last executing test programs:

22m24.871703392s ago: executing program 32 (id=469):
socket(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x23, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x200004, 0x2, 0x110, 0x602, 0x300000000000)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
r1 = socket(0x15, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\t\x00', @ANYRES16=r1, @ANYBLOB="2f212abd7800fddbdf2521"], 0x14}}, 0x4000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000c80)="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", 0x300)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)

21m30.335303285s ago: executing program 33 (id=588):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0)
sendfile$auto(r2, r2, 0x0, 0x3)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
brk$auto(0x7)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x1)
sysfs$auto(0xffffffff, 0x10000000000002d, 0x0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/channel\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x1000, 0x5, 0x15)
getpid()
mmap$auto(0x3, 0x400006, 0xdf, 0x15, r2, 0x6000000000000)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
select$auto(0x3, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
newfstatat$auto(0xffffffffffffffff, 0x0, 0x0, 0x1000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x20000a, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
init_module$auto(0x0, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

21m23.90488661s ago: executing program 34 (id=619):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r1, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r3}, @NET_SHAPER_A_HANDLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {0xb, 0x0, 0x300}}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x4)
mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8)

20m44.159101874s ago: executing program 5 (id=751):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/node/node1/compact\x00', 0x101800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00')
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video68\x00', 0x80400, 0x0)
select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
acct$auto(0x0)
r0 = socket(0x2c, 0x1, 0x300)
close_range$auto(0xffffffffffffffff, r0, 0x0)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x2}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x9}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x44)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000240), 0x880, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

20m43.161668425s ago: executing program 5 (id=755):
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto(r0, 0x405c5503, 0x81)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/tty27\x00', 0x0, 0x0)
ioctl$auto_TIOCGDEV2(r1, 0x5453, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x620, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000010)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x200, 0x0)
preadv$auto(r4, &(0x7f0000000080)={0x0, 0x8}, 0x4, 0x8, 0x5)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)

20m42.087642318s ago: executing program 5 (id=759):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={<r1=>0x1b, @new_prog_fd, 0x0, @old_prog_fd=0x100004}, 0xa2)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1)
unshare$auto(0x202)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r4, 0x0)
ioctl$auto(0xffffffffffffffff, 0x8004b707, 0x1)
socket(0x2, 0x1, 0x400087)
close_range$auto(r3, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
socket(0xa, 0x2, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0x4d, 0xffffffffffffffff, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_test\x00', 0x5d7e00, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0)
read$auto(0x3, 0x0, 0x80)
umount2$auto(&(0x7f0000000080)='.\x00', 0x3)
setns(r3, 0x0)
syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r1)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
fspick$auto(0xffffffffffffff9c, &(0x7f0000000040)=':,\x00', 0x3)
lstat$auto(&(0x7f0000000140)=':,\x00', &(0x7f0000000280)={0xffffffffffff6150, 0x8, 0x7, 0x7, 0xee01, 0xee00, 0x0, 0x6, 0x200, 0xb39, 0x5, 0x5, 0x6fa, 0xffffffff, 0xffffffff, 0x5, 0x7})
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000007030fded6424640da7703e6d9866f394e1921b3802628d95f5a43810092df6362fac4b18f4ed0fa54a2aa6138c1a638fe60a926ed5e7371ddbd4042928067564f612", @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf2504000000"], 0x14}}, 0x4048000)

20m41.47398685s ago: executing program 5 (id=762):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, &(0x7f0000000040)={0x10001, 0x9, 0x2, 0x6, 0xee01, <r0=>0xffffffffffffffff, 0x6, 0x4, 0x1, 0x1, 0x9, 0x8, {0x1, 0x9}, {0x4, 0x2}, {0x9, 0x77b}, {0x8000, 0x9}, 0x0, 0x7, 0x7, 0x6, 0xfffffffffffffff8, 0x7fff, 0xe, 0x0, 0x400, 0x3, 0xffffffff, 0x10001, [0x8, 0x10001, 0x81, 0x7, 0xffffffffffffffff, 0xffff, 0x5, 0x0, 0x911]})
lstat$auto(0x0, &(0x7f0000000340)={0x0, 0x5, 0xfffe, 0x5, 0x0, r0, 0x0, 0x81, 0x5, 0x0, 0x5, 0xfffffffffffffff6, 0xfffffffffffffff9, 0x6, 0x1005, 0x4000000004, 0x9})
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
sysfs$auto(0x2, 0x18, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8000, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)

20m40.82887392s ago: executing program 5 (id=766):
r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22c02, 0x0)
ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0)
kexec_load$auto(0x59c54d96, 0xfffffffffffffffa, &(0x7f00000000c0)={@buf=&(0x7f0000000040)="26b80a8f5897d7067130fdc937b23cc91e7cd92772d5256ca7190ad300ef6f9deca2ebe59e9677ff3f279381d40c588059bea9a9a8d22a", 0x354c, 0x1, 0xc262}, 0x6)
ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
kexec_load$auto(0x3, 0x4, &(0x7f0000000900)={@kbuf=0x0, 0x7, 0x101, 0x5}, 0x4)
mmap$auto(0x0, 0x400008, 0x2000df, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x23, 0x0)
r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2002, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r1, &(0x7f0000000200)="a0", 0x1)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
mmap$auto(0x0, 0x40000a, 0x800, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
io_uring_register$auto(0x2, 0x0, 0x0, 0x3)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2f212cbd8966efb91b2e351f000008000300", @ANYRES32=r4], 0x28}}, 0x4000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x400c080)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40, 0x0)

20m39.949347139s ago: executing program 5 (id=770):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000440)="110000001265843a0000000000000000", 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32)
r2 = socket(0x2, 0x1, 0x0) (rerun: 32)
getsockopt$auto(r2, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x4c, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_BSSID={0x36, 0xf5, "af08860a5c815018c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce49244259f4098b7805b616c75a7"}]}, 0x4c}}, 0x4000000) (async)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000) (async)
r3 = pipe2$auto(&(0x7f0000000040)=r0, 0xffffffff)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x2}]}, 0x24}}, 0x0) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x71d) (async)
r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto(r6, 0x8038550a, 0x1) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x2, 0x15) (async)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x0) (async)
socket(0x28, 0x5, 0x0) (async, rerun: 32)
socket(0x10, 0x2, 0x0) (async, rerun: 32)
open(&(0x7f0000000040)='.\x00', 0x12bc00, 0x28)

20m27.850690083s ago: executing program 35 (id=753):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0xf)
r0 = socket(0xa, 0x2, 0x73)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x2, 0x1)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x3, 0x100000000, 0x4000000000df, 0x60eb2, 0x4, 0x300000000000)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=<r1=>0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
socket$nl_generic(0x10, 0x3, 0x10)
ioperm$auto(0x7, 0x40000000bc6, 0x7f)
mmap$auto(0x0, 0x3, 0xdc, 0xeb1, 0x401, 0x8003)
getsockopt$auto(0x100000006, 0x1, 0x33, 0xfffffffffffffffe, 0x0)
r2 = socket(0x2, 0x2, 0x88)
ioctl$auto(0xc9, 0x7, 0x4000000005c8d)
sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000080", @ANYRES16=0x0, @ANYRESOCT=r1], 0x20}, 0x1, 0x0, 0x0, 0x400c011}, 0x0)
write$auto(0x3, 0x0, 0x3f00)
mmap$auto(0x0, 0xfffffffd, 0x8000, 0xeb1, r0, 0xfffffffffffffffd)
close_range$auto(0x2, 0x8, 0x1)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x800, 0x84)
socket(0x1, 0x1, 0x1)
io_uring_setup$auto(0x3, 0x0)
io_uring_register$auto(r2, 0x5, &(0x7f0000000140)="0aff33a3eb367baebe2d939337d2dc398a5fa12a09b2e2a7fe3eb1ccbb56b9887eb99d1ba7366c3def95255b598d293c9032ea6932c76889044cfd7a42bfad7a774e07000000250c83e5e5a13dc9a52c26c5db6b37018f8306a4041104abc12e4f28e3bcb1d2e56ba72bcf3e71add7b065cd16640b084587d03305d71d6491fe4ccad7eb4edc5c66ca5bca72c3a458b3a0fb6150f17d61d7dc5ef48dfc91934c3e608210fd0ace", 0x1)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0xffffffffffffff76, 0x4, 0xdf, 0xeb1, 0x401, 0x6)

20m24.450840319s ago: executing program 36 (id=770):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000440)="110000001265843a0000000000000000", 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32)
r2 = socket(0x2, 0x1, 0x0) (rerun: 32)
getsockopt$auto(r2, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x4c, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_BSSID={0x36, 0xf5, "af08860a5c815018c6e944bca310a9d3ecae4c9e39ed486101557f7751a2db5abf993d6ce49244259f4098b7805b616c75a7"}]}, 0x4c}}, 0x4000000) (async)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000) (async)
r3 = pipe2$auto(&(0x7f0000000040)=r0, 0xffffffff)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x2}]}, 0x24}}, 0x0) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x71d) (async)
r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto(r6, 0x8038550a, 0x1) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x2, 0x15) (async)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x0) (async)
socket(0x28, 0x5, 0x0) (async, rerun: 32)
socket(0x10, 0x2, 0x0) (async, rerun: 32)
open(&(0x7f0000000040)='.\x00', 0x12bc00, 0x28)

18m32.390027677s ago: executing program 8 (id=1074):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/queues/tx-0/tx_maxrate\x00', 0x10b142, 0x0) (async)
statmount$auto(&(0x7f0000000000)={0x7e, @inferred, 0x80000029, 0xe864, 0xa2d}, 0x0, 0x207, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
madvise$auto(0x0, 0x2000040080000004, 0xe) (async, rerun: 32)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async)
mmap$auto(0x3, 0xffff, 0x1000000005, 0x9b72, 0x2, 0xe53b) (async)
unshare$auto(0x40000080) (async)
mmap$auto(0x6, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
socket(0x10, 0x2, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty43\x00', 0x101240, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) (async)
ioctl$auto_TCFLSH2(r0, 0x4b40, 0xfdfd)

18m31.242732618s ago: executing program 8 (id=1081):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x10000000)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000080)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3d41aa4b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004805}, 0x8880)

18m30.710525519s ago: executing program 8 (id=1084):
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
r1 = openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/x86/topo/cpus/1\x00', 0x0, 0x0)
read$auto_dfs_cpu_ops_debugfs(r1, &(0x7f0000000300)=""/35, 0x23)
ioctl$auto_TCFLSH2(r0, 0x541b, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf25030000000400080008000380090012"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r2 = socket(0x10, 0x2, 0x4)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
io_uring_setup$auto(0x1, &(0x7f0000000140)={0x6, 0x80, 0x8, 0x10, 0x9, 0x2, r2, [0x8, 0xe, 0x3], {0x5, 0xf, 0x7, 0x65, 0x6, 0x8, 0x1, 0x9, 0x8000}, {0xb, 0xea, 0x101, 0x0, 0x8, 0x4, 0x9, 0x6, 0x2}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r6=>0x0})
sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="110b27bd7000fbdbdf250900000008000300", @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES8=r3], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

18m29.940468815s ago: executing program 8 (id=1086):
r0 = socket(0xa, 0x3, 0x100)
mmap$auto(0x0, 0x10000, 0x3, 0xeb1, r0, 0x8000)
io_uring_setup$auto(0x6, 0x0)
semctl$auto(0x8, 0x80000806, 0x13, 0x0)
setsockopt$auto(0x3, 0x29, 0x40, 0x0, 0x10001)
set_mempolicy$auto(0x4005, &(0x7f0000000000)=0x1, 0x4)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0x5}, 0x6f4)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
set_mempolicy$auto(0x4, &(0x7f0000000540)=0x15, 0x7)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0xc)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x81, 0x8, 0x2, 0xfffffffffffffff8})
r2 = socket(0x10, 0x2, 0x0)
umount2$auto(&(0x7f0000000100)='\x00', 0x9)
io_uring_register$auto(r2, 0x0, &(0x7f0000000300)="5a09ef5ac97b1695ae78aea36f472d8e79f997572716a311a03b0141c0986d2810ae2b87a8a30d77d588c59f83c71e45ed6aa0ff5c1e7d0fab9ef7664a1b6d3a1d96ddc4ae8a6a3d1c6a5ec1317e411edc4a2a70dfa5722afa66a1c33cce8b45c2a3e4e0e2cee3850f7615fc0207b9ed0b74a549573eacc81c79ec1a38f1759d433a95ad3c2f0c2d6295b4b9114105591cca8b9ea9e454ee50f56f7c137ebf0b729c3e27469c7cb4799eb5efc8a733bca5fdea1d2c80c069932bcfaf43c27bc1c82d5601d6857018041d10771dfed15f81546a0535d030523a30f0d240db033aaac132e29e1d265375b3acb97265061e030c3c6cefff46", 0xfffffff3)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000240), r2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x6)
getsockopt$auto(0x6, 0x29, 0x18, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'wg0\x00', <r3=>0x0})
accept$auto(r1, &(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x2b}, &(0x7f0000000500)=0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)

18m29.183502987s ago: executing program 8 (id=1094):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x38, 0x0, 0x4, 0x5, 0x10003)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="80060000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x680}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
write$auto_bm_entry_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000500)="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", 0x4bf)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
inotify_rm_watch$auto(0xffffffffffffffff, 0x84e4)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
madvise$auto(0x5, 0x2000040080000004, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0)
sendmsg$auto_TIPC_NL_LINK_SET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf250900000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x4000094}, 0x8080)
io_uring_setup$auto(0x8e3e, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys1\x00', 0x20400, 0x0)
ioctl$auto_TIOCSWINSZ2(r2, 0x5414, 0x0)
modify_ldt$auto(0x1, 0x0, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x501940, 0x0)
write$auto_sg_fops_sg(r3, &(0x7f00000000c0)="a1ba24b57d711f4e59f1811652787c5101cb0829a875b2d9578d9655abf7c485c8de20d5960e8c62ec71394cfe643c1d66616df32faac3d9971e269890fc975cb7ec23cec2fb8d61dd015954fe6ce3c1cb410e8a6ee8e2c6c7b3552fef0f6fad5b76832b31f15ab17e2fb67a0ccc17ae93ab9fd848ba3a602bf250428c99aee4d32f213fce9a32e1ca51fa3dbf51", 0x8e)
madvise$auto(0xfffffffffffffffe, 0xffffffffffff0002, 0x19)
fallocate$auto(0xffffffffffffffff, 0x1, 0x9, 0x80000000)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x1010001, 0x100000003)
mmap$auto_sg_fops_sg(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x50, r3, 0x2)
r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0)
ioctl$auto_RTC_AIE_ON(r4, 0x7001, 0x1300)
setgroups$auto(0xe32, &(0x7f0000000040)=0x9)
uname$auto(&(0x7f0000000280)={"017a23d49d4e4f89b7bb66d0528142ad4998ea9c70c06d0408e91b30b0b0d300722823e67e78003cff84dfc2528569e4ca4367c6216df84c3958d96ed2c499caff", "1e2157148e99091f121521269985a6a599863e135818f2ccc77a864d50fd1b2447c13d33dfb37033d53d69c4ff062abf19efab53fd75a00d4af7dbdef66e913103", "1fa81ccc6ffd05b516bdc4046cdfee68955b5ae48f8a322b6a0e4d8233d9491029f04050fca8a76d8b02739e3347e73f0f398e219952ca06e6c78655a70e097917", "0749ebba3d6f1ed9c077eeeb6deae36535af268af804ea0614e6c5ef0445f6fb05bec835636e440d94396dbeef246ceff774a1af2e8884df1be20351da9874f6fa", "4fbb5ffd975d9cf0800c3bf9046b1351f7371fcaea1fac30b4de0ac23b4d950cba906c482378f4337fe941454b8dbd36e51d285c95a92a20bec5a9907616fad85e", "d802740973602ea52b49799bc04ddb3c4e8995a5f9bd70c8c718fc2ebdffc648dd1195b4ac34305e4005000000000000984e42ee00"})

18m25.488447868s ago: executing program 8 (id=1110):
r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40103d02, 0x0)
mmap$auto(0x1, 0x8, 0x2, 0x9b72, r0, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
r1 = open(0x0, 0x5c2205, 0x93)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x1, 0x1, 0xa, &(0x7f0000000080)='\xe1', 0xbb)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x1, 0x541b, 0x8)
mq_getsetattr$auto(r1, &(0x7f0000000000)={0x0, 0xdf5, 0x3, 0x5}, &(0x7f0000000140)={0x8000, 0x0, 0xfffffffffffffe01, 0x7f})
socket(0x23, 0x80000, 0xd)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x401)
clone$auto(0x100000000008003, 0x1ff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xa)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
setregid$auto(0xffffffffffffffff, 0xfffe)
arch_prctl$auto(0x0, 0x69f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01893d33625ef1a997dd6eaa1d82ae022ed62bdb0027bd7000fce7192fbf7f90f7662869e73c86fec7456ad79a48e04b1b3de3354720cec8f64f8fa81244a902adda7b6aa3083dde4d936ca82908593d7de9132dab8dd7ba0a10e3ce920794cdfd8196803e5171d81bd0a1aea3b91a9abfea12de282200f46b87e59099dd125e63690274ae906d792525e42842e1ed9c16e2a4d4f9a2fbcb73b5a6524617cdd096d215991d6f57129fcc0d"], 0x18}, 0x1, 0x0, 0x0, 0x20000805}, 0x8040)
write$auto_msr_fops_msr(r1, 0x0, 0x0)
getsockname$auto(0xffffffffffffffff, 0x0, 0x0)
close_range$auto(0x4000000000000, 0x5, 0x4000000000002)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
getdents64$auto(0x0, &(0x7f0000000440)={0x6, 0x4, 0x5, 0x1}, 0x2000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
io_uring_setup$auto(0x6, 0x0)
msync$auto(0x0, 0x6, 0xb0)

18m24.626969623s ago: executing program 37 (id=1110):
r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40103d02, 0x0)
mmap$auto(0x1, 0x8, 0x2, 0x9b72, r0, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
r1 = open(0x0, 0x5c2205, 0x93)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x1, 0x1, 0xa, &(0x7f0000000080)='\xe1', 0xbb)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x1, 0x541b, 0x8)
mq_getsetattr$auto(r1, &(0x7f0000000000)={0x0, 0xdf5, 0x3, 0x5}, &(0x7f0000000140)={0x8000, 0x0, 0xfffffffffffffe01, 0x7f})
socket(0x23, 0x80000, 0xd)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x401)
clone$auto(0x100000000008003, 0x1ff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xa)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
setregid$auto(0xffffffffffffffff, 0xfffe)
arch_prctl$auto(0x0, 0x69f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01893d33625ef1a997dd6eaa1d82ae022ed62bdb0027bd7000fce7192fbf7f90f7662869e73c86fec7456ad79a48e04b1b3de3354720cec8f64f8fa81244a902adda7b6aa3083dde4d936ca82908593d7de9132dab8dd7ba0a10e3ce920794cdfd8196803e5171d81bd0a1aea3b91a9abfea12de282200f46b87e59099dd125e63690274ae906d792525e42842e1ed9c16e2a4d4f9a2fbcb73b5a6524617cdd096d215991d6f57129fcc0d"], 0x18}, 0x1, 0x0, 0x0, 0x20000805}, 0x8040)
write$auto_msr_fops_msr(r1, 0x0, 0x0)
getsockname$auto(0xffffffffffffffff, 0x0, 0x0)
close_range$auto(0x4000000000000, 0x5, 0x4000000000002)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
getdents64$auto(0x0, &(0x7f0000000440)={0x6, 0x4, 0x5, 0x1}, 0x2000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
io_uring_setup$auto(0x6, 0x0)
msync$auto(0x0, 0x6, 0xb0)

14m34.508621768s ago: executing program 7 (id=2075):
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$auto(0x5, &(0x7f0000000080)=@task_fd_query={0x0, <r0=>0xffffffffffffffff, 0x9, 0x80000000, 0xfff, 0x8, 0xffffffffffffffff, 0x7fff, 0x3}, 0x7) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = socket(0xa, 0x2, 0x0) (async)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x24, r3, 0x413, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x80)
sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48801}, 0x24000000)

14m34.242637689s ago: executing program 7 (id=2077):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002580), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000025c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0xf4ff}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810)

14m34.200457943s ago: executing program 7 (id=2079):
socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x29, 0x2, 0x0)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
r0 = socket(0x2, 0x6, 0x0)
openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/set_event_pid\x00', 0x0, 0x0)
getsockopt$auto(r0, 0x10d, 0x11, 0x0, &(0x7f0000000000)=0xb)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x23, 0x2, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyy1\x00', 0x121882, 0x0)
socket(0x6, 0x4, 0x4b)
ioctl$auto(r2, 0x5406, 0x82003e)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
ppoll$auto(&(0x7f0000000000)={r1, 0x8, 0x6}, 0x7, 0x0, 0x0, 0x8)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000080)="f654e8c02c8ee0deb2e0201af069f6afc41409377016ca6546c5bc1dce3e2d8c25cacd80c279e17258a9d6056d", 0x412, 0x0, 0x9, 0x0, 0xbf, 0xb}, 0x2}, 0x5, 0x20000000)

