last executing test programs:

17m51.628688784s ago: executing program 32 (id=301):
socket(0x23, 0x80805, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mbind$auto(0x800000000, 0x2091d5, 0x9, 0x0, 0x6, 0x4997fffd)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (rerun: 32)
socketpair$auto(0x1, 0x2, 0x1, 0x0)
ioctl$auto(0x3, 0xc0104d03, r0) (async)
madvise$auto(0x0, 0x20499d, 0x9) (async)
r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0)
read$auto_proc_sessionid_operations_base(r1, &(0x7f00000000c0)=""/4096, 0x1000) (async, rerun: 64)
ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) (rerun: 64)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) (async, rerun: 64)
connect$auto(0x4, 0x0, 0x10) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async)
select$auto(0x5, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x8000000000000201, 0x9, 0x3, 0x6, 0x7, 0xd886, 0x5e58296b, 0x341, 0x41, 0x7, 0x200, 0x8, 0xc]}, 0x0, 0x0) (async)
open_tree$auto(r2, 0x0, 0x1001) (async)
pipe$auto(0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fb\x00', 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket(0x15, 0x5, 0x0) (rerun: 32)
socket(0x10, 0x2, 0xc) (async)
mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000)

15m17.165060669s ago: executing program 33 (id=910):
close_range$auto(0x2, 0x8, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
close_range$auto(0x2, 0xa, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000080), r1)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/phys\x00', 0x40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4110, 0x100e)
sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x1e8, r2, 0x424, 0x70bd26, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x8}, @OVS_METER_ATTR_BANDS={0x1bd, 0x4, 0x0, 0x1, [@generic="c2a491f0a14c7bf933760fdd123010c18b90bce7de8b11a9f990308a5e", @typed={0xb, 0x58, 0x0, 0x0, @str='/@%&q%\x00'}, @typed={0x8, 0x47, 0x0, 0x0, @fd=r3}, @nested={0x185, 0x101, 0x0, 0x1, [@generic="a94324f5be7629338e658b7d3f6ff25e844f2669018b7023ca7d6656d769c8c557a27a0fb570f9f16d3d723de6b8c5b6f85adc4c5743e6dd1a51f8ff93d9d616d0f6aafad90e1fd2cf02dae8b251d9e29ba52e2df64e4c38d2011f1486010f02147b76624d12ec6eb58905d6da991301d6fc2dfbed341021d57aeeeb02df6750a56b295b84566301db73405ff97ff73a49f12fd0fc967bc3012dd18ad8e7476b73d27a731259c027d3cc4c87f579910a2cbd93e544722e65e4c825b0b3cf38814cefc7bb2f3131fdaeeab93368a9c17636", @generic="100ab6bf18071437e854414d5ccd25c28e93f92dabb17db17237eecb6e6e762083a18605587fb4e2a41bdcf9db689327c09026153dbce6e640347b818881c22c38359a9620474d3e4536a307b6c789263ff76626d1ed20243f78d63c5c62517f59f47e2158e9042af50d1806030e323c478b4ad3c65c58259c5b2231754bec4e602e7f5e7d0719fad6", @nested={0x4, 0x87}, @nested={0x4, 0x6c}, @typed={0x6, 0xa4, 0x0, 0x0, @str='/\x00'}, @generic="10583cb7e679f81e44b726e3841f163ad6ed2076ca9210"]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xa76a}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x42080)
r4 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYRES8=r1, @ANYRES8], 0x18}}, 0x200080c0)

9m59.623038192s ago: executing program 34 (id=2338):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x200080, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x5, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r3 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080), 0x109c41, 0x0)
r4 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r4, 0x0, 0x4, 0x0, &(0x7f0000000140)=0x49)
sendmsg$auto_NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000000c3eaa4a03913420be2d04e48ab7f73ff154358f1a5bba4acf6d46340d2e9913930efef31f34cf1035a090f9dd79b7bc622b33df8ca30ac82c854de70401a84e73c8c95fbd2d4cf4b5133e2a6b76c9fda774da994e6f22d", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf252e0000000400e38026000d01e9d4451c8db60a13eacc030e9ae44b155d73bd5b322be0ea1752a9e21a14b43cad6c000004003b011000b000048c71e8c6b2b398dc2ac3ba05008900000000000600fc001c0400000600f700590300000500180101000000"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
sendmsg$auto_NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB='4\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x834}, 0x1, 0x0, 0x0, 0x441c4}, 0x40)
capget$auto(0x0, 0xfffffffffffffffe)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
fstat$auto(r0, 0x0)
setresgid$auto(0x81, 0x800000a0, 0x8)
socket(0x2, 0x2, 0x1)
r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x1, 0xa, 0x6, "a2b8e85fc56865ba529faa000000000000000000000018f4ffffdeffff0000000000c7692a240000008000"}, 0x6, 0x5, 0x7, @raw=0x81, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d3c89bee7005c5affd5ab811fd53443e6cf63a902991b44e48364e8de3f344584996c31f9ae16c6c4f064c38f590125ed26400", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"})

9m20.44580043s ago: executing program 35 (id=2432):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mlock$auto(0x7c88, 0x7fff)
remap_file_pages$auto(0x6a27, 0x1000000001000, 0x0, 0x3, 0x2)
fanotify_init$auto(0x602, 0x1) (async)
r0 = fanotify_init$auto(0x602, 0x1)
open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) (async)
r1 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
select$auto(0xff, &(0x7f0000000080)={[0x9, 0xfffffffffffffffc, 0x4, 0xe, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa654, 0x202, 0x9, 0x1]}, 0x0, 0x0, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
mknod$auto(&(0x7f0000000100)=':,\x00', 0xc9, 0xfffefffa)
execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000140)='$+[-+\x98%(,\x00\xdc\xec^&\x9e\x1c3\xeaf[|\xdeZ\xed2\xbc\xbd^\xc3\x0f\xc4\xd9\x94\x94B3\x97p\'\xf7\xea\xd5\xf9=\xe5\x1e\f\x8d\xe3\xb7\xadS\xbd\xb2uu\xc1I\xdew\x13.[\xee\xb6L\x983Z\xecS_\xff\xec\t\xd7\t\xa1&\x832Q&\x99\xbbI\xb5\xd2\xc7\xc8\x02S\x18ubI*\x8e\xd9\xd4\xaf\x8b\xfa\x8a\x90\xcd\x90\xaf\x95\x90\x1bU{O\x9cw\x8ez\xa1\xb23^\"\xbc\xd8\x0fT\xb7\x80\x00\bW\xd3\x9d=\x18\x91\x00\xedn\x9c\x93\x82@\x1a\xaex\xad*I\x1b\xa4Mx\x91f\xa6h\xb2c\x01Pf\x06\x18\xbd\x85\x1a\xea\xdc\x9bH\xcc\x1enhul8\xbdW^r\xe4\x04n\x8fK\x8f\xa1\xdc\xfc\xee\x97wO6\xe1+\xe7\xb0\v\xdfu\xb3\xa9L\x85\x1cW\x89~\x98\xfb&(\x9e\xa8\x8a\xed\xcaw,\x13\x13\x99a\x8d\xc6\xea\xff,\x11\x80\xe6H\xea\xe0\xcf\xab\xc2}I\xf5A\xd2\xf4\xc9_\x16\x97r\x94;\xb7\xd8\xf5)\xca)\xcf\x02\x0f\xa5V\xd17U*5C\x19\x8cL\xb5Ds.\x1b\xf9\x7f?b\xaf\x9d\xd4ww4\xa1\xc4\xfe\xf2\xda\x10\xdcV\x0e\x00'/311, 0x0)
fanotify_mark$auto(r0, 0x505, 0x800, r1, 0x0)

5m56.649533007s ago: executing program 36 (id=3624):
umount2$auto(0x0, 0x7)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002605e6270e99e9a0443d0d4b6283bd7000fbdbdf25020000000c0006000800000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4044814}, 0x8044)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
fanotify_init$auto(0x1f53, 0x2000000000002)
open(0x0, 0x4242, 0x4)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r2 = socket(0x2, 0x1, 0x0)
setsockopt$auto(r2, 0x6, 0x24, 0x0, 0x40)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(r0, 0x400454ca, 0x38)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x3)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)

5m54.253848541s ago: executing program 0 (id=3723):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper\x00', 0x20681, 0x0)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x9)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1)

5m53.828682895s ago: executing program 0 (id=3724):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$auto(r0, 0x0, 0xb5)
fcntl$auto(0x3, 0x4, 0xa553)
recvmsg$auto(0xffffffffffffffff, 0x0, 0xffffffff)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)

5m53.538558342s ago: executing program 0 (id=3726):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={r0, 0x4, 0xffff}, 0x4, 0x100000)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000140), r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
read$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffffff, &(0x7f0000000080)=""/75, 0x4b)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/block/loop8/hctx0/type\x00', 0x80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyt7\x00', 0x42001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0)

5m52.909476109s ago: executing program 0 (id=3728):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x703d27, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xfffffffffffff000, 0x4000050}, 0x40d8)

5m52.680209003s ago: executing program 0 (id=3729):
mmap$auto(0x4, 0x400008, 0xdf, 0x9b71, 0x2, 0x8000)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6a)
mmap$auto(0xfffffffb, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x7ffb)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
socket(0x10, 0x3, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7008fefbdf250a400000100003800c0180000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x0, 0x0)
write$auto(r2, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x27, 0xd, 0x1, 0x948b, 0x3, 0x4, 0x1, 0x3, 0x11000000, 0x400000000000000, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffd]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$auto(r3, 0x0, 0x8)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000001, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x5}, 0x800, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dddbdf25020001000800030000000000080015"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000)

5m52.412423297s ago: executing program 0 (id=3731):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x100000000, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0)
read$auto(r0, &(0x7f0000000080)='MAC80211_HWSIM\x00', 0x6)
eventfd2$auto(0x7, 0xf)

5m37.178195032s ago: executing program 37 (id=3731):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x100000000, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0)
read$auto(r0, &(0x7f0000000080)='MAC80211_HWSIM\x00', 0x6)
eventfd2$auto(0x7, 0xf)

3m29.816629887s ago: executing program 6 (id=4360):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x200080, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x5, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r3 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080), 0x109c41, 0x0)
r4 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r4, 0x0, 0x4, 0x0, &(0x7f0000000140)=0x49)
sendmsg$auto_NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000000c3eaa4a03913420be2d04e48ab7f73ff154358f1a5bba4acf6d46340d2e9913930efef31f34cf1035a090f9dd79b7bc622b33df8ca30ac82c854de70401a84e73c8c95fbd2d4cf4b5133e2a6b76c9fda774da994e6f22d", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf252e0000000400e38026000d01e9d4451c8db60a13eacc030e9ae44b155d73bd5b322be0ea1752a9e21a14b43cad6c000004003b011000b000048c71e8c6b2b398dc2ac3ba05008900000000000600fc001c0400000600f700590300000500180101000000"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
sendmsg$auto_NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB='4\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="13311390f50db2362c0626968163204caefc9a9334846ac165efd244c3bd4222e2141baabe9cd391f9c558deb0ad58da3546ffdeb6852fc512531c67b8f341365cd9f29b984a27865b0eeab6baeeffd934c169c1ad06a4a9ee279fda7bff3ded2c7809a816ecbf4603f75697008e3486c00f60e51a7cffa2539976f081b44145b7b3f194c6c189893f79895f7600674d2fa7528b72cb74f1a07f3627683e9647749ff810fe2a8d1fba13920af7f0cade79cfb9855aeff5d0e2661fcd3afc4a6fb56702bc5c21eb3272f5081b57d0ec560e06530f021d675e5f8fa896dda6ff62736081a4bffda6263004af454db4be36d2a68ea4effca872bb0ff684a5526a225daf37056fe1ed6e650e19279290ca99058f0bf4757a94d2c9127af5e3c97e02be186932a1520bfd0571a4613324e86caa40d5584127df710493d394afa0b601a870a38120d9e5431d86b26cc90b667314c58f5199470cc0155f6db925174e81435f7b18c2ce5597c98dbca8f0bbf4c7f51d82e1a4f9c6c92997fd127f8f313d9db007c0fdf782a7e28d90eefbec1b7d9f45e61054c6259154b0636e7eebe3682762bd1dec1a93e0dc184a9e4e6e546a720d6732208f3e3f7eb7ed50d37295f39c96fbd5ef363b50b2194bded8b9d373d74eee33a81813d365ce65f106714deb743a94b4cb392b0066b65a271a087cea37b3aea64806fc319f6a26632b222a18661111d65cf70d6059ce98b8ef5002b3cd2b5a7ea82476c544ddf0aca82a169652f77481df10490a029f851a0ed442602196bf5485800ec8a19f91a7afbbc8e30ca6d035a664aa07bc095e2c9bcc41e2883f8c0f696f7ffb1ff7682178c67da06ea241787fb96821b1e1b6c8c93d7db1a0995a86d0df8a04d69f8692f113da6951a57ad6f0d747c58f10f423e0cdd35013e95fd6cec74bd4deb615ea6d6c6b62b0db4b43b03ca2402d06660b13b96e5bdc5537cbc778fd805eccae361800000005002f010500000059fc325daf756e47ebaec92a4b3d110c91ac64ba2fc665d15f46f652899c953ef0cc71eaf0acf7402bb034e4a5b52407da2346e9aa38e59d69e2dafe25049204535c723c8d406785489591dd566919633bc4a5ff9a9923fa9eaafb3e10f0e9e71081d7944c0ab8e6623e737858bfb4ab1ca515e83278d21bef1b4cd56098861968be5188a0fe5f1e4b744e3ae79fdb7df5653c3ac13ed7867f3ed0ea7ca41a894cca20c0f3875f78aa359c24475c97f9eae7957e3889873fd0084cfdfa4e05b8c10bc0b184e7fcd70dd1e9168f9e7c81d9"], 0x834}, 0x1, 0x0, 0x0, 0x441c4}, 0x40)
capget$auto(0x0, 0xfffffffffffffffe)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
fstat$auto(r0, 0x0)
setresgid$auto(0x81, 0x800000a0, 0x8)
socket(0x2, 0x2, 0x1)
r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x1, 0xa, 0x6, "a2b8e85fc56865ba529faa0000007effffffffffffff18f4ffffdeffff0000000000c7692a240000008000"}, 0x6, 0x5, 0x7, @raw=0x81, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d3c89bee7005c5affd5ab811fd53443e6cf63a902991b44e48364e8de3f344584996c31f9ae16c6c4f064c38f590125ed26400", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"})

3m29.135732606s ago: executing program 6 (id=4367):
mmap$auto(0x0, 0x40, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
open(&(0x7f0000000100)='./file0\x00', 0x561b42, 0x104)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0)
read$auto(r2, 0x0, 0x39b8)
capset$auto(0x0, 0x0)
capget$auto(0x0, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/pcm0c/sub0/info\x00', 0x101000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
ioctl$auto_MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000080)={0xfff, 0x10, 0x0, 0xd, 0xc6, 0x8, 0x2, 0x5, 0x100000004, 0x4, 0x4d, 0x0, 0x2, @iso={0xf01}, 0x9, 0xffffff81, 0xffffffff, 0x4}, &(0x7f0000000180)="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", 0xfff})
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
socket(0x15, 0x5, 0x0)
sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
listen$auto(0x3, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
r5 = socket(0x10, 0x2, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010028bd7200fddbdf251100fc00"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)

3m27.603870281s ago: executing program 6 (id=4373):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r0)
sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250700000008000400ffffff7f0600010a4a000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
clock_nanosleep$auto(0x0, 0x3, &(0x7f0000001200)={0x8, 0x3}, 0x0)
r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
rt_sigtimedwait$auto(&(0x7f0000000180)={0xfff}, &(0x7f0000000200)={@_si_pad}, &(0x7f0000000280)={0x3, 0x7fff}, 0x8)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000000)
io_uring_setup$auto(0x6, &(0x7f0000000100)={0xffffffff, 0x4, 0x6, 0xfffffffe, 0x8, 0xa, r2, [0x7fffffff, 0x89, 0xfffffffd], {0xf, 0x285, 0xffffffc9, 0x9, 0x6, 0x8000, 0x9, 0x5f, 0x4}, {0x2, 0x9, 0x8, 0x8, 0x2, 0xc, 0xff, 0x2, 0x4}})
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

3m26.656815021s ago: executing program 6 (id=4375):
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9)
r0 = socket(0xa, 0x5, 0x84)
sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'virt_wifi0\x00', <r4=>0x0})
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r4}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x110c230000, 0x1, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x21, 0x2, 0x2)
socket(0x1d, 0x2, 0x2)
openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r5 = socket(0x2c, 0x2, 0x4)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x800, 0x0)
r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x200, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x8)
mmap$auto(0x1000, 0x1, 0x7ff, 0x19, 0xffffffffffffffff, 0x1)
mmap$auto(0x0, 0xe983, 0xdf, 0x16, 0x401, 0x7ffc)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x4, 0x16, 0x940, 0x1ffe0, 0x0, 0x6, 0x2, 0x2, 0x25, 0xfff, 0x7, 0x4, 0x1, 0x5, 0x20000003, 0x5, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [0x0, 0x2, 0x0, 0x5, 0x0, 0x3, 0x3, 0x3, 0x1000000000000, 0x0, 0x40000000003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x10000, 0xbf]}, 0x1fe, 0xfffffb26)
ioctl$auto(0x3, 0x8008743f, 0x1)
r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r5)
sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET2(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008091}, 0x440ecc4159a90d00)

3m25.439145296s ago: executing program 6 (id=4383):
mmap$auto(0x3fffffffffffc, 0x40010, 0xe0, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32)
shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000140)={{0x1, 0xee00, <r0=>0x0, 0xfffffffb, 0x0, 0x7fff, 0x7}, 0x8, 0x9, 0x0, 0x7, @inferred=0xffffffffffffffff, @raw=0x1, 0x247, 0x0, &(0x7f0000000000)="69137c82a7c8fe012e9e541880a1621727930cec32825be1c64b4884b43c66b57b9856a48895f7a53b3cb2f415fc8f7ea3ed7136f7ec222eb7b97573082e44c7d353420399414248f9646c0ad55cb61426eebbc9216c70a43f528b8602f06ca60988279f78d312d758ee89240775863db57c789583f0b7cfb8c40fc4d054d1bac1dd79a6fd5a5c9772bf7407281255086aeb9a24ae30cb29c276443ff79a9e8ef88e4a614af2697abae198ef7220cf8a52b7b5be2de9ece88d82b40657d72b09160a15", &(0x7f0000000100)}) (rerun: 32)
ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000001c0)={0x80, r0, 0x2, 0x575541a7})
futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100)

3m24.568659872s ago: executing program 6 (id=4387):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff)
sendfile$auto(0xffffffffffffffff, r0, &(0x7f0000000040)=0x2, 0x2)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000)

3m9.281900837s ago: executing program 38 (id=4387):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff)
sendfile$auto(0xffffffffffffffff, r0, &(0x7f0000000040)=0x2, 0x2)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000)

2m42.093777115s ago: executing program 3 (id=4509):
unshare$auto(0x81)
unshare$auto(0x6)
r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r0, &(0x7f0000000100)='1', 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20040850}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0)
bpf$auto(0x9, &(0x7f0000000000)=@link_update={0x8, @new_map_fd=r0, 0x4}, 0x80a3)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf)
ppoll$auto(&(0x7f0000000180)={r1, 0x4, 0x8}, 0x7, 0x0, 0x0, 0x8)
close_range$auto(r1, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_MODULE_GET(r2, 0x0, 0x40000)
clone$auto(0x3fff, 0x9, 0x0, 0x0, 0x5)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
setsockopt$auto(0x200000004, 0x6, 0xd, 0xffffffffffffffff, 0x7)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x6, 0x73)
socket(0x22, 0x8000b, 0x80020002)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r3 = socket(0x2, 0x2, 0x1)
socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
setsockopt$auto(r3, 0x3, 0x7c, 0x0, 0x8)

2m32.384437547s ago: executing program 3 (id=4529):
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video24\x00', 0xa0000, 0x0)
socket(0xa, 0x5, 0x84)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x106)
timer_create$auto(0x7, 0x0, 0x0)
ioctl$auto_SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x0, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0x2, 0x6, 0x0)
setsockopt$auto(r1, 0x0, 0x10, 0x0, 0x17)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)

2m31.386712213s ago: executing program 3 (id=4535):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
sysfs$auto(0x6, 0xa, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0x4)
bpf$auto(0x7, &(0x7f0000000580)=@prog_bind_map={0xffffffffffffffff, <r3=>r0, 0x5}, 0x6f3)
socket(0x25, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x6)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYBLOB="e650bb69d29e52f02877a5daac79e4284c49d9072c458edca9b9d6c80b065427142e55bcaff10188146cd417bae80fb90680e6952dc0aeedaeaa8f0ac2ea555cccaa13b7d22cdd53", @ANYBLOB="01007209fa60fddbdf2500000000000014593b3fd7"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
socket(0x2, 0x80002, 0x73)

2m30.846408375s ago: executing program 3 (id=4539):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x5fffffc, 0x3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x2, 0x4000)
r0 = socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0)
memfd_secret$auto(0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(0x3, 0xae41, r2)
socketpair$auto(0x101, 0x3, 0x6, &(0x7f0000000080)=0x4)
ioctl$auto_KVM_CREATE_VM(r1, 0x4400ae8f, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0xb2, 0x16, 0xffb, 0x8000000008015, r3, 0x8000)
write$auto(r3, 0x0, 0x63)
write$auto(0x3, 0x0, 0xfffffdef)
madvise$auto(0x0, 0x20499d, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
open_tree$auto(r0, 0x0, 0x5a)
madvise$auto(0x108000, 0x800034, 0x200000b)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
ioctl$auto_SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0)
mmap$auto(0x800000000000005, 0x400005, 0x0, 0x1fb, r3, 0x20)
socket(0x10, 0x2, 0x0)
madvise$auto(0x8, 0x6, 0x21)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)

2m28.962454044s ago: executing program 3 (id=4550):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
adjtimex$auto(&(0x7f0000000240)={0x4, 0x0, 0x4, 0x8754, 0x6, 0x59ca, 0x1, 0x0, 0xfffffffffffffff9, 0x6, 0x2, {0x3, 0xffffffffffffff1e}, 0x2, 0x2cff, 0xb35, 0x8, 0x0, 0x8, 0x6, 0x2, 0x6, 0x2, 0x7}) (async)
adjtimex$auto(&(0x7f0000000240)={0x4, 0x0, 0x4, 0x8754, 0x6, 0x59ca, 0x1, 0x0, 0xfffffffffffffff9, 0x6, 0x2, {0x3, 0xffffffffffffff1e}, 0x2, 0x2cff, 0xb35, 0x8, 0x0, 0x8, 0x6, 0x2, 0x6, 0x2, 0x7})
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
geteuid()
fsconfig$auto(0x6, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x5) (async)
fsconfig$auto(0x6, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x5)
r1 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/uid_map\x00', 0x8081, 0x0)
writev$auto(r1, &(0x7f0000000140)={0x0, 0x6}, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_IEEE802154_START_REQ(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xb8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x44}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008010}, 0xc041)
mbind$auto(0x0, 0x5, 0x5, &(0x7f0000000080)=0x6, 0x7f, 0x5)
sendfile$auto(r0, r0, 0x0, 0xe00000000) (async)
sendfile$auto(r0, r0, 0x0, 0xe00000000)

2m28.347265583s ago: executing program 3 (id=4553):
read$auto_hsr_node_table_fops_(0xffffffffffffffff, &(0x7f0000000000)=""/252, 0xfc)
socket(0xa, 0x801, 0x84)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0)
sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x3a401f830d8a7339, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2)
sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_ENABLED={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0xc010)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x482941, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x0, 0x73d, 0x4, 0x0, 0xff, "50cfeeca8e00"})
openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
socket(0xf, 0x3, 0x2)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d7468fe8000"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r5 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r5, 0x107, 0xb, 0x0, 0x0)

2m13.176665443s ago: executing program 39 (id=4553):
read$auto_hsr_node_table_fops_(0xffffffffffffffff, &(0x7f0000000000)=""/252, 0xfc)
socket(0xa, 0x801, 0x84)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0)
sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x3a401f830d8a7339, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2)
sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_ENABLED={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0xc010)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x482941, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x0, 0x73d, 0x4, 0x0, 0xff, "50cfeeca8e00"})
openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
socket(0xf, 0x3, 0x2)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d7468fe8000"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r5 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r5, 0x107, 0xb, 0x0, 0x0)

