last executing test programs:

20m29.68059385s ago: executing program 1 (id=531):
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r0 = clone$auto(0x6db, 0x1, 0x0, 0x0, 0x7)
migrate_pages$auto(r0, 0x4, 0x0, &(0x7f0000000180)=0x2)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a000100000000000000000006000600050000000800", @ANYRES32=0x0, @ANYRESOCT=r0], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
r1 = socket(0x28, 0x1, 0x10000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
read$auto(r1, 0x0, 0x4008)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/vmstat\x00', 0x40000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000700)=""/4096, 0x1000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0)
r3 = socket(0x2b, 0x1, 0x0)
bind$auto(r3, &(0x7f0000000040)=@generic={0x26, "62ed47dc6a4e0d734de31a993580"}, 0x6a)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r4 = socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x23, 0x80805, 0x0)
memfd_secret$auto(0x0)
socket(0x2b, 0x1, 0x1)
sendmmsg$auto(r4, 0x0, 0x3, 0x20000000)
shutdown$auto(0x200000003, 0x2)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
setresuid$auto(0x8, 0x8, 0x0)
setfsuid$auto(0x0)
keyctl$auto(0x5, 0xffffffffffffffff, 0x0, 0x0, 0x20000000000006)

20m29.089764403s ago: executing program 1 (id=532):
pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\b\x00\x00\x00\x00\x00\x00\x00\x01\x88\v\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\b\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) (async)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, 0x0, 0x20000000)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20) (async)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xa82, 0x0)
writev$auto(r1, &(0x7f0000000600)={0x0, 0x7}, 0x3) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, 0x0, 0x0) (async)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2) (async)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r2) (async)
statx$auto(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1, 0x8ae, &(0x7f00000002c0)={0x7, 0x8, 0x10, 0x2110, <r4=>0xee00, 0x0, 0x8, 0x8, 0x1000, 0x9, 0x4, 0x1000, {0x2, 0x45538322}, {0x81, 0x9}, {0xfffffffffffffff7, 0x8}, {0x9606, 0x3}, 0xafd, 0x3, 0x61c9, 0x7, 0x8a5e, 0x0, 0x7, 0x3, 0x4, 0x7, 0x10001, 0x9, [0x1e5d, 0x3, 0x1b6c, 0x7, 0x8, 0xffff, 0x6, 0xb902, 0xee10]})
shmctl$auto_IPC_STAT(0x6, 0x2, &(0x7f0000000480)={{0x63d, <r5=>0x0, 0xee00, 0xffffffff, 0x0, 0x2, 0x2}, 0x7, 0x80000001, 0x8, 0xfffffffffffff4b3, @raw=0x2, @raw=0x4, 0x5, 0x0, &(0x7f00000003c0)="e27d0ca4b59a28b4aadcb54723a60d497224b3665068f89f34115fec268c909ffd5e88e547a3d4f541b3f82f938515ebf86b810b5aaefb03c2a2af39d20874e156762d3d0645251f1d7099", &(0x7f0000000440)="b64bdc2a3b7f6373fe47332a77a0b3e8d636a56113eed18cb825e33b1068d7aa45421b8c085a3bf902ffcdb7848794894ccf25b7dbfd642f"}) (async)
r6 = setfsuid$auto(0x0)
r7 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0)
ioctl$auto_RTC_UIE_ON(r7, 0x7003, 0x0)
ioctl$auto_RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000000)={0x3, 0x3, {0x5, 0x4, 0x9, 0x7, 0x5, 0x3a50, 0xfffffffd, 0xffff, 0xfd}}) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
keyctl$auto_KEYCTL_PKEY_QUERY(0x18, r6, 0x0, 0x0, 0x6)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000001200)={0x1508, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xfc, 0x1, 0x0, 0x1, [@nested={0xed, 0xd0, 0x0, 0x1, [@generic="17c8e5d856116134781212ddb0020f048e899bd19cea76c3a18bfb4d053b6d30325628659240c0e3ad1b6228aa50b25c8112114f9423fa9c826fb2042988b6e907ecefb6d6e8df0918aac30f498e296fca0706d5f915ea29931d19f82f5f5dc34881278e4bd209b75adcdbe655cf1bff7f44057ddddc2d3689462fe86676a49f41bce5383d8d86748393d86651757878d4287a17696101503169572db1a4064a84355ec514da99191eb9f725c32ec86999a2308894f3acb216", @typed={0xc, 0x11d, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x128, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0xa7}, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0xed, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x12e}, @nested={0x4, 0xd5}]}, @typed={0x8, 0x12a, 0x0, 0x0, @u32=0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x118d, 0x3, 0x0, 0x1, [@generic="f4c7f796ef2105beca06fa782eebfbea6119408da60d4f74faea5d732e599af63ba86efc3298dcdc0ad3fb5875c234def3df5fbefa5ac62e5f396e490993d462ee468ae6c2d7a8951e96ff2798792363ab41fdebd712f3e0a236f7b4ea69404527e3832431d86b61ad97ed778e2f5c122fbb2c0d7c99a6bd02c5c64b50414c4a79e883b9ce48dbe3f8bedf6d789ed086f961daefd53f8e8aa7bcf2a3599c6331c8c95af2", @generic="83c80cb136ef6b6428f9e29ebb5865f9f5cc7bb15cb73ccfe46d8e8df2ddce710a357b9d3faf73ce02a1d224276e5e30f783b43378dc14d2c47546da4777dcef143e5ffbb92dd4e6645a3c3a464a1cc2b0952012e7b90704ed47f31804bff50364e8228d0bef0479daa8bafd6bfdb3476ec34f90777e438b4949489009d0ec0e591799b05407fb61d845fc67f35f2681d9f023cf977a505be1df46a6291ee7dc1234cdc33369e1cb1bf1a3c4a86bd4350beef166387d5df0a8a2d7623ef66eaa674830799095c9dc04dccd04b9cc95d02c7f550a9fa7de99a0a051cc10100a6ce4de4793ecef81d86a6fce6a9a7eb74b0eba7506a6345a3701335015f2463372127d321ea5fa98d756fd161253545499d161f70db7233794197e0d494d388349a5c2e86d95e5b93490d9db8acd1666ea54024d252010b5292a5fb3cb367e6ebebc00c1982b3ccc20b6e72ac3eacf7811235f24d9efa581a44eebac349def0d7fe6344033476b193e34b625f64d5cab7087dd64a3387058031b763b35afe9ddc1a6d7c1f14b44dc470bd17d0f40fc1456b6203be19ac44c9d82b35c537c09a3fc4d67b6d467eb5781dc91b89920bcbc0dfa696677b9e33b86bfe2e839b3c971920012e8699424794751c1e265094b45e3a551a5a3a8ea2fc018ac4ac93652a972dbff7bad8061dcbc8c800010c76ad638cb1e4c919c80c3e3c7b1fab42d72264c69a4ba9c9e1f57bee243313cec053914144875e7080e3bdefe39803a442bbfb547684e6f9ce6804ac3d5ab1ac6e7df404c6b8933bdd73204ad785d945915f14ae313e2bb9ebfe13b238c39a3a1750cf96679f264f1c79ffde87f411dcf80cdfbda30115ac85b09a99d3189678c02e9024c62e59dea843afeabc24418d31cceb6a5027ba452ac3e5ba5ed9b62a40d1ad5445a0a3acd5f17a1bc51abc4861cec2895161cf50e6faab0f8beeda39e99cb53916d799d8d6fef44c9d0a9bc5916bf21f51df77267be5d152f7ae054366611df554fa25fe8d8afc3909952ec36f55a9efb3e02f9aaa44b080514143e295dd48262fece1328d0bcbd9bd327292fae47e96d99e180fa7e4bdfd56a75a22001a8323a5b0af21afc0f0060baa66f325bafa15d44c2067cd2eb3fbacc3e3a07d9fceb359c72ed167a8020eb15a1bb2bd053c31f93fe75223eb09d737be3f81210600005581a88f0f9f6e26f73a22cead5e71e769897975f8a9ef6fbff929471231a9e5dd13dc97effef2228aa7bd79f0f4c8ec534cf7b82a3b8cad8864c112e3a0723b8f3289cb507d669ba58b9d2e113ccd7d605f236769980cd89e7159694fe2e1088b9ef0b9a9013f99ba5f38b92ac19b287d2a1c109a7ad24fbeec6f719048746fe5ac02fe3c0c2788c6baf8f3e1427b7b61740eda4c51fba950ea892e94b4c10bf361f9dbef741cebb61689147cc5a21e919d236fe7f52994e536c47e5ebbc4252d4119b6335050bc1bea3296c9194a84422c59f16934361c24320afba773e54f303e86af0ac9203ec0596758db04cd7ebb14af24ff3370ca0eb26682601091fe26c249bf5e522774e6e30106b395ccaa4bff4b9a847b7d926a0b08e3124eafc67eb7fa0a69b699d307c39d6c031d96106ab40d9b0fe4ab3f7d3c542be7f5098fa4e678d52b5a76643351ba5271f84ea369bafc65b9643f9f6f4fc5a47ee0c3250c86ae4fd1697694dca05e41761fa08409914b766a439b12b250c7f8e7baf65146d6f8b4543a559e63f069a13e7ba2d497afe12dc211b676628ce549d58e96c12c1520e4dbb66dc0b41d32fafd674e227db2c2e0c69a73a8da805062a1320ec8f62b760a5eec41b69f810c55ea40cb25f4946785ac14b3485a212da907d71e9f8e781ad77c657d3fa143056a514163992f5fd920f3cb497180144bfd26132aed6bac473c30bb1d2dfc71455176eea76b9c3ec1e1941c4f7e1c4115111136b9726afb20eb5b8481894cc0fe2eae0c5474129f1fc7292db24696eb741b0bc1d0ffe79985753301f35c8998ff01312426f2bf8c489cc02521be1262d2db58820894250239fbf5279b26d9820e7302f0d82cbe760ca6f9c0c9368df5f760731ff57da7d6393b756c6625ca7fcac8fda0a749ae3e8f22efe0e7de0335035d51a0a73207116b31ab28bd6c01ffaaf676a2fbf7205f8c8a7ce89efc320d7682edde7fc9b16e7c7be206343df803397b243c5a7bf3023c0075312bf0a30ef29cae5ea0b0c1f7929391d39d89f353250eeb735280139d425729680ece2a3a71aa2f225d670b293bb8a500a70f980928c8c2d821cc8a9f0c3f216a4ff264b0ff940d3b03d4bca5f50531e4c86b585ee7de3a5bcb0baeb4ec9a2f8190a5cb47cca5a2835b84a2994e2a90496c72affe344f2fc9408c0496ce74b8b3cbf21ee01b6f21c3224dc4f94ba6fee79a189123798671252c4493609cbe7772b9f531d27510b1a2c746e4a880765d93a3c10a1b51fa8e19306031b5713920209be3621e9bb2be07304c302713ba7d66452b3fbd878555904410ecf37714a5dab81cbbd7a429e739d7f88dde9f6de3f37d7bac805eec929e62796b0ce4e6bf8d18e68ec00c21361a9d9152ebb6904adacf9ff11cb0211851234850b32554b55859f006e89cfa9d82448ea534722e1d9738b2eb5d256f116d44cb19de0a025318b9718fe87bc9fac19117e7f0a95b1b7320ef736116d9e4c860f879143ba119e53d228c85f7efb558fb4973c98c68ffacc141e8d0b21df7062c8ae48bca31e5e9caec86ebfb6a525ab6ac284bc30f3fc5d1b8735431824dd93ebe8c86eadfb34e65b669a6449acd2aa7974fb45bf832f8fbf6c62ff1132d0626d9d6047fa9a40fda4aac7e366dcc5f0927f9c73ab43b138d257c511fccd6e509efd878c3d3df9f24679e1298e0075e34691326ff7c4c310181aeca4aa71abf66867e8a75992ebd39fb61a3f0c20c981c0a5f94386a4325a2d3565988f9c1ed643bdfd21ea67132b8d2c5046a01d1cf832a59bbe4c08d72b46bffa1df13ad897974de21ceff06bc936ac061d0134d813706399649ec088746b184c963a006454d842a23f11e8c4773c3fe760db528957932f01bb7dd74b76f3085a194e36307d91ee6b610b5d0fe7aeb7c6a7ad140446d37a420346f429ce962f5bfa4be328417314b248af4698fc8467962f84ecd41bdeb64819c1cc48bb9ce1541847ef68826464c2c4e8b79d39eb74e82d59396889ac973242f0fe300827a38d0cd66270ceb0dceb84be367f7159c1597b041900932cee9141fb2cb79b7c58b07a90a1533a2c7d9bfe566fef636336413eafc49e1f65b2eff00d32cd27e3416c3ae7edb4cf84dbfd0dd689aef0904f1f21c470102399452e39c9c1cb65de8805c89bfa215d0702dd0d08aab359f703393cbc65d758207437d8fb2f274283ffb1f4e72a1b00aa2132e7cf979216dd57180eaa9caa3e6907fe0b44be95bd764d0ae9726065bddd9e615707d25ceb7761912ac2265a7867e4368d43e4d09b15648a1c98c4e851f8705be228787fc0e795b71899f8fd3ac0f31e48f96778a7f3bb7804ced173e4a370fa022a60201be36540d2139c7e1d1aa0fd8953e283b158787f090cca9c3038f553d6614f9bdfd1956344b1fb0dda9035981b77ba949bf98f04729fe1acec7cf55d3f3d3012130117bcfa26634bccae28c35b8285feafcfc535527080260bbdc5fae98a4d3071d2aa24d216addd464f204ea85087c1804856611bef32c0af2121d26b76c3b312dfc0b293c810dd68ef3a71d5d1ccbacc73e3a8e3ae675c3fbf091c906be602c6f99e3fbe15b1abdba5a464b88b01f1bf4c43f0a8abc872edfc6729e87357ea22e9c794aa078e599862785dae5fdefea3aa717f83649bbdf1c64a01267eaead06471b828b5171d759b591d4f9a2b0edebd9332bf118fe4cd67c63333031bedeb5e6db1c545757290613a42c78da75d713233e7e8e08441a100c850208e663c932691e202d1d11116fab7af89aca8a1d310e2c90af27da3d81ef437d486210b6180290be895f74fd8ba3c40e1f0c85ebaff4552f04e98fe6b03171ecab121fbeea24b7f38f8cd90ad3a3f008ebe8ba56571560b7fa35867b8e223ba40dded0f91a41a2d16534efc5ed9db262cd972e5e2f6a903a43351b4a0ae68b38c844c12f1d02b42158a84c87c1f2aef929c3380ee60765d927acca802fb7a2b13b413af2820f6b64b418bbec0c332aa0f2a93fbdc8abee8f2fa428eb619b408665581338f5a6e3ae3be83bf4de66fd22fc56a5f13106f91069b66c71827ae778a39134c7ca42f142d68dc23db6dd7a6f77efc67b5503f1c58eb5bc1506a474fc334a36614f75b56941b463bd82f5421346ecb6fedf96f33ab9f1066209df065c21124a4b04c6c6442aa72414fd740d8c77afdbb7aad47b948c5ad258a0fb9dc7387f2ca0cf14352743a168ac00502ffa408e96d11662a4c1ff59280a42c8f7c66a3a839927ed78a468f643610cc4bb561bc7736bf2a946147147e1db42e2faf29ffeaa415f46278a61a780e8f932a9e6bb4d4271fee3380791d8ce584487ec988477f3a9e0912b38efd48a10d050064b01c203ba3bd8708653e6d96a0d2e059617b55d519d885e8258408291db9c0d15573212dfabd84fc75ca3447bb3e7828e8ee3596beacf45b7261b62481726dfa004a583f4140e3299ed9f00b0391e0763e2ced9e9651d979bcc1c0f55787e02225b1248da0bc0f538cddd725583ccf66991f59abc45fb197f8c2ac960189bb300fed2ff352438f2b75d28f4fb9060a73ebd368d909d85f0d0ece484d86b452815a1ae5740c40e93c43087bb78b8865337e0a357c83a3483d1df106a97b5bcc19190f457b5a8547d27cc4233c450504103b92c7e8b6e8268cf73e5446c7e06f01aff25ea5935b4762c74f08e311a6a1f55f8da0c2c95b6d6c7936be3a2fb348fd7813ecd4abf4148266e765018330bf4132ad2bb1dfbddaad5bb42acc608c090d32e45138dbc2dc3a1b7748b8c7866d4d55919612fe260f9a76fa92a066d62e0ab51c6f13f7250a86c63f09c9200bad71ae13e9805037f72e6b1a98b0de463bff90d218ca29453acc640f50771f0b805677b6e4a3d81ef6f302109d150bb80eff3bf37e6cbc33f0b8236f99c4bdbff135791339aca78167ac9452065aad90bcf1f2d84b1e3938e4a7e86a8f98a7de0415b60d80fa6b67977d47993443d6dfb9a992496a2375f2e6f3cc3e5737476bc19e3a4db405c7c6f99a8cef15730395edcb9b394e3295fea17f52a453de4681ccd28992bc6b96e6bdcb9cddc9d8e82496460e38fab228f3a77d621bc75256bf3faf91105d8f53837e5b11cb1d75cdcef6210db9d3daec742f11b1c9c1eefa803b230d1d98772d4e4b82449385d84bf214c8f229b8b60121a688b803e026e8d59fb64234470d2d09e899840ed016ce20605d9dde5f9d3de7306c5cd8b14983beafad6ae6a73292bf2d60507c386e30dfdcd5d9a8d4ef615d0b7ccd3668484373d0e7dd618a2d09a08f6319e9842b372bb9f18fd1428aed8aaaf686846d19fc8e06eb2ee076d16002a2a179a96fe72097f039d6da8b21b67abb245b1ebe8c70963642b8ebe53e83278aefc678d468b0f2abc17b5a41065946e27f6d0c2ece791e19c9aef412581ae4fba03d9ae1ea92990326fd7f16c8ac7012f0c4088545615d58145043b57e657120c56e68c532be22c848bee69ba8149b65fb1f3507628ac1ef31b3c5a28ac303012650161099df5981db156bc32bd274a102c15d76977eedf", @generic="2fc82016e9e2fbf663e1fda31c317ca3f18f301318c5f70e91063577d61a2fab9902f5b08849c1087a511c59ccbd281cc2f72f56ee948e7a9250fe49e2d22776fbbc30560e772675fd6cf1e718e95f44c858152143745a223a2a426d4ad58157951a2b2e4b916112f354", @nested={0x18, 0x66, 0x0, 0x1, [@typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @generic="758a16273efbe4f503d9218b23814e4b506f897b0f376d17366dc5f36000ca1ea124b810f9ce41acd3389c896bec9247e69822043fd5a8a085c5c152af6fa5dca673b715c64fcf3c5a01cae7fb1029662ec536f0e25e2da24a80af8689d8a6af1f8388"]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @uid=r5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x93f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x170, 0x1, 0x0, 0x1, [@nested={0x16c, 0x75, 0x0, 0x1, [@nested={0x4, 0x11f}, @generic="2cfca96a67e5a6900b976a79752904ac3cfd307ec6aabd321f0f9a0118f52350f69578fa4907a5c767c55f913dbe534b34605c16243b28b5304e06ef98dbdc248b2273b92ebb905a46750f167c5f20fe34e5ad417aa1eb464d581ee463a2d04c69461981e9f61ada3d43e65d5d267a4add77fac289cf2d8b7f92cff7be1fe27dc88b050a7ae918ada6c4ef8dcbb6baf5951c6768937792", @nested={0x4, 0x104}, @generic="8c8994089dd8be7edde7687a8e23d3d5a61d0bde987050030b1412212c0dd6a98ad20ad12d94c87cdb3e73ee46b5e32ba8b9ba36a4723376f25e163c000f69dd84f0665e53257291ed42690c8db12ba692f7d2246572daee80797f406cac7c77ffb1ca2b1f5b2a30e775ea0ae4126fba37220092d57f65899e90337272ee13ddf44d08b3cf9524d9bfa443d37e2bc01f86b3e50dd87f2352f59b70c1d588601a0244da1b1c0f592ef3b0f376e37d02783272fce29366ad2cbfe09de4fc4ca60b5d4bd13430", @nested={0x4, 0xea}]}]}, @IPVS_CMD_ATTR_DEST={0xcc, 0x2, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @uid=r6}, @typed={0xc0, 0x93, 0x0, 0x0, @binary="7a16d751676a04e2a6d8eb87fac6daa95ad82cb257e21f2dd77631bc0c6cd7ed72a4defb00a02d520f6582f3cb06ca260edd5952ae6caa72ccc8e7b4ed53b3cfa61bc35927faae8ed9d97d5fe6fd7c09e03d124b71b5e7782714ef8637bfe0c3f46180d996e943aa864b2fc9f3dfed942e4b4bef92b81a982ecb2f061ba0e0bfb4d442284f74228d5ebf788a0da1878799a3e5e516eeaf912cd57f32bc8878341beda33f73e1d064b0008130fab26ce20a428bf9763c614fd1f1144b"}]}]}, 0x1508}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async)
r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
r9 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0)
ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r9, 0x4018bc13, &(0x7f0000000000)={0x0, 0x2000000009d})

20m28.576048835s ago: executing program 1 (id=534):
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084)
close_range$auto(0x2, 0xa, 0x6349)
socket(0x25, 0xa, 0x1)
r1 = socket(0xa, 0x3, 0x88)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
bpf$auto(0x1ffffc, &(0x7f0000000000)=@bpf_attr_11={0xc, 0x400, 0x4a, 0x5eca, 0x7fff, 0x10000, 0x7ff, r1}, 0x7f)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xa005)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(r2, 0x0, 0x4040004)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b76, 0x2, 0x8000)
sysfs$auto(0xffffffff, 0x10000000000002d, 0x0)
ioperm$auto(0x800, 0x5, 0xd)
semctl$auto(0x0, 0x8000e3, 0x0, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
lsm_set_self_attr$auto(0x1, 0x0, 0x7, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
r3 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000080), 0x20540, 0x0)
ioctl$auto(r3, 0x40046103, 0x81)
sysfs$auto(0x6, 0x7fffffffffffffff, 0x1)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x1000, 0x5, 0x15)
mmap$auto(0x3, 0x400006, 0xdf, 0x15, 0xffffffffffffffff, 0x6000000000000)
newfstatat$auto(0xffffffffffffffff, 0x0, 0x0, 0x1000)
close_range$auto(0x0, r2, 0x9)
msync$auto(0x4, 0x0, 0xf52)

20m26.648039001s ago: executing program 1 (id=538):
mmap$auto(0xffffffffffffffff, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x4028000)
socket(0x22, 0x6, 0xfffbffff)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x100)
socket(0x2c, 0x3, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x222c0, 0x154)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x29, 0x2, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x3)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x11, 0x2, 0x4)
bpf$auto(0x0, &(0x7f0000000000)=@iter_create={r0, 0x8}, 0xa3)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x5, 0x5, 0xffffffff, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x62240, 0x55)
socket(0x2, 0x3, 0x3)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)

20m26.323772431s ago: executing program 1 (id=539):
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a000100000000000000000006000600050000000800", @ANYRES32=0x0, @ANYBLOB="0800040003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000280), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (fail_nth: 8)

20m25.813305155s ago: executing program 1 (id=541):
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0xffffffffffffffff, 0x4000000000de, 0x18, 0x401, 0xdb)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x13, 0x0, 0x4)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r1, 0x4b44, 0x1)
r2 = socket(0x2, 0x3, 0x9)
sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3)
write$auto(r2, 0x0, 0xba10)
setrlimit$auto(0x1000000007, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0xfff, 0x2)
socket(0x26, 0x80805, 0x0)
socket(0x28, 0x1, 0x0)
socket(0x1, 0x1, 0x1)
open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x40101286, 0x0)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
socket(0x23, 0x80805, 0x0)

20m13.571173577s ago: executing program 0 (id=579):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r0, 0x0)
r1 = bpf$auto(0x31, 0x0, 0x6f5)
mmap$auto(0x3, 0x2020009, 0xffffffffffffffff, 0xeb1, r1, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r1)
socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0x820000020005, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x5)
sendmmsg$auto(r1, &(0x7f0000000040)={{&(0x7f00000001c0)="8d3a7acbba9b0534a2fe547902a227c73f2a9178c021cd34eb55925093c266f54df21718b08743d12de98773c1f9b3be0468889f64ceb2878041b4d07cfde86d370101000060e1fff40ae2264b3342f6b49d33763b56afd6eaec28ca440b1168c8be0530f2f09ab1f48fa959a3aef16eb7945712bae1280da8eaa0c6ea70a51084d668f3b7e2e9202f846785d8211422f36ee212112a027e375ca265463c4a040b00f092d6e20000e7ffffffff31eaea7407479edc473f749e390f17ab7fd93f4d272f64c3f543331b0c29eb5a22d152dc498e576a7aa60a8e6eeb4b93", 0xc8b, 0x0, 0x3fffffffffffffff, 0x0, 0x0, 0x3}, 0x8000009}, 0x1, 0x200000a)
recvmmsg$auto(0x3, 0x0, 0x4, 0x2, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
sysfs$auto(0x2, 0x49, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x0, 0xcc, 0xfffffffffffffffc, 0x3c)
openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0)
mmap$auto(0x0, 0x40009, 0x8, 0x9b72, 0x2, 0x28004)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0)
read$auto_proc_pagemap_operations_internal(r2, &(0x7f0000001540)=""/209, 0xd1)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x80000, 0x0)

20m10.237694979s ago: executing program 32 (id=541):
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0xffffffffffffffff, 0x4000000000de, 0x18, 0x401, 0xdb)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x13, 0x0, 0x4)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0)
ioctl$auto(r1, 0x4b44, 0x1)
r2 = socket(0x2, 0x3, 0x9)
sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3)
write$auto(r2, 0x0, 0xba10)
setrlimit$auto(0x1000000007, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0xfff, 0x2)
socket(0x26, 0x80805, 0x0)
socket(0x28, 0x1, 0x0)
socket(0x1, 0x1, 0x1)
open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x40101286, 0x0)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
socket(0x23, 0x80805, 0x0)

20m8.456962206s ago: executing program 0 (id=590):
socket(0x2, 0x2, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6)
ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000840)="12915fb9d5")
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/serial-base/drivers_autoprobe\x00', 0x1c3382, 0x0)
sendfile$auto(r3, r3, 0x0, 0x7)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r1)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card1\x00', 0x6082, 0x0)
r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon2\x00', 0x40080, 0x0)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000002c0)=0x8)
ioctl$auto_MON_IOCQ_URB_LEN(r4, 0x9201, 0x0)
unshare$auto(0x40000080)

20m5.977449787s ago: executing program 0 (id=594):
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/10/effective_affinity\x00', 0x120682, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x20000411, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3)
setdomainname$auto(0xfffffffffffffffc, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
select$auto(0x6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x8, 0xd9})
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES8=r1], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0)

20m5.02841696s ago: executing program 0 (id=596):
socket(0x21, 0x2, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000e2, 0xeb1, 0x401, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0)
r0 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
read$auto_proc_pid_cmdline_ops_base(r0, &(0x7f0000000040)=""/159, 0x9f)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r1 = socket(0x10, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000400)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250a00000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0xffffffff)
socket(0xf, 0x80002, 0x33)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0xa, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r3, 0xfffffffffffff000, 0x2)
landlock_restrict_self$auto(r3, 0x0)
socket(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)

20m3.708850531s ago: executing program 0 (id=598):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00')
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x15)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x30, 0x80000006, 0x4)
r0 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0xfff, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x6, 0x2000, 0x0, 0x6, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffbfff, 0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe, 0x9, 0x0, 0x40000000000, 0x400000000005b8, 0xc, 0x0, 0x3, 0x0, 0x6, 0x0, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x7, 0x7]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

20m1.043402231s ago: executing program 0 (id=601):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", <r2=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080))
r3 = fanotify_init$auto(0x5, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x11, 0xa, 0x300)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa)
pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
timer_create$auto(0x7, 0x0, 0x0)
timer_settime$auto(0x0, 0x2, &(0x7f0000000080)={{0x400f, 0x10006}, {0x7a59e464000000, 0x1}}, 0x0)
mmap$auto(0xfffffffffffffffd, 0x5, 0x4000000000df, 0xebe, 0x401, 0x8000)
ioctl$auto(0x3, 0x80000541b, 0x38)
close_range$auto(0x2, 0x8, 0x0)
fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(r3, 0xe, &(0x7f0000000040)='/sys/kernel/debug/sync/sw_sync\x00', &(0x7f00000000c0)="dbfee290452abe1f8520f3eb642742fc174fe95f29792aab62a72c3f9ced23c513756896c0d4e9b52b15de8f7cde3015788cd8baad2a41400c8690e385a16292c3756e97373bff5440116e9fb8cbd4bff737d6121b9a43455074c8b1d3b6829503397ce05a3967772262e45b73218fe148d176624b2d6ced4bbfa7b9f39bf0b95885bfccfc541282542609555be62b9fa0882a6ae3965f7d9253b2cd1e3b020aa312ab31e5984d1fdb721409883149225b2d56bac5cff0408c4e45bac58ab479e55e6ce078c703", 0x40)
r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x7f, "4c83486dbb68c058fe4b2e12b91064cd57afad3b00"})
ioctl$auto(0x3, 0xc0303e03, r0)

