0x30 [ 461.893393][ T31] __mutex_lock+0x6c7/0xb90 [ 461.897965][ T31] ? expkey_flush+0x20/0x90 [ 461.904276][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 461.909378][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 461.942482][ T31] ? _raw_spin_unlock+0x28/0x50 [ 461.947530][ T31] ? __pfx_cache_clean+0x10/0x10 [ 461.972441][ T31] ? __pfx___might_resched+0x10/0x10 [ 461.977818][ T31] ? __pfx_expkey_flush+0x10/0x10 [ 461.991688][ T31] ? expkey_flush+0x20/0x90 [ 461.996290][ T31] expkey_flush+0x20/0x90 [ 462.000698][ T31] write_flush.constprop.0+0x2d3/0x3f0 [ 462.048893][ T31] ? __pfx_write_flush.constprop.0+0x10/0x10 [ 462.055087][ T31] ? iovec_from_user+0xbb/0x140 [ 462.060026][ T31] ? __pfx_write_flush_procfs+0x10/0x10 [ 462.065846][ T31] proc_reg_write+0x23d/0x330 [ 462.070585][ T31] ? __pfx_proc_reg_write+0x10/0x10 [ 462.075922][ T31] vfs_writev+0x6c4/0xdc0 [ 462.080327][ T31] ? __pfx___mutex_trylock_common+0x10/0x10 [ 462.088465][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 462.093735][ T31] ? __mutex_lock+0x1ca/0xb90 [ 462.098473][ T31] ? kmem_cache_free+0x2d4/0x4d0 [ 462.103926][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 462.109042][ T31] ? __fget_files+0x20e/0x3c0 [ 462.114471][ T31] ? do_writev+0x132/0x330 [ 462.120756][ T31] do_writev+0x132/0x330 [ 462.141069][ T31] ? __pfx_do_writev+0x10/0x10 [ 462.158563][ T31] ? rcu_is_watching+0x12/0xc0 [ 462.165790][ T31] do_syscall_64+0xcd/0x230 [ 462.170379][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.181701][ T31] RIP: 0033:0x7f683bb8e969 [ 462.186176][ T31] RSP: 002b:00007f683c9df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 462.195339][ T31] RAX: ffffffffffffffda RBX: 00007f683bdb5fa0 RCX: 00007f683bb8e969 [ 462.204066][ T31] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000004 [ 462.212407][ T31] RBP: 00007f683bc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 462.222824][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.230851][ T31] R13: 0000000000000000 R14: 00007f683bdb5fa0 R15: 00007fffc3757b78 [ 462.247748][ T31] [ 462.250882][ T31] INFO: task syz.0.777:9264 blocked for more than 145 seconds. [ 462.273053][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 [ 462.282655][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.291357][ T31] task:syz.0.777 state:D stack:25192 pid:9264 tgid:9263 ppid:5826 task_flags:0x400040 flags:0x00000004 [ 462.340959][ T31] Call Trace: [ 462.347869][ T31] [ 462.350868][ T31] __schedule+0x116f/0x5de0 [ 462.360956][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 462.366438][ T31] ? __pfx___schedule+0x10/0x10 [ 462.371447][ T31] ? find_held_lock+0x2b/0x80 [ 462.376714][ T31] ? schedule+0x2d7/0x3a0 [ 462.381108][ T31] schedule+0xe7/0x3a0 [ 462.385867][ T31] schedule_preempt_disabled+0x13/0x30 [ 462.391391][ T31] __mutex_lock+0x6c7/0xb90 [ 462.396523][ T31] ? nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 462.403354][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 462.408447][ T31] ? skb_put+0x138/0x1b0 [ 462.413208][ T31] ? genlmsg_put+0x258/0x2d0 [ 462.417874][ T31] ? nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 462.427920][ T31] nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 462.433856][ T31] ? kasan_quarantine_put+0x10a/0x240 [ 462.439368][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 462.445983][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 462.458406][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 462.480124][ T31] genl_family_rcv_msg_doit+0x206/0x2f0 [ 462.486975][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 462.500993][ T31] ? consume_skb+0xcc/0x100 [ 462.506057][ T31] ? genl_get_cmd+0x194/0x580 [ 462.510812][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 462.528765][ T31] ? __dev_queue_xmit+0x896/0x43e0 [ 462.541561][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 462.561789][ T31] genl_rcv_msg+0x55c/0x800 [ 