1m6.773692833s ago: executing program 9 (id=4913):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x9, 0x3, 0x4, 0x2, 0x9, 0x5, 0xf, 0x7, 0xb2, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x1, 0x0, 0x76, 0x0, 0x0, [0x0, 0x2, 0x0, 0x0, 0x4, 0xae8e, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800]}, 0x100000003, 0x81)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/sda/sched/write1_fifo_list\x00', 0x0, 0x0)
socket(0x2, 0x801, 0x100)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x1a9402, 0x0)
socket(0x18, 0x80802, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x15, 0x5, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x2, 0x0)
socket(0xa, 0x2, 0x88)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
write$auto(r0, 0x0, 0xc3)
write$auto(0xc8, 0x0, 0x40f6)
socket(0x3, 0x4, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setitimer$auto(0x4, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
unshare$auto(0x40000080)
socket(0x17, 0x3, 0x3a)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567)

1m6.307647782s ago: executing program 9 (id=4915):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper\x00', 0x20681, 0x0)
unshare$auto(0x8000000)
shmget$auto(0x0, 0xfffffffffeffffff, 0x69c2)
io_uring_setup$auto(0x6, 0x0)
r0 = prctl$auto_PR_SET_MM_START_STACK(0x1, 0x5, 0xffffffffffffffff, 0x9, 0x2)
mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, r0, 0x100000001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000040c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00000000000000000087000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000001c}, 0x20000800)
shmctl$auto(0x0, 0x1, &(0x7f0000000240)={{0x9b, 0xee00, 0x0, 0x3, 0x7, 0x3, 0x1ff}, 0x3, 0x2, 0x4, 0x2, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000140)="ced5151edbf15ca1b64244b673eb25611ec48033cb68cd6fa20eec7bc4b0dd0e5334670e4b1aa1681c6b0cca6dfc603819e67cb6e1aab21d1488eee32cddd1c4cdd971f4d493bfa489862b889fcb69ef334980a9882898f4b8bc731c345938b42fb006f09a6acff20b410d9f35d74c884093696cd00985b495a86be0adc7344f17b2c661df607f356ce5176cc4f5dcb6adb9d2d49c2b3dbd29bb9e96e691bc920b466fa1efe15735d5498332dceebba3faaeaaca27715c20c723f51d40ad36ab8dacd83730a2fb4e00a6ed1118dfd7a7c830e4fdad3430aed876f00476f62db08d8d441c", &(0x7f0000000040)="678b0d798fa8d82a2e065b30d74f652f58e02940e6757a8a6d2bca14803e05d2549eb4d600ff223fa64d3dc5225e17ff5a58dffa2ad40dc616b0c36c35cadddfd38e8f7fd4f11492d14c825e1d07eaac"})
r3 = socket(0x10, 0x2, 0x0)
mmap$auto(0xfffffffffffffff7, 0x5, 0x8, 0xeb1, r3, 0x100000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r4)
sendmsg$auto_TIPC_NL_NET_SET(r4, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32=0xee00, @ANYBLOB="653f60776b0fb062c84af1a162aed7439786ab1ae31dcf8997c018109be8e24ac281d2a559af5c2976289e5b9fd1f2eae6c811ebb7d047"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2)
mmap$auto(0x10000000000000, 0x20009, 0x6, 0xeb1, 0x401, 0x8000)
setsockopt$auto_SO_LOCK_FILTER(r4, 0x0, 0x2c, &(0x7f0000000040)=')).#@+\xe2\'\x00', 0x200)
r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x20082, 0x0)
ioctl$auto(r6, 0x40084d02, r6)
socket(0xa, 0x2, 0x0)
r7 = socket(0xe, 0x800, 0x304)
setsockopt$auto(r7, 0x107, 0x12, 0x0, 0x4)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x82000, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6b, 0x0, 0x7d, 0xfffffffffffffffd, 0xd4, 0x4, 0x4, 0x0, 0x1, 0x64, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0x1, 0x804})
close_range$auto(0x2, 0xffffffffffffffff, 0xfffffffe)
socket$nl_generic(0x10, 0x3, 0x10)

1m5.799111088s ago: executing program 9 (id=4920):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={r0, 0x4, 0xffff}, 0x4, 0x100000)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0)
syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000140), r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
read$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffffff, &(0x7f0000000080)=""/75, 0x4b)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/block/loop8/hctx0/type\x00', 0x80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyt7\x00', 0x42001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0)

1m5.468542827s ago: executing program 9 (id=4923):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x9, 0x3, 0x4, 0x2, 0x9, 0x5, 0xf, 0x7, 0xb2, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x1, 0x0, 0x76, 0x0, 0x0, [0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800]}, 0x100000003, 0x81)
socket(0x3, 0x4, 0x0)
setitimer$auto(0x4, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567)

1m5.321044985s ago: executing program 9 (id=4924):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x1, 0x5, 0x3, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0x0, [0x1b16, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800110009000000060007000080000008000200", @ANYBLOB="34aedb411d17ca4456c40b05833acc4806e60e4ff5623c5eb2275a6085f8151f163f819ef1f7c8373ee95590995581736bfcbc5a6240ab9a51b09329a190d7b677137d6160e4cb2a6a97b932bbff526d23f126e26c8d0935a0c4c9b73cc9668be1acbe0aa1db97307142f1a37284d5f79e79bdc6906c1d5fc8cdb4dce13dd0a3fef3c2740ee7df91d02be2455d47a76c90b6a1975e78fa1b37cd3f5cda55fac0789f28bb7ce8d633c2e25523d1de9125b1c3bccbb24c9da6ef60b5f16112ce4962a62aea2e36f03563f8cbbdd62667876e0212f7b3248c19d2f212ffa2435d49a132dac98ababba6a9df03cc", @ANYBLOB="0a00050000000000000000020a0001000180c200000200000a000500ffffffffffff00000800040010"], 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
memfd_create$auto(0x0, 0x16)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event1\x00', 0xc80, 0x0)
read$auto(0x3, 0x0, 0x80)
r0 = socket(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x80044944, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0)
chdir$auto(&(0x7f0000000280)='}[,&*}\x00')
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
clock_getres$auto(0x6, 0x0)
mknod$auto(0x0, 0x1081, 0x3)
mlockall$auto(0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
modify_ldt$auto(0x1, 0x0, 0x10)
modify_ldt$auto(0x807ff0000000000, 0x0, 0x40100000000aa)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), r2)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper\x00', 0x20681, 0x0)
r4 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/features/extended_error\x00', 0x46a2d46ce71336da, 0x0)
io_cancel$auto(0x8000000000000000, &(0x7f0000000080)={0x7, 0x0, 0xfffff001, 0x100, 0x7f, r4, 0x0, 0x7, 0x3, 0x0, 0x6, r3}, &(0x7f0000000100)={0x7ff, 0x40, 0x0, 0x8})

1m4.997956083s ago: executing program 9 (id=4925):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000440)={<r0=>0xffffffffffffffff, &(0x7f0000000280)="a3f1649b1e2ca28be52e", 0x8, &(0x7f0000000300)="c30a7eb98611c1c5e019b334987e29fc11b27e9633481b60a55c239a9beaaa252461b502d731d5f88a70f15ab5874126eaaa3f560bd95c60511466f8681c9c9f3c9c192564e3dcca169c7898af3cf56001c5fac9248de1479c8a98f626f64246d0ece174591d12446151db65d6f59cd08ab1160741f52cffee483dcca63835a9912bbef7773ee2", 0xd6, &(0x7f00000003c0)="c969cbfe58bf9ad5d2ba3d3b6f1610722234b7b442", &(0x7f0000000400)=0x8001})
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/eps\x00', 0x280, 0x0)
pread64$auto(r1, 0x0, 0x5, 0x38)
close_range$auto(r0, r1, 0x5)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=<r2=>0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="e00013"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
socket(0xa, 0x6, 0x0)
setsockopt$auto(0x3, 0x0, 0x2a, 0x0, 0x28)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3)
sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf98b01278fc1456a}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES16=r5, @ANYBLOB="200026bd7000ffdbdf253e000000040034010800ef007da61654c200d700222a395e31aaab06f936cd8c0548b015f180bc46bb220b803b36ea7655db568289e6fb05980a412af30ef7f8616e9813242686bb54125ea55dfb077b373d862d4131a4ce6285fc17dfd179c35856d8145e996ba0803e55f93657b061238f6bfb9ef74dc781887f06a842d31042da66a7f958f2af2a999564aa8db3dd04526c787cbe29334877aa66ecb1793d40b196ae78fe2eb51c8952210044c3e336f2cbffec953499f429364b804273e13524ac00000c004580060089005b000000060095000300"/242], 0xf8}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000000)
getsockopt$auto_SO_TIMESTAMP_NEW(r4, 0x0, 0x3f, &(0x7f0000000200)='nl80211\x00', &(0x7f0000000240)=0x7)
r6 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0)
pread64$auto(r6, &(0x7f0000000100)='\xb9+.\x00', 0x6, 0x8000)
socket(0x22, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a)
ioctl$auto_CEC_RECEIVE(r4, 0xc0386106, 0x0)

1m0.807965459s ago: executing program 7 (id=4944):
fanotify_init$auto(0x101, 0x40)
mmap$auto(0x0, 0x4, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
socket(0x2b, 0x1, 0x1)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/supported_sectorsizes\x00', 0x100, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/start_ro\x00', 0x80302, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)

1m0.400723443s ago: executing program 7 (id=4953):
mmap$auto(0x0, 0x4, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)

1m0.067048435s ago: executing program 7 (id=4946):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x9, 0x3, 0x4, 0x2, 0x9, 0x5, 0xf, 0x7, 0xb2, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x1, 0x0, 0x76, 0x0, 0x0, [0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800]}, 0x100000003, 0x81)
socket(0x3, 0x4, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setitimer$auto(0x4, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x567)

59.639514614s ago: executing program 7 (id=4947):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
sysfs$auto(0x6, 0xa, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x2, 0x4)
bpf$auto(0x7, &(0x7f0000000580)=@prog_bind_map={0xffffffffffffffff, <r2=>r0, 0x5}, 0x6f3)
socket(0x25, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x3, 0x6)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES32], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYBLOB="e650bb69d29e52f02877a5daac79e4284c49d9072c458edca9b9d6c80b065427142e55bcaff10188146cd417bae80fb90680e6952dc0aeedaeaa8f0ac2ea555cccaa13b7d22cdd53", @ANYBLOB="01007209fa60fddbdf2500000000000014593b3fd7"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
socket(0x2, 0x80002, 0x73)

58.624906198s ago: executing program 7 (id=4951):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x1, 0x5, 0x3, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0x0, [0x1b16, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800110009000000060007000080000008000200", @ANYBLOB="34aedb411d17ca4456c40b05833acc4806e60e4ff5623c5eb2275a6085f8151f163f819ef1f7c8373ee95590995581736bfcbc5a6240ab9a51b09329a190d7b677137d6160e4cb2a6a97b932bbff526d23f126e26c8d0935a0c4c9b73cc9668be1acbe0aa1db97307142f1a37284d5f79e79bdc6906c1d5fc8cdb4dce13dd0a3fef3c2740ee7df91d02be2455d47a76c90b6a1975e78fa1b37cd3f5cda55fac0789f28bb7ce8d633c2e25523d1de9125b1c3bccbb24c9da6ef60b5f16112ce4962a62aea2e36f03563f8cbbdd62667876e0212f7b3248c19d2f212ffa2435d49a132dac98ababba6a9df03cc", @ANYBLOB="0a00050000000000000000020a0001000180c200000200000a000500ffffffffffff00000800040010"], 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
memfd_create$auto(0x0, 0x16)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event1\x00', 0xc80, 0x0)
read$auto(0x3, 0x0, 0x80)
r0 = socket(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x80044944, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0)
chdir$auto(&(0x7f0000000280)='}[,&*}\x00')
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
clock_getres$auto(0x6, 0x0)
mknod$auto(0x0, 0x1081, 0x3)
mlockall$auto(0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
modify_ldt$auto(0x1, 0x0, 0x10)
modify_ldt$auto(0x807ff0000000000, 0x0, 0x40100000000aa)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), r2)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper\x00', 0x20681, 0x0)
r4 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/features/extended_error\x00', 0x46a2d46ce71336da, 0x0)
io_cancel$auto(0x8000000000000000, &(0x7f0000000080)={0x7, 0x0, 0xfffff001, 0x100, 0x7f, r4, 0x0, 0x7, 0x3, 0x0, 0x6, r3}, &(0x7f0000000100)={0x7ff, 0x40, 0x0, 0x8})

58.290215534s ago: executing program 7 (id=4952):
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
socket(0x28, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0)
ioctl$auto(r1, 0xc074510c, 0x3)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00')
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080))
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xffffffffffff7fff, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x400000006, 0x3, 0x300000000000000, 0x9, 0x5, 0x6d3c, 0x5, 0x80000000002]}, 0x0)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x805)
open$auto(&(0x7f0000000200)='./file0\x00', 0xffffdff8, 0xff90)
sendmsg$auto_HWSIM_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
setsockopt$auto(r0, 0x405, 0x402030, 0x0, 0x8d)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000c80)="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", 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_DUMP_SEID(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0xc1}, 0xc010)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)

49.112513681s ago: executing program 40 (id=4925):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000440)={<r0=>0xffffffffffffffff, &(0x7f0000000280)="a3f1649b1e2ca28be52e", 0x8, &(0x7f0000000300)="c30a7eb98611c1c5e019b334987e29fc11b27e9633481b60a55c239a9beaaa252461b502d731d5f88a70f15ab5874126eaaa3f560bd95c60511466f8681c9c9f3c9c192564e3dcca169c7898af3cf56001c5fac9248de1479c8a98f626f64246d0ece174591d12446151db65d6f59cd08ab1160741f52cffee483dcca63835a9912bbef7773ee2", 0xd6, &(0x7f00000003c0)="c969cbfe58bf9ad5d2ba3d3b6f1610722234b7b442", &(0x7f0000000400)=0x8001})
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/eps\x00', 0x280, 0x0)
pread64$auto(r1, 0x0, 0x5, 0x38)
close_range$auto(r0, r1, 0x5)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=<r2=>0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="e00013"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
socket(0xa, 0x6, 0x0)
setsockopt$auto(0x3, 0x0, 0x2a, 0x0, 0x28)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3)
sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf98b01278fc1456a}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES16=r5, @ANYBLOB="200026bd7000ffdbdf253e000000040034010800ef007da61654c200d700222a395e31aaab06f936cd8c0548b015f180bc46bb220b803b36ea7655db568289e6fb05980a412af30ef7f8616e9813242686bb54125ea55dfb077b373d862d4131a4ce6285fc17dfd179c35856d8145e996ba0803e55f93657b061238f6bfb9ef74dc781887f06a842d31042da66a7f958f2af2a999564aa8db3dd04526c787cbe29334877aa66ecb1793d40b196ae78fe2eb51c8952210044c3e336f2cbffec953499f429364b804273e13524ac00000c004580060089005b000000060095000300"/242], 0xf8}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000000)
getsockopt$auto_SO_TIMESTAMP_NEW(r4, 0x0, 0x3f, &(0x7f0000000200)='nl80211\x00', &(0x7f0000000240)=0x7)
r6 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0)
pread64$auto(r6, &(0x7f0000000100)='\xb9+.\x00', 0x6, 0x8000)
socket(0x22, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a)
ioctl$auto_CEC_RECEIVE(r4, 0xc0386106, 0x0)

47.892074736s ago: executing program 8 (id=4979):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, 0x0, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x20000000)
mincore$auto(0x1002, 0x4000000108001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, 0x0, 0x6b)
recvfrom$auto(r1, 0x0, 0x101, 0x100, 0x0, 0xfffffffffffffffd)
unshare$auto(0x40000080)
socket(0xa, 0x3, 0x3a)
socket(0xa, 0x2, 0x3a)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2140, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567)

47.251108743s ago: executing program 8 (id=4984):
mmap$auto(0x0, 0x4, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)

44.152671248s ago: executing program 8 (id=4993):
mmap$auto(0x0, 0x4, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)

43.376616774s ago: executing program 8 (id=4987):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
sysfs$auto(0x6, 0xa, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0x4)
bpf$auto(0x7, &(0x7f0000000580)=@prog_bind_map={0xffffffffffffffff, <r3=>r0, 0x5}, 0x6f3)
socket(0x25, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x6)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYBLOB="e650bb69d29e52f02877a5daac79e4284c49d9072c458edca9b9d6c80b065427142e55bcaff10188146cd417bae80fb90680e6952dc0aeedaeaa8f0ac2ea555cccaa13b7d22cdd53", @ANYBLOB="01007209fa60fddbdf2500000000000014593b3fd7"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
socket(0x2, 0x80002, 0x73)

43.065400314s ago: executing program 41 (id=4952):
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
socket(0x28, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0)
ioctl$auto(r1, 0xc074510c, 0x3)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00')
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080))
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xffffffffffff7fff, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x400000006, 0x3, 0x300000000000000, 0x9, 0x5, 0x6d3c, 0x5, 0x80000000002]}, 0x0)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x805)
open$auto(&(0x7f0000000200)='./file0\x00', 0xffffdff8, 0xff90)
sendmsg$auto_HWSIM_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
setsockopt$auto(r0, 0x405, 0x402030, 0x0, 0x8d)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d7b519a855da7ac6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc000cd84061c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1", 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_DUMP_SEID(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0xc1}, 0xc010)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)

42.633369256s ago: executing program 8 (id=4989):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x1, 0x5, 0x3, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0x0, [0x1b16, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800110009000000060007000080000008000200", @ANYBLOB="34aedb411d17ca4456c40b05833acc4806e60e4ff5623c5eb2275a6085f8151f163f819ef1f7c8373ee95590995581736bfcbc5a6240ab9a51b09329a190d7b677137d6160e4cb2a6a97b932bbff526d23f126e26c8d0935a0c4c9b73cc9668be1acbe0aa1db97307142f1a37284d5f79e79bdc6906c1d5fc8cdb4dce13dd0a3fef3c2740ee7df91d02be2455d47a76c90b6a1975e78fa1b37cd3f5cda55fac0789f28bb7ce8d633c2e25523d1de9125b1c3bccbb24c9da6ef60b5f16112ce4962a62aea2e36f03563f8cbbdd62667876e0212f7b3248c19d2f212ffa2435d49a132dac98ababba6a9df03cc", @ANYBLOB="0a00050000000000000000020a0001000180c200000200000a000500ffffffffffff00000800040010"], 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
memfd_create$auto(0x0, 0x16)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event1\x00', 0xc80, 0x0)
read$auto(0x3, 0x0, 0x80)
r0 = socket(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x80044944, 0x0)
openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0)
chdir$auto(&(0x7f0000000280)='}[,&*}\x00')
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
clock_getres$auto(0x6, 0x0)
mknod$auto(0x0, 0x1081, 0x3)
mlockall$auto(0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
modify_ldt$auto(0x1, 0x0, 0x10)
modify_ldt$auto(0x807ff0000000000, 0x0, 0x40100000000aa)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), r2)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper\x00', 0x20681, 0x0)
r4 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/features/extended_error\x00', 0x46a2d46ce71336da, 0x0)
io_cancel$auto(0x8000000000000000, &(0x7f0000000080)={0x7, 0x0, 0xfffff001, 0x100, 0x7f, r4, 0x0, 0x7, 0x3, 0x0, 0x6, r3}, &(0x7f0000000100)={0x7ff, 0x40, 0x0, 0x8})

42.117577089s ago: executing program 8 (id=4994):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x9, 0x3, 0x4, 0x2, 0x9, 0x5, 0xf, 0x7, 0xb2, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x1, 0x0, 0x76, 0x0, 0x0, [0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800]}, 0x100000003, 0x81)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setitimer$auto(0x4, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567)

26.86213729s ago: executing program 42 (id=4994):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x9, 0x3, 0x4, 0x2, 0x9, 0x5, 0xf, 0x7, 0xb2, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x1, 0x0, 0x76, 0x0, 0x0, [0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800]}, 0x100000003, 0x81)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setitimer$auto(0x4, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567)

7.241442029s ago: executing program 2 (id=5123):
close_range$auto(0x2, 0x8, 0x0)
pidfd_open$auto(0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r0 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r0, 0x0)
ioctl$auto(0x3, 0x40081271, 0x38)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000005c0)={0x18, r2, 0x601, 0x70bd28, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_KEY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffff70001, 0x1)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
r3 = socket(0xa, 0x2, 0x73)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8})
sendto$auto(r3, 0x0, 0x402, 0x0, 0x0, 0x1c)
r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x40080, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0))
ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0)
read$auto(r4, 0x0, 0x40100000001)
fstat$auto(0x3, &(0x7f0000000140)={0xf, 0x1, 0x2, 0x6, 0xffff, 0x7, 0x0, 0x3, 0xf7, 0xb, 0x3, 0x5, 0xd800000000000000, 0xa, 0x3ff, 0x6, 0x81})
r5 = socket(0x2, 0x5, 0x0)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000000), r5)

7.21865726s ago: executing program 5 (id=5124):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x20000000)
mincore$auto(0x1002, 0x4000000108001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, 0x0, 0x6b)
recvfrom$auto(r1, 0x0, 0x101, 0x100, 0x0, 0xfffffffffffffffd)
unshare$auto(0x40000080)
socket(0xa, 0x3, 0x3a)
socket(0xa, 0x2, 0x3a)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2140, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567)

6.043453222s ago: executing program 1 (id=5128):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x0, 0x0)
read$auto_aoe_fops_aoechr(r0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket(0x18, 0xa, 0x1)

5.296977716s ago: executing program 2 (id=5129):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/nr_hugepages\x00', 0xfe341, 0x0)
acct$auto(0x0)
acct$auto(&(0x7f0000000040)='./cgroup.cpu/hugetlb.1GB.rsvd.failcnt\x00')
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
ioctl$auto_SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, &(0x7f0000000000)="10b1ab0c01e2eab37703c87b05de28e861e2d04b4579a46225")
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r1, 0x0, 0x80)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop6\x00', 0x480, 0x0)
fdatasync$auto(r2)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x8841}, 0x40000)
read$auto(r0, 0x0, 0x10001)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup.cpu/hugetlb.1GB.rsvd.failcnt\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0)
ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r4, 0xc008aec1, &(0x7f0000000100)={0x7, 0x0, [{0x1ff, 0x3, 0x7, 0x0, 0x81, 0x3a42, 0xe805}, {0x5, 0x4, 0x6, 0x80, 0x75d6afa1, 0x1000, 0x6}, {0xffff, 0xd8a6, 0x4, 0x5, 0x80, 0xe2, 0x1}]})
write$auto(0x3, 0x0, 0xfdef)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
rt_sigtimedwait$auto(&(0x7f0000000000)={0x1}, 0x0, &(0x7f00000000c0)={0x0, 0x6}, 0x8)
socket(0x2, 0x5, 0x0)
r5 = prctl$auto_PR_GET_THP_DISABLE(0x2a, 0x100000001, 0x0, 0x5, 0x3)
ioctl$auto_PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x59)
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)

5.296304544s ago: executing program 4 (id=5130):
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, [0xffffffffffffffff, 0x0, 0x0, 0xff, 0x4, 0x6, 0xfffffffffffffffd, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x947, 0x3, 0x1, 0x4, 0x7, 0x16128f2c, 0x5, 0x200000000000, 0x0, 0xffffffffefffffff, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x400000000005b8, 0xc, 0x4000000000, 0x8, 0x4, 0x6, 0x6, 0x890, 0x800000000000a, 0x3, 0x1000, 0xa38, 0x0, 0x4, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x8, 0x0, 0x100000]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x26, 0x80805, 0x0)
ioctl$auto(0x3, 0xff0a, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(r1, 0x8, 0x0)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), r0)
r2 = socket(0x11, 0x80003, 0x307)
setsockopt$auto(r2, 0x107, 0x5, 0x0, 0x24)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb95bed6c1ff9ee32}, 0x26004011)
socket(0xa, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r4=>r3, 0x7, 0x6}, 0x6, 0x100000)
r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r3)
close_range$auto(0x2, 0x8, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB="08000100fbffffff08000200", @ANYRESDEC=r6, @ANYBLOB="ff070200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000300040000000800030006000000"], 0x54}, 0x1, 0x0, 0x0, 0x20044005}, 0x200000d4)
ioctl$auto(0x3, 0x8916, 0x91)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)