19m45.366937068s ago: executing program 33 (id=601):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", <r2=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080))
r3 = fanotify_init$auto(0x5, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x11, 0xa, 0x300)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa)
pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
timer_create$auto(0x7, 0x0, 0x0)
timer_settime$auto(0x0, 0x2, &(0x7f0000000080)={{0x400f, 0x10006}, {0x7a59e464000000, 0x1}}, 0x0)
mmap$auto(0xfffffffffffffffd, 0x5, 0x4000000000df, 0xebe, 0x401, 0x8000)
ioctl$auto(0x3, 0x80000541b, 0x38)
close_range$auto(0x2, 0x8, 0x0)
fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(r3, 0xe, &(0x7f0000000040)='/sys/kernel/debug/sync/sw_sync\x00', &(0x7f00000000c0)="dbfee290452abe1f8520f3eb642742fc174fe95f29792aab62a72c3f9ced23c513756896c0d4e9b52b15de8f7cde3015788cd8baad2a41400c8690e385a16292c3756e97373bff5440116e9fb8cbd4bff737d6121b9a43455074c8b1d3b6829503397ce05a3967772262e45b73218fe148d176624b2d6ced4bbfa7b9f39bf0b95885bfccfc541282542609555be62b9fa0882a6ae3965f7d9253b2cd1e3b020aa312ab31e5984d1fdb721409883149225b2d56bac5cff0408c4e45bac58ab479e55e6ce078c703", 0x40)
r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x7f, "4c83486dbb68c058fe4b2e12b91064cd57afad3b00"})
ioctl$auto(0x3, 0xc0303e03, r0)

16m42.979680379s ago: executing program 5 (id=1312):
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x20000001)
socket(0xf, 0x3, 0x2)
getpeername$auto(0x3, 0x0, 0x0)
sendmsg$auto_NET_SHAPER_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000480)
mmap$auto(0x5, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x29, 0x4, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x55)
setsockopt$auto(r2, 0x28, 0x3, 0x0, 0x200000)
read$auto_ep0_operations_inode(r1, &(0x7f0000000300)=""/106, 0x6a)
r3 = inotify_init1$auto(0x6)
mmap$auto(0x0, 0xe000000000000000, 0xfffffffffffffffa, 0xeb1, r3, 0x8000)
mmap$auto(0x80004000000000, 0x7ffe, 0x7, 0x600000000000eb1, r0, 0x2)
mmap$auto(0x7, 0x400008, 0x400, 0x9b31, r1, 0x0)
mmap$auto(0x2, 0xffffffff, 0x1000000000000004, 0x18, 0x2, 0x7ffc)
set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0)
acct$auto(&(0x7f00000007c0)='/dev/bus/u\bb/037/001\x00\xabQ\xb5\xa9\x8c_vjc\xf8\xfcm\x80.\xe7!\x00DU\xf8\x99\xb6\x97\x83\xdc\xac<\xda\xe6\xd5\xdf&\xd01\xdf(\xf51\x1a\xaf\x11\xc5?\x00\x00\x00\x00\x90\x10V\xc8\xf4\x12 \xff\x13\xe1\xa8\x8dT\xb7\xa5i&\xfd\xd9\xdb\x97\'\xc4\xae\x9eb\x1b\x1d\xa2%;\x1e\xba\x0f\xd2\xc5\xb4\xc8\xdc\xfb\x1f\xba\x18d@AdZ\xbb\xf8\x85r\x86\b\xbc\xb1,Q\xd7\xc6\x9b\x06\xd7!\x83e\x87\'?\x10\n\x84\x1bk\x13\xfe\xa7\xcfU\x94\x85_\xb7SM\xf7\a|\xb1RP\xc8\xa4\x02\x00\x00\x00\xedT\x94%{\xc5a\xb9\xaaW\x7fY\xf1I\xd8\xe7zL\xc6\xa2m\x1a%\xd1\x86Vf\xf9\x86\xfbE\xa0\xf5a\xfa\xd6\xdb\xbdHP\xe8iUha\xccI\xb7\x83\xac\xa1*\x99\xe5\xfa\x13\x16\xd8\x02\xca\x06\xcb\xberb\x0e~>\x00\xea\xdc\x7f\x1d\xbb\'\x0fc\xe4\x03\x86\xe0Z}\xd9p\xfd<%\xb8s\x05q$\xbd}?\x9eq\xdf\x96\xc9\xfe\xf6N\xe2\x7f\xd1ci\xe5\x04f\xe0\xbe\xdc\xf5w\x11\v\x1f\xa3\xfe)\r\xcb\x01:(7\x10j\xaf\x00\xafl\xc3P\xfb3\xa5\xf4\x0f\x0e\xd7\xa9\xdc\x9e6\x92aH\x9eEr\xf9lO?\xef\xd2p\r\xect|9\xc5\xbdE\x9e\x00\xbf\xfa\x8a\x9c\xe4)@\xc6\x9d\x04\xea\xa8+\xbb0i\x91<\xd32\x00]1\xa1\x19\x00\x00\x00\x00\x00\x00I\xc2?= Nw\xbc\xaf\x05\xac\xce\x0e\x10/\xce%7\x7f\xea\x86P\xb0=\xaf:O\xed\b\xf9O\x1aV<\xcc\xf1\xc4iV\xcb\xf2!\xe7\xdc@\xe7([\xe9\xc0g\x8ej\xaaX\x19K8L\xc3O\xb2\xc7%Y\x18Ug\xc3\xc3\xe2l,\xd3h\xbc%g\xac\xa4\x1d\x16\"d\xc4\x87K\f\xcc0\x85\xb7\xf6\xcf\x0f\xde\x16\x13\xfd\x04)_y\x19\xb7\x9a\x9b\xc0\xea\x15\xe1\xe2\xaaa\xd5Q\xbc\x91\x91\xbf\x9e,\x14\x11\xe0\x8f$\xdeV\n\xe4o\x92U\x01\x93\x12\xd5\xf2|\xa6z\xa3\xcd\xd9Cse\xbem\xaf\xb4mr\x15\x85\xa2\xb9o\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\xeaK^6\f\xb0\x84t\xc5\xfb@\x00\xab\xb9c\x14\x1f\xa8n\xfa\xff\xa46\xc1\xb5Pw\x93\xf2\x0f\x1de\x9c\xc5h^V\x98rxq\xb2#\xc6\x7f\x01\xf6\xae2.+\xdeG\x9f\xf5s\x9co\xc4~\x82^!_\xd9\xd4\xf8\xd7\xed\xe7\xd7\xda\xe4\xd6\xb9tw\x19\xe7\\Ja\x7f\xdar\x97\xf6\xd8#\xb8\x84\x9cyf510\x01Cc\r.0\xd7\xc4}\xea\xd2\x8f\xb3\xbd\xd6\xae\f\x8e\xaf\x81\xb74\f{e\x18\xcd\xfe\x02\xa1 ')
unshare$auto(0x40000080)
open(&(0x7f0000000180)='./cgroup\x00', 0x62240, 0xc0)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
execveat$auto(r0, &(0x7f00000001c0)='\x00', 0x0, 0x0, 0x1000)
ioperm$auto(0x3ff, 0x4, 0x2)
close_range$auto(0x0, r3, 0x4000000000002)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x100, 0x0)
ioctl$auto(r4, 0x41045508, r4)
r5 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/bluetooth/hci3/hci3:200/power/autosuspend_delay_ms\x00', 0x400080, 0x0)
read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r5, &(0x7f00000000c0)=""/167, 0xa7)

16m41.457356832s ago: executing program 5 (id=1318):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
timer_create$auto(0x0, &(0x7f0000000300)={@sival_int=0x3e5f9feb, @inferred=<r0=>0xffffffffffffffff, 0x1, @_sigev_thread={0x0, 0x0}}, 0x0)
timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0)
timer_gettime$auto(0x0, 0x0)
ioctl$auto_BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000340)={@inferred=<r1=>0xffffffffffffffff, "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"})
futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
r2 = socket(0x2b, 0x2, 0x7ff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001380), r1)
sendmsg$auto_NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000d0}, 0x2000)
r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', <r6=>0x0})
sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x81}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x6}, @ILA_ATTR_IFINDEX={0x8, 0x4, r5}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x7}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x35}, @ILA_ATTR_IFINDEX={0x8, 0x4, r6}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x3ff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
write$auto(r2, &(0x7f0000000000)='r\x02', 0x2fb)

16m41.261956972s ago: executing program 5 (id=1319):
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x8000) (async)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x8000)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = epoll_create$auto(0x4)
r2 = epoll_create$auto(0x3e)
epoll_ctl$auto(r2, 0x1, r1, 0x0)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
getsid$auto(0x0) (async)
r4 = getsid$auto(0x0)
shmctl$auto(0x0, 0xfffffff9, &(0x7f0000000200)={{0x72, 0xffffffffffffffff, 0xee01, 0x82, 0x638, 0x0, 0x98a}, 0xb, 0x0, 0x9, 0x6f, @inferred=r4, @raw=0x8, 0x2b, 0x0, &(0x7f0000001d80), &(0x7f0000000140)="1080293e23fab7e94a8bfaf4423a6679956213b0c23340e67085d91a2bf39dd53660d2603d231fd1df8b443550a58b8a963cfe1facc018181cce91c50450d1935c6bb7dcca68fd0909bde1375630a4875933f9e3777faf2e0c627e17a54b36dd2ad487cd0f5dc98c366885650df05acd96817f56f9797427a7134f3b63b594bb4c05ae743754c230258acb40b43de61edf0cabe5b50390a650a511874da2ab59"}) (async)
shmctl$auto(0x0, 0xfffffff9, &(0x7f0000000200)={{0x72, <r5=>0xffffffffffffffff, 0xee01, 0x82, 0x638, 0x0, 0x98a}, 0xb, 0x0, 0x9, 0x6f, @inferred=r4, @raw=0x8, 0x2b, 0x0, &(0x7f0000001d80), &(0x7f0000000140)="1080293e23fab7e94a8bfaf4423a6679956213b0c23340e67085d91a2bf39dd53660d2603d231fd1df8b443550a58b8a963cfe1facc018181cce91c50450d1935c6bb7dcca68fd0909bde1375630a4875933f9e3777faf2e0c627e17a54b36dd2ad487cd0f5dc98c366885650df05acd96817f56f9797427a7134f3b63b594bb4c05ae743754c230258acb40b43de61edf0cabe5b50390a650a511874da2ab59"})
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000002d80)={0x2ac, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_EMA_RNR_ELEMS={0x144, 0x145, 0x0, 0x1, [@generic="19e37b", @generic, @generic="a5c5cdacf7c22822dd2ea5d92c2d4158eb7c8220ea449844591648b1a7c7275b65278573a70d923c74ee82c38b444210bb5f10c61db2922c95b5e6fc7f1f280b4057ca5960593a6310d1b951282790c99c8abe446e7095a6fe7ffc076f20e4ac6307233aaadfe738a176e9b34934a48582557f2402675c059b0e99087a9de89dc25ed7a3487d6509385358403330a33d0e1e9a9309ce03faa72141f5be377c44b5e255dd4a98870c5be8fdb8206b5ac30c65bd2bf90956b6f32b8e647480f9cab6cd1d481a719eb6dce3587514f586342bf264c11d405755cc1a173456d096290fa63a983e5b8156b7e6468974667b8a41108c656e", @typed={0xc, 0xbb, 0x0, 0x0, @u64=0x8}, @nested={0x3a, 0xaa, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @uid=r5}, @generic="66bc", @nested={0x4, 0x16}, @nested={0x4, 0x3c}, @generic="fef3bc39de13562e118eb7ceaa4f", @generic, @generic="70c35a4105e7051f5e1f7f6b5571", @nested={0x4, 0xb3}, @nested={0x4, 0x10d}]}]}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0xc, 0x131, 0x0, 0x1, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x4}]}, @NL80211_ATTR_MAC_ADDRS={0x110, 0xa6, 0x0, 0x1, [@typed={0x8, 0xae, 0x0, 0x0, @u32=0x8000}, @nested={0x101, 0x6e, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @pid=r4}, @typed={0xd, 0x138, 0x0, 0x0, @str='/dev/sda\x00'}, @nested={0x4, 0x2f}, @generic="1df4464a2421b765b27f88487c2774beaccad359e6d551f76b43280a36bc98e2488c2f98f9d509c765ec4400df5775e58abe6523c5990d84a3a8b532807e38df44a4197cd3fe75ae8488e576dcfced8b4e1f1870150383f7e545370909b9fae44cdadd5308e5bdf1702c89070def8305f1ead7c72fcb860fda488eaaa6b6f5f3dd102e47fd5bf6ce2ac3fc1990c153c57a4122b91670ea3bd736f4cbe39ef59263b5006dc083f031c29ef79ad22b4d7eea6b4259e8b9ec4fedd27954b1dfc5f45bfdaad3993959a7ede08d644bbad78ae47ce65627e30dd5bc", @nested={0x4}, @nested={0x4, 0x118}]}]}, @NL80211_ATTR_HE_CAPABILITY={0x35, 0x10d, "bbc7cbc3739e7b02c46946f9b87910c74c4712d0aa5c0eae733ac1cfc70050c8a7cc673906f64357d2cc789ebe69ac599d"}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x11}, 0x8000)
mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) (async)
mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000)
timer_create$auto(0x2, 0x0, 0x0)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x4, 0x4}, {0x0, 0x83}}, 0x0) (async)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x4, 0x4}, {0x0, 0x83}}, 0x0)
timer_delete$auto(0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) (async)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x48, 0x0)
socket(0xa, 0x3, 0x73) (async)
r7 = socket(0xa, 0x3, 0x73)
setsockopt$auto(r7, 0xff, 0x7, 0x0, 0xfff)
ioctl$auto(r6, 0x5393, r0)
r8 = socket(0x1, 0xa, 0xc8c)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) (async)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x167)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
setsockopt$auto_SO_MAX_PACING_RATE(r8, 0x3, 0x2f, &(0x7f0000000300)='\xba\xf13\xa4o\xd3\xd2\xe0v\x95\xe6mAk\x90\xa1\xfd\xb0\xe1\xa6W\x85py\x91Q\xe7\xc9\x05\xce\x17\xe6<0e\x12\xe8/\x16\xf0\xd2\xe5\x06[\vFb\xd6\xc0sTv*\xa6\x97\xb4\xcf\xc8d^\xb1\x7f\xeeH\xd2\xa8\xeb\xad\xdfw\xad\x1e\xcf\x13\xd2\xbbh\xb7\xb1\xa2\x14\xbe=Q\xf3\xd6\x85\x8as\x04\x93\x8c3\n\x9e\xcc\xbdP\x89\xee\xa8\x82\x03\x97\xe6^\x85#\x11T\x8dE\xba\nF\xc2\xe2\x06k\xf0~\xa3\x86h\xc2\xb8\xcfk\x1f', 0x4) (async)
setsockopt$auto_SO_MAX_PACING_RATE(r8, 0x3, 0x2f, &(0x7f0000000300)='\xba\xf13\xa4o\xd3\xd2\xe0v\x95\xe6mAk\x90\xa1\xfd\xb0\xe1\xa6W\x85py\x91Q\xe7\xc9\x05\xce\x17\xe6<0e\x12\xe8/\x16\xf0\xd2\xe5\x06[\vFb\xd6\xc0sTv*\xa6\x97\xb4\xcf\xc8d^\xb1\x7f\xeeH\xd2\xa8\xeb\xad\xdfw\xad\x1e\xcf\x13\xd2\xbbh\xb7\xb1\xa2\x14\xbe=Q\xf3\xd6\x85\x8as\x04\x93\x8c3\n\x9e\xcc\xbdP\x89\xee\xa8\x82\x03\x97\xe6^\x85#\x11T\x8dE\xba\nF\xc2\xe2\x06k\xf0~\xa3\x86h\xc2\xb8\xcfk\x1f', 0x4)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
getpgid(0x0)

16m40.750570766s ago: executing program 5 (id=1322):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
ioperm$auto(0x90d5, 0xc, 0x2) (async, rerun: 32)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x60042, 0x0) (async)
execveat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) (async)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd12\x00', 0x14f602, 0x0)
pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8)
shmctl$auto_SHM_STAT(0x6, 0xd, &(0x7f0000000300)={{0x5, 0x0, <r1=>0xee00, 0x3, 0xf, 0x2, 0x2}, 0x321, 0x2, 0x7, 0x8, @raw=0xd987, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f00000001c0)="34cc3e3ad5cfb888ac0ac78e4e1d2cd45fd5143a7829b0a6ade857ede73f80ed031706079f2ad32a991b877c987207a748e7a42204dee2f30ceaa12486e727d4461edf6c89aaabb159bbed4dca151ed1ed0484ee759ce2f7c821cbe4379c7372c65282211244e69e0ba69858ccbf6bd41e1601995dbe", &(0x7f0000000240)="016640945d207793fc44ba69e16346b5450a5c025af75a796c493e5209b5afe06de6c94cabbf64fdb6a3a1bee0eb68ba9883dd0ad97ef8a9ab3b8d7187de98ebd11dac8c121f2615bb021d10797036705f8d45b5154428354e757f055578c9aaa6e94c7fbba16f854839d9153bc2992d40eaa93982fae28f31dc27806a9423a4333e09f8fa87738d74f7d7"})
quotactl_fd$auto(r0, 0xfffffff7, r1, &(0x7f0000000380)="e7de8e2c4ac7b5f2c1d7ee26645242563790eba7911ddd50f8e29d39723217932a3f91ab8784fe5e612531b608fa489690510fe22551831e504e6b708dfe8b234f67b9e520a2a17c698dd4831272918559538cb85d2ffc930414b7fa123d53c7008b5775f2da77b962b2187588a99328ce2da97897293a") (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="815ce73f4a12b2e3c3e22efdeae388d0a57b98d366a4ccda3cdd098ef3e295ab62c857a511c4030c1a5f58a0ac80dc7376b07f09dccf60c1ac39c6d945ae280dd257e347ab8cce7332f422480addca79205fe303af1032f5930c898c78d01a3bab58a8107a24f0572fb84f78e970", @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x2040)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/9/smp_affinity_list\x00', 0x1c1282, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x7ffc)
remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async)
socket(0x1e, 0x5, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000600)=""/68, 0x44) (async)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x270000, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async, rerun: 64)
syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64)
r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0)
read$auto(r3, 0x0, 0x39b8) (async, rerun: 64)
open(&(0x7f0000000840)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x22240, 0x0) (rerun: 64)

16m39.35458621s ago: executing program 5 (id=1328):
socket(0x21, 0x2, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000e2, 0xeb1, 0x401, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0)
read$auto_proc_pid_cmdline_ops_base(0xffffffffffffffff, &(0x7f0000000040)=""/159, 0x9f)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000400)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250a00000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0xffffffff)
socket(0xf, 0x80002, 0x33)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0xa, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r2, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0)
landlock_restrict_self$auto(r2, 0x0)
socket(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)

16m36.548725099s ago: executing program 5 (id=1339):
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
close_range$auto(r1, r1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$auto_KVM_CREATE_VM(r2, 0x4008ae89, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(r0, 0x400454ca, 0x38)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
open(0x0, 0x22240, 0x155)

16m21.29285675s ago: executing program 34 (id=1339):
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
close_range$auto(r1, r1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$auto_KVM_CREATE_VM(r2, 0x4008ae89, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(r0, 0x400454ca, 0x38)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
open(0x0, 0x22240, 0x155)

11m17.485259298s ago: executing program 6 (id=2602):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r1, 0x4b63, r1)
madvise$auto(0x0, 0x2003f0, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
mq_getsetattr$auto(r0, 0x0, 0x0)
bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x630, 0x57d, 0x9, 0x8}, 0xa3)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
writev$auto(r0, &(0x7f00000000c0)={&(0x7f0000000200)="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", 0x6}, 0x6f)
r2 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0)

11m16.414798626s ago: executing program 6 (id=2606):
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$auto(0x8001, 0xfffffffffffffff8, 0x80000001, 0x1010, 0xffffffffffffffff, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000400)=ANY=[@ANYBLOB="d3000000000000000043637484fc2d581a0bf300000000000000be29a7632ae570d098dcdf50a3fdba672cbc9d5ff9ea844e2ac7fdbe237c211683baa8afb876b8e92202037b930f39f9f3cc3f690d35d9800bf4e3b7431e258fb285ad81c5904b", @ANYRES16=r1, @ANYBLOB="010027bd700006dcdf25100000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0800080004000000"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x84010)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x6) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x6)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) (async)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8008000) (async)
mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8008000)
socket(0xa, 0x801, 0x1)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) (async)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0)
write$auto(0xca, 0x0, 0x10) (async)
write$auto(0xca, 0x0, 0x10)
sendfile$auto(r4, r4, 0x0, 0x3)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000)
socket(0x10, 0x2, 0x5) (async)
socket(0x10, 0x2, 0x5)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) (async)
r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0)
pread64$auto(r5, &(0x7f0000000000)='MAC80211_HWSIM\x00', 0x7ffe, 0x1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70)
mkdir$auto(&(0x7f0000000000)='./file0/file1\x00', 0x2)
mknodat$auto(r6, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8)
renameat2$auto(r6, &(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000240)='./file1\x00', 0x2) (async)
renameat2$auto(r6, &(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000240)='./file1\x00', 0x2)
pipe2$auto(0x0, 0x80)
ioctl$auto(0x1, 0x5761, 0x4)

11m14.758693671s ago: executing program 6 (id=2613):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0xa481, 0x0)
ioctl$auto_EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0)
socket(0xa, 0x801, 0x84)
set_mempolicy$auto(0x6, 0x0, 0x4)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
read$auto(0xffffffffffffffff, 0x0, 0x0)
unshare$auto(0x40000080)
r1 = pipe$auto(0x0)
statmount$auto(0x0, 0x0, 0x1fe, 0x9)
ioctl$auto_MEMSETBADBLOCK(r1, 0x40084d0c, &(0x7f0000000080)=0x800)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r3, 0x0, 0x1)
write$auto(0xca, 0x0, 0x2d9)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x141c02, 0x0)
write$auto(0x3, 0x0, 0x100082)

11m13.171931674s ago: executing program 6 (id=2619):
socket(0x21, 0x2, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000e2, 0xeb1, 0x401, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x2, 0x0)
r0 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
read$auto_proc_pid_cmdline_ops_base(r0, &(0x7f0000000040)=""/159, 0x9f)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r1 = socket(0x2b, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000400)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250a00000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0xfffffffd)
socket(0xf, 0x80002, 0x33)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0xa, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r3, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0)
landlock_restrict_self$auto(r3, 0x0)
socket(0x27, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, 0x0, 0xea)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)

