last executing test programs:

13m18.599250557s ago: executing program 32 (id=227):
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
listen$auto(0x3, 0x83)
close_range$auto(0x0, 0xffffffffffffffff, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0)
r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x8000000000000001, &(0x7f00000007c0)=0x1)
r2 = socket(0x28, 0x1, 0x82)
mmap$auto(0x8, 0x120000000004, 0x4000000000df, 0x40eb0, 0x402, 0x300000000000)
mmap$auto(0x0, 0x400008, 0x3, 0x9b72, r1, 0x8000)
madvise$auto(0x7, 0xffffffffffff0001, 0x15)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
capget$auto(&(0x7f0000000100)={0x8}, &(0x7f0000000140)={0x9, 0x8, 0x800})
r4 = socket(0xa, 0x1, 0x84)
sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES16=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="04000500050003008f000b0000000500030008000000b20084800800ff00", @ANYBLOB="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", @ANYRESHEX=r4], 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x40000a4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r5, 0x10e, 0x3, 0x0, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/locks\x00', 0x220900, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000180)=""/250, 0xfa)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x1cdd81, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/pagemap\x00', 0xe8a00, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x1120f8e30c9d9feb, 0x0)
ioctl$auto_PAGEMAP_SCAN(r7, 0xc0606610, 0x0)

12m38.328797049s ago: executing program 33 (id=332):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x21, 0x2, 0x2)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0)
poll$auto(&(0x7f0000000000)={<r1=>r0, 0x435, 0x2}, 0x0, 0x3)
write$auto_msr_fops_msr(r1, &(0x7f00000002c0)="2cdde02c4a23d0bfa2f142fd75faff3d3af64fae3492be4393a7636f05a6c6971625de4c842b45f72910474ce639310135b9a02584e8bb6e95de80ed32512b496df8053e2b6c4373d9ca8ad0d080f779f9be749540b84ba93ab97cf87fcb5e56656076df7458cca87339307dba5397c890b3e0c2eab613b78b0c2941fdb09446876a375cd4dbb3d09fa959514f82fa3eddee04a5067d42403657d10b2c92", 0x9e)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000)
setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)

8m47.764269835s ago: executing program 34 (id=1236):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20082, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r0, 0x0)
syz_clone(0xc0000211, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
shutdown$auto(0x200000003, 0x2)
unshare$auto(0x40000080)
recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0)
ioprio_set$auto(0x1, 0x0, 0x0)
r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/4/effective_affinity_list\x00', 0x40000, 0x0)
pread64$auto(r2, 0x0, 0x5, 0xff)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_CREATE_VM(r1, 0xc048aeca, 0x0)

7m5.114060822s ago: executing program 1 (id=1618):
getgid() (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r0, 0x0, 0x9000) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x4)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32)
r1 = socket(0x2, 0x1, 0x0) (async, rerun: 32)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyw6/power/runtime_suspended_time\x00', 0x109206, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='-', 0x1)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
fcntl$auto(0x2, 0x5, 0x1) (async, rerun: 32)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async, rerun: 32)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) (async)
write$auto(0x3, 0x0, 0xfdef) (async, rerun: 32)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) (async, rerun: 32)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4) (async)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64)
clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (rerun: 64)
prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) (async)
r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000700), 0xffffffffffffffff) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_GTP_CMD_ECHOREQ(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x48, r3, 0x22b, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_VERSION={0x8, 0x2, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44010}, 0x8000)