5.295744649s ago: executing program 5 (id=5138):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, 0x0, 0x80000000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
r0 = socket(0x10, 0x1, 0x1)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
socket(0x2b, 0x1, 0x1)
recvmmsg$auto(r1, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x80000001}, 0x1}, 0x3, 0x6, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x109402, 0x0)
read$auto(0x3, 0x0, 0x7d)
mmap$auto(0x2, 0x400009, 0x40000000080000df, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0xb5)
fcntl$auto(0x3, 0x4, 0xa553)
recvmsg$auto(0xffffffffffffffff, 0x0, 0xffffffff)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)

5.032748131s ago: executing program 1 (id=5132):
mmap$auto(0x4, 0x400008, 0xdf, 0x9b71, 0x2, 0x8000)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6a)
mmap$auto(0xfffffffb, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x7ffb)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
socket(0x10, 0x3, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7008fefbdf250a400000100003800c0180000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x0, 0x0)
write$auto(r2, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x27, 0xd, 0x1, 0x948b, 0x3, 0x4, 0x1, 0x3, 0x11000000, 0x400000000000000, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffd]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$auto(r3, 0x0, 0x8)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ftruncate$auto(0x3, 0x700)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

4.98596542s ago: executing program 2 (id=5133):
set_mempolicy$auto(0x6, 0x0, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00'})
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r2, 0xa26, 0x4)
socketpair$auto(0x1, 0x2, 0x1, 0x0)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=r1, 0x4004, @old_map_fd}, 0xa3)
close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x5)
socket(0x2, 0x80000, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
mmap$auto(0x2, 0x2020009, 0x3, 0x400000012, 0xfffffffffffffffa, 0x4000008000)
shmctl$auto(0x3, 0x0, &(0x7f0000000280)={{0x800, <r3=>0xee00, 0xee01, 0x5, 0x992, 0x3, 0x8}, 0x6, 0x9, 0x4, 0xcfa, @raw=0x3, @raw=0xfffffff8, 0x1ac, 0x0, &(0x7f00000000c0)="55ada97010a65c0f79bcddceeefdaba644514cb01c8ae8939614016aae0fb5a02982fcac8b1b21f0a6fdbbf256ad6a85607df35874c354a4905c7dda00a397551f8e3ddecbbd17486f085e36085e41d4d5b63a7f330e8b03d7a4399f6d9957e3077ce053db2b406f1b9ee66ad9f80e3640ad97a14a26128ee1add657ff2f6e99457fba78b143d958837ffaea8bb84715918e4de097a7253abf8e137c487e34aba7ce04c961f552c21a116a5b7d0507bd3ab116368c8a2b00797a93e8338b9ad5db8c000d4b5c0b04632912ca6dc5a54c13f7773c2f44f94f5d9beb44c7ed00", &(0x7f00000001c0)="a697838cea5753a0f3fe43b5796db0268a46dc8e41412a70c80a9632cafacd18e0038983df017097d73ddb98cc6e5716c3abf54685cbcfb737fd26d031be48b2d52da231cd699d86757137d2d6c33a6e5a99777539dadd42a60375e27d1ae09d7eee76d534dbc83d04eeb38738fbfebb204c282e24a447d93f3b9b960b62719f2373a13f024277ce2d43505c2f13a20d9337d43f47f8faebf5b2ade7211980dec020d9d7"})
setpriority$auto(0x10000, r3, 0x3a)
socket(0x11, 0x2, 0x88)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008000)
io_uring_setup$auto(0x7, &(0x7f0000000000)={0x10000, 0x80, 0x7, 0x8, 0x1fd, 0x7, 0xffffffffffffffff, [0x7fffffff, 0x8, 0x6], {0x5, 0x800000c, 0x200, 0xffffffff, 0x81, 0x1ff, 0x7, 0x8, 0x200}, {0x11363ff, 0xffffffff, 0x1800000, 0x4, 0x8, 0x4, 0x3b72, 0x80}})
write$auto(0x3, 0x0, 0x3f00)

4.81618183s ago: executing program 4 (id=5134):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_setup$auto(0x7ffe, 0x0)
io_setup$auto(0x4e, &(0x7f0000000280)=0x642)
clone$auto(0xb2, 0xffff, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x23, 0x80805, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0x1, 0x5349, 0xfffffffffffdffff, 0xdfffffffffffffe8, 0x2, 0xfffffffffffffffd, 0x10000005e5a296f, 0x7ff, 0x3, 0x3, 0x200, 0x40, 0x9]}, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0)
listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000240), 0x448603, 0x0)
r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0)
read$auto_tomoyo_operations_securityfs_if(r5, &(0x7f00000001c0)=""/14, 0xe)
ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5)
ioctl$auto(r4, 0x4008af13, r3)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0)
read$auto(r6, &(0x7f0000000000)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2f6)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000280), 0x1)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000c2", @ANYRES16=r1, @ANYBLOB="010b27bd7000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080)
setsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, &(0x7f0000000200)='$\x00', 0x4)
mmap$auto(0x0, 0x400008, 0x400000000000df, 0x19, 0x2, 0x8000)

4.761029419s ago: executing program 1 (id=5135):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
sysfs$auto(0x6, 0xa, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0x4)
bpf$auto(0x7, &(0x7f0000000580)=@prog_bind_map={0xffffffffffffffff, <r3=>r0, 0x5}, 0x6f3)
socket(0x25, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x6)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYBLOB="e650bb69d29e52f02877a5daac79e4284c49d9072c458edca9b9d6c80b065427142e55bcaff10188146cd417bae80fb90680e6952dc0aeedaeaa8f0ac2ea555cccaa13b7d22cdd53", @ANYBLOB="01007209fa60fddbdf2500000000000014593b3fd7"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
socket(0x2, 0x80002, 0x73)

3.378626864s ago: executing program 1 (id=5136):
mmap$auto(0x0, 0x4, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/supported_sectorsizes\x00', 0x100, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/start_ro\x00', 0x80302, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)

3.372152508s ago: executing program 5 (id=5137):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x200080, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r3 = prctl$auto_PR_SET_UNALIGN(0x6, 0x8000000000000001, 0xffffffffffffffff, 0x8, 0xc)
ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000440)="00f6ffdb177e38225675f12b34f86be2f21a13f9e932b1a642c9cff414399634a0aa5f491b96c354bb6d773482fb28af46304d338eb3bf3a990dcb43377d3afa6ff233b9a33b6c87f33296eba1ec605ab2632e13eb452002d9140292a359de12cce50d99f4db711a39361772a7e2e7da542a9f82fe607d656f057c67773c5c56448f44c7588b085d7fb0cfb1db0eab52f15e97d7a25b6192e2102150bebb689603ddf5618e47e4f48f8805a9db6a43ace4ef0f01804fd16a")
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x5, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r4 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080), 0x109c41, 0x0)
r5 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r5, 0x0, 0x4, 0x0, &(0x7f0000000140)=0x49)
sendmsg$auto_NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000000c3eaa4a03913420be2d04e48ab7f73ff154358f1a5bba4acf6d46340d2e9913930efef31f34cf1035a090f9dd79b7bc622b33df8ca30ac82c854de70401a84e73c8c95fbd2d4cf4b5133e2a6b76c9fda774da994e6f22d", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf252e0000000400e38026000d01e9d4451c8db60a13eacc030e9ae44b155d73bd5b322be0ea1752a9e21a14b43cad6c000004003b011000b000048c71e8c6b2b398dc2ac3ba05008900000000000600fc001c0400000600f700590300000500180101000000"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
sendmsg$auto_NL80211_CMD_GET_MPP(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB='4\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="14042dbd7000fedbdf256b0000000500d300020000000400af0072040e003919ef68f24e5cbb4801ea3a477881af2512fd963f3e5d05c87d66127ad2f85a685b150cd6a015be53128478adff85924e5933b7c9bada9846a3c7564df9514d2842d28dfa7af916f4a0e3272e5295bd125b07d753b7a46649b6c4d49bcd3e2f009f4d3e2590b79dd8ba756517d6634b7164755f1d9e367697976bf7435be1d52d2627aa21dffee47ec62a23026d02e12975d70f456081beb7de72a7c5909ce0129714bb980b4362b89e893b5f0a255f9c3d0e727fe61491e0c4bae9f98be6e1a6ae0481bdcf5472ef6ab5d0377e7c6bf8a7024d467bb0956605108538ffb29ccf767f35e6ed53724fabb8735a9e2c1da0606bfb6d5a750e57ea2ed0d1919c0173555778560b94ac593bf04f0f2cc1bceab65dfef47d1468855923552db76babaa9dcb44d18045ea23ab4a9043f20ddab852195a92fdf8e4c68490ff3f0e1e7219b64c4f3e80494898941e887a40ff92b99ada9a335c31359d31e0cf0b1ca99f287f37c971f052a8db9ed789849d7a960eb5d0f60adff13231c8bf71ead87fef820f595c32df24f03ad952dd09fdd9409c38a648829e8767e6ce325224c9eb8937a5ab7c6ada1a2e7645e9121dbeb379bafc390443373d96285b4be4ec30c70bc0036a9f713d854f8e10601fcdf641b3a70a1170e2cc0698430bfee8cfc0b22363b38b3b049a39e64ff2e3aee87bd7f12a69fc5aa36d7ed80fa8775253140d8fe3e150c6c9c1b3ca264f67c1fb8e09ae208222d5c66cebed28e1c378f01d4fbcd6800e4b8715219e169ce64b8530cdffe7d75dbf7c30d3033353502de1cd906cf3a1411c730c0161ddfcee512a4afe6c86830eda7e27484ca03000c04c5ad839aba803cde990187937876c28478cccceb225157608cff61b2541b1515c7df8e3f224c1a7971f9d4545b6406d71706ace49b6c623160d786a93012f9fd65b4a02826fc5a1c27cb47b08caf560a5ba87fde43f7cfe340f4063e53b1984df5ceeb419083a5e95fad515509dc063bb507c38703663873da7b31ce7fa08a47bafcc6ed9ceb5324fe1b1855f6e2f0156d2a2db993bc3d19b8659f0c4c199a93e855bea893e259465e6d0377799e3d65c7974aaccf253d0addd52938fe139614de26fb05d2504dfa51bdfdb57ddb1fbf66d894864d8ce55c738aa87a427211f4b38cd9c75660d44acd0a323aeecc6abcc0deb31cd5e9daf76e81a594b0cccc0e2c74b72c2ddfc64e613d4a287908010ed0e16c3ef09a6f84bfdf89ed35bdd99e0b238776c7e69e7f74db91ac670d2f4436a57b0350c7f54a4900463c9d5b6807b8fe28484950504a3605510feb289aae0d6ed039d5d09f9fef4b252ade999007d4e59b07d1b08edef86b81b02bcc49d225af2fc69eaff453d862c07de100fab3b3a40ff48ca9295676198eef539d811a155ef69a7801738d0d648985391c154ca415bd98044b82eacb5b5d035aed4b768f2ff16e7c24368cca27cf892c37dd006238534ad3691c40e322de1a4f00106588e9516bb6e95e6acacb422e656c681bba891ecfcf013d3ef011efa7988d50a9a2229f70672c0b0b12ba8b2cb253e1ac0da9dce121e25667029b341a9b2cdc84eec0000c700be00d1d200fc834a09712d3dcbec44fd542e0d6c9c0f3abaa763caadb11f4eca3de617cb51ec6d169db3c1d4d64a517728f260a6f1e160b827e0ca79fc69079370832cecadf540ff72d604b80f99aca12bf289166de9da1911e18d491d0bd5929211bde6a1dd5db30e211a1b3ee5212b919664dbcc71bd1f7d811ba60989b50eeea9a2dfcb2cef25d9af6cec5772d86c21d9b48552516249f2660e523e4018fd43ec3dec199a0b4e33b41356a6181e2220d862a1b8cc9653263820825cf56b10bece6cc14f00cd02b9800c00528008007800", @ANYRES32=r4, @ANYBLOB="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"], 0x834}, 0x1, 0x0, 0x0, 0x441c4}, 0x40)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x200448c0)
bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xf9c, 0x468, 0x9, 0x3, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e)
capget$auto(0x0, 0xfffffffffffffffe)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
fstat$auto(r0, 0x0)
setresgid$auto(0x81, 0x800000a0, 0x8)
socket(0x2, 0x2, 0x1)

3.143169447s ago: executing program 4 (id=5139):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x20000000)
mincore$auto(0x1002, 0x4000000108001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, 0x0, 0x6b)
recvfrom$auto(r1, 0x0, 0x101, 0x100, 0x0, 0xfffffffffffffffd)
unshare$auto(0x40000080)
socket(0xa, 0x3, 0x3a)
socket(0xa, 0x2, 0x3a)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2140, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567)

2.996710574s ago: executing program 1 (id=5140):
io_uring_setup$auto(0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0xfd72)
r0 = getsockopt$auto(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0)
socket(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x6, 0x411, 0x9}, 0x8)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r2, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@typed={0x0, 0xb4, 0x0, 0x0, @binary="6cc3548cbf9c83c131f74b643d9d886de7a8619d6859e1ecfeaa5c0ae8da6e108243c3e343a0e5586cf826283bd922d6d19322975a510e98c3fdb6479f048caefe21f373f0b8af05ed12beb0c19099d48d13e929746bc596ee680b0d9723a70be2a26edf3e66f8ed8585d19ed6c7980d601f145e16bc99c4f188dd2bcf3e5bdd891b47f5e7a53c5de84f7ecc4fd6170a09561fade7cea6682465b432e282786373cccda7a5fdc90048d9d12e2c07fd463e73ea7e4a5aa5974d42842220c521f55aba43e2a13a6a11133aaf0db12d9865bb88686a759cf92a3f463530d1384961018840a63c9bb85fdcdea6cfec1b277254a945b2af6baf46f980320ba7f8965b3b1e95792415b03e3acc19e8a2ac90a0e765b7519b67af234c1bc293ed3101ffa4b031c0dabcf7e75240ce0078209725c7e5b7974f11b4dad5579719bc3846b741691d37729e726309ac4d6aa4c1c4cf24a8d417d0f668e15abaafe46a1a3b39b566bde7cdd9b94483a661178fc2b5fcc4f3f46584c6e6e36fec4ad41b6e40a5bc27f7eb80189cfbe5f976e5aa43a75446897f2a941d13e990c0b8e17eff50bfa760640319c9867041175bf34cbf52eec8af7a047984c1a779e5eae0604ee2b98ed5996f032787eb82ff8a07d5f0d5f7b55ba09689af15dbd7e8bb9678843c223966ffc688341b87f105bdf49b25c219913ad1745fd2ca3abc431feca14bde454336f85fda2ce64c54d95b0453e76f2b100c101c6a14b33debfad94fd67ca60bb9cdad59898d50d85be95659d21e3a1dbd91dc9a1f2af3d55c89106a4a7de9d099d0a5d3134afac99b2ed092f9fa27c088dd3ecddad59c6a37811bc300407e3192783593b454b79ad8a61eed82f28723e216032640aec6b8efe0b14af2fdd2383f87d63805691f52db951486ad3e441238debf513c8fb05ff89b4115e937f1a57539fd70e2432301fb4f707a7217d4ddd3908ad96edf5f74d84c24f217f3cb3591368fb96a7271472c4a83c0a8f85c43d9a333af2b9dec7873602a5a4531cd5e13fd51873cc60dfe2b55b40a6d908f45795914e6952e9d3feda638a077148836e55fe2767228d312148e724cf49e911db92eb543ba7fc3338fd9fc7cca74ddcae654eeb156d425c7779b088b7c6fe26294213722f683b88f1f911a28911c7f3ca5fd381936d78acfb30258fc8672f03e79df83543ec391f449ce3a778b8f5563de1d5662e28b14d7375069be6f90e1669749cad0fa637703b69a3a0c1e83f22cd313d7dee2379619f9bee02a6a8923991df71e264aba44f5a972aed1bef4f5867c551531f0aff3ba0c4506e6d6ae06154e4950cd664b257ebcab34da95ae518943907757b22723e31b3a63b4b5cdf08f28869b137f5155e033761f9f2fe99e186bd08eb3c7c898d172ea45d49ded8513e79327e5a54faf9dbee437330abd5036a6de5c2eaf1b9fde57489a845fc90250e560635cfa33cf4cf7fe6ed29bd75820f2529db96a416a45321ae0d26c9f6c932686eb78616cb0fcaf33318010b8911cc993e8c056110baa95dc85b54d54351077767297ec00114613d3eff94865b83375723f5d802510e5cda5d38d5ffbbb666fef3ac17696c900d2109f403a169c9a3344a3535e4b3cd3ed0cf40d2a59a0afbdb0aef608d50df2a209292ba7545abc6ac3ca32714483e0237905a7cbe6b47d63ba23f0068d1a2a3b2809062755e0988e84dd04211ee5fd24da99b6cd1cd133a047b7b80679e013c3cc8456b187052f17ffbea17d9ea4307648fdccdd73fbd6f62a22cb437828916cb3ff2f0b8e92fa4de4040a29c851abec2f5fa94adf9a23c730b7cb0d0f90772a7c3bb1772bff93867419cece6c7bfb967bbf16caf71b31c32502c95657b9dea65d7426033afe7f90770e273e6e6bdc52643e9f11a0fe0b76dd7a7eeff451f850cd7cfdcad58a1a705aece4c0bf1326d4851fe398d98271612ab5f9dd44589fbfca219d023cc5a1bb5ea191959c5d409bda9c1cb01d7830bc6b6699d717da5b6407348629aa9646adf5c9e5cd92a5c1f5fb06af9e9893d39bed1809f50238cdae5ef190362149939bba1c057c1b64517ba5e6789608bb77e25855d86899229b985fe6b83ac048a447772599ef9c92d9d1a4f6eee0d52123273625095bc1934ea32419bbc0d3fa772b0c5b137a363234d77299d6dd12a4e1449db26b554e470d56200af4579c69deb43f8869f330f2abb18e30f07f68ba271921879820234daf72b61beeff690f860251d8ca91ef282bc8eb321113884de613b85cb377ed0b2ac18997485c61d7a4e9d30b2a9a8ed2a841eb51dcc7cc256f7ad4b6e718900b0b244357bbbbf0f974c3ffe3203a488a8bb99f9c8d3c6fcfec28a6d602fe46980d74cd5bacd5423a41c4a42bbdabe3c16f38eabd82da5ebb0ebc1f8db5e5dfd9b894e4f44e1456cb0846da4b982e05e8067281ec508bf187b882d67b939b451b37621be6218e33a2efbc85acb323a46d10a88c6c1112da6f0654f66d2d6ffc8f34e2facf9e423a918ce6f168974edea1b7c8a8cce4a175515e314ffd62a094616d5ce078c02bbdaa326521a2d4893a4c6ce8efd7d71128cf09256bf78ee3d344b67736e5e2788498d226d8c20537c454c3f77082f962fa3f06b1251d1c42ba8195dfc81a3da0a6839acb17c2867cc899f85a2033e228f7849ed5a09e18392a05fd257c9cc807c65face494a28453938ba286e45921b2d622bc99c6c93978f42630e82ec6a0c73bee5f6336ce15706923eb72b26c6d4cd34db01e3e231ab1fcdb123db4e7875765792b68a9044e74f905ae3db4c88d2896c72d32fcd428dd87a5a7d1931eee8c5193421724671130f986b712fe37963f07635e5b231f84cbfe00d118dc1295bba8211dfc1edb3bc015be842fe9a96e36d50d2d79fefb5e9986ab5015b9390205eb08ed184e54797e05e5dd1243590fc9e7358d8bbbf90b6eacd6e4cbcfa7119759cd17814a04e72b75ac155a6e24c5b799a7bf084ce11ec6ca12f8e8102b43cc5c726b120d38975274ee5807799ef8504487c7387d8218d5c3d6ef1964148a7f92d638de5d0a91492cd6b78c556d1c31c2ee79cd6c2cc3a8a142fe58a2d3598bc15d240e72905a29a020ef1b1a40d92915210117bfea45037c94e4740afbc9ce247836832a69bda984a51cfd8e91af547dd5f3ff1e901cde80042af1946f837e210a8b2c151c0e7067125e476e215a5d5c3dbbe9ed266558c806fa846eab0dd97948280386e1ca678c6d38bbd65fecf376b7dd3d8ad3c11a9acd52682437bec401de5408c5972963818d1ed10109c4f48da48bc394e2f0be9a3d48f8f864e8426bd7f213376e1cb0dbbd7e7037e0b9ec0760220def7874e4bbaa8f102a0c67ff49258eb171e32ffc6882daa1b4f5cdb91ebaa4ba0f6fd92cb4e24b39803acab5fb77ede9db520c53212fbfdff03c25b34f9cfca3d6eced658de24eed7237e5a0c994155190716387fd653a6edb9b3554cac70e492b8ed215aa3500b83658e080acb0ec19da46660e9c75ee04a7ec24c153c24ed72143a3e8ae82ca999a579976b329b988a2a3e4b06a228b0e4bb6225aa0dea451f54f95039797fb8c0d0ee9954cbca0f2b80397cf7bb379adf0dbf8e12729676726a192c7439eaaeda35db6516da11f8741d848ba20480b0730b260548b2e1050dced74b008285fb1eff0961587d0bbb02aa612e944514f46308fa4efa6ca321632bc3a1ab0acd55b82cd9c620d255c40e92a3989a23fda78ba98423d0d779f8caccf7cb6a8b89793dab7fbb9c20bd3f30f88eedf1292f48f929003b1eb8802a8e2e6c0b82906fb8e8702d47f81661d47a8bd186212a33dbc1237ef7f48889d6133ae382e99f54d4b9a1f6892c735da1b82c3e14703033d79562ea9250774e96a9bf21b29e58c8e5219326cb6978ca1ace1b38ccfbf660e2006b6885b642df725b4654c85f3687b2de1a541e3b8c4ed16e15079352387b316cde737feb74ed460dcfe0614635f2883a8b9aa1c595ead92d0e44a176d5f9c397e52b2332761a13e175eb6c8be4a3aa077b430815e165b266deb5edbc3676fcdd34a4ef25243baa9d690fedbf03fd5bdf13d691d37cfceb8f7fc23c688e868abba6fc11219eb62e614aa45d357f5a8feb0785c431b617f6424d632fe44c68a999d9eab885d4ece68d5ff47881c5a8aedf47ad36f89de9b3a17ff969c75a776326f41eedbe0a3740cbf1ca2d30ca2b468c8793738a4d6390e4562aba0b07496014068d8864d6bf0e98b5bf096294f3cbeb421e4a49cf55ec4bda7453d59a46b7e8f3ee6bb52932f7798ce191ab20d548057ec5751f0797e889718ed49eb2ed756c817f90cabc60d19a5b465246b233fe96fad67e4afa467aea6430ca2895263d070cd7afddfa735cfd573cdf99938f9369018c8655de0e943e1fc0f20eb49598656990fd0600268517602eff673bef47ddcbce09aaef33672ac6e5f7a8f69ecc699ea1f90479f36f55a8ac4666533d60b0971c12eb43972a4be5d64651c62fcd9b110cce8722bb15c5298863b26a378798933b4335818fef90fe8e98cd96ca1bb7d98697939bbf4cef6511947484b03f9000ba4fc013ce45d36f9a64513e61b6f000ab645af4463e5ddc2195459480771b83b219a91215eff72793a02281edecf4eb8d3cf2c9f9e40ab7d606f435432f38063be67216fdbd835b1312bbeefca66b8476b9fd98edbb136cf47863f3879727530aac14186e290dc87fb6927a99d961718d36f59980e03a1c26cf12e17a57c02dc8312898053168361438d60a858ffec18732d9254069da92e82038966773b2c987dc7954e1949a1ef37127d26d5c16414bb97e982531370b382c3d9b7ed957f430678eef43107d9a5a131c6026c555ebba5e88f56778a02752523b05703738de1922bffcd521f48b1744aa396714bc3d826067612c2d5890ec3dacbaf2a93f9e6b5a1480773ebca1a18a230b1f6bd69c11ebde76323f9077bccfd3abbe5cbe75d4ed2a72fa987bc10c05d1ae3e1a50f64c47ee9608934ffba02565db30cd24a22275caec8dab63f421ad617ba87a2346f3f9e0b957c9bf5d8843dce735892dff07f0f76139c2114e270f7fbd63ab9da4eb6f72c32706eebcc1d25b9646751b7fcbc7064b75ccbabe700c6959a9534bbe897d5a6b9f8ece59c7cf59ab429b0eb436964a611dc9db696776d3161bd405226a4288ea267befe0713a336bd10446fcbf96a3b5131fa567c550b153d875d62fa40e52023c3067aa79e3b69bf38fc6d272102c9789959861296116d09dd590c9db2f32e671ec82137a8e70998134e08a473d4faad846e43e8885244b775c37d1877fc417ffcce758f807ed506bd002f2af0d3f75a07e2566ce1e960369496dcb446c1fd598cfc20424ce701935d6bd8c3971d97e75a991ce946dcc3fe6e896bb39b6117a296d008598962211ab487add86b40dbf0f2b2949b1d9724e9e2589d96352f54daf97ae32d36c9400347f3f5fbe948188b31e2e826cf45439734b6098bcbe91003f808490b56441ac88d16977a50b84581912d9d16c83ae5651ae1f757e343f282c3136cfd1db7a5aad33370fce7e6af71334345fa703b4cd453285c433b52024a54d3bdc36e8422baba8a39e60dca66743a4668be34fee3c1bf2515e155b457cf16438708151f77e44409f28964474147b1c0b7594a260ede597762c33b5c574dc0f521c5ac610a314df506849165f17386d67317c04780425b1cbcd4137f296fe40a577b8f914063aa22786fe0458f5078"}]}]}, 0x24}}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x0)
socket(0x2, 0x80002, 0x73)
ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(r0, 0x40789440, &(0x7f0000001340)={0x4, 0x2, 0x9, 0xffffffffffff8001, 0xffffffff, 0x9, 0xffffffffffffffc6, 0x3, 0xc78, "9efc6e677abb9ae8896ced1af8862510114c380baae871b0d146e213a95f5be289a3c3829661923cb5677ced527ed221485a738c8c336344f719ba87b3f4db34"})
socketpair$auto(0x7, 0x5, 0x2, 0x0)
setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80)