11m11.78135345s ago: executing program 6 (id=2625):
r0 = getsockopt$auto_SO_PREFER_BUSY_POLL(0xffffffffffffffff, 0x7c8, 0x45, &(0x7f0000000000)='@.\x00\xb3\x00', &(0x7f0000000040)=0x3)
write$auto_hwsim_fops_rx_rssi_(r0, &(0x7f0000000080)="c3b0a3092d94f9892aa58c2a51ae0ebc9f8daceb46b708a4eb2dcb4d5e53c7eee86269bbc739c6554db6fa543e19eeeae97f83abcf48", 0x36)
timer_create$auto_CLOCK_BOOTTIME_ALARM(0x9, &(0x7f00000000c0)={@sival_int=0x6bb1, @raw=0x4, 0xc137}, &(0x7f0000000100)=0x4e) (async)
read$auto_dma_buf_debug_fops_(r0, &(0x7f0000000140)=""/91, 0x5b) (async)
r1 = getsockopt$auto_SO_BPF_EXTENSIONS(r0, 0x443b76be, 0x30, &(0x7f00000001c0)='\x00', &(0x7f0000000200)=0x9)
ioctl$auto_FIFREEZE(r0, 0xc0045878, r1) (async)
read$auto(r1, &(0x7f0000000240)='\x00', 0x80) (async)
r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/extfrag/extfrag_index\x00', 0xa0000, 0x0)
epoll_ctl$auto_EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000002c0)={0x6, 0xffffffff}) (async)
r3 = fanotify_init$auto(0x4, 0x7)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r0)
sendmsg$auto_NL80211_CMD_SET_STATION(r3, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x224, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_SAR_SPEC={0x114, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffc}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xefd4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x200}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1ff}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS={0x80, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x97}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xc}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xc5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}]}]}]}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xab}, @NL80211_ATTR_AUTH_DATA={0xe9, 0x9c, "430cbfe5e4de676ecf95e66a2e329a1cedb34c344da799323e19917ec811b11d1f41effbbf9e53fb26c90cb0b981dd9a0cdd9c52cb08452b966bd1afa283b9e4174935d5cf84bc046ab4102dccc7ebbe90421d2e2941009c0776a2881c0b93b43d78b66384d0e4ed1b63bf8b5b66f33e8865f2b1364fc89f44394454bdf462300db65b4e8641f432e400100eab5e55ddffc1010fbb3409c98ad0d82aa3d2bb205b28d45ce59a42801e7e90d59c35ca2ab16b593b6ddfc9e52ebb8b1f4777d29ecca46aa2a2c78825458f6e94c30f99abba67e8d644aa8d9a8c8e704300b7b2a0a39772c6b1"}]}, 0x224}, 0x1, 0x0, 0x0, 0x400c840}, 0x40) (async)
ioctl$auto_BLKSECTGET2(0xffffffffffffffff, 0x1267, 0x0) (async)
ioctl$auto_BCH_IOCTL_READ_SUPER(r1, 0x4020bc0c, &(0x7f0000000640)={0x0, 0x0, 0xd65, 0x4}) (async)
r5 = signalfd$auto(r2, &(0x7f0000000680)={0x5}, 0x9)
r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000700), r5)
r7 = semctl$auto_SEM_STAT_ANY(0xcb59, 0x97, 0x14, 0xbb8)
statx$auto(r0, &(0x7f0000000740)='./file0\x00', 0x6, 0x27, &(0x7f0000000780)={0x200, 0x9, 0x3, 0x6, <r8=>0xffffffffffffffff, 0x0, 0x3ff, 0x8, 0x0, 0xffffffff, 0x7b, 0x6, {0x7, 0x7}, {0x5, 0x3}, {0x6, 0x6}, {0x0, 0x4}, 0x3, 0x7, 0xffff, 0x1ff, 0xef78, 0x9, 0x0, 0x80000000, 0x2, 0x9, 0x7fffffff, 0x1000, [0xffffffffffffffff, 0x100, 0x3, 0x2, 0x8, 0x1ff, 0x7, 0xc5d9, 0xfffffffffffffffa]})
r9 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000880), 0x400842, 0x0)
sendmsg$auto_TIPC_NL_MON_SET(r1, &(0x7f0000002380)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002340)={&(0x7f00000008c0)={0x1a44, r6, 0x730, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x158d, 0x4, 0x0, 0x1, [@generic="45b08981ec3bc2588786ad24bf69b6dee0198433171ca3493f874a9311a41c389ea6efd054256ebcfcbf42a4eafb77cf49851643acb0d1c8e49312a8d9fd2a812c93cc3bf900e4218d0a2f8c025d390385de82e97a9b791379d9aabc2e3550bb795ff21ce07d1472bb5db93ad445d0faf2e0f21969120a79d5d2aa53bcb74a3017cb20c9387464c93f6bc4ab05f88357f25bbfcc0afcfbc5eab67de1e8044fbdabd8c43a48111b7ffca6f5fbdde18f2526239b1a967a94e82d9820888145601a1e0b32a2cfec9d6ddd83a8d8", @nested={0x50, 0x9, 0x0, 0x1, [@generic="c4e902f1ca7231e5383590fc8ccf587b03dd3686a8a4f4446f3e6c99826a8e5dc90ba0e862c42b82600b5f33fad2b66cd3fc4f41c9bd65d8234cdb4c", @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x60}]}, @generic="c47262cbc1f58f2b0cc2", @nested={0xf7, 0xb, 0x0, 0x1, [@generic="0991857e7148c88366c64f8349f6c06a113b39d070bb8facf87aeab8688d8b2dba3a6002d81586ddfc8c36e3dea701f1561bb44ffe03548a9754627feff18274e183255c36173d49f7fbf7e4f27dcb212496c5616fd285210b792411a4f79efb7813c19a7ef29fb5", @typed={0x8, 0x9, 0x0, 0x0, @pid=r7}, @nested={0x4, 0xeb}, @nested={0x4, 0x3a}, @generic="d05594a11d142885f3554dca7767da5dafd4d5eb6cf5c431166f32e87be72d9bd68a5a58ad4b106f43030d4612e44e11a142fcc1ed49469e7e4b0e8036304ccc002c9dee55b5d584e692b2decf58ad47713697f983c2a0ae83d0997ece0b3718931371b933a0500a13eb0eedffd5a183956f51ed1305ce33420dfb"]}, @typed={0x8, 0x89, 0x0, 0x0, @uid=0xee00}, @nested={0x30c, 0x3a, 0x0, 0x1, [@generic="7d1973ae07aebe1e5c1a39ca542688f9412c815000a6803ffce9e6fefbb5365346f5b2175b6a2fa21792645b12c5c5eb7fcc8f8710bcd6ff74d619", @generic="70ffe63aa19106abc25653fb731822a27d2b1036af627ff5f61dfad38ab47202dfb96fc2d98371d3c7d10900014aaac4b07853cd0440e817eaeb0f360541c0a67bd6932a9285e69051a3c288d9d247daee384bb164ed6e5ce072bd97a688d55845f4d7b844c98646323e899145c54a7cb4d2b6242b74bb0b6dc51f59e4129e90867a15a3fbdb0e52d16992cc392f74abd312633b34e45a656f5f663a218f436270b151109acbcbd2ef72edc5bbb9c2cbb96cd5ec5f8f0a96c7044b4c5195f5ff0af2166d82830db3e726de968eb0817048ff7b6f827c408d", @typed={0x5, 0x33, 0x0, 0x0, @binary="97"}, @generic="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", @nested={0x4, 0x25}, @nested={0x4, 0x8a}, @nested={0x4, 0x78}, @typed={0x9, 0x119, 0x0, 0x0, @str='@.\x00\xb3\x00'}, @nested={0x4, 0xd0}, @generic="796417b731d34b6413a75b98929b12c89d292b587979845350d67ef04b64ea5a79632518bcc5d586d92804c8d39aac7c789c6e0d8ad57eee8ca5378b0ccf02bba7e99f6bc8405ac2e3c2b3615a239802d83e1e55900e9e558bc23bc62d6560337ae932c3271fe24917c2213fd82a5d41c0b611d2be2ffcaf45e974411081ca717a840264e9db86ea44af5ad945341b296df238d72c9b587d5eb23a20e9183a477008ffe5f2a04c5842a5fb56d6ece1905ece7af437fdfc540e3e13c1660103c88cbe4a291dc6adddade2d0aae806656e02026b01007e"]}, @generic="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", @generic="90d3ba2531cb7db4230741cd5d380c59ef5a03d8f475dbc28870e71d579009bb28a6001bcd8f4514f19f41b608db43f942793a3a37bd29f0d6dda465058278f3ad736c087deafe8c98999af7d0341e8ab7c1b81ec1e955"]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@typed={0x8, 0x13c, 0x0, 0x0, @fd=r2}, @generic="f9e96f027d89561495bf49e6274b8ff343b50cf004321ee5ff83da1177106c2481e0c6cd14a1b47d"]}, @TIPC_NLA_LINK={0x2ff, 0x4, 0x0, 0x1, [@typed={0x14, 0xf1, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="8279745e2177f21e354ebaf7da09d208db0e80765afd02d30f06369264201e1e4d5e114a956451baa308fca55ae8fed7a3b10b34b6cf340ab171713f5c7468486b98e1e9f1441486b880aeb2f3e245376d49ec689046e00ad4572b200bdf4ebe3a819e69171db5ab5f10bf06100fc73678e700550318bc8091b17a0c8968f4cd84d9d73194e48b3320a6158e761431dc93d16e45852c203802f2e9891903bcb1ed341d1dff6a180bd60408a1e935d9c3d2a38230f918415e99c17d1ebf39c3641801e2aec4427f33464153024ac9dc50e2eb26ba427664784ada928b0b887d104a304f471d63b1630c8aff28d10de2ce3ea3", @typed={0xc, 0x66, 0x0, 0x0, @u64=0xffffffffffffff47}, @generic="68dd828b700c5c331a3ec40e1124874d8e8a124dd0310c604f3e79dc069b52fa90600471bbb3a31d47c4405e5c1c446b1ef33f7016864e1c8e8755cae89ceb9f43598e79f2499856264a699d062b4d5860c0d6a3db4cf5b32b93205cdcbfb78d8e512b3886bc4fa75af1876ee74b2eea215dc4284909d06cd8a44acaee1a67e02dd0e02e33b22a93f19e1cb9fa51e95ab73a03ba98d521413b4c2752b923ec84b00bbc171b", @typed={0xc, 0xed, 0x0, 0x0, @u64=0x9}, @nested={0x136, 0xb, 0x0, 0x1, [@nested={0x4, 0x2}, @generic="8bbf74bab32e87502b3cba6a11ebb6e21076091516a9e4271f7b3ced6924c5a9c11126f8ee043b04144783ec1c0b6e161b9be84df8cd228dd0378b4ace62c6f18dee95b248b0fe0ef538701640d2401f3dd5632a454ec254ed7eacbe1f1141cb3fd054589b534a653b9a35e85ede50b6cad5f6f4b110e4ee7a6fa7", @typed={0x4, 0xab}, @generic="7bcd7de51ffe8e3a1396b7d9c18b9d9588bd9da6db6df5b802d2034c9ce98d295a6a823107a80f8ab07e80bd4e72919f411f8ba81b73ff898006ab3e666f1237e8b6ad7b1b58af853990e30004f6590736dd23faa355f261579818980bb7231825e0ed0ddefb7049340fc4f27c83651b7ea667b3a2d1d28edb8a4dcf153b5b68c30ff19ff1504e849cccd6585cf26c04d540fc1333bb034ac702278a9448c36d2d6692f7ebeaca92866cfe2c88e186"]}]}, @TIPC_NLA_MON={0x15f, 0x9, 0x0, 0x1, [@nested={0x14, 0x11f, 0x0, 0x1, [@nested={0x4, 0x140}, @typed={0x8, 0xb0, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x141}]}, @generic="ccf539af52ca40d79fe6c0b8fcd4d6151002fa2b9987fe9819c99dadd0ec46cbadf7a0fd4cff89456e3c07161a3109d452eca106447141c3233236165fef47b7bbdccd9970f1d14e952f6454991b6c5d91cc1f18336823fe41bd68278632f997c730e8dac303a22e46eccfe1154f9a8d92488440bd9a72a2fd477ad03ee346832c15e8406fe9be7ab7a0ba1323292cd2aa53454ab25992479370ef47d5dc3629cc765f225be513e12d9d76d756f0c2dd0dfd291cf09592cb1374324b4258344e9bae9d4a2b", @typed={0x8, 0x60, 0x0, 0x0, @uid=r8}, @generic="ba56f4b93715", @nested={0x73, 0x15, 0x0, 0x1, [@generic="da63ec71b3d47e38385b535f9653941752aa84650e65c72387dcab75a22c4900686f95aae030207ce079016003b1e9595b51fd42b3a957fa8875f0dfb3e55cc54819f7020762f7e6c966ad0f34ad3e41f2d61d68c160f0251f4e00f3ca1bd99e9cea1f", @typed={0x8, 0x117, 0x0, 0x0, @fd=r9}, @nested={0x4, 0xf3}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0xf4, 0x0, 0x0, @uid}]}]}, 0x1a44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4801) (async)
read$auto(r5, &(0x7f00000023c0)='/sys/kernel/debug/o2net/connected_nodes\x00', 0x2) (async)
timer_create$auto(0x10, &(0x7f0000003480)={@sival_int=0x6, @inferred=r2, 0x81, @_sigev_thread={&(0x7f0000002440)=&(0x7f0000002400)=0x6e, &(0x7f0000002480)="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"}}, &(0x7f00000034c0)=0x4)
mmap$auto(0x6, 0x7f, 0xe00, 0x18, r9, 0xfffffffffffffff9) (async)
r10 = getsockopt$auto_SO_BINDTOIFINDEX(r9, 0x200, 0x3e, &(0x7f0000003540)='nl80211\x00', &(0x7f0000003580)=0xffffffff)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000003500), r10) (async)
r11 = syz_clone3(&(0x7f0000003740)={0x130000000, &(0x7f00000035c0)=<r12=>0xffffffffffffffff, &(0x7f0000003600)=<r13=>0x0, &(0x7f0000003640), {0x1d}, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/47, &(0x7f0000003700)=[r7, r7, r7], 0x3, {r5}}, 0x58)
waitid$auto_P_PIDFD(0x3, r12, &(0x7f00000037c0)={@siginfo_0_0={0xa, 0x4, 0x0, @_sigchld={r7, r8, 0x12, 0xff, 0xfffffffffffffc8d}}}, 0x6, &(0x7f0000003840)={{0x101, 0x3b}, {0x7}, 0x7, 0x80, 0x1, 0x3, 0x5, 0x0, 0x6, 0x0, 0x2, 0x0, 0x2, 0x6, 0x4, 0xfffffffffffffff8}) (async)
mmap$auto(0x4, 0x6, 0xb2, 0x91, r1, 0x0) (async)
getpgid(r13) (async)
kcmp$auto(r11, 0x0, 0x4800000, r0, r1)

11m11.219106777s ago: executing program 6 (id=2628):
rt_sigaction$auto(0x36, &(0x7f0000000000)={0x0, 0x4, 0x0}, 0x0, 0x8) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x15, 0x2, 0x0)
getpgid$auto(0x0) (async)
timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @raw=0x2, 0x4, @_sigev_thread={&(0x7f0000000180)=&(0x7f0000000080)=0x1, &(0x7f0000000240)="1171c079cd09d47a96944f2abe3fd6b9564b981a52a359bf5d8638c59d234c2fc3d9fc78f2070ada0a8637c5f709ee11471468e285d551d8eeabb16550641882b5b067cf798a428210ca70c0e33d925753d808d4c5e969a14675e216fe4866e1820355753b867a80c6695f8e68353c306651428de8f3e8165222b5a52ed511bec6a1d9a258c824e16d7195c92837a7dbca92d134ac9f84279c5d0ae3e36cf8fdc3ec0a441cc09fbda581157eab3557d992a3581daf44e583694100318b4f159ce9bd87289ba2d425bb01b416c645"}}, &(0x7f0000000040)=0x9) (async)
socket(0x10, 0x2, 0x7fffffff) (async, rerun: 64)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) (rerun: 64)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)="58fcb282bcbc38bfaef257e019406e8ec445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e9ce53883444996d1721d7f3ae627c6c68118e15b5a753fd37910fbc02d898cfc8254c80582fc6184113a38") (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000001c0), 0x1cb803, 0x0) (async, rerun: 64)
lsm_list_modules$auto(0x0, 0x0, 0x0) (async, rerun: 64)
lsm_list_modules$auto(0x0, 0x0, 0x0) (async)
r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0)
close_range$auto(0x2, 0xa, 0x0) (async)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async)
unshare$auto(0x40000080)
prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (rerun: 32)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000000c0)={0x1, 0xfa, 0x9, 0x1, 0x418, "e72171dd9872b555facc1e8f"}) (async)
mmap$auto(0x0, 0x800000005, 0x4, 0x40eb3, 0x401, 0x3800000000000) (async)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0)
pread64$auto(r4, 0x0, 0x10, 0x5) (async)
rt_sigaction$auto(0x7, &(0x7f00000005c0)={&(0x7f00000003c0)=&(0x7f0000000480)=0x3, 0x8, &(0x7f0000000580)=0x0, {0x1}}, 0x0, 0x8) (async, rerun: 64)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cpu/1/msr\x00', 0x684000, 0x0) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)

10m56.03685001s ago: executing program 35 (id=2628):
rt_sigaction$auto(0x36, &(0x7f0000000000)={0x0, 0x4, 0x0}, 0x0, 0x8) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x15, 0x2, 0x0)
getpgid$auto(0x0) (async)
timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @raw=0x2, 0x4, @_sigev_thread={&(0x7f0000000180)=&(0x7f0000000080)=0x1, &(0x7f0000000240)="1171c079cd09d47a96944f2abe3fd6b9564b981a52a359bf5d8638c59d234c2fc3d9fc78f2070ada0a8637c5f709ee11471468e285d551d8eeabb16550641882b5b067cf798a428210ca70c0e33d925753d808d4c5e969a14675e216fe4866e1820355753b867a80c6695f8e68353c306651428de8f3e8165222b5a52ed511bec6a1d9a258c824e16d7195c92837a7dbca92d134ac9f84279c5d0ae3e36cf8fdc3ec0a441cc09fbda581157eab3557d992a3581daf44e583694100318b4f159ce9bd87289ba2d425bb01b416c645"}}, &(0x7f0000000040)=0x9) (async)
socket(0x10, 0x2, 0x7fffffff) (async, rerun: 64)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) (rerun: 64)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)="58fcb282bcbc38bfaef257e019406e8ec445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e9ce53883444996d1721d7f3ae627c6c68118e15b5a753fd37910fbc02d898cfc8254c80582fc6184113a38") (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000001c0), 0x1cb803, 0x0) (async, rerun: 64)
lsm_list_modules$auto(0x0, 0x0, 0x0) (async, rerun: 64)
lsm_list_modules$auto(0x0, 0x0, 0x0) (async)
r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0)
close_range$auto(0x2, 0xa, 0x0) (async)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async)
unshare$auto(0x40000080)
prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (rerun: 32)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000000c0)={0x1, 0xfa, 0x9, 0x1, 0x418, "e72171dd9872b555facc1e8f"}) (async)
mmap$auto(0x0, 0x800000005, 0x4, 0x40eb3, 0x401, 0x3800000000000) (async)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0)
pread64$auto(r4, 0x0, 0x10, 0x5) (async)
rt_sigaction$auto(0x7, &(0x7f00000005c0)={&(0x7f00000003c0)=&(0x7f0000000480)=0x3, 0x8, &(0x7f0000000580)=0x0, {0x1}}, 0x0, 0x8) (async, rerun: 64)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cpu/1/msr\x00', 0x684000, 0x0) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)

5m49.938525792s ago: executing program 3 (id=3861):
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0xc, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0)
sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r1, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x38f}, @GTPA_LINK={0x8, 0x1, 0x7}, @GTPA_FAMILY={0x5, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28008000}, 0x240018d0)
syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect$auto(0x0, 0x8000000000000001, 0x6)

5m49.133146286s ago: executing program 3 (id=3868):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xd, 0x0, 0x401, &(0x7f0000000140)="6a6e46162f39924c3c60cd36e6560589adab4b45d413308406b05863b13bcfeb0cfb6ca4f289c70344a813e9bb097569aad24dc190033e8257bed82a9e92069168fa6c742a250cdda5d4bd92e8717f481105ea48b09b6318dceb91a1fa9b6741f54b1ebaaef4c265", 0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600060009000000080003000800000008000400"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x23, 0x80805, 0x0)
memfd_secret$auto(0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macsec0\x00', <r2=>0x0})
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000040)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

5m48.708274118s ago: executing program 3 (id=3870):
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
r0 = socket(0x10, 0x80002, 0x0)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007a80), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14, r1, 0x199, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40)
recvfrom$auto(r0, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
socket(0x2, 0x3, 0x6)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
memfd_create$auto(&(0x7f00000000c0)='IPVS\x00\x84\x94\xbf\x7f\xe0(\xc7^M\xbe\x92\x98?I\xa5\x95V\xf2{\xd6\xc1\xc4.\xc3ja\xe8\xa1o\xb5-Z\x9dc\x152\xaew`0M\x1b3\r\x8afQ\xc2\x82W?r$\xf0\xce\x7f\x15\xa1\x13\xb2\x84\x04\xad<\x91\x85\xb22G\xf6\x8b\xba<\xe9&\x17%\x1a\xa5c\xe8\x06\xd4ok\x8a\xb2\xbaz\xf1\v\xf4\xaa\xda\x91\xfb\xea\x17~C\xb3\xc4S\xce\x83\x13\xd9\xbd{d\xfdB]\xb0R\x05b\x1b\xa5\xb8\x85\xa9\xbc5-9\x94\xa4QG\x06Z3#\x1cK\xbe\x16\xebaE~\x00\x00\x00\x00\x00', 0xa)
ftruncate$auto(0x0, 0x8800000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b1613007984"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
mlock2$auto(0x1, 0x8001, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
quotactl_fd$auto(r2, 0x2, 0xee01, 0x0)
get_mempolicy$auto(0x0, 0x0, 0xa6, 0xfff, 0x3)
rmdir$auto(&(0x7f0000000140)='./file0\x00')
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x3, 0xff)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x3, &(0x7f0000000040)={0x0, 0x1ff}, 0x1, 0x0, 0x0, 0x400}, 0x7}, 0x5, 0x10000)

5m47.689828742s ago: executing program 3 (id=3877):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/sg0\x00', 0x400, 0x0)
ioctl$auto_SG_GET_VERSION_NUM2(r1, 0x2282, &(0x7f0000000200)="48ad")
writev$auto(r0, &(0x7f00000001c0)={&(0x7f0000000080)="9fe2f4507528b1e635a65ffa0c2d2100db51d5c9bf4300d941b5d9f79eb83a4844abdc9ae8f3bab35f141c617c790479256778f7603d8b8c6cd9bc01950661cb38c5680c8c72ee067a35220531ef2dc150ccf6cb342c5fcb0996fcb61a8967089000913f723c081d16b99843d15800df848babce7558ea60c8d51b1e4057836f0dc1289576b4fbee887f1d339a03e546d6bc99333717ad38f09606589b31172adb879e51f22b9e06733af329974afcd27153a86ec595f176cde0e0d9b62ae75ba243f87b59f2cf53125ab78b0d", 0x452a}, 0x4)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_last_time_ms\x00', 0x2240, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/120, 0x78)
ioctl$auto_TIOCSTI2(r0, 0x545c, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x10004010)
socket(0x2, 0x80802, 0x0)
r3 = socket(0x2, 0x1, 0x0)
bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
socket(0x2, 0x801, 0x100)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x3, 0x1)
select$auto(0xa, &(0x7f0000000180)={[0x8, 0xeb7, 0x10000000000044, 0x1, 0x3, 0x7fffffffffffffff, 0x8, 0x4, 0x1, 0x8, 0x5, 0x9, 0xfffffffffffffffc, 0x9000000000, 0x9, 0x100033ca]}, 0x0, 0x0, 0x0)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
read$auto(0xffffffffffffffff, 0x0, 0x20)
msync$auto(0x1ffff000, 0x180000000000000, 0xa)
mmap$auto(0x0, 0x2020009, 0xfff, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)

5m46.695353079s ago: executing program 3 (id=3881):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
io_uring_setup$auto(0x6, 0x0)
clock_nanosleep$auto(0x7, 0x9, 0x0, 0x0)
mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x5, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
ioctl$auto_FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0x4004e502, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x1, 0x1000009, 0x3, 0x22, 0x940, 0x1ffde, 0x5, 0x6, 0x3ff, 0x9, 0x400005, 0xfff, 0x4, 0xb0, 0x8, 0x9, 0x5, 0x5, 0x6, 0x6, 0xffffffff, 0x0, 0x3, 0x80, 0x0, [0x3, 0x5, 0x200000000, 0x3ff, 0x0, 0x500, 0xfffffffffffffffd, 0x8, 0x3, 0x0, 0xc72, 0x7ffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40000000004, 0x5, 0x1000000800, 0x0, 0x0, 0x0, 0x9, 0x10000040000000, 0xcea, 0x0, 0xfffffffffffffffc, 0x800000, 0xfffffffffffffffa, 0x4, 0xffffffffffffffff, 0x2, 0x4001, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffff9, 0x0, 0x6c1a, 0x1, 0x0, 0x9f, 0x0, 0x3]}, 0x200, 0x81)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x5, 0x0)
setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
socketpair$auto(0x1a, 0x10000001, 0x9, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x191000, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x4007, 0xb})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
faccessat2$auto(0x1, &(0x7f0000000000)='\x00', 0x2, 0x1000)
socket(0x1e, 0x2, 0x100)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000004440))

5m45.715543302s ago: executing program 3 (id=3893):
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
r1 = socket(0x2, 0x1, 0x106)
connect$auto(r1, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x4}}, 0x5) (async, rerun: 32)
setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x6) (async, rerun: 32)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(r0, 0x400454ca, 0x38) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
io_uring_setup$auto(0x6, 0x0) (async)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
open(0x0, 0xa2240, 0x155)

5m30.602836067s ago: executing program 36 (id=3893):
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
r1 = socket(0x2, 0x1, 0x106)
connect$auto(r1, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x4}}, 0x5) (async, rerun: 32)
setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x6) (async, rerun: 32)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(r0, 0x400454ca, 0x38) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
io_uring_setup$auto(0x6, 0x0) (async)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
open(0x0, 0xa2240, 0x155)

2m53.048515928s ago: executing program 2 (id=4554):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
open_by_handle_at$auto(0xffffff9c, &(0x7f0000000040)={0x2, 0x2, 'Ll'}, 0x2)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x1, 0x0)
io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
open_by_handle_at$auto(0xffffff9c, &(0x7f0000000040)={0x2, 0x2, 'Ll'}, 0x2) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
io_uring_setup$auto(0x1, 0x0) (async)
io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) (async)

2m52.06091781s ago: executing program 2 (id=4557):
r0 = open(&(0x7f0000000800)='./file0\x00', 0x6a0041, 0x157)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xffffffffffffffff, 0x5, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000)
socket(0x2a, 0x800, 0x8)
statmount$auto(0x0, 0x0, 0x7fffffffffffffff, 0xd)
mmap$auto(0x0, 0x400001, 0x3ff, 0x12, r1, 0x8000)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/24/effective_affinity_list\x00', 0x408001, 0x0)
read$auto_fake_panic_fops_(r0, &(0x7f0000000280)=""/249, 0xf9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/7:11/read_ahead_kb\x00', 0x1a1942, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
r2 = socket(0xa, 0x801, 0x84)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101, 0x0)
msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x5, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0xec4c, 0x7, 0x1, 0xdd34, 0x7, 0x9, @raw=0xffff})
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
get_robust_list$auto(0x0, 0x0, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
setsockopt$auto(r2, 0x1, 0x3f, 0x0, 0xb)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0)
r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/block/nbd11/sched/read0_next_rq\x00', 0x40, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f00000001c0)=""/142, 0x8e)
mmap$auto(0x2, 0x20009, 0x7, 0xad9b, 0x401, 0x808000)
r5 = socket(0x2b, 0x1, 0x1)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\fJ\x99\x00:2\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
close_range$auto(0x0, r3, 0xbf)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r5, 0x7ff, 0x6, 0x1, 0x1000009, 0x5f, 0x0, 0x3}, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)

2m51.043732041s ago: executing program 2 (id=4561):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r1, 0x400, 0x1)
fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e25, @remote}, 0x6d)
fcntl$auto_F_SETSIG(r0, 0xa, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, r2)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005080)={0x14, r3, 0x1, 0x70bd2b, 0xa5dfdbfc}, 0x14}, 0x1, 0xffff0000, 0x0, 0x801}, 0x0)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183841, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
write$auto(r4, &(0x7f0000000300)='0P\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x51}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2000002, 0x0, 0x1, 0x0, 0x4, 0x9}, 0x7}, 0x3, 0x9)
readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x7}, 0x10)
shmctl$auto_SHM_INFO(0x3, 0xe, 0x0)
select$auto(0x5, 0x0, &(0x7f0000000100)={[0x8, 0x200, 0x0, 0x9, 0x1000000008001, 0x3, 0x6, 0x8, 0xd888, 0x5e58296d, 0x342, 0x1000, 0xb, 0x9, 0x8, 0x1ff]}, 0x0, 0x0)
listen$auto(0x3, 0x81)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x2e4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_TX_INFO={0xc, 0x7, [{0x7, 0xa}, {0xc0, 0x9}, {0x5, 0x4}, {0x6, 0x8}]}, @HWSIM_ATTR_PERM_ADDR={0x81, 0x16, "1a8995d80aba55e66e7ff73c2241d595420b2b8e0f2cf406f84ff3c9026ea19da5c06ee3f35e26a48f90f22aad934da7c710d23edbc93e39ff8c8efdb7f1f8d29414499c621250d24c2c5abb6deac20f088d2f892bd1591079dd0feedcd77193ba0df16fe681fc107f6a311aa20454f6768f93cfa23e714f830b4df313"}, @HWSIM_ATTR_CIPHER_SUPPORT={0xff, 0x18, "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"}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0xcda}, @HWSIM_ATTR_RADIO_NAME={0x3c, 0x11, '/sys/module/workqueue/parameters/default_affinity_scope\x00'}, @HWSIM_ATTR_ADDR_RECEIVER={0xe9, 0x1, "1efd0d5d08cbf90833a5c93a142fdf089beced963b2e403e1a5376251fcbae77fc715f28f5d70b6b9c7df560fe2890680b67cb8f240eda83dc573bcfd9c67d6fb600e0afdae719dc7c29466d0a0c6e9c3f23ebcbc75a9188c7f61a985eaa34c7f43523cee5eddef46c438776e15049850738b21c09f153884dab80342c8db7d9064ce94b0b7253d8eb358d6ff9c09d9e7836be53cfe5e03a48e01599e14f4134cb727cb3e3d30bf4b1fbe3369be335754023d5d14b3f4cf1a221206797ecb3468ea48f4a89ed12d4a50a34caa33d9b9c5905a9ec483602bde5ee135978d55952ae4de875d8"}, @HWSIM_ATTR_RADIO_NAME={0x6, 0x11, '!&'}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0x6}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x48040}, 0x840)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mmap$auto(0x0, 0x400006, 0xb, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x10000000000048, 0x0)
ioctl$auto_PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)

2m50.274408552s ago: executing program 4 (id=4568):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, 0x0, 0x100, 0x0)
finit_module$auto(r0, 0x0, 0x3)
bpf$auto(0x0, &(0x7f00000011c0)=@task_fd_query={0x9, 0x21eb, 0x47ff, 0x100, 0xa, 0x1000109, 0xffffffffffffffff, 0x0, 0x3}, 0x6f3)
r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP_CLEAR_HALT(r2, 0x4004550e, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x23, 0x80805, 0x0)
memfd_secret$auto(0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macsec0\x00', <r5=>0x0})
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r3, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000040)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2m49.865847939s ago: executing program 4 (id=4571):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x3, 0x9)
socket(0x2, 0x80002, 0x73)
symlink$auto(0x0, 0x0)
readlink$auto(0x0, 0x0, 0x800)
open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0)
mmap$auto(0x0, 0x8, 0xfff, 0xeb2, 0x401, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0xaf44529eb48ad963, 0x17c)
close_range$auto(0x2, 0x8, 0x2)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
open(0x0, 0x2040, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x801c581f, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x200883, 0x183)
linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
getrandom$auto(0x0, 0x6000000, 0x3)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0)
listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1)
socket(0x6, 0x2, 0x0)
mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x401, 0x8000)

2m49.857808202s ago: executing program 2 (id=4572):
r0 = socket(0x15, 0x5, 0x0)
connect$auto(r0, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x7}, 0x4)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
socket(0x15, 0x5, 0x0) (async)
connect$auto(r0, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x7}, 0x4) (async)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async)

2m49.530482726s ago: executing program 2 (id=4574):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x9445)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/Fixed MDIO bus.0/mdio_bus/fixed-0/statistics/writes_19\x00', 0x800, 0x0)
read$auto(r1, 0x0, 0x8000)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSFLAGS(r0, 0x40047459, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0)
read$auto(r2, 0x0, 0x20)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0)
mmap$auto(0x0, 0x202000b, 0xa772, 0xfff, r0, 0x8003)
io_uring_setup$auto(0x401, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pnp0/00:01/resources\x00', 0x0, 0x0)
sysfs$auto(0x2, 0x100000000000034, 0x0)
fsopen$auto(0x0, 0x1)
r3 = socket(0x1d, 0x2, 0x6)
setsockopt$auto(0x3, 0x6a, 0x7, 0xffffffffffffffff, 0x3)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x141000, 0x0)
bpf$auto(0x40, &(0x7f00000000c0)=@raw_tracepoint={0x80000000, r3, 0x0, 0x9}, 0x7f)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x108e00, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
shutdown$auto(r3, 0x2)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x400982, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)