462.566478][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.571549][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 462.588773][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 462.595033][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 462.600251][ T31] netlink_rcv_skb+0x16a/0x440 [ 462.605171][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.610444][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.615901][ T31] ? __pfx_down_read+0x10/0x10 [ 462.620903][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 462.626291][ T31] genl_rcv+0x28/0x40 [ 462.631818][ T31] netlink_unicast+0x53a/0x7f0 [ 462.636750][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 462.642210][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 462.647208][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 462.652074][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.657408][ T31] ____sys_sendmsg+0xa95/0xc70 [ 462.662325][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 462.667868][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.673276][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 462.679130][ T31] ___sys_sendmsg+0x134/0x1d0 [ 462.685305][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.690604][ T31] __sys_sendmsg+0x16d/0x220 [ 462.695480][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 462.701802][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 462.706833][ T31] do_syscall_64+0xcd/0x230 [ 462.711392][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.717364][ T31] RIP: 0033:0x7f226158e969 [ 462.721853][ T31] RSP: 002b:00007f2262410038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.731983][ T31] RAX: ffffffffffffffda RBX: 00007f22617b5fa0 RCX: 00007f226158e969 [ 462.740010][ T31] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 462.748064][ T31] RBP: 00007f2261610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 462.756114][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.764187][ T31] R13: 0000000000000000 R14: 00007f22617b5fa0 R15: 00007ffdb2f9cb28 [ 462.772255][ T31] [ 462.775383][ T31] [ 462.775383][ T31] Showing all locks held in the system: [ 462.809300][ T31] 1 lock held by khungtaskd/31: [ 462.831716][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 462.863172][ T31] 3 locks held by kworker/1:4/5867: [ 462.868449][ T31] 2 locks held by kworker/0:5/5895: [ 462.881660][ T31] #0: ffff88801b480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 462.911719][ T31] #1: ffffc9000495fd18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 462.939171][ T31] 2 locks held by syz.2.753/9147: [ 462.969152][ T31] #0: ffffffff901c7110 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 462.999602][ T31] #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xdd/0x1a40 [ 463.053456][ T31] 3 locks held by syz.1.760/9178: [ 463.058551][ T31] #0: ffff88807f50b278 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 463.092963][ T31] #1: ffff88807ca78420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x132/0x330 [ 463.121196][ T31] #2: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x20/0x90 [ 463.151737][ T31] 3 locks held by syz.3.769/9223: [ 463.156825][ T31] #0: ffff88802fa86ef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 463.182303][ T31] #1: ffff888027bf0420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x132/0x330 [ 463.191334][ T31] #2: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x20/0x90 [ 463.201417][ T31] 2 locks held by syz.0.777/9264: [ 463.206964][ T31] #0: ffffffff901c7110 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 463.215276][ T31] #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 463.225445][ T31] 3 locks held by syz-executor/9315: [ 463.230765][ T31] #0: ffff8880262e4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 463.240509][ T31] #1: ffff8880262e4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 463.269787][ T31] #2: ffffffff8e3ca978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 463.289184][ T31] 2 locks held by syz-executor/9378: [ 463.294609][ T31] #0: ffff888058d140e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 463.305589][ T31] #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.315505][ T31] 2 locks held by syz.5.799/9442: [ 463.320569][ T31] #0: ffffffff901c7110 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 463.328944][ T31] #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xdd/0x1a40 [ 463.339269][ T31] 2 locks held by syz-executor/9661: [ 463.355436][ T31] #0: ffff8880642a60e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 463.366008][ T31] #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.375910][ T31] 2 locks held by getty/9742: [ 463.380628][ T31] #0: ffff88803552a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 463.390585][ T31] #1: ffffc90003b712f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 463.400885][ T31] 2 locks held by syz-executor/10230: [ 463.406335][ T31] #0: ffff88807ee9c0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 463.416791][ T31] #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.427262][ T31] 4 locks held by kworker/u8:33/10690: [ 463.433117][ T31] #0: ffff8880b8439f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 463.443226][ T31] #1: ffff8880b8423c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 463.458130][ T31] #2: ffff888077ca0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x99/0x550 [ 463.468410][ T31] #3: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xdc/0x420 [ 463.478840][ T31] 3 locks held by syz.4.1195/11306: [ 463.484149][ T31] #0: ffff88802f91cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 463.493923][ T31] #1: ffff88802f91c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 463.504164][ T31] #2: ffffffff8e3ca978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 463.514364][ T31] 4 locks held by syz.2.1221/11422: [ 463.519682][ T31] #0: ffff88807c8bcd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 463.529363][ T31] #1: ffff88807c8bc078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 463.539361][ T31] #2: ffffffff90394148 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 463.554156][ T31] #3: ffff88807d940338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 463.569286][ T31] [ 463.605900][ T31] ============================================= [ 463.605900][ T31] [ 463.623199][ T31] NMI backtrace for cpu 0 [ 463.623223][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 463.623264][ T31] Tainted: [U]=USER [ 463.623273][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 463.623290][ T31] Call Trace: [ 463.623299][ T31] [ 463.623310][ T31] dump_stack_lvl+0x116/0x1f0 [ 463.623349][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 463.623393][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 463.623425][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 463.623469][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 463.623519][ T31] watchdog+0xf70/0x12c0 [ 463.623563][ T31] ? __pfx_watchdog+0x10/0x10 [ 463.623597][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 463.623633][ T31] ? __kthread_parkme+0x19e/0x250 [ 463.623669][ T31] ? __pfx_watchdog+0x10/0x10 [ 463.623704][ T31] kthread+0x3c2/0x780 [ 463.623744][ T31] ? __pfx_kthread+0x10/0x10 [ 463.623782][ T31] ? __pfx_kthread+0x10/0x10 [ 463.623819][ T31] ? __pfx_kthread+0x10/0x10 [ 463.623856][ T31] ? __pfx_kthread+0x10/0x10 [ 463.623900][ T31] ? rcu_is_watching+0x12/0xc0 [ 463.623927][ T31] ? __pfx_kthread+0x10/0x10 [ 463.623967][ T31] ret_from_fork+0x45/0x80 [ 463.624010][ T31] ? __pfx_kthread+0x10/0x10 [ 463.624049][ T31] ret_from_fork_asm+0x1a/0x30 [ 463.624106][ T31] [ 463.624116][ T31] Sending NMI from CPU 0 to CPUs 1: [ 463.772426][ C1] NMI backtrace for cpu 1 [ 463.772448][ C1] CPU: 1 UID: 0 PID: 10089 Comm: kworker/u8:18 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 