2.424764367s ago: executing program 5 (id=5141):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x0, 0x0)
read$auto_aoe_fops_aoechr(r0, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket(0x18, 0xa, 0x1)

2.092870805s ago: executing program 1 (id=5142):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x9, 0x3, 0x4, 0x2, 0x9, 0x5, 0xf, 0x7, 0xb2, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x1, 0x0, 0x76, 0x0, 0x0, [0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800]}, 0x100000003, 0x81)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4001, 0x2, 0x40eb2, 0x401, 0x1)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
r2 = getsockopt$auto_SO_TIMESTAMP_OLD(r1, 0x0, 0x1d, &(0x7f0000000040)='/dev/kvm\x00', &(0x7f00000000c0))
write$auto(r2, &(0x7f0000000140)='$\x00', 0x9)
io_uring_setup$auto(0x1, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0)
r4 = epoll_create$auto(0x3e)
epoll_ctl$auto(r4, 0x1, r3, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
ioctl$auto_XFS_IOC_ERROR_CLEARALL(r4, 0x40085875, &(0x7f0000000180)={r0})
semctl$auto_GETALL(0x9, 0x1, 0xd, 0x1)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x201, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20)
read$auto(0x3, 0x0, 0x400000)
socket(0x11, 0x80003, 0x304)
socket(0x3, 0x4, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setitimer$auto(0x4, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)

2.092002147s ago: executing program 4 (id=5150):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x20000000)
mincore$auto(0x1002, 0x4000000108001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, 0x0, 0x6b)
recvfrom$auto(r1, 0x0, 0x101, 0x100, 0x0, 0xfffffffffffffffd)
unshare$auto(0x40000080)
socket(0xa, 0x3, 0x3a)
socket(0xa, 0x2, 0x3a)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2140, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567)

1.412464393s ago: executing program 2 (id=5143):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x5607, r0)
socket(0x29, 0x80004, 0x0)
ioctl$auto(0x3, 0x89e2, 0x91)

1.087101302s ago: executing program 2 (id=5144):
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, [0xffffffffffffffff, 0x0, 0x0, 0xff, 0x4, 0x6, 0xfffffffffffffffd, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x947, 0x3, 0x1, 0x4, 0x7, 0x16128f2c, 0x5, 0x200000000000, 0x0, 0xffffffffefffffff, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x400000000005b8, 0xc, 0x4000000000, 0x8, 0x4, 0x6, 0x6, 0x890, 0x800000000000a, 0x3, 0x1000, 0xa38, 0x0, 0x4, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x8, 0x0, 0x100000]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x26, 0x80805, 0x0)
ioctl$auto(0x3, 0xff0a, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(r1, 0x8, 0x0)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), r0)
r2 = socket(0x11, 0x80003, 0x307)
setsockopt$auto(r2, 0x107, 0x5, 0x0, 0x24)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb95bed6c1ff9ee32}, 0x26004011)
socket(0xa, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r4=>r3, 0x7, 0x6}, 0x6, 0x100000)
r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r3)
close_range$auto(0x2, 0x8, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB="08000100fbffffff08000200", @ANYRESDEC=r6, @ANYBLOB="ff070200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000300040000000800030006000000"], 0x54}, 0x1, 0x0, 0x0, 0x20044005}, 0x200000d4)
ioctl$auto(0x3, 0x8916, 0x91)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)

1.086538271s ago: executing program 4 (id=5145):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x0, 0x5, 0xa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x200080, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x5, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r3 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080), 0x109c41, 0x0)
r4 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r4, 0x0, 0x4, 0x0, &(0x7f0000000140)=0x49)
sendmsg$auto_NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000000c3eaa4a03913420be2d04e48ab7f73ff154358f1a5bba4acf6d46340d2e9913930efef31f34cf1035a090f9dd79b7bc622b33df8ca30ac82c854de70401a84e73c8c95fbd2d4cf4b5133e2a6b76c9fda774da994e6f22d", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf252e0000000400e38026000d01e9d4451c8db60a13eacc030e9ae44b155d73bd5b322be0ea1752a9e21a14b43cad6c000004003b011000b000048c71e8c6b2b398dc2ac3ba05008900000000000600fc001c0400000600f700590300000500180101000000"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
sendmsg$auto_NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB='4\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="13311390f50db2362c0626968163204caefc9a9334846ac165efd244c3bd4222e2141baabe9cd391f9c558deb0ad58da3546ffdeb6852fc512531c67b8f341365cd9f29b984a27865b0eeab6baeeffd934c169c1ad06a4a9ee279fda7bff3ded2c7809a816ecbf4603f75697008e3486c00f60e51a7cffa2539976f081b44145b7b3f194c6c189893f79895f7600674d2fa7528b72cb74f1a07f3627683e9647749ff810fe2a8d1fba13920af7f0cade79cfb9855aeff5d0e2661fcd3afc4a6fb56702bc5c21eb3272f5081b57d0ec560e06530f021d675e5f8fa896dda6ff62736081a4bffda6263004af454db4be36d2a68ea4effca872bb0ff684a5526a225daf37056fe1ed6e650e19279290ca99058f0bf4757a94d2c9127af5e3c97e02be186932a1520bfd0571a4613324e86caa40d5584127df710493d394afa0b601a870a38120d9e5431d86b26cc90b667314c58f5199470cc0155f6db925174e81435f7b18c2ce5597c98dbca8f0bbf4c7f51d82e1a4f9c6c92997fd127f8f313d9db007c0fdf782a7e28d90eefbec1b7d9f45e61054c6259154b0636e7eebe3682762bd1dec1a93e0dc184a9e4e6e546a720d6732208f3e3f7eb7ed50d37295f39c96fbd5ef363b50b2194bded8b9d373d74eee33a81813d365ce65f106714deb743a94b4cb392b0066b65a271a087cea37b3aea64806fc319f6a26632b222a18661111d65cf70d6059ce98b8ef5002b3cd2b5a7ea82476c544ddf0aca82a169652f77481df10490a029f851a0ed442602196bf5485800ec8a19f91a7afbbc8e30ca6d035a664aa07bc095e2c9bcc41e2883f8c0f696f7ffb1ff7682178c67da06ea241787fb96821b1e1b6c8c93d7db1a0995a86d0df8a04d69f8692f113da6951a57ad6f0d747c58f10f423e0cdd35013e95fd6cec74bd4deb615ea6d6c6b62b0db4b43b03ca2402d06660b13b96e5bdc5537cbc778fd805eccae361800000005002f010500000059fc325daf756e47ebaec92a4b3d110c91ac64ba2fc665d15f46f652899c953ef0cc71eaf0acf7402bb034e4a5b52407da2346e9aa38e59d69e2dafe25049204535c723c8d406785489591dd566919633bc4a5ff9a9923fa9eaafb3e10f0e9e71081d7944c0ab8e6623e737858bfb4ab1ca515e83278d21bef1b4cd56098861968be5188a0fe5f1e4b744e3ae79fdb7df5653c3ac13ed7867f3ed0ea7ca41a894cca20c0f3875f78aa359c24475c97f9eae7957e3889873fd0084cfdfa4e05b8c10bc0b184e7fcd70dd1e9168f9e7c81d9"], 0x834}, 0x1, 0x0, 0x0, 0x441c4}, 0x40)
capget$auto(0x0, 0xfffffffffffffffe)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
fstat$auto(r0, 0x0)
setresgid$auto(0x81, 0x800000a0, 0x8)
socket(0x2, 0x2, 0x1)
r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x1, 0xa, 0x6, "a2b8e85fc56865ba529faa000000000000000081000018f4ffffdeffff0000000000c7692a240000008000"}, 0x6, 0x5, 0x7, @raw=0x81, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d3c89bee7005c5affd5ab811fd53443e6cf63a902991b44e48364e8de3f344584996c31f9ae16c6c4f064c38f590125ed26400", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"})

1.086113722s ago: executing program 5 (id=5153):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x3, 0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x20000000)
mincore$auto(0x1002, 0x4000000108001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, 0x0, 0x6b)
recvfrom$auto(r1, 0x0, 0x101, 0x100, 0x0, 0xfffffffffffffffd)
unshare$auto(0x40000080)
socket(0xa, 0x3, 0x3a)
socket(0xa, 0x2, 0x3a)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2140, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567)

445.916209ms ago: executing program 2 (id=5146):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
sysfs$auto(0x6, 0xa, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0x4)
bpf$auto(0x7, &(0x7f0000000580)=@prog_bind_map={0xffffffffffffffff, <r3=>r0, 0x5}, 0x6f3)
socket(0x25, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x6)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYBLOB="e650bb69d29e52f02877a5daac79e4284c49d9072c458edca9b9d6c80b065427142e55bcaff10188146cd417bae80fb90680e6952dc0aeedaeaa8f0ac2ea555cccaa13b7d22cdd53", @ANYBLOB="01007209fa60fddbdf2500000000000014593b3fd7"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
fsopen$auto(0x0, 0x1)
socket(0x2, 0x80002, 0x73)

294.200299ms ago: executing program 5 (id=5147):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioperm$auto(0xfb, 0x5, 0xe)
socket(0x2, 0x3, 0x6)
r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r2 = socket(0x2, 0x3, 0xa)
r3 = getsockopt$auto(r2, 0x0, 0x33, 0x0, 0x0)
r4 = geteuid()
setreuid$auto(r4, 0x0)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/raw\x00', 0x60080, 0x0)
pread64$auto(r5, 0x0, 0x8, 0xffff)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x38, 0x1, 0x4, 0x2, 0x7)
madvise$auto(0x0, 0x200007, 0x19)
select$auto(0x3, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x0, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000002, 0xd, 0x3, 0xfffffffffffffffc, 0x7, 0x1000000006]}, 0x0, 0x0)
syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf)
close_range$auto(0x2, 0x8, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000180))
openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000001c0), 0x58802, 0x0)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
r6 = getsockopt$auto_SO_RCVTIMEO_OLD(r1, 0xfffffff4, 0x14, &(0x7f0000000200)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', &(0x7f0000000340)=0x2)
ioctl$auto(r0, 0x2, r6)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa)
getpid()

0s ago: executing program 4 (id=5148):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x4)
getegid()
socket(0x2, 0x801, 0x100)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyde\x00', 0xa500, 0x0)
ioctl$auto_TIOCCONS2(r1, 0x541d, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
socket(0x10, 0x5, 0x1)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x48600, 0x0)
read$auto(r2, 0x0, 0x200)
shmctl$auto_IPC_RMID(0xa0f5, 0x0, 0x0)
r3 = geteuid()
shmctl$auto_SHM_STAT_ANY(0x8, 0xf, &(0x7f0000000480)={{0xfff, <r4=>0xee01, 0xee00, 0x4, 0x101, 0xa087, 0x20}, 0x7, 0x1, 0x1, 0x8f9, @raw=0x6, @raw=0x3, 0x6, 0x0, &(0x7f0000000100)="58a9c3d5179e89e7856f49a825fa412c52c16e8ac7faf6ecd621e6968042af4821ff77fe1b3a9780a0ec4f862dbeb64f62", &(0x7f0000003540)="1246e5ee41dca9fbfeaaed0ad9d6e54caadabfe6b822d35a3ec7a3b985234f855d101943b1ea4a7985c4de31ec4b112e24e7d81e7161d9a8"})
setresuid$auto(0x0, r3, r4)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x3, 0x0, 0x3)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/ipvlan1/arp_filter\x00', 0x101002, 0x0)
r5 = getpgid(0x0)
process_vm_readv$auto(r5, &(0x7f0000000140)={0x0, 0x20000001003}, 0xa, &(0x7f0000000100)={&(0x7f0000000080)='~', 0x200000000}, 0x3, 0x0)
getuid()
mmap$auto(0x2, 0x200006, 0x2, 0x14, 0x602, 0x100000000000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x14, 0x9, 0x0, r4, 0x0, 0x0, 0x8, 0x40000000000f, 0x7, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

kernel console output (not intermixed with test programs):

96ca9d8090 R08: 0000000000000000 R09: 0000000000000000
[  967.570879][  T496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  967.570893][  T496] R13: 0000000000000001 R14: 00007f96cada6080 R15: 00007ffc6be0c0d8
[  967.570925][  T496]  </TASK>
[  967.804525][  T493] sp0: Synchronizing with TNC
[  968.325466][  T518] netlink: 350 bytes leftover after parsing attributes in process `syz.6.4206'.
[  969.473363][  T604] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[  969.942138][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  969.951527][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  971.023556][  T740] program syz.9.4220 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  971.260915][  T745] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4219'.
[  971.632023][  T782] Invalid ELF header magic: != ELF
[  971.863219][  T787] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4224'.
[  972.047363][  T828] netlink: 342 bytes leftover after parsing attributes in process `syz.9.4226'.
[  972.331022][  T674] syz.6.4217: vmalloc error: size 134225920, failed to allocated page array size 262160, mode:0xc22(GFP_ATOMIC|__GFP_HIGHMEM|__GFP_DIRECT_RECLAIM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  972.364265][  T674] CPU: 0 UID: 0 PID: 674 Comm: syz.6.4217 Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[  972.364306][  T674] Tainted: [U]=USER
[  972.364315][  T674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  972.364329][  T674] Call Trace:
[  972.364337][  T674]  <TASK>
[  972.364347][  T674]  dump_stack_lvl+0x16c/0x1f0
[  972.364383][  T674]  warn_alloc+0x24d/0x3a0
[  972.364419][  T674]  ? __pfx_warn_alloc+0x10/0x10
[  972.364464][  T674]  ? __get_vm_area_node+0x1b0/0x2f0
[  972.364493][  T674]  ? __get_vm_area_node+0x1dc/0x2f0
[  972.364530][  T674]  __vmalloc_node_range_noprof+0x1102/0x1530
[  972.364572][  T674]  ? ctl_ioctl+0x955/0xd40
[  972.364611][  T674]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  972.364645][  T674]  ? rcu_is_watching+0x12/0xc0
[  972.364671][  T674]  ? trace_kmalloc+0x2d/0xd0
[  972.364697][  T674]  ? __kmalloc_node_noprof.cold+0x5a/0x5f
[  972.364724][  T674]  ? ctl_ioctl+0x955/0xd40
[  972.364756][  T674]  __kvmalloc_node_noprof+0x14f/0x1a0
[  972.364788][  T674]  ? ctl_ioctl+0x955/0xd40
[  972.364820][  T674]  ctl_ioctl+0x955/0xd40
[  972.364851][  T674]  ? __pfx_get_target_version+0x10/0x10
[  972.364882][  T674]  ? __pfx_ctl_ioctl+0x10/0x10
[  972.364947][  T674]  ? __fget_files+0x206/0x3a0
[  972.364985][  T674]  dm_ctl_ioctl+0x22/0x30
[  972.365013][  T674]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  972.365045][  T674]  __x64_sys_ioctl+0x190/0x200
[  972.365077][  T674]  do_syscall_64+0xcd/0x250
[  972.365108][  T674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  972.365140][  T674] RIP: 0033:0x7f549e58d169
[  972.365168][  T674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  972.365191][  T674] RSP: 002b:00007f549f370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  972.365215][  T674] RAX: ffffffffffffffda RBX: 00007f549e7a6080 RCX: 00007f549e58d169
[  972.365232][  T674] RDX: 00004000000001c0 RSI: fffffff7fffffd11 RDI: 0000000000000007
[  972.365248][  T674] RBP: 00007f549e60e2a0 R08: 0000000000000000 R09: 0000000000000000
[  972.365263][  T674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  972.365278][  T674] R13: 0000000000000000 R14: 00007f549e7a6080 R15: 00007ffe53338948
[  972.365310][  T674]  </TASK>
[  972.365319][  T674] Mem-Info:
[  972.646661][  T674] active_anon:16309 inactive_anon:2 isolated_anon:0
[  972.646661][  T674]  active_file:8757 inactive_file:50965 isolated_file:0
[  972.646661][  T674]  unevictable:767 dirty:386 writeback:0
[  972.646661][  T674]  slab_reclaimable:11901 slab_unreclaimable:103936
[  972.646661][  T674]  mapped:28808 shmem:1495 pagetables:1584
[  972.646661][  T674]  sec_pagetables:0 bounce:0
[  972.646661][  T674]  kernel_misc_reclaimable:0
[  972.646661][  T674]  free:1299721 free_pcp:13191 free_cma:0
[  972.726880][  T674] Node 0 active_anon:66336kB inactive_anon:8kB active_file:35028kB inactive_file:203856kB unevictable:1532kB isolated(anon):0kB isolated(file):0kB mapped:115232kB dirty:1544kB writeback:0kB shmem:4444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13476kB pagetables:6336kB sec_pagetables:0kB all_unreclaimable? no
[  972.822551][  T674] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  972.871533][  T674] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  972.905902][  T674] lowmem_reserve[]: 0 2487 2487 0 0
[  972.919965][  T674] Node 0 DMA32 free:1322048kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:67028kB inactive_anon:8kB active_file:35028kB inactive_file:203760kB unevictable:1532kB writepending:1544kB present:3129332kB managed:2547536kB mlocked:0kB bounce:0kB free_pcp:2988kB local_pcp:1804kB free_cma:0kB
[  972.954505][  T674] lowmem_reserve[]: 0 0 0 0 0
[  972.962372][  T674] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  973.015989][  T674] lowmem_reserve[]: 0 0 0 0 0
[  973.034226][  T674] Node 1 Normal free:3860760kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:45360kB local_pcp:23700kB free_cma:0kB
[  973.115335][  T674] lowmem_reserve[]: 0 0 0 0 0
[  973.144936][  T674] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  973.232533][  T674] Node 0 DMA32: 1895*4kB (UME) 2572*8kB (UME) 2414*16kB (UME) 1458*32kB (UME) 941*64kB (UME) 413*128kB (UME) 224*256kB (UME) 146*512kB (UME) 103*1024kB (UME) 14*2048kB (UME) 203*4096kB (UM) = 1324252kB
[  973.290172][  T674] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  973.328437][  T674] Node 1 Normal: 8286*4kB (UME) 90*8kB (UME) 11*16kB (UM) 193*32kB (UM) 104*64kB (UME) 40*128kB (UME) 22*256kB (UME) 10*512kB (UME) 11*1024kB (UM) 7*2048kB (ME) 921*4096kB (M) = 3860760kB
[  973.372367][  T674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  973.406013][  T674] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  973.437025][  T674] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  973.476656][  T674] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  973.499572][  T674] 61236 total pagecache pages
[  973.523611][  T674] 12 pages in swap cache
[  973.539065][  T674] Free swap  = 124672kB
[  973.543734][  T674] Total swap = 124996kB
[  973.556689][  T674] 2097051 pages RAM
[  973.560920][  T674] 0 pages HighMem/MovableOnly
[  973.576443][  T674] 428509 pages reserved
[  973.590828][  T674] 0 pages cma reserved
[  973.703945][  T889] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[  973.900834][  T942] tipc: Started in network mode
[  973.916446][  T942] tipc: Node identity 8e4e6f15, cluster identity 4711
[  973.925091][  T942] tipc: Node number set to 2387504917
[  974.111235][  T959] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4233'.
[  974.388689][   T29] audit: type=1800 audit(4294967453.332:32): pid=982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4237" name="version" dev="configfs" ino=102945 res=0 errno=0
[  976.479990][ T1055] sp0: Synchronizing with TNC
[  976.785475][ T1086] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4247'.
[  976.888414][ T1085] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[  977.123905][ T1126] program syz.7.4249 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  977.336075][ T1135] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4253'.
[  977.404114][ T1141] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4254'.
[  977.659331][ T1145] netlink: 194 bytes leftover after parsing attributes in process `syz.7.4256'.
[  978.712339][ T1221] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4259'.