2m48.799718001s ago: executing program 2 (id=4576):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
fanotify_init$auto(0x5, 0x51aa)
socket(0x1e, 0x1, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0xa, 0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x2, 0x801, 0x106)
close_range$auto(0x2, 0x8, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x2, 0x801, 0x100)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
setsockopt$auto(r2, 0x6, 0x3, 0x0, 0xa1)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
read$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffffff, &(0x7f0000000200)=""/238, 0xee)
ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc000)
r3 = prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x7fff, 0x0, 0x5, 0x7)
ioctl$auto(r0, 0x80046f45, r3)
mincore$auto(0x1000, 0x8003, 0x0)
setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28)
ioctl$auto(0x3, 0xff01, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0)

2m48.504536577s ago: executing program 4 (id=4577):
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0x102, 0x0)
mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0)
write$auto(r0, 0x0, 0xef)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x3b70, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x11, 0x2, 0x3)
symlink$auto(&(0x7f0000000080)='./file0\x00', 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose14/tx_queue_len\x00', 0xe3102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x1)
setsockopt$auto_SO_TYPE(r3, 0x2, 0x3, 0x0, 0xfffffffa)
sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x20000, 0x0)
read$auto_ftrace_subsystem_filter_fops_trace_events(r5, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
pidfd_open$auto(0x1, 0x0)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x100fe, 'w\x00\x00\x00\x00\x00\x00\x00'}, 0x2)
shmget$auto(0x1, 0x10001, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)

2m47.65614401s ago: executing program 4 (id=4579):
r0 = socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x5, 0x0)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
capset$auto(0x0, 0x0)
r2 = open(0x0, 0x22240, 0x154)
socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000400)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3)
bpf$auto(0x0, &(0x7f00000000c0)=@link_update={0xa, @new_map_fd=<r3=>r1, 0x100, @old_prog_fd=r1}, 0x10)
bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_1={r3, 0xbb8, @value, 0x100000003}, 0xcd)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r0, 0x0, 0x80)
setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x28)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x28)

2m46.768216078s ago: executing program 4 (id=4581):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) (async)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000003c0))
setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
setsockopt$auto_SO_MAX_PACING_RATE(0xffffffffffffffff, 0x3, 0x2f, &(0x7f0000000300)='\xba\xf13\xa4o\xd3\xd2\xe0v\x95\xe6mAk\x90\xa1\xfd\xb0\xe1\xa6W\x85py\x91Q\xe7\xc9\x05\xce\x17\xe6<0e\x12\xe8/\x16\xf0\xd2\xe5\x06[\vFb\xd6\xc0sTv*\xa6\x97\xb4\xcf\xc8d^\xb1\x7f\xeeH\xd2\xa8\xeb\xad\xdfw\xad\x1e\xcf\x13\xd2\xbbh\xb7\xb1\xa2\x14\xbe=Q\xf3\xd6\x85\x8as\x04\x93\x8c3\n\x9e\xcc\xbdP\x89\xee\xa8\x82\x03\x97\xe6^\x85#\x11T\x8dE\xba\nF\xc2\xe2\x06k\xf0~\xa3\x86h\xc2\xb8\xcfk\x1f', 0x4)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r1 = pidfd_open$auto(0x0, 0x0)
setns(r1, 0x20000000) (async)
setns(r1, 0x20000000)
getpgid(0x0) (async)
r2 = getpgid(0x0)
socket(0x2, 0x1, 0x0) (async)
socket(0x2, 0x1, 0x0)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) (async)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0)
ptrace$auto(0x4206, r0, 0x0, 0x5)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0)
capget$auto(0x0, 0x0)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
move_pages$auto(0x1, 0x233, 0x0, 0x0, 0x0, 0x8000000000000000)
symlink$auto(0x0, &(0x7f0000000000)='\'--[[\x14+\\\x00')

2m45.930373585s ago: executing program 4 (id=4585):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
close_range$auto(0x0, 0x5, 0x0)
pipe$auto(0x0)
socket(0xa, 0x3, 0xff) (async)
r0 = socket(0xa, 0x3, 0xff)
r1 = io_uring_setup$auto(0x52, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) (async)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r3, 0x40104d05, r3)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r4, 0x110, 0x5, 0x0, 0x82) (async)
setsockopt$auto(r4, 0x110, 0x5, 0x0, 0x82)
socket(0x2, 0x5, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) (async)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r6 = bpf$auto(0xfffff001, &(0x7f0000000000)=@token_create={0x7}, 0xa3)
r7 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000140), r6)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r7], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x60000000) (async)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r7], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x60000000)
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000200)={0x3, 0x8, 0xa, 0x8, 0x1})
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40000000000000, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40000000000000, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r1)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r8, 0x20, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8080) (async)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r8, 0x20, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8080)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000f72028a3c00e000000", @ANYRES16=r10, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009800800208004003380120001008987714800000000000000000000000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)

2m33.689056786s ago: executing program 37 (id=4576):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
fanotify_init$auto(0x5, 0x51aa)
socket(0x1e, 0x1, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0xa, 0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x2, 0x801, 0x106)
close_range$auto(0x2, 0x8, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x2, 0x801, 0x100)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
setsockopt$auto(r2, 0x6, 0x3, 0x0, 0xa1)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
read$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffffff, &(0x7f0000000200)=""/238, 0xee)
ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc000)
r3 = prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x7fff, 0x0, 0x5, 0x7)
ioctl$auto(r0, 0x80046f45, r3)
mincore$auto(0x1000, 0x8003, 0x0)
setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28)
ioctl$auto(0x3, 0xff01, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0)

2m31.703446707s ago: executing program 8 (id=4619):
r0 = prctl$auto_PR_GET_TID_ADDRESS(0x28, 0xb10f, 0xffffffffffffffff, 0x7, 0x2)
mmap$auto(0x0, 0xffffffffffffeb6f, 0xdf, 0xeb1, r0, 0x8000)
socket(0x2c, 0x6, 0x2000000)
io_uring_setup$auto(0x40000002c55, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)=""/114, 0x72)
socket(0x9, 0x1, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mprotect$auto(0x5, 0x8000000000000004, 0x5)
msync$auto(0x0, 0x2000000005, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r3 = getpid()
sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x11c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0xae, 0x0, 0x0, @u32=0xffffffff}]}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'veth0_to_hsr\x00'}, @NL802154_ATTR_SEC_LEVEL={0xd8, 0x2d, 0x0, 0x1, [@nested={0x91, 0xe7, 0x0, 0x1, [@generic="f994f9b391316f24fa09192d3264478cdf0681ef8b848605fa3d7ae821f9f922072f6c873c36fc72f5944680c3ee5f88a4739ad41f30df6df64524d0b81b5892d0a06e8a7818f2cd7f470a7d3749545cedbacb84eac07a5cec6b56b73e28ba4600fbb16180a67f89eff562dc172dfc95dab69ca6f7e96416a8357f4a89024d1eb5b71ada5c", @nested={0x4, 0x114}, @nested={0x4, 0xac}]}, @nested={0x3d, 0x12a, 0x0, 0x1, [@nested={0x4, 0xae}, @generic="2ae72cd7329eba8fbb6c658a945a230f9cd393bb4af723de609699aed3db5cce32d71b41d3a195394f6056bb71", @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x40800)
ioctl$auto(r2, 0x5646, r2)
read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b)
io_uring_setup$auto(0x6, 0x0)
r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdc03, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48894}, 0x4)
ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x88c00, 0x0)
msync$auto(0x8, 0x1, 0xe3)
sysfs$auto(0x10001, 0x7, 0xfffffffffffffffe)

2m30.737770044s ago: executing program 38 (id=4585):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
close_range$auto(0x0, 0x5, 0x0)
pipe$auto(0x0)
socket(0xa, 0x3, 0xff) (async)
r0 = socket(0xa, 0x3, 0xff)
r1 = io_uring_setup$auto(0x52, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) (async)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r3, 0x40104d05, r3)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r4, 0x110, 0x5, 0x0, 0x82) (async)
setsockopt$auto(r4, 0x110, 0x5, 0x0, 0x82)
socket(0x2, 0x5, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) (async)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r6 = bpf$auto(0xfffff001, &(0x7f0000000000)=@token_create={0x7}, 0xa3)
r7 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000140), r6)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r7], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x60000000) (async)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r7], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x60000000)
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000200)={0x3, 0x8, 0xa, 0x8, 0x1})
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40000000000000, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40000000000000, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r1)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r8, 0x20, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8080) (async)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r8, 0x20, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8080)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000f72028a3c00e000000", @ANYRES16=r10, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009800800208004003380120001008987714800000000000000000000000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)

2m26.555874734s ago: executing program 8 (id=4623):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/reboot/force\x00', 0x20000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/17, 0x11)
r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0)
ioctl$auto_BLKZEROOUT(r0, 0x127f, 0x0)
ioctl$auto_CEC_S_MODE(r2, 0x40046109, &(0x7f0000002c40)=0xf0)
r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000300), 0x841, 0x0)
write$auto_bm_register_operations_binfmt_misc(r3, &(0x7f0000000340)="4d96b15940349a69c8f63c", 0xb)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
madvise$auto(0x4c9b, 0xae3, 0xffffff74)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x0, 0x3, &(0x7f0000000080)=&(0x7f0000000240)="af6542b5025573b9a68f31bfd6067c11d216a97b11a1d405da523483431fd355fd27c8f8d4ff1a0bea94c46ead603798dbf8d03a02f1a9704541ed3ce9e57821f40f813d7b65bd14a29352b8fe43a5e6ca2e6479d4be47e723d90015661bb5851a275287ead0c85fe1be895616afc6c88fa28cd4afbf71ab12cf49950d0036380dde0623ab5cec248dd73c2666061f9217afec7ed4ccbc6ca03d72", &(0x7f00000001c0)=0x9, &(0x7f0000000380)=0x1, 0x4)
r6 = seccomp$auto_SECCOMP_GET_NOTIF_SIZES(0x3, 0x1000, &(0x7f0000000140)="52fd6cd77b607f24e21173b7b395a4a52b7c0f649e6ba0e6a4118ec187")
mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0)
read$auto(r7, 0x0, 0x39b8)
close_range$auto(r6, 0x8, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x11, 0x3, 0x2)
fanotify_mark$auto(0xffffffffffffffff, 0x205, 0xa, 0x4, 0x0)
write$auto(0x3, 0x0, 0x8c)
ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000180)={0x1, 0x6, 0xfffffffffffffffe, 0x1, 0x5})
unshare$auto(0x40000080)

2m25.466122525s ago: executing program 8 (id=4625):
bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0xa93f, 0x9, 0x3, 0x3, 0x3da1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x9, 0x1}, 0x171) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) (async)
landlock_restrict_self$auto(r0, 0x0)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040)="11ce06d2b8", 0x40000100000001}, 0x6, 0x0) (async)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) (async)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) (async)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) (async)
ioctl$auto(r2, 0x89f0, r2)

2m25.08355733s ago: executing program 8 (id=4626):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
r0 = socket(0x10, 0x2, 0x6)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
socket(0x11, 0x80003, 0x300)
r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0)
read$auto_proc_pagemap_operations_internal(r2, &(0x7f0000001540)=""/209, 0xd1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
getsockopt$auto(0x6, 0x1, 0x11, 0xfffffffffffffffe, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
open_by_handle_at$auto(r1, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x189302, 0x0)
sendfile$auto(r0, r3, 0x0, 0x3)

2m24.85537126s ago: executing program 8 (id=4628):
r0 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000380), 0x449242, 0x0)
fchmod$auto(r0, 0x9b9a)
write$auto_null_fops_mem(r0, &(0x7f0000000400)="70e0e8520acc8fc8fc9be8b3c709ac2ccbf16f3d35f9df386b4f953b5e13508fc9c032291ce47b871240aaf265408b9ee21ba18f6f01d32a736aa7fad95c4e7250341d93c0622cd78f4988eba8e618c19835910c990f9e2bd21f5b90df241a11cc1e564eec1b16afa5d77859e9ace58c28db10f35009c00d968c755c6077822b", 0x80)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x80000, 0xffffff00) (async)
r2 = socket(0x2c, 0x80000, 0xffffff00)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', <r3=>0x0})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ptp/ptp0/n_alarms\x00', 0x42080, 0x0) (async)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ptp/ptp0/n_alarms\x00', 0x42080, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000240)=""/217, 0x115)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), 0xffffffffffffffff)
read$auto(r1, &(0x7f0000000040)='nl80211\x00', 0xbe62)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32=r0], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r3], 0x1ac}}, 0x40001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x9, 0xa505}, 0x800}, 0x7, 0x4008)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
acct$auto(0x0) (async)
acct$auto(0x0)
acct$auto(0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
mmap$auto(0x4000000, 0x3, 0x3, 0x1b, 0xfffffffffffffffa, 0x208000) (async)
mmap$auto(0x4000000, 0x3, 0x3, 0x1b, 0xfffffffffffffffa, 0x208000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x408140, 0x0)
read$auto(r7, 0x0, 0x1ff) (async)
read$auto(r7, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000fcdbdf250200000005001200b800000006200ef2fe00000006000300fdff000005001400009ac82cfc2d39af810000000c0016000100008000000000050015000a000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000fcdbdf250200000005001200b800000006200ef2fe00000006000300fdff000005001400009ac82cfc2d39af810000000c0016000100008000000000050015000a000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
close_range$auto(0x2, 0x8, 0x0)

2m22.967282302s ago: executing program 8 (id=4633):
mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0)
write$auto(r0, 0x0, 0xef)
read$auto(0x3, 0x0, 0x1f40)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x3b70, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x11, 0x2, 0x3)
symlink$auto(&(0x7f0000000080)='./file0\x00', 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose14/tx_queue_len\x00', 0xe3102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x1)
setsockopt$auto_SO_TYPE(r3, 0x2, 0x3, 0x0, 0xfffffffa)
sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x20000, 0x0)
read$auto_ftrace_subsystem_filter_fops_trace_events(r5, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
pidfd_open$auto(0x1, 0x0)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x100fe, 'w\x00\x00\x00\x00\x00\x00\x00'}, 0x2)
shmget$auto(0x1, 0x10001, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)

2m19.830985602s ago: executing program 9 (id=4615):
r0 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x1, 0x0)
read$auto(r1, 0x0, 0x39)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
getrandom$auto(0x0, 0x6000000, 0x3)
socket(0x11, 0x1, 0xa)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/is_selfpowered\x00', 0xc02, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)=""/45, 0x2d)
bpf$auto(0x3, &(0x7f0000000780)=@link_update={r0, @new_prog_fd, 0xab, @old_prog_fd=r1}, 0xa3)
mmap$auto(0x6, 0x20009, 0x20004000000000df, 0x16, 0x401, 0x8000)
r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x181, 0x0)
ioctl$auto_VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000100)=0x3d2)
unshare$auto(0x40000080)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
socket(0xf, 0xa, 0x6)
sendfile$auto(0x6, 0x3, 0x0, 0xfdef)
mmap$auto(0x2000000000000, 0x2, 0xc, 0x9b71, 0xffffffffffffffff, 0x2)
r5 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r5, 0x40084149, &(0x7f0000001080)=0x7)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
bind$auto(0xffffffffffffffff, 0x0, 0x6b)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_swap\x00', 0x100042, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
setresuid$auto(0x2, 0x7, 0x8080)
socket(0x2, 0x1, 0x0)
getsockopt$auto(0x4, 0x6000000000000, 0x80, 0xfffffffffffffffd, 0x0)

2m17.954265966s ago: executing program 9 (id=4638):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r1 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0241, 0x0)
write$auto_ftrace_set_event_pid_fops_trace_events(r1, 0x0, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x2, 0x800, 0x4)
r2 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0)
ioctl$auto(r3, 0x540a, r3)

2m17.355508262s ago: executing program 9 (id=4640):
mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0)
write$auto(r0, 0x0, 0xef)
read$auto(0x3, 0x0, 0x1f40)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x3b70, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x11, 0x2, 0x3)
symlink$auto(&(0x7f0000000080)='./file0\x00', 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose14/tx_queue_len\x00', 0xe3102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x1)
setsockopt$auto_SO_TYPE(r3, 0x2, 0x3, 0x0, 0xfffffffa)
sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x20000, 0x0)
read$auto_ftrace_subsystem_filter_fops_trace_events(r5, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
pidfd_open$auto(0x1, 0x0)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x100fe, 'w\x00\x00\x00\x00\x00\x00\x00'}, 0x2)
shmget$auto(0x1, 0x10001, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)

2m7.143356851s ago: executing program 39 (id=4633):
mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0)
write$auto(r0, 0x0, 0xef)
read$auto(0x3, 0x0, 0x1f40)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x3b70, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x11, 0x2, 0x3)
symlink$auto(&(0x7f0000000080)='./file0\x00', 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose14/tx_queue_len\x00', 0xe3102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x1)
setsockopt$auto_SO_TYPE(r3, 0x2, 0x3, 0x0, 0xfffffffa)
sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x20000, 0x0)
read$auto_ftrace_subsystem_filter_fops_trace_events(r5, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
pidfd_open$auto(0x1, 0x0)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x100fe, 'w\x00\x00\x00\x00\x00\x00\x00'}, 0x2)
shmget$auto(0x1, 0x10001, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)

2m2.166040197s ago: executing program 40 (id=4640):
mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0)
write$auto(r0, 0x0, 0xef)
read$auto(0x3, 0x0, 0x1f40)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x3b70, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x11, 0x2, 0x3)
symlink$auto(&(0x7f0000000080)='./file0\x00', 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose14/tx_queue_len\x00', 0xe3102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x1)
setsockopt$auto_SO_TYPE(r3, 0x2, 0x3, 0x0, 0xfffffffa)
sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x20000, 0x0)
read$auto_ftrace_subsystem_filter_fops_trace_events(r5, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
pidfd_open$auto(0x1, 0x0)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x100fe, 'w\x00\x00\x00\x00\x00\x00\x00'}, 0x2)
shmget$auto(0x1, 0x10001, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)

2.740958522s ago: executing program 7 (id=4839):
mmap$auto(0x0, 0x0, 0x3, 0x9b7f, 0x7, 0x28001)
close_range$auto(0x0, 0xfffffffffffff000, 0x6)
socket(0x2b, 0x1, 0x1)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fc32a04aa239bc6ea0aedbdf257a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
ioctl$auto(r2, 0x3cc, 0x4)

2.40260275s ago: executing program 7 (id=4840):
gettid()
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4080)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0x40a0ae49, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5)
mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r5 = io_uring_setup$auto(0x6, 0x0)
r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000100)="000004")
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
write$auto(0x3, 0x0, 0xfffffdef)
r7 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x3a, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624cea, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x10000000000003, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x200000000001, 0x0, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x8001, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x6]}, 0x1fe, 0xd)
setsockopt$auto_SO_RCVBUFFORCE(r5, 0x7, 0x21, &(0x7f0000000040)='/dev/dsp1\x00', 0x1000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
futex$auto(&(0x7f0000000080)=0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffa)

1.418804905s ago: executing program 7 (id=4841):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0)
r1 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
poll$auto(&(0x7f0000000280)={r1, 0xf06d, 0x4}, 0x80, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
sysfs$auto(0x2, 0x100000000000036, 0x0)
fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x2000000000000007, 0x7, 0x0, 0x4, 0xfffff000)
socket(0x18, 0x2, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xa3d9)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
socket(0x2, 0x2, 0x1)
io_uring_setup$auto(0x6, 0x0)
arch_prctl$auto(0x1022, 0x2000000000001)
vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x80000000002}, 0x3, 0x4)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
futex$auto(0x0, 0x6, 0x1, &(0x7f0000000040)={0xfffffffffffffff9, 0x5}, 0x0, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
open(0x0, 0xeee00, 0x31)

1.208227326s ago: executing program 7 (id=4842):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x400000000010003}, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
io_uring_setup$auto(0x6, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c855}, 0x40805)
sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf250000000008000b000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8c1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="7f"], 0x1ac}}, 0x40000)
sendmsg$auto_NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="06002abd700087"], 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x1)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX_PUSH_BUF_LEN={0x8, 0xf, 0xbcb}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80000)
setsockopt$auto(0x3, 0x1, 0x22, 0x0, 0x9)
recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x400}, 0x5, &(0x7f00000000c0), 0x200002, 0x8}, 0x803}, 0xa, 0x10, 0x0)

138.138957ms ago: executing program 7 (id=4843):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000007fff)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x149443, 0x0)
socket(0x22, 0x2, 0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x101, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0x8140aecc, 0x0)

0s ago: executing program 7 (id=4844):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24008090}, 0x24044805)
syz_clone3(0x0, 0x0)
write$auto(0x3, 0x0, 0xfdef)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xd00, 0x0)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioperm$auto(0x3, 0x5, 0x149)
sethostname$auto(0xfffffffffffffffe, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
lstat$auto(0x0, 0x0)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
mprotect$auto(0x8000, 0x8, 0x8)
mprotect$auto(0x0, 0x8000000000000001, 0x6)
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, 0x0, 0x2202, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x12, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x7fffffffffffffff, 0x5, 0x7fefffff, 0x42, 0x7, 0x1, 0x60, 0x40000104})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
io_setup$auto(0x7ffe, &(0x7f0000000000))
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0)
prctl$auto_PR_SET_MM(0x23, 0x7b08b2bb, 0xffffffffffffffff, 0x800, 0x4)
ioctl$auto(0x3, 0x4b67, 0x38)

kernel console output (not intermixed with test programs):