14m33.168816566s ago: executing program 7 (id=2085):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0xf)
syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0x0)
bpf$auto(0x1f, &(0x7f00000004c0)=@bpf_attr_5={@target_fd=r2, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_id=0x4}, 0x3fc)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x4, 0x8)
read$auto(0x3, 0x0, 0x400000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x5, 0x0, 0xffffffbc)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000580)="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", 0xd, &(0x7f0000000140)={&(0x7f0000000000)="f2fb59cfdc04d550e122cd05c0df7e7554c1292619ebba1c3ec4d7a5cb31cb3856d7435a444a739217679f2f95ec42bc6883178e957e56f99a532e1f9d1902b8c4f8936854a255f4c02f325ff01cf6e0577ee0c81b531e84c0ad61", 0x1ff}, 0x8, &(0x7f0000000180)="2ef011b4a1da2e69d40d95489c15ff3e3211f7a61ff14361b195500ba205a090db3ec3cdeb529d7fcbc074f2", 0x5, 0x8000}, 0x4}, 0x1, 0x2)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, 0x0, 0x8092)
recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/version\x00', 0x2, 0x0)
bpf$auto(0x3, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x5c, 0x4, 0x9, 0x100000000000880, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x2, r0, 0x7, 0x9, 0x4, 0x8000007, 0x10001, 0xfffffffc, 0x8001, @attach_prog_fd=r1, 0x7e, 0x4, 0x8001, 0x3, 0x3}, 0x5)

14m32.169293394s ago: executing program 7 (id=2091):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x15, 0x5, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x121040, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000440)='/dev/fb0\x00', 0x4b4001, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/153, 0x99)
fanotify_init$auto(0x65, 0x2)
r1 = prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0)
sysfs$auto(0x2, 0x10000000000048, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
ioperm$auto(0x7, 0x71, 0x863)
ioperm$auto(0x5, 0x3432, 0x0)
ioctl$auto(r1, 0x40081271, r2)
fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000)
close_range$auto(0x0, 0xfffff004, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r3)
sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r4, 0xf01, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0xfffffff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040085}, 0x40)
r5 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/f2fs/status\x00', 0x1c9200, 0x0)
close_range$auto(r5, 0x8, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/open_files\x00', 0x200, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)

14m30.849451427s ago: executing program 7 (id=2097):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001340)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7a31f93c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x24000800)

14m30.434590825s ago: executing program 38 (id=2097):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001340)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7a31f93c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x24000800)

10m45.890682881s ago: executing program 0 (id=2920):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
setsockopt$auto(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x8) (async, rerun: 64)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async, rerun: 64)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x15, 0x5, 0x0) (async)
fanotify_init$auto(0x65, 0x2) (async, rerun: 32)
sysfs$auto(0x2, 0x10000000000048, 0x0) (rerun: 32)
r0 = fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0) (async)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64)
ioctl$auto(0x3, 0x4188aec6, r0) (rerun: 64)
close_range$auto(0x2, 0x8000, 0x0)
connect$auto(0x3, 0x0, 0x55) (async, rerun: 64)
io_setup$auto(0xffff0001, &(0x7f0000000000)) (rerun: 64)
bpf$auto(0x0, &(0x7f0000000100)=@link_create={@prog_fd=<r2=>0x1, @target_fd=0xa, 0x3, 0x8, @tracing={0x4, 0xffffffff}}, 0xfbe)
mmap$auto(0x0, 0x202800b, 0xa, 0x13, 0xfffffffffffffffa, 0x10000)
clock_nanosleep$auto(0x0, 0x3, &(0x7f0000001200)={0x8, 0x3}, 0x0)
select$auto(0x6, 0x0, &(0x7f0000000100)={[0x9, 0x4000000009, 0x0, 0x1, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0x9, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) (async)
socket(0xa, 0x5, 0x84) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40040004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="000127bd7000fbdbdf25020000000800030001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x80)
setsockopt$auto(r2, 0x1, 0x3e, 0x0, 0xffff7fff) (async)
semctl$auto(0x8000000000000000, 0x92e, 0x11, 0x929) (async, rerun: 64)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) (rerun: 64)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
flock$auto(r3, 0x5) (async)
ioctl$auto_PPPIOCUNBRIDGECHAN(r3, 0x7434, 0x0)

10m44.363495742s ago: executing program 0 (id=2926):
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
r0 = socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r1 = open(0x0, 0x22240, 0x155)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e22}, 0x55)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8)
sysfs$auto(0x2, 0xd, 0x0)
fsopen$auto(0x0, 0x1)
r2 = open(0x0, 0xc162, 0x0)
ftruncate$auto(r2, 0xdaaf)
sendfile$auto(r1, r2, &(0x7f0000000000)=0xffffffff, 0x7)
sendfile$auto(r0, r1, 0x0, 0x10000007fffeffa)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x5, 0x15)
socket(0x2, 0x1, 0x38770ce5)
setsockopt$auto(0x3, 0x29, 0x40, 0x0, 0x10001)
madvise$auto(0x0, 0x200007, 0x19)

10m42.605379096s ago: executing program 0 (id=2929):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r1, 0x23, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0xc, 0x3, 0x0, 0x1, [@typed={0x6b, 0x4e, 0x0, 0x0, @u32=0x2000009}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)

10m39.798480251s ago: executing program 0 (id=2933):
sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r0, 0x40044900, 0x800000000000003)
poll$auto(&(0x7f0000000200)={r0, 0x1, 0x43c7}, 0xb, 0x7fffffff)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x2000b, 0x2, 0xeb1, 0x3fe, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
statmount$auto(0x0, 0x0, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
r2 = socket(0x23, 0x80805, 0x0)
poll$auto(&(0x7f0000000000)={r2, 0x1, 0x8}, 0x5, 0x400)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002fc0)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)

10m38.678366964s ago: executing program 0 (id=2938):
mmap$auto(0x9, 0x8000, 0x7, 0x8000000eb1, 0xffffffffffffffff, 0x8000)
sysfs$auto(0x2, 0x9, 0x0)
socket(0x2b, 0x3, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000004240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000)
mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000)
r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r1, 0x0, 0x4)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, r2)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1ff}, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_def_blk_fops_fs(r3, 0x1, &(0x7f0000000000))
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffe01)
socket(0x2, 0x2, 0x88)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)

10m37.407242245s ago: executing program 0 (id=2941):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r0, 0x0, 0x5, 0x20000000)
socket(0x18, 0x5, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
io_uring_setup$auto(0xfffffffb, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="41004bbd7000fbdbdf250a000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000003240), 0x20001, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84)
bind$auto(0x3, 0x0, 0x6b)
mmap$auto(0x0, 0x4000000004, 0x4000000000df, 0x40eb1, r0, 0x300000000000)
write$auto(r1, 0x0, 0x62f)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
socket(0x25, 0x2, 0xfffffffd)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0)
open(0x0, 0x0, 0x6f)
socket(0x10, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68)
r2 = socket(0x10, 0x2, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x2, @local}, 0x68)
close_range$auto(0x2, 0x8, 0x0)

10m23.083695174s ago: executing program 9 (id=2971):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2400, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x1000002, 0x8000)
socket(0x23, 0x3, 0x80)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
adjtimex$auto(&(0x7f00000000c0)={0xb, 0x0, 0x7d, 0xfffffffffffffffd, 0x3, 0x4, 0x4, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000001, 0x81, 0xffffffffffff628e, 0xa747, 0x0, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000001140), 0xa0100, 0x0)
socket(0x2, 0x1, 0x0)
r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0)
pwrite64$auto(r2, 0x0, 0x2, 0x0)
r3 = epoll_create$auto(0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x10000001, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
epoll_ctl$auto(r3, 0x1, 0xffffffffffffffff, 0x0)
read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1)
semget$auto(0x0, 0x6, 0x0)

10m22.277054794s ago: executing program 39 (id=2941):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r0, 0x0, 0x5, 0x20000000)
socket(0x18, 0x5, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
io_uring_setup$auto(0xfffffffb, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="41004bbd7000fbdbdf250a000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000003240), 0x20001, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84)
bind$auto(0x3, 0x0, 0x6b)
mmap$auto(0x0, 0x4000000004, 0x4000000000df, 0x40eb1, r0, 0x300000000000)
write$auto(r1, 0x0, 0x62f)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
socket(0x25, 0x2, 0xfffffffd)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0)
open(0x0, 0x0, 0x6f)
socket(0x10, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68)
r2 = socket(0x10, 0x2, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x2, @local}, 0x68)
close_range$auto(0x2, 0x8, 0x0)

10m20.006619187s ago: executing program 9 (id=2978):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0xfffffffffffffffe)
write$auto(0x800000000000c8, 0x0, 0x1a)
mmap$auto(0x6, 0x1, 0x5, 0x32d4, 0x10000, 0x9)
ioctl$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
write$auto_mtd_fops_mtdchar(r0, 0x0, 0x0)
set_mempolicy$auto(0x8403, 0x0, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x20009, 0x9, 0xeb1, 0x401, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x11, 0x7, 0x28000)
write$auto(0x3, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100000000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
connect$auto(0x3, &(0x7f0000000140)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x55)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8)
madvise$auto(0x0, 0x3, 0x66)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000080), 0x315242, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_TXSA(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf250400000008000100", @ANYRES32=0x0, @ANYBLOB="080003800400030014644b386001311daeaa1a4ae7"], 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x48040)
tkill$auto(0x0, 0x7)
getpgrp(0xffffffffffffffff)

10m15.728306863s ago: executing program 9 (id=2984):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = syz_clone(0x40000, &(0x7f0000000000)="3fcac46a3fad092b5e08ce4fc72f617e7d0ed984a1e7f0cf240817fb07adac2fad5bd2c0c3b29eb3a67882cbbd460e6b96e64b93ab984af6ade913b95c3efc8323c7d0f7b9ae5c595bd19c6507f09d77b5a9b8729ccfbf316e7cbdbaaea05cd22df80c073beea65303ae5da196eea7c10ecbe0932969052638394abab77424aa086aaea7f9e26e9d7ecb0ee17f01f82cec1358f418cf737d0494e081b14889fc6a411f159d07683c914548c133ea94007caf11b900c9b3486816a39a7645", 0xbe, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="c7314021523e32e53fc72244a91da52ec88268bd05fe9d222f65a15fab6f3c602c14a9cbecd856a1f236a4dea4f08c5fffdddfff2e4007c347425e3b9aea39cb40a35fe58cd5ff69f800bac68f163333c0b85c718efe756156fad128bf864926883a2f0e13a548ad6be666ffa1403c224fa8645f631a966a40d6d4d514db9f523f066c8fd2e48989270c1d21cccb3ef1fc48ea9b18fdc4b2190054fc12fb03f9275d3a71c23da05424c3a8ab0f3a9914fa9758df1210f0b1009211a295bbd1bcd039a670ff461fe6284bf17ea3385c6cddbdc05bec6951ff")
prctl$auto(0x10, 0x8000000000000000, r0, 0xba, 0x2)

10m12.630831806s ago: executing program 3 (id=2986):
r0 = socket(0x10, 0x2, 0x6)
bind$auto(r0, &(0x7f0000000080)=@qipcrtr={0x2a, 0x4}, 0x81)
r1 = landlock_create_ruleset$auto(&(0x7f0000000040)={0x40c8, 0x9, 0x3}, 0x6, 0x4)
r2 = socket(0xa, 0x3, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram3\x00', 0x8003, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000000), 0xb6, 0x0, 0x0, 0x0, 0x8, 0x80000000}, 0x1}, 0x1, 0xa)
write$auto_ftrace_subsystem_filter_fops_trace_events(r1, &(0x7f0000000080), 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x6a)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x40000, 0x0)
sendfile$auto(r0, r3, 0x0, 0x3)

10m12.188697654s ago: executing program 3 (id=2987):
close_range$auto(0x0, 0xfffff004, 0x2)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000700)='/dev/binderfs/binder0\x00', 0x2280, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
close_range$auto(0x0, 0x1c94, 0x2)
r0 = socket(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
getcwd$auto(0x0, 0xffffffffffffffff)
inotify_init1$auto(0x3000000000000)
r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/12/affinity_hint\x00', 0x82340, 0x0)
read$auto(r2, &(0x7f0000000040)='a\x00p\x06\x04}S\xfd\xfe(\xa1a\x15O\xdd$\xc3!E\xd7L\xd4\xc9\x96\xc8\x03\xfa\xb9\xb3\x98\xc0\xa6\xad\x1a\xc5\xce\xf8\x11O\xdf\xce<\xc2\x81,\x97l\x93\xe0\xf86F\xce\f6\"\x8f\xac7\x83\x91 ', 0x80)
inotify_add_watch$auto(0x4, 0x0, 0xfff)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x5)
rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)')
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0)
r3 = io_uring_setup$auto(0x877, 0x0)
sendmmsg$auto(r1, &(0x7f0000000640)={{&(0x7f00000003c0)="b4856e246d4aa2cf21542a88d0ab370ac7198903a904d5614856bd260d0537a4c088cef2c86be5c4fbd446200c2ecb3b2890ab46c2efce33071369d275182210cceeff88dff8eea813fd242ece8ab20f968667d537dbcdf0d7fbd602d4cd170fddaf0a11485cf9d0059ef1a55c9d124c2a4089a1a9947b7e385aa6d7f86671d6d216b1e8d69b102b0f78da49eb8b982ce043825f0355f150996bf3fa330f535da51efc99ced1a92cfd9a6d816a3f58e2e383444898115080bd0b3b58ab9149ad6566351cc8d2a40caafc283ba99385950de64a822fc1d10738", 0x2, &(0x7f00000002c0)={&(0x7f00000004c0)="ffed962893b9bfa0ba5be4faf61ccd46cd588a2ac3661b43760fbf1a81b5dd5490632fcb41c34eac141cd754c574ba0249f7b69f65e57a0c0152d2b2678d50c377350a4bfe79f83c2469e036a9f93749736e59d7b0067d0862963ba45307", 0xc}, 0xb, &(0x7f0000000540)="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", 0x9, 0x5}, 0xfffffff8}, 0x4, 0x6)
io_uring_enter$auto(r3, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000280), r0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)

10m11.576552959s ago: executing program 9 (id=2990):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x80000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyy2\x00', 0x20000, 0x0)
ioctl$auto_TIOCCONS2(r2, 0x541d, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x3f, 0x3, 0x9)
clone$auto(0x20003b46, 0x100000000000005, 0x0, 0x0, 0x2)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
socket(0x11, 0x80003, 0x300)
mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103)
set_mempolicy$auto(0x206, &(0x7f0000000080)=0x8, 0x4)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyy2\x00', 0x20000, 0x0)
ioctl$auto_TIOCCONS2(r3, 0x541d, 0x0)
sendmsg$auto_NETDEV_CMD_NAPI_GET2(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NETDEV_A_NAPI_IFINDEX={0x8}, @NETDEV_A_NAPI_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x1, 0xdf, 0x9f72, 0xffffffffffffffff, 0x8000000000008000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000c40), 0xffffffffffffffff)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)

10m10.818306905s ago: executing program 3 (id=2991):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
memfd_create$auto(0x0, 0x7)
fchown$auto(0x5, 0x8, 0x3)
fchown$auto(0x5, 0x8, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x15, 0x5, 0x0)
bind$auto(0x4, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r2 = getpgid(0x0)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}})
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x12)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')
mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000)
getsockopt$auto(r1, 0x10e, 0xb, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001680)=ANY=[@ANYBLOB="05000000", @ANYRES16=r3, @ANYBLOB="230027bd7000fcdbdf250900000008000380040001800400028008000100", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

10m10.186913279s ago: executing program 9 (id=2992):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_MACSEC_CMD_DEL_RXSC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xfeeb, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x4068811}, 0x884)
ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0xf}, 0xc, 0x0, 0x0, 0x8)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x121542, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
write$auto(r1, 0x0, 0xfffffdef)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x3, 0x0)
r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu1\x00', 0x80802, 0x0)
read$auto_vcs_fops_vc_screen(r2, &(0x7f0000000040)=""/120, 0x78)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
getsockopt$auto(0x6, 0x11b, 0x8, 0xfffffffffffffffd, 0x0)
ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x7)

10m9.721050618s ago: executing program 3 (id=2993):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
clone$auto(0x20003b4b, 0x8000000000000000, 0x0, 0x0, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
write$auto(0x3, 0x0, 0xfdef)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0xae841, 0x1fb)
socket(0x840000000002, 0x3, 0xff)
connect$auto(0x3, &(0x7f0000000000), 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0)

10m6.910614452s ago: executing program 3 (id=2995):
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
ioperm$auto(0x2, 0x80000001, 0x3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
close_range$auto(0x2, 0x8, 0x0)
pipe$auto(&(0x7f0000001480)=<r0=>0xffffffffffffffff)
vmsplice$auto(r0, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1)
write$auto(0x3, 0x0, 0xffd8)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
socketpair$auto(0x2d, 0x6, 0x6, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mincore$auto(0x0, 0x10000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2600, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/228, 0xe4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x140, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0xb, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x80000005)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
socket(0x2, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)

10m6.722171599s ago: executing program 9 (id=2997):
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
stat$auto(0x0, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) (async)
r0 = io_uring_setup$auto(0x6, 0x0) (async)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0)
ioctl$auto(r1, 0x6, r0) (async)
ioctl$auto(0x3, 0xc0481273, 0x38)
statmount$auto(0x0, 0x0, 0x1fe, 0x9)
gettid() (async)
r2 = socket(0x2, 0x6, 0x0) (async, rerun: 32)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8932, &(0x7f0000000780)={'bond0\x00'})
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
ioctl$auto(r4, 0x4004556b, r4) (async)
mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x6, 0x1, 0x8000000000000000, 0x0) (async)
semctl$auto(0x9874, 0x4, 0x7, 0xedd) (async)
open(0x0, 0x22240, 0x155)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@sco={0x1f, @none}, 0x6a) (async)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffbfffffffff, 0x8000) (async)
r5 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x89b0, &(0x7f0000000140)={'bond0\x00'})

10m6.086871022s ago: executing program 40 (id=2997):
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
stat$auto(0x0, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) (async)
r0 = io_uring_setup$auto(0x6, 0x0) (async)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0)
ioctl$auto(r1, 0x6, r0) (async)
ioctl$auto(0x3, 0xc0481273, 0x38)
statmount$auto(0x0, 0x0, 0x1fe, 0x9)
gettid() (async)
r2 = socket(0x2, 0x6, 0x0) (async, rerun: 32)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8932, &(0x7f0000000780)={'bond0\x00'})
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
ioctl$auto(r4, 0x4004556b, r4) (async)
mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x6, 0x1, 0x8000000000000000, 0x0) (async)
semctl$auto(0x9874, 0x4, 0x7, 0xedd) (async)
open(0x0, 0x22240, 0x155)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@sco={0x1f, @none}, 0x6a) (async)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffbfffffffff, 0x8000) (async)
r5 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x89b0, &(0x7f0000000140)={'bond0\x00'})

10m0.710659735s ago: executing program 3 (id=3003):
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x161c01, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x7, &(0x7f0000000140)={0x0, 0x4dd}, 0x5, 0x0, 0x8, 0x2}, 0x1000}, 0xffffffff, 0x0, 0x0)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0)
openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x40, 0x0)
modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10)
ioctl$auto_SNDCTL_DSP_SETSYNCRO(r1, 0x5015, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20)
fsync$auto(r2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4c49c2, 0x0)
r3 = socket(0x1e, 0x5, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e)
mmap$auto(0x3, 0x400008, 0xdf, 0x1000000000009b72, 0xffffffffffffffff, 0x8000)
ioprio_set$auto(0x3, 0x0, 0x4b34)
ftruncate$auto(0x1ff, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
getsockopt$auto(r3, 0x9, 0x3, 0xfffffffffffffffc, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000280)=""/238, 0xee)
shmget$auto(0xa, 0x10563, 0x568d1af2)
semctl$auto(0x20, 0x4, 0x3ff, 0x1000)

9m45.429599594s ago: executing program 41 (id=3003):
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x161c01, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x7, &(0x7f0000000140)={0x0, 0x4dd}, 0x5, 0x0, 0x8, 0x2}, 0x1000}, 0xffffffff, 0x0, 0x0)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0)
openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x40, 0x0)
modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10)
ioctl$auto_SNDCTL_DSP_SETSYNCRO(r1, 0x5015, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20)
fsync$auto(r2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4c49c2, 0x0)
r3 = socket(0x1e, 0x5, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e)
mmap$auto(0x3, 0x400008, 0xdf, 0x1000000000009b72, 0xffffffffffffffff, 0x8000)
ioprio_set$auto(0x3, 0x0, 0x4b34)
ftruncate$auto(0x1ff, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
getsockopt$auto(r3, 0x9, 0x3, 0xfffffffffffffffc, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000280)=""/238, 0xee)
shmget$auto(0xa, 0x10563, 0x568d1af2)
semctl$auto(0x20, 0x4, 0x3ff, 0x1000)

12.039799671s ago: executing program 2 (id=4658):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x106)
getsockopt$auto(0x100000006, 0x0, 0x818, 0xfffffffffffffffe, 0x0)

11.754570264s ago: executing program 4 (id=4659):
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
setrlimit$auto(0x1000000007, 0x0)
socket(0x18, 0x4, 0x1) (async)
semtimedop$auto(0x7, &(0x7f0000000200)={0x3, 0x6, 0x1000}, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r0 = socket(0x11, 0x3, 0x9) (async)
io_uring_setup$auto(0x6, 0x0) (async)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r1 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6) (async)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async, rerun: 64)
sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c03", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) (rerun: 64)
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)