7m2.993420508s ago: executing program 1 (id=1625):
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
unshare$auto(0x40000080)
r0 = socket(0x2, 0x3, 0xa)
getsockopt$auto(r0, 0x0, 0x26, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'dummy0\x00', <r2=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, 0xffffffffffffffff, 0x0, 0x1ff, 0xffffffffffffffff, @relative_fd=<r3=>0xffffffffffffffff, 0xe600}, 0xf)
socket(0xa, 0x806, 0x0)
socket(0x2c, 0x80003, 0x0)
setsockopt$auto(0x3, 0x11b, 0x6, 0xffffffffffffffff, 0x2e)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_RTC_PIE_ON(r3, 0x7005, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0xa37, 0xfffffffe, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x2401, 0x0)
shutdown$auto(0x200000003, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/remaddr\x00', 0x181580, 0x0)
sendmsg$auto_NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000e40)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "e59954082586bc3ad68380a90659c016443901a24cd21d8a4e5e9deb34bdf7318e8589eb"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x40000c4)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x12c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x25, 0x21, "742fd5f8f5ce01d29e97a48de052e887c9efe947c87a1a0296f49df980614f18c8"}, @NL80211_ATTR_AUTH_DATA={0xef, 0x9c, "2d67aefd3abc03e83bd734f929f3f778fdcf7357847d21ea6df66d981256284a8850b1bb4c9dcd6447d8fd1066445aff8f0e746222c425fbddf7dc1e17b60a5e6707f0b47873deccdb20ab778dcc8e531ecd4cb4adea55944af4a706bc02148e48f20b1abb5d897aec469a97f30a433fe52e57d7a5f4718704d121485763267c87152959947bae650e91ba8af4c9df77355edd90ea06bf8755c25b6d4c6bb50372bba5d640b2abef8b525426920838421c181d8fbd0af6a15e09a64c5361650abeae4a2d488cec573e6f24982dcfa3bf087db1e5c85f5f10e6663d58d130d277a51e83fc8b92fc901df6a9"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20040045}, 0x881)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="2f212abd7800fddbdf2521"], 0x14}}, 0x4000880)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x2, 0x7, 0xed3c, 0x5, 0xfffffffffffffffe]}, 0x0)