ftover after parsing attributes in process `syz.7.3907'.
[ 1097.121878][ T3362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3908'.
[ 1097.273197][ T3366] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3909'.
[ 1097.490430][ T3358] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3907'.
[ 1097.537976][ T3358] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3907'.
[ 1097.578699][ T3358] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3907'.
[ 1097.604070][ T3358] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3907'.
[ 1099.207311][   T30] audit: type=1800 audit(4294973946.876:37): pid=3525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3916" name="mtdblock0" dev="tmpfs" ino=2051 res=0 errno=0
[ 1102.559270][T20230] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5
[ 1102.596153][ T3662] __nla_validate_parse: 28 callbacks suppressed
[ 1102.596180][ T3662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3931'.
[ 1104.916237][ T3757] Invalid ELF header magic: != ELF
[ 1106.414596][ T3795] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3942'.
[ 1109.614732][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1109.627019][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1109.652617][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1109.666350][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1109.678740][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1109.686883][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1110.573215][ T3894] chnl_net:caif_netlink_parms(): no params data found
[ 1110.948088][ T3894] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1110.970350][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1111.017792][ T3894] bridge_slave_0: entered allmulticast mode
[ 1111.034907][ T3894] bridge_slave_0: entered promiscuous mode
[ 1111.059552][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1111.066877][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1111.088369][ T3894] bridge_slave_1: entered allmulticast mode
[ 1111.095696][ T3894] bridge_slave_1: entered promiscuous mode
[ 1111.158812][ T4101] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3955'.
[ 1111.251286][ T3894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1111.309819][ T3894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1111.514604][ T3894] team0: Port device team_slave_0 added
[ 1111.548737][ T3894] team0: Port device team_slave_1 added
[ 1111.651023][ T3894] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1111.662526][ T3894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1111.740460][ T3894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1111.807584][ T5848] Bluetooth: hci4: command tx timeout
[ 1111.903325][ T3894] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1111.937632][ T3894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1112.046731][ T3894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1112.248772][ T3894] hsr_slave_0: entered promiscuous mode
[ 1112.275705][ T3894] hsr_slave_1: entered promiscuous mode
[ 1112.292297][ T3894] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1112.327552][ T3894] Cannot create hsr debugfs directory
[ 1113.209568][ T3894] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1113.237092][ T3894] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1113.519957][ T3894] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1113.564032][ T3894] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1113.877741][ T5848] Bluetooth: hci4: command tx timeout
[ 1114.116785][ T3894] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1114.271249][ T3894] 8021q: adding VLAN 0 to HW filter on device team0
[ 1114.381485][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1114.388763][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1114.470684][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1114.478197][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1114.744461][ T3894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1115.601558][ T3894] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1115.967589][ T5848] Bluetooth: hci4: command tx timeout
[ 1116.587134][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3969'.
[ 1116.905895][ T3894] veth0_vlan: entered promiscuous mode
[ 1116.953535][ T3894] veth1_vlan: entered promiscuous mode
[ 1117.078700][ T3894] veth0_macvtap: entered promiscuous mode
[ 1117.112744][ T3894] veth1_macvtap: entered promiscuous mode
[ 1117.461267][ T3894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1117.505849][ T3894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.528368][ T3894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1117.542965][ T3894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.557882][ T3894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1117.577560][ T3894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.596003][ T3894] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1117.689469][ T3894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1117.722720][ T3894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.748150][ T3894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1117.768181][ T3894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.787606][ T3894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1117.822818][ T3894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.858179][ T3894] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1117.943204][ T3894] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.017676][ T3894] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.026638][ T3894] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.065070][ T5848] Bluetooth: hci4: command tx timeout
[ 1118.077947][ T3894] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.683524][ T7610] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1118.760862][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1118.784328][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1118.932662][ T7610] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.139074][ T7610] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.186948][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1119.237941][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1119.325538][ T7610] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.887976][ T7610] bridge_slave_1: left allmulticast mode
[ 1119.893700][ T7610] bridge_slave_1: left promiscuous mode
[ 1119.924126][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1119.984615][ T7610] bridge_slave_0: left allmulticast mode
[ 1120.007556][ T7610] bridge_slave_0: left promiscuous mode
[ 1120.025145][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1121.459944][ T7610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1121.513897][ T7610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1121.559536][ T7610] bond0 (unregistering): Released all slaves
[ 1121.699748][ T4581] debugfs: Directory '!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present!
[ 1123.088137][ T7610] hsr_slave_0: left promiscuous mode
[ 1123.098322][ T7610] hsr_slave_1: left promiscuous mode
[ 1123.170119][ T7610] veth1_macvtap: left promiscuous mode
[ 1123.196330][ T7610] veth1_vlan: left promiscuous mode
[ 1123.217885][ T7610] veth0_vlan: left promiscuous mode
[ 1123.515651][ T4717] kexec: Could not allocate control_code_buffer
[ 1123.670725][ T4732] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1125.299106][ T7610] team0 (unregistering): Port device team_slave_1 removed
[ 1125.414667][ T4756] kAFS: Invalid Command on /proc/fs/afs/cells file
[ 1125.497649][ T7610] team0 (unregistering): Port device team_slave_0 removed
[ 1127.741038][ T4841] usbip-vudc usbip-vudc.0: gadget not bound
[ 1127.772185][ T4839] usbip-vudc usbip-vudc.0: gadget not bound
[ 1127.999803][ T4852] snd_aloop snd_aloop.0: Parsing timer source 'I{%¾' failed with -22
[ 1128.280967][ T4862] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there
[ 1128.280967][ T4862]  
[ 1128.596714][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3999'.
[ 1130.266421][ T4930] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1131.922717][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18
[ 1134.617192][ T5094] input: f¬
 as /devices/virtual/input/input34
[ 1135.173110][ T5218] FAULT_INJECTION: forcing a failure.
[ 1135.173110][ T5218] name failslab, interval 1, probability 0, space 0, times 0
[ 1135.207629][ T5218] CPU: 1 UID: 0 PID: 5218 Comm: syz.2.4024 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1135.207671][ T5218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1135.207687][ T5218] Call Trace:
[ 1135.207696][ T5218]  <TASK>
[ 1135.207706][ T5218]  dump_stack_lvl+0x16c/0x1f0
[ 1135.207751][ T5218]  should_fail_ex+0x512/0x640
[ 1135.207777][ T5218]  ? fs_reclaim_acquire+0xae/0x150
[ 1135.207809][ T5218]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1135.207849][ T5218]  should_failslab+0xc2/0x120
[ 1135.207889][ T5218]  __kmalloc_noprof+0xd2/0x510
[ 1135.207931][ T5218]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1135.207972][ T5218]  ? tomoyo_profile+0x47/0x60
[ 1135.208002][ T5218]  tomoyo_path_number_perm+0x245/0x580
[ 1135.208038][ T5218]  ? tomoyo_path_number_perm+0x237/0x580
[ 1135.208076][ T5218]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1135.208114][ T5218]  ? find_held_lock+0x2b/0x80
[ 1135.208165][ T5218]  ? find_held_lock+0x2b/0x80
[ 1135.208193][ T5218]  ? __fget_files+0x204/0x3c0
[ 1135.208235][ T5218]  ? __fget_files+0x20e/0x3c0
[ 1135.208277][ T5218]  security_file_ioctl+0x9b/0x240
[ 1135.208317][ T5218]  __x64_sys_ioctl+0xb7/0x200
[ 1135.208351][ T5218]  do_syscall_64+0xcd/0x260
[ 1135.208393][ T5218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1135.208432][ T5218] RIP: 0033:0x7fa87678d169
[ 1135.208453][ T5218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1135.208479][ T5218] RSP: 002b:00007fa87750d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1135.208507][ T5218] RAX: ffffffffffffffda RBX: 00007fa8769a5fa0 RCX: 00007fa87678d169
[ 1135.208526][ T5218] RDX: 0000000000000000 RSI: 00000000c0386106 RDI: 0000000000000002
[ 1135.208543][ T5218] RBP: 00007fa87750d090 R08: 0000000000000000 R09: 0000000000000000
[ 1135.208560][ T5218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1135.208576][ T5218] R13: 0000000000000000 R14: 00007fa8769a5fa0 R15: 00007ffcd52892c8
[ 1135.208608][ T5218]  </TASK>
[ 1135.208620][ T5218] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1138.376110][ T5375] netlink: 186 bytes leftover after parsing attributes in process `syz.8.4036'.
[ 1138.587422][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4038'.
[ 1139.090491][ T5426] netlink: 'syz.4.4042': attribute type 1 has an invalid length.
[ 1142.164390][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4054'.
[ 1142.867297][T20230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1142.879500][T20230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1142.902637][T20230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1142.921793][T20230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1142.943404][T20230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1142.953580][T20230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1143.419482][ T5670] chnl_net:caif_netlink_parms(): no params data found
[ 1143.865261][ T3851] bridge_slave_1: left allmulticast mode
[ 1143.883043][ T3851] bridge_slave_1: left promiscuous mode
[ 1143.941058][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1143.983650][ T3851] bridge_slave_0: left allmulticast mode
[ 1144.034891][ T3851] bridge_slave_0: left promiscuous mode
[ 1144.060544][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1145.002325][T20230] Bluetooth: hci5: command tx timeout
[ 1145.499332][ T3851]  (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1145.539872][ T3851]  (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1145.569737][ T3851]  (unregistering): Released all slaves
[ 1145.625311][ T5670] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1145.660832][ T5670] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1145.698102][ T5670] bridge_slave_0: entered allmulticast mode
[ 1145.734534][ T5670] bridge_slave_0: entered promiscuous mode
[ 1145.850417][ T5670] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1145.876825][ T5670] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1145.911502][ T5670] bridge_slave_1: entered allmulticast mode
[ 1145.929035][ T5670] bridge_slave_1: entered promiscuous mode
[ 1146.148017][ T5670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1146.178008][ T5670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1146.347624][ T5670] team0: Port device team_slave_0 added
[ 1146.378912][ T5670] team0: Port device team_slave_1 added
[ 1146.535758][ T5670] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1146.551622][ T5670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1146.611733][ T5670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1146.637533][ T5978] netlink: 198 bytes leftover after parsing attributes in process `syz.7.4065'.
[ 1146.767189][ T3851] hsr_slave_0: left promiscuous mode
[ 1146.784708][ T3851] hsr_slave_1: left promiscuous mode
[ 1146.866235][ T3851] veth1_macvtap: left promiscuous mode
[ 1146.885555][ T3851] veth0_macvtap: left promiscuous mode
[ 1146.909679][ T3851] veth1_vlan: left promiscuous mode
[ 1146.929619][ T3851] veth0_vlan: left promiscuous mode
[ 1147.090014][T20230] Bluetooth: hci5: command tx timeout
[ 1148.046001][ T3851] team0 (unregistering): Port device team_slave_1 removed
[ 1148.686802][ T5670] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1148.695223][ T5670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1148.727793][ T5670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1148.962601][ T5670] hsr_slave_0: entered promiscuous mode
[ 1148.979321][ T5670] hsr_slave_1: entered promiscuous mode
[ 1149.162971][T20230] Bluetooth: hci5: command tx timeout
[ 1149.452502][ T6164] snd_aloop snd_aloop.0: control 16781581:65535:6:é'x?F�¢é/èìzFË·fC�ªáª:8 is already present
[ 1150.033589][ T6229] netlink: zone id is out of range
[ 1150.049830][ T5670] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1150.070676][ T6229] netlink: zone id is out of range
[ 1150.091039][ T6229] netlink: zone id is out of range
[ 1150.121767][ T5670] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1150.252186][ T5670] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1150.394827][ T5670] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1150.836090][ T5670] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1150.912120][ T5670] 8021q: adding VLAN 0 to HW filter on device team0
[ 1150.988693][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1150.995942][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1151.106368][ T6866] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1151.113733][ T6866] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1151.245511][T20230] Bluetooth: hci5: command tx timeout
[ 1151.302965][ T5670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1151.791302][ T5670] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1152.317453][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4078'.
[ 1152.731649][ T5670] veth0_vlan: entered promiscuous mode
[ 1152.743458][ T5670] veth1_vlan: entered promiscuous mode
[ 1152.902302][ T5670] veth0_macvtap: entered promiscuous mode
[ 1152.927238][T20230] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18
[ 1152.990056][ T5670] veth1_macvtap: entered promiscuous mode
[ 1153.060328][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1153.117850][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.166759][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1153.233678][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.324688][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1153.486956][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.514688][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1153.534728][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.545952][ T5670] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1153.657872][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1153.770107][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.780790][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1153.791864][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.802844][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1153.814283][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.824862][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1153.836267][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.847731][ T5670] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1153.860889][ T5670] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1153.870137][ T5670] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1153.879320][ T5670] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1153.974656][ T5670] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.480661][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4085'.
[ 1154.495931][ T6866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1154.511964][ T6866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1154.617099][T17582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1154.664591][T17582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1155.290707][ T6317] kexec: Could not allocate control_code_buffer
[ 1156.586257][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1156.611680][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1156.623285][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1156.631689][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1156.641324][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1156.655606][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1156.872161][T17582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1157.125153][ T6400] FAULT_INJECTION: forcing a failure.
[ 1157.125153][ T6400] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1157.174765][ T6400] CPU: 0 UID: 0 PID: 6400 Comm: syz.8.4089 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1157.174807][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1157.174823][ T6400] Call Trace:
[ 1157.174832][ T6400]  <TASK>
[ 1157.174843][ T6400]  dump_stack_lvl+0x16c/0x1f0
[ 1157.174900][ T6400]  should_fail_ex+0x512/0x640
[ 1157.174934][ T6400]  get_futex_key+0x49e/0x1000
[ 1157.174966][ T6400]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1157.175017][ T6400]  ? __pfx_get_futex_key+0x10/0x10
[ 1157.175047][ T6400]  ? find_held_lock+0x2b/0x80
[ 1157.175078][ T6400]  ? tipc_setsockopt+0x324/0xdb0
[ 1157.175116][ T6400]  ? rcu_is_watching+0x12/0xc0
[ 1157.175140][ T6400]  ? __local_bh_enable_ip+0xa4/0x120
[ 1157.175173][ T6400]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1157.175215][ T6400]  futex_wake+0xe7/0x4e0
[ 1157.175253][ T6400]  ? __pfx_tipc_setsockopt+0x10/0x10
[ 1157.175292][ T6400]  ? __pfx_futex_wake+0x10/0x10
[ 1157.175334][ T6400]  ? kfree+0x252/0x4d0
[ 1157.175372][ T6400]  do_futex+0x1e3/0x350
[ 1157.175403][ T6400]  ? __pfx_do_futex+0x10/0x10
[ 1157.175440][ T6400]  __x64_sys_futex+0x1e0/0x4c0
[ 1157.175475][ T6400]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1157.175509][ T6400]  ? __sys_setsockopt+0x1cd/0x230
[ 1157.175559][ T6400]  do_syscall_64+0xcd/0x260
[ 1157.175603][ T6400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1157.175632][ T6400] RIP: 0033:0x7f9f5fd8d169
[ 1157.175656][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1157.175684][ T6400] RSP: 002b:00007f9f60c170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1157.175713][ T6400] RAX: ffffffffffffffda RBX: 00007f9f5ffa5fa8 RCX: 00007f9f5fd8d169
[ 1157.175732][ T6400] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9f5ffa5fac
[ 1157.175751][ T6400] RBP: 00007f9f5ffa5fa0 R08: 00007f9f60c18000 R09: 0000000000000000
[ 1157.175769][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f5ffa5fac
[ 1157.175787][ T6400] R13: 0000000000000000 R14: 00007fff8b7520b0 R15: 00007fff8b752198
[ 1157.175818][ T6400]  </TASK>
[ 1157.392695][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1157.560348][T17582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1157.720730][ T6463] kexec: Could not allocate control_code_buffer
[ 1157.818546][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4094'.
[ 1157.925188][T17582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1158.737806][T17582] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1158.768683][T20230] Bluetooth: hci0: command tx timeout
[ 1159.209567][ T6430] chnl_net:caif_netlink_parms(): no params data found
[ 1159.437774][T17582] bridge_slave_1: left allmulticast mode
[ 1159.454655][T17582] bridge_slave_1: left promiscuous mode
[ 1159.461077][T17582] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1159.580016][T17582] bridge_slave_0: left allmulticast mode
[ 1159.588412][T17582] bridge_slave_0: left promiscuous mode
[ 1159.601049][T17582] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1160.844877][T20230] Bluetooth: hci0: command tx timeout
[ 1161.227708][T17582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1161.276294][T17582] bond0 (unregistering): Released all slaves
[ 1161.545956][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1161.553642][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1161.589145][ T6430] bridge_slave_0: entered allmulticast mode
[ 1161.605752][ T6430] bridge_slave_0: entered promiscuous mode
[ 1161.656234][T17582] tipc: Left network mode
[ 1161.661238][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1161.685278][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1161.692684][ T6430] bridge_slave_1: entered allmulticast mode
[ 1161.735645][ T6430] bridge_slave_1: entered promiscuous mode
[ 1162.199380][T20230] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5
[ 1162.305687][ T6430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1162.458602][ T6430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1162.807747][ T6430] team0: Port device team_slave_0 added
[ 1162.902728][ T6430] team0: Port device team_slave_1 added
[ 1162.925220][T20230] Bluetooth: hci0: command tx timeout
[ 1163.138100][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1163.158883][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1163.234621][ T6430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1163.379420][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1163.400171][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1163.472363][ T6430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1163.742633][T17582] hsr_slave_0: left promiscuous mode
[ 1163.762238][T17582] hsr_slave_1: left promiscuous mode
[ 1163.785450][T17582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1163.812819][T17582] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1163.840127][T17582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1163.866071][T17582] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1163.930907][T17582] veth1_macvtap: left promiscuous mode
[ 1163.952997][T17582] veth1_vlan: left promiscuous mode
[ 1163.986918][T17582] veth0_vlan: left promiscuous mode
[ 1164.546094][ T6937] sctp: [Deprecated]: syz.4.4114 (pid 6937) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1164.546094][ T6937] Use struct sctp_sack_info instead
[ 1165.004597][T20230] Bluetooth: hci0: command tx timeout
[ 1165.351883][ T6946] snd_aloop snd_aloop.0: control 16781581:65539:6:é'x?F�¢é/èìzFË·fC�ªáª:7 is already present
[ 1165.794828][T17582] team0 (unregistering): Port device team_slave_1 removed
[ 1165.950282][T17582] team0 (unregistering): Port device team_slave_0 removed
[ 1166.882551][ T6949] Invalid ELF header magic: != ELF
[ 1167.155327][ T6953] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4117'.
[ 1167.207965][ T6953] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4117'.
[ 1167.265803][ T6430] hsr_slave_0: entered promiscuous mode
[ 1167.270577][ T6953] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4117'.
[ 1167.282460][ T6430] hsr_slave_1: entered promiscuous mode
[ 1167.296514][ T6430] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1167.304157][ T6430] Cannot create hsr debugfs directory
[ 1167.313156][ T6953] netlink: 302 bytes leftover after parsing attributes in process `syz.8.4117'.
[ 1168.478488][ T7153] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4122'.
[ 1168.524870][ T7153] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1168.677866][ T7153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1168.686033][ T7153] IPv6: NLM_F_CREATE should be set when creating new route
[ 1168.693387][ T7153] IPv6: NLM_F_CREATE should be set when creating new route
[ 1169.479015][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4124'.
[ 1169.640462][ T7221] veth0_macvtap: left promiscuous mode
[ 1169.897994][ T6430] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1169.921597][ T6430] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1170.063663][ T6430] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1170.091442][ T6430] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1170.908864][ T6430] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1171.111291][ T6430] 8021q: adding VLAN 0 to HW filter on device team0
[ 1171.143306][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1171.150495][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1171.271332][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1171.278987][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1171.590655][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4128'.
[ 1172.732000][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1172.919748][ T6430] veth0_vlan: entered promiscuous mode
[ 1172.980425][ T6430] veth1_vlan: entered promiscuous mode
[ 1173.018033][ T6430] veth0_macvtap: entered promiscuous mode
[ 1173.044092][ T6430] veth1_macvtap: entered promiscuous mode
[ 1173.115368][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1173.149646][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1173.184805][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1173.224705][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1173.254862][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1173.294930][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1173.328925][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1173.372288][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1173.416284][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1173.451455][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1173.484566][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1173.534810][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1173.574853][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1173.657660][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1173.697665][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1173.754608][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1173.800214][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1173.837332][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1173.894309][ T6430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1173.935053][ T6430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1173.943827][ T6430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1174.004651][ T6430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1174.251299][ T7612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1174.305483][ T7612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1174.386542][ T7612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1174.418431][ T7612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1174.573311][ T7394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'.
[ 1174.823802][ T7400] [U] 
[ 1174.826693][ T7400] [U] 
[ 1174.829605][ T7400] [U] 
[ 1174.832358][ T7400] [U] 
[ 1174.852436][ T7400] [U] 
[ 1174.855302][ T7400] [U] 
[ 1174.858072][ T7400] [U] 
[ 1174.860819][ T7400] [U] 
[ 1174.906721][ T7401] [U] 
[ 1176.494710][ T7489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4140'.
[ 1176.811820][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4143'.
[ 1176.955354][ T7508] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4144'.
[ 1179.055983][ T7536] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1179.076518][ T7536] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1179.175994][ T7536] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1179.216522][ T7536] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1179.295008][ T7536] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1179.423630][ T7536] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1179.449067][ T7536] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1179.469283][ T7604] FAULT_INJECTION: forcing a failure.
[ 1179.469283][ T7604] name failslab, interval 1, probability 0, space 0, times 0
[ 1179.504688][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.8.4159 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1179.504728][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1179.504744][ T7604] Call Trace:
[ 1179.504753][ T7604]  <TASK>
[ 1179.504764][ T7604]  dump_stack_lvl+0x16c/0x1f0
[ 1179.504807][ T7604]  should_fail_ex+0x512/0x640
[ 1179.504832][ T7604]  ? fs_reclaim_acquire+0xae/0x150
[ 1179.504875][ T7604]  should_failslab+0xc2/0x120
[ 1179.504917][ T7604]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1179.504959][ T7604]  ? security_inode_alloc+0x3b/0x2b0
[ 1179.504997][ T7604]  security_inode_alloc+0x3b/0x2b0
[ 1179.505033][ T7604]  inode_init_always_gfp+0xce4/0x1030
[ 1179.505079][ T7604]  alloc_inode+0x86/0x240
[ 1179.505108][ T7604]  iget_locked+0x2e4/0x830
[ 1179.505141][ T7604]  ? __pfx_iget_locked+0x10/0x10
[ 1179.505175][ T7604]  ? down_read+0x13d/0x480
[ 1179.505214][ T7604]  kernfs_get_inode+0x48/0x460
[ 1179.505255][ T7604]  kernfs_iop_lookup+0x1ec/0x330
[ 1179.505296][ T7604]  ? __pfx_kernfs_iop_lookup+0x10/0x10
[ 1179.505333][ T7604]  lookup_open.isra.0+0x4d7/0x1580
[ 1179.505370][ T7604]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 1179.505414][ T7604]  ? mnt_get_write_access+0x20c/0x300
[ 1179.505447][ T7604]  path_openat+0x905/0x2d40
[ 1179.505493][ T7604]  ? __pfx_path_openat+0x10/0x10
[ 1179.505537][ T7604]  do_filp_open+0x20b/0x470
[ 1179.505576][ T7604]  ? __pfx_do_filp_open+0x10/0x10
[ 1179.505613][ T7604]  ? find_held_lock+0x2b/0x80
[ 1179.505659][ T7604]  ? alloc_fd+0x420/0x760
[ 1179.505703][ T7604]  do_sys_openat2+0x11b/0x1d0
[ 1179.505731][ T7604]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1179.505770][ T7604]  __x64_sys_openat+0x174/0x210
[ 1179.505799][ T7604]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1179.505828][ T7604]  ? rcu_is_watching+0x12/0xc0
[ 1179.505872][ T7604]  do_syscall_64+0xcd/0x260
[ 1179.505913][ T7604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1179.505939][ T7604] RIP: 0033:0x7f9f5fd8d169
[ 1179.505963][ T7604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1179.505989][ T7604] RSP: 002b:00007f9f60bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1179.506015][ T7604] RAX: ffffffffffffffda RBX: 00007f9f5ffa6160 RCX: 00007f9f5fd8d169
[ 1179.506033][ T7604] RDX: 0000000000124001 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 1179.506050][ T7604] RBP: 00007f9f5fe0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1179.506065][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1179.506080][ T7604] R13: 0000000000000000 R14: 00007f9f5ffa6160 R15: 00007fff8b752198
[ 1179.506101][ T7604]  </TASK>
[ 1179.824035][ T7536] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1179.917683][ T7629] delete_channel: no stack
[ 1179.924993][ T7536] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1179.948075][ T7536] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1180.078126][ T7536] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1180.281546][ T7637] FAULT_INJECTION: forcing a failure.
[ 1180.281546][ T7637] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1180.355709][ T7637] CPU: 1 UID: 0 PID: 7637 Comm: syz.4.4163 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1180.355754][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1180.355773][ T7637] Call Trace:
[ 1180.355782][ T7637]  <TASK>
[ 1180.355793][ T7637]  dump_stack_lvl+0x16c/0x1f0
[ 1180.355852][ T7637]  should_fail_ex+0x512/0x640
[ 1180.355885][ T7637]  should_fail_alloc_page+0xe7/0x130
[ 1180.355932][ T7637]  prepare_alloc_pages.constprop.0+0x172/0x570
[ 1180.355970][ T7637]  ? stack_trace_save+0x8e/0xc0
[ 1180.356001][ T7637]  __alloc_frozen_pages_noprof+0x18f/0x24d0
[ 1180.356042][ T7637]  ? kasan_save_stack+0x42/0x60
[ 1180.356083][ T7637]  ? cgroup_rstat_updated+0x2a/0xb20
[ 1180.356118][ T7637]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1180.356164][ T7637]  ? __lock_acquire+0x5ca/0x1ba0
[ 1180.356212][ T7637]  ? lock_acquire+0x179/0x350