463.772487][ C1] Tainted: [U]=USER [ 463.772495][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 463.772512][ C1] Workqueue: bat_events batadv_nc_worker [ 463.772540][ C1] RIP: 0010:__local_bh_enable_ip+0x61/0x120 [ 463.772572][ C1] Code: 03 83 c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c3 00 00 00 8b 05 13 a9 08 0f 85 c0 74 0b 65 8b 05 fc b9 26 12 85 c0 74 57 9c <58> fa f6 c4 02 75 60 65 8b 05 91 7c 26 12 25 00 ff 00 00 3d 00 02 [ 463.772597][ C1] RSP: 0018:ffffc90004467a98 EFLAGS: 00000202 [ 463.772616][ C1] RAX: 0000000000000001 RBX: 0000000000000201 RCX: 1ffffffff210a792 [ 463.772632][ C1] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8b361df4 [ 463.772648][ C1] RBP: ffffffff8b361df4 R08: 0000000000000000 R09: ffffed100bdf6968 [ 463.772664][ C1] R10: ffff88805efb4b43 R11: 0000000000000000 R12: ffffffff8b3621a0 [ 463.772680][ C1] R13: ffff88805efb4b40 R14: ffff888065928d80 R15: 0000000000000000 [ 463.772696][ C1] FS: 0000000000000000(0000) GS:ffff888124aef000(0000) knlGS:0000000000000000 [ 463.772720][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.772737][ C1] CR2: 00007fd13d59c429 CR3: 000000000e180000 CR4: 00000000003526f0 [ 463.772753][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.772767][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.772782][ C1] Call Trace: [ 463.772789][ C1] [ 463.772799][ C1] batadv_nc_purge_paths+0x1d4/0x3a0 [ 463.772830][ C1] batadv_nc_worker+0x921/0x1030 [ 463.772856][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 463.772887][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 463.772916][ C1] ? rcu_is_watching+0x12/0xc0 [ 463.772941][ C1] process_one_work+0x9cc/0x1b70 [ 463.772985][ C1] ? __pfx_process_one_work+0x10/0x10 [ 463.773028][ C1] ? assign_work+0x1a0/0x250 [ 463.773063][ C1] worker_thread+0x6c8/0xf10 [ 463.773105][ C1] ? __kthread_parkme+0x19e/0x250 [ 463.773143][ C1] ? __pfx_worker_thread+0x10/0x10 [ 463.773180][ C1] kthread+0x3c2/0x780 [ 463.773226][ C1] ? __pfx_kthread+0x10/0x10 [ 463.773257][ C1] ? __pfx_kthread+0x10/0x10 [ 463.773288][ C1] ? __pfx_kthread+0x10/0x10 [ 463.773319][ C1] ? __pfx_kthread+0x10/0x10 [ 463.773350][ C1] ? rcu_is_watching+0x12/0xc0 [ 463.773371][ C1] ? __pfx_kthread+0x10/0x10 [ 463.773403][ C1] ret_from_fork+0x45/0x80 [ 463.773439][ C1] ? __pfx_kthread+0x10/0x10 [ 463.773472][ C1] ret_from_fork_asm+0x1a/0x30 [ 463.773513][ C1] [ 463.780977][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 464.047146][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 464.060551][ T31] Tainted: [U]=USER [ 464.064370][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 464.074443][ T31] Call Trace: [ 464.077738][ T31] [ 464.080683][ T31] dump_stack_lvl+0x3d/0x1f0 [ 464.085306][ T31] panic+0x71c/0x800 [ 464.089238][ T31] ? __pfx_panic+0x10/0x10 [ 464.093691][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 464.099101][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 464.105117][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 464.110528][ T31] ? watchdog+0xdda/0x12c0 [ 464.114969][ T31] ? watchdog+0xdcd/0x12c0 [ 464.119418][ T31] watchdog+0xdeb/0x12c0 [ 464.123701][ T31] ? __pfx_watchdog+0x10/0x10 [ 464.128402][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 464.133631][ T31] ? __kthread_parkme+0x19e/0x250 [ 464.138693][ T31] ? __pfx_watchdog+0x10/0x10 [ 464.143406][ T31] kthread+0x3c2/0x780 [ 464.147509][ T31] ? __pfx_kthread+0x10/0x10 [ 464.152128][ T31] ? __pfx_kthread+0x10/0x10 [ 464.156751][ T31] ? __pfx_kthread+0x10/0x10 [ 464.161461][ T31] ? __pfx_kthread+0x10/0x10 [ 464.166080][ T31] ? rcu_is_watching+0x12/0xc0 [ 464.170866][ T31] ? __pfx_kthread+0x10/0x10 [ 464.175490][ T31] ret_from_fork+0x45/0x80 [ 464.179975][ T31] ? __pfx_kthread+0x10/0x10 [ 464.184600][ T31] ret_from_fork_asm+0x1a/0x30 [ 464.189439][ T31] [ 464.192875][ T31] Kernel Offset: disabled [ 464.197228][ T31] Rebooting in 86400 seconds..