11.283029926s ago: executing program 2 (id=4662):
mmap$auto(0x0, 0x7, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000)
listen$auto(0x3, 0x83)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x1)
r1 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r1, 0x84, 0x7f, 0x0, 0x0)
r2 = socket(0x23, 0x0, 0x80000001)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
io_cancel$auto(0x2, &(0x7f0000000040)={0x6f, 0xfffff2ef, 0x80000000, 0x200, 0xfff, r1, 0x101, 0x5, 0x9, 0x0, 0x6, r2}, &(0x7f00000001c0)={0x5, 0x7dc3934a, 0x8000000000000000, 0x4})
lstat$auto(0x0, 0x0)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
munmap$auto(0x20001000, 0x2000000c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, 0x0)
set_mempolicy$auto(0x4, 0x0, 0x5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000003240), 0x20001, 0x0)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x1, 0x8, 0xc, 0xe3, 0x4000000002, 0x2000000003}, 0x6f4)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8085}, 0x8000)
sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x86}, 0x4000841)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x8, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

11.150715182s ago: executing program 4 (id=4663):
r0 = socket(0x1d, 0x4, 0x20000006)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
io_uring_setup$auto(0x40005, 0x0)
madvise$auto(0x108000, 0x800034, 0x9)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00'})
bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x69)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x62, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x303400, 0x0)
sendmsg$auto_IPVS_CMD_GET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x69c041c0}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x711, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x91)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r1, 0x0, 0x9)
write$auto(0x3, 0x0, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0xa}, 0x2}}, 0x66)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x6}, 0x5, 0x20000004)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x628, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0xd3e80, 0x0, 0x2, 0x0, 0x400, 0xf0ff7f}, 0x6}, 0x7, 0xb07e)

10.076305051s ago: executing program 2 (id=4664):
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00')
fchown$auto(r1, 0xfffe, 0x7ff)
connect$auto(0xffffffffffffffff, &(0x7f00000001c0)=@tipc=@id={0x1e, 0x3, 0x1, {0xce21}}, 0x4)
r2 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x40040, 0x0)
mmap$auto(0x4, 0xfb, 0x6, 0x14, r2, 0x200000000961)
setsockopt$auto(0xffffffffffffffff, 0x8, 0x24, 0x0, 0xd)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x48600, 0x0)
read$auto(r3, 0x0, 0x200)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0)
r5 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
read$auto(r5, 0x0, 0x1d01)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x123681, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0xfffffffffffffffd, 0xfffffffffffefffb, 0x11)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x53, 0x9)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
r7 = getpgrp(0xffffffffffffffff)
sched_setattr$auto(r7, 0x0, 0xf)
write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000200)='5', 0x1)
kill$auto(0x0, 0x12)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f0000001840)="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", 0xc82)

8.409540445s ago: executing program 4 (id=4671):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x9)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e')
mmap$auto(0x0, 0xe986, 0xdf, 0xeb0, 0x401, 0x8000)
mremap$auto(0x0, 0xbfffffffffffffff, 0x401, 0x0, 0x7fffffffb000)
acct$auto(&(0x7f0000000040)='*\x00')
open(&(0x7f0000000bc0)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x103000, 0x75)

7.562555362s ago: executing program 4 (id=4675):
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r0, 0x0, 0x44804)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000400010000000a00050000082101f7ff00000a000100a97ee9f8188500000a0001007572c85c318e0000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (async)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000400010000000a00050000082101f7ff00000a000100a97ee9f8188500000a0001007572c85c318e0000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x1f, 0x80805, 0x40)
epoll_create$auto(0x4) (async)
epoll_create$auto(0x4)
epoll_pwait$auto(r1, 0x0, 0x3, 0x6, &(0x7f00000001c0)={0x100000001}, 0x8)

6.854799379s ago: executing program 4 (id=4676):
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x5, 0x8, 0xffffffffffffffff, @relative_id=0x3, 0x41b5c1ff}, 0x92)
r0 = eventfd2$auto(0x1, 0x4)
read$auto_proc_pid_maps_operations_internal(r0, 0x0, 0x0)
r1 = socket(0x2a, 0x1, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r1)
syz_genetlink_get_family_id$auto_ila(0x0, r1)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
ioctl$auto(r2, 0x8004b707, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ILA_CMD_DEL(r3, 0x0, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r4, 0xd22, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x40044)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r5, 0x0, 0x2)
read$auto(0x3, 0x0, 0x80)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='d\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8)
io_uring_setup$auto(0x14, 0x0)
socket(0x2, 0x6, 0x0)
mmap$auto(0x200000, 0x200006, 0x1, 0x40eb1, 0x602, 0xb00000000000)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55)

5.236346223s ago: executing program 4 (id=4680):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.15/usb39/39-0:1.0/usb39-port4/uevent\x00', 0x40, 0x0)
lseek$auto(r0, 0x8, 0x8001)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x0, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mlock$auto(0x7c88, 0xffffffffffffc4d5)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgsnd$auto(0x5, 0x0, 0x3, 0x8)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mlock$auto(0xfbe8, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002800)={'dummy0\x00'})
ppoll$auto(0x0, 0x1, 0x0, 0x0, 0x8)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(0xffffffffffffffff, &(0x7f0000004740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40404}, 0x8800)
mlock$auto(0x8001, 0xb)
mlock$auto(0x7c88, 0x7fff)
futex_waitv$auto(&(0x7f0000000000)={0xa, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x3, 0x1, 0x3ff, 0x10000007, 0x1005, 0x9, 0xffffffffffffffff, [0x5e1, 0x2e9, 0x8], {0xfffffffd, 0x0, 0x8, 0x8, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x2, 0xfff, 0xffff7fff, 0x2, 0x4000018, 0x200, 0x3, 0x0, 0x3}})
madvise$auto(0x108000, 0x800034, 0xc)
bpf$auto(0xb, 0x0, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_swap\x00', 0x600, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mlockall$auto(0x17d)

4.95957099s ago: executing program 1 (id=4682):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket(0x28, 0x5, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x55) (async)
ppoll$auto(&(0x7f0000000000)={r0, 0x1, 0xfff}, 0x3, 0x0, 0x0, 0x8)
r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x40480, 0x0)
mmap$auto(0x3, 0x2, 0x64, 0x2255, r1, 0x2)
ioperm$auto(0x3ff, 0x2, 0x1aff) (async, rerun: 32)
r2 = epoll_create$auto(0x3e) (rerun: 32)
epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0)

4.782129559s ago: executing program 2 (id=4683):
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x2600, 0x0)
socket(0xa, 0x801, 0x106)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
setsockopt$auto(r0, 0x0, 0x40000001, 0x0, 0x2)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
getrandom$auto(&(0x7f0000000000)='\x00', 0xf4, 0xff)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x4}, @OVS_DP_ATTR_NAME={0xa, 0x1, '%d}\x01^\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x2000000)

4.730949273s ago: executing program 6 (id=4684):
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
r1 = socket(0x10, 0x2, 0x4)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r1, @ANYBLOB="0800fb"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000845}, 0x4004010)
socket(0x2, 0x6, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22040, 0x175)
socket(0x840000000002, 0x3, 0xff)

4.476348138s ago: executing program 6 (id=4685):
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000006a80)='/sys/kernel/tracing/timestamp_mode\x00', 0x42, 0x0)
mmap$auto(0xffffffffffff2a08, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0)
r1 = io_uring_setup$auto(0x1, 0x0)
io_uring_enter$auto(r1, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/sda/sched/dispatch2\x00', 0x0, 0x0)
lseek$auto(r0, 0x8, 0x1)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x400001, 0x9f, 0x10, 0x2, 0x2)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
setsockopt$auto(0x3, 0x10000000084, 0x16, 0x0, 0x8)
clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
write$auto(0x3, 0x0, 0xfffffdef)

4.070572089s ago: executing program 1 (id=4686):
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x14, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x7, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x4, 0x200000100103})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r2 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
renameat$auto(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00')
write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
flock$auto(r0, 0x0)
futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
io_uring_setup$auto(0x4000b, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x0, 0x1005, 0x28, 0x7, [0x4, 0x2e9, 0x8], {0x2, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x9}, {0x4, 0xfff, 0xffff7fff, 0x1, 0x8, 0x200, 0x3, 0x0, 0x3}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
gettid()
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
bind$auto(0x3, 0x0, 0x6a)
setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8)

3.955688551s ago: executing program 6 (id=4687):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r1=>0x0})
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dri/card1\x00', 0x22000, 0x0)
mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x10, 0x13, r2, 0x800000)
close_range$auto(r0, 0x8, 0x0)
socket(0xa, 0x806, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x7, 0x9, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00000000e4ffffffffffffff00"}, 0x55)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff050000000800"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
close_range$auto(0x2, 0x8, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = getpgid(0x0)
setpgid$auto(r4, r5)
r6 = gettid()
process_vm_readv$auto(r6, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001900)=ANY=[], 0x9c0}, 0x1, 0x0, 0x0, 0x87}, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x602000, 0x0)

3.822209466s ago: executing program 2 (id=4688):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x23, 0x0) (async)
sysfs$auto(0x2, 0x23, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x40, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000280)=""/244, 0xf4) (async)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000280)=""/244, 0xf4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r0, @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000001c0), r2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x3, 0x2, 0xc) (async)
socket(0x3, 0x2, 0xc)
io_uring_setup$auto(0x3, 0x0)
setsockopt$auto(0x5, 0x104000000000010e, 0x2, 0x0, 0x16)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
prctl$auto(0x41555856, 0xd, 0x2008, 0x0, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
socket(0xa, 0x5, 0x0) (async)
r3 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r3, 0x84, 0xa, 0x0, 0x0) (async)
getsockopt$auto(r3, 0x84, 0xa, 0x0, 0x0)
write$auto(0x3, 0x0, 0x100082) (async)
write$auto(0x3, 0x0, 0x100082)
syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000000c0), r2)
write$auto_buffer_subbuf_size_fops_trace(0xffffffffffffffff, 0x0, 0x0)

3.386768721s ago: executing program 1 (id=4689):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x7fffffffffffffff, 0x80000006, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0xfffffffeffffff91, 0xfd3, 0x2, 0x8000000ec, 0xfffffffffffffffd, 0x81, 0x100000000, 0x6, 0xfffffffffffffff7, 0x17fffffff})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/initstate\x00', 0x101000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/214, 0xd6)

2.942703745s ago: executing program 1 (id=4690):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0x6)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_COORDINATOR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044)
r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
pread64$auto(r3, 0x0, 0x7, 0x200)
sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, r2, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x800}, @NL802154_ATTR_WPAN_PHY_NAME={0x8, 0x2, ':])\x00'}, @NL802154_ATTR_PEER={0xe3, 0x28, 0x0, 0x1, [@generic="72ed33d39cbcc38b193cfb49df4b7206be9e1bb1f00254999bde8609e35f6c90fded7d026920d400dc933ae1abe5b2e6d847d72b7104c6584c7b5f2253478615c0e2da009701bbd81133a9263f340ff8e576c91a438bc143ffe7324c606aab4c7150064ae9c6b8da99468d5d0bd8f6d9cc18c489ea0269772ff66e269d2c928347f4fdfd535ffee1ba1b43f6224521aec08d4cb2f86116a48ffe425bf80835f36bf38084ae977ccf0dc9f0d9d0f346e0efa5405d5b6ec8d9c502fded52163fe3c827463b03124471c91b45fc814d37e69c0c0c644006052ec9ca45a58ab982"]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000)

2.462025465s ago: executing program 1 (id=4691):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
getsockname$auto(r1, &(0x7f0000000000), 0x0)
listen$auto(r1, 0x9)
futex$auto(0x0, 0x85, 0x2, 0x0, 0x0, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0)
ioctl$auto(0xc8, 0x400454d4, 0xe)
accept$auto(r1, 0x0, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r2 = socket(0x1e, 0x1, 0x0)
connect$auto(r2, &(0x7f0000000000), 0x10)
write$auto(0x3, 0x0, 0xfffffdef)
linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)

2.36870391s ago: executing program 6 (id=4692):
socket(0x2, 0x2, 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100), 0x19) (async)
sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100), 0x19)
socket(0x1d, 0x2, 0x7) (async)
r0 = socket(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00'})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, <r2=>0x4, 0x9203, 0x2e, 0x408, 0x9, 0xffffffffffffffff, 0x4000000000, 0x50}, 0x6f4)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) (async)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r4, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@generic="c106624d"]}]}, 0x24}}, 0x4000000)
sendmsg$auto_NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x48000)
kexec_load$auto(0x5, 0xffffffffffffffff, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x40000000, 0x800c000}, 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyae/power/runtime_status\x00', 0x1, 0x0)
mmap$auto(0x9ce6, 0x7, 0x8, 0xfffffffffffffff1, r1, 0x8) (async)
mmap$auto(0x9ce6, 0x7, 0x8, 0xfffffffffffffff1, r1, 0x8)

1.066798598s ago: executing program 6 (id=4693):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804)
bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x630, 0x57d, 0x9, 0x8}, 0xa3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a})
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100)

740.467382ms ago: executing program 1 (id=4694):
mmap$auto(0x0, 0x2020009, 0x3, 0x17, 0xfffffffffffffffa, 0x8000)
rseq$auto(&(0x7f00000000c0)={0x8, 0x9, 0x2, 0x530, 0x3, 0x8000, "e495a70a3191b63c1a3f47f0d3a5e29f57496fcb0de19cd2558802cc7d7a118df3046f3ecfe65c03a3a45e9ab7bf7d546f2fa18d894e775b0cf5f3bdd4257cf949e7d51c7548ea38f76d84a6dafba57106375d2c980c0e03310c091fb1c2266c54b9ae5cbba2f99ea4d6a54ee21556f784ce0026b7b56098a98b74c07ef27f63dd92e90015a1ebfde390"}, 0x8, 0x4, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fgetxattr$auto(r0, 0x0, 0x0, 0x100000000000000)
io_uring_setup$auto(0x6, 0x0)
futex$auto(0xfffffffffffffffc, 0xc, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyd1\x00', 0x40, 0x0)
ioctl$auto_TIOCSTI2(r2, 0x5412, 0xfdfdffffffffffff)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, 0x0)
unshare$auto(0x40000080)
gettid()
r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x21, 0x100005f, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
quotactl$auto(0x2, &(0x7f0000000040)='/dev/sda1\x00', 0x62a0, 0x0)
fcntl$auto(r3, 0x400, 0x1)
truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7f)
close_range$auto(0x0, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)

656.917268ms ago: executing program 2 (id=4695):
r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b74, 0x5, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/io_timeout\x00', 0x80880, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/187, 0xbb)
acct$auto(&(0x7f00000004c0)='/sys/devices/virtual/block/nullb0/queue/io_timeout\x00')
listen$auto(r0, 0xb0)
getsockopt$auto(r0, 0xfffffffb, 0x7fffffff, &(0x7f0000000300)='/sys/devices/virtual/block/nullb0/queue/io_timeout\x00', &(0x7f0000000380)=0x1)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40001, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES8, @ANYRESOCT=0x0, @ANYRES8=r1], 0x24c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r3 = open(&(0x7f00000002c0)='./file0\x00', 0x2c0882, 0x6a)
write$auto(r3, 0x0, 0xeffd)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
close_range$auto(0x6, 0xeffff000, 0x6)
ioperm$auto(0x7, 0x6, 0x5)
finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004)
r4 = prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0)
ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0xf, r0, r4, 0x200005})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000)
read$auto(r3, &(0x7f0000000280)='/sys/devices/virtual/block/nullb0/queue/io_timeout\x00', 0x8001)
r5 = openat$auto_fops_u32_ro_(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim6/ports/0/bpf_offloaded_id\x00', 0x101001, 0x0)
writev$auto(r5, &(0x7f00000003c0)={0x0, 0x9}, 0x9)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/links\x00', 0x800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000700)=""/4096, 0x1000)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x200402, 0x0)
close_range$auto(r1, r6, 0x9)

0s ago: executing program 6 (id=4696):
r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0)
write$auto_tty_fops_tty_io(r1, &(0x7f0000000340)='*', 0x1)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
futex_wake$auto(0x0, 0x400000008, 0x2, 0x82)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x2, 0x2, 0x1)
sendto$auto(r3, 0x0, 0xb, 0xc, 0x0, 0x1c)
socket(0x10, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP0_READ(r4, 0xc0085504, &(0x7f00000001c0)={0x9, 0x1, 0x6})
sendmsg$auto_TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000006400)={0x0, 0x0, &(0x7f00000063c0)={&(0x7f0000004400)={0x18, r0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x10048000)

kernel console output (not intermixed with test programs):

808.940322][T19235] svc: failed to register nfsdv3 RPC service (errno 111).
[  809.062306][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  809.069241][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  809.083974][T19077] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  809.101065][T19235] svc: failed to register nfsaclv3 RPC service (errno 111).
[  810.605717][T19274] Invalid ELF header magic: != ELF
[  812.889103][T19306] raw_sendmsg: syz.9.2680 forgot to set AF_INET. Fix it!
[  814.713929][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2687'.
[  815.741201][T19359] Unable to find swap-space signature