6m51.004910844s ago: executing program 1 (id=1661):
r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/smaps\x00', 0x42cc01, 0x0)
pwrite64$auto(r0, &(0x7f0000000040)='^:\'\x00', 0x0, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', <r3=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'dummy0\x00', <r4=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', <r5=>0x0}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'nicvf0\x00', <r6=>0x0}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00', <r7=>0x0}) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00', <r8=>0x0}) (rerun: 32)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa8, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7715}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xcc0}, 0x20000841) (async)
r9 = open(&(0x7f0000000400)='./file0\x00', 0x800, 0x108)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), r9)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'ip6gretap0\x00'}) (async)
r10 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000480)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x200000, 0x0)
r11 = signalfd$auto(r9, &(0x7f00000004c0)={0x8000}, 0x2)
r12 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000540), r9) (async, rerun: 64)
fstat$auto(r10, &(0x7f0000000580)={0x6f, 0x5, 0xffffffffffffffc0, 0xb, <r13=>0x0, 0x0, 0x0, 0x38eb, 0x8, 0xfffffffffffffffb, 0x8, 0xf, 0x2, 0x6, 0x7, 0x9f9, 0x5}) (rerun: 64)
sendmsg$auto_IPVS_CMD_GET_INFO(r11, &(0x7f0000000a80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000640)={0x3f4, r12, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_DAEMON={0xb9, 0x3, 0x0, 0x1, [@nested={0x9a, 0x38, 0x0, 0x1, [@nested={0x4, 0x82}, @generic="1d11b14668fb40b86dd2cfe2d13b405b96f4ebf0b3451ab0fa6a3f62a593c1628df04812b9b9e282c07f8f0827993ecd0af864cf3350777556a881df66a87edb9a6abbac5c0676bf5cf87c0c6b86414dc97200bf478cefb736edbc3a6003a0756670087f5fdca8ff7caad378a4e2ca49d352070a5f266f77dc7065315f05538e787ae252a06fd7578595", @typed={0x8, 0x11, 0x0, 0x0, @fd=r1}]}, @generic="1a33bd8a21df2019b0e88ba343d25983cdff13f335bbdfb02b"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x2f2, 0x3, 0x0, 0x1, [@generic="e36747689596770f1ed0a8f1ed30c4d0d99d6f73cf96aa2105c55163b15e3de2a57f4189b8f052160535764dee7301a62e18248ccf95945773f53a0359692dbe0caee9a6536dd964215e4ddaca70d131286ac47d3f1d59e38866a4f77c33e6ab7963c7c58ce0c2f5c55eb913f0863861790368db3c664224e311b0839050bbf6d2ff2e163309136f08ae56c4cb22aef9f5e13e4fe6", @generic, @nested={0xc, 0x69, 0x0, 0x1, [@typed={0x8, 0xef, 0x0, 0x0, @uid=r13}]}, @typed={0xd0, 0xa1, 0x0, 0x0, @binary="a2c20865cfcf8bd285d7714509d8d3657d0c4e46b3cb0d9db669b6f0a28cc5529388476bbb1cdd442c97bee1e16f785de07f1450c04d6ebb623972d1bc143ddd10efaf4ac3b2de2d117d265d64001ea94fc0735fc7df41500e0e52a1996143edd462e2bd2624204e175104838f81c9d8b27a9042787a68d70aca24d49b662a113d2b25687234a4fcae2060e7f5e67ba97479479e6a9ffc61b3cdebcbf73db7816dd3b1f78b067a03e084ada53bf9f654f5275ade53f257934d1cd13761756154fbb1da43939e9680e46c1f82"}, @generic="25fcd0bf738b6a664af0a478b1544a6c91bf8e3f4e4d7fa1360871539e997563bc92bbff84b52ff5c1b8bd365c864a3f1c3d9a0ddcfe73761f7634df0d9f10741c8b32cee27f0841b72270d5bd411cbcf186a94a2173ec6710698685f40cba281fbf7adaec853619c882b2ba0de8d0b015be71c512bf1e1398b0b462947e66c8e00261c9e7547a00f12803921942351f5608b63ad57b546777805fa5102d9428cfbb2147826d29e2c2d5b4b7ec8e55f197e92601e00dcf86fd0b7f15c9f2d7ca0ce85e37935d109fa799496ee9e384b1df89c34db0ade5431ea7c2c93d", @generic="dcc46794b5d1c7aca65c9f30da35a4dc0ae05b3b48dc9d71bdcc22100df9b901961e9e7d93fefe49a0866df84850f3d93dcc95633ef000c007df26477fdc87665e2d7fe5c4cc84657f3782b9dd40b206ed3cea90061397af20495dd7d10abf186c4acb9b916c75f6517013a64208fac47188f7b4da22598109bf6f93c1247f4cd2b7f2a42a53d39c53cea44ced8e16b2e3762a64687f57dca6fa0ff7599552f4"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x3f4}}, 0x8d5) (async, rerun: 32)
r14 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000b00), r0) (rerun: 32)
sendmsg$auto_IEEE802154_LLSEC_ADD_DEVKEY(r11, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r14, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x48}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0x14, 0x1, 'pim6reg1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_PHY_NAME={0x5, 0x1f, '\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x72}, @IEEE802154_ATTR_PHY_NAME={0x12, 0x1f, '[P--,-.@\xbe)$-!{'}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x4000000)
bind$auto(r0, &(0x7f0000000c40)=@sco, 0xfffffffe)
r15 = socket(0x6, 0x4, 0xfffffff9)
r16 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000cc0), r15)
sendmsg$auto_OVS_VPORT_CMD_GET(r9, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x78, r16, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_NAME={0x16, 0x3, '+^+\xb3}++#:-\\#{],[\x84\x00'}, @OVS_VPORT_ATTR_UPCALL_STATS={0x36, 0xa, 0x0, 0x1, [@typed={0xc, 0x10a, 0x0, 0x0, @u64=0x4}, @generic="6da9c43bf41c3fab34dd934fc85ac2618d8cfcc57ee8cbb051f78eaaea0badb2af72ed407d77"]}, @OVS_VPORT_ATTR_NAME={0xa, 0x3, '[*[}*\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040804}, 0x240088d0)
r17 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/nullb0\x00', 0x440, 0x0)
close_range$auto(r15, r17, 0x33)
r18 = socketpair$auto(0xf, 0x3, 0x7, &(0x7f0000000e40)=0x6)
ioctl$auto_SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000e80)=0x6) (async)
mmap$auto(0x3, 0x3, 0x1, 0x411, r18, 0x9)