syzkaller
syzkaller login: [  979.127936][ T1264] netlink: 330 bytes leftover after parsing attributes in process `syz.7.4262'.
[  979.387347][ T1266] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[  980.065144][ T1332] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4266'.
[  980.196627][T16062] Bluetooth: hci0: command 0x0406 tx timeout
[  981.584408][ T1377] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4270'.
[  982.322321][ T1411] Invalid ELF header magic: != ELF
[  982.397040][ T1415] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[  985.129985][ T1557] netlink: 350 bytes leftover after parsing attributes in process `syz.6.4284'.
[  985.555736][ T1566] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[  985.644326][   T29] audit: type=1804 audit(4294967464.582:33): pid=1570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.4285" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0
[  985.787225][ T1568] FAULT_INJECTION: forcing a failure.
[  985.787225][ T1568] name failslab, interval 1, probability 0, space 0, times 0
[  985.832435][   T29] audit: type=1804 audit(4294967464.582:34): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.4285" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0
[  985.864059][   T29] audit: type=1804 audit(4294967464.582:35): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.4285" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0
[  985.936803][ T1568] CPU: 1 UID: 0 PID: 1568 Comm: syz.8.4285 Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[  985.936850][ T1568] Tainted: [U]=USER
[  985.936860][ T1568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  985.936875][ T1568] Call Trace:
[  985.936883][ T1568]  <TASK>
[  985.936894][ T1568]  dump_stack_lvl+0x16c/0x1f0
[  985.936935][ T1568]  should_fail_ex+0x50a/0x650
[  985.936974][ T1568]  ? fs_reclaim_acquire+0xae/0x150
[  985.937032][ T1568]  ? nfc_llcp_build_tlv+0xfd/0x230
[  985.937060][ T1568]  should_failslab+0xc2/0x120
[  985.937094][ T1568]  __kmalloc_noprof+0xcb/0x510
[  985.937144][ T1568]  nfc_llcp_build_tlv+0xfd/0x230
[  985.937178][ T1568]  nfc_llcp_build_gb.isra.0+0xef/0x400
[  985.937210][ T1568]  ? __pfx_nfc_llcp_build_gb.isra.0+0x10/0x10
[  985.937241][ T1568]  ? lockdep_init_map_type+0x16d/0x7d0
[  985.937282][ T1568]  ? lockdep_init_map_type+0x16d/0x7d0
[  985.937324][ T1568]  nfc_llcp_register_device+0x600/0xa60
[  985.937357][ T1568]  nfc_register_device+0x6d/0x3c0
[  985.937390][ T1568]  nci_register_device+0x7f4/0xb80
[  985.937452][ T1568]  ? __pfx_nci_register_device+0x10/0x10
[  985.937503][ T1568]  virtual_ncidev_open+0x141/0x220
[  985.937543][ T1568]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  985.937578][ T1568]  misc_open+0x35a/0x420
[  985.937604][ T1568]  ? __pfx_misc_open+0x10/0x10
[  985.937648][ T1568]  chrdev_open+0x237/0x6a0
[  985.937683][ T1568]  ? __pfx_apparmor_file_open+0x10/0x10
[  985.937717][ T1568]  ? __pfx_chrdev_open+0x10/0x10
[  985.937755][ T1568]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  985.937799][ T1568]  do_dentry_open+0x735/0x1c40
[  985.937834][ T1568]  ? __pfx_chrdev_open+0x10/0x10
[  985.937872][ T1568]  ? inode_permission+0xdd/0x5f0
[  985.937903][ T1568]  vfs_open+0x82/0x3f0
[  985.937926][ T1568]  ? may_open+0x1f2/0x400
[  985.937958][ T1568]  path_openat+0x1e88/0x2d80
[  985.938010][ T1568]  ? __pfx_path_openat+0x10/0x10
[  985.938044][ T1568]  ? __pfx___lock_acquire+0x10/0x10
[  985.938077][ T1568]  ? lock_acquire.part.0+0x11b/0x380
[  985.938119][ T1568]  ? find_held_lock+0x2d/0x110
[  985.938155][ T1568]  do_filp_open+0x20c/0x470
[  985.938192][ T1568]  ? __pfx_do_filp_open+0x10/0x10
[  985.938228][ T1568]  ? find_held_lock+0x2d/0x110
[  985.938283][ T1568]  ? alloc_fd+0x41f/0x760
[  985.938328][ T1568]  do_sys_openat2+0x17a/0x1e0
[  985.938356][ T1568]  ? __pfx_do_sys_openat2+0x10/0x10
[  985.938385][ T1568]  ? __pfx___might_resched+0x10/0x10
[  985.938434][ T1568]  __x64_sys_openat+0x175/0x210
[  985.938461][ T1568]  ? __pfx___x64_sys_openat+0x10/0x10
[  985.938504][ T1568]  do_syscall_64+0xcd/0x250
[  985.938540][ T1568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  985.938578][ T1568] RIP: 0033:0x7f6f06d8d169
[  985.938599][ T1568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  985.938625][ T1568] RSP: 002b:00007f6f07b0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  985.938650][ T1568] RAX: ffffffffffffffda RBX: 00007f6f06fa6080 RCX: 00007f6f06d8d169
[  985.938668][ T1568] RDX: 0000000000000002 RSI: 0000400000000400 RDI: ffffffffffffff9c
[  985.938684][ T1568] RBP: 00007f6f06e0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  985.938703][ T1568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  985.938718][ T1568] R13: 0000000000000000 R14: 00007f6f06fa6080 R15: 00007ffcbe57b3f8
[  985.938751][ T1568]  </TASK>
[  986.407785][ T1617] netlink: 334 bytes leftover after parsing attributes in process `syz.9.4291'.
[  986.975054][ T1401] Process accounting paused
[  987.255280][ T1641] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4294'.
[  987.335417][ T1641] veth1_macvtap: left promiscuous mode
[  987.350615][ T1641] macsec0: entered allmulticast mode
[  988.262420][ T1736] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4298'.
[  988.378212][ T1759] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[  988.686670][ T5837] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  990.708738][ T1969] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4309'.
[  991.029676][ T1982] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[  993.483665][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  993.506687][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  993.854863][ T2172] netlink: 350 bytes leftover after parsing attributes in process `syz.6.4320'.
[  994.046419][ T2191] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4322'.
[  994.449430][ T2194] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[  994.846294][ T2241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4327'.
[  995.329774][ T2284] input: f¬
Îú0?\âhÕ�ëJL­§'$d)K‘ƒžïLš�ÜÈìÆoÝ1oN½‰0«´À»Ã¸.›m)$­cÕâ½Ûj¯@ÍÜqwRÀ=æX as /devices/virtual/input/input19
[  996.640747][ T2357] netlink: 350 bytes leftover after parsing attributes in process `syz.6.4333'.
[  997.025899][ T2360] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4335'.
[  997.562256][ T2372] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[  997.920774][   T29] audit: type=1326 audit(4294967476.862:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2375 comm="syz.7.4338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96cab8d169 code=0x0
[  997.944509][    C0] vkms_vblank_simulate: vblank timer overrun
[  998.402047][ T2479] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes
[  998.709299][ T2513] netlink: 504 bytes leftover after parsing attributes in process `syz.6.4344'.
[  998.720705][ T2513] netlink: 504 bytes leftover after parsing attributes in process `syz.6.4344'.
[  998.732366][ T2513] netlink: 350 bytes leftover after parsing attributes in process `syz.6.4344'.
[ 1000.144069][ T2573] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1000.272675][T16062] Bluetooth: hci1: ISO packet too small
[ 1000.680348][T16062] Bluetooth: hci1: command 0x0406 tx timeout
[ 1000.924268][ T2626] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4353'.
[ 1000.935506][ T2626] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4353'.
[ 1000.946836][ T2626] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4353'.
[ 1001.258376][ T2627] FAULT_INJECTION: forcing a failure.
[ 1001.258376][ T2627] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1001.293888][ T2627] CPU: 1 UID: 0 PID: 2627 Comm: syz.9.4354 Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[ 1001.293929][ T2627] Tainted: [U]=USER
[ 1001.293938][ T2627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1001.293954][ T2627] Call Trace:
[ 1001.293962][ T2627]  <TASK>
[ 1001.293972][ T2627]  dump_stack_lvl+0x16c/0x1f0
[ 1001.294011][ T2627]  should_fail_ex+0x50a/0x650
[ 1001.294055][ T2627]  get_futex_key+0x4a3/0x1000
[ 1001.294090][ T2627]  ? __pfx_get_futex_key+0x10/0x10
[ 1001.294119][ T2627]  ? do_raw_spin_unlock+0x172/0x230
[ 1001.294145][ T2627]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1001.294174][ T2627]  ? find_held_lock+0x2d/0x110
[ 1001.294205][ T2627]  futex_wait_setup+0x78/0x290
[ 1001.294248][ T2627]  __futex_wait+0x267/0x3c0
[ 1001.294285][ T2627]  ? __pfx___futex_wait+0x10/0x10
[ 1001.294319][ T2627]  ? try_to_wake_up+0x158/0x1490
[ 1001.294356][ T2627]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1001.294404][ T2627]  futex_wait+0xe9/0x380
[ 1001.294438][ T2627]  ? __pfx_futex_wait+0x10/0x10
[ 1001.294481][ T2627]  ? vfs_write+0x306/0x1150
[ 1001.294515][ T2627]  ? fdget_pos+0x267/0x390
[ 1001.294556][ T2627]  do_futex+0x22b/0x350
[ 1001.294595][ T2627]  ? __pfx_do_futex+0x10/0x10
[ 1001.294635][ T2627]  __x64_sys_futex+0x1e1/0x4c0
[ 1001.294668][ T2627]  ? fput+0x67/0x440
[ 1001.294692][ T2627]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1001.294721][ T2627]  ? ksys_write+0x1ba/0x250
[ 1001.294753][ T2627]  ? __pfx_ksys_write+0x10/0x10
[ 1001.294795][ T2627]  do_syscall_64+0xcd/0x250
[ 1001.294829][ T2627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.294863][ T2627] RIP: 0033:0x7f989ad8d169
[ 1001.294884][ T2627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1001.294909][ T2627] RSP: 002b:00007f989bbcb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1001.294934][ T2627] RAX: ffffffffffffffda RBX: 00007f989afa6088 RCX: 00007f989ad8d169
[ 1001.294952][ T2627] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f989afa6088
[ 1001.294968][ T2627] RBP: 00007f989afa6080 R08: 0000000000000000 R09: 0000000000000000
[ 1001.294984][ T2627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f989afa608c
[ 1001.295000][ T2627] R13: 0000000000000000 R14: 00007fff8f8c79c0 R15: 00007fff8f8c7aa8
[ 1001.295033][ T2627]  </TASK>
[ 1001.890698][ T2687] FAULT_INJECTION: forcing a failure.
[ 1001.890698][ T2687] name failslab, interval 1, probability 0, space 0, times 0
[ 1001.936667][ T2687] CPU: 1 UID: 0 PID: 2687 Comm: syz.6.4358 Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[ 1001.936709][ T2687] Tainted: [U]=USER
[ 1001.936717][ T2687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1001.936732][ T2687] Call Trace:
[ 1001.936740][ T2687]  <TASK>
[ 1001.936750][ T2687]  dump_stack_lvl+0x16c/0x1f0
[ 1001.936788][ T2687]  should_fail_ex+0x50a/0x650
[ 1001.936826][ T2687]  ? fs_reclaim_acquire+0xae/0x150
[ 1001.936861][ T2687]  ? net_alloc_generic+0x1e/0x70
[ 1001.936895][ T2687]  should_failslab+0xc2/0x120
[ 1001.936919][ T2687]  __kmalloc_noprof+0xcb/0x510
[ 1001.936956][ T2687]  ? inc_ucount+0x23e/0x2e0
[ 1001.936987][ T2687]  net_alloc_generic+0x1e/0x70
[ 1001.937022][ T2687]  copy_net_ns+0xc6/0x5f0
[ 1001.937045][ T2687]  ? copy_cgroup_ns+0xa4/0x6f0
[ 1001.937076][ T2687]  create_new_namespaces+0x3ea/0xad0
[ 1001.937121][ T2687]  unshare_nsproxy_namespaces+0xc0/0x1f0
[ 1001.937160][ T2687]  ksys_unshare+0x45d/0xa40
[ 1001.937186][ T2687]  ? __pfx_ksys_unshare+0x10/0x10
[ 1001.937211][ T2687]  ? xfd_validate_state+0x5d/0x180
[ 1001.937255][ T2687]  __x64_sys_unshare+0x31/0x40
[ 1001.937289][ T2687]  do_syscall_64+0xcd/0x250
[ 1001.937325][ T2687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.937359][ T2687] RIP: 0033:0x7f549e58d169
[ 1001.937379][ T2687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1001.937402][ T2687] RSP: 002b:00007f549f391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1001.937430][ T2687] RAX: ffffffffffffffda RBX: 00007f549e7a5fa0 RCX: 00007f549e58d169
[ 1001.937448][ T2687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1001.937462][ T2687] RBP: 00007f549e60e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1001.937478][ T2687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1001.937494][ T2687] R13: 0000000000000000 R14: 00007f549e7a5fa0 R15: 00007ffe53338948
[ 1001.937525][ T2687]  </TASK>
[ 1002.889838][ T2791] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1003.268768][ T2839] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4365'.
[ 1003.282449][ T2839] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4365'.
[ 1003.305129][ T2829] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4365'.
[ 1003.524917][ T2838] vivid-010: =================  START STATUS  =================
[ 1003.601254][ T2838] vivid-010: Generate PTS: true
[ 1003.624417][ T2853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4367'.
[ 1003.691759][ T2838] vivid-010: Generate SCR: true
[ 1003.791626][ T2838] tpg source WxH: 640x360 (Y'CbCr)
[ 1003.842311][ T2838] tpg field: 1
[ 1003.872813][ T2838] tpg crop: 640x360@0x0
[ 1003.897214][ T2838] tpg compose: 640x360@0x0
[ 1003.924447][ T2838] tpg colorspace: 8
[ 1003.968716][ T2838] tpg transfer function: 0/0
[ 1004.010280][ T2838] tpg Y'CbCr encoding: 0/0
[ 1004.015193][ T2838] tpg quantization: 0/0
[ 1004.048016][ T2838] tpg RGB range: 0/2
[ 1004.072738][ T2838] vivid-010: ==================  END STATUS  ==================
[ 1005.228262][ T2918] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4374'.
[ 1005.325009][ T2921] netlink: 354 bytes leftover after parsing attributes in process `syz.7.4374'.
[ 1005.811283][ T2931] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4376'.
[ 1005.830296][ T2931] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4376'.
[ 1005.842663][ T2931] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4376'.
[ 1005.882719][ T2932] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1007.605331][ T3002] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4382'.
[ 1008.153002][   T29] audit: type=1326 audit(4294967495.090:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3001 comm="syz.9.4386" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f989ad8d169 code=0x0
[ 1008.575205][ T3039] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1008.662576][ T3055] netlink: 206 bytes leftover after parsing attributes in process `syz.9.4392'.
[ 1008.739115][ T3049] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4389'.
[ 1008.811523][ T3045] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4389'.
[ 1008.891604][ T3049] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4389'.
[ 1009.472725][ T3097] nbd: illegal input index -33554433
[ 1009.727073][ T3100] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[ 1009.994693][ T3151] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4399'.
[ 1010.546744][ T3158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4409'.
[ 1011.265333][ T3189] could not allocate digest TFM handle 
[ 1011.321346][   T29] audit: type=1326 audit(4294967498.260:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3159 comm="syz.8.4400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f06d8d169 code=0x0
[ 1012.110137][ T3294] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4405'.
[ 1012.125356][ T3294] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4405'.
[ 1012.138028][ T3294] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4405'.
[ 1012.164706][ T3291] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1012.517749][ T3315] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4408'.
[ 1023.607367][ T3375] __nla_validate_parse: 1 callbacks suppressed
[ 1023.607391][ T3375] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4422'.
[ 1023.693602][T16062] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1023.708670][T16062] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1023.728493][T16062] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1023.748184][T16062] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1023.756820][T16062] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1023.764970][T16062] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1024.030661][ T3423] chnl_net:caif_netlink_parms(): no params data found
[ 1024.131191][ T3536] netlink: 'syz.8.4420': attribute type 16 has an invalid length.
[ 1024.139958][ T3536] netlink: 50 bytes leftover after parsing attributes in process `syz.8.4420'.
[ 1024.210494][ T3423] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1024.223645][ T3423] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1024.246563][ T3423] bridge_slave_0: entered allmulticast mode
[ 1024.271894][ T3423] bridge_slave_0: entered promiscuous mode
[ 1024.285795][ T3570] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4418'.
[ 1024.298013][ T3423] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1024.305810][ T3423] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1024.315198][ T3570] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4418'.
[ 1024.327959][ T3423] bridge_slave_1: entered allmulticast mode
[ 1024.335704][ T3538] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4418'.
[ 1024.367159][ T3423] bridge_slave_1: entered promiscuous mode
[ 1024.445639][ T3423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1024.482483][ T3595] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1024.510869][ T3423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1024.544122][ T3642] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4423'.
[ 1024.623648][ T3423] team0: Port device team_slave_0 added
[ 1024.650999][ T3423] team0: Port device team_slave_1 added
[ 1024.802512][ T3423] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1024.820441][ T3423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1024.862442][ T3423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1024.910158][ T3423] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1024.927564][ T3423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1024.960591][ T3423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1025.365193][ T3423] hsr_slave_0: entered promiscuous mode
[ 1025.373951][ T3423] hsr_slave_1: entered promiscuous mode
[ 1025.380932][ T3423] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1025.389418][ T3423] Cannot create hsr debugfs directory
[ 1025.877103][ T5837] Bluetooth: hci3: command tx timeout
[ 1026.820699][ T3906] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4431'.
[ 1026.860571][ T3896] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4431'.
[ 1026.898789][ T3896] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4431'.
[ 1027.451289][ T3423] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1027.501692][ T3423] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1027.532619][ T3423] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1027.565270][ T3423] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1027.765164][ T3423] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1027.815189][ T3423] 8021q: adding VLAN 0 to HW filter on device team0
[ 1027.859121][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1027.866993][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1027.905943][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1027.913831][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1027.966594][ T5837] Bluetooth: hci3: command tx timeout
[ 1028.199393][ T3967] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1028.789454][ T3423] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1029.087009][ T3423] veth0_vlan: entered promiscuous mode
[ 1029.118773][ T3423] veth1_vlan: entered promiscuous mode
[ 1029.191943][ T3423] veth0_macvtap: entered promiscuous mode
[ 1029.360528][ T3423] veth1_macvtap: entered promiscuous mode
[ 1029.441420][ T3423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1029.441448][ T3423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1029.441463][ T3423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1029.441482][ T3423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1029.441497][ T3423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1029.441515][ T3423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1029.442551][ T3423] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1029.444829][ T3423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1029.444853][ T3423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1029.444867][ T3423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1029.444885][ T3423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1029.444900][ T3423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1029.444919][ T3423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1029.445776][ T3423] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1029.448362][ T3423] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1029.448452][ T3423] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1029.448488][ T3423] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1029.448522][ T3423] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1030.036843][ T5837] Bluetooth: hci3: command tx timeout
[ 1030.057730][T31273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1030.057757][T31273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1030.150139][ T4521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1030.150165][ T4521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1030.232161][ T4034] tty tty17: ldisc open failed (-12), clearing slot 16
[ 1030.550693][ T4067] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4441'.
[ 1030.596596][ T4067] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4441'.
[ 1030.618419][ T4067] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4441'.
[ 1030.802856][   T29] audit: type=1326 audit(4294967517.740:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4091 comm="syz.3.4414" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17a518d169 code=0x0
[ 1032.023442][ T4170] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1032.117785][ T5837] Bluetooth: hci3: command tx timeout
[ 1032.507352][   T29] audit: type=1326 audit(4294967519.450:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4206 comm="syz.9.4449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f989ad8d169 code=0x0
[ 1032.688709][ T4218] openvswitch: netlink: nsh attribute has 14 unknown bytes.
[ 1033.490335][ T4234] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4451'.
[ 1033.512003][ T4234] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4451'.
[ 1033.547719][ T4234] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4451'.
[ 1034.203289][ T4280] Invalid ELF header magic: != ELF
[ 1035.321047][ T4332] FAULT_INJECTION: forcing a failure.
[ 1035.321047][ T4332] name failslab, interval 1, probability 0, space 0, times 0
[ 1035.407243][ T4332] CPU: 0 UID: 0 PID: 4332 Comm: syz.8.4456 Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[ 1035.407283][ T4332] Tainted: [U]=USER
[ 1035.407292][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1035.407307][ T4332] Call Trace:
[ 1035.407316][ T4332]  <TASK>
[ 1035.407326][ T4332]  dump_stack_lvl+0x16c/0x1f0
[ 1035.407373][ T4332]  should_fail_ex+0x50a/0x650
[ 1035.407412][ T4332]  ? fs_reclaim_acquire+0xae/0x150
[ 1035.407446][ T4332]  should_failslab+0xc2/0x120
[ 1035.407471][ T4332]  kmem_cache_alloc_noprof+0x6e/0x3d0
[ 1035.407510][ T4332]  ? __xlate_proc_name+0x173/0x210
[ 1035.407545][ T4332]  ? __proc_create+0x2c0/0x8b0
[ 1035.407587][ T4332]  __proc_create+0x2c0/0x8b0
[ 1035.407625][ T4332]  ? __pfx___proc_create+0x10/0x10
[ 1035.407669][ T4332]  ? find_held_lock+0x2d/0x110
[ 1035.407701][ T4332]  proc_create_reg+0x7d/0x180
[ 1035.407728][ T4332]  proc_create_data+0x86/0x190
[ 1035.407752][ T4332]  ? __pfx_proc_create_data+0x10/0x10
[ 1035.407788][ T4332]  gss_svc_init_net+0x2ec/0x660
[ 1035.407821][ T4332]  ? __pfx_canbcm_pernet_init+0x10/0x10
[ 1035.407851][ T4332]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[ 1035.407886][ T4332]  ops_init+0x1df/0x5f0
[ 1035.407925][ T4332]  setup_net+0x21f/0x860
[ 1035.407963][ T4332]  ? __pfx_setup_net+0x10/0x10
[ 1035.407997][ T4332]  ? down_read_killable+0xcc/0x380
[ 1035.408031][ T4332]  ? __pfx_down_read_killable+0x10/0x10
[ 1035.408064][ T4332]  ? __raw_spin_lock_init+0x3a/0x110
[ 1035.408104][ T4332]  ? debug_mutex_init+0x37/0x70
[ 1035.408134][ T4332]  copy_net_ns+0x2a6/0x5f0
[ 1035.408162][ T4332]  create_new_namespaces+0x3ea/0xad0
[ 1035.408209][ T4332]  unshare_nsproxy_namespaces+0xc0/0x1f0
[ 1035.408251][ T4332]  ksys_unshare+0x45d/0xa40
[ 1035.408282][ T4332]  ? __pfx_ksys_unshare+0x10/0x10
[ 1035.408306][ T4332]  ? xfd_validate_state+0x5d/0x180
[ 1035.408358][ T4332]  __x64_sys_unshare+0x31/0x40
[ 1035.408383][ T4332]  do_syscall_64+0xcd/0x250
[ 1035.408417][ T4332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1035.408453][ T4332] RIP: 0033:0x7f6f06d8d169
[ 1035.408473][ T4332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1035.408498][ T4332] RSP: 002b:00007f6f07b2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1035.408522][ T4332] RAX: ffffffffffffffda RBX: 00007f6f06fa5fa0 RCX: 00007f6f06d8d169
[ 1035.408539][ T4332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1035.408555][ T4332] RBP: 00007f6f06e0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1035.408571][ T4332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1035.408587][ T4332] R13: 0000000000000000 R14: 00007f6f06fa5fa0 R15: 00007ffcbe57b3f8
[ 1035.408622][ T4332]  </TASK>
[ 1035.708804][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.802779][ T4387] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1038.167966][ T4450] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4461'.
[ 1038.417490][ T4433] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4461'.
[ 1038.562753][ T4438] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4461'.
[ 1040.573265][ T4568] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1041.223497][ T4560] ip6_vti0: entered allmulticast mode
[ 1043.279103][ T4736] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4476'.
[ 1043.363972][ T4733] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4476'.
[ 1043.428445][ T4733] netlink: 350 bytes leftover after parsing attributes in process `syz.3.4476'.
[ 1044.580130][ T4786] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1046.326716][ T4896] netlink: 500 bytes leftover after parsing attributes in process `syz.8.4486'.
[ 1046.398879][ T4889] netlink: 500 bytes leftover after parsing attributes in process `syz.8.4486'.
[ 1046.447258][ T4889] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4486'.
[ 1046.469510][ T4941] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4488'.
[ 1046.513727][ T4941] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4488'.
[ 1046.581345][ T4936] netlink: 350 bytes leftover after parsing attributes in process `syz.3.4488'.
[ 1047.673788][ T5029] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1048.357326][ T5138] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1048.855238][ T5180] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4499'.
[ 1048.895535][ T5180] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4499'.
[ 1048.910277][ T5180] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4499'.
[ 1049.348631][ T5186] ip6_vti0: entered allmulticast mode
[ 1049.608845][ T5201] netlink: 500 bytes leftover after parsing attributes in process `syz.3.4501'.
[ 1049.646911][ T5201] netlink: 500 bytes leftover after parsing attributes in process `syz.3.4501'.
[ 1049.733306][ T5224] netlink: 350 bytes leftover after parsing attributes in process `syz.3.4501'.
[ 1050.468841][ T5246] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1052.444297][ T5444] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4514'.
[ 1052.477546][ T5444] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4514'.
[ 1052.537275][ T5429] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4514'.
[ 1053.242668][ T5510] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4515'.
[ 1053.976965][ T5837] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6
[ 1054.920056][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.935199][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.927859][ T5619] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1057.467864][ T5674] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4524'.
[ 1057.540290][ T5674] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4524'.
[ 1057.600535][ T5679] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4524'.
[ 1057.862268][ T5683] afs: Unknown parameter '¨ÎP4Å'
[ 1058.026552][ T5677] lo: entered allmulticast mode
[ 1058.531947][ T5665] lo: left allmulticast mode
[ 1060.032368][ T5727] Unable to find swap-space signature
[ 1060.640601][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4534'.
[ 1060.755288][ T5739] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1061.042024][ T5783] nl80211: entered promiscuous mode
[ 1061.062345][ T5781] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4535'.
[ 1061.096884][ T5781] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4535'.
[ 1061.109009][ T5781] netlink: 350 bytes leftover after parsing attributes in process `syz.3.4535'.
[ 1061.539458][ T5789] ubi0: attaching mtd0
[ 1061.547117][ T5789] ubi0: scanning is finished
[ 1061.552242][ T5789] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1061.918989][ T5789] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1062.778177][ T5835] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1063.621710][ T5879] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4548'.
[ 1063.664306][ T5868] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4548'.