syzkaller
syzkaller login: [  817.459016][T19386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2696'.
[  817.492663][T19386] veth1_macvtap: entered allmulticast mode
[  818.034964][T19418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2700'.
[  818.797445][T19365] kexec: Could not allocate control_code_buffer
[  820.808720][T19467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2707'.
[  821.045680][T19467] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  821.653881][T19491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2710'.
[  822.924877][T19489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2709'.
[  823.218763][   T29] audit: type=1800 audit(32814.056:24): pid=19502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2712" name="members" dev="configfs" ino=71724 res=0 errno=0
[  823.242254][T19502] Setting dangerous option i915.request_timeout_ms - tainting kernel
[  824.115861][T19521] svc: failed to register nfsdv3 RPC service (errno 111).
[  824.144124][T19521] svc: failed to register nfsaclv3 RPC service (errno 111).
[  824.867975][T19534] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.16.0), cmd(49)
[  825.302756][T19545] nbd: couldn't find device at index 4095
[  827.103391][   T29] audit: type=1800 audit(32817.894:25): pid=19567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2729" name="dbroot" dev="configfs" ino=72056 res=0 errno=0
[  829.201415][T19624] svc: failed to register nfsdv3 RPC service (errno 101).
[  829.259177][T19624] svc: failed to register nfsaclv3 RPC service (errno 101).
[  829.996344][T19627] svc: failed to register nfsdv3 RPC service (errno 101).
[  830.024178][T19627] svc: failed to register nfsaclv3 RPC service (errno 101).
[  832.028952][T19659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2743'.
[  832.659655][T19679] svc: failed to register nfsdv3 RPC service (errno 111).
[  832.670156][T19679] svc: failed to register nfsaclv3 RPC service (errno 111).
[  833.799879][T19716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2753'.
[  836.253422][T19755] svc: failed to register nfsdv3 RPC service (errno 111).
[  836.271096][T19755] svc: failed to register nfsaclv3 RPC service (errno 111).
[  836.740747][T19771] binder: 19770:19771 ioctl 40044900 800000000000003 returned -22
[  837.169938][T19771] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2762'.
[  837.616035][T19771] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  837.632921][T19771] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  837.640499][T19771] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  837.653961][T19771] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  838.205851][T19813] svc: failed to register nfsdv3 RPC service (errno 101).
[  838.235340][T19813] svc: failed to register nfsaclv3 RPC service (errno 101).
[  838.374636][T19817] Process accounting resumed
[  838.917851][T19832] binder: 19830:19832 ioctl 40044900 800000000000003 returned -22
[  839.304560][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  839.518749][T19839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2777'.
[  839.607413][T19835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2776'.
[  839.713362][ T5830] Bluetooth: hci3: command 0x041b tx timeout
[  839.713387][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[  839.719574][ T5830] Bluetooth: hci0: command 0x0419 tx timeout
[  839.820133][T19835] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  839.852245][T19835] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  839.894345][T19835] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  839.903397][T19835] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  840.014188][T19856] netlink: 'syz.9.2782': attribute type 11 has an invalid length.
[  840.095846][T19861] random: crng reseeded on system resumption
[  840.401130][T19871] netlink: 4763 bytes leftover after parsing attributes in process `syz.2.2785'.
[  840.430885][T19864] svc: failed to register nfsdv3 RPC service (errno 111).
[  840.440246][T19864] svc: failed to register nfsaclv3 RPC service (errno 111).
[  841.338844][T19891] Invalid ELF header magic: != ELF
[  841.604050][T19893] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2789'.
[  841.726602][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  841.916317][ T5830] Bluetooth: hci0: command 0x0419 tx timeout
[  841.955301][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout
[  841.959617][ T5832] Bluetooth: hci3: command 0x041b tx timeout
[  842.664026][T19926] svc: failed to register nfsdv3 RPC service (errno 111).
[  842.686367][T19926] svc: failed to register nfsaclv3 RPC service (errno 111).
[  843.368718][T19941] random: crng reseeded on system resumption
[  845.407272][T19971] block nbd1: Unsupported socket: shutdown callout must be supported.
[  846.181370][T19991] random: crng reseeded on system resumption
[  846.309609][T19993] netlink: 334 bytes leftover after parsing attributes in process `syz.9.2810'.
[  849.135079][T20029] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  849.700752][T20045] random: crng reseeded on system resumption
[  853.498437][T20118] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in;
[  853.498437][T20118]    program syz.3.2833 not setting count and/or reply_len properly
[  856.629864][T20173] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535
[  858.324404][T20186] svc: failed to register nfsdv3 RPC service (errno 101).
[  858.396394][T20186] svc: failed to register nfsaclv3 RPC service (errno 101).
[  860.271004][T20203] binder: 20202:20203 ioctl 40044900 800000000000003 returned -22
[  860.712043][T20203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2849'.
[  861.609679][T20206] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  861.618897][T20206] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  861.637532][T20206] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  861.674295][T20206] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  862.393133][T20221] svc: failed to register nfsdv3 RPC service (errno 111).
[  862.437027][T20221] svc: failed to register nfsaclv3 RPC service (errno 111).
[  863.086038][T20233] svc: failed to register nfsdv3 RPC service (errno 101).
[  863.125262][T20233] svc: failed to register nfsaclv3 RPC service (errno 101).
[  863.632467][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[  863.632523][ T5832] Bluetooth: hci0: command 0x0419 tx timeout
[  863.632562][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout
[  863.707779][ T5830] Bluetooth: hci3: command 0x041b tx timeout
[  863.833017][T20246] tty tty59: ldisc open failed (-12), clearing slot 58
[  864.230430][T20264] svc: failed to register nfsdv3 RPC service (errno 111).
[  864.250951][T20264] svc: failed to register nfsaclv3 RPC service (errno 111).
[  866.504466][T20306] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2876'.
[  868.863697][T20330] [U] 
[  868.866496][T20330] [U] 
[  868.869238][T20330] [U] 
[  868.871973][T20330] [U] 
[  868.954201][T20330] [U] 
[  868.954270][T20330] [U] 
[  868.954313][T20330] [U] 
[  868.954355][T20330] [U] 
[  868.954539][T20330] [U] 
[  868.954579][T20330] [U] 
[  868.954621][T20330] [U] 
[  868.954662][T20330] [U] 
[  868.954859][T20330] [U] 
[  868.954902][T20330] [U] 
[  868.954946][T20330] [U] 
[  868.954985][T20330] [U] 
[  868.955170][T20330] [U] 
[  868.955209][T20330] [U] 
[  868.955250][T20330] [U] 
[  868.955292][T20330] [U] 
[  868.955333][T20330] [U] 
[  868.955515][T20330] [U] 
[  868.955556][T20330] [U] 
[  868.955599][T20330] [U] 
[  868.955641][T20330] [U] 
[  868.955847][T20330] [U] 
[  868.955889][T20330] [U] 
[  868.955930][T20330] [U] 
[  868.955971][T20330] [U] 
[  868.956154][T20330] [U] 
[  868.956193][T20330] [U] 
[  868.956235][T20330] [U] 
[  868.956275][T20330] [U] 
[  868.956457][T20330] [U] 
[  868.956496][T20330] [U] 
[  868.956538][T20330] [U] 
[  868.956577][T20330] [U] 
[  868.956768][T20330] [U] 
[  868.956810][T20330] [U] 
[  868.956854][T20330] [U] 
[  868.956898][T20330] [U] 
[  868.957082][T20330] [U] 
[  868.957122][T20330] [U] 
[  868.957162][T20330] [U] 
[  868.957202][T20330] [U] 
[  868.981624][T20330] [U] 
[  868.981672][T20330] [U] 
[  868.981722][T20330] [U] 
[  868.981763][T20330] [U] 
[  868.981961][T20330] [U] 
[  868.982002][T20330] [U] 
[  868.982042][T20330] [U] 
[  868.982081][T20330] [U] 
[  868.982267][T20330] [U] 
[  868.982310][T20330] [U] 
[  868.982348][T20330] [U] 
[  868.982386][T20330] [U] 
[  868.982566][T20330] [U] 
[  868.982606][T20330] [U] 
[  868.982646][T20330] [U] 
[  868.982685][T20330] [U] 
[  868.982878][T20330] [U] 
[  868.982921][T20330] [U] 
[  868.982962][T20330] [U] 
[  868.983004][T20330] [U] 
[  868.983187][T20330] [U] 
[  868.983226][T20330] [U] 
[  868.983265][T20330] [U] 
[  868.983302][T20330] [U] 
[  868.983487][T20330] [U] 
[  868.983526][T20330] [U] 
[  868.983565][T20330] [U] 
[  868.983606][T20330] [U] 
[  868.983798][T20330] [U] 
[  868.983840][T20330] [U] 
[  868.983883][T20330] [U] 
[  868.983925][T20330] [U] 
[  868.984106][T20330] [U] 
[  868.984148][T20330] [U] 
[  868.984187][T20330] [U] 
[  868.984223][T20330] [U] 
[  868.984408][T20330] [U] 
[  868.984446][T20330] [U] 
[  868.984486][T20330] [U] 
[  868.984525][T20330] [U] 
[  868.984715][T20330] [U] 
[  868.984755][T20330] [U] 
[  868.984796][T20330] [U] 
[  868.984837][T20330] [U] 
[  868.985023][T20330] [U] 
[  868.985063][T20330] [U] 
[  868.985103][T20330] [U] 
[  868.985141][T20330] [U] 
[  868.985326][T20330] [U] 
[  868.985365][T20330] [U] 
[  868.985404][T20330] [U] 
[  868.985443][T20330] [U] 
[  868.985618][T20330] [U] 
[  868.985658][T20330] [U] 
[  868.985697][T20330] [U] 
[  868.985743][T20330] [U] 
[  868.985931][T20330] [U] 
[  868.985970][T20330] [U] 
[  868.986008][T20330] [U] 
[  868.986049][T20330] [U] 
[  868.986235][T20330] [U] 
[  868.986275][T20330] [U] 
[  868.986314][T20330] [U] 
[  868.986354][T20330] [U] 
[  868.986539][T20330] [U] 
[  868.986579][T20330] [U] 
[  868.986621][T20330] [U] 
[  868.986662][T20330] [U] 
[  868.986870][T20330] [U] 
[  868.986909][T20330] [U] 
[  868.986948][T20330] [U] 
[  868.986986][T20330] [U] 
[  868.987169][T20330] [U] 
[  868.987201][T20330] [U] 
[  868.987233][T20330] [U] 
[  868.987265][T20330] [U] 
[  869.011260][T20330] [U] 
[  869.011307][T20330] [U] 
[  869.011345][T20330] [U] 
[  869.011384][T20330] [U] 
[  869.011567][T20330] [U] 
[  869.011605][T20330] [U] 
[  869.011641][T20330] [U] 
[  869.011690][T20330] [U] 
[  869.011865][T20330] [U] 
[  869.011903][T20330] [U] 
[  869.011937][T20330] [U] 
[  869.011975][T20330] [U] 
[  869.012155][T20330] [U] 
[  869.012195][T20330] [U] 
[  869.012232][T20330] [U] 
[  869.012267][T20330] [U] 
[  869.012446][T20330] [U] 
[  869.012486][T20330] [U] 
[  869.012524][T20330] [U] 
[  869.012561][T20330] [U] 
[  869.012743][T20330] [U] 
[  869.012784][T20330] [U] 
[  869.012822][T20330] [U] 
[  869.012856][T20330] [U] 
[  869.013031][T20330] [U] 
[  869.013070][T20330] [U] 
[  869.013110][T20330] [U] 
[  869.013148][T20330] [U] 
[  869.013184][T20330] [U] 
[  869.013353][T20330] [U] 
[  869.013391][T20330] [U] 
[  869.013429][T20330] [U] 
[  869.013466][T20330] [U] 
[  869.013642][T20330] [U] 
[  869.013686][T20330] [U] 
[  869.013719][T20330] [U] 
[  869.013754][T20330] [U] 
[  869.013923][T20330] [U] 
[  869.013961][T20330] [U] 
[  869.014000][T20330] [U] 
[  869.014037][T20330] [U] 
[  869.014216][T20330] [U] 
[  869.014254][T20330] [U] 
[  869.014292][T20330] [U] 
[  869.014331][T20330] [U] 
[  869.014509][T20330] [U] 
[  869.014548][T20330] [U] 
[  869.014586][T20330] [U] 
[  869.014624][T20330] [U] 
[  869.014799][T20330] [U] 
[  869.014836][T20330] [U] 
[  869.014873][T20330] [U] 
[  869.014911][T20330] [U] 
[  869.015087][T20330] [U] 
[  869.015126][T20330] [U] 
[  869.015161][T20330] [U] 
[  869.015198][T20330] [U] 
[  869.015357][T20330] [U] 
[  869.015389][T20330] [U] 
[  869.015422][T20330] [U] 
[  869.015455][T20330] [U] 
[  869.027138][T20330] [U] 
[  869.027182][T20330] [U] 
[  869.027216][T20330] [U] 
[  869.027249][T20330] [U] 
[  869.027515][T20330] [U] 
[  869.027552][T20330] [U] 
[  869.027588][T20330] [U] 
[  869.027625][T20330] [U] 
[  869.027815][T20330] [U] 
[  869.027855][T20330] [U] 
[  869.027895][T20330] [U] 
[  869.027934][T20330] [U] 
[  869.028124][T20330] [U] 
[  869.028162][T20330] [U] 
[  869.028200][T20330] [U] 
[  869.028240][T20330] [U] 
[  869.028426][T20330] [U] 
[  869.028470][T20330] [U] 
[  869.028509][T20330] [U] 
[  869.028546][T20330] [U] 
[  869.028736][T20330] [U] 
[  869.028774][T20330] [U] 
[  869.028814][T20330] [U] 
[  869.028854][T20330] [U] 
[  869.029036][T20330] [U] 
[  869.029077][T20330] [U] 
[  869.029117][T20330] [U] 
[  869.029154][T20330] [U] 
[  869.029336][T20330] [U] 
[  869.029376][T20330] [U] 
[  869.029416][T20330] [U] 
[  869.029456][T20330] [U] 
[  869.029641][T20330] [U] 
[  869.029684][T20330] [U] 
[  869.029723][T20330] [U] 
[  869.029763][T20330] [U] 
[  869.029947][T20330] [U] 
[  869.029987][T20330] [U] 
[  869.030028][T20330] [U] 
[  869.030069][T20330] [U] 
[  869.030252][T20330] [U] 
[  869.030292][T20330] [U] 
[  869.030332][T20330] [U] 
[  869.030373][T20330] [U] 
[  869.030562][T20330] [U] 
[  869.030603][T20330] [U] 
[  869.030645][T20330] [U] 
[  869.030691][T20330] [U] 
[  869.030873][T20330] [U] 
[  869.030913][T20330] [U] 
[  869.030953][T20330] [U] 
[  869.030992][T20330] [U] 
[  869.031172][T20330] [U] 
[  869.031213][T20330] [U] 
[  869.031251][T20330] [U] 
[  869.031291][T20330] [U] 
[  869.031462][T20330] [U] 
[  869.031497][T20330] [U] 
[  869.031531][T20330] [U] 
[  869.663667][T20330] [U] 
[  869.827759][T20330] [U] 
[  869.830544][T20330] [U] 
[  869.833282][T20330] [U] 
[  869.836015][T20330] [U] 
[  869.957200][T20330] [U] 
[  869.959975][T20330] [U] 
[  869.962686][T20330] [U] 
[  869.965371][T20330] [U] 
[  870.009488][T20330] [U] 
[  870.012262][T20330] [U] 
[  870.014986][T20330] [U] 
[  870.017719][T20330] [U] 
[  870.042852][T20330] [U] 
[  870.045628][T20330] [U] 
[  870.048370][T20330] [U] 
[  870.051094][T20330] [U] 
[  870.518642][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  870.524997][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  872.547514][T20390] sd 0:0:1:0: PR command failed: 1026
[  872.553203][T20390] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  872.582542][T20390] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  873.085986][T20406] futex_wake_op: syz.0.2902 tries to shift op by 64; fix this program
[  874.778028][T20443] random: crng reseeded on system resumption
[  878.177680][T20469] can: request_module (can-proto-5) failed.
[  879.335801][T20503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2921'.
[  881.541868][T20525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2925'.
[  882.787976][T20525] bond0: (slave bond_slave_1): Releasing backup interface
[  885.298284][T20567] binder: 20566:20567 ioctl 40044900 800000000000003 returned -22
[  885.727931][T20567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2933'.
[  886.088460][T20567] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  886.094626][T20567] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  886.126365][T20567] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  886.145411][T20567] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  886.429679][T20588] program syz.0.2938 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  887.947929][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  888.114098][ T5830] Bluetooth: hci0: command 0x0419 tx timeout
[  888.197449][ T5830] Bluetooth: hci3: command 0x041b tx timeout
[  888.205170][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[  888.215028][T20614] random: crng reseeded on system resumption
[  888.895613][T20636] netlink: Unknown conntrack attr (0)
[  889.291208][T20640] binder: 20639:20640 ioctl 40044900 800000000000003 returned -22
[  889.578338][T20642] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2946'.
[  889.774366][T20645] svc: failed to register nfsdv3 RPC service (errno 111).
[  889.804913][T20645] svc: failed to register nfsaclv3 RPC service (errno 111).
[  892.571525][T20677] HfR: entered promiscuous mode
[  892.649566][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2954'.
[  892.693969][T20677] HfR: left promiscuous mode
[  892.748780][T20679] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2954'.
[  893.778755][T20686] netlink: 'syz.2.2956': attribute type 11 has an invalid length.
[  896.312491][T20704] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  900.880016][T20734] binder: 20733:20734 ioctl 40044900 800000000000003 returned -22
[  902.896780][T20745] misc userio: No port type given on /dev/userio
[  902.984481][T20759] Invalid ELF header magic: != ELF
[  903.421908][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  903.443680][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  903.454816][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  903.464798][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  903.472832][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  903.480886][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  904.309995][T20762] chnl_net:caif_netlink_parms(): no params data found
[  904.685511][T20762] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.713452][T20762] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.734039][T20762] bridge_slave_0: entered allmulticast mode
[  904.778852][T20762] bridge_slave_0: entered promiscuous mode
[  904.808659][T20762] bridge0: port 2(bridge_slave_1) entered blocking state
[  904.815823][T20762] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.837716][T20762] bridge_slave_1: entered allmulticast mode
[  904.845201][T20762] bridge_slave_1: entered promiscuous mode
[  905.091100][T20762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  905.132302][T20762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  905.557404][ T5830] Bluetooth: hci1: command tx timeout
[  905.664154][T20762] team0: Port device team_slave_0 added
[  905.744099][T20762] team0: Port device team_slave_1 added
[  906.056103][T20762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  906.078084][T20762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  906.137463][T20762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  906.169631][T20762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  906.176768][T20762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  906.247381][T20762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  906.582686][T20762] hsr_slave_0: entered promiscuous mode
[  906.627820][T20762] hsr_slave_1: entered promiscuous mode
[  906.650992][T20762] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  906.667851][T20762] Cannot create hsr debugfs directory
[  907.631631][ T5830] Bluetooth: hci1: command tx timeout
[  908.454288][T20762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.906168][T20762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.424226][T20762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.726732][ T5830] Bluetooth: hci1: command tx timeout
[  909.793942][T20762] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  910.579597][T20762] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  910.620268][T20762] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  910.666240][T20762] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  910.720959][T20762] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  911.070858][T20762] 8021q: adding VLAN 0 to HW filter on device bond0
[  911.164106][T20762] 8021q: adding VLAN 0 to HW filter on device team0
[  911.223007][T16591] bridge0: port 1(bridge_slave_0) entered blocking state
[  911.230233][T16591] bridge0: port 1(bridge_slave_0) entered forwarding state
[  911.311714][T16591] bridge0: port 2(bridge_slave_1) entered blocking state
[  911.319002][T16591] bridge0: port 2(bridge_slave_1) entered forwarding state
[  911.535828][T20811] Invalid ELF header magic: != ELF
[  911.798304][ T5830] Bluetooth: hci1: command tx timeout
[  912.247461][T20762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  912.477061][T20762] veth0_vlan: entered promiscuous mode
[  912.560171][T20762] veth1_vlan: entered promiscuous mode
[  912.693672][T20762] veth0_macvtap: entered promiscuous mode
[  912.807637][T20762] veth1_macvtap: entered promiscuous mode
[  912.900002][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  912.972134][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.030429][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.092847][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.148185][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.204467][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.275175][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.326012][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.407601][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.488103][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.546045][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.599808][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.655036][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.731014][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.777624][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.838138][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.898751][T20762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  914.112571][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.187671][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.213216][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.267456][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.297520][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.337669][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.370335][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.409777][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.442207][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.479706][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.516861][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.554807][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.584835][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.647394][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.694871][T20762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.727393][T20762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.759519][T20762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  914.865615][T20762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  914.898935][T20762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  914.957673][T20762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  914.966534][T20762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  915.895702][T13574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  915.941048][T13574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  916.079374][T13568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  916.127854][T13568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  917.772089][T20839] smc: removing net device syz_tun with user defined pnetid ETHTOOL
[  920.479629][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  920.515391][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  920.524917][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  920.557064][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  920.575662][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  920.588905][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  921.943822][T20886] chnl_net:caif_netlink_parms(): no params data found
[  922.677931][ T5830] Bluetooth: hci4: command tx timeout
[  922.971488][T20902] lo: entered allmulticast mode
[  923.149342][T20886] bridge0: port 1(bridge_slave_0) entered blocking state
[  923.164212][T20886] bridge0: port 1(bridge_slave_0) entered disabled state
[  923.181866][T20886] bridge_slave_0: entered allmulticast mode
[  923.215000][T20886] bridge_slave_0: entered promiscuous mode
[  923.267563][T20886] bridge0: port 2(bridge_slave_1) entered blocking state
[  923.287424][T20886] bridge0: port 2(bridge_slave_1) entered disabled state
[  923.294729][T20886] bridge_slave_1: entered allmulticast mode
[  923.332770][T20886] bridge_slave_1: entered promiscuous mode
[  923.580809][T20901] lo: left allmulticast mode
[  923.770870][T20886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  923.813470][T20886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  924.446379][T20886] team0: Port device team_slave_0 added
[  924.725376][T20886] team0: Port device team_slave_1 added
[  924.747528][ T5830] Bluetooth: hci4: command tx timeout
[  925.158690][T20886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  925.191918][T20886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  925.300147][T20886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  925.352948][T20886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  925.374267][T20886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  925.487511][T20886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  926.071390][T20886] hsr_slave_0: entered promiscuous mode
[  926.089656][T20886] hsr_slave_1: entered promiscuous mode
[  926.120401][T20886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  926.141480][T20886] Cannot create hsr debugfs directory
[  926.829694][ T5830] Bluetooth: hci4: command tx timeout
[  928.907699][ T5830] Bluetooth: hci4: command tx timeout
[  930.692813][T20886] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  930.760136][T20886] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  930.801436][T20886] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  930.851010][T20886] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  931.335927][T20886] 8021q: adding VLAN 0 to HW filter on device bond0
[  931.419326][T20886] 8021q: adding VLAN 0 to HW filter on device team0
[  931.505244][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.512523][ T7710] bridge0: port 1(bridge_slave_0) entered forwarding state
[  931.569379][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state
[  931.576610][ T7710] bridge0: port 2(bridge_slave_1) entered forwarding state
[  932.041197][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  932.058392][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  933.423605][T20886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  935.540503][T20886] veth0_vlan: entered promiscuous mode
[  935.685634][T20886] veth1_vlan: entered promiscuous mode
[  935.799890][T20886] veth0_macvtap: entered promiscuous mode
[  935.865915][T20886] veth1_macvtap: entered promiscuous mode
[  935.968565][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.027491][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.067360][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.126357][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.197628][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.257385][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.307448][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.547377][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.567431][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.597456][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.617358][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.647328][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.657208][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.717473][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.737607][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.757486][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.777629][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.797378][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.818644][T20886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  937.049993][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  937.092008][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  937.121554][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  937.148458][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  937.181767][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  937.197610][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  937.208070][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  937.221498][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  937.240749][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  937.251765][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  937.262407][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  937.277457][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  937.290199][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  937.301034][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  937.317657][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  937.347359][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  937.357239][T20886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  937.377359][T20886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  937.378511][T20886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  937.449684][T20886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  937.479162][T20886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  937.497463][T20886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  937.507060][T20886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  937.509107][T21038] can: request_module (can-proto-0) failed.
[  938.502648][T16593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  938.513246][T16593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  938.545478][T13566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  938.607553][T13566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  938.942271][ T5864] smpboot: CPU 1 is now offline
[  941.278287][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  941.292245][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  941.317502][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  941.329261][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  941.341377][ T5832] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  941.349025][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  942.388299][T21087] chnl_net:caif_netlink_parms(): no params data found
[  943.477491][ T5830] Bluetooth: hci5: command tx timeout
[  944.348204][T21087] bridge0: port 1(bridge_slave_0) entered blocking state
[  944.454517][T21087] bridge0: port 1(bridge_slave_0) entered disabled state
[  944.547648][T21087] bridge_slave_0: entered allmulticast mode
[  944.555115][T21087] bridge_slave_0: entered promiscuous mode
[  944.699466][T21087] bridge0: port 2(bridge_slave_1) entered blocking state
[  944.706590][T21087] bridge0: port 2(bridge_slave_1) entered disabled state
[  944.877715][T21087] bridge_slave_1: entered allmulticast mode
[  944.941933][T21087] bridge_slave_1: entered promiscuous mode
[  944.988245][T21139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3021'.
[  945.147509][ T5832] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  945.551965][ T5832] Bluetooth: hci5: command tx timeout
[  946.265345][T21087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  946.352372][T21087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  947.262449][T21087] team0: Port device team_slave_0 added
[  947.358473][T21087] team0: Port device team_slave_1 added
[  947.521738][T21087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  947.584400][T21087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  947.640322][ T5832] Bluetooth: hci5: command tx timeout
[  947.797397][T21087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  947.889262][T21087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  947.896234][T21087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  948.137728][T21087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  948.538343][T21087] hsr_slave_0: entered promiscuous mode
[  948.691785][T21087] hsr_slave_1: entered promiscuous mode
[  948.806391][T21087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  948.862687][T21087] Cannot create hsr debugfs directory
[  949.707835][ T5832] Bluetooth: hci5: command tx timeout
[  954.727453][T21087] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  954.839247][T21087] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  954.912033][T21087] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  955.029501][T21087] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  955.400094][T21087] 8021q: adding VLAN 0 to HW filter on device bond0
[  955.685727][T21087] 8021q: adding VLAN 0 to HW filter on device team0
[  955.775166][T13569] bridge0: port 1(bridge_slave_0) entered blocking state
[  955.782355][T13569] bridge0: port 1(bridge_slave_0) entered forwarding state
[  955.875668][T13569] bridge0: port 2(bridge_slave_1) entered blocking state
[  955.882837][T13569] bridge0: port 2(bridge_slave_1) entered forwarding state
[  956.772979][T21087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  957.765044][T21087] veth0_vlan: entered promiscuous mode
[  957.902528][T21087] veth1_vlan: entered promiscuous mode
[  958.357961][T21087] veth0_macvtap: entered promiscuous mode
[  958.494612][T21346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3040'.
[  958.537845][T21087] veth1_macvtap: entered promiscuous mode
[  958.664579][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  958.784171][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  958.870048][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  958.967354][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  958.977202][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  959.118649][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  959.193750][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  959.287483][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  959.388169][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  959.479496][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  959.494466][T21367] Process accounting resumed
[  959.575135][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  959.661383][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  959.737352][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  959.823870][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  959.905892][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  960.017005][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  960.099012][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  960.227950][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  960.300391][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  960.377496][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  960.469594][T21087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  960.880660][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  960.967418][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.036986][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  961.097437][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.173071][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  961.242924][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.295596][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  961.357351][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.439137][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  961.500186][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.555220][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  961.623670][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.683772][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  961.743591][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.799950][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  961.856134][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.915567][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  961.967508][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  962.036526][T21087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  962.087865][T21087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  962.149032][T21087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  962.236581][T21087] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  962.307371][T21087] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  962.350768][T21087] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  962.397435][T21087] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  963.040358][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  963.104893][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  963.333324][T16591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  963.391685][T16591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  967.129314][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3055'.
[  969.321778][T21535] kAFS: bad VL server IP address
[  970.508365][T21573] MTRR 1 not used
[  972.262925][T21603] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3072'.
[  973.622304][T21631] netlink: 'syz.6.3075': attribute type 9 has an invalid length.
[  973.695317][T21631] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3075'.
[  974.778779][T21675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3081'.
[  974.921141][T21678] ptrace attach of "./syz-executor exec"[16456] was attempted by "./syz-executor exec"[21678]
[  974.974032][T21675] macsec0: entered promiscuous mode
[  975.771618][T21692] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3085'.
[  975.864710][T21694] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3085'.
[  976.238969][T21639] [U] 
[  976.241730][T21639] [U] 
[  976.244409][T21639] [U] 
[  976.247135][T21639] [U] 
[  976.369694][T21661] [U] 
[  977.217909][T21709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'.
[  978.632714][T21733] kexec: Could not allocate control_code_buffer
[  987.604925][T21906] binder: 21903:21906 ioctl 40044900 800000000000003 returned -22
[  989.341964][T21935] syz_tun: tun_chr_ioctl cmd 2147767517
[  990.680421][T21957] sd 0:0:1:0: PR command failed: 1026
[  990.867453][T21957] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  990.988989][T21957] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  993.393050][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  993.411818][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  994.479371][T22041] binder: 22039:22041 ioctl 40044900 800000000000003 returned -22
[  997.370335][T22089] vivid-013: =================  START STATUS  =================
[  997.513774][T22089] vivid-013: Generate PTS: true
[  997.582611][T22089] vivid-013: Generate SCR: true
[  997.694211][T22089] tpg source WxH: 640x360 (Y'CbCr)
[  997.773729][T22089] tpg field: 1
[  997.846047][T22089] tpg crop: 640x360@0x0
[  997.966009][T22089] tpg compose: 640x360@0x0
[  998.024019][T22089] tpg colorspace: 8
[  998.147497][T22089] tpg transfer function: 0/0
[  998.159652][T22089] tpg Y'CbCr encoding: 0/0
[  998.164091][T22089] tpg quantization: 0/0
[  998.303105][T22089] tpg RGB range: 0/2
[  998.397490][T22089] vivid-013: ==================  END STATUS  ==================
[ 1000.566463][T22142] ptrace attach of "./syz-executor exec"[20762] was attempted by "./syz-executor exec"[22142]
[ 1006.518789][T22230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3147'.
[ 1007.288737][T22244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3149'.
[ 1008.911932][T22258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3153'.
[ 1009.128806][T22270] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3154'.
[ 1011.486639][T22281] Process accounting resumed
[ 1011.588539][T22270] team0: Port device team_slave_0 removed
[ 1015.357954][T22329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3168'.
[ 1015.841870][T22329] hsr_slave_1 (unregistering): left promiscuous mode
[ 1017.527204][T22352] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1017.684457][T22352] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1018.449397][T22358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3174'.
[ 1018.530094][T22358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3174'.
[ 1018.719264][T22362] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3175'.
[ 1018.888335][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3175'.
[ 1024.018691][T22445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3193'.