[ 1180.356248][ T7637]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1180.356292][ T7637]  ? policy_nodemask+0xea/0x4e0
[ 1180.356338][ T7637]  alloc_pages_mpol+0x1fb/0x540
[ 1180.356383][ T7637]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1180.356428][ T7637]  ? __lock_acquire+0x5ca/0x1ba0
[ 1180.356469][ T7637]  folio_alloc_mpol_noprof+0x36/0x2f0
[ 1180.356502][ T7637]  vma_alloc_folio_noprof+0xed/0x1e0
[ 1180.356533][ T7637]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1180.356572][ T7637]  do_pte_missing+0x2049/0x3ea0
[ 1180.356621][ T7637]  __handle_mm_fault+0x1043/0x2a50
[ 1180.356669][ T7637]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1180.356708][ T7637]  ? __pte_offset_map_lock+0x155/0x2f0
[ 1180.356740][ T7637]  ? find_held_lock+0x2b/0x80
[ 1180.356767][ T7637]  ? find_held_lock+0x2b/0x80
[ 1180.356811][ T7637]  handle_mm_fault+0x3fa/0xaa0
[ 1180.356865][ T7637]  __get_user_pages+0x771/0x36f0
[ 1180.356909][ T7637]  ? __pfx_mt_find+0x10/0x10
[ 1180.356936][ T7637]  ? __pfx___get_user_pages+0x10/0x10
[ 1180.356986][ T7637]  populate_vma_page_range+0x278/0x3a0
[ 1180.357030][ T7637]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1180.357071][ T7637]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1180.357107][ T7637]  ? do_mmap+0x69c/0x11b0
[ 1180.357145][ T7637]  __mm_populate+0x1d8/0x380
[ 1180.357187][ T7637]  ? __pfx___mm_populate+0x10/0x10
[ 1180.357229][ T7637]  ? up_write+0x1b2/0x520
[ 1180.357274][ T7637]  vm_mmap_pgoff+0x362/0x450
[ 1180.357314][ T7637]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1180.357352][ T7637]  ? __mutex_unlock_slowpath+0x161/0x6a0
[ 1180.357399][ T7637]  ? __x64_sys_futex+0x1e0/0x4c0
[ 1180.357431][ T7637]  ? __x64_sys_futex+0x1e9/0x4c0
[ 1180.357467][ T7637]  ksys_mmap_pgoff+0x7d/0x5c0
[ 1180.357499][ T7637]  ? rcu_is_watching+0x12/0xc0
[ 1180.357530][ T7637]  __x64_sys_mmap+0x125/0x190
[ 1180.357562][ T7637]  do_syscall_64+0xcd/0x260
[ 1180.357602][ T7637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1180.357631][ T7637] RIP: 0033:0x7fb02ed8d169
[ 1180.357656][ T7637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1180.357686][ T7637] RSP: 002b:00007fb02fc3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1180.357713][ T7637] RAX: ffffffffffffffda RBX: 00007fb02efa5fa0 RCX: 00007fb02ed8d169
[ 1180.357732][ T7637] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[ 1180.357750][ T7637] RBP: 00007fb02ee0e2a0 R08: 0000000000000002 R09: 0000000000008000
[ 1180.357768][ T7637] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[ 1180.357785][ T7637] R13: 0000000000000000 R14: 00007fb02efa5fa0 R15: 00007ffdc3575a88
[ 1180.357825][ T7637]  </TASK>
[ 1180.763473][ T7645] FAULT_INJECTION: forcing a failure.
[ 1180.763473][ T7645] name failslab, interval 1, probability 0, space 0, times 0
[ 1180.791969][T20230] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1180.918859][ T7645] CPU: 0 UID: 0 PID: 7645 Comm: syz.2.4165 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1180.918905][ T7645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1180.918924][ T7645] Call Trace:
[ 1180.918934][ T7645]  <TASK>
[ 1180.918946][ T7645]  dump_stack_lvl+0x16c/0x1f0
[ 1180.918995][ T7645]  should_fail_ex+0x512/0x640
[ 1180.919026][ T7645]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[ 1180.919071][ T7645]  should_failslab+0xc2/0x120
[ 1180.919124][ T7645]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[ 1180.919169][ T7645]  ? __d_alloc+0x31/0xaa0
[ 1180.919199][ T7645]  __d_alloc+0x31/0xaa0
[ 1180.919225][ T7645]  ? file_init_path+0x4fe/0x760
[ 1180.919257][ T7645]  d_alloc_pseudo+0x1c/0xc0
[ 1180.919292][ T7645]  alloc_file_pseudo+0xcf/0x230
[ 1180.919324][ T7645]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1180.919354][ T7645]  ? bpf_lsm_socket_post_create+0x9/0x10
[ 1180.919400][ T7645]  sock_alloc_file+0x50/0x210
[ 1180.919431][ T7645]  __sys_socketpair+0x34e/0x5a0
[ 1180.919471][ T7645]  ? __pfx___sys_socketpair+0x10/0x10
[ 1180.919508][ T7645]  ? xfd_validate_state+0x5d/0x180
[ 1180.919538][ T7645]  ? rcu_is_watching+0x12/0xc0
[ 1180.919571][ T7645]  __x64_sys_socketpair+0x96/0x100
[ 1180.919608][ T7645]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1180.919649][ T7645]  do_syscall_64+0xcd/0x260
[ 1180.919693][ T7645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1180.919722][ T7645] RIP: 0033:0x7f1ab258d169
[ 1180.919747][ T7645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1180.919776][ T7645] RSP: 002b:00007f1ab33fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[ 1180.919805][ T7645] RAX: ffffffffffffffda RBX: 00007f1ab27a5fa0 RCX: 00007f1ab258d169
[ 1180.919833][ T7645] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[ 1180.919852][ T7645] RBP: 00007f1ab260e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1180.919870][ T7645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1180.919887][ T7645] R13: 0000000000000000 R14: 00007f1ab27a5fa0 R15: 00007ffc508e1b18
[ 1180.919919][ T7645]  </TASK>
[ 1181.137104][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1181.154600][T20230] Bluetooth: hci3: command 0x0406 tx timeout
[ 1181.244584][T20230] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1181.485613][T20230] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1181.521913][ T7660] lo: entered allmulticast mode
[ 1181.967412][T20230] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1181.989763][ T7660] lo: left allmulticast mode
[ 1182.089662][ T7689] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4168'.
[ 1182.103124][ T7689] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1182.112081][ T7689] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1182.158884][ T7689] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1182.166758][ T7689] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1183.324629][T20230] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1183.564612][T20230] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1183.697425][ T7731] snd_aloop snd_aloop.0: Parsing timer source 'I{%¾' failed with -22
[ 1184.045712][T20230] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1185.404953][T20230] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1185.650665][T20230] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1186.128481][T20230] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1187.995126][T20230] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5
[ 1188.202389][ T7916] ubi0: attaching mtd0
[ 1188.231458][ T7916] ubi0: scanning is finished
[ 1188.257299][ T7916] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1188.682293][ T7916] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1190.204068][ T8035] netlink: 326 bytes leftover after parsing attributes in process `syz.4.4204'.
[ 1191.365301][ T8063] snd_aloop snd_aloop.0: Parsing timer source 'I{%¾' failed with -22
[ 1191.870424][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4214'.
[ 1192.572563][ T8114] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[ 1193.741730][ T8138] snd_aloop snd_aloop.0: Parsing timer source 'I{%¾' failed with -22
[ 1195.072387][ T8222] could not allocate digest TFM handle 
[ 1195.559381][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4229'.
[ 1196.823027][ T8384] netlink: 'syz.4.4233': attribute type 1 has an invalid length.
[ 1198.167312][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4236'.
[ 1198.200620][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4236'.
[ 1198.449096][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4237'.
[ 1198.475675][ T8400] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4237'.
[ 1200.838279][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4248'.
[ 1201.551678][ T8476] CIFS mount error: No usable UNC path provided in device string!
[ 1201.551678][ T8476] 
[ 1201.589093][ T8476] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1202.430059][ T8553] snd_aloop snd_aloop.0: Parsing timer source 'I{%¾' failed with -22
[ 1204.163806][ T8619] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4261'.
[ 1204.188558][ T8619] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4261'.
[ 1205.842464][T20230] Bluetooth: hci5: unexpected subevent 0x01 length: 4 < 18
[ 1205.863389][   T30] audit: type=1800 audit(4294975091.516:38): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4264" name="dbroot" dev="configfs" ino=114535 res=0 errno=0
[ 1205.942897][ T8667] Invalid ELF header magic: != ELF
[ 1206.978761][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4269'.
[ 1207.487789][ T8707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4274'.
[ 1207.656005][ T8712] FAULT_INJECTION: forcing a failure.
[ 1207.656005][ T8712] name failslab, interval 1, probability 0, space 0, times 0
[ 1207.704145][ T8712] CPU: 0 UID: 0 PID: 8712 Comm: syz.8.4275 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1207.704183][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1207.704197][ T8712] Call Trace:
[ 1207.704205][ T8712]  <TASK>
[ 1207.704215][ T8712]  dump_stack_lvl+0x16c/0x1f0
[ 1207.704257][ T8712]  should_fail_ex+0x512/0x640
[ 1207.704279][ T8712]  ? __kmalloc_cache_noprof+0x57/0x3e0
[ 1207.704318][ T8712]  should_failslab+0xc2/0x120
[ 1207.704353][ T8712]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1207.704382][ T8712]  ? input_allocate_device+0xc5/0x350
[ 1207.704413][ T8712]  input_allocate_device+0xc5/0x350
[ 1207.704440][ T8712]  uinput_ioctl_handler.isra.0+0x8bb/0x1df0
[ 1207.704486][ T8712]  ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10
[ 1207.704533][ T8712]  ? find_held_lock+0x2b/0x80
[ 1207.704575][ T8712]  ? __pfx_uinput_ioctl+0x10/0x10
[ 1207.704616][ T8712]  __x64_sys_ioctl+0x190/0x200
[ 1207.704652][ T8712]  do_syscall_64+0xcd/0x260
[ 1207.704691][ T8712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1207.704714][ T8712] RIP: 0033:0x7f9f5fd8d169
[ 1207.704733][ T8712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1207.704754][ T8712] RSP: 002b:00007f9f60c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1207.704778][ T8712] RAX: ffffffffffffffda RBX: 00007f9f5ffa5fa0 RCX: 00007f9f5fd8d169
[ 1207.704793][ T8712] RDX: 0000000000000000 RSI: 00000000405c5503 RDI: 0000000000000006
[ 1207.704807][ T8712] RBP: 00007f9f5fe0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1207.704821][ T8712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1207.704834][ T8712] R13: 0000000000000000 R14: 00007f9f5ffa5fa0 R15: 00007fff8b752198
[ 1207.704858][ T8712]  </TASK>
[ 1210.245068][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4286'.
[ 1210.346157][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4289'.
[ 1210.394274][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4289'.
[ 1210.875653][ T8818] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4290'.
[ 1210.927362][ T8818] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode
[ 1212.616178][ T8935] FAULT_INJECTION: forcing a failure.
[ 1212.616178][ T8935] name failslab, interval 1, probability 0, space 0, times 0
[ 1212.668380][ T8935] CPU: 0 UID: 0 PID: 8935 Comm: syz.8.4304 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1212.668422][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1212.668438][ T8935] Call Trace:
[ 1212.668446][ T8935]  <TASK>
[ 1212.668456][ T8935]  dump_stack_lvl+0x16c/0x1f0
[ 1212.668501][ T8935]  should_fail_ex+0x512/0x640
[ 1212.668528][ T8935]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[ 1212.668572][ T8935]  should_failslab+0xc2/0x120
[ 1212.668612][ T8935]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[ 1212.668650][ T8935]  ? __d_alloc+0x31/0xaa0
[ 1212.668677][ T8935]  __d_alloc+0x31/0xaa0
[ 1212.668705][ T8935]  path_from_stashed+0x500/0xb00
[ 1212.668747][ T8935]  ? __pfx_path_from_stashed+0x10/0x10
[ 1212.668787][ T8935]  ? do_raw_spin_unlock+0x172/0x230
[ 1212.668829][ T8935]  ns_get_path+0x5f/0x80
[ 1212.668862][ T8935]  proc_ns_get_link+0x121/0x260
[ 1212.668899][ T8935]  ? __pfx_proc_ns_get_link+0x10/0x10
[ 1212.668938][ T8935]  ? __pfx___might_resched+0x10/0x10
[ 1212.668974][ T8935]  ? __pfx_proc_ns_get_link+0x10/0x10
[ 1212.669013][ T8935]  step_into+0x1b22/0x2270
[ 1212.669054][ T8935]  ? __pfx_step_into+0x10/0x10
[ 1212.669086][ T8935]  ? __pfx___up_read+0x10/0x10
[ 1212.669121][ T8935]  ? path_openat+0x15b7/0x2d40
[ 1212.669154][ T8935]  ? lookup_fast+0x156/0x610
[ 1212.669189][ T8935]  path_openat+0x749/0x2d40
[ 1212.669245][ T8935]  ? __pfx_path_openat+0x10/0x10
[ 1212.669289][ T8935]  do_filp_open+0x20b/0x470
[ 1212.669327][ T8935]  ? __pfx_do_filp_open+0x10/0x10
[ 1212.669362][ T8935]  ? find_held_lock+0x2b/0x80
[ 1212.669399][ T8935]  ? alloc_fd+0x420/0x760
[ 1212.669438][ T8935]  do_sys_openat2+0x11b/0x1d0
[ 1212.669464][ T8935]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1212.669499][ T8935]  __x64_sys_openat+0x174/0x210
[ 1212.669525][ T8935]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1212.669555][ T8935]  ? rcu_is_watching+0x12/0xc0
[ 1212.669589][ T8935]  do_syscall_64+0xcd/0x260
[ 1212.669627][ T8935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1212.669654][ T8935] RIP: 0033:0x7f9f5fd8d169
[ 1212.669677][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1212.669702][ T8935] RSP: 002b:00007f9f60c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1212.669729][ T8935] RAX: ffffffffffffffda RBX: 00007f9f5ffa5fa0 RCX: 00007f9f5fd8d169
[ 1212.669747][ T8935] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 1212.669764][ T8935] RBP: 00007f9f5fe0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1212.669781][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1212.669797][ T8935] R13: 0000000000000000 R14: 00007f9f5ffa5fa0 R15: 00007fff8b752198
[ 1212.669826][ T8935]  </TASK>
[ 1212.948329][ T8883] svc: failed to register nfsdv3 RPC service (errno 512).
[ 1212.971663][ T8883] svc: failed to register nfsaclv3 RPC service (errno 512).
[ 1213.339802][ T8949] random: crng reseeded on system resumption
[ 1213.796115][ T8950] FAULT_INJECTION: forcing a failure.
[ 1213.796115][ T8950] name failslab, interval 1, probability 0, space 0, times 0
[ 1213.934638][ T8950] CPU: 1 UID: 0 PID: 8950 Comm: syz.4.4306 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1213.934685][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1213.934705][ T8950] Call Trace:
[ 1213.934714][ T8950]  <TASK>
[ 1213.934726][ T8950]  dump_stack_lvl+0x16c/0x1f0
[ 1213.934776][ T8950]  should_fail_ex+0x512/0x640
[ 1213.934805][ T8950]  ? __kmalloc_cache_noprof+0x57/0x3e0
[ 1213.934846][ T8950]  should_failslab+0xc2/0x120
[ 1213.934892][ T8950]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1213.934926][ T8950]  ? trace_kmem_cache_alloc+0x28/0xc0
[ 1213.934955][ T8950]  ? kmem_cache_alloc_node_noprof+0x225/0x3b0
[ 1213.934996][ T8950]  ? delete_node+0x207/0x8d0
[ 1213.935029][ T8950]  ? blk_alloc_queue_stats+0x3f/0x110
[ 1213.935062][ T8950]  blk_alloc_queue_stats+0x3f/0x110
[ 1213.935089][ T8950]  blk_alloc_queue+0xda/0x700
[ 1213.935126][ T8950]  __blk_alloc_disk+0xa5/0x170
[ 1213.935167][ T8950]  ? __pfx___blk_alloc_disk+0x10/0x10
[ 1213.935225][ T8950]  ? lockdep_init_map_type+0x5c/0x280
[ 1213.935266][ T8950]  ? __raw_spin_lock_init+0x3a/0x110
[ 1213.935313][ T8950]  ? __pfx_hot_add_show+0x10/0x10
[ 1213.935341][ T8950]  zram_add+0x16e/0x6c0
[ 1213.935367][ T8950]  ? __pfx_zram_add+0x10/0x10
[ 1213.935419][ T8950]  ? __pfx_hot_add_show+0x10/0x10
[ 1213.935446][ T8950]  hot_add_show+0x21/0x80
[ 1213.935482][ T8950]  class_attr_show+0x6f/0xa0
[ 1213.935526][ T8950]  ? __pfx_class_attr_show+0x10/0x10
[ 1213.935567][ T8950]  sysfs_kf_seq_show+0x23e/0x410
[ 1213.935612][ T8950]  seq_read_iter+0x506/0x12b0
[ 1213.935662][ T8950]  kernfs_fop_read_iter+0x422/0x5a0
[ 1213.935695][ T8950]  ? rw_verify_area+0xcf/0x680
[ 1213.935732][ T8950]  vfs_read+0x8c8/0xc70
[ 1213.935773][ T8950]  ? __pfx___mutex_lock+0x10/0x10
[ 1213.935815][ T8950]  ? __pfx_vfs_read+0x10/0x10
[ 1213.935872][ T8950]  ksys_read+0x12a/0x240
[ 1213.935909][ T8950]  ? __pfx_ksys_read+0x10/0x10
[ 1213.935944][ T8950]  ? rcu_is_watching+0x12/0xc0
[ 1213.935981][ T8950]  do_syscall_64+0xcd/0x260
[ 1213.936026][ T8950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1213.936055][ T8950] RIP: 0033:0x7fb02ed8d169
[ 1213.936079][ T8950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1213.936108][ T8950] RSP: 002b:00007fb02fc1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1213.936137][ T8950] RAX: ffffffffffffffda RBX: 00007fb02efa6080 RCX: 00007fb02ed8d169
[ 1213.936156][ T8950] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008
[ 1213.936174][ T8950] RBP: 00007fb02ee0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1213.936190][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1213.936206][ T8950] R13: 0000000000000000 R14: 00007fb02efa6080 R15: 00007ffdc3575a88
[ 1213.936239][ T8950]  </TASK>
[ 1213.936272][ T8950] zram: Error allocating disk structure for device 6
[ 1215.244822][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4313'.
[ 1216.402593][ T9032] ovs_: entered promiscuous mode
[ 1217.693940][ T9089] FAULT_INJECTION: forcing a failure.
[ 1217.693940][ T9089] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1217.728114][ T9089] CPU: 1 UID: 0 PID: 9089 Comm: syz.4.4325 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1217.728155][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1217.728172][ T9089] Call Trace:
[ 1217.728181][ T9089]  <TASK>
[ 1217.728192][ T9089]  dump_stack_lvl+0x16c/0x1f0
[ 1217.728237][ T9089]  should_fail_ex+0x512/0x640
[ 1217.728269][ T9089]  _copy_from_user+0x2e/0xd0
[ 1217.728302][ T9089]  copy_msghdr_from_user+0x98/0x160
[ 1217.728344][ T9089]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1217.728399][ T9089]  ? __pfx__kstrtoull+0x10/0x10
[ 1217.728444][ T9089]  ___sys_sendmsg+0xfe/0x1d0
[ 1217.728486][ T9089]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1217.728538][ T9089]  ? find_held_lock+0x2b/0x80
[ 1217.728573][ T9089]  ? proc_fail_nth_write+0x9f/0x250
[ 1217.728608][ T9089]  ? find_held_lock+0x2b/0x80
[ 1217.728638][ T9089]  __sys_sendmmsg+0x200/0x420
[ 1217.728682][ T9089]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1217.728731][ T9089]  ? do_sys_openat2+0x157/0x1d0
[ 1217.728760][ T9089]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1217.728801][ T9089]  ? ksys_write+0x1b9/0x240
[ 1217.728838][ T9089]  ? __pfx_ksys_write+0x10/0x10
[ 1217.728872][ T9089]  ? rcu_is_watching+0x12/0xc0
[ 1217.728904][ T9089]  __x64_sys_sendmmsg+0x9c/0x100
[ 1217.728929][ T9089]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1217.728967][ T9089]  do_syscall_64+0xcd/0x260
[ 1217.729008][ T9089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1217.729037][ T9089] RIP: 0033:0x7fb02ed8d169
[ 1217.729060][ T9089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1217.729086][ T9089] RSP: 002b:00007fb02fc3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1217.729113][ T9089] RAX: ffffffffffffffda RBX: 00007fb02efa5fa0 RCX: 00007fb02ed8d169
[ 1217.729131][ T9089] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[ 1217.729148][ T9089] RBP: 00007fb02fc3b090 R08: 0000000000000000 R09: 0000000000000000
[ 1217.729165][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1217.729182][ T9089] R13: 0000000000000000 R14: 00007fb02efa5fa0 R15: 00007ffdc3575a88
[ 1217.729213][ T9089]  </TASK>
[ 1218.044863][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4326'.
[ 1218.483478][ T9101] bond0: (slave bond_slave_1): Releasing backup interface
[ 1220.476893][ T9221] Invalid ELF header magic: != ELF
[ 1220.610167][ T9242] can: request_module (can-proto-5) failed.
[ 1222.333335][ T9337] random: crng reseeded on system resumption
[ 1223.216574][ T9416] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4354'.
[ 1223.649706][ T9416] team0: Port device team_slave_0 removed
[ 1224.699949][ T9490] can: request_module (can-proto-0) failed.
[ 1226.613737][ T9606] FAULT_INJECTION: forcing a failure.
[ 1226.613737][ T9606] name failslab, interval 1, probability 0, space 0, times 0
[ 1226.653996][ T9606] CPU: 0 UID: 0 PID: 9606 Comm: syz.4.4366 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1226.654042][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1226.654060][ T9606] Call Trace:
[ 1226.654069][ T9606]  <TASK>
[ 1226.654081][ T9606]  dump_stack_lvl+0x16c/0x1f0
[ 1226.654140][ T9606]  should_fail_ex+0x512/0x640
[ 1226.654169][ T9606]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[ 1226.654214][ T9606]  ? __pfx_mempool_alloc_slab+0x10/0x10
[ 1226.654256][ T9606]  should_failslab+0xc2/0x120
[ 1226.654301][ T9606]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1226.654342][ T9606]  ? mempool_init_node+0x31d/0x760
[ 1226.654383][ T9606]  ? __pfx_mempool_alloc_slab+0x10/0x10
[ 1226.654423][ T9606]  ? __pfx_mempool_alloc_slab+0x10/0x10
[ 1226.654466][ T9606]  mempool_init_node+0x31d/0x760
[ 1226.654508][ T9606]  ? __pfx_mempool_alloc_slab+0x10/0x10
[ 1226.654543][ T9606]  ? __pfx_mempool_free_slab+0x10/0x10
[ 1226.654579][ T9606]  mempool_init_noprof+0x3a/0x50
[ 1226.654620][ T9606]  bioset_init+0x37a/0x880
[ 1226.654652][ T9606]  ? __pfx_bioset_init+0x10/0x10
[ 1226.654692][ T9606]  __alloc_disk_node+0x83/0x610
[ 1226.654736][ T9606]  __blk_mq_alloc_disk+0x89/0x120
[ 1226.654779][ T9606]  loop_add+0x496/0xb70
[ 1226.654803][ T9606]  ? 0xffffffff81000000
[ 1226.654825][ T9606]  ? do_vfs_ioctl+0x512/0x1990
[ 1226.654859][ T9606]  ? __pfx_loop_add+0x10/0x10
[ 1226.654884][ T9606]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1226.654934][ T9606]  ? find_held_lock+0x2b/0x80
[ 1226.654969][ T9606]  ? 0xffffffff81000000
[ 1226.654989][ T9606]  loop_control_ioctl+0x13c/0x630
[ 1226.655018][ T9606]  ? __pfx_loop_control_ioctl+0x10/0x10
[ 1226.655047][ T9606]  ? 0xffffffff81000000
[ 1226.655065][ T9606]  ? __pfx_loop_control_ioctl+0x10/0x10
[ 1226.655092][ T9606]  ? 0xffffffff81000000
[ 1226.655120][ T9606]  __x64_sys_ioctl+0x190/0x200
[ 1226.655156][ T9606]  do_syscall_64+0xcd/0x260
[ 1226.655202][ T9606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1226.655234][ T9606] RIP: 0033:0x7fb02ed8d169
[ 1226.655257][ T9606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1226.655284][ T9606] RSP: 002b:00007fb02fc3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1226.655313][ T9606] RAX: ffffffffffffffda RBX: 00007fb02efa5fa0 RCX: 00007fb02ed8d169
[ 1226.655334][ T9606] RDX: ffffffff81000000 RSI: 0000000000004c80 RDI: 000000000000000c
[ 1226.655351][ T9606] RBP: 00007fb02ee0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1226.655369][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1226.655387][ T9606] R13: 0000000000000000 R14: 00007fb02efa5fa0 R15: 00007ffdc3575a88
[ 1226.655412][ T9606]  ? 0xffffffff81000000
[ 1226.655437][ T9606]  </TASK>
[ 1227.777496][ T9645] : Can't lookup blockdev
[ 1227.956375][ T9625] can: request_module (can-proto-0) failed.
[ 1228.291173][ T9663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4378'.
[ 1229.025048][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4383'.
[ 1229.244185][ T9697] FAULT_INJECTION: forcing a failure.
[ 1229.244185][ T9697] name failslab, interval 1, probability 0, space 0, times 0
[ 1229.304632][ T9697] CPU: 1 UID: 0 PID: 9697 Comm: syz.4.4385 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1229.304680][ T9697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1229.304698][ T9697] Call Trace:
[ 1229.304708][ T9697]  <TASK>
[ 1229.304719][ T9697]  dump_stack_lvl+0x16c/0x1f0
[ 1229.304768][ T9697]  should_fail_ex+0x512/0x640
[ 1229.304796][ T9697]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 1229.304843][ T9697]  should_failslab+0xc2/0x120
[ 1229.304888][ T9697]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 1229.304931][ T9697]  ? __alloc_skb+0x2b2/0x380
[ 1229.304979][ T9697]  __alloc_skb+0x2b2/0x380
[ 1229.305030][ T9697]  ? __pfx___alloc_skb+0x10/0x10
[ 1229.305077][ T9697]  ? __pfx___register_sysctl_table+0x10/0x10
[ 1229.305106][ T9697]  ? is_module_address+0x2a/0x50
[ 1229.305149][ T9697]  inet_netconf_notify_devconf+0x8b/0x1f0
[ 1229.305197][ T9697]  __devinet_sysctl_register+0x227/0x360
[ 1229.305243][ T9697]  ? __pfx___devinet_sysctl_register+0x10/0x10
[ 1229.305283][ T9697]  ? trace_kmalloc+0x2b/0xd0
[ 1229.305313][ T9697]  ? devinet_init_net+0xeb/0x910
[ 1229.305356][ T9697]  ? __asan_memcpy+0x3c/0x60
[ 1229.305393][ T9697]  devinet_init_net+0x315/0x910
[ 1229.305436][ T9697]  ? __pfx_devinet_init_net+0x10/0x10
[ 1229.305479][ T9697]  ops_init+0x1df/0x5f0
[ 1229.305509][ T9697]  setup_net+0x21e/0x850
[ 1229.305539][ T9697]  ? __pfx_setup_net+0x10/0x10
[ 1229.305566][ T9697]  ? lockdep_init_map_type+0x5c/0x280
[ 1229.305606][ T9697]  ? __pfx_down_read_killable+0x10/0x10
[ 1229.305638][ T9697]  ? debug_mutex_init+0x37/0x70
[ 1229.305669][ T9697]  copy_net_ns+0x2a6/0x5f0
[ 1229.305704][ T9697]  create_new_namespaces+0x3ea/0xad0
[ 1229.305746][ T9697]  unshare_nsproxy_namespaces+0xc0/0x1f0
[ 1229.305785][ T9697]  ksys_unshare+0x45b/0xa40
[ 1229.305824][ T9697]  ? __pfx_ksys_unshare+0x10/0x10
[ 1229.305861][ T9697]  ? xfd_validate_state+0x5d/0x180
[ 1229.305890][ T9697]  ? rcu_is_watching+0x12/0xc0
[ 1229.305925][ T9697]  __x64_sys_unshare+0x31/0x40
[ 1229.305964][ T9697]  do_syscall_64+0xcd/0x260
[ 1229.306016][ T9697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1229.306046][ T9697] RIP: 0033:0x7fb02ed8d169
[ 1229.306069][ T9697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1229.306098][ T9697] RSP: 002b:00007fb02fc3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1229.306126][ T9697] RAX: ffffffffffffffda RBX: 00007fb02efa5fa0 RCX: 00007fb02ed8d169
[ 1229.306146][ T9697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1229.306163][ T9697] RBP: 00007fb02ee0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1229.306181][ T9697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1229.306199][ T9697] R13: 0000000000000000 R14: 00007fb02efa5fa0 R15: 00007ffdc3575a88
[ 1229.306232][ T9697]  </TASK>
[ 1230.241611][ T9728] input: jJǸ-�¶š9ã%vø“û¨l�ÐQ 	J86Ö‘ as /devices/virtual/input/input36
[ 1232.475728][ T9860] Console: switching to colour frame buffer device 128x48
[ 1237.576039][T10172] size and base must be multiples of 4 kiB
[ 1237.624632][T10172] CPU: 1 UID: 0 PID: 10172 Comm: syz.8.4419 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1237.624685][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1237.624704][T10172] Call Trace:
[ 1237.624713][T10172]  <TASK>
[ 1237.624725][T10172]  dump_stack_lvl+0x16c/0x1f0
[ 1237.624774][T10172]  mtrr_add+0xdf/0x110
[ 1237.624819][T10172]  mtrr_ioctl+0x7ef/0xcf0
[ 1237.624863][T10172]  ? __pfx_mtrr_ioctl+0x10/0x10
[ 1237.624913][T10172]  ? find_held_lock+0x2b/0x80
[ 1237.624948][T10172]  ? __fget_files+0x20e/0x3c0
[ 1237.624987][T10172]  ? __pfx_mtrr_ioctl+0x10/0x10
[ 1237.625031][T10172]  proc_reg_unlocked_ioctl+0x226/0x320
[ 1237.625059][T10172]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[ 1237.625090][T10172]  __x64_sys_ioctl+0x190/0x200
[ 1237.625126][T10172]  do_syscall_64+0xcd/0x260
[ 1237.625171][T10172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.625209][T10172] RIP: 0033:0x7f9f5fd8d169
[ 1237.625232][T10172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1237.625258][T10172] RSP: 002b:00007f9f60bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1237.625287][T10172] RAX: ffffffffffffffda RBX: 00007f9f5ffa6080 RCX: 00007f9f5fd8d169
[ 1237.625305][T10172] RDX: 0000000000000003 RSI: 00000000400c4d01 RDI: 0000000000000003
[ 1237.625322][T10172] RBP: 00007f9f5fe0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1237.625339][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1237.625357][T10172] R13: 0000000000000000 R14: 00007f9f5ffa6080 R15: 00007fff8b752198
[ 1237.625389][T10172]  </TASK>
[ 1239.069509][T10238] netlink: 'syz.7.4423': attribute type 11 has an invalid length.
[ 1239.103813][T10238] netlink: 'syz.7.4423': attribute type 11 has an invalid length.
[ 1239.165101][T10238] netlink: 744 bytes leftover after parsing attributes in process `syz.7.4423'.
[ 1241.009386][T10295] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1241.037226][T10295] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1241.100745][T10295] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1241.124929][T10295] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1241.131197][T10295] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1241.581245][T10340] openvswitch: netlink: nsh attr 68 is out of range max 3
[ 1242.446654][T20230] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1243.093182][T20230] Bluetooth: hci3: command 0x0406 tx timeout
[ 1243.171953][T20230] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1243.182181][T20230] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1243.188690][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1243.652279][T10450] FAULT_INJECTION: forcing a failure.
[ 1243.652279][T10450] name failslab, interval 1, probability 0, space 0, times 0
[ 1243.722055][T10450] CPU: 0 UID: 0 PID: 10450 Comm: syz.8.4442 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1243.722097][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1243.722116][T10450] Call Trace:
[ 1243.722126][T10450]  <TASK>
[ 1243.722138][T10450]  dump_stack_lvl+0x16c/0x1f0
[ 1243.722185][T10450]  should_fail_ex+0x512/0x640
[ 1243.722214][T10450]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[ 1243.722260][T10450]  should_failslab+0xc2/0x120
[ 1243.722306][T10450]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1243.722347][T10450]  ? alloc_empty_file+0x55/0x1e0
[ 1243.722380][T10450]  alloc_empty_file+0x55/0x1e0
[ 1243.722411][T10450]  path_openat+0xe0/0x2d40
[ 1243.722450][T10450]  ? __x64_sys_openat+0x174/0x210
[ 1243.722479][T10450]  ? do_syscall_64+0xcd/0x260
[ 1243.722520][T10450]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1243.722558][T10450]  ? __pfx_path_openat+0x10/0x10
[ 1243.722605][T10450]  do_filp_open+0x20b/0x470
[ 1243.722646][T10450]  ? __pfx_do_filp_open+0x10/0x10
[ 1243.722686][T10450]  ? find_held_lock+0x2b/0x80
[ 1243.722732][T10450]  ? alloc_fd+0x420/0x760
[ 1243.722777][T10450]  do_sys_openat2+0x11b/0x1d0
[ 1243.722806][T10450]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1243.722853][T10450]  __x64_sys_openat+0x174/0x210
[ 1243.722883][T10450]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1243.722916][T10450]  ? rcu_is_watching+0x12/0xc0
[ 1243.722951][T10450]  do_syscall_64+0xcd/0x260
[ 1243.723008][T10450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1243.723037][T10450] RIP: 0033:0x7f9f5fd8d169
[ 1243.723060][T10450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1243.723089][T10450] RSP: 002b:00007f9f60c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1243.723119][T10450] RAX: ffffffffffffffda RBX: 00007f9f5ffa5fa0 RCX: 00007f9f5fd8d169
[ 1243.723139][T10450] RDX: 0000000000185000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 1243.723157][T10450] RBP: 00007f9f5fe0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1243.723175][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1243.723192][T10450] R13: 0000000000000000 R14: 00007f9f5ffa5fa0 R15: 00007fff8b752198
[ 1243.723223][T10450]  </TASK>
[ 1243.944129][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1247.536908][T10559] [U] 
[ 1247.539932][T10559] [U] 
[ 1247.542868][T10559] [U] 
[ 1247.545641][T10559] [U] 
[ 1247.568809][T10559] [U] 
[ 1247.571597][T10559] [U] 
[ 1247.574353][T10559] [U] 
[ 1247.577106][T10559] [U] 
[ 1247.587646][T10555] FAULT_INJECTION: forcing a failure.
[ 1247.587646][T10555] name failslab, interval 1, probability 0, space 0, times 0
[ 1247.622543][T10555] CPU: 0 UID: 0 PID: 10555 Comm: syz.2.4452 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1247.622588][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1247.622606][T10555] Call Trace:
[ 1247.622616][T10555]  <TASK>
[ 1247.622629][T10555]  dump_stack_lvl+0x16c/0x1f0
[ 1247.622679][T10555]  should_fail_ex+0x512/0x640
[ 1247.622708][T10555]  ? __kmalloc_noprof+0xbf/0x510
[ 1247.622752][T10555]  ? lsm_blob_alloc+0x68/0x90
[ 1247.622780][T10555]  should_failslab+0xc2/0x120
[ 1247.622824][T10555]  __kmalloc_noprof+0xd2/0x510
[ 1247.622879][T10555]  lsm_blob_alloc+0x68/0x90
[ 1247.622905][T10555]  security_sk_alloc+0x30/0x270
[ 1247.622940][T10555]  sk_prot_alloc+0x1c7/0x2a0
[ 1247.622972][T10555]  sk_alloc+0x36/0xc20
[ 1247.623009][T10555]  __netlink_create+0x5e/0x2c0
[ 1247.623039][T10555]  __netlink_kernel_create+0xed/0x750
[ 1247.623081][T10555]  ? __pfx___netlink_kernel_create+0x10/0x10
[ 1247.623121][T10555]  ? find_held_lock+0x2b/0x80
[ 1247.623148][T10555]  ? audit_net_init+0x190/0x440
[ 1247.623185][T10555]  audit_net_init+0x1ae/0x440
[ 1247.623216][T10555]  ? __pfx_audit_net_init+0x10/0x10
[ 1247.623248][T10555]  ? __pfx_audit_receive+0x10/0x10
[ 1247.623289][T10555]  ? __pfx_audit_multicast_bind+0x10/0x10
[ 1247.623324][T10555]  ? __pfx_audit_multicast_unbind+0x10/0x10