[ 1063.748988][ T5879] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4548'.
[ 1065.866430][ T6019] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1066.661735][ T6059] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4563'.
[ 1066.728213][ T6056] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4563'.
[ 1066.767660][ T6056] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4563'.
[ 1067.324184][ T6065] ip6_vti0: entered allmulticast mode
[ 1068.396093][ T6139] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1069.250281][ T6201] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4575'.
[ 1069.296401][ T6201] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4575'.
[ 1069.297892][ T6210] netlink: zone id is out of range
[ 1069.311947][ T6201] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4575'.
[ 1069.312722][ T6210] netlink: zone id is out of range
[ 1069.336634][ T6210] netlink: zone id is out of range
[ 1069.347015][ T6210] netlink: zone id is out of range
[ 1069.373258][ T6210] netlink: zone id is out of range
[ 1069.382196][ T6210] netlink: zone id is out of range
[ 1069.391523][ T6210] netlink: zone id is out of range
[ 1069.408572][ T6210] netlink: zone id is out of range
[ 1069.426619][ T6210] netlink: zone id is out of range
[ 1069.443189][ T6210] netlink: zone id is out of range
[ 1070.958651][ T6279] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1071.388091][ T6313] Unable to find swap-space signature
[ 1072.051859][ T6323] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1072.537328][ T6353] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4586'.
[ 1072.549065][ T6353] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4586'.
[ 1072.569305][ T6353] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4586'.
[ 1074.942937][ T6464] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1075.345918][ T6486] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4598'.
[ 1075.392768][ T6473] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4598'.
[ 1075.413250][ T6473] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4598'.
[ 1076.905973][ T6549] FAULT_INJECTION: forcing a failure.
[ 1076.905973][ T6549] name failslab, interval 1, probability 0, space 0, times 0
[ 1076.965501][ T6549] CPU: 0 UID: 0 PID: 6549 Comm: syz.9.4605 Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[ 1076.965542][ T6549] Tainted: [U]=USER
[ 1076.965551][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1076.965566][ T6549] Call Trace:
[ 1076.965574][ T6549]  <TASK>
[ 1076.965584][ T6549]  dump_stack_lvl+0x16c/0x1f0
[ 1076.965622][ T6549]  should_fail_ex+0x50a/0x650
[ 1076.965658][ T6549]  ? fs_reclaim_acquire+0xae/0x150
[ 1076.965694][ T6549]  should_failslab+0xc2/0x120
[ 1076.965719][ T6549]  __kmalloc_cache_node_noprof+0x6e/0x420
[ 1076.965757][ T6549]  ? bdi_alloc+0x44/0x170
[ 1076.965794][ T6549]  bdi_alloc+0x44/0x170
[ 1076.965825][ T6549]  __alloc_disk_node+0xa9/0x610
[ 1076.965854][ T6549]  ? blk_alloc_queue+0x1a3/0x700
[ 1076.965885][ T6549]  __blk_alloc_disk+0xd8/0x170
[ 1076.965916][ T6549]  ? __pfx___blk_alloc_disk+0x10/0x10
[ 1076.965968][ T6549]  ? __pfx_idr_alloc+0x10/0x10
[ 1076.966000][ T6549]  ? __raw_spin_lock_init+0x3a/0x110
[ 1076.966043][ T6549]  ? __pfx_hot_add_show+0x10/0x10
[ 1076.966077][ T6549]  zram_add+0x160/0x6b0
[ 1076.966117][ T6549]  ? __pfx_zram_add+0x10/0x10
[ 1076.966170][ T6549]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1076.966203][ T6549]  ? rcu_is_watching+0x12/0xc0
[ 1076.966233][ T6549]  ? __pfx_hot_add_show+0x10/0x10
[ 1076.966262][ T6549]  hot_add_show+0x21/0x80
[ 1076.966292][ T6549]  class_attr_show+0x6f/0xa0
[ 1076.966321][ T6549]  ? __pfx_class_attr_show+0x10/0x10
[ 1076.966350][ T6549]  sysfs_kf_seq_show+0x23e/0x410
[ 1076.966386][ T6549]  seq_read_iter+0x4f4/0x12b0
[ 1076.966434][ T6549]  kernfs_fop_read_iter+0x414/0x580
[ 1076.966459][ T6549]  ? rw_verify_area+0xcf/0x680
[ 1076.966492][ T6549]  vfs_read+0x886/0xbf0
[ 1076.966529][ T6549]  ? __pfx_vfs_read+0x10/0x10
[ 1076.966587][ T6549]  ksys_read+0x12b/0x250
[ 1076.966618][ T6549]  ? __pfx_ksys_read+0x10/0x10
[ 1076.966661][ T6549]  do_syscall_64+0xcd/0x250
[ 1076.966695][ T6549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1076.966727][ T6549] RIP: 0033:0x7f989ad8d169
[ 1076.966746][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1076.966771][ T6549] RSP: 002b:00007f989bbec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1076.966795][ T6549] RAX: ffffffffffffffda RBX: 00007f989afa5fa0 RCX: 00007f989ad8d169
[ 1076.966811][ T6549] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000007
[ 1076.966827][ T6549] RBP: 00007f989ae0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1076.966842][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1076.966857][ T6549] R13: 0000000000000000 R14: 00007f989afa5fa0 R15: 00007fff8f8c7aa8
[ 1076.966894][ T6549]  </TASK>
[ 1077.399806][ T6549] zram: Error allocating disk structure for device 1
[ 1079.333847][ T6604] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4610'.
[ 1079.354570][ T6604] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4610'.
[ 1079.373390][ T6601] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4610'.
[ 1079.606351][T16062] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1079.622184][T16062] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1079.631048][T16062] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1079.642233][T16062] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1079.658955][T16062] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1079.668352][T16062] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1080.045543][ T6609] chnl_net:caif_netlink_parms(): no params data found
[ 1080.130268][ T6683] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4613'.
[ 1080.158868][ T6683] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4613'.
[ 1080.192897][ T6683] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4613'.
[ 1080.385006][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1080.409474][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1080.432190][ T6609] bridge_slave_0: entered allmulticast mode
[ 1080.452949][ T6609] bridge_slave_0: entered promiscuous mode
[ 1080.478716][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1080.497269][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1080.516223][ T6609] bridge_slave_1: entered allmulticast mode
[ 1080.540815][ T6609] bridge_slave_1: entered promiscuous mode
[ 1080.664939][ T6609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1080.704600][ T6609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1080.962756][ T6609] team0: Port device team_slave_0 added
[ 1081.058612][ T6609] team0: Port device team_slave_1 added
[ 1081.364836][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1081.382624][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1081.416344][ T6609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1081.457848][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1081.466255][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1081.512420][ T6609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1081.722519][ T5837] Bluetooth: hci4: command tx timeout
[ 1081.829430][ T6609] hsr_slave_0: entered promiscuous mode
[ 1081.849552][ T6609] hsr_slave_1: entered promiscuous mode
[ 1081.869552][ T6609] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1081.885378][ T6609] Cannot create hsr debugfs directory
[ 1083.637869][ T7071] FAULT_INJECTION: forcing a failure.
[ 1083.637869][ T7071] name failslab, interval 1, probability 0, space 0, times 0
[ 1083.683323][ T7071] CPU: 0 UID: 0 PID: 7071 Comm: syz.8.4618 Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[ 1083.683368][ T7071] Tainted: [U]=USER
[ 1083.683378][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1083.683395][ T7071] Call Trace:
[ 1083.683404][ T7071]  <TASK>
[ 1083.683416][ T7071]  dump_stack_lvl+0x16c/0x1f0
[ 1083.683459][ T7071]  should_fail_ex+0x50a/0x650
[ 1083.683502][ T7071]  ? fs_reclaim_acquire+0xae/0x150
[ 1083.683541][ T7071]  ? memcg_list_lru_alloc+0x29f/0x730
[ 1083.683572][ T7071]  should_failslab+0xc2/0x120
[ 1083.683601][ T7071]  __kmalloc_noprof+0xcb/0x510
[ 1083.683648][ T7071]  ? class_attr_show+0x6f/0xa0
[ 1083.683693][ T7071]  memcg_list_lru_alloc+0x29f/0x730
[ 1083.683732][ T7071]  ? __pfx_memcg_list_lru_alloc+0x10/0x10
[ 1083.683763][ T7071]  ? trace_lock_acquire+0x14e/0x1f0
[ 1083.683800][ T7071]  ? lock_acquire+0x2f/0xb0
[ 1083.683834][ T7071]  ? get_mem_cgroup_from_objcg+0xe1/0x210
[ 1083.683882][ T7071]  __memcg_slab_post_alloc_hook+0x12c/0x9b0
[ 1083.683932][ T7071]  ? kasan_save_track+0x14/0x30
[ 1083.683977][ T7071]  kmem_cache_alloc_lru_noprof+0x363/0x3d0
[ 1083.684021][ T7071]  ? bdev_alloc_inode+0x26/0x90
[ 1083.684049][ T7071]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1083.684086][ T7071]  ? __pfx_bdev_alloc_inode+0x10/0x10
[ 1083.684113][ T7071]  bdev_alloc_inode+0x26/0x90
[ 1083.684141][ T7071]  ? __pfx_bdev_alloc_inode+0x10/0x10
[ 1083.684167][ T7071]  alloc_inode+0x5d/0x230
[ 1083.684194][ T7071]  new_inode+0x22/0x210
[ 1083.684218][ T7071]  ? rcu_is_watching+0x12/0xc0
[ 1083.684274][ T7071]  bdev_alloc+0x2b/0x420
[ 1083.684310][ T7071]  __alloc_disk_node+0x10c/0x610
[ 1083.684344][ T7071]  ? blk_alloc_queue+0x1a3/0x700
[ 1083.684377][ T7071]  __blk_alloc_disk+0xd8/0x170
[ 1083.684412][ T7071]  ? __pfx___blk_alloc_disk+0x10/0x10
[ 1083.684470][ T7071]  ? __pfx_idr_alloc+0x10/0x10
[ 1083.684506][ T7071]  ? __raw_spin_lock_init+0x3a/0x110
[ 1083.684554][ T7071]  ? __pfx_hot_add_show+0x10/0x10
[ 1083.684593][ T7071]  zram_add+0x160/0x6b0
[ 1083.684634][ T7071]  ? __pfx_zram_add+0x10/0x10
[ 1083.684697][ T7071]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1083.684744][ T7071]  ? rcu_is_watching+0x12/0xc0
[ 1083.684779][ T7071]  ? __pfx_hot_add_show+0x10/0x10
[ 1083.684820][ T7071]  hot_add_show+0x21/0x80
[ 1083.684859][ T7071]  class_attr_show+0x6f/0xa0
[ 1083.684896][ T7071]  ? __pfx_class_attr_show+0x10/0x10
[ 1083.684931][ T7071]  sysfs_kf_seq_show+0x23e/0x410
[ 1083.684973][ T7071]  seq_read_iter+0x4f4/0x12b0
[ 1083.685027][ T7071]  kernfs_fop_read_iter+0x414/0x580
[ 1083.685057][ T7071]  ? rw_verify_area+0xcf/0x680
[ 1083.685097][ T7071]  vfs_read+0x886/0xbf0
[ 1083.685140][ T7071]  ? __pfx_vfs_read+0x10/0x10
[ 1083.685204][ T7071]  ksys_read+0x12b/0x250
[ 1083.685240][ T7071]  ? __pfx_ksys_read+0x10/0x10
[ 1083.685289][ T7071]  do_syscall_64+0xcd/0x250
[ 1083.685329][ T7071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1083.685367][ T7071] RIP: 0033:0x7f6f06d8d169
[ 1083.685389][ T7071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1083.685425][ T7071] RSP: 002b:00007f6f07b2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1083.685452][ T7071] RAX: ffffffffffffffda RBX: 00007f6f06fa5fa0 RCX: 00007f6f06d8d169
[ 1083.685471][ T7071] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000007
[ 1083.685488][ T7071] RBP: 00007f6f06e0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1083.685506][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1083.685524][ T7071] R13: 0000000000000000 R14: 00007f6f06fa5fa0 R15: 00007ffcbe57b3f8
[ 1083.685562][ T7071]  </TASK>
[ 1084.077490][ T5837] Bluetooth: hci4: command tx timeout
[ 1084.181155][ T7071] zram: Error allocating disk structure for device 1
[ 1084.585583][ T6609] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1084.646681][ T6609] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1084.672266][ T6609] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1084.723798][ T6609] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1084.771517][ T7110] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1085.230187][ T6609] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1085.260712][ T7156] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4621'.
[ 1085.285465][ T7156] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4621'.
[ 1085.302690][ T7156] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4621'.
[ 1085.343416][ T6609] 8021q: adding VLAN 0 to HW filter on device team0
[ 1085.402809][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1085.410781][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1085.444914][ T7155] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4623'.
[ 1085.457134][ T7155] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4623'.
[ 1085.483150][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1085.491034][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1085.492596][ T7155] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4623'.
[ 1086.128549][ T5837] Bluetooth: hci4: command tx timeout
[ 1086.312771][ T7173] Console: switching to colour frame buffer device 128x48
[ 1086.396282][ T6609] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1086.450463][ T6609] veth0_vlan: entered promiscuous mode
[ 1086.466579][ T6609] veth1_vlan: entered promiscuous mode
[ 1086.749971][ T6609] veth0_macvtap: entered promiscuous mode
[ 1086.787824][ T6609] veth1_macvtap: entered promiscuous mode
[ 1086.911249][ T7274] FAULT_INJECTION: forcing a failure.
[ 1086.911249][ T7274] name failslab, interval 1, probability 0, space 0, times 0
[ 1086.928575][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1086.950966][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1086.961993][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.7.4631 Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[ 1086.962029][ T7274] Tainted: [U]=USER
[ 1086.962037][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1086.962052][ T7274] Call Trace:
[ 1086.962060][ T7274]  <TASK>
[ 1086.962070][ T7274]  dump_stack_lvl+0x16c/0x1f0
[ 1086.962109][ T7274]  should_fail_ex+0x50a/0x650
[ 1086.962148][ T7274]  ? fs_reclaim_acquire+0xae/0x150
[ 1086.962185][ T7274]  should_failslab+0xc2/0x120
[ 1086.962209][ T7274]  __kmalloc_node_noprof+0xd1/0x510
[ 1086.962248][ T7274]  ? alloc_slab_obj_exts+0x41/0xa0
[ 1086.962286][ T7274]  alloc_slab_obj_exts+0x41/0xa0
[ 1086.962320][ T7274]  __memcg_slab_post_alloc_hook+0x2a7/0x9b0
[ 1086.962364][ T7274]  ? kasan_save_track+0x14/0x30
[ 1086.962411][ T7274]  kmem_cache_alloc_lru_noprof+0x363/0x3d0
[ 1086.962451][ T7274]  ? bdev_alloc_inode+0x26/0x90
[ 1086.962476][ T7274]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1086.962509][ T7274]  ? __pfx_bdev_alloc_inode+0x10/0x10
[ 1086.962534][ T7274]  bdev_alloc_inode+0x26/0x90
[ 1086.962559][ T7274]  ? __pfx_bdev_alloc_inode+0x10/0x10
[ 1086.962583][ T7274]  alloc_inode+0x5d/0x230
[ 1086.962609][ T7274]  new_inode+0x22/0x210
[ 1086.962632][ T7274]  ? rcu_is_watching+0x12/0xc0
[ 1086.962663][ T7274]  bdev_alloc+0x2b/0x420
[ 1086.962695][ T7274]  __alloc_disk_node+0x10c/0x610
[ 1086.962724][ T7274]  ? blk_alloc_queue+0x1a3/0x700
[ 1086.962755][ T7274]  __blk_alloc_disk+0xd8/0x170
[ 1086.962785][ T7274]  ? __pfx___blk_alloc_disk+0x10/0x10
[ 1086.962838][ T7274]  ? __pfx_idr_alloc+0x10/0x10
[ 1086.962869][ T7274]  ? __raw_spin_lock_init+0x3a/0x110
[ 1086.962912][ T7274]  ? __pfx_hot_add_show+0x10/0x10
[ 1086.962947][ T7274]  zram_add+0x160/0x6b0
[ 1086.962981][ T7274]  ? __pfx_zram_add+0x10/0x10
[ 1086.963034][ T7274]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1086.963066][ T7274]  ? rcu_is_watching+0x12/0xc0
[ 1086.963098][ T7274]  ? __pfx_hot_add_show+0x10/0x10
[ 1086.963132][ T7274]  hot_add_show+0x21/0x80
[ 1086.963165][ T7274]  class_attr_show+0x6f/0xa0
[ 1086.963199][ T7274]  ? __pfx_class_attr_show+0x10/0x10
[ 1086.963229][ T7274]  sysfs_kf_seq_show+0x23e/0x410
[ 1086.963266][ T7274]  seq_read_iter+0x4f4/0x12b0
[ 1086.963316][ T7274]  kernfs_fop_read_iter+0x414/0x580
[ 1086.963343][ T7274]  ? rw_verify_area+0xcf/0x680
[ 1086.963376][ T7274]  vfs_read+0x886/0xbf0
[ 1086.963428][ T7274]  ? __pfx_vfs_read+0x10/0x10
[ 1086.963486][ T7274]  ksys_read+0x12b/0x250
[ 1086.963517][ T7274]  ? __pfx_ksys_read+0x10/0x10
[ 1086.963562][ T7274]  do_syscall_64+0xcd/0x250
[ 1086.963598][ T7274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1086.963633][ T7274] RIP: 0033:0x7f96cab8d169
[ 1086.963654][ T7274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1086.963678][ T7274] RSP: 002b:00007f96ca9f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1086.963703][ T7274] RAX: ffffffffffffffda RBX: 00007f96cada5fa0 RCX: 00007f96cab8d169
[ 1086.963721][ T7274] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000007
[ 1086.963737][ T7274] RBP: 00007f96cac0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1086.963753][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1086.963767][ T7274] R13: 0000000000000000 R14: 00007f96cada5fa0 R15: 00007ffc6be0c0d8
[ 1086.963804][ T7274]  </TASK>
[ 1087.341354][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1087.355019][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.372813][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1087.384638][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.396546][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1087.431249][ T7274] zram: Added device: zram1
[ 1087.524487][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.586703][ T6609] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1087.724158][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1087.747805][ T7279] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1087.768091][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.782967][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1087.803665][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.815066][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1087.826824][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.837864][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1087.849606][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.862662][ T6609] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1087.882944][ T6609] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1087.910953][ T6609] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1087.931068][ T6609] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1087.945412][ T6609] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.206644][ T5837] Bluetooth: hci4: command tx timeout
[ 1088.378322][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1088.417515][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1088.545406][ T7339] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4634'.
[ 1088.576226][ T7330] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4634'.
[ 1088.577495][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1088.609444][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1088.625735][ T7330] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4634'.
[ 1089.446616][ T7370] ip6_vti0: entered allmulticast mode
[ 1089.783169][ T7424] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4645'.
[ 1090.723379][ T7507] FAULT_INJECTION: forcing a failure.
[ 1090.723379][ T7507] name failslab, interval 1, probability 0, space 0, times 0
[ 1090.737600][ T7507] CPU: 1 UID: 0 PID: 7507 Comm: syz.2.4642 Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[ 1090.737639][ T7507] Tainted: [U]=USER
[ 1090.737649][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1090.737664][ T7507] Call Trace:
[ 1090.737671][ T7507]  <TASK>
[ 1090.737682][ T7507]  dump_stack_lvl+0x16c/0x1f0
[ 1090.737721][ T7507]  should_fail_ex+0x50a/0x650
[ 1090.737758][ T7507]  ? fs_reclaim_acquire+0xae/0x150
[ 1090.737792][ T7507]  should_failslab+0xc2/0x120
[ 1090.737817][ T7507]  kmem_cache_alloc_lru_noprof+0x73/0x3d0
[ 1090.737858][ T7507]  ? bdev_alloc_inode+0x26/0x90
[ 1090.737883][ T7507]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1090.737915][ T7507]  ? __pfx_bdev_alloc_inode+0x10/0x10
[ 1090.737939][ T7507]  bdev_alloc_inode+0x26/0x90
[ 1090.737962][ T7507]  ? __pfx_bdev_alloc_inode+0x10/0x10
[ 1090.737986][ T7507]  alloc_inode+0x5d/0x230
[ 1090.738010][ T7507]  new_inode+0x22/0x210
[ 1090.738040][ T7507]  ? rcu_is_watching+0x12/0xc0
[ 1090.738071][ T7507]  bdev_alloc+0x2b/0x420
[ 1090.738104][ T7507]  __alloc_disk_node+0x10c/0x610
[ 1090.738136][ T7507]  ? blk_alloc_queue+0x1a3/0x700
[ 1090.738171][ T7507]  __blk_alloc_disk+0xd8/0x170
[ 1090.738201][ T7507]  ? __pfx___blk_alloc_disk+0x10/0x10
[ 1090.738257][ T7507]  ? __pfx_idr_alloc+0x10/0x10
[ 1090.738290][ T7507]  ? __raw_spin_lock_init+0x3a/0x110
[ 1090.738333][ T7507]  ? __pfx_hot_add_show+0x10/0x10
[ 1090.738367][ T7507]  zram_add+0x160/0x6b0
[ 1090.738401][ T7507]  ? __pfx_zram_add+0x10/0x10
[ 1090.738457][ T7507]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1090.738494][ T7507]  ? rcu_is_watching+0x12/0xc0
[ 1090.738525][ T7507]  ? __pfx_hot_add_show+0x10/0x10
[ 1090.738559][ T7507]  hot_add_show+0x21/0x80
[ 1090.738593][ T7507]  class_attr_show+0x6f/0xa0
[ 1090.738626][ T7507]  ? __pfx_class_attr_show+0x10/0x10
[ 1090.738657][ T7507]  sysfs_kf_seq_show+0x23e/0x410
[ 1090.738694][ T7507]  seq_read_iter+0x4f4/0x12b0
[ 1090.738743][ T7507]  kernfs_fop_read_iter+0x414/0x580
[ 1090.738770][ T7507]  ? rw_verify_area+0xcf/0x680
[ 1090.738804][ T7507]  vfs_read+0x886/0xbf0
[ 1090.738845][ T7507]  ? __pfx_vfs_read+0x10/0x10
[ 1090.738906][ T7507]  ksys_read+0x12b/0x250
[ 1090.738938][ T7507]  ? __pfx_ksys_read+0x10/0x10
[ 1090.738982][ T7507]  do_syscall_64+0xcd/0x250
[ 1090.739016][ T7507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1090.739058][ T7507] RIP: 0033:0x7fda96d8d169
[ 1090.739079][ T7507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1090.739102][ T7507] RSP: 002b:00007fda97b15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1090.739127][ T7507] RAX: ffffffffffffffda RBX: 00007fda96fa5fa0 RCX: 00007fda96d8d169
[ 1090.739143][ T7507] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000007
[ 1090.739157][ T7507] RBP: 00007fda96e0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1090.739171][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1090.739184][ T7507] R13: 0000000000000000 R14: 00007fda96fa5fa0 R15: 00007fff26d00d18
[ 1090.739216][ T7507]  </TASK>
[ 1090.741665][ T7507] zram: Error allocating disk structure for device 2
[ 1091.340591][ T7514] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1091.434318][ T7512] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1092.409929][ T7605] __nla_validate_parse: 5 callbacks suppressed
[ 1092.409951][ T7605] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4650'.
[ 1092.442515][ T7605] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4650'.
[ 1092.489032][ T7605] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4650'.
[ 1094.159425][ T7733] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4661'.
[ 1094.190768][ T7727] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4661'.
[ 1094.237172][ T7727] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4661'.
[ 1094.275058][ T7732] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4654'.
[ 1094.759605][ T7788] FAULT_INJECTION: forcing a failure.
[ 1094.759605][ T7788] name failslab, interval 1, probability 0, space 0, times 0
[ 1094.797911][ T7788] CPU: 1 UID: 0 PID: 7788 Comm: syz.7.4660 Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[ 1094.797953][ T7788] Tainted: [U]=USER
[ 1094.797962][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1094.797978][ T7788] Call Trace:
[ 1094.797986][ T7788]  <TASK>
[ 1094.797998][ T7788]  dump_stack_lvl+0x16c/0x1f0
[ 1094.798037][ T7788]  should_fail_ex+0x50a/0x650
[ 1094.798075][ T7788]  ? fs_reclaim_acquire+0xae/0x150
[ 1094.798112][ T7788]  should_failslab+0xc2/0x120
[ 1094.798137][ T7788]  kmem_cache_alloc_lru_noprof+0x73/0x3d0
[ 1094.798177][ T7788]  ? bdev_alloc_inode+0x26/0x90
[ 1094.798203][ T7788]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1094.798233][ T7788]  ? __pfx_bdev_alloc_inode+0x10/0x10
[ 1094.798256][ T7788]  bdev_alloc_inode+0x26/0x90
[ 1094.798278][ T7788]  ? __pfx_bdev_alloc_inode+0x10/0x10
[ 1094.798299][ T7788]  alloc_inode+0x5d/0x230
[ 1094.798323][ T7788]  new_inode+0x22/0x210
[ 1094.798342][ T7788]  ? rcu_is_watching+0x12/0xc0
[ 1094.798372][ T7788]  bdev_alloc+0x2b/0x420
[ 1094.798404][ T7788]  __alloc_disk_node+0x10c/0x610
[ 1094.798432][ T7788]  ? blk_alloc_queue+0x1a3/0x700
[ 1094.798463][ T7788]  __blk_alloc_disk+0xd8/0x170
[ 1094.798493][ T7788]  ? __pfx___blk_alloc_disk+0x10/0x10
[ 1094.798551][ T7788]  ? __pfx_idr_alloc+0x10/0x10
[ 1094.798584][ T7788]  ? __raw_spin_lock_init+0x3a/0x110
[ 1094.798628][ T7788]  ? __pfx_hot_add_show+0x10/0x10
[ 1094.798662][ T7788]  zram_add+0x160/0x6b0
[ 1094.798699][ T7788]  ? __pfx_zram_add+0x10/0x10
[ 1094.798757][ T7788]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1094.798794][ T7788]  ? rcu_is_watching+0x12/0xc0
[ 1094.798829][ T7788]  ? __pfx_hot_add_show+0x10/0x10
[ 1094.798864][ T7788]  hot_add_show+0x21/0x80
[ 1094.798896][ T7788]  class_attr_show+0x6f/0xa0
[ 1094.798928][ T7788]  ? __pfx_class_attr_show+0x10/0x10
[ 1094.798957][ T7788]  sysfs_kf_seq_show+0x23e/0x410
[ 1094.798992][ T7788]  seq_read_iter+0x4f4/0x12b0
[ 1094.799041][ T7788]  kernfs_fop_read_iter+0x414/0x580
[ 1094.799066][ T7788]  ? rw_verify_area+0xcf/0x680
[ 1094.799100][ T7788]  vfs_read+0x886/0xbf0
[ 1094.799139][ T7788]  ? __pfx_vfs_read+0x10/0x10
[ 1094.799195][ T7788]  ksys_read+0x12b/0x250
[ 1094.799224][ T7788]  ? __pfx_ksys_read+0x10/0x10
[ 1094.799266][ T7788]  do_syscall_64+0xcd/0x250
[ 1094.799298][ T7788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1094.799330][ T7788] RIP: 0033:0x7f96cab8d169
[ 1094.799351][ T7788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1094.799375][ T7788] RSP: 002b:00007f96ca9f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1094.799399][ T7788] RAX: ffffffffffffffda RBX: 00007f96cada5fa0 RCX: 00007f96cab8d169
[ 1094.799416][ T7788] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000007
[ 1094.799432][ T7788] RBP: 00007f96cac0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1094.799447][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1094.799461][ T7788] R13: 0000000000000000 R14: 00007f96cada5fa0 R15: 00007ffc6be0c0d8
[ 1094.799495][ T7788]  </TASK>
[ 1095.173518][ T7788] zram: Error allocating disk structure for device 2
[ 1096.362768][ T7837] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1096.736042][ T7903] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1097.109769][ T7938] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4669'.
[ 1097.121147][ T7938] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4669'.
[ 1097.148608][ T7938] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4669'.
[ 1097.606888][ T7961] __nla_validate_parse: 1 callbacks suppressed
[ 1097.606910][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4676'.
[ 1097.654991][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4676'.
[ 1099.255862][ T8033] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1099.343875][ T8094] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1099.882547][ T8148] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4686'.
[ 1099.902907][ T8148] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4686'.
[ 1099.933641][ T8132] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4686'.
[ 1100.002139][ T8177] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4687'.
[ 1101.911147][ T8347] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1102.203980][ T8351] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1102.490620][ T8393] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4700'.
[ 1102.516863][ T8393] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4700'.
[ 1102.591880][ T8383] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4700'.
[ 1105.703014][ T8648] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1105.986071][ T8656] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4712'.
[ 1105.998270][ T8656] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4712'.
[ 1106.105259][ T8656] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4712'.
[ 1106.444311][ T8698] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1106.959696][ T8720] delete_channel: no stack
[ 1108.687113][ T8882] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1110.345263][ T8987] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4726'.
[ 1110.441836][ T8985] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4726'.
[ 1110.473274][ T8985] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4726'.
[ 1110.795830][ T8991] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1111.233160][ T9056] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4737'.
[ 1111.303400][ T9056] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4737'.
[ 1111.336176][ T9056] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4737'.
[ 1111.957249][ T9104] delete_channel: no stack
[ 1113.853682][ T9186] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1113.881191][ T9186] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1113.922531][ T9186] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1113.976981][ T9186] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1114.115317][ T9186] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1114.122033][ T9186] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1114.256886][ T9186] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1114.312516][ T9186] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1114.399238][ T9186] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1114.603871][ T9186] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1114.610461][ T9186] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1114.935551][ T9186] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1114.989856][ T9261] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1115.093238][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1115.266007][ T9328] bridge0: port 3(batadv0) entered blocking state