[ 1024.087775][T22445] macvlan1: entered promiscuous mode
[ 1025.728659][T22455] netlink: set zone limit has 4 unknown bytes
[ 1026.190257][ T5832] Bluetooth: hci1: command 0x0406 tx timeout
[ 1026.860065][T22482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3205'.
[ 1029.174335][T22514] nfs4: Unknown parameter '0!ùṟD‘RÎ1­(LæˆÔþÕänÈQ:ç­IýE¦Ê‡²¦ˆ\8þR9Ûú‚鶒LÕ%	ÇhŠî�­ŸŸ)UÄ…Î�ÍpŸE¡ñ^Ôr‰ ÄãÈžþŸ'
[ 1029.538784][T22520] binder: 22519:22520 ioctl 40044900 800000000000003 returned -22
[ 1031.868584][T22549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3221'.
[ 1032.156461][T22549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3221'.
[ 1034.732080][T22597] tipc: Started in network mode
[ 1034.756296][T22597] tipc: Node identity ee00, cluster identity 4711
[ 1034.799486][T22597] tipc: Node number set to 60928
[ 1035.652826][T22615] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3236'.
[ 1035.865081][T22621] binder: 22619:22621 ioctl 40044900 800000000000003 returned -22
[ 1036.371770][T22627] binder: 22624:22627 ioctl 40044900 800000000000003 returned -22
[ 1040.382756][T22684] netlink: 'syz.4.3251': attribute type 22 has an invalid length.
[ 1040.463897][T22684] netlink: 'syz.4.3251': attribute type 22 has an invalid length.
[ 1040.642337][T22684] netlink: 'syz.4.3251': attribute type 22 has an invalid length.
[ 1040.671076][T22684] netlink: 'syz.4.3251': attribute type 22 has an invalid length.
[ 1040.747555][T22684] netlink: 'syz.4.3251': attribute type 22 has an invalid length.
[ 1040.809150][T22684] netlink: 'syz.4.3251': attribute type 22 has an invalid length.
[ 1040.853498][T22684] netlink: 'syz.4.3251': attribute type 22 has an invalid length.
[ 1040.916080][T22684] netlink: 'syz.4.3251': attribute type 22 has an invalid length.
[ 1040.983708][T22684] netlink: 'syz.4.3251': attribute type 22 has an invalid length.
[ 1041.042719][T22684] netlink: 'syz.4.3251': attribute type 22 has an invalid length.
[ 1041.768927][T22702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3255'.
[ 1041.946244][T22704] binder: 22703:22704 ioctl 40044900 800000000000003 returned -22
[ 1042.067450][T22702] hsr_slave_0: left promiscuous mode
[ 1042.622786][T22707] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3256'.
[ 1043.048084][T22716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3257'.
[ 1044.840611][T22707] bond0: (slave bond_slave_1): Releasing backup interface
[ 1045.152497][T22716] ip6gre0: entered promiscuous mode
[ 1046.674653][ T5830] Bluetooth: hci4: command 0x0406 tx timeout
[ 1047.415203][T22763] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3267'.
[ 1049.076036][T22788] Invalid ELF header magic: != ELF
[ 1049.623558][T22792] Process accounting resumed
[ 1052.472694][T22835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3284'.
[ 1053.353544][T22828] kexec: Could not allocate control_code_buffer
[ 1053.687646][T22867] nbd: illegal input index 50331648
[ 1054.832901][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.839981][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.008868][T22885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3297'.
[ 1058.771750][T22946] Process accounting resumed
[ 1059.062915][T22945] Process accounting resumed
[ 1059.098073][T22946] Process accounting resumed
[ 1060.927690][T22975] binder: 22973:22975 ioctl 40044900 800000000000003 returned -22
[ 1062.258159][T22975] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3315'.
[ 1064.649938][T23027] nfs: Bad value for 'source'
[ 1067.152924][ T5832] Bluetooth: hci5: command 0x0406 tx timeout
[ 1068.403812][T23067] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3331'.
[ 1068.588966][T23069] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3331'.
[ 1069.948251][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3339'.
[ 1070.935239][T23111] netlink: zone id is out of range
[ 1070.970526][T23111] netlink: zone id is out of range
[ 1071.014156][T23111] netlink: zone id is out of range
[ 1071.050690][T23111] netlink: zone id is out of range
[ 1071.104404][T23111] netlink: zone id is out of range
[ 1071.145873][T23111] netlink: zone id is out of range
[ 1071.180092][T23111] netlink: zone id is out of range
[ 1071.222203][T23111] netlink: zone id is out of range
[ 1071.267502][T23111] netlink: zone id is out of range
[ 1071.305104][T23111] netlink: zone id is out of range
[ 1073.000599][T23138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3350'.
[ 1073.071967][T23138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1073.140130][T23139] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3350'.
[ 1073.197504][T23138] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1073.268271][T23139] nbd: must specify at least one socket
[ 1073.344240][T23138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1073.387948][T23138] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1074.069685][T23153] Invalid ELF header magic: != ELF
[ 1074.510208][T23162] validate_nla: 23 callbacks suppressed
[ 1074.510224][T23162] netlink: 'syz.2.3356': attribute type 29 has an invalid length.
[ 1074.620358][T23162] netlink: 'syz.2.3356': attribute type 30 has an invalid length.
[ 1074.707803][T23162] netlink: 'syz.2.3356': attribute type 31 has an invalid length.
[ 1074.773116][T23162] netlink: 'syz.2.3356': attribute type 32 has an invalid length.
[ 1074.826972][T23162] netlink: 'syz.2.3356': attribute type 33 has an invalid length.
[ 1074.887380][T23162] netlink: 'syz.2.3356': attribute type 35 has an invalid length.
[ 1074.937428][T23162] netlink: 'syz.2.3356': attribute type 37 has an invalid length.
[ 1074.995787][T23162] netlink: 18 bytes leftover after parsing attributes in process `syz.2.3356'.
[ 1075.786422][T23179] nbd: must specify a device to reconfigure
[ 1076.303528][T23188] bridge0: port 4(syz_tun) entered blocking state
[ 1076.344881][T23188] bridge0: port 4(syz_tun) entered disabled state
[ 1076.394960][T23188] syz_tun: entered allmulticast mode
[ 1076.443816][T23188] syz_tun: entered promiscuous mode
[ 1076.487894][T23188] bridge0: port 4(syz_tun) entered blocking state
[ 1076.495852][T23188] bridge0: port 4(syz_tun) entered forwarding state
[ 1077.867809][T23216] svc: failed to register nfsdv3 RPC service (errno 111).
[ 1078.040181][T23216] svc: failed to register nfsaclv3 RPC service (errno 111).
[ 1080.203032][T23251] netlink: 'syz.4.3374': attribute type 4 has an invalid length.
[ 1080.253083][T23251] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3374'.
[ 1080.357824][T23261] netlink: 'syz.4.3374': attribute type 4 has an invalid length.
[ 1080.425717][T23257] netlink: 'syz.4.3374': attribute type 4 has an invalid length.
[ 1080.497374][T23261] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3374'.
[ 1080.567533][T23257] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3374'.
[ 1082.368025][T23287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3380'.
[ 1082.506300][T23289] net_ratelimit: 6 callbacks suppressed
[ 1082.506316][T23289] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1084.572494][T23319] Process accounting resumed
[ 1084.766276][T23337] lo: entered allmulticast mode
[ 1084.838336][T23325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3387'.
[ 1084.887405][T23339] lo: left allmulticast mode
[ 1085.781095][T23355] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1088.048328][T23376] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in;
[ 1088.048328][T23376]    program syz.6.3398 not setting count and/or reply_len properly
[ 1088.080018][T23395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3403'.
[ 1089.895725][T23430] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3410'.
[ 1090.886126][T23439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3413'.
[ 1090.919970][T23441] binder: 23440:23441 ioctl 40044900 800000000000003 returned -22
[ 1091.256229][T23442] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3414'.
[ 1092.597112][T23439] team0 (unregistering): Port device team_slave_0 removed
[ 1092.710483][T23439] team0 (unregistering): Port device team_slave_1 removed
[ 1094.171296][T23466] syz.1.3418(23466): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[ 1095.906323][T23496] bridge0: port 3(batadv0) entered blocking state
[ 1095.957504][T23496] bridge0: port 3(batadv0) entered disabled state
[ 1095.964139][T23496] batadv0: entered allmulticast mode
[ 1096.038022][T23496] batadv0: entered promiscuous mode
[ 1096.068058][T23496] bridge0: port 3(batadv0) entered blocking state
[ 1096.074665][T23496] bridge0: port 3(batadv0) entered forwarding state
[ 1096.268994][T13568] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1096.278658][T13568] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1097.196283][T23510] vhci_hcd: default hub control req: 2205 v2008 i0000 l0
[ 1098.674089][T23530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3435'.
[ 1100.937906][T23549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3440'.
[ 1101.896198][T23581] bridge0: port 5(batadv0) entered blocking state
[ 1101.928625][T23581] bridge0: port 5(batadv0) entered disabled state
[ 1101.935203][T23581] batadv0: entered allmulticast mode
[ 1102.042427][T23581] batadv0: entered promiscuous mode
[ 1102.083641][T23581] bridge0: port 5(batadv0) entered blocking state
[ 1102.090263][T23581] bridge0: port 5(batadv0) entered forwarding state
[ 1102.170965][T13568] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1102.180346][T13568] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1105.752943][T23620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3453'.
[ 1111.720002][T23715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3475'.
[ 1113.449100][T23752] mkiss: ax0: crc mode is auto.
[ 1113.732571][   T29] audit: type=1800 audit(4295000399.553:26): pid=23754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3482" name="members" dev="configfs" ino=89518 res=0 errno=0
[ 1113.823504][T23752] vivid-013: =================  START STATUS  =================
[ 1113.957416][T23752] vivid-013: Generate PTS: true
[ 1113.962351][T23752] vivid-013: Generate SCR: true
[ 1114.120809][T23752] tpg source WxH: 640x360 (Y'CbCr)
[ 1114.171821][T23752] tpg field: 1
[ 1114.211779][T23752] tpg crop: 640x360@0x0
[ 1114.415778][T23752] tpg compose: 640x360@0x0
[ 1114.427878][T23752] tpg colorspace: 8
[ 1114.432133][T23752] tpg transfer function: 0/0
[ 1114.594111][T23752] tpg Y'CbCr encoding: 0/0
[ 1114.609305][T23752] tpg quantization: 0/0
[ 1114.613496][T23752] tpg RGB range: 0/2
[ 1114.785682][T23752] vivid-013: ==================  END STATUS  ==================
[ 1116.136155][T23778] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3486'.
[ 1116.274104][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.281166][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.341863][T23778] mac80211_hwsim hwsim58 ›: renamed from wlan0 (while UP)
[ 1118.339595][T23810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3491'.
[ 1120.535849][T23821] binder: 23820:23821 ioctl 40044900 800000000000003 returned -22
[ 1120.853264][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1120.860536][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.312704][T23821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3495'.
[ 1121.437787][T23838] FAULT_INJECTION: forcing a failure.
[ 1121.437787][T23838] name failslab, interval 1, probability 0, space 0, times 0
[ 1121.787142][T23838] CPU: 0 UID: 0 PID: 23838 Comm: syz.4.3495 Tainted: G     U             6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[ 1121.799458][T23838] Tainted: [U]=USER
[ 1121.803255][T23838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1121.813316][T23838] Call Trace:
[ 1121.816589][T23838]  <TASK>
[ 1121.819516][T23838]  dump_stack_lvl+0x16c/0x1f0
[ 1121.824253][T23838]  should_fail_ex+0x497/0x5b0
[ 1121.828948][T23838]  ? fs_reclaim_acquire+0xae/0x150
[ 1121.834065][T23838]  should_failslab+0xc2/0x120
[ 1121.838745][T23838]  kmem_cache_alloc_noprof+0x6e/0x3b0
[ 1121.844161][T23838]  ? getname_flags.part.0+0x4c/0x550
[ 1121.849464][T23838]  ? vfs_write+0x306/0x1150
[ 1121.853965][T23838]  getname_flags.part.0+0x4c/0x550
[ 1121.859096][T23838]  getname+0x8d/0xe0
[ 1121.862993][T23838]  do_sys_openat2+0x104/0x1e0
[ 1121.867672][T23838]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1121.872881][T23838]  ? __fget_files+0x206/0x3a0
[ 1121.877561][T23838]  __x64_sys_openat+0x175/0x210
[ 1121.882416][T23838]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1121.887807][T23838]  ? ksys_write+0x1ba/0x250
[ 1121.892318][T23838]  do_syscall_64+0xcd/0x250
[ 1121.896852][T23838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1121.902764][T23838] RIP: 0033:0x7fb0ee185d29
[ 1121.907191][T23838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1121.926808][T23838] RSP: 002b:00007fb0ef01e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1121.935247][T23838] RAX: ffffffffffffffda RBX: 00007fb0ee376240 RCX: 00007fb0ee185d29
[ 1121.943218][T23838] RDX: 0000000000000800 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 1121.951182][T23838] RBP: 00007fb0ef01e090 R08: 0000000000000000 R09: 0000000000000000
[ 1121.959145][T23838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1121.967110][T23838] R13: 0000000000000000 R14: 00007fb0ee376240 R15: 00007fff1925af78
[ 1121.975088][T23838]  </TASK>
[ 1122.926158][T23853] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3503'.
[ 1125.826945][T23821] bond0: (slave bond_slave_1): Releasing backup interface
[ 1126.475584][T23880] netlink: 146 bytes leftover after parsing attributes in process `syz.2.3509'.
[ 1130.164593][T23929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3518'.
[ 1130.510684][T23929] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[ 1132.155898][T23943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3523'.
[ 1132.231879][T23943] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1132.504045][T23951] binder: 23947:23951 ioctl 40044900 800000000000003 returned -22
[ 1133.714793][T23951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3524'.
[ 1134.106342][T23981] binder: 23979:23981 ioctl 40044900 800000000000003 returned -22
[ 1134.898067][T23986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3533'.
[ 1137.532826][T24007] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1137.742094][T24020] netlink: 'syz.1.3541': attribute type 33 has an invalid length.
[ 1137.867611][T24020] netlink: 322 bytes leftover after parsing attributes in process `syz.1.3541'.
[ 1138.067444][T24032] ptrace attach of "./syz-executor exec"[20886] was attempted by "./syz-executor exec"[24032]
[ 1138.841535][T24045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1140.929971][T24070] netlink: 'syz.2.3553': attribute type 33 has an invalid length.
[ 1141.018602][T24070] netlink: 322 bytes leftover after parsing attributes in process `syz.2.3553'.
[ 1141.413680][T13568] bridge0: port 3(team0) entered disabled state
[ 1147.402918][T24125] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3567'.
[ 1149.668096][T24138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3570'.
[ 1149.770632][T24146] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3571'.
[ 1149.919097][T24138] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3570'.
[ 1150.015765][T24138] veth1_macvtap: entered allmulticast mode
[ 1151.760391][T24159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3573'.
[ 1154.094050][T24179] kexec: Could not allocate control_code_buffer
[ 1154.401248][T24197] bridge0: port 3(batadv0) entered blocking state
[ 1154.467115][T24197] bridge0: port 3(batadv0) entered disabled state
[ 1154.530176][T24197] batadv0: entered allmulticast mode
[ 1154.617393][T24197] batadv0: entered promiscuous mode
[ 1154.677867][T24197] bridge0: port 3(batadv0) entered blocking state
[ 1154.684420][T24197] bridge0: port 3(batadv0) entered forwarding state
[ 1154.838600][T13570] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1154.848183][T13570] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1156.357557][T24213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3585'.
[ 1156.407881][T24220] Process accounting resumed
[ 1156.413075][T24220] synth uevent: /bus/usb/drivers/gud: unknown uevent action string
[ 1157.551864][T24250] ptrace attach of "./syz-executor exec"[16456] was attempted by "./syz-executor exec"[24250]
[ 1158.258362][T24239] delete_channel: no stack
[ 1160.886340][T24292] nfs: Unknown parameter 'nl80211'
[ 1162.640859][T24319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3608'.
[ 1162.802903][T24319] unsupported nlmsg_type 40
[ 1166.318180][T24374] netlink: 350 bytes leftover after parsing attributes in process `syz.2.3619'.
[ 1168.977793][T24411] netlink: 1204 bytes leftover after parsing attributes in process `syz.6.3627'.
[ 1169.231316][T24392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3622'.
[ 1169.286762][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3627'.
[ 1170.833702][T24430] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3632'.
[ 1171.401571][T24442] binder: 24441:24442 ioctl fd 800000000000003 returned -22
[ 1172.346529][T24442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3636'.
[ 1177.103766][T24514] netlink: 'syz.4.3648': attribute type 1 has an invalid length.
[ 1177.733308][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.739943][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.561081][T24523] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3650'.
[ 1179.167654][T24530] netlink: 'syz.4.3651': attribute type 4 has an invalid length.
[ 1179.175510][T24530] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3651'.
[ 1180.570765][T24550] binder: 24546:24550 ioctl c00c6211 9 returned -14
[ 1183.207516][T24576] team0: left allmulticast mode
[ 1183.330868][T24576] team_slave_1: left allmulticast mode
[ 1183.336379][T24576] team0: left promiscuous mode
[ 1183.641717][T24576] team_slave_0: left promiscuous mode
[ 1183.846128][T24576] team_slave_1: left promiscuous mode
[ 1183.956410][T24576] bridge0: port 3(team0) entered disabled state
[ 1184.928035][T24610] Line length is too long: Should be less than 4094
[ 1186.137939][T24635] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1186.144739][T24635] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1187.198412][T24642] openvswitch: netlink: Multiple metadata blocks provided
[ 1187.570391][T24651] binder: 24650:24651 ioctl 40044900 800000000000003 returned -22
[ 1188.239158][T24658] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3678'.
[ 1188.971298][T24675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'.
[ 1189.383478][T24684] netlink: 'syz.6.3683': attribute type 4 has an invalid length.
[ 1189.469798][T24684] netlink: 314 bytes leftover after parsing attributes in process `syz.6.3683'.
[ 1189.814309][T24692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3684'.
[ 1191.439704][T24712] binder: 24711:24712 ioctl 40044900 800000000000003 returned -22
[ 1192.862077][T24726] HfR: entered promiscuous mode
[ 1193.047994][T24726] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3693'.
[ 1193.122988][T24726] HfR: left promiscuous mode
[ 1195.084618][T24749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3697'.
[ 1197.441302][T24780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3705'.
[ 1197.539236][T24780] hsr_slave_0: entered allmulticast mode
[ 1198.566275][T24799] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3708'.
[ 1204.444958][T24876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3726'.
[ 1205.806321][T24888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3729'.
[ 1210.147975][T24938] can: request_module (can-proto-0) failed.
[ 1210.840596][T24958] binder: 24955:24958 ioctl 40044900 800000000000003 returned -22
[ 1211.746007][T24958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3744'.
[ 1212.836699][T24976] zram: Added device: zram3
[ 1213.614890][T24958] bond0: (slave bond_slave_1): Releasing backup interface
[ 1214.113513][T24988] Invalid ELF header magic: != ELF
[ 1214.507974][T24991] delete_channel: no stack
[ 1220.000525][T25073] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3776'.
[ 1220.075103][T25073] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3776'.
[ 1230.756196][   T29] audit: type=1326 audit(4295000516.582:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25225 comm="syz.1.3809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf98785d29 code=0x0
[ 1232.981616][T25261] can: request_module (can-proto-0) failed.
[ 1234.168530][T25276] binder: 25275:25276 ioctl 40044900 800000000000003 returned -22
[ 1235.475815][T25278] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3818'.
[ 1237.417767][T25307] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3825'.
[ 1238.884572][T25335] netlink: 496 bytes leftover after parsing attributes in process `syz.6.3832'.
[ 1239.031680][T25341] netlink: 496 bytes leftover after parsing attributes in process `syz.6.3832'.
[ 1239.150923][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.158036][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1242.160012][T25387] netlink: 496 bytes leftover after parsing attributes in process `syz.6.3843'.
[ 1242.327725][T25389] netlink: 496 bytes leftover after parsing attributes in process `syz.6.3843'.
[ 1243.518451][T25403] [U] 
[ 1243.521267][T25403] [U] 
[ 1243.523950][T25403] [U] 
[ 1243.526627][T25403] [U] 
[ 1243.597339][T25403] [U] 
[ 1243.600062][T25403] [U] 
[ 1243.602751][T25403] [U] 
[ 1243.605427][T25403] [U] 
[ 1243.696255][T25403] [U] 
[ 1243.698977][T25403] [U] 
[ 1243.701656][T25403] [U] 
[ 1243.704360][T25403] [U] 
[ 1243.787507][T25403] [U] 
[ 1243.790262][T25403] [U] 
[ 1243.792941][T25403] [U] 
[ 1243.795617][T25403] [U] 
[ 1243.837293][T25403] [U] 
[ 1243.840018][T25403] [U] 
[ 1243.842699][T25403] [U] 
[ 1243.845376][T25403] [U] 
[ 1243.926035][T25403] [U] 
[ 1243.928762][T25403] [U] 
[ 1243.931459][T25403] [U] 
[ 1243.934136][T25403] [U] 
[ 1243.994782][T25403] [U] 
[ 1243.997512][T25403] [U] 
[ 1244.000223][T25403] [U] 
[ 1244.002901][T25403] [U] 
[ 1244.070387][T25403] [U] 
[ 1244.073116][T25403] [U] 
[ 1244.075812][T25403] [U] 
[ 1244.078510][T25403] [U] 
[ 1244.145302][T25403] [U] 
[ 1244.148033][T25403] [U] 
[ 1244.150710][T25403] [U] 
[ 1244.153392][T25403] [U] 
[ 1244.207486][T25403] [U] 
[ 1244.210225][T25403] [U] 
[ 1244.213024][T25403] [U] 
[ 1244.215726][T25403] [U] 
[ 1244.273414][T25403] [U] 
[ 1244.276140][T25403] [U] 
[ 1244.278820][T25403] [U] 
[ 1244.281498][T25403] [U] 
[ 1244.415232][T25403] [U] 
[ 1248.727619][T25480] netlink: 504 bytes leftover after parsing attributes in process `syz.6.3867'.
[ 1248.867335][T25480] netlink: 504 bytes leftover after parsing attributes in process `syz.6.3867'.
[ 1253.113784][T25559] netlink: 504 bytes leftover after parsing attributes in process `syz.6.3889'.
[ 1253.285056][T25563] netlink: 504 bytes leftover after parsing attributes in process `syz.6.3889'.
[ 1254.079954][T25573] Invalid ELF header magic: != ELF
[ 1259.612335][T25625] netlink: 'syz.2.3904': attribute type 16 has an invalid length.
[ 1259.877285][T25625] netlink: 322 bytes leftover after parsing attributes in process `syz.2.3904'.
[ 1260.762772][T25661] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3913'.
[ 1260.836672][T25661] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3913'.
[ 1261.016340][T25662] Invalid ELF header magic: != ELF
[ 1261.226995][T25672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3916'.
[ 1262.050460][T25692] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1262.256591][T25692] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1263.192815][T25703] Invalid ELF header magic: != ELF
[ 1266.764085][T25727] netlink: 326 bytes leftover after parsing attributes in process `syz.1.3926'.
[ 1274.855536][T25858] netlink: 326 bytes leftover after parsing attributes in process `syz.6.3962'.
[ 1275.085939][T25851] vivid-013: =================  START STATUS  =================
[ 1275.216813][T25851] vivid-013: Generate PTS: true
[ 1275.248171][T25851] vivid-013: Generate SCR: true
[ 1275.253073][T25851] tpg source WxH: 640x360 (Y'CbCr)
[ 1275.450801][T25851] tpg field: 1
[ 1275.617345][T25851] tpg crop: 640x360@0x0
[ 1275.705311][T25851] tpg compose: 640x360@0x0
[ 1275.722972][T25851] tpg colorspace: 8
[ 1275.781714][T25851] tpg transfer function: 0/0
[ 1275.907390][T25851] tpg Y'CbCr encoding: 0/0
[ 1275.911862][T25851] tpg quantization: 0/0
[ 1275.916011][T25851] tpg RGB range: 0/2
[ 1276.067284][T25851] vivid-013: ==================  END STATUS  ==================
[ 1276.833021][T25875] netlink: 'syz.1.3965': attribute type 6 has an invalid length.
[ 1277.042289][T25875] netlink: 'syz.1.3965': attribute type 7 has an invalid length.
[ 1277.238344][T25875] netlink: 'syz.1.3965': attribute type 8 has an invalid length.
[ 1277.424697][T25875] netlink: 'syz.1.3965': attribute type 9 has an invalid length.
[ 1277.424750][T25875] netlink: 226 bytes leftover after parsing attributes in process `syz.1.3965'.
[ 1278.437351][T25887] ceph: Failed to parse sending metrics switch value 'J'
[ 1279.754653][T25895] Invalid ELF header magic: != ELF
[ 1280.930065][T25916] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3976'.
[ 1281.712744][T25743] Process accounting resumed
[ 1281.808521][T25743] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 25743 comm: syz.6.3928)
[ 1282.184378][T25925] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 25925 comm: syz.6.3978)
[ 1282.863457][T25941] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 25941 comm: syz.6.3982)
[ 1284.845532][T25956] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 25956 comm: syz.6.3984)
[ 1285.203141][T25969] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 25969 comm: syz.6.3991)
[ 1285.578749][T25971] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 25971 comm: syz.6.3992)
[ 1285.899045][T25979] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 25979 comm: syz.6.3996)
[ 1286.744517][T25990] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 25990 comm: syz.6.3999)
[ 1287.631426][T26007] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26007 comm: syz.6.4002)
[ 1288.508238][T26027] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26027 comm: syz.6.4005)
[ 1289.024907][T26035] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26035 comm: syz.6.4006)
[ 1289.474435][T26043] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26043 comm: syz.6.4008)
[ 1290.485055][T26044] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26044 comm: syz.6.4009)
[ 1291.697529][T26054] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26054 comm: syz.6.4010)
[ 1292.734955][T26057] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26057 comm: syz.6.4012)
[ 1293.103763][T26076] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26076 comm: syz.6.4016)
[ 1293.416179][T26081] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26081 comm: syz.6.4017)
[ 1293.798335][T26090] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26090 comm: syz.6.4019)
[ 1294.125875][T26094] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26094 comm: syz.6.4022)
[ 1294.216848][T26100] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4021'.
[ 1294.569306][T26105] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4025'.
[ 1294.648263][T26108] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4025'.
[ 1294.824692][T26102] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26102 comm: syz.6.4024)
[ 1295.017332][   T29] audit: type=1800 audit(4294967340.139:28): pid=26111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4026" name="version" dev="configfs" ino=99087 res=0 errno=0
[ 1295.504558][T26119] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26119 comm: syz.6.4028)
[ 1295.697751][T26115] can: request_module (can-proto-0) failed.
[ 1296.135032][T26127] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26127 comm: syz.6.4029)
[ 1296.706140][T26144] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26144 comm: syz.6.4031)
[ 1296.988052][T26153] veth1: mtu greater than device maximum
[ 1297.837502][T26152] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26152 comm: syz.6.4034)
[ 1298.285984][T26173] Invalid ELF header magic: != ELF
[ 1298.325924][T26168] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26168 comm: syz.6.4038)
[ 1299.177686][T26189] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4042'.
[ 1299.255702][T26190] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4042'.
[ 1299.630514][T26178] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26178 comm: syz.6.4041)
[ 1300.365446][T26200] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26200 comm: syz.6.4047)
[ 1300.594214][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.601611][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.695626][T26213] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26213 comm: syz.6.4050)
[ 1302.186897][T26219] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26219 comm: syz.6.4051)
[ 1302.611431][T26234] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26234 comm: syz.6.4055)
[ 1302.656592][T26237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4056'.
[ 1302.860168][T26237] bridge0: port 4(syz_tun) entered disabled state
[ 1303.320590][T26238] netlink: 'syz.2.4056': attribute type 9 has an invalid length.
[ 1303.391295][T26237] syz_tun (unregistering): left allmulticast mode
[ 1303.449668][T26237] syz_tun (unregistering): left promiscuous mode
[ 1303.497376][T26237] bridge0: port 4(syz_tun) entered disabled state
[ 1304.031321][T26239] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26239 comm: syz.6.4057)
[ 1304.424664][T26267] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26267 comm: syz.6.4062)
[ 1304.636744][T26273] Invalid ELF header magic: != ELF
[ 1305.377330][T26290] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4070'.
[ 1305.434144][T26291] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4070'.
[ 1305.523494][T26274] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26274 comm: syz.6.4067)
[ 1305.855024][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4072'.
[ 1306.079824][T26296] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26296 comm: syz.6.4072)
[ 1306.937594][T26308] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26308 comm: syz.6.4073)
[ 1307.342916][T26315] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26315 comm: syz.6.4076)
[ 1308.030190][T26332] Invalid ELF header magic: != ELF
[ 1309.036277][T26345] netlink: 'syz.4.4083': attribute type 29 has an invalid length.
[ 1309.157415][T26345] netlink: 'syz.4.4083': attribute type 30 has an invalid length.
[ 1309.277272][T26345] netlink: 'syz.4.4083': attribute type 31 has an invalid length.
[ 1309.375830][T26324] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26324 comm: syz.6.4079)
[ 1309.406171][T26345] netlink: 'syz.4.4083': attribute type 32 has an invalid length.
[ 1309.506353][T26345] netlink: 'syz.4.4083': attribute type 33 has an invalid length.
[ 1309.619629][T26345] netlink: 'syz.4.4083': attribute type 35 has an invalid length.
[ 1309.656170][T26349] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4085'.
[ 1309.737992][T26349] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4085'.
[ 1309.777244][T26345] netlink: 'syz.4.4083': attribute type 37 has an invalid length.
[ 1309.907781][T26345] netlink: 18 bytes leftover after parsing attributes in process `syz.4.4083'.
[ 1312.990180][T26351] Process accounting paused
[ 1313.649979][T26375] syz.1.4092: vmalloc error: size 2711552, failed to allocated page array size 5296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1313.988559][T26375] CPU: 0 UID: 0 PID: 26375 Comm: syz.1.4092 Tainted: G     U             6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[ 1314.000835][T26375] Tainted: [U]=USER
[ 1314.004634][T26375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1314.014684][T26375] Call Trace:
[ 1314.017958][T26375]  <TASK>
[ 1314.020881][T26375]  dump_stack_lvl+0x16c/0x1f0
[ 1314.025738][T26375]  warn_alloc+0x24d/0x3a0
[ 1314.030066][T26375]  ? __pfx_warn_alloc+0x10/0x10
[ 1314.034932][T26375]  ? __get_vm_area_node+0x1b0/0x2f0
[ 1314.040128][T26375]  ? __get_vm_area_node+0x1dc/0x2f0
[ 1314.045326][T26375]  __vmalloc_node_range_noprof+0x1105/0x1530
[ 1314.051322][T26375]  ? __lruvec_stat_mod_folio+0xa0/0x360
[ 1314.056887][T26375]  ? lock_acquire+0x2f/0xb0
[ 1314.061388][T26375]  ? bpf_check+0x206/0xc870
[ 1314.065888][T26375]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1314.072232][T26375]  ? rcu_is_watching+0x12/0xc0
[ 1314.076993][T26375]  ? trace_kmalloc+0x2d/0xd0
[ 1314.081577][T26375]  ? __kmalloc_node_noprof.cold+0x5a/0x5f
[ 1314.087303][T26375]  ? __kvmalloc_node_noprof+0x6f/0x1a0
[ 1314.092762][T26375]  ? ktime_get+0x206/0x300
[ 1314.097182][T26375]  ? bpf_check+0x206/0xc870
[ 1314.101682][T26375]  vzalloc_noprof+0x6b/0x90
[ 1314.106189][T26375]  ? bpf_check+0x206/0xc870
[ 1314.110690][T26375]  bpf_check+0x206/0xc870
[ 1314.115015][T26375]  ? hlock_class+0x4e/0x130
[ 1314.119514][T26375]  ? __lock_acquire+0x15a9/0x3c40
[ 1314.124540][T26375]  ? __pfx___lock_acquire+0x10/0x10
[ 1314.129732][T26375]  ? __pfx_bpf_check+0x10/0x10
[ 1314.134498][T26375]  ? find_held_lock+0x2d/0x110
[ 1314.139260][T26375]  ? bpf_prog_load+0xd45/0x2670
[ 1314.144103][T26375]  ? __pfx_lock_release+0x10/0x10
[ 1314.149118][T26375]  ? trace_lock_acquire+0x14e/0x1f0
[ 1314.154309][T26375]  ? bpf_prog_load+0xd45/0x2670
[ 1314.159150][T26375]  ? ktime_get_with_offset+0x273/0x3a0
[ 1314.164612][T26375]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1314.169812][T26375]  ? read_tsc+0x9/0x20
[ 1314.173876][T26375]  ? ktime_get_with_offset+0x20f/0x3a0
[ 1314.179336][T26375]  ? bpf_obj_name_cpy+0x156/0x1b0
[ 1314.184364][T26375]  bpf_prog_load+0xe3f/0x2670
[ 1314.189040][T26375]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1314.194142][T26375]  ? find_held_lock+0x2d/0x110
[ 1314.198909][T26375]  ? __might_fault+0x13b/0x190
[ 1314.203679][T26375]  ? __might_fault+0xe3/0x190
[ 1314.208364][T26375]  __sys_bpf+0x5677/0x57a0
[ 1314.212777][T26375]  ? __pfx___sys_bpf+0x10/0x10
[ 1314.217533][T26375]  ? kmem_cache_free+0x152/0x4c0
[ 1314.222469][T26375]  ? putname+0x13c/0x180
[ 1314.226730][T26375]  ? __put_unused_fd+0x179/0x280
[ 1314.231693][T26375]  ? do_futex+0x123/0x350
[ 1314.236029][T26375]  ? __pfx_do_futex+0x10/0x10
[ 1314.240710][T26375]  ? xfd_validate_state+0x5d/0x180
[ 1314.245814][T26375]  ? rcu_is_watching+0x12/0xc0
[ 1314.250578][T26375]  __x64_sys_bpf+0x78/0xc0
[ 1314.254989][T26375]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1314.260199][T26375]  do_syscall_64+0xcd/0x250
[ 1314.264701][T26375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1314.270591][T26375] RIP: 0033:0x7faf98785d29
[ 1314.274999][T26375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1314.294619][T26375] RSP: 002b:00007faf99674038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1314.303026][T26375] RAX: ffffffffffffffda RBX: 00007faf98975fa0 RCX: 00007faf98785d29
[ 1314.310989][T26375] RDX: 000000000000000a RSI: 0000000020001080 RDI: 0000000000000005
[ 1314.318954][T26375] RBP: 00007faf98801b08 R08: 0000000000000000 R09: 0000000000000000
[ 1314.326926][T26375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1314.334890][T26375] R13: 0000000000000000 R14: 00007faf98975fa0 R15: 00007ffef3016e48
[ 1314.342862][T26375]  </TASK>
[ 1316.774216][T26375] Mem-Info:
[ 1316.797294][T26375] active_anon:53752 inactive_anon:4197 isolated_anon:1014
[ 1316.797294][T26375]  active_file:3513 inactive_file:54411 isolated_file:0
[ 1316.797294][T26375]  unevictable:801 dirty:448 writeback:0
[ 1316.797294][T26375]  slab_reclaimable:12682 slab_unreclaimable:126716
[ 1316.797294][T26375]  mapped:45576 shmem:35410 pagetables:1323
[ 1316.797294][T26375]  sec_pagetables:0 bounce:0
[ 1316.797294][T26375]  kernel_misc_reclaimable:0
[ 1316.797294][T26375]  free:1231602 free_pcp:5141 free_cma:0
[ 1316.980869][T26438] ptrace attach of "./syz-executor exec"[20886] was attempted by "./syz-executor exec"[26438]
[ 1317.107421][T26375] Node 0 active_anon:201956kB inactive_anon:16788kB active_file:14052kB inactive_file:217640kB unevictable:1668kB isolated(anon):2080kB isolated(file):0kB mapped:182720kB dirty:1792kB writeback:0kB shmem:125076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13520kB pagetables:5292kB sec_pagetables:0kB all_unreclaimable? no
[ 1317.341880][T26375] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1317.566231][T26375] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1317.821708][T26375] lowmem_reserve[]: 0 2465 2466 0 0
[ 1317.865011][T26375] Node 0 DMA32 free:1022352kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:194024kB inactive_anon:16788kB active_file:14052kB inactive_file:217800kB unevictable:1668kB writepending:1996kB present:3129332kB managed:2551340kB mlocked:0kB bounce:0kB free_pcp:22696kB local_pcp:22696kB free_cma:0kB
[ 1318.128908][T26375] lowmem_reserve[]: 0 0 0 0 0
[ 1318.160838][T26375] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1318.345837][T26375] lowmem_reserve[]: 0 0 0 0 0
[ 1318.370059][T26375] Node 1 Normal free:3908048kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2208kB local_pcp:2208kB free_cma:0kB
[ 1318.591658][T26375] lowmem_reserve[]: 0 0 0 0 0
[ 1318.622204][T26375] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1318.718541][T26375] Node 0 DMA32: 247*4kB (UME) 2399*8kB (UM) 1109*16kB (UM) 906*32kB (UME) 1066*64kB (UME) 477*128kB (UM) 283*256kB (UME) 104*512kB (UM) 79*1024kB (UM) 4*2048kB (UME) 149*4096kB (UME) = 1021284kB
[ 1318.886403][T26375] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[ 1319.007467][T26375] Node 1 Normal: 170*4kB (UME) 53*8kB (UME) 44*16kB (UME) 174*32kB (UME) 88*64kB (UME) 40*128kB (UME) 17*256kB (UME) 9*512kB (UME) 4*1024kB (UME) 3*2048kB (UM) 945*4096kB (M) = 3908048kB
[ 1319.127434][T26375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1319.186109][T26375] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1319.252823][T26375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1319.317381][T26375] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1319.394479][T26375] 92786 total pagecache pages
[ 1319.415132][T26375] 326 pages in swap cache
[ 1319.434893][T26375] Free swap  = 115748kB
[ 1319.474309][T26375] Total swap = 124996kB
[ 1319.500936][T26375] 2097051 pages RAM
[ 1319.532204][T26375] 0 pages HighMem/MovableOnly
[ 1319.565712][T26375] 427366 pages reserved
[ 1319.596292][T26375] 0 pages cma reserved
[ 1320.658269][T26472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4110'.
[ 1321.987936][T26482] bridge0: port 3(vlan1) entered blocking state
[ 1321.994258][T26482] bridge0: port 3(vlan1) entered disabled state
[ 1322.236028][T26482] vlan1: entered allmulticast mode
[ 1322.317583][T26482] veth0_vlan: entered allmulticast mode
[ 1322.530758][T26482] vlan1: entered promiscuous mode
[ 1322.667996][T26482] bridge0: port 3(vlan1) entered blocking state
[ 1322.674316][T26482] bridge0: port 3(vlan1) entered forwarding state
[ 1323.778060][T26498] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4117'.
[ 1324.504654][T26512] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4121'.
[ 1324.537920][T26508] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1325.588392][T26530] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4128'.
[ 1325.648056][T26530] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4128'.
[ 1330.576462][T26607] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4145'.
[ 1331.373025][T26605] kAFS: No cell specified
[ 1342.979724][T26741] ubi0: detaching mtd0
[ 1343.038955][T26741] ubi0: mtd0 is detached
[ 1343.700818][T26749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4183'.
[ 1343.732085][T26698] Process accounting resumed
[ 1343.736744][T26698] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26698 comm: syz.6.4169)
[ 1343.899895][T26749] vxcan1: entered promiscuous mode
[ 1344.459025][T26644] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26644 comm: syz.6.4152)
[ 1345.266979][T26753] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26753 comm: syz.6.4184)
[ 1345.483461][T26765] smc: net device syz_tun applied user defined pnetid ETHTOOL
[ 1346.672112][T26777] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26777 comm: syz.6.4187)