6m46.973540152s ago: executing program 1 (id=1670):
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) (async)
r1 = socket(0x28, 0x5, 0x0) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
bind$auto(r1, &(0x7f0000000080)=@in={0x28, 0x0, @rand_addr=0x40000}, 0x68) (async)
r2 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31)
write$auto(0x3, 0x0, 0x100082) (async)
lseek$auto(r2, 0xc, 0x4)

6m42.693565293s ago: executing program 1 (id=1678):
mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000)
r0 = socket(0x29, 0x2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
write$auto(0x3, 0x0, 0x81)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_app\x00', 0xc80, 0x0)
read$auto(r2, &(0x7f0000000300)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x805644)
recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r0, 0x891e, 0x24)

6m40.385441875s ago: executing program 1 (id=1683):
socket(0x2c, 0x3, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9979de89", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030007000000060007000080000006000600060000000a000500d71aed11187c00000a000100987874e64b8500000a0001007572c85c318e0000060006000600000008000200", @ANYRES32=0x0, @ANYBLOB="080004"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

6m29.289421128s ago: executing program 6 (id=1717):
r0 = socket(0x2b, 0x1, 0x1)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.7/driver_override\x00', 0x182, 0x0)
sendfile$auto(r1, r1, 0x0, 0x20000000088)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r2 = socket(0xa, 0x1, 0x84)
r3 = getsockopt$auto(r2, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x3)
mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
r4 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000005700), 0x28000, 0x0)
read$auto_proc_coredump_filter_operations_base(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0)
sendmsg$auto_NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b25e04077d7c2cad861110bcf41570cb459c", @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf256d00000008000a0107000000"], 0x1c}}, 0x4)
execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00')
setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0xfb3)

6m29.053230961s ago: executing program 6 (id=1719):
r0 = fsopen$auto(&(0x7f0000000000)='/proc/sys/net/ipv4/neigh/virt_wifi0/interval_probe_time_ms\x00', 0x10000)
ioctl$auto_COMEDI_UNLOCK(r0, 0x6406, 0x0)
read$auto_msft_opcode_fops_(r0, &(0x7f00000000c0)=""/229, 0xe5)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/virt_wifi0/interval_probe_time_ms\x00', 0x382, 0x0)
sendfile$auto(r1, r1, 0x0, 0x2)
read$auto(r1, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/virt_wifi0/interval_probe_time_ms\x00', 0xf5)

6m28.868649296s ago: executing program 6 (id=1721):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
sysfs$auto(0x2, 0x19, 0x0)
r0 = fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
setsockopt$auto(0xffffffffffffffff, 0x10d, 0xe, 0x0, 0x17)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r1)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
socket(0x28, 0xa, 0x200001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="2f212abd7800fddb"], 0x14}}, 0x4000000)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x15f4da0a, 0x6, 0x3, 0x300000000000000, 0x80000001, 0x5, 0x6d3c, 0x5, 0x2]}, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1004808}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080026bde4916bd8"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x24009050)
madvise$auto(0x108000, 0x800034, 0xa)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
connect$auto(r3, 0x0, 0x6)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x9)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000480)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7b64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e56f2795af63eab134d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d7b519a855da7ac6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae6ca29bcc960b26e0e634173287fd012c40bc5a98e90907cd1d01cc000cd84061c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92a0100ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1c81ddc721aa2401f3423e700"/779, 0x30b)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