[ 1247.623360][T10555]  ? trace_kmalloc+0x2b/0xd0
[ 1247.623393][T10555]  ? __pfx_audit_net_init+0x10/0x10
[ 1247.623423][T10555]  ops_init+0x1df/0x5f0
[ 1247.623451][T10555]  setup_net+0x21e/0x850
[ 1247.623479][T10555]  ? __pfx_setup_net+0x10/0x10
[ 1247.623504][T10555]  ? lockdep_init_map_type+0x5c/0x280
[ 1247.623540][T10555]  ? __pfx_down_read_killable+0x10/0x10
[ 1247.623571][T10555]  ? debug_mutex_init+0x37/0x70
[ 1247.623599][T10555]  copy_net_ns+0x2a6/0x5f0
[ 1247.623631][T10555]  create_new_namespaces+0x3ea/0xad0
[ 1247.623670][T10555]  unshare_nsproxy_namespaces+0xc0/0x1f0
[ 1247.623702][T10555]  ksys_unshare+0x45b/0xa40
[ 1247.623735][T10555]  ? __pfx_ksys_unshare+0x10/0x10
[ 1247.623766][T10555]  ? xfd_validate_state+0x5d/0x180
[ 1247.623792][T10555]  ? rcu_is_watching+0x12/0xc0
[ 1247.623822][T10555]  __x64_sys_unshare+0x31/0x40
[ 1247.623855][T10555]  do_syscall_64+0xcd/0x260
[ 1247.623906][T10555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1247.623933][T10555] RIP: 0033:0x7f1ab258d169
[ 1247.623955][T10555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1247.623983][T10555] RSP: 002b:00007f1ab33fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1247.624010][T10555] RAX: ffffffffffffffda RBX: 00007f1ab27a5fa0 RCX: 00007f1ab258d169
[ 1247.624029][T10555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1247.624046][T10555] RBP: 00007f1ab260e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1247.624062][T10555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1247.624078][T10555] R13: 0000000000000000 R14: 00007f1ab27a5fa0 R15: 00007ffc508e1b18
[ 1247.624108][T10555]  </TASK>
[ 1247.624372][T10559] [U] 
[ 1247.921384][T10559] [U] 
[ 1247.924113][T10559] [U] 
[ 1247.926915][T10559] [U] 
[ 1247.987596][T10555] audit: cannot initialize netlink socket in namespace
[ 1248.015181][T10559] [U] 
[ 1248.017991][T10559] [U] 
[ 1248.020743][T10559] [U] 
[ 1248.023501][T10559] [U] 
[ 1248.195586][T10572] [U] 
[ 1248.836817][T10634] Console: switching to colour VGA+ 80x25
[ 1249.906708][T10720] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4462'.
[ 1250.242059][   T30] audit: type=1800 audit(4295007912.892:39): pid=10741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4465" name="dbroot" dev="configfs" ino=118930 res=0 errno=0
[ 1250.540948][T10732] netlink: 346 bytes leftover after parsing attributes in process `syz.8.4465'.
[ 1251.950745][T10445] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18
[ 1251.960831][T10445] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18
[ 1253.778583][   T30] audit: type=1800 audit(4295007924.444:40): pid=10950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4482" name="discovery_nqn" dev="configfs" ino=119098 res=0 errno=0
[ 1254.838565][T11017] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4489'.
[ 1254.875669][T11017] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4489'.
[ 1256.969812][T11151] vivid-003: =================  START STATUS  =================
[ 1256.987296][T11151] vivid-003: Radio HW Seek Mode: Bounded
[ 1257.005407][T11151] vivid-003: Radio Programmable HW Seek: false
[ 1257.011676][T11151] vivid-003: RDS Rx I/O Mode: Block I/O
[ 1257.065929][T11151] vivid-003: Generate RBDS Instead of RDS: false
[ 1257.072741][T11151] vivid-003: RDS Reception: true
[ 1257.079436][T11151] vivid-003: RDS Program Type: 0 inactive
[ 1257.085632][T11151] vivid-003: RDS PS Name:  inactive
[ 1257.091125][T11151] vivid-003: RDS Radio Text:  inactive
[ 1257.097642][T11151] vivid-003: RDS Traffic Announcement: false inactive
[ 1257.105116][T11151] vivid-003: RDS Traffic Program: false inactive
[ 1257.113512][T11151] vivid-003: RDS Music: false inactive
[ 1257.119800][T11151] vivid-003: ==================  END STATUS  ==================
[ 1258.483378][T11217] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT
[ 1260.256376][T11328] FAULT_INJECTION: forcing a failure.
[ 1260.256376][T11328] name failslab, interval 1, probability 0, space 0, times 0
[ 1260.274579][T11328] CPU: 0 UID: 0 PID: 11328 Comm: syz.4.4522 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1260.274623][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1260.274640][T11328] Call Trace:
[ 1260.274649][T11328]  <TASK>
[ 1260.274659][T11328]  dump_stack_lvl+0x16c/0x1f0
[ 1260.274705][T11328]  should_fail_ex+0x512/0x640
[ 1260.274732][T11328]  ? __kmalloc_cache_noprof+0x57/0x3e0
[ 1260.274772][T11328]  should_failslab+0xc2/0x120
[ 1260.274818][T11328]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1260.274855][T11328]  ? __asan_memcpy+0x3c/0x60
[ 1260.274889][T11328]  ? ip_vs_protocol_net_init+0xbe/0x300
[ 1260.274939][T11328]  ip_vs_protocol_net_init+0xbe/0x300
[ 1260.274997][T11328]  __ip_vs_init+0x239/0x520
[ 1260.275031][T11328]  ? __pfx___ip_vs_init+0x10/0x10
[ 1260.275062][T11328]  ops_init+0x1df/0x5f0
[ 1260.275092][T11328]  setup_net+0x21e/0x850
[ 1260.275123][T11328]  ? __pfx_setup_net+0x10/0x10
[ 1260.275148][T11328]  ? lockdep_init_map_type+0x5c/0x280
[ 1260.275190][T11328]  ? __pfx_down_read_killable+0x10/0x10
[ 1260.275222][T11328]  ? debug_mutex_init+0x37/0x70
[ 1260.275253][T11328]  copy_net_ns+0x2a6/0x5f0
[ 1260.275286][T11328]  create_new_namespaces+0x3ea/0xad0
[ 1260.275328][T11328]  unshare_nsproxy_namespaces+0xc0/0x1f0
[ 1260.275367][T11328]  ksys_unshare+0x45b/0xa40
[ 1260.275405][T11328]  ? __pfx_ksys_unshare+0x10/0x10
[ 1260.275441][T11328]  ? xfd_validate_state+0x5d/0x180
[ 1260.275469][T11328]  ? rcu_is_watching+0x12/0xc0
[ 1260.275501][T11328]  __x64_sys_unshare+0x31/0x40
[ 1260.275536][T11328]  do_syscall_64+0xcd/0x260
[ 1260.275580][T11328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1260.275608][T11328] RIP: 0033:0x7fb02ed8d169
[ 1260.275630][T11328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1260.275658][T11328] RSP: 002b:00007fb02fc3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1260.275686][T11328] RAX: ffffffffffffffda RBX: 00007fb02efa5fa0 RCX: 00007fb02ed8d169
[ 1260.275706][T11328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1260.275723][T11328] RBP: 00007fb02ee0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1260.275741][T11328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1260.275758][T11328] R13: 0000000000000000 R14: 00007fb02efa5fa0 R15: 00007ffdc3575a88
[ 1260.275790][T11328]  </TASK>
[ 1260.869079][T11332] MTRR 2 not used
[ 1262.005897][T11381] svc: failed to register nfsdv3 RPC service (errno 111).
[ 1262.059165][T11381] svc: failed to register nfsaclv3 RPC service (errno 111).
[ 1262.461358][T11403] openvswitch: netlink: Key type 298 is out of range max 32
[ 1262.504519][T11403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4531'.
[ 1262.796422][T11403] bond0: (slave bond_slave_1): Releasing backup interface
[ 1263.196078][T11444] input: f¬
 as /devices/virtual/input/input39
[ 1263.604364][T11457] netlink: 186 bytes leftover after parsing attributes in process `syz.4.4537'.
[ 1263.725280][T11418] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4533'.
[ 1263.818548][T11418] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4533'.
[ 1266.209700][T11608] netlink: zone id is out of range
[ 1266.306269][T11608] netlink: zone id is out of range
[ 1266.405551][T11608] netlink: zone id is out of range
[ 1266.548344][T11608] netlink: zone id is out of range
[ 1266.553643][T11608] netlink: get zone limit has 4 unknown bytes
[ 1268.583419][T11696] tipc: Started in network mode
[ 1268.635682][T11696] tipc: Node identity 8e4e6f15, cluster identity 4711
[ 1268.642797][T11696] tipc: Node number set to 2387504917
[ 1268.740212][T11708] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1268.785593][T11708] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1272.055862][T11823] FAULT_INJECTION: forcing a failure.
[ 1272.055862][T11823] name failslab, interval 1, probability 0, space 0, times 0
[ 1272.099922][T11823] CPU: 1 UID: 0 PID: 11823 Comm: syz.8.4580 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1272.099965][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1272.099983][T11823] Call Trace:
[ 1272.099992][T11823]  <TASK>
[ 1272.100003][T11823]  dump_stack_lvl+0x16c/0x1f0
[ 1272.100052][T11823]  should_fail_ex+0x512/0x640
[ 1272.100081][T11823]  ? __kmalloc_cache_noprof+0x57/0x3e0
[ 1272.100122][T11823]  should_failslab+0xc2/0x120
[ 1272.100166][T11823]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1272.100205][T11823]  ? vkms_plane_duplicate_state+0x87/0x130
[ 1272.100241][T11823]  ? kasan_save_track+0x14/0x30
[ 1272.100282][T11823]  vkms_plane_duplicate_state+0x87/0x130
[ 1272.100318][T11823]  drm_atomic_get_plane_state+0x20b/0x590
[ 1272.100366][T11823]  drm_client_modeset_commit_atomic+0x237/0x7e0
[ 1272.100411][T11823]  ? __pfx___might_resched+0x10/0x10
[ 1272.100452][T11823]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[ 1272.100516][T11823]  ? __pfx___mutex_lock+0x10/0x10
[ 1272.100565][T11823]  drm_client_modeset_commit_locked+0x14d/0x580
[ 1272.100610][T11823]  drm_client_modeset_commit+0x4f/0x80
[ 1272.100649][T11823]  drm_fb_helper_lastclose+0xc7/0x160
[ 1272.100684][T11823]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[ 1272.100714][T11823]  drm_fbdev_client_restore+0x2c/0x40
[ 1272.100744][T11823]  drm_client_dev_restore+0x183/0x290
[ 1272.100788][T11823]  drm_release+0x2c2/0x360
[ 1272.100828][T11823]  ? __pfx_drm_release+0x10/0x10
[ 1272.100874][T11823]  __fput+0x3ff/0xb70
[ 1272.100908][T11823]  task_work_run+0x14d/0x240
[ 1272.100937][T11823]  ? __pfx_task_work_run+0x10/0x10
[ 1272.100966][T11823]  ? __pfx___do_sys_close_range+0x10/0x10
[ 1272.101006][T11823]  ? rcu_is_watching+0x12/0xc0
[ 1272.101040][T11823]  syscall_exit_to_user_mode+0x27b/0x2a0
[ 1272.101082][T11823]  do_syscall_64+0xda/0x260
[ 1272.101124][T11823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1272.101152][T11823] RIP: 0033:0x7f9f5fd8d169
[ 1272.101175][T11823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1272.101202][T11823] RSP: 002b:00007f9f60c17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1272.101230][T11823] RAX: 0000000000000000 RBX: 00007f9f5ffa5fa0 RCX: 00007f9f5fd8d169
[ 1272.101250][T11823] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[ 1272.101268][T11823] RBP: 00007f9f5fe0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1272.101286][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1272.101304][T11823] R13: 0000000000000000 R14: 00007f9f5ffa5fa0 R15: 00007fff8b752198
[ 1272.101336][T11823]  </TASK>
[ 1273.506756][T11922] mtrr: base(0xfffffff200000001000) is not aligned on a size(0xfffffff2000) boundary
[ 1276.837519][T11957] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1276.881060][T11957] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4591'.
[ 1279.149567][T12021] bridge0: port 3(netdevsim2) entered blocking state
[ 1279.165521][T12021] bridge0: port 3(netdevsim2) entered disabled state
[ 1279.186373][T12021] netdevsim netdevsim8 netdevsim2: entered allmulticast mode
[ 1279.220472][T12021] netdevsim netdevsim8 netdevsim2: entered promiscuous mode
[ 1279.253174][T12021] bridge0: port 3(netdevsim2) entered blocking state
[ 1279.260201][T12021] bridge0: port 3(netdevsim2) entered forwarding state
[ 1283.959172][T12127] Invalid ELF header magic: != ELF
[ 1286.715946][T10444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1286.748413][T10444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1286.770805][T10444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1286.779393][T10444] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1286.789299][T10444] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1286.799299][T10444] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1287.442532][T12194] chnl_net:caif_netlink_parms(): no params data found
[ 1288.032598][T12194] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1288.050691][T12194] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1288.081071][T12194] bridge_slave_0: entered allmulticast mode
[ 1288.107875][T12194] bridge_slave_0: entered promiscuous mode
[ 1288.147764][T12194] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1288.185477][T12194] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1288.205880][T12194] bridge_slave_1: entered allmulticast mode
[ 1288.237408][T12194] bridge_slave_1: entered promiscuous mode
[ 1288.429808][T12377] vivid-003: =================  START STATUS  =================
[ 1288.461597][T12377] vivid-003: Radio HW Seek Mode: Bounded
[ 1288.481066][T12194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1288.494693][T12377] vivid-003: Radio Programmable HW Seek: false
[ 1288.527237][T12377] vivid-003: RDS Rx I/O Mode: Block I/O
[ 1288.542467][T12377] vivid-003: Generate RBDS Instead of RDS: false
[ 1288.556474][T12377] vivid-003: RDS Reception: true
[ 1288.608637][T12194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1288.628307][T12377] vivid-003: RDS Program Type: 0 inactive
[ 1288.634153][T12377] vivid-003: RDS PS Name:  inactive
[ 1288.711109][T12377] vivid-003: RDS Radio Text:  inactive
[ 1288.728488][T12377] vivid-003: RDS Traffic Announcement: false inactive
[ 1288.783027][T12377] vivid-003: RDS Traffic Program: false inactive
[ 1288.832687][T12377] vivid-003: RDS Music: false inactive
[ 1288.887701][T12377] vivid-003: ==================  END STATUS  ==================
[ 1288.936739][T10445] Bluetooth: hci2: command tx timeout
[ 1289.173824][T12194] team0: Port device team_slave_0 added
[ 1289.221444][T12194] team0: Port device team_slave_1 added
[ 1289.382513][T10444] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1289.395679][T10444] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1289.406221][T10444] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1289.416970][T10444] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1289.426919][T10444] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1289.435512][T10444] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1289.658635][T12194] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1289.665656][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1289.756652][T12194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1289.847521][T12194] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1289.854559][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1289.956611][T12194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1290.316091][T12194] hsr_slave_0: entered promiscuous mode
[ 1290.337085][T12194] hsr_slave_1: entered promiscuous mode
[ 1290.359441][T12194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1290.386697][T12194] Cannot create hsr debugfs directory
[ 1290.781423][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4621'.
[ 1291.006989][T10444] Bluetooth: hci2: command tx timeout
[ 1291.228146][T10444] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18
[ 1291.567428][T10444] Bluetooth: hci6: command tx timeout
[ 1291.759502][T12194] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1291.809383][T12194] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1292.040749][T12466] chnl_net:caif_netlink_parms(): no params data found
[ 1292.106654][T12194] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1292.139552][T12194] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1292.664553][T12466] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1292.698765][T12466] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1292.706090][T12466] bridge_slave_0: entered allmulticast mode
[ 1292.769083][T12466] bridge_slave_0: entered promiscuous mode
[ 1292.831392][T12466] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1292.846865][T12466] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1292.854278][T12466] bridge_slave_1: entered allmulticast mode
[ 1292.888093][T12466] bridge_slave_1: entered promiscuous mode
[ 1293.086900][T10444] Bluetooth: hci2: command tx timeout
[ 1293.108408][T12799] FAULT_INJECTION: forcing a failure.
[ 1293.108408][T12799] name failslab, interval 1, probability 0, space 0, times 0
[ 1293.122279][T12799] CPU: 0 UID: 0 PID: 12799 Comm: syz.8.4623 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1293.122320][T12799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1293.122338][T12799] Call Trace:
[ 1293.122347][T12799]  <TASK>
[ 1293.122358][T12799]  dump_stack_lvl+0x16c/0x1f0
[ 1293.122407][T12799]  should_fail_ex+0x512/0x640
[ 1293.122435][T12799]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[ 1293.122484][T12799]  should_failslab+0xc2/0x120
[ 1293.122538][T12799]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[ 1293.122582][T12799]  ? register_ip_vs_app_inc+0x8c/0x4d0
[ 1293.122623][T12799]  kmemdup_noprof+0x29/0x60
[ 1293.122657][T12799]  register_ip_vs_app_inc+0x8c/0x4d0
[ 1293.122695][T12799]  __ip_vs_ftp_init+0x14b/0x220
[ 1293.122734][T12799]  ? __ip_vs_lblcr_init+0x189/0x330
[ 1293.122769][T12799]  ? __pfx___ip_vs_ftp_init+0x10/0x10
[ 1293.122808][T12799]  ops_init+0x1df/0x5f0
[ 1293.122838][T12799]  setup_net+0x21e/0x850
[ 1293.122869][T12799]  ? __pfx_setup_net+0x10/0x10
[ 1293.122894][T12799]  ? lockdep_init_map_type+0x5c/0x280
[ 1293.122933][T12799]  ? __pfx_down_read_killable+0x10/0x10
[ 1293.122964][T12799]  ? debug_mutex_init+0x37/0x70
[ 1293.122993][T12799]  copy_net_ns+0x2a6/0x5f0
[ 1293.123028][T12799]  create_new_namespaces+0x3ea/0xad0
[ 1293.123069][T12799]  unshare_nsproxy_namespaces+0xc0/0x1f0
[ 1293.123109][T12799]  ksys_unshare+0x45b/0xa40
[ 1293.123147][T12799]  ? __pfx_ksys_unshare+0x10/0x10
[ 1293.123183][T12799]  ? xfd_validate_state+0x5d/0x180
[ 1293.123213][T12799]  ? syscall_user_dispatch+0x78/0x140
[ 1293.123263][T12799]  __x64_sys_unshare+0x31/0x40
[ 1293.123300][T12799]  do_syscall_64+0xcd/0x260
[ 1293.123346][T12799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1293.123375][T12799] RIP: 0033:0x7f9f5fd8d169
[ 1293.123400][T12799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1293.123429][T12799] RSP: 002b:00007f9f60c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1293.123458][T12799] RAX: ffffffffffffffda RBX: 00007f9f5ffa5fa0 RCX: 00007f9f5fd8d169
[ 1293.123478][T12799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1293.123495][T12799] RBP: 00007f9f5fe0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1293.123519][T12799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1293.123535][T12799] R13: 0000000000000000 R14: 00007f9f5ffa5fa0 R15: 00007fff8b752198
[ 1293.123568][T12799]  </TASK>
[ 1293.395997][T12466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1293.429989][T12194] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1293.446380][T12194] 8021q: adding VLAN 0 to HW filter on device team0
[ 1293.461185][T10136] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1293.468406][T10136] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1293.512048][T10136] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1293.519423][T10136] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1293.646763][T10444] Bluetooth: hci6: command tx timeout
[ 1293.689011][T12466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1294.002185][T12466] team0: Port device team_slave_0 added
[ 1294.068806][T12466] team0: Port device team_slave_1 added
[ 1294.190453][T12194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1294.316532][T12466] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1294.323917][T12466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1294.462246][T12466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1294.575911][T12466] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1294.629884][T12466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1294.736792][T12466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1295.013403][T12466] hsr_slave_0: entered promiscuous mode
[ 1295.039746][T12466] hsr_slave_1: entered promiscuous mode
[ 1295.057903][T12466] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1295.081616][T12466] Cannot create hsr debugfs directory
[ 1295.175457][T10444] Bluetooth: hci2: command tx timeout
[ 1295.667031][T12194] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1295.728261][T10444] Bluetooth: hci6: command tx timeout
[ 1297.002443][T12194] veth0_vlan: entered promiscuous mode
[ 1297.046469][T12194] veth1_vlan: entered promiscuous mode
[ 1297.719929][T12194] veth0_macvtap: entered promiscuous mode
[ 1297.774214][T12194] veth1_macvtap: entered promiscuous mode
[ 1297.806784][T10444] Bluetooth: hci6: command tx timeout
[ 1297.882070][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1297.956983][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1297.996724][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1298.038657][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.069110][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1298.110245][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.146670][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1298.211876][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.252838][T12194] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1298.308904][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1298.341802][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.376084][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1298.405062][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.426713][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1298.461718][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.492862][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1298.536632][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.577930][T12194] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1298.621989][T12194] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1298.642570][T12194] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1298.679716][T12194] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1298.726722][T12194] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1298.982928][T10138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1299.011847][T10138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1299.109576][T10135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1299.152282][T10135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1301.660729][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4638'.
[ 1302.855078][T10135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1303.130266][T10135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1303.261533][T10135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1303.423144][T10135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1303.691184][T10135] bridge_slave_1: left allmulticast mode
[ 1303.710644][T10135] bridge_slave_1: left promiscuous mode
[ 1303.716464][T10135] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1303.772719][T10135] bridge_slave_0: left allmulticast mode
[ 1303.793176][T10135] bridge_slave_0: left promiscuous mode
[ 1303.810904][T10135] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1305.479463][T10135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1305.514077][T10135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1305.544569][T10135] bond0 (unregistering): Released all slaves
[ 1306.258385][T10135] hsr_slave_0: left promiscuous mode
[ 1306.290501][T10135] hsr_slave_1: left promiscuous mode
[ 1306.317521][T10135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1306.325133][T10135] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1306.368246][T10135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1306.396827][T10135] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1306.435669][T10135] veth1_macvtap: left promiscuous mode
[ 1306.466802][T10135] veth0_macvtap: left promiscuous mode
[ 1307.939262][T10135] team0 (unregistering): Port device team_slave_1 removed
[ 1308.068640][T10135] team0 (unregistering): Port device team_slave_0 removed
[ 1312.947450][T10445] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1312.960935][T10445] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1312.976766][T10445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1312.985256][T10445] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1312.993508][T10445] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1313.001533][T10445] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1313.591103][T13549] chnl_net:caif_netlink_parms(): no params data found
[ 1313.632268][T13667] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4648'.
[ 1313.948759][T13549] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1313.955936][T13549] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1313.986868][T13549] bridge_slave_0: entered allmulticast mode
[ 1313.995542][T13549] bridge_slave_0: entered promiscuous mode
[ 1314.024970][T13549] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1314.049205][T13549] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1314.078299][T13549] bridge_slave_1: entered allmulticast mode
[ 1314.085376][T13549] bridge_slave_1: entered promiscuous mode
[ 1314.288468][T13549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1314.336171][T13549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1314.569427][T13549] team0: Port device team_slave_0 added
[ 1314.718214][T13549] team0: Port device team_slave_1 added
[ 1314.959694][T13549] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1315.001671][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1315.096736][T10444] Bluetooth: hci0: command tx timeout
[ 1315.131516][T13549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1315.144747][T13549] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1315.160852][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1315.193011][T13549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1315.336069][T13549] hsr_slave_0: entered promiscuous mode
[ 1315.357468][T13549] hsr_slave_1: entered promiscuous mode
[ 1315.369272][T13549] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1315.387620][T13549] Cannot create hsr debugfs directory
[ 1317.073677][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4651'.
[ 1317.167429][T10444] Bluetooth: hci0: command tx timeout
[ 1317.765808][T10445] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1317.777153][T10445] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1317.786706][T10445] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1317.794621][T10445] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1317.802420][T10445] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1317.809956][T10445] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1318.580763][T13989] chnl_net:caif_netlink_parms(): no params data found
[ 1318.914537][T13989] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1318.936747][T13989] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1318.944078][T13989] bridge_slave_0: entered allmulticast mode
[ 1318.979925][T13989] bridge_slave_0: entered promiscuous mode
[ 1319.009031][T13989] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1319.016269][T13989] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1319.032824][T13989] bridge_slave_1: entered allmulticast mode
[ 1319.057833][T13989] bridge_slave_1: entered promiscuous mode
[ 1319.165178][T13989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1319.205720][T13989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1319.246897][T10445] Bluetooth: hci0: command tx timeout
[ 1319.511309][T13989] team0: Port device team_slave_0 added
[ 1319.522092][T13989] team0: Port device team_slave_1 added
[ 1319.625657][T13989] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1319.669615][T13989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1319.743102][T13989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1319.768706][T13989] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1319.816624][T13989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1319.887304][T10445] Bluetooth: hci7: command tx timeout
[ 1319.912859][T13989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1320.099415][T10138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1320.298035][T10138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1320.422597][T13989] hsr_slave_0: entered promiscuous mode
[ 1320.451817][T13989] hsr_slave_1: entered promiscuous mode
[ 1320.471278][T13989] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1320.495102][T13989] Cannot create hsr debugfs directory
[ 1320.578146][T10138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1320.685107][T10138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1321.167070][T10138] bridge_slave_1: left allmulticast mode
[ 1321.173080][T10138] bridge_slave_1: left promiscuous mode
[ 1321.185661][T10138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1321.196179][T10138] bridge_slave_0: left allmulticast mode
[ 1321.202341][T10138] bridge_slave_0: left promiscuous mode
[ 1321.209735][T10138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1321.326705][T10445] Bluetooth: hci0: command tx timeout
[ 1321.958169][T10138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1321.968753][T10138] bond0 (unregistering): Released all slaves
[ 1321.972029][T10445] Bluetooth: hci7: command tx timeout
[ 1322.086895][T10138] tipc: Left network mode
[ 1322.692428][T10138] hsr_slave_0: left promiscuous mode
[ 1322.711524][T10138] hsr_slave_1: left promiscuous mode
[ 1322.729778][T10138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1322.754130][T10138] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1322.812369][T10138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1322.834398][T10138] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1322.891532][T10138] veth1_macvtap: left promiscuous mode
[ 1322.905315][T10138] veth1_vlan: left promiscuous mode
[ 1322.917337][T10138] veth0_vlan: left promiscuous mode
[ 1324.046890][T10445] Bluetooth: hci7: command tx timeout
[ 1324.343382][T10138] team0 (unregistering): Port device team_slave_1 removed
[ 1324.684432][T10138] team0 (unregistering): Port device team_slave_0 removed
[ 1326.128483][T10445] Bluetooth: hci7: command tx timeout
[ 1335.833398][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4677'.
[ 1336.982604][T14930] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4679'.
[ 1340.085897][T15019] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4683'.
[ 1340.096268][T15019] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1340.111772][T15019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1340.119226][T15019] IPv6: NLM_F_CREATE should be set when creating new route
[ 1340.126506][T15019] IPv6: NLM_F_CREATE should be set when creating new route
[ 1343.914337][T15112] __vm_enough_memory: pid: 15112, comm: syz.7.4692, bytes: 4503599627366400 not enough memory for the allocation
[ 1349.427476][T10444] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1349.440366][T10444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1349.449287][T10444] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1349.457509][T10444] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1349.466684][T10444] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1349.474104][T10444] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1349.861062][T15233] chnl_net:caif_netlink_parms(): no params data found
[ 1350.423347][T15233] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1350.443983][T15233] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1350.457044][T15233] bridge_slave_0: entered allmulticast mode
[ 1350.470288][T15233] bridge_slave_0: entered promiscuous mode
[ 1350.497756][T15233] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1350.518785][T15233] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1350.537337][T15233] bridge_slave_1: entered allmulticast mode
[ 1350.544521][T15233] bridge_slave_1: entered promiscuous mode
[ 1350.890473][T15233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1351.006504][T15233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1351.257439][T15233] team0: Port device team_slave_0 added
[ 1351.275593][T15233] team0: Port device team_slave_1 added
[ 1351.430263][T15233] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1351.448241][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1351.514926][T15233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1351.539203][T15233] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1351.546210][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1351.573591][T10445] Bluetooth: hci5: command tx timeout
[ 1351.591116][T15233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1351.963809][T15233] hsr_slave_0: entered promiscuous mode
[ 1351.997528][T15233] hsr_slave_1: entered promiscuous mode
[ 1353.647536][T10445] Bluetooth: hci5: command tx timeout
[ 1354.860134][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4707'.
[ 1355.731258][T10445] Bluetooth: hci5: command tx timeout
[ 1357.806742][T10445] Bluetooth: hci5: command tx timeout
[ 1363.819630][T15994] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4714'.