syzkaller
syzkaller login: [ 1348.520465][T26793] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26793 comm: syz.6.4187)
[ 1349.807470][T26817] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26817 comm: syz.6.4199)
[ 1350.395855][T26834] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26834 comm: syz.6.4201)
[ 1351.255746][T26843] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26843 comm: syz.6.4203)
[ 1352.377443][T26865] vmstat_refresh: nr_hugetlb -12288
[ 1352.539117][T26847] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1353.046254][T26859] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26859 comm: syz.6.4206)
[ 1353.835542][T26879] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26879 comm: syz.6.4211)
[ 1354.094045][T26882] delete_channel: no stack
[ 1354.337806][T26885] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4212'.
[ 1354.740474][T26895] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26895 comm: syz.6.4215)
[ 1355.518918][T26909] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26909 comm: syz.6.4222)
[ 1357.705792][T26925] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26925 comm: syz.6.4225)
[ 1358.743291][T26946] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26946 comm: syz.6.4231)
[ 1359.383303][T26959] netlink: 'syz.1.4234': attribute type 11 has an invalid length.
[ 1359.796573][T26774] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26774 comm: syz.6.4187)
[ 1360.175528][T26965] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26965 comm: syz.6.4233)
[ 1362.036261][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.059523][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.352830][T26983] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26983 comm: syz.6.4239)
[ 1363.309689][T27005] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 27005 comm: syz.6.4243)
[ 1364.081597][T27019] aoe: can't write to that file.
[ 1364.277695][T27019] aoe: can't write to that file.
[ 1364.522398][T27019] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 27019 comm: syz.6.4247)
[ 1366.660262][T27034] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 27034 comm: syz.6.4252)
[ 1368.215820][T27060] erspan0: entered allmulticast mode
[ 1370.576350][T27100] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4265'.
[ 1372.439756][T27123] HfR: entered promiscuous mode
[ 1373.287674][T27060] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 27060 comm: syz.6.4255)
[ 1373.514852][T26966] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 26966 comm: syz.6.4233)
[ 1374.606544][T27150] Process accounting paused
[ 1375.956974][ T5830] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1376.468824][T27164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4281'.
[ 1376.532336][T27165] Process accounting resumed
[ 1376.590732][T27164] ip6gre0: entered promiscuous mode
[ 1377.742717][T27195] netlink: 496 bytes leftover after parsing attributes in process `syz.2.4289'.
[ 1377.912668][T27198] netlink: 496 bytes leftover after parsing attributes in process `syz.2.4289'.
[ 1381.094754][T27223] netlink: 'syz.4.4297': attribute type 29 has an invalid length.
[ 1381.168283][T27223] netlink: 'syz.4.4297': attribute type 30 has an invalid length.
[ 1381.313080][T27223] netlink: 'syz.4.4297': attribute type 31 has an invalid length.
[ 1381.409239][T27223] netlink: 'syz.4.4297': attribute type 32 has an invalid length.
[ 1381.476152][T27223] netlink: 'syz.4.4297': attribute type 33 has an invalid length.
[ 1381.544419][T27223] netlink: 'syz.4.4297': attribute type 35 has an invalid length.
[ 1381.640025][T27223] netlink: 'syz.4.4297': attribute type 37 has an invalid length.
[ 1381.699280][T27223] netlink: 18 bytes leftover after parsing attributes in process `syz.4.4297'.
[ 1384.141085][T27259] can: request_module (can-proto-5) failed.
[ 1387.342791][T27297] Process accounting resumed
[ 1388.427460][T27310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4317'.
[ 1390.701332][   T29] audit: type=1326 audit(8277292037.278:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.4.4329" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ee185d29 code=0x0
[ 1395.722966][T27422] .': entered promiscuous mode
[ 1401.204997][T27497] zram: Added device: zram4
[ 1401.697962][T27500] Process accounting resumed
[ 1401.835423][T27502] qrtr: Invalid version 0
[ 1402.258490][T27510] ptrace attach of "./syz-executor exec"[16456] was attempted by ""[27510]
[ 1404.443074][T27531] netlink: 306 bytes leftover after parsing attributes in process `syz.6.4369'.
[ 1405.596868][T27545] Invalid ELF header magic: != ELF
[ 1408.713693][T27571] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4380'.
[ 1408.835560][T27572] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4380'.
[ 1409.209006][T27577] zram: Added device: zram5
[ 1409.247071][T27577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4381'.
[ 1412.838703][T27627] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4393'.
[ 1413.433970][T27617] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(449813588.2580515121.566002756), cmd(7)
[ 1414.100319][T27646] netlink: 'syz.6.4399': attribute type 1 has an invalid length.
[ 1415.024538][T27659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4401'.
[ 1417.206676][T27702] Invalid ELF header magic: != ELF
[ 1418.364659][T27696] can: request_module (can-proto-5) failed.
[ 1421.782139][T27752] Invalid ELF header magic: != ELF
[ 1423.510283][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.523436][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.650913][T27764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4420'.
[ 1424.278855][T27764] geneve1: entered allmulticast mode
[ 1426.411577][T27793] vivid-013: =================  START STATUS  =================
[ 1426.661936][T27793] vivid-013: Generate PTS: true
[ 1426.666835][T27793] vivid-013: Generate SCR: true
[ 1426.741927][T27136] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1426.761789][T27136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1426.776043][T27136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1426.788136][T27136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1426.795970][T27136] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1426.803680][T27136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1427.102184][T27793] tpg source WxH: 640x360 (Y'CbCr)
[ 1427.107325][T27793] tpg field: 1
[ 1427.365472][T27793] tpg crop: 640x360@0x0
[ 1427.369663][T27793] tpg compose: 640x360@0x0
[ 1427.469423][T27798] chnl_net:caif_netlink_parms(): no params data found
[ 1427.665701][T27793] tpg colorspace: 8
[ 1427.752209][T27793] tpg transfer function: 0/0
[ 1427.825319][T27793] tpg Y'CbCr encoding: 0/0
[ 1427.968836][T27793] tpg quantization: 0/0
[ 1428.172722][T27793] tpg RGB range: 0/2
[ 1428.202445][T27793] vivid-013: ==================  END STATUS  ==================
[ 1428.864520][ T5830] Bluetooth: hci2: command tx timeout
[ 1429.251851][T27838] netlink: 252 bytes leftover after parsing attributes in process `syz.6.4434'.
[ 1429.344304][T27798] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1429.352101][T27798] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1429.461992][T27798] bridge_slave_0: entered allmulticast mode
[ 1429.491785][T27798] bridge_slave_0: entered promiscuous mode
[ 1429.568019][T27798] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1429.613169][T27798] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1429.620399][T27798] bridge_slave_1: entered allmulticast mode
[ 1429.719520][T27798] bridge_slave_1: entered promiscuous mode
[ 1430.364630][T27798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1430.585497][T27798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1430.944139][ T5830] Bluetooth: hci2: command tx timeout
[ 1431.297280][T27798] team0: Port device team_slave_0 added
[ 1431.359806][T27798] team0: Port device team_slave_1 added
[ 1432.132471][T27847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4436'.
[ 1432.320745][T27798] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1432.360849][T27798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1432.554648][T27798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1432.628604][T27798] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1432.695423][T27798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1432.861347][T27798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1433.025057][ T5830] Bluetooth: hci2: command tx timeout
[ 1433.339000][T27847] Process accounting paused
[ 1433.688055][T27798] hsr_slave_0: entered promiscuous mode
[ 1433.856072][T27798] hsr_slave_1: entered promiscuous mode
[ 1434.175666][T27798] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1434.215508][T27798] Cannot create hsr debugfs directory
[ 1435.105953][ T5830] Bluetooth: hci2: command tx timeout
[ 1435.769178][T27798] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1436.827721][T27798] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1437.007213][T27875] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4443'.
[ 1437.822104][T27886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4446'.
[ 1438.248308][T27798] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1439.809609][T27798] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1441.337579][T27798] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1441.691705][T27798] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1442.676835][T27798] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1442.893626][T27798] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1443.675441][T27798] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1443.786929][T27798] 8021q: adding VLAN 0 to HW filter on device team0
[ 1443.900169][T16591] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1443.907264][T16591] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1443.981421][T16591] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1443.988617][T16591] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1444.244312][T27798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1444.800427][T27798] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1445.023400][T27798] veth0_vlan: entered promiscuous mode
[ 1445.098768][T27798] veth1_vlan: entered promiscuous mode
[ 1445.187583][T27798] veth0_macvtap: entered promiscuous mode
[ 1445.276982][T27798] veth1_macvtap: entered promiscuous mode
[ 1445.492932][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1445.573095][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1445.639952][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1445.711173][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1445.733854][T27949] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4461'.
[ 1445.777972][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1445.859441][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1445.931014][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1446.006682][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1446.081363][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1446.143229][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1446.231820][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1446.291649][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1446.361956][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1446.417235][T27952] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[ 1446.429445][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1446.490251][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1446.573506][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1446.641597][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1446.708154][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1446.793214][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1446.860359][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1446.939442][T27798] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1447.000825][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1447.071640][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.141524][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1447.211905][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.276590][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1447.349492][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.404231][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1447.484784][T27952] kafs: addr_prefs: Invalid Command
[ 1447.490393][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.556363][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1447.619206][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.682221][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1447.776276][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.822203][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1447.902368][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.962296][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1448.036369][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1448.102411][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1448.202656][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1448.264797][T27798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1448.325811][T27798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1448.387658][T27798] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1448.528196][T27798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1448.582605][T27798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1448.645633][T27798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1448.713200][T27798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1449.297979][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1449.373007][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1449.607761][T26413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1449.663225][T26413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1451.559871][T27996] netlink: 74 bytes leftover after parsing attributes in process `syz.6.4469'.
[ 1453.227441][T28036] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4479'.
[ 1455.268030][T28051] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4484'.
[ 1459.188088][T28099] bridge0: port 3(batadv0) entered blocking state
[ 1459.208154][T28101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4491'.
[ 1459.331879][T28099] bridge0: port 3(batadv0) entered disabled state
[ 1459.440893][T28099] batadv0: entered allmulticast mode
[ 1459.548901][T28099] batadv0: entered promiscuous mode
[ 1459.636526][T28099] bridge0: port 3(batadv0) entered blocking state
[ 1459.643085][T28099] bridge0: port 3(batadv0) entered forwarding state
[ 1459.815644][T27831] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1459.824971][T27831] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1461.756985][T28134] Process accounting resumed
[ 1461.763684][   T29] audit: type=1804 audit(8277292091.111:30): pid=28134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4497" name="/newroot/sys/kernel/tracing/trace_marker" dev="tracefs" ino=37 res=1 errno=0
[ 1461.884411][T28134] kernel write not supported for file /trace_marker (pid: 28134 comm: syz.2.4497)
[ 1461.970451][   T29] audit: type=1804 audit(8277292091.111:31): pid=28134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4497" name="/newroot/sys/kernel/tracing/trace_marker" dev="tracefs" ino=37 res=1 errno=0
[ 1462.331419][T28134] Process accounting resumed
[ 1462.336050][T28134] kernel write not supported for file /trace_marker (pid: 28134 comm: syz.2.4497)
[ 1463.161573][T28145] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4499'.
[ 1463.891280][T28147] kernel write not supported for file /trace_marker (pid: 28147 comm: syz.2.4500)
[ 1464.968205][T28151] Process accounting resumed
[ 1465.069424][T28156] kernel write not supported for file /trace_marker (pid: 28156 comm: syz.2.4502)
[ 1465.463090][T28174] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4507'.
[ 1465.531547][T28174] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4507'.
[ 1465.608590][T28161] kernel write not supported for file /trace_marker (pid: 28161 comm: syz.2.4502)
[ 1466.084999][T28183] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4509'.
[ 1466.246030][T28187] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4509'.
[ 1466.539623][T28183] kernel write not supported for file /trace_marker (pid: 28183 comm: syz.2.4509)
[ 1467.488332][T28203] kernel write not supported for file /trace_marker (pid: 28203 comm: syz.2.4514)
[ 1469.388059][T28219] kernel write not supported for file /trace_marker (pid: 28219 comm: syz.2.4519)
[ 1470.104317][T28240] kernel write not supported for file /trace_marker (pid: 28240 comm: syz.2.4523)
[ 1470.543074][T28237] kernel write not supported for file /trace_marker (pid: 28237 comm: syz.2.4523)
[ 1470.779274][T28247] FAULT_INJECTION: forcing a failure.
[ 1470.779274][T28247] name failslab, interval 1, probability 0, space 0, times 0
[ 1470.896163][T28247] CPU: 0 UID: 0 PID: 28247 Comm: syz.1.4527 Tainted: G     U             6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[ 1470.908434][T28247] Tainted: [U]=USER
[ 1470.912227][T28247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1470.922270][T28247] Call Trace:
[ 1470.925537][T28247]  <TASK>
[ 1470.928456][T28247]  dump_stack_lvl+0x16c/0x1f0
[ 1470.933131][T28247]  should_fail_ex+0x497/0x5b0
[ 1470.937800][T28247]  ? fs_reclaim_acquire+0xae/0x150
[ 1470.942912][T28247]  should_failslab+0xc2/0x120
[ 1470.947587][T28247]  __kmalloc_noprof+0xce/0x4f0
[ 1470.952348][T28247]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1470.957971][T28247]  ? tomoyo_realpath_from_path+0xbf/0x710
[ 1470.963688][T28247]  tomoyo_realpath_from_path+0xbf/0x710
[ 1470.969229][T28247]  ? tomoyo_path_number_perm+0x235/0x5b0
[ 1470.974868][T28247]  tomoyo_path_number_perm+0x248/0x5b0
[ 1470.980345][T28247]  ? tomoyo_path_number_perm+0x235/0x5b0
[ 1470.985977][T28247]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1470.991971][T28247]  ? __pfx_lock_release+0x10/0x10
[ 1470.996982][T28247]  ? trace_lock_acquire+0x14e/0x1f0
[ 1471.002196][T28247]  ? lock_acquire+0x2f/0xb0
[ 1471.006690][T28247]  ? __fget_files+0x40/0x3a0
[ 1471.011273][T28247]  ? __fget_files+0x206/0x3a0
[ 1471.015964][T28247]  security_file_ioctl+0x9b/0x240
[ 1471.020981][T28247]  __x64_sys_ioctl+0xb7/0x200
[ 1471.025655][T28247]  do_syscall_64+0xcd/0x250
[ 1471.030153][T28247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1471.036038][T28247] RIP: 0033:0x7faf98785d29
[ 1471.040443][T28247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1471.060060][T28247] RSP: 002b:00007faf99674038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1471.068470][T28247] RAX: ffffffffffffffda RBX: 00007faf98975fa0 RCX: 00007faf98785d29
[ 1471.076440][T28247] RDX: 0000000020000040 RSI: 00000000000089fc RDI: 0000000000000003
[ 1471.084575][T28247] RBP: 00007faf99674090 R08: 0000000000000000 R09: 0000000000000000
[ 1471.092555][T28247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1471.100515][T28247] R13: 0000000000000000 R14: 00007faf98975fa0 R15: 00007ffef3016e48
[ 1471.108505][T28247]  </TASK>
[ 1471.714697][T28251] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4529'.
[ 1472.024890][T28254] kernel write not supported for file /trace_marker (pid: 28254 comm: syz.2.4528)
[ 1472.100291][T28259] netlink: 252 bytes leftover after parsing attributes in process `syz.6.4531'.
[ 1472.144948][T28257] netlink: set zone limit has 4 unknown bytes
[ 1472.234639][T28252] kernel write not supported for file /trace_marker (pid: 28252 comm: syz.2.4528)
[ 1472.383800][T28247] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1473.615895][T28058] kernel write not supported for file /trace_marker (pid: 28058 comm: syz.2.4478)
[ 1473.760269][T28289] netlink: 252 bytes leftover after parsing attributes in process `syz.6.4537'.
[ 1473.922186][T28269] kernel write not supported for file /trace_marker (pid: 28269 comm: syz.2.4533)
[ 1474.790521][T28298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4540'.
[ 1474.864126][T28137] kernel write not supported for file /trace_marker (pid: 28137 comm: syz.2.4497)
[ 1475.194547][T28298] kernel write not supported for file /trace_marker (pid: 28298 comm: syz.2.4540)
[ 1475.839490][T28326] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4548'.
[ 1476.697329][T28336] kernel write not supported for file /trace_marker (pid: 28336 comm: syz.2.4548)
[ 1476.960188][T28332] kernel write not supported for file /trace_marker (pid: 28332 comm: syz.2.4548)
[ 1477.870559][T28358] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4556'.
[ 1478.138272][T28343] netlink: 158 bytes leftover after parsing attributes in process `syz.4.4552'.
[ 1479.091320][T28362] kernel write not supported for file /trace_marker (pid: 28362 comm: syz.2.4554)
[ 1479.732937][T28389] kernel write not supported for file /trace_marker (pid: 28389 comm: syz.2.4562)
[ 1480.582954][T28395] kernel write not supported for file /trace_marker (pid: 28395 comm: syz.2.4564)
[ 1480.609318][T28400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4565'.
[ 1480.770165][T28403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4565'.
[ 1480.999936][T28407] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4567'.
[ 1481.226129][T28407] kernel write not supported for file /trace_marker (pid: 28407 comm: syz.2.4567)
[ 1481.994250][T28411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4568'.
[ 1482.098539][T28411] tc_dump_action: action bad kind
[ 1482.379698][T28412] kernel write not supported for file /trace_marker (pid: 28412 comm: syz.2.4570)
[ 1484.975551][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.982936][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1485.237157][T28424] kernel write not supported for file /trace_marker (pid: 28424 comm: syz.2.4571)
[ 1485.743766][T28442] kernel write not supported for file /trace_marker (pid: 28442 comm: syz.2.4574)
[ 1486.450458][T28451] kernel write not supported for file /trace_marker (pid: 28451 comm: syz.2.4575)
[ 1487.170191][T28453] kernel write not supported for file /trace_marker (pid: 28453 comm: syz.2.4577)