6m26.759948521s ago: executing program 6 (id=1723):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
connect$auto(0x4, 0x0, 0x10)
setfsuid$auto(0xee00)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0x9, 0x0, 0xfffffffffffffffe, 0x7ff, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0)
recvfrom$auto(0x3, 0x0, 0x2395, 0x40000100, 0x0, 0xfffffffffffffffd)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0xc00, 0x2000000000002)
r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)
r2 = socket(0x2, 0x801, 0x106)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=<r3=>0x0, @ANYBLOB="1d00000400018000ee0805"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r4 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00'})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000300)=ANY=[@ANYBLOB="78587417f1dc7a1c", @ANYBLOB="c9f64faea6195210ddc9df9d8dd6f72674f25a1cac3d223928be7ad28b135406ca2d6ff9b8fedee615a600bb2ea70351a3acd55caef15f39f5c966280932416b511c303abb8bcf6c1a223e25a71d26708f4f33094a25d541ea7bf15ca8707e4ed9bf33115c2c8da1f4ab79f39f14ac3713e7985594f8d6a5341361bc864faaf3b437658204c4b3eadb52423d3a5235a2feea7fe226b56fc127d3cde211f250bf9eae76c2909408489f11b8abc0284cc3826485520b70dc41c28288ed3c7efe8cd84698f6d71227521a7671f7ba4f2a77080fe5eeb610308402bdf1f7fd", @ANYRESHEX=r3, @ANYBLOB="31fc27f6f8a49d144f44a69cec1e3d51d6b515ef511a30622473f9dc6635f15ccbe0b83ff118002400edb037818244d418272173e57478a44a2438bbe9e4aad991f7e87adfb6a6931ddc846090db600551f7464497f88c5153594f9c8bd3f2606c58db7397a99784487c65ddb69f615b9faf7069c73fe2ad12373458"], 0x20}, 0x1, 0x0, 0x0, 0xc0440d0}, 0x4000804)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
bind$auto(r1, &(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x6a)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r2, &(0x7f0000000000)='*\x00', 0xfd)

6m25.729941238s ago: executing program 6 (id=1725):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x5, 0x19)
tkill$auto(0x80000000000001, 0x7)

6m25.327247703s ago: executing program 35 (id=1683):
socket(0x2c, 0x3, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9979de89", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030007000000060007000080000006000600060000000a000500d71aed11187c00000a000100987874e64b8500000a0001007572c85c318e0000060006000600000008000200", @ANYRES32=0x0, @ANYBLOB="080004"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

6m22.308750289s ago: executing program 6 (id=1729):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000bfb0493742908870fec297a65144d3ae1ba966a315a06746b3", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250200000008000300000000000800010005000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 64)
r0 = socket(0x5, 0x2, 0x0) (rerun: 64)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x60880, 0x0) (async, rerun: 64)
capget$auto(&(0x7f00000001c0)={0xb2f, <r2=>0x0}, &(0x7f0000000280)={0xa, 0xa, 0xfffffffd}) (rerun: 64)
kcmp$auto(r2, 0x0, 0x9, r1, r1)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/124, 0x7c) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdcdf250200000008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) (async, rerun: 32)
mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) (async, rerun: 32)
semctl$auto(0x1ff, 0x2, 0x13, 0x1) (async)
ioctl$auto(0x1, 0x5421, 0xa) (async)
socket(0xa, 0x3, 0x100)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async, rerun: 32)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x3c, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic='\t']}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20048810) (async)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async)
write$auto(0x3, 0x0, 0x5dc) (async)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async, rerun: 32)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfs\x00', 0x42400, 0x0) (rerun: 32)
read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000080)=""/47, 0x2f) (async)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x9}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x82}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x800)