[ 1115.302440][ T9328] bridge0: port 3(batadv0) entered disabled state
[ 1115.309719][ T9328] batadv0: entered allmulticast mode
[ 1115.460193][ T9328] batadv0: entered promiscuous mode
[ 1115.464316][T10969] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1115.473589][ T9322] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4741'.
[ 1115.476367][T10969] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1115.502863][ T9328] bridge0: port 3(batadv0) entered blocking state
[ 1115.510058][ T9328] bridge0: port 3(batadv0) entered forwarding state
[ 1115.580252][ T9309] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4741'.
[ 1115.726423][ T9322] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4741'.
[ 1115.892396][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1115.972380][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[ 1116.137868][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[ 1116.292388][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1116.375691][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.392282][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.618143][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1116.702732][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4746'.
[ 1118.052441][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[ 1118.212252][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[ 1118.373818][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1118.692754][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1119.384111][ T9502] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4757'.
[ 1119.422509][ T9502] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4757'.
[ 1119.513329][ T9502] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4757'.
[ 1120.011290][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4764'.
[ 1120.452818][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1120.773232][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1121.089583][ T9689] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4771'.
[ 1121.127916][ T9689] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4771'.
[ 1121.143301][ T9689] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4771'.
[ 1122.297275][ T9726] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª~ÿ:0 is already present
[ 1122.405474][ T9727] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4785'.
[ 1122.477667][ T9727] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4785'.
[ 1122.581304][ T9727] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4785'.
[ 1124.770921][T16062] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1124.793011][T16062] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1124.824239][T16062] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1124.840629][T16062] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1124.855975][T16062] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1124.864823][T16062] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1125.236970][ T9910] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4795'.
[ 1125.293165][ T9882] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4795'.
[ 1125.326081][ T9882] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4795'.
[ 1125.405542][ T9877] chnl_net:caif_netlink_parms(): no params data found
[ 1125.925262][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4798'.
[ 1125.969933][ T9877] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1125.992789][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1126.005570][ T9877] bridge_slave_0: entered allmulticast mode
[ 1126.023642][ T9877] bridge_slave_0: entered promiscuous mode
[ 1126.113032][ T9877] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1126.121516][ T9877] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1126.130071][ T9877] bridge_slave_1: entered allmulticast mode
[ 1126.141356][ T9877] bridge_slave_1: entered promiscuous mode
[ 1126.229926][ T9877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1126.264034][ T9877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1126.345507][ T9877] team0: Port device team_slave_0 added
[ 1126.367514][ T9877] team0: Port device team_slave_1 added
[ 1126.421205][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1126.430364][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1126.458991][ T9877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1126.484019][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1126.496480][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1126.527147][ T9877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1126.611395][ T6119] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1126.723479][ T6119] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1126.744539][ T9877] hsr_slave_0: entered promiscuous mode
[ 1126.751678][ T9877] hsr_slave_1: entered promiscuous mode
[ 1126.759198][ T9877] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1126.769003][ T9877] Cannot create hsr debugfs directory
[ 1126.885332][ T6119] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1126.932390][T16062] Bluetooth: hci6: command tx timeout
[ 1127.107364][ T6119] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1127.651246][ T6119] team0: left allmulticast mode
[ 1127.675141][T10285] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4805'.
[ 1127.677621][ T6119] team_slave_0: left allmulticast mode
[ 1127.699065][ T6119] team_slave_1: left allmulticast mode
[ 1127.711630][ T6119] team0: left promiscuous mode
[ 1127.718207][T10285] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4805'.
[ 1127.743705][T10285] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4805'.
[ 1127.753030][ T6119] team_slave_0: left promiscuous mode
[ 1127.760018][ T6119] team_slave_1: left promiscuous mode
[ 1127.779106][ T6119] bridge0: port 4(team0) entered disabled state
[ 1127.829643][ T6119] batadv0: left allmulticast mode
[ 1127.846344][ T6119] batadv0: left promiscuous mode
[ 1127.858145][ T6119] bridge0: port 3(batadv0) entered disabled state
[ 1127.872453][ T6119] bridge_slave_1: left allmulticast mode
[ 1127.878722][ T6119] bridge_slave_1: left promiscuous mode
[ 1127.885449][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1127.908215][ T6119] bridge_slave_0: left allmulticast mode
[ 1127.915153][ T6119] bridge_slave_0: left promiscuous mode
[ 1127.926581][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1128.061467][ T6119] ip6_vti0 (unregistering): left allmulticast mode
[ 1128.390304][ T6119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1128.406916][ T6119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1128.417715][ T6119] bond0 (unregistering): Released all slaves
[ 1128.540620][ T6119] 
: left promiscuous mode
[ 1128.696812][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4809'.
[ 1129.022291][T16062] Bluetooth: hci6: command tx timeout
[ 1129.519635][ T9877] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1129.565106][ T9877] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1129.594648][ T9877] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1129.614006][T10403] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4816'.
[ 1129.625718][T10403] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4816'.
[ 1129.637072][ T6119] hsr_slave_0: left promiscuous mode
[ 1129.637494][T10403] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4816'.
[ 1129.659724][ T6119] hsr_slave_1: left promiscuous mode
[ 1129.672725][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1129.681159][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1129.763537][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1129.787331][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1129.825011][ T6119] veth1_macvtap: left promiscuous mode
[ 1129.831115][ T6119] veth0_macvtap: left promiscuous mode
[ 1129.837381][ T6119] veth1_vlan: left promiscuous mode
[ 1129.846458][ T6119] veth0_vlan: left promiscuous mode
[ 1130.250804][T10425] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª~ÿ:0 is already present
[ 1130.551981][ T6119] team0 (unregistering): Port device team_slave_1 removed
[ 1130.608799][ T6119] team0 (unregistering): Port device team_slave_0 removed
[ 1131.095210][T16062] Bluetooth: hci6: command tx timeout
[ 1131.205312][ T9877] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1131.793444][ T9877] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1131.960958][ T9877] 8021q: adding VLAN 0 to HW filter on device team0
[ 1132.003727][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1132.011568][ T6116] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1132.049310][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1132.057166][ T6116] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1132.263088][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4827'.
[ 1132.545293][ T9877] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1132.593988][T10528] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1132.701925][T10540] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4828'.
[ 1132.714264][T10540] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4828'.
[ 1132.734619][T10537] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4828'.
[ 1133.058454][ T9877] veth0_vlan: entered promiscuous mode
[ 1133.123254][ T9877] veth1_vlan: entered promiscuous mode
[ 1133.172425][T16062] Bluetooth: hci6: command tx timeout
[ 1133.248708][ T9877] veth0_macvtap: entered promiscuous mode
[ 1133.291875][ T9877] veth1_macvtap: entered promiscuous mode
[ 1133.341231][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1133.357943][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.371462][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1133.394663][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.406420][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1133.418471][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.429455][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1133.441072][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.456287][ T9877] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1133.473359][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1133.486361][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.498206][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1133.509826][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.520979][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1133.532852][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.543815][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1133.556096][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.568032][ T9877] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1133.583699][ T9877] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1133.594349][ T9877] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1133.603972][ T9877] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1133.613634][ T9877] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1133.697834][ T6116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1133.711717][ T6116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1133.735534][ T4521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1133.745350][ T4521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1133.864501][T10603] netlink: 314 bytes leftover after parsing attributes in process `syz.9.4843'.
[ 1133.894939][T10603] netlink: 'syz.9.4843': attribute type 1 has an invalid length.
[ 1133.976147][T10612] bridge0: port 3(batadv0) entered blocking state
[ 1133.990035][T10612] bridge0: port 3(batadv0) entered disabled state
[ 1134.019661][T10612] batadv0: entered allmulticast mode
[ 1134.031454][T10612] batadv0: entered promiscuous mode
[ 1134.039482][T10612] bridge0: port 3(batadv0) entered blocking state
[ 1134.046629][T10612] bridge0: port 3(batadv0) entered forwarding state
[ 1134.220930][ T4521] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1134.231225][ T4521] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1136.095766][T10666] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4840'.
[ 1136.129775][T10666] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4840'.
[ 1136.161652][T10662] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4840'.
[ 1136.183342][T10663] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª~ÿ:0 is already present
[ 1137.032089][T10742] bridge0: port 3(batadv0) entered blocking state
[ 1137.044075][T10742] bridge0: port 3(batadv0) entered disabled state
[ 1137.074055][T10742] batadv0: entered allmulticast mode
[ 1137.093394][T10742] batadv0: entered promiscuous mode
[ 1137.112649][T10742] bridge0: port 3(batadv0) entered blocking state
[ 1137.119771][T10742] bridge0: port 3(batadv0) entered forwarding state
[ 1137.245727][T12817] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1137.256186][T12817] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1137.384903][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4855'.
[ 1137.940470][T10763] tipc: Started in network mode
[ 1137.982368][T10763] tipc: Node identity ee00, cluster identity 4711
[ 1137.989491][T10763] tipc: Node number set to 60928
[ 1138.041610][T10764] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4860'.
[ 1138.099128][T10761] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4860'.
[ 1138.138712][T10761] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4860'.
[ 1138.874974][T10804] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª~ÿ:0 is already present
[ 1139.551618][T10859] bridge0: port 3(batadv0) entered blocking state
[ 1139.558817][T10859] bridge0: port 3(batadv0) entered disabled state
[ 1139.566493][T10859] batadv0: entered allmulticast mode
[ 1139.579386][T10859] batadv0: entered promiscuous mode
[ 1139.586795][T10859] bridge0: port 3(batadv0) entered blocking state
[ 1139.593998][T10859] bridge0: port 3(batadv0) entered forwarding state
[ 1139.872432][ T6119] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1139.882958][ T6119] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1140.210065][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4871'.
[ 1140.477939][T10916] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4875'.
[ 1140.536402][T10914] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4875'.
[ 1140.603543][T10914] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4875'.
[ 1140.777136][T10933] netlink: 500 bytes leftover after parsing attributes in process `syz.9.4877'.
[ 1140.832513][T10930] netlink: 500 bytes leftover after parsing attributes in process `syz.9.4877'.
[ 1140.883332][T10930] netlink: 350 bytes leftover after parsing attributes in process `syz.9.4877'.
[ 1141.093058][T10936] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1141.411959][T10977] netlink: 'syz.2.4884': attribute type 1 has an invalid length.
[ 1142.171759][T11029] tipc: Started in network mode
[ 1142.178098][T11029] tipc: Node identity ee00, cluster identity 4711
[ 1142.193625][T11029] tipc: Node number set to 60928
[ 1143.296791][T11085] __nla_validate_parse: 5 callbacks suppressed
[ 1143.296813][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4897'.
[ 1143.643402][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4900'.
[ 1143.661531][T11078] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1143.952372][T11123] netlink: 314 bytes leftover after parsing attributes in process `syz.7.4901'.
[ 1144.032372][T11123] netlink: 'syz.7.4901': attribute type 1 has an invalid length.
[ 1144.310232][T11143] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4902'.
[ 1144.321312][T11143] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4902'.
[ 1144.378919][T11155] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4902'.
[ 1145.225885][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4912'.
[ 1145.500775][T11220] netlink: 314 bytes leftover after parsing attributes in process `syz.2.4914'.
[ 1145.518073][T11220] netlink: 'syz.2.4914': attribute type 1 has an invalid length.
[ 1146.243795][T11265] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4916'.
[ 1146.285325][T11265] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4916'.
[ 1148.170085][T11353] ip6_vti0: entered allmulticast mode
[ 1149.191630][T11408] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1150.248297][T11496] __nla_validate_parse: 1 callbacks suppressed
[ 1150.248320][T11496] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4937'.
[ 1150.367146][T11495] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4937'.
[ 1150.403749][T11495] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4937'.
[ 1150.643115][T11502] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4938'.
[ 1150.714334][T11501] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4938'.
[ 1150.733178][T11501] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4938'.
[ 1151.497780][T11533] sp0: Synchronizing with TNC
[ 1153.112952][T11634] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4947'.
[ 1153.152470][T11631] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4947'.
[ 1153.184114][T11631] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4947'.
[ 1153.724560][T11653] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4950'.
[ 1154.886421][T11726] sp0: Synchronizing with TNC
[ 1155.369324][T11748] netlink: set zone limit has 8 unknown bytes
[ 1156.214018][T11794] __nla_validate_parse: 2 callbacks suppressed
[ 1156.214043][T11794] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4963'.
[ 1156.263953][T11784] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4963'.
[ 1156.276428][T11784] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4963'.
[ 1156.529027][T11814] netlink: 500 bytes leftover after parsing attributes in process `syz.8.4964'.
[ 1156.542333][T11814] netlink: 500 bytes leftover after parsing attributes in process `syz.8.4964'.
[ 1156.555021][T11814] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4964'.
[ 1156.740738][T11832] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1157.335627][T11891] sp0: Synchronizing with TNC
[ 1163.336886][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1163.348613][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1163.360011][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1163.367106][T11904] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4973'.
[ 1163.391976][T11904] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4973'.
[ 1163.406221][T11904] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4973'.
[ 1163.416570][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1163.429328][ T5837] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1163.434328][T11908] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4974'.
[ 1163.449894][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1163.476734][T11906] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4974'.
[ 1163.531061][T11906] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4974'.
[ 1163.871443][T11911] chnl_net:caif_netlink_parms(): no params data found
[ 1164.009252][T12034] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4983'.
[ 1164.020392][T12034] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4983'.
[ 1164.047123][T12028] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4983'.
[ 1164.064057][T11911] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1164.073920][T12032] netlink: 500 bytes leftover after parsing attributes in process `syz.8.4977'.
[ 1164.081549][T11911] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1164.101646][T11911] bridge_slave_0: entered allmulticast mode
[ 1164.109403][T11911] bridge_slave_0: entered promiscuous mode
[ 1164.129010][T11911] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1164.137347][T11911] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1164.147580][T11911] bridge_slave_1: entered allmulticast mode
[ 1164.156028][T11911] bridge_slave_1: entered promiscuous mode
[ 1164.227516][T11911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1164.270084][T11911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1164.362619][T11911] team0: Port device team_slave_0 added
[ 1164.374787][T11911] team0: Port device team_slave_1 added
[ 1164.426519][T11911] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1164.448285][T11911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1164.508991][T11911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1164.547344][T11911] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1164.555556][T11911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1164.587570][T11911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1164.714767][T11911] hsr_slave_0: entered promiscuous mode
[ 1164.721947][T11911] hsr_slave_1: entered promiscuous mode
[ 1164.729743][T11911] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1164.739804][T11911] Cannot create hsr debugfs directory
[ 1165.492959][T16062] Bluetooth: hci5: command tx timeout
[ 1166.196315][T11911] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1166.251907][T11911] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1166.289249][T11911] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1166.313619][T11911] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1166.470929][T11911] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1166.510302][T11911] 8021q: adding VLAN 0 to HW filter on device team0
[ 1166.531618][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1166.539476][ T6116] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1166.584092][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1166.591911][ T6116] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1166.823390][T11911] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1167.126728][T11911] veth0_vlan: entered promiscuous mode
[ 1167.139406][T11911] veth1_vlan: entered promiscuous mode
[ 1167.185910][T11911] veth0_macvtap: entered promiscuous mode
[ 1167.210196][T11911] veth1_macvtap: entered promiscuous mode
[ 1167.246081][T11911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1167.271506][T11911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.283032][T11911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1167.294642][T11911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.305846][T11911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1167.321726][T11911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.346620][T11911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1167.362185][T11911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.381747][T11911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1167.401926][T11911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.431242][T11911] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1167.464851][T11911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1167.487792][T11911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.507754][T11911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1167.521744][T11911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.542231][T11911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1167.564569][T11911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.578943][T16062] Bluetooth: hci5: command tx timeout
[ 1167.601038][T11911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1167.620530][T11911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.631625][T11911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1167.658469][T11911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.681464][T11911] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1167.716486][T11911] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.726421][T11911] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.736732][T11911] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.747422][T11911] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.845727][T10969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1167.856334][T10969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1167.900814][ T6116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1167.915929][ T6116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1169.169210][T12557] __nla_validate_parse: 2 callbacks suppressed
[ 1169.169230][T12557] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4987'.
[ 1169.240821][T12550] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4987'.
[ 1169.292690][T12557] netlink: 350 bytes leftover after parsing attributes in process `syz.8.4987'.
[ 1169.652433][T16062] Bluetooth: hci5: command tx timeout
[ 1169.863617][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1169.877476][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1169.888401][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1169.901249][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1169.910246][ T5837] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1169.918439][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1170.283696][T12584] chnl_net:caif_netlink_parms(): no params data found
[ 1170.580149][T12584] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1170.612377][T12584] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1170.640623][T12584] bridge_slave_0: entered allmulticast mode
[ 1170.663857][T12584] bridge_slave_0: entered promiscuous mode
[ 1170.688754][T12584] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1170.707098][T12584] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.732767][T12584] bridge_slave_1: entered allmulticast mode
[ 1170.753572][T12584] bridge_slave_1: entered promiscuous mode
[ 1170.986004][T12584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1171.029410][T12584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1171.040484][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4999'.
[ 1171.191422][T12816] netlink: 504 bytes leftover after parsing attributes in process `syz.5.4998'.
[ 1171.219982][T12816] netlink: 504 bytes leftover after parsing attributes in process `syz.5.4998'.
[ 1171.227148][T12584] team0: Port device team_slave_0 added
[ 1171.244702][T12816] netlink: 350 bytes leftover after parsing attributes in process `syz.5.4998'.
[ 1171.344044][T12584] team0: Port device team_slave_1 added
[ 1171.446825][T12584] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1171.482795][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1171.517364][T12584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1171.542450][T12584] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1171.550130][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1171.579880][T12584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1171.666957][T12584] hsr_slave_0: entered promiscuous mode
[ 1171.679829][T12584] hsr_slave_1: entered promiscuous mode
[ 1171.688714][T12584] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1171.700939][T12584] Cannot create hsr debugfs directory
[ 1171.733370][T16062] Bluetooth: hci5: command tx timeout
[ 1171.973104][T16062] Bluetooth: hci7: command tx timeout
[ 1172.252912][T12996] netlink: 350 bytes leftover after parsing attributes in process `syz.2.5004'.
[ 1172.305974][T12977] tipc: Started in network mode
[ 1172.312018][T12977] tipc: Node identity ee00, cluster identity 4711
[ 1172.323755][T12977] tipc: Node number set to 60928
[ 1173.526786][T12584] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1173.768021][T12584] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1173.838486][T12584] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1173.934367][T13166] Process accounting resumed
[ 1173.954215][T12584] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1174.052428][T16062] Bluetooth: hci7: command tx timeout
[ 1174.249200][T13198] netlink: 504 bytes leftover after parsing attributes in process `syz.5.5009'.
[ 1174.261306][T13198] netlink: 504 bytes leftover after parsing attributes in process `syz.5.5009'.
[ 1174.294433][T13198] netlink: 350 bytes leftover after parsing attributes in process `syz.5.5009'.
[ 1174.327583][T12584] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1174.381554][T12584] 8021q: adding VLAN 0 to HW filter on device team0
[ 1174.399467][T10969] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1174.407307][T10969] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1174.475943][T10969] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1174.483797][T10969] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1174.533842][T12584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1174.562086][T12584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1175.116691][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5013'.
[ 1175.221028][T12584] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1175.432020][T13270] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5014'.
[ 1175.450486][T12584] veth0_vlan: entered promiscuous mode
[ 1175.499307][T12584] veth1_vlan: entered promiscuous mode
[ 1175.505696][T13265] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5014'.
[ 1175.570729][T12584] veth0_macvtap: entered promiscuous mode