syzkaller
syzkaller login: [ 1488.018709][T28474] kernel write not supported for file /trace_marker (pid: 28474 comm: syz.2.4580)
[ 1488.485747][T28462] kernel write not supported for file /trace_marker (pid: 28462 comm: syz.2.4580)
[ 1488.792761][T28485] delete_channel: no stack
[ 1488.942623][T28476] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4581'.
[ 1489.288500][T28482] kernel write not supported for file /trace_marker (pid: 28482 comm: syz.2.4584)
[ 1490.301466][T28503] FAULT_INJECTION: forcing a failure.
[ 1490.301466][T28503] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1490.441820][T28503] CPU: 0 UID: 0 PID: 28503 Comm: syz.2.4586 Tainted: G     U             6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[ 1490.454093][T28503] Tainted: [U]=USER
[ 1490.457887][T28503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1490.467963][T28503] Call Trace:
[ 1490.471236][T28503]  <TASK>
[ 1490.474167][T28503]  dump_stack_lvl+0x16c/0x1f0
[ 1490.478843][T28503]  should_fail_ex+0x497/0x5b0
[ 1490.483556][T28503]  ? fs_reclaim_acquire+0xae/0x150
[ 1490.488663][T28503]  should_fail_alloc_page+0xe7/0x130
[ 1490.493980][T28503]  prepare_alloc_pages.constprop.0+0x16f/0x560
[ 1490.500136][T28503]  __alloc_pages_noprof+0x190/0x25b0
[ 1490.505420][T28503]  ? hlock_class+0x4e/0x130
[ 1490.509920][T28503]  ? __lock_acquire+0x15a9/0x3c40
[ 1490.514951][T28503]  ? __pfx___alloc_pages_noprof+0x10/0x10
[ 1490.520687][T28503]  ? __pfx___lock_acquire+0x10/0x10
[ 1490.525881][T28503]  ? lock_acquire.part.0+0x11b/0x380
[ 1490.531155][T28503]  ? find_held_lock+0x2d/0x110
[ 1490.535916][T28503]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1490.541803][T28503]  ? policy_nodemask+0xea/0x4e0
[ 1490.546652][T28503]  alloc_pages_mpol_noprof+0x2c9/0x610
[ 1490.552106][T28503]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[ 1490.558077][T28503]  ? do_raw_spin_unlock+0x172/0x230
[ 1490.563272][T28503]  ? _raw_spin_unlock+0x28/0x50
[ 1490.568123][T28503]  ? swap_swapcount+0x13c/0x220
[ 1490.572971][T28503]  ? __pfx_swap_swapcount+0x10/0x10
[ 1490.578173][T28503]  folio_alloc_mpol_noprof+0x36/0xd0
[ 1490.583451][T28503]  __read_swap_cache_async+0x50a/0x660
[ 1490.588910][T28503]  ? __pfx___read_swap_cache_async+0x10/0x10
[ 1490.594886][T28503]  ? swp_swap_info+0xcf/0x130
[ 1490.599562][T28503]  ? __pfx_swp_swap_info+0x10/0x10
[ 1490.604669][T28503]  ? mark_lock+0xb5/0xc60
[ 1490.609003][T28503]  swap_cluster_readahead+0x3ec/0x740
[ 1490.614374][T28503]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1490.620290][T28503]  ? filemap_get_entry+0x1a8/0x3c0
[ 1490.625402][T28503]  ? get_vma_policy+0x248/0x3c0
[ 1490.630260][T28503]  swapin_readahead+0x12c/0xd60
[ 1490.635111][T28503]  ? get_swap_device+0x362/0x5e0
[ 1490.640072][T28503]  ? __pfx_swapin_readahead+0x10/0x10
[ 1490.645439][T28503]  ? __filemap_get_folio+0x2a5/0xaf0
[ 1490.650812][T28503]  ? swap_cache_get_folio+0x1e0/0x460
[ 1490.656183][T28503]  ? get_swap_device+0x245/0x5e0
[ 1490.661120][T28503]  ? __pfx_swap_cache_get_folio+0x10/0x10
[ 1490.666842][T28503]  do_swap_page+0x688/0x6420
[ 1490.671433][T28503]  ? __lock_acquire+0xcc5/0x3c40
[ 1490.676370][T28503]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1490.681996][T28503]  ? __pfx_do_swap_page+0x10/0x10
[ 1490.687014][T28503]  ? rcu_is_watching+0x12/0xc0
[ 1490.691773][T28503]  ? trace_lock_acquire+0x14e/0x1f0
[ 1490.696967][T28503]  ? __pfx_default_wake_function+0x10/0x10
[ 1490.702768][T28503]  ? lock_acquire+0x2f/0xb0
[ 1490.707264][T28503]  ? ___pte_offset_map+0x42/0x540
[ 1490.712286][T28503]  ? rcu_is_watching+0x12/0xc0
[ 1490.717045][T28503]  ? ___pte_offset_map+0x1b9/0x540
[ 1490.722154][T28503]  __handle_mm_fault+0x1055/0x2a40
[ 1490.727272][T28503]  ? lock_vma_under_rcu+0x6b9/0x980
[ 1490.732465][T28503]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1490.737941][T28503]  handle_mm_fault+0x3fa/0xaa0
[ 1490.742707][T28503]  do_user_addr_fault+0x60d/0x13f0
[ 1490.747816][T28503]  exc_page_fault+0x5c/0xc0
[ 1490.752320][T28503]  asm_exc_page_fault+0x26/0x30
[ 1490.757168][T28503] RIP: 0033:0x7f144a9846f0
[ 1490.761577][T28503] Code: 66 2e 0f 1f 84 00 00 00 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 <80> 3d 41 7e 1c 00 00 74 17 31 c0 0f 05 48 3d 00 f0 ff ff 77 5b c3
[ 1490.781267][T28503] RSP: 002b:00007f144b7a4058 EFLAGS: 00010202
[ 1490.787332][T28503] RAX: 00007f144ab76080 RBX: 00007f144ab76080 RCX: 00007f1449ffd000
[ 1490.795297][T28503] RDX: 000000000000000f RSI: 00007f144b7a40a0 RDI: 0000000000000003
[ 1490.803262][T28503] RBP: 00007f144b7a4090 R08: 0000000000000000 R09: 0000000000000000
[ 1490.811224][T28503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1490.819194][T28503] R13: 0000000000000000 R14: 00007f144ab76080 R15: 00007ffe1f218a88
[ 1490.827189][T28503]  </TASK>
[ 1493.017086][T28503] Process accounting paused
[ 1495.150371][T28532] Process accounting paused
[ 1495.511024][T28549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4596'.
[ 1498.064082][T28582] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4603'.
[ 1499.274066][   T29] audit: type=1806 audit(8277292128.613:32): xattr=250452AF3138531E6FE808 res=-22
[ 1500.179715][T28611] netlink: 'syz.1.4610': attribute type 11 has an invalid length.
[ 1500.187572][T28611] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4610'.
[ 1500.385444][T28614] netlink: 'syz.1.4610': attribute type 11 has an invalid length.
[ 1500.481356][T28614] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4610'.
[ 1501.160277][T28631] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4615'.
[ 1501.548289][   T29] audit: type=1326 audit(8277292130.882:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28630 comm=09 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42e9d85d29 code=0x0
[ 1504.227910][T28677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4626'.
[ 1504.901113][T28634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4617'.
[ 1505.223209][T28673] kexec: Could not allocate control_code_buffer
[ 1505.521582][T28693] netlink: 252 bytes leftover after parsing attributes in process `syz.6.4629'.
[ 1507.664911][T28718] .': entered promiscuous mode
[ 1508.138873][T28739] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4638'.
[ 1508.213454][T28736] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4638'.
[ 1509.277714][T28752] netlink: 'syz.6.4641': attribute type 33 has an invalid length.
[ 1509.353203][T28752] netlink: 322 bytes leftover after parsing attributes in process `syz.6.4641'.
[ 1510.505232][T28777] netlink: 252 bytes leftover after parsing attributes in process `syz.6.4648'.
[ 1510.604566][T28777] netlink: 252 bytes leftover after parsing attributes in process `syz.6.4648'.
[ 1510.881340][   T29] audit: type=1326 audit(8277292140.217:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28767 comm="syz.1.4646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf98785d29 code=0x0
[ 1511.054497][T28786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4650'.
[ 1515.940856][T28874] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4668'.
[ 1516.095427][T28876] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4668'.