[ 1373.168636][T10444] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1373.182449][T10444] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1373.210872][T10444] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1373.225722][T10444] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1373.243909][T10444] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1373.252472][T10444] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1373.846345][T16139] chnl_net:caif_netlink_parms(): no params data found
[ 1374.108529][T16139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1374.115733][T16139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1374.123128][T16139] bridge_slave_0: entered allmulticast mode
[ 1374.131592][T16139] bridge_slave_0: entered promiscuous mode
[ 1374.140478][T16139] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1374.152364][T16139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1374.180054][T16139] bridge_slave_1: entered allmulticast mode
[ 1374.200751][T16139] bridge_slave_1: entered promiscuous mode
[ 1374.434880][T16139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1374.489381][T16139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1374.733858][T16139] team0: Port device team_slave_0 added
[ 1374.759964][T16139] team0: Port device team_slave_1 added
[ 1374.919114][T16139] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1374.926207][T16139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1374.973821][T16139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1374.997967][T16139] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1375.004973][T16139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1375.096617][T16139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1375.191338][T16139] hsr_slave_0: entered promiscuous mode
[ 1375.210582][T16139] hsr_slave_1: entered promiscuous mode
[ 1375.227628][T16139] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1375.235252][T16139] Cannot create hsr debugfs directory
[ 1375.337687][T10445] Bluetooth: hci8: command tx timeout
[ 1377.417597][T10445] Bluetooth: hci8: command tx timeout
[ 1377.977593][T16506] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4736'.
[ 1378.269979][T16508] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4737'.
[ 1378.508039][T10444] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1378.535926][T10444] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1378.544534][T10444] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1378.563708][T10444] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1378.574144][T10444] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 1378.582868][T10444] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1378.941358][T16509] chnl_net:caif_netlink_parms(): no params data found
[ 1379.141029][T16509] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1379.169893][T16509] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1379.191167][T16509] bridge_slave_0: entered allmulticast mode
[ 1379.201677][T16509] bridge_slave_0: entered promiscuous mode
[ 1379.210049][T16509] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1379.218158][T16509] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1379.225462][T16509] bridge_slave_1: entered allmulticast mode
[ 1379.232990][T16509] bridge_slave_1: entered promiscuous mode
[ 1379.279192][T16509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1379.292106][T16509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1379.363298][T16509] team0: Port device team_slave_0 added
[ 1379.394816][T16509] team0: Port device team_slave_1 added
[ 1379.482897][T16509] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1379.497064][T10445] Bluetooth: hci8: command tx timeout
[ 1379.516785][T16509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1379.593303][T16509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1379.621965][T16509] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1379.635575][T16509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1379.669327][T16509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1379.799757][T16509] hsr_slave_0: entered promiscuous mode
[ 1379.806364][T16509] hsr_slave_1: entered promiscuous mode
[ 1379.820740][T16509] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1379.828704][T16509] Cannot create hsr debugfs directory
[ 1380.423676][T16861] netlink: 146 bytes leftover after parsing attributes in process `syz.7.4741'.
[ 1380.686726][T10445] Bluetooth: hci9: command tx timeout
[ 1380.746106][T16866] tipc: Started in network mode
[ 1380.756193][T16866] tipc: Node identity ee00, cluster identity 4711
[ 1380.765700][T16866] tipc: Node number set to 60928
[ 1381.566885][T10445] Bluetooth: hci8: command tx timeout
[ 1382.766808][T10445] Bluetooth: hci9: command tx timeout
[ 1384.846727][T10445] Bluetooth: hci9: command tx timeout
[ 1386.926969][T10445] Bluetooth: hci9: command tx timeout
[ 1390.009729][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4758'.
[ 1390.593553][T17032] Invalid ELF header magic: != ELF
[ 1395.565126][T10445] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5
[ 1395.878961][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4764'.
[ 1403.480586][T17395] netlink: 544 bytes leftover after parsing attributes in process `syz.7.4782'.
[ 1403.830064][T17403] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4784'.
[ 1404.294877][T17412] Invalid ELF header magic: != ELF
[ 1409.949246][T20230] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1409.965176][T20230] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1409.983590][T20230] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1410.027124][T20230] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1410.036954][T20230] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 1410.045857][T20230] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1410.135589][T10445] Bluetooth: hci2: command 0x0406 tx timeout
[ 1410.531038][T17515] chnl_net:caif_netlink_parms(): no params data found
[ 1410.743612][T17515] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1410.761651][T17515] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1410.773444][T17515] bridge_slave_0: entered allmulticast mode
[ 1410.786454][T17515] bridge_slave_0: entered promiscuous mode
[ 1410.803575][T17515] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1410.814308][T17515] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1410.828411][T17515] bridge_slave_1: entered allmulticast mode
[ 1410.838091][T17515] bridge_slave_1: entered promiscuous mode
[ 1410.883007][T17515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1410.906878][T17515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1411.011624][T17515] team0: Port device team_slave_0 added
[ 1411.034857][T17515] team0: Port device team_slave_1 added
[ 1411.123714][T17515] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1411.134662][T17515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1411.170151][T17515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1411.237258][T17515] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1411.244254][T17515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1411.285639][T17515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1411.401776][T17515] hsr_slave_0: entered promiscuous mode
[ 1411.414957][T17515] hsr_slave_1: entered promiscuous mode
[ 1411.422176][T17515] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1411.431599][T17515] Cannot create hsr debugfs directory
[ 1412.136730][T10445] Bluetooth: hci10: command tx timeout
[ 1414.206780][T10445] Bluetooth: hci10: command tx timeout
[ 1415.246875][T10445] Bluetooth: hci6: command 0x0406 tx timeout
[ 1416.286629][T20230] Bluetooth: hci10: command tx timeout
[ 1416.447491][T17957] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4806'.
[ 1416.903746][T17982] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[ 1417.424441][T17992] Invalid ELF header magic: != ELF
[ 1418.369546][T20230] Bluetooth: hci10: command tx timeout
[ 1421.119399][T18029] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4812'.
[ 1428.667998][T18137] ptrace attach of "./syz-executor exec"[21833] was attempted by "./syz-executor exec"[18137]
[ 1433.692583][T10444] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1433.704064][T10444] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1433.718073][T10444] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1433.728649][T10444] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1433.736362][T10444] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 1433.744463][T10444] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1433.962652][T18237] chnl_net:caif_netlink_parms(): no params data found
[ 1434.248835][T18237] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1434.256174][T18237] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1434.267432][T18237] bridge_slave_0: entered allmulticast mode
[ 1434.279299][T18237] bridge_slave_0: entered promiscuous mode
[ 1434.297654][T18237] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1434.305108][T18237] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1434.335545][T18237] bridge_slave_1: entered allmulticast mode
[ 1434.352208][T18237] bridge_slave_1: entered promiscuous mode
[ 1434.501011][T18237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1434.529689][T18237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1434.658523][T18237] team0: Port device team_slave_0 added
[ 1434.682377][T18237] team0: Port device team_slave_1 added
[ 1434.819132][T18237] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1434.847085][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1434.897207][T18237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1434.926129][T18237] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1434.934960][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1435.008406][T18237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1435.122937][T18237] hsr_slave_0: entered promiscuous mode
[ 1435.137940][T18237] hsr_slave_1: entered promiscuous mode
[ 1435.154492][T18237] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1435.163237][T18237] Cannot create hsr debugfs directory
[ 1435.678765][T18567] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4836'.
[ 1435.726839][T10444] Bluetooth: hci0: command 0x0406 tx timeout
[ 1435.806689][T20230] Bluetooth: hci11: command tx timeout
[ 1435.830586][T18570] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4837'.
[ 1436.298136][T18577] netlink: 448 bytes leftover after parsing attributes in process `syz.7.4838'.
[ 1437.453654][T18600] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4840'.
[ 1437.886839][T20230] Bluetooth: hci11: command tx timeout
[ 1438.683015][T10444] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1438.695435][T10444] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1438.705169][T10444] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1438.713811][T10444] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1438.722970][T10444] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[ 1438.730705][T10444] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1439.154731][T18611] chnl_net:caif_netlink_parms(): no params data found
[ 1439.399084][T18611] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1439.406246][T18611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1439.437315][T18611] bridge_slave_0: entered allmulticast mode
[ 1439.444644][T18611] bridge_slave_0: entered promiscuous mode
[ 1439.469207][T18611] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1439.486738][T18611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1439.494749][T18611] bridge_slave_1: entered allmulticast mode
[ 1439.507932][T18611] bridge_slave_1: entered promiscuous mode
[ 1439.569760][T18611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1439.609476][T18611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1439.703280][T18611] team0: Port device team_slave_0 added
[ 1439.716245][T18611] team0: Port device team_slave_1 added
[ 1439.780525][T18611] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1439.787764][T18611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1439.846758][T18611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1439.878623][T18611] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1439.886182][T18611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1439.943843][T18611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1439.975360][T10444] Bluetooth: hci11: command tx timeout
[ 1440.094580][T18611] hsr_slave_0: entered promiscuous mode
[ 1440.107515][T18611] hsr_slave_1: entered promiscuous mode
[ 1440.113965][T18611] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1440.121670][T18611] Cannot create hsr debugfs directory
[ 1440.686826][   T31] INFO: task syz.8.4633:13074 blocked for more than 143 seconds.
[ 1440.694791][   T31]       Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0
[ 1440.712054][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1440.732048][   T31] task:syz.8.4633      state:D stack:27648 pid:13074 tgid:13073 ppid:3894   task_flags:0x400140 flags:0x00000004
[ 1440.745975][   T31] Call Trace:
[ 1440.749859][   T31]  <TASK>
[ 1440.752930][   T31]  __schedule+0x1129/0x5c00
[ 1440.758542][   T31]  ? save_trace+0x4e/0x380
[ 1440.763342][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[ 1440.769296][T10444] Bluetooth: hci12: command tx timeout
[ 1440.777452][   T31]  ? __pfx___schedule+0x10/0x10
[ 1440.782605][   T31]  ? find_held_lock+0x2b/0x80
[ 1440.788093][   T31]  ? schedule+0x2d7/0x3a0
[ 1440.792500][   T31]  schedule+0xe7/0x3a0
[ 1440.797182][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1440.802879][   T31]  __mutex_lock+0x6ae/0xb00
[ 1440.808103][   T31]  ? netlink_has_listeners+0x219/0x430
[ 1440.813895][   T31]  ? devlink_health_report+0x3ba/0x9c0
[ 1440.819962][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1440.825255][   T31]  ? irqentry_exit+0x3b/0x90
[ 1440.830591][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1440.835887][   T31]  ? devlink_health_report+0x3ba/0x9c0
[ 1440.841886][   T31]  devlink_health_report+0x3ba/0x9c0
[ 1440.847587][T10444] Bluetooth: hci7: command 0x0406 tx timeout
[ 1440.855768][   T31]  ? __pfx_devlink_health_report+0x10/0x10
[ 1440.862224][   T31]  ? _copy_from_user+0x59/0xd0
[ 1440.867626][   T31]  nsim_dev_health_break_write+0x166/0x210
[ 1440.873521][   T31]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[ 1440.880855][   T31]  full_proxy_write+0x13c/0x200
[ 1440.885785][   T31]  vfs_write+0x25c/0x1180
[ 1440.890646][   T31]  ? __pfx_full_proxy_write+0x10/0x10
[ 1440.896179][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1440.926555][   T31]  ? __pfx_vfs_write+0x10/0x10
[ 1440.931434][   T31]  ? __fget_files+0x20e/0x3c0
[ 1440.936216][   T31]  ksys_write+0x12a/0x240
[ 1440.966754][   T31]  ? __pfx_ksys_write+0x10/0x10
[ 1440.971698][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1440.986568][   T31]  do_syscall_64+0xcd/0x260
[ 1440.996617][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1441.006595][   T31] RIP: 0033:0x7f9f5fd8d169
[ 1441.013281][   T31] RSP: 002b:00007f9f60c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1441.036518][   T31] RAX: ffffffffffffffda RBX: 00007f9f5ffa5fa0 RCX: 00007f9f5fd8d169
[ 1441.055110][   T31] RDX: 00000000000000ef RSI: 0000000000000000 RDI: 0000000000000003
[ 1441.073797][   T31] RBP: 00007f9f5fe0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1441.096534][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1441.126694][   T31] R13: 0000000000000000 R14: 00007f9f5ffa5fa0 R15: 00007fff8b752198
[ 1441.134855][   T31]  </TASK>
[ 1441.183394][   T31] INFO: task syz.8.4633:13077 blocked for more than 143 seconds.
[ 1441.226673][   T31]       Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0
[ 1441.234063][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1441.266669][   T31] task:syz.8.4633      state:D stack:29192 pid:13077 tgid:13073 ppid:3894   task_flags:0x400040 flags:0x00000004
[ 1441.296784][   T31] Call Trace:
[ 1441.308449][   T31]  <TASK>
[ 1441.311734][   T31]  __schedule+0x1129/0x5c00
[ 1441.336762][   T31]  ? register_lock_class+0x41/0x4c0
[ 1441.342522][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[ 1441.375040][   T31]  ? __pfx___schedule+0x10/0x10
[ 1441.386772][   T31]  ? find_held_lock+0x2b/0x80
[ 1441.391538][   T31]  ? schedule+0x2d7/0x3a0
[ 1441.396205][   T31]  schedule+0xe7/0x3a0
[ 1441.418191][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1441.424566][   T31]  __mutex_lock+0x6ae/0xb00
[ 1441.431832][   T31]  ? fdget_pos+0x2a2/0x370
[ 1441.436412][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1441.441935][   T31]  ? __fget_files+0x20e/0x3c0
[ 1441.456569][   T31]  ? __up_read+0x160/0x750
[ 1441.461096][   T31]  ? fdget_pos+0x2a2/0x370
[ 1441.465694][   T31]  fdget_pos+0x2a2/0x370
[ 1441.470163][   T31]  ksys_read+0x71/0x240
[ 1441.474704][   T31]  ? __pfx_ksys_read+0x10/0x10
[ 1441.480700][   T31]  ? do_user_addr_fault+0x850/0x1430
[ 1441.486109][   T31]  do_syscall_64+0xcd/0x260
[ 1441.496684][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1441.502915][   T31] RIP: 0033:0x7f9f5fd8d169
[ 1441.517056][   T31] RSP: 002b:00007f9f60bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1441.525556][   T31] RAX: ffffffffffffffda RBX: 00007f9f5ffa6080 RCX: 00007f9f5fd8d169
[ 1441.546586][   T31] RDX: 0000000000001f40 RSI: 0000000000000000 RDI: 0000000000000003
[ 1441.554631][   T31] RBP: 00007f9f5fe0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1441.581975][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1441.591897][   T31] R13: 0000000000000001 R14: 00007f9f5ffa6080 R15: 00007fff8b752198
[ 1441.600652][   T31]  </TASK>
[ 1441.603951][   T31] 
[ 1441.603951][   T31] Showing all locks held in the system:
[ 1441.615416][   T31] 1 lock held by khungtaskd/31:
[ 1441.620738][   T31]  #0: ffffffff8e1be140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 1441.633939][   T31] 2 locks held by kworker/u9:0/16899:
[ 1441.639761][   T31]  #0: ffff888025662948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1441.665370][   T31]  #1: ffffc900042efd18 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1441.676909][   T31] 1 lock held by syz.6.2628/21132:
[ 1441.682059][   T31] 2 locks held by syz.7.3894/3288:
[ 1441.688459][   T31] 7 locks held by syz-executor/12466:
[ 1441.693872][   T31]  #0: ffff88807ece6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240
[ 1441.703226][   T31]  #1: ffff88805eb48888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x287/0x510
[ 1441.713266][   T31]  #2: ffff8880260e6008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2aa/0x510
[ 1441.723957][   T31]  #3: ffffffff8f4a43e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0
[ 1441.746594][   T31]  #4: ffff888030e3b0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620
[ 1441.772667][   T31]  #5: ffff888030e3c250 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0
[ 1441.794153][   T31]  #6: ffff88804c1d15a8 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: simple_recursive_removal+0x2f5/0x8e0
[ 1441.816547][   T31] 3 locks held by syz.8.4633/13074:
[ 1441.821823][   T31]  #0: ffff88807e727eb8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[ 1441.842454][   T31]  #1: ffff888141e82420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x240
[ 1441.856656][   T31]  #2: ffff888030e3c250 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_health_report+0x3ba/0x9c0
[ 1441.879547][   T31] 1 lock held by syz.8.4633/13077:
[ 1441.884730][   T31]  #0: ffff88807e727eb8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[ 1441.906138][   T31] 2 locks held by syz.9.4640/13273:
[ 1441.911863][   T31]  #0: ffff888141e82420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x1f3e/0x2d40
[ 1441.927247][   T31]  #1: ffff88804c1d15a8 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: path_openat+0x88a/0x2d40
[ 1441.950288][   T31] 4 locks held by syz-executor/13549:
[ 1441.962679][   T31]  #0: ffff88807ece6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240
[ 1441.986851][   T31]  #1: ffff888075416c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x287/0x510
[ 1442.006547][   T31]  #2: ffff8880260e6008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2aa/0x510
[ 1442.026142][   T31]  #3: ffffffff8f4a43e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0
[ 1442.046606][T20230] Bluetooth: hci11: command tx timeout
[ 1442.064669][   T31] 4 locks held by syz-executor/13989:
[ 1442.073842][   T31]  #0: ffff88807ece6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240
[ 1442.086666][   T31]  #1: ffff88803325bc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x287/0x510
[ 1442.108018][   T31]  #2: ffff8880260e6008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2aa/0x510
[ 1442.126713][   T31]  #3: ffffffff8f4a43e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0
[ 1442.144091][   T31] 3 locks held by kworker/0:6/15013:
[ 1442.150900][   T31]  #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1442.161664][   T31]  #1: ffffc90000be7d18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1442.176117][   T31]  #2: ffffffff8e1c9678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0
[ 1442.186397][   T31] 4 locks held by syz-executor/15233:
[ 1442.192021][   T31]  #0: ffff88807ece6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240
[ 1442.203224][   T31]  #1: ffff88807cabac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x287/0x510
[ 1442.213569][   T31]  #2: ffff8880260e6008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2aa/0x510
[ 1442.224261][   T31]  #3: ffffffff8f4a43e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0
[ 1442.245202][   T31] 4 locks held by syz-executor/16139:
[ 1442.251999][   T31]  #0: ffff88807ece6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240
[ 1442.272848][   T31]  #1: ffff888026267c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x287/0x510
[ 1442.285277][   T31]  #2: ffff8880260e6008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2aa/0x510
[ 1442.308837][   T31]  #3: ffffffff8f4a43e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0
[ 1442.329193][   T31] 4 locks held by syz-executor/16509:
[ 1442.334703][   T31]  #0: ffff88807ece6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240
[ 1442.350872][   T31]  #1: ffff888032199488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x287/0x510
[ 1442.360999][   T31]  #2: ffff8880260e6008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2aa/0x510
[ 1442.371706][   T31]  #3: ffffffff8f4a43e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0
[ 1442.382506][   T31] 1 lock held by syz.7.4772/17212:
[ 1442.388007][   T31]  #0: ffffffff8fef80a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[ 1442.398009][   T31] 4 locks held by syz-executor/17515:
[ 1442.403525][   T31]  #0: ffff88807ece6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240
[ 1442.412692][   T31]  #1: ffff88809eb80888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x287/0x510
[ 1442.422753][   T31]  #2: ffff8880260e6008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2aa/0x510
[ 1442.433007][   T31]  #3: ffffffff8f4a43e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0
[ 1442.443692][   T31] 4 locks held by syz-executor/18237:
[ 1442.449456][   T31]  #0: ffff88807ece6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240
[ 1442.462359][   T31]  #1: ffff888097bf8888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x287/0x510
[ 1442.482827][   T31]  #2: ffff8880260e6008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2aa/0x510
[ 1442.496634][   T31]  #3: ffffffff8f4a43e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0
[ 1442.516272][   T31] 4 locks held by syz-executor/18611:
[ 1442.522719][   T31]  #0: ffff88807ece6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240
[ 1442.546596][   T31]  #1: ffff8880a5631c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x287/0x510
[ 1442.557002][   T31]  #2: ffff8880260e6008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2aa/0x510
[ 1442.567330][   T31]  #3: ffffffff8f4a43e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0
[ 1442.586695][   T31] 
[ 1442.589081][   T31] =============================================
[ 1442.589081][   T31] 
[ 1442.615918][   T31] NMI backtrace for cpu 1
[ 1442.615942][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1442.615976][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1442.615992][   T31] Call Trace:
[ 1442.616000][   T31]  <TASK>
[ 1442.616011][   T31]  dump_stack_lvl+0x116/0x1f0
[ 1442.616056][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 1442.616085][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1442.616122][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1442.616167][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1442.616201][   T31]  watchdog+0xf70/0x12c0
[ 1442.616244][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1442.616280][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1442.616319][   T31]  ? __kthread_parkme+0x148/0x220
[ 1442.616357][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1442.616394][   T31]  kthread+0x3a4/0x760
[ 1442.616434][   T31]  ? __pfx_kthread+0x10/0x10
[ 1442.616477][   T31]  ? __pfx_kthread+0x10/0x10
[ 1442.616514][   T31]  ? __pfx_kthread+0x10/0x10
[ 1442.616560][   T31]  ? __pfx_kthread+0x10/0x10
[ 1442.616597][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1442.616629][   T31]  ? __pfx_kthread+0x10/0x10
[ 1442.616669][   T31]  ret_from_fork+0x45/0x80
[ 1442.616693][   T31]  ? __pfx_kthread+0x10/0x10
[ 1442.616732][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1442.616779][   T31]  </TASK>
[ 1442.751154][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1442.756552][    C0] NMI backtrace for cpu 0
[ 1442.756572][    C0] CPU: 0 UID: 0 PID: 21132 Comm: syz.6.2628 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1442.756600][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1442.756619][    C0] RIP: 0010:run_timer_base+0x7c/0x190
[ 1442.756652][    C0] Code: 00 00 00 e8 56 24 b4 09 48 69 db c0 10 00 00 41 89 c4 48 81 c3 00 a6 7c 93 83 f8 07 0f 87 03 01 00 00 4a 8d 3c e5 c0 5c ab 8d <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f
[ 1442.756672][    C0] RSP: 0018:ffffc90000007ed8 EFLAGS: 00000297
[ 1442.756690][    C0] RAX: 0000000000000000 RBX: ffffffff937ca600 RCX: dffffc0000000000
[ 1442.756706][    C0] RDX: ffff88808286da00 RSI: ffffffff8bd35de0 RDI: ffffffff8dab5cc0
[ 1442.756721][    C0] RBP: 1ffff92000000fdb R08: 0000000000000000 R09: fffffbfff20c4ea2
[ 1442.756735][    C0] R10: ffffffff90627517 R11: ffffc90000007ff8 R12: 0000000000000000
[ 1442.756749][    C0] R13: 0000000080000101 R14: 0000000000000000 R15: ffffffff8de0c0c8
[ 1442.756764][    C0] FS:  00007fbe257d56c0(0000) GS:ffff888124e5a000(0000) knlGS:0000000000000000
[ 1442.756787][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1442.756802][    C0] CR2: 00007f0d8d2d7d60 CR3: 000000006173a000 CR4: 00000000003526f0
[ 1442.756816][    C0] Call Trace:
[ 1442.756824][    C0]  <NMI>
[ 1442.756833][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[ 1442.756859][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1442.756892][    C0]  ? nmi_handle.part.0+0x1a7/0x5d0
[ 1442.756916][    C0]  ? nmi_handle+0x86/0xc0
[ 1442.756936][    C0]  ? run_timer_base+0x7c/0x190
[ 1442.756959][    C0]  ? default_do_nmi+0x6a/0x160
[ 1442.756982][    C0]  ? exc_nmi+0x170/0x1e0
[ 1442.757004][    C0]  ? end_repeat_nmi+0xf/0x53
[ 1442.757030][    C0]  ? run_timer_base+0x7c/0x190
[ 1442.757054][    C0]  ? run_timer_base+0x7c/0x190
[ 1442.757079][    C0]  ? run_timer_base+0x7c/0x190
[ 1442.757103][    C0]  </NMI>
[ 1442.757110][    C0]  <IRQ>
[ 1442.757117][    C0]  ? __pfx_run_timer_base+0x10/0x10
[ 1442.757141][    C0]  ? mark_held_locks+0x49/0x80
[ 1442.757168][    C0]  run_timer_softirq+0x10/0x40
[ 1442.757193][    C0]  handle_softirqs+0x216/0x8e0
[ 1442.757218][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1442.757242][    C0]  ? irqtime_account_irq+0x18d/0x2e0
[ 1442.757269][    C0]  ? kernel_fpu_end+0x59/0x70
[ 1442.757293][    C0]  ? __pfx_sha256_transform_rorx+0x10/0x10
[ 1442.757318][    C0]  do_softirq+0xb2/0xf0
[ 1442.757340][    C0]  </IRQ>
[ 1442.757347][    C0]  <TASK>
[ 1442.757355][    C0]  __local_bh_enable_ip+0x100/0x120
[ 1442.757378][    C0]  kernel_fpu_end+0x5e/0x70
[ 1442.757401][    C0]  _sha256_update+0xc3/0xf0
[ 1442.757425][    C0]  ima_calc_file_hash_tfm+0x300/0x3d0
[ 1442.757450][    C0]  ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[ 1442.757511][    C0]  ? stack_trace_save+0x8e/0xc0
[ 1442.757540][    C0]  ? ima_alloc_tfm+0x21a/0x2e0
[ 1442.757560][    C0]  ? generic_fillattr+0x6bf/0x940
[ 1442.757582][    C0]  ima_calc_file_hash+0x1ba/0x490
[ 1442.757606][    C0]  ima_collect_measurement+0x897/0xa40
[ 1442.757633][    C0]  ? __pfx_ima_collect_measurement+0x10/0x10
[ 1442.757663][    C0]  ? trace_contention_end+0xdd/0x130
[ 1442.757691][    C0]  ? __mutex_lock+0x1cb/0xb00
[ 1442.757719][    C0]  ? is_bad_inode+0xd/0x40
[ 1442.757743][    C0]  ? xattr_resolve_name+0x27b/0x3f0
[ 1442.757772][    C0]  ? vfs_getxattr_alloc+0xec/0x340
[ 1442.757803][    C0]  ? ima_get_hash_algo+0x27c/0x400
[ 1442.757832][    C0]  ? __pfx_ima_get_hash_algo+0x10/0x10
[ 1442.757864][    C0]  ? process_measurement+0x126c/0x2360
[ 1442.757884][    C0]  process_measurement+0x126c/0x2360
[ 1442.757907][    C0]  ? __pfx_process_measurement+0x10/0x10
[ 1442.757927][    C0]  ? __lock_acquire+0x5ca/0x1ba0
[ 1442.757953][    C0]  ? init_file+0x93/0x4c0
[ 1442.757971][    C0]  ? alloc_empty_file+0x73/0x1e0
[ 1442.757991][    C0]  ? hugetlb_file_setup+0x4cd/0x620
[ 1442.758015][    C0]  ? ksys_mmap_pgoff+0x189/0x5c0
[ 1442.758038][    C0]  ? __x64_sys_mmap+0x125/0x190
[ 1442.758075][    C0]  ima_file_mmap+0x1b1/0x1d0
[ 1442.758094][    C0]  ? __pfx_ima_file_mmap+0x10/0x10
[ 1442.758117][    C0]  security_mmap_file+0x88c/0x990
[ 1442.758147][    C0]  vm_mmap_pgoff+0xec/0x450
[ 1442.758174][    C0]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1442.758198][    C0]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1442.758221][    C0]  ? hugetlbfs_get_inode+0x31f/0x730
[ 1442.758246][    C0]  ksys_mmap_pgoff+0x1c8/0x5c0
[ 1442.758270][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1442.758291][    C0]  __x64_sys_mmap+0x125/0x190
[ 1442.758313][    C0]  do_syscall_64+0xcd/0x260
[ 1442.758343][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1442.758363][    C0] RIP: 0033:0x7fbe2798d169
[ 1442.758380][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1442.758400][    C0] RSP: 002b:00007fbe257d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1442.758421][    C0] RAX: ffffffffffffffda RBX: 00007fbe27ba6080 RCX: 00007fbe2798d169
[ 1442.758435][    C0] RDX: 0000000000000004 RSI: 0000000800000005 RDI: 0000000000000000
[ 1442.758449][    C0] RBP: 00007fbe27a0e2a0 R08: 0000000000000401 R09: 0003800000000000
[ 1442.758464][    C0] R10: 0000000000040eb3 R11: 0000000000000246 R12: 0000000000000000
[ 1442.758477][    C0] R13: 0000000000000000 R14: 00007fbe27ba6080 R15: 00007ffef4335048
[ 1442.758497][    C0]  </TASK>
[ 1442.763082][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1443.286727][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) 
[ 1443.298206][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1443.308986][   T31] Call Trace:
[ 1443.312333][   T31]  <TASK>
[ 1443.315274][   T31]  dump_stack_lvl+0x3d/0x1f0
[ 1443.320154][   T31]  panic+0x71c/0x800
[ 1443.324077][   T31]  ? __pfx_panic+0x10/0x10
[ 1443.328517][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1443.333919][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1443.339927][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1443.345336][   T31]  ? watchdog+0xdda/0x12c0
[ 1443.349879][   T31]  ? watchdog+0xdcd/0x12c0
[ 1443.354323][   T31]  watchdog+0xdeb/0x12c0
[ 1443.358709][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1443.363869][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1443.369162][   T31]  ? __kthread_parkme+0x148/0x220
[ 1443.374396][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1443.379201][   T31]  kthread+0x3a4/0x760
[ 1443.383500][   T31]  ? __pfx_kthread+0x10/0x10
[ 1443.388131][   T31]  ? __pfx_kthread+0x10/0x10
[ 1443.392752][   T31]  ? __pfx_kthread+0x10/0x10
[ 1443.397535][   T31]  ? __pfx_kthread+0x10/0x10
[ 1443.402149][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1443.406942][   T31]  ? __pfx_kthread+0x10/0x10
[ 1443.411563][   T31]  ret_from_fork+0x45/0x80
[ 1443.416001][   T31]  ? __pfx_kthread+0x10/0x10
[ 1443.420801][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1443.425601][   T31]  </TASK>
[ 1443.428918][   T31] Kernel Offset: disabled
[ 1443.433253][   T31] Rebooting in 86400 seconds..