[ 1175.577478][T13265] netlink: 350 bytes leftover after parsing attributes in process `syz.5.5014'.
[ 1175.602028][T12584] veth1_macvtap: entered promiscuous mode
[ 1175.646112][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1175.672401][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1175.684847][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1175.697858][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1175.709170][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1175.721254][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1175.733112][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1175.745125][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1175.756486][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1175.768969][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1175.780841][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1175.793686][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1175.823383][T12584] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1175.866228][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1175.891371][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1175.919801][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1175.962380][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1176.002235][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1176.023830][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1176.035267][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1176.062230][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1176.082596][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1176.105213][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1176.131264][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1176.143096][T16062] Bluetooth: hci7: command tx timeout
[ 1176.162403][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1176.175500][T12584] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1176.190228][T12584] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1176.210166][T12584] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1176.232515][T12584] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1176.232552][T12584] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1176.673651][ T6119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1176.714006][ T6119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1176.910376][ T6119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1176.935062][ T6119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1177.497490][T13412] ip6_vti0: entered allmulticast mode
[ 1177.679506][T13437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5018'.
[ 1177.818338][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.825564][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.019886][T13440] netlink: 504 bytes leftover after parsing attributes in process `syz.2.5019'.
[ 1178.021703][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5022'.
[ 1178.212632][T16062] Bluetooth: hci7: command tx timeout
[ 1180.401019][T13611] __nla_validate_parse: 8 callbacks suppressed
[ 1180.401040][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5030'.
[ 1180.413574][T13597] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1181.342831][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5036'.
[ 1181.991052][T13721] netlink: 504 bytes leftover after parsing attributes in process `syz.2.5038'.
[ 1182.033490][T13721] netlink: 504 bytes leftover after parsing attributes in process `syz.2.5038'.
[ 1182.078463][T13710] netlink: 350 bytes leftover after parsing attributes in process `syz.2.5038'.
[ 1185.139148][T13909] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1185.281786][T13951] netlink: 504 bytes leftover after parsing attributes in process `syz.2.5048'.
[ 1185.310728][T13951] netlink: 504 bytes leftover after parsing attributes in process `syz.2.5048'.
[ 1185.354434][T13947] netlink: 350 bytes leftover after parsing attributes in process `syz.2.5048'.
[ 1185.938852][ T5837] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1185.953962][ T5837] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1185.962950][ T5837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1185.982400][ T5837] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1186.002370][ T5837] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1186.010741][ T5837] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1186.589658][T14091] netlink: 504 bytes leftover after parsing attributes in process `syz.5.5060'.
[ 1186.638426][T14091] netlink: 504 bytes leftover after parsing attributes in process `syz.5.5060'.
[ 1186.700031][T14053] netlink: 350 bytes leftover after parsing attributes in process `syz.5.5060'.
[ 1186.710404][T14016] chnl_net:caif_netlink_parms(): no params data found
[ 1187.287886][T14016] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1187.318109][T14016] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1187.342495][T14016] bridge_slave_0: entered allmulticast mode
[ 1187.363491][T14183] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1187.363895][T14016] bridge_slave_0: entered promiscuous mode
[ 1187.409852][T14016] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1187.428430][T14016] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1187.447866][T14016] bridge_slave_1: entered allmulticast mode
[ 1187.466337][T14016] bridge_slave_1: entered promiscuous mode
[ 1187.746491][T14016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1187.786306][T14016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1187.998832][T14016] team0: Port device team_slave_0 added
[ 1188.034031][T14016] team0: Port device team_slave_1 added
[ 1188.056369][T16062] Bluetooth: hci8: command tx timeout
[ 1188.213423][T14016] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1188.232299][T14016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1188.292082][T14016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1188.345967][T14364] ip6_vti0: entered allmulticast mode
[ 1188.353470][T14016] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1188.361404][T14016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1188.390887][T14016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1188.585409][T14016] hsr_slave_0: entered promiscuous mode
[ 1188.596603][T14016] hsr_slave_1: entered promiscuous mode
[ 1188.613159][T14016] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1188.631882][T14016] Cannot create hsr debugfs directory
[ 1190.133043][T16062] Bluetooth: hci8: command tx timeout
[ 1190.491159][T14016] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1190.503201][T14016] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1190.514889][T14016] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1190.536064][T14016] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1190.655544][T14016] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1190.690989][T14016] 8021q: adding VLAN 0 to HW filter on device team0
[ 1190.731284][T31273] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1190.739175][T31273] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1190.761268][T31273] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1190.769141][T31273] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1191.050532][T14016] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1191.335188][T14016] veth0_vlan: entered promiscuous mode
[ 1191.355396][T14016] veth1_vlan: entered promiscuous mode
[ 1191.387555][T14016] veth0_macvtap: entered promiscuous mode
[ 1191.401292][T14016] veth1_macvtap: entered promiscuous mode
[ 1191.421555][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1191.433493][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.445697][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1191.457275][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.468099][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1191.479654][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.490477][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1191.502457][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.514480][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1191.526167][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.537632][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1191.549932][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.560942][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1191.572930][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.593490][T14016] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1191.613981][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1191.626174][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.639217][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1191.650903][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.668517][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1191.680059][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.691045][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1191.702644][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.714156][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1191.725740][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.737619][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1191.749476][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.760363][T14016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1191.771839][T14016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.783993][T14016] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1191.794524][T14016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.804165][T14016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.815600][T14016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.826281][T14016] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.938488][T31273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1191.957804][T31273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1191.996898][T31273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1192.006434][T31273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1192.212617][T16062] Bluetooth: hci8: command tx timeout
[ 1192.517634][T14678] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5072'.
[ 1192.548989][T14678] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5072'.
[ 1192.592831][T14678] netlink: 350 bytes leftover after parsing attributes in process `syz.2.5072'.
[ 1192.796345][T14707] netlink: 504 bytes leftover after parsing attributes in process `syz.1.5064'.
[ 1192.911409][T14698] netlink: 504 bytes leftover after parsing attributes in process `syz.1.5064'.
[ 1192.938431][T14698] netlink: 350 bytes leftover after parsing attributes in process `syz.1.5064'.
[ 1193.744999][T14774] netlink: set zone limit has 8 unknown bytes
[ 1193.820115][T14761] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1194.295566][T16062] Bluetooth: hci8: command tx timeout
[ 1194.401159][T14815] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5074'.
[ 1194.424008][T14815] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5074'.
[ 1194.437006][T14829] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1194.448732][T14815] netlink: 350 bytes leftover after parsing attributes in process `syz.4.5074'.
[ 1195.406361][T14916] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5077'.
[ 1195.582198][T14941] cougar: G6 mapped to space
[ 1196.792891][T14974] netlink: set zone limit has 8 unknown bytes
[ 1197.661554][T14997] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1198.184414][T15045] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1198.566688][T15087] __nla_validate_parse: 11 callbacks suppressed
[ 1198.566709][T15087] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5091'.
[ 1198.672459][T15087] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5091'.
[ 1198.751257][T15087] netlink: 350 bytes leftover after parsing attributes in process `syz.5.5091'.
[ 1199.996751][T15209] netlink: 504 bytes leftover after parsing attributes in process `syz.5.5098'.
[ 1200.008976][T15209] netlink: 504 bytes leftover after parsing attributes in process `syz.5.5098'.
[ 1200.044641][T15209] netlink: 350 bytes leftover after parsing attributes in process `syz.5.5098'.
[ 1201.418376][T15272] netlink: set zone limit has 8 unknown bytes
[ 1201.581776][T15275] netlink: 350 bytes leftover after parsing attributes in process `syz.5.5111'.
[ 1202.548289][T15341] Process accounting resumed
[ 1203.865187][T15432] netlink: 350 bytes leftover after parsing attributes in process `syz.1.5119'.
[ 1203.873995][T15410] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5125'.
[ 1203.938226][T15397] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5125'.
[ 1203.964506][T15397] netlink: 350 bytes leftover after parsing attributes in process `syz.2.5125'.
[ 1204.700109][T15458] netlink: 350 bytes leftover after parsing attributes in process `syz.2.5131'.
[ 1204.947560][T15394] Process accounting paused
[ 1205.414880][T15499] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1205.775131][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5127'.
[ 1207.172902][T15625] Process accounting resumed
[ 1207.238528][T15640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5132'.
[ 1208.174105][T15647] vhci_hcd: not connected 4
[ 1208.229147][T15656] netlink: 350 bytes leftover after parsing attributes in process `syz.1.5135'.
[ 1209.572571][T15693] ip6_vti0: entered allmulticast mode
[ 1209.747716][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5140'.
[ 1211.806901][T15845] snd_aloop snd_aloop.0: control 1:10:6:¢¸è_ÅheºRŸª:0 is already present
[ 1212.148112][T15921] netlink: 350 bytes leftover after parsing attributes in process `syz.2.5146'.
[ 1212.341720][T15894] caif:caif_disconnect_client(): nothing to disconnect
[ 1212.372488][   T30] INFO: task syz.3.4553:5948 blocked for more than 143 seconds.
[ 1212.372531][   T30]       Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[ 1212.372550][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1212.372563][   T30] task:syz.3.4553      state:D stack:26560 pid:5948  tgid:5945  ppid:3423   task_flags:0x400140 flags:0x00000004
[ 1212.372646][   T30] Call Trace:
[ 1212.372656][   T30]  <TASK>
[ 1212.372671][   T30]  __schedule+0xf43/0x5890
[ 1212.372705][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1212.372740][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1212.372784][   T30]  ? __pfx___schedule+0x10/0x10
[ 1212.372813][   T30]  ? schedule+0x298/0x350
[ 1212.372839][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1212.372876][   T30]  ? lock_acquire+0x2f/0xb0
[ 1212.372907][   T30]  ? schedule+0x1fd/0x350
[ 1212.372936][   T30]  schedule+0xe7/0x350
[ 1212.372962][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1212.372989][   T30]  __mutex_lock+0x6bd/0xb10
[ 1212.373023][   T30]  ? nfsd_nl_version_set_doit+0xc5/0x7a0
[ 1212.373061][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1212.373090][   T30]  ? __nla_validate_parse+0x601/0x2880
[ 1212.373127][   T30]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1212.373163][   T30]  ? nfsd_nl_version_set_doit+0xc5/0x7a0
[ 1212.373198][   T30]  nfsd_nl_version_set_doit+0xc5/0x7a0
[ 1212.373236][   T30]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[ 1212.373279][   T30]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[ 1212.373323][   T30]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[ 1212.373368][   T30]  genl_family_rcv_msg_doit+0x202/0x2f0
[ 1212.373407][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1212.373444][   T30]  ? trace_cap_capable+0x1a2/0x210
[ 1212.373481][   T30]  ? bpf_lsm_capable+0x9/0x10
[ 1212.373507][   T30]  ? security_capable+0x7e/0x260
[ 1212.373540][   T30]  genl_rcv_msg+0x565/0x800
[ 1212.373578][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1212.373611][   T30]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[ 1212.373658][   T30]  netlink_rcv_skb+0x16b/0x440
[ 1212.373688][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1212.373724][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1212.373768][   T30]  ? down_read+0xc9/0x330
[ 1212.373801][   T30]  ? __pfx_down_read+0x10/0x10
[ 1212.373833][   T30]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1212.373867][   T30]  genl_rcv+0x28/0x40
[ 1212.373899][   T30]  netlink_unicast+0x53c/0x7f0
[ 1212.373935][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[ 1212.373969][   T30]  ? __phys_addr_symbol+0x30/0x80
[ 1212.373994][   T30]  ? __check_object_size+0x488/0x710
[ 1212.374023][   T30]  netlink_sendmsg+0x8b8/0xd70
[ 1212.374060][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1212.374107][   T30]  ____sys_sendmsg+0xaaf/0xc90
[ 1212.374136][   T30]  ? copy_msghdr_from_user+0x10b/0x160
[ 1212.374172][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1212.374217][   T30]  ___sys_sendmsg+0x135/0x1e0
[ 1212.374254][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1212.374311][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1212.374344][   T30]  ? trace_lock_acquire+0x14e/0x1f0
[ 1212.374386][   T30]  ? __fget_files+0x206/0x3a0
[ 1212.374430][   T30]  __sys_sendmsg+0x16e/0x220
[ 1212.374465][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1212.374501][   T30]  ? __x64_sys_futex+0x1e1/0x4c0
[ 1212.374553][   T30]  do_syscall_64+0xcd/0x250
[ 1212.374587][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1212.374621][   T30] RIP: 0033:0x7f17a518d169
[ 1212.374641][   T30] RSP: 002b:00007f17a5fcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1212.374666][   T30] RAX: ffffffffffffffda RBX: 00007f17a53a5fa0 RCX: 00007f17a518d169
[ 1212.374684][   T30] RDX: 000000000000c010 RSI: 00004000000004c0 RDI: 0000000000000006
[ 1212.374701][   T30] RBP: 00007f17a520e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1212.374717][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1212.374734][   T30] R13: 0000000000000000 R14: 00007f17a53a5fa0 R15: 00007ffe1161c528
[ 1212.374769][   T30]  </TASK>
[ 1212.374798][   T30] 
[ 1212.374798][   T30] Showing all locks held in the system:
[ 1212.374813][   T30] 1 lock held by khungtaskd/30:
[ 1212.374828][   T30]  #0: ffffffff8e1bccc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390
[ 1212.374939][   T30] 2 locks held by kworker/u8:11/6116:
[ 1212.374957][   T30] 2 locks held by kworker/u8:20/10969:
[ 1212.374973][   T30]  #0: ffff8881413cd148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[ 1212.375047][   T30]  #1: ffffc9000ecafd18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[ 1212.375121][   T30] 4 locks held by kworker/u8:29/15699:
[ 1212.375138][   T30]  #0: ffff88801bef5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[ 1212.375210][   T30]  #1: ffffc90002e77d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[ 1212.375289][   T30]  #2: ffffffff8fee3210 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30
[ 1212.375354][   T30]  #3: ffffffff8e1c8138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0
[ 1212.375431][   T30] 2 locks held by syz-executor/27022:
[ 1212.375448][   T30]  #0: ffff888070c1a0e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[ 1212.375527][   T30]  #1: ffffffff8e5bfe68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 1212.375599][   T30] 2 locks held by syz-executor/28062:
[ 1212.375615][   T30]  #0: ffff888047fa80e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[ 1212.375692][   T30]  #1: ffffffff8e5bfe68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 1212.375765][   T30] 2 locks held by getty/1257:
[ 1212.375780][   T30]  #0: ffff88803524a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1212.375843][   T30]  #1: ffffc90003d332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480
[ 1212.375916][   T30] 2 locks held by syz.6.4387/3029:
[ 1212.375931][   T30]  #0: ffffffff8ff99c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1212.376000][   T30]  #1: ffffffff8e5bfe68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xe3/0x1b40
[ 1212.376076][   T30] 2 locks held by syz.3.4553/5948:
[ 1212.376090][   T30]  #0: ffffffff8ff99c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1212.376160][   T30]  #1: ffffffff8e5bfe68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc5/0x7a0
[ 1212.376237][   T30] 2 locks held by syz-executor/9877:
[ 1212.376252][   T30]  #0: ffff88801bb040e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[ 1212.376337][   T30]  #1: ffffffff8e5bfe68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 1212.376411][   T30] 4 locks held by syz.1.5132/15646:
[ 1212.376428][   T30] 5 locks held by syz.1.5142/15784:
[ 1212.376444][   T30] 2 locks held by syz.1.5142/15851:
[ 1212.376460][   T30] 2 locks held by syz.2.5146/15894:
[ 1212.376477][   T30] 2 locks held by syz.5.5147/15918:
[ 1212.376492][   T30]  #0: ffffffff8fee3210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[ 1212.387654][   T30]  #1: ffffffff8fef8ea8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70
[ 1212.387726][   T30] 1 lock held by syz.4.5148/15930:
[ 1212.387742][   T30]  #0: ffffffff8ee898a8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x53d/0xf80
[ 1212.387813][   T30] 2 locks held by sed/15932:
[ 1212.387831][   T30] 
[ 1212.387839][   T30] =============================================
[ 1212.387839][   T30] 
[ 1212.387860][   T30] NMI backtrace for cpu 0
[ 1212.387875][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[ 1212.387907][   T30] Tainted: [U]=USER
[ 1212.387915][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1212.387928][   T30] Call Trace:
[ 1212.387935][   T30]  <TASK>
[ 1212.387944][   T30]  dump_stack_lvl+0x116/0x1f0
[ 1212.387975][   T30]  nmi_cpu_backtrace+0x27b/0x390
[ 1212.388000][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1212.388031][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1212.388058][   T30]  watchdog+0xf62/0x12b0
[ 1212.388097][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1212.388127][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1212.388157][   T30]  ? __kthread_parkme+0x148/0x220
[ 1212.388182][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1212.388216][   T30]  kthread+0x3af/0x750
[ 1212.388244][   T30]  ? __pfx_kthread+0x10/0x10
[ 1212.388277][   T30]  ? __pfx_kthread+0x10/0x10
[ 1212.388313][   T30]  ret_from_fork+0x45/0x80
[ 1212.388342][   T30]  ? __pfx_kthread+0x10/0x10
[ 1212.388370][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1212.388409][   T30]  </TASK>
[ 1212.388418][   T30] Sending NMI from CPU 0 to CPUs 1:
[ 1212.388455][    C1] NMI backtrace for cpu 1
[ 1212.388469][    C1] CPU: 1 UID: 0 PID: 15894 Comm: syz.2.5146 Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[ 1212.388501][    C1] Tainted: [U]=USER
[ 1212.388509][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1212.388521][    C1] RIP: 0010:unwind_next_frame+0x631/0x20c0
[ 1212.388559][    C1] Code: 0f 95 c6 40 84 f7 0f 85 3a 1a 00 00 83 e0 07 38 c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 0f 85 23 1a 00 00 4c 0f bf 31 4d 01 fe <0f> b6 41 05 83 e0 07 3c 03 0f 84 fd 08 00 00 3c 04 0f 84 2e 08 00
[ 1212.388581][    C1] RSP: 0018:ffffc90010fbf078 EFLAGS: 00000286
[ 1212.388598][    C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff910223ee
[ 1212.388613][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[ 1212.388627][    C1] RBP: ffffc90010fbf130 R08: ffffffff91022424 R09: ffffffff910223f2
[ 1212.388642][    C1] R10: ffffc90010fbf0e8 R11: 000000000001032e R12: ffffc90010fbf138
[ 1212.388658][    C1] R13: ffffc90010fbf0e8 R14: ffffc90010fbfa78 R15: ffffc90010fbfa28
[ 1212.388674][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 1212.388695][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1212.388711][    C1] CR2: 00007fe03e74c270 CR3: 000000008699e000 CR4: 00000000003526f0
[ 1212.388726][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1212.388739][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1212.388753][    C1] Call Trace:
[ 1212.388760][    C1]  <NMI>
[ 1212.388769][    C1]  ? nmi_cpu_backtrace+0x1d8/0x390
[ 1212.388792][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1212.388821][    C1]  ? nmi_handle+0x1ac/0x5d0
[ 1212.388854][    C1]  ? unwind_next_frame+0x631/0x20c0
[ 1212.388889][    C1]  ? default_do_nmi+0x6a/0x160
[ 1212.388924][    C1]  ? exc_nmi+0x170/0x1e0
[ 1212.388957][    C1]  ? end_repeat_nmi+0xf/0x53
[ 1212.388995][    C1]  ? unwind_next_frame+0x631/0x20c0
[ 1212.389029][    C1]  ? unwind_next_frame+0x631/0x20c0
[ 1212.389070][    C1]  ? unwind_next_frame+0x631/0x20c0
[ 1212.389104][    C1]  </NMI>
[ 1212.389111][    C1]  <TASK>
[ 1212.389119][    C1]  ? unmap_single_vma+0x194/0x2b0
[ 1212.389149][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1212.389176][    C1]  arch_stack_walk+0x95/0x100
[ 1212.389200][    C1]  ? unmap_single_vma+0x194/0x2b0
[ 1212.389230][    C1]  stack_trace_save+0x95/0xd0
[ 1212.389254][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1212.389283][    C1]  save_stack+0x162/0x1f0
[ 1212.389313][    C1]  ? __pfx_save_stack+0x10/0x10
[ 1212.389342][    C1]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1212.389374][    C1]  ? free_unref_folios+0xa7b/0x1500
[ 1212.389407][    C1]  ? folios_put_refs+0x587/0x7b0
[ 1212.389434][    C1]  ? free_pages_and_swap_cache+0x351/0x500
[ 1212.389465][    C1]  ? __tlb_batch_free_encoded_pages+0xf9/0x290
[ 1212.389499][    C1]  ? tlb_flush_mmu+0xe9/0x590
[ 1212.389530][    C1]  ? unmap_page_range+0x1dec/0x4390
[ 1212.389557][    C1]  ? unmap_single_vma+0x194/0x2b0
[ 1212.389591][    C1]  __reset_page_owner+0x8d/0x400
[ 1212.389626][    C1]  free_unref_folios+0xa7b/0x1500
[ 1212.389662][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1212.389690][    C1]  folios_put_refs+0x587/0x7b0
[ 1212.389720][    C1]  ? __pfx_folios_put_refs+0x10/0x10
[ 1212.389749][    C1]  ? __pfx_mark_lock+0x10/0x10
[ 1212.389783][    C1]  free_pages_and_swap_cache+0x351/0x500
[ 1212.389815][    C1]  ? __pfx_free_pages_and_swap_cache+0x10/0x10
[ 1212.389866][    C1]  ? __pfx___might_resched+0x10/0x10
[ 1212.389899][    C1]  ? find_held_lock+0x2d/0x110
[ 1212.389926][    C1]  __tlb_batch_free_encoded_pages+0xf9/0x290
[ 1212.389962][    C1]  tlb_flush_mmu+0xe9/0x590
[ 1212.389997][    C1]  unmap_page_range+0x1dec/0x4390
[ 1212.390041][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[ 1212.390071][    C1]  ? mas_next_slot+0x12d3/0x21b0
[ 1212.390103][    C1]  ? uprobe_munmap+0x20/0x5c0
[ 1212.390135][    C1]  unmap_single_vma+0x194/0x2b0
[ 1212.390165][    C1]  unmap_vmas+0x22f/0x490
[ 1212.390195][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[ 1212.390233][    C1]  exit_mmap+0x1c1/0xba0
[ 1212.390265][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 1212.390299][    C1]  ? __pfx_mark_lock+0x10/0x10
[ 1212.390339][    C1]  __mmput+0x12a/0x410
[ 1212.390372][    C1]  mmput+0x62/0x70
[ 1212.390404][    C1]  do_exit+0x9ba/0x2d70
[ 1212.390430][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1212.390453][    C1]  ? preempt_schedule_thunk+0x1a/0x30
[ 1212.390486][    C1]  do_group_exit+0xd3/0x2a0
[ 1212.390511][    C1]  __x64_sys_exit_group+0x3e/0x50
[ 1212.390536][    C1]  x64_sys_call+0x151f/0x1720
[ 1212.390561][    C1]  do_syscall_64+0xcd/0x250
[ 1212.390591][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1212.390622][    C1] RIP: 0033:0x7fda96d8d169
[ 1212.390639][    C1] Code: Unable to access opcode bytes at 0x7fda96d8d13f.
[ 1212.390649][    C1] RSP: 002b:00007fff26d01078 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 1212.390670][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda96d8d169
[ 1212.390685][    C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[ 1212.390699][    C1] RBP: 00007fff26d010dc R08: 0000001826d0116f R09: 00000000000927c0
[ 1212.390714][    C1] R10: 0000000000025b74 R11: 0000000000000246 R12: 0000000000000099
[ 1212.390729][    C1] R13: 00000000000927c0 R14: 0000000000127c18 R15: 00007fff26d01130
[ 1212.390751][    C1]  </TASK>
[ 1212.408028][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 1212.408048][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G     U             6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0
[ 1212.408082][   T30] Tainted: [U]=USER
[ 1212.408091][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1212.408106][   T30] Call Trace:
[ 1212.408114][   T30]  <TASK>
[ 1212.408124][   T30]  dump_stack_lvl+0x3d/0x1f0
[ 1212.408157][   T30]  panic+0x71d/0x800
[ 1212.408184][   T30]  ? __pfx_panic+0x10/0x10
[ 1212.408209][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 1212.408244][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1212.408275][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 1212.408320][   T30]  ? watchdog+0xdcc/0x12b0
[ 1212.408352][   T30]  ? watchdog+0xdbf/0x12b0
[ 1212.408388][   T30]  watchdog+0xddd/0x12b0
[ 1212.408426][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1212.408457][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1212.408487][   T30]  ? __kthread_parkme+0x148/0x220
[ 1212.408512][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1212.408547][   T30]  kthread+0x3af/0x750
[ 1212.408575][   T30]  ? __pfx_kthread+0x10/0x10
[ 1212.408607][   T30]  ? __pfx_kthread+0x10/0x10
[ 1212.408636][   T30]  ret_from_fork+0x45/0x80
[ 1212.408665][   T30]  ? __pfx_kthread+0x10/0x10
[ 1212.408693][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1212.408732][   T30]  </TASK>
[ 1212.408997][   T30] Kernel Offset: disabled