syzkaller
syzkaller login: [ 1520.629622][T28936] 0}
^: entered promiscuous mode
[ 1522.199215][T28963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4690'.
[ 1522.240314][T28949] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4687'.
[ 1523.852377][T28954] Process accounting resumed
[ 1523.857027][T28954] kernel write not supported for file /trace_marker (pid: 28954 comm: syz.2.4688)
[ 1524.509997][T28981] kernel write not supported for file /trace_marker (pid: 28981 comm: syz.2.4695)
[ 1524.809505][T28981] Process accounting resumed
[ 1524.913550][T28981] 
[ 1524.915898][T28981] ======================================================
[ 1524.922895][T28981] WARNING: possible circular locking dependency detected
[ 1524.929895][T28981] 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 Tainted: G     U            
[ 1524.938458][T28981] ------------------------------------------------------
[ 1524.945454][T28981] syz.2.4695/28981 is trying to acquire lock:
[ 1524.951498][T28981] ffff888025acfb38 (&q->sysfs_lock){+.+.}-{4:4}, at: queue_attr_store+0xe2/0x170
[ 1524.960622][T28981] 
[ 1524.960622][T28981] but task is already holding lock:
[ 1524.967977][T28981] ffff888025acf608 (&q->q_usage_counter(io)#65){++++}-{0:0}, at: queue_attr_store+0xd8/0x170
[ 1524.978177][T28981] 
[ 1524.978177][T28981] which lock already depends on the new lock.
[ 1524.978177][T28981] 
[ 1524.988563][T28981] 
[ 1524.988563][T28981] the existing dependency chain (in reverse order) is:
[ 1524.997571][T28981] 
[ 1524.997571][T28981] -> #4 (&q->q_usage_counter(io)#65){++++}-{0:0}:
[ 1525.006160][T28981]        blk_mq_submit_bio+0x1fb6/0x24c0
[ 1525.011808][T28981]        __submit_bio+0x384/0x540
[ 1525.016823][T28981]        submit_bio_noacct_nocheck+0x698/0xd70
[ 1525.022971][T28981]        submit_bio_noacct+0x93a/0x1e20
[ 1525.028507][T28981]        mpage_readahead+0x41d/0x590
[ 1525.033781][T28981]        read_pages+0x1a8/0xdc0
[ 1525.038724][T28981]        page_cache_ra_unbounded+0x3dc/0x750
[ 1525.044689][T28981]        page_cache_ra_order+0x8f2/0xc80
[ 1525.050304][T28981]        filemap_fault+0x14a5/0x2820
[ 1525.055581][T28981]        __do_fault+0x10a/0x490
[ 1525.060417][T28981]        do_pte_missing+0xebd/0x3e00
[ 1525.065691][T28981]        __handle_mm_fault+0x103c/0x2a40
[ 1525.071309][T28981]        handle_mm_fault+0x3fa/0xaa0
[ 1525.076670][T28981]        __get_user_pages+0x8d9/0x3b50
[ 1525.082139][T28981]        populate_vma_page_range+0x27f/0x3a0
[ 1525.088108][T28981]        __mm_populate+0x1d6/0x380
[ 1525.093213][T28981]        vm_mmap_pgoff+0x293/0x360
[ 1525.098312][T28981]        ksys_mmap_pgoff+0x32c/0x5c0
[ 1525.103586][T28981]        __x64_sys_mmap+0x125/0x190
[ 1525.108786][T28981]        do_syscall_64+0xcd/0x250
[ 1525.113801][T28981]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1525.120292][T28981] 
[ 1525.120292][T28981] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}:
[ 1525.128791][T28981]        down_read+0x9a/0x330
[ 1525.133457][T28981]        filemap_fault+0x2e0/0x2820
[ 1525.138648][T28981]        __do_fault+0x10a/0x490
[ 1525.143495][T28981]        do_pte_missing+0xebd/0x3e00
[ 1525.148778][T28981]        __handle_mm_fault+0x103c/0x2a40
[ 1525.154407][T28981]        handle_mm_fault+0x3fa/0xaa0
[ 1525.159689][T28981]        __get_user_pages+0x8d9/0x3b50
[ 1525.165140][T28981]        __gup_longterm_locked+0x211/0x1870
[ 1525.171204][T28981]        gup_fast_fallback+0x1802/0x2690
[ 1525.176842][T28981]        pin_user_pages_fast+0xa8/0x100
[ 1525.182395][T28981]        iov_iter_extract_pages+0x3a5/0x2010
[ 1525.188384][T28981]        bio_iov_iter_get_pages+0x37c/0x1100
[ 1525.194354][T28981]        blkdev_direct_IO+0x1054/0x1ad0
[ 1525.199901][T28981]        blkdev_write_iter+0x6f9/0xd40
[ 1525.205345][T28981]        vfs_write+0x5ae/0x1150
[ 1525.210181][T28981]        ksys_write+0x12b/0x250
[ 1525.215023][T28981]        do_syscall_64+0xcd/0x250
[ 1525.220036][T28981]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1525.226441][T28981] 
[ 1525.226441][T28981] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[ 1525.233985][T28981]        __might_fault+0x11b/0x190
[ 1525.239089][T28981]        _copy_from_user+0x29/0xd0
[ 1525.244193][T28981]        __blk_trace_setup+0xa8/0x180
[ 1525.249552][T28981]        blk_trace_setup+0x47/0x70
[ 1525.254648][T28981]        sg_ioctl+0x7a3/0x26b0
[ 1525.259402][T28981]        __x64_sys_ioctl+0x190/0x200
[ 1525.264671][T28981]        do_syscall_64+0xcd/0x250
[ 1525.269685][T28981]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1525.276102][T28981] 
[ 1525.276102][T28981] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}:
[ 1525.283911][T28981]        __mutex_lock+0x19b/0xa60
[ 1525.288928][T28981]        blk_register_queue+0x13c/0x4f0
[ 1525.294459][T28981]        add_disk_fwnode+0x785/0x1300
[ 1525.299817][T28981]        brd_alloc.isra.0+0x50a/0x7c0
[ 1525.305186][T28981]        brd_init+0x12b/0x1d0
[ 1525.309936][T28981]        do_one_initcall+0x128/0x630
[ 1525.315211][T28981]        kernel_init_freeable+0x58f/0x8b0
[ 1525.320924][T28981]        kernel_init+0x1c/0x2b0
[ 1525.326044][T28981]        ret_from_fork+0x45/0x80
[ 1525.330979][T28981]        ret_from_fork_asm+0x1a/0x30
[ 1525.336254][T28981] 
[ 1525.336254][T28981] -> #0 (&q->sysfs_lock){+.+.}-{4:4}:
[ 1525.343815][T28981]        __lock_acquire+0x249e/0x3c40
[ 1525.349171][T28981]        lock_acquire.part.0+0x11b/0x380
[ 1525.354813][T28981]        __mutex_lock+0x19b/0xa60
[ 1525.359825][T28981]        queue_attr_store+0xe2/0x170
[ 1525.365096][T28981]        sysfs_kf_write+0x117/0x170
[ 1525.370281][T28981]        kernfs_fop_write_iter+0x33d/0x500
[ 1525.376071][T28981]        __kernel_write_iter+0x318/0xa80
[ 1525.381687][T28981]        __kernel_write+0xf6/0x140
[ 1525.386781][T28981]        do_acct_process+0xcb0/0x14a0
[ 1525.392140][T28981]        acct_process+0x4b1/0x590
[ 1525.397182][T28981]        do_exit+0x17c8/0x2d70
[ 1525.401960][T28981]        do_group_exit+0xd3/0x2a0
[ 1525.406982][T28981]        get_signal+0x2576/0x2610
[ 1525.411996][T28981]        arch_do_signal_or_restart+0x90/0x7e0
[ 1525.418053][T28981]        syscall_exit_to_user_mode+0x150/0x2a0
[ 1525.424196][T28981]        do_syscall_64+0xda/0x250
[ 1525.429208][T28981]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1525.435631][T28981] 
[ 1525.435631][T28981] other info that might help us debug this:
[ 1525.435631][T28981] 
[ 1525.445838][T28981] Chain exists of:
[ 1525.445838][T28981]   &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#65
[ 1525.445838][T28981] 
[ 1525.460601][T28981]  Possible unsafe locking scenario:
[ 1525.460601][T28981] 
[ 1525.468036][T28981]        CPU0                    CPU1
[ 1525.473402][T28981]        ----                    ----
[ 1525.478766][T28981]   lock(&q->q_usage_counter(io)#65);
[ 1525.484131][T28981]                                lock(mapping.invalidate_lock#2);
[ 1525.491927][T28981]                                lock(&q->q_usage_counter(io)#65);
[ 1525.499806][T28981]   lock(&q->sysfs_lock);
[ 1525.504122][T28981] 
[ 1525.504122][T28981]  *** DEADLOCK ***
[ 1525.504122][T28981] 
[ 1525.512247][T28981] 6 locks held by syz.2.4695/28981:
[ 1525.517426][T28981]  #0: ffff88808e7fcd00 (&acct->lock#3){+.+.}-{4:4}, at: acct_process+0x200/0x590
[ 1525.526659][T28981]  #1: ffff8880316e2420 (sb_writers#8){.+.+}-{0:0}, at: acct_process+0x4b1/0x590
[ 1525.535801][T28981]  #2: ffff8880882c0488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500
[ 1525.545536][T28981]  #3: ffff8881413395a8 (kn->active#305){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500
[ 1525.555622][T28981]  #4: ffff888025acf608 (&q->q_usage_counter(io)#65){++++}-{0:0}, at: queue_attr_store+0xd8/0x170
[ 1525.566227][T28981]  #5: ffff888025acf640 (&q->q_usage_counter(queue)#49){+.+.}-{0:0}, at: queue_attr_store+0xd8/0x170
[ 1525.577091][T28981] 
[ 1525.577091][T28981] stack backtrace:
[ 1525.582968][T28981] CPU: 0 UID: 0 PID: 28981 Comm: syz.2.4695 Tainted: G     U             6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[ 1525.595201][T28981] Tainted: [U]=USER
[ 1525.598983][T28981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1525.609025][T28981] Call Trace:
[ 1525.612290][T28981]  <TASK>
[ 1525.615205][T28981]  dump_stack_lvl+0x116/0x1f0
[ 1525.619876][T28981]  print_circular_bug+0x41c/0x610
[ 1525.624895][T28981]  check_noncircular+0x31a/0x400
[ 1525.629826][T28981]  ? __pfx_check_noncircular+0x10/0x10
[ 1525.635293][T28981]  ? save_trace+0x42/0xa10
[ 1525.639699][T28981]  ? add_lock_to_list+0x17d/0x390
[ 1525.644713][T28981]  __lock_acquire+0x249e/0x3c40
[ 1525.649550][T28981]  ? __pfx___lock_acquire+0x10/0x10
[ 1525.654733][T28981]  lock_acquire.part.0+0x11b/0x380
[ 1525.659827][T28981]  ? queue_attr_store+0xe2/0x170
[ 1525.664755][T28981]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1525.670377][T28981]  ? rcu_is_watching+0x12/0xc0
[ 1525.675135][T28981]  ? trace_lock_acquire+0x14e/0x1f0
[ 1525.680322][T28981]  ? queue_attr_store+0xe2/0x170
[ 1525.685247][T28981]  ? lock_acquire+0x2f/0xb0
[ 1525.689732][T28981]  ? queue_attr_store+0xe2/0x170
[ 1525.694659][T28981]  __mutex_lock+0x19b/0xa60
[ 1525.699151][T28981]  ? queue_attr_store+0xe2/0x170
[ 1525.704072][T28981]  ? mark_held_locks+0x9f/0xe0
[ 1525.708852][T28981]  ? queue_attr_store+0xe2/0x170
[ 1525.713798][T28981]  ? __pfx___mutex_lock+0x10/0x10
[ 1525.718829][T28981]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1525.724621][T28981]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1525.730683][T28981]  ? queue_attr_store+0xd8/0x170
[ 1525.735606][T28981]  ? queue_attr_store+0xe2/0x170
[ 1525.740528][T28981]  queue_attr_store+0xe2/0x170
[ 1525.745280][T28981]  ? __pfx_queue_attr_store+0x10/0x10
[ 1525.750636][T28981]  sysfs_kf_write+0x117/0x170
[ 1525.755304][T28981]  kernfs_fop_write_iter+0x33d/0x500
[ 1525.760596][T28981]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1525.765785][T28981]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1525.771582][T28981]  __kernel_write_iter+0x318/0xa80
[ 1525.776777][T28981]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1525.782418][T28981]  __kernel_write+0xf6/0x140
[ 1525.786995][T28981]  ? __pfx___kernel_write+0x10/0x10
[ 1525.792180][T28981]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1525.797797][T28981]  ? rcu_is_watching+0x12/0xc0
[ 1525.802549][T28981]  ? acct_process+0x4b1/0x590
[ 1525.807211][T28981]  ? lock_acquire+0x2f/0xb0
[ 1525.811717][T28981]  ? acct_process+0x4b1/0x590
[ 1525.816378][T28981]  do_acct_process+0xcb0/0x14a0
[ 1525.821212][T28981]  ? __pfx_do_acct_process+0x10/0x10
[ 1525.826482][T28981]  ? acct_process+0x1e4/0x590
[ 1525.831143][T28981]  ? lock_acquire+0x2f/0xb0
[ 1525.835632][T28981]  acct_process+0x4b1/0x590
[ 1525.840131][T28981]  ? acct_process+0x9c/0x590
[ 1525.844709][T28981]  do_exit+0x17c8/0x2d70
[ 1525.848944][T28981]  ? get_signal+0x8f7/0x2610
[ 1525.853531][T28981]  ? __pfx_do_exit+0x10/0x10
[ 1525.858109][T28981]  ? do_raw_spin_lock+0x12d/0x2c0
[ 1525.863120][T28981]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1525.868479][T28981]  do_group_exit+0xd3/0x2a0
[ 1525.872976][T28981]  get_signal+0x2576/0x2610
[ 1525.877466][T28981]  ? __pfx_get_signal+0x10/0x10
[ 1525.882304][T28981]  ? __pfx_do_futex+0x10/0x10
[ 1525.886997][T28981]  arch_do_signal_or_restart+0x90/0x7e0
[ 1525.892534][T28981]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1525.898681][T28981]  ? __pfx___do_sys_close_range+0x10/0x10
[ 1525.904393][T28981]  syscall_exit_to_user_mode+0x150/0x2a0
[ 1525.910017][T28981]  do_syscall_64+0xda/0x250
[ 1525.914511][T28981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1525.920397][T28981] RIP: 0033:0x7f144a985d29
[ 1525.924793][T28981] Code: Unable to access opcode bytes at 0x7f144a985cff.
[ 1525.931791][T28981] RSP: 002b:00007f144b7c50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1525.940186][T28981] RAX: fffffffffffffe00 RBX: 00007f144ab75fa8 RCX: 00007f144a985d29
[ 1525.948143][T28981] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f144ab75fa8
[ 1525.956098][T28981] RBP: 00007f144ab75fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1525.964058][T28981] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f144ab75fac
[ 1525.972013][T28981] R13: 0000000000000000 R14: 00007ffe1f2189a0 R15: 00007ffe1f218a88
[ 1525.979991][T28981]  </TASK>
[ 1525.983085][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1526.643323][T28990] Process accounting resumed