6m21.85249938s ago: executing program 36 (id=1729):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000bfb0493742908870fec297a65144d3ae1ba966a315a06746b3", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250200000008000300000000000800010005000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 64)
r0 = socket(0x5, 0x2, 0x0) (rerun: 64)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x60880, 0x0) (async, rerun: 64)
capget$auto(&(0x7f00000001c0)={0xb2f, <r2=>0x0}, &(0x7f0000000280)={0xa, 0xa, 0xfffffffd}) (rerun: 64)
kcmp$auto(r2, 0x0, 0x9, r1, r1)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/124, 0x7c) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdcdf250200000008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) (async, rerun: 32)
mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) (async, rerun: 32)
semctl$auto(0x1ff, 0x2, 0x13, 0x1) (async)
ioctl$auto(0x1, 0x5421, 0xa) (async)
socket(0xa, 0x3, 0x100)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async, rerun: 32)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x3c, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic='\t']}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20048810) (async)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async)
write$auto(0x3, 0x0, 0x5dc) (async)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async, rerun: 32)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfs\x00', 0x42400, 0x0) (rerun: 32)
read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000080)=""/47, 0x2f) (async)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x9}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x82}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x800)

5m41.076875591s ago: executing program 3 (id=1837):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r0, 0x4008af25, &(0x7f0000000000)=0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x12, r0, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80000, 0x73)
socket(0x18, 0x3, 0x3)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @broadcast}, 0x6a)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
write$auto(0x3, 0x0, 0xffd8)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(0x3, 0x0, 0x10001)
setrlimit$auto(0x1000000007, 0x0)
socket(0xa, 0x801, 0x88)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
munmap$auto(0x0, 0x2000000c)
ioctl$auto(0xc8, 0x54e3, 0x5c8d)
r1 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x10000009, 0x7, 0x32, 0x6, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x201, 0x0, 0x4, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x6, 0x5, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x3, 0x4, 0x800, 0x6, 0xffffffffffffffff, 0x7, 0x8000000000008, 0x0, 0x3, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0x200d)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYBLOB="10002d", @ANYRES8=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004e0d4)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

5m39.567354843s ago: executing program 3 (id=1841):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
semctl$auto(0x7, 0x2, 0x13, 0x1) (async)
r0 = socket(0x1e, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x15, 0x5, 0x0)
pipe$auto(&(0x7f0000000080)) (async)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async)
dup2$auto(0x5, 0x4) (async)
splice$auto(0x4, 0x0, r1, 0x0, 0x80000004, 0x9)
write$auto(0x6, &(0x7f00000000c0)='#\a\x1cFnJ\x04\xc76c0\xf6D\xf0\t\b:-\x01\x11\xb1\xd1ldc=\x14\xf6\x91`\xe8\rs\xf1UI\x91\x04\x90\xfd\x9f\xd7|\xf6\xb2lD\x03\xc7\xc8\xe8/cDT%\xa3\xa5n\xb9D\xc6h', 0x1)
getsockopt$auto(r0, 0x10f, 0x80, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000) (async)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3}, 0x6)
r2 = socket(0x11, 0x3, 0x9) (async)
setresuid$auto(0x0, 0x7, 0x0) (async)
setfsuid$auto(0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xffffeffe, 0x2)
socket(0x2, 0x3, 0xa) (async)
r3 = socket(0xa, 0x801, 0x84) (async)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) (async)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
ioctl$auto(r4, 0x5402, r3)
ioctl$auto_TIOCSTI2(r4, 0x5412, 0x0) (async)
shutdown$auto(0x200000003, 0x2) (async)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010)
r5 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000003b00), 0x101101, 0x0)
writev$auto(r5, &(0x7f0000000100)={0x0, 0x5}, 0x3) (async)
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x7}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100)

5m39.237414342s ago: executing program 3 (id=1842):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
connect$auto(0x4, 0x0, 0x10)
setfsuid$auto(0xee00)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0x9, 0x0, 0xfffffffffffffffe, 0x7ff, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0)
recvfrom$auto(0x3, 0x0, 0x2395, 0x40000100, 0x0, 0xfffffffffffffffd)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0xc00, 0x2000000000002)
r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)
r2 = socket(0x2, 0x801, 0x106)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=<r3=>0x0, @ANYBLOB="1d00000400018000ee0805"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r4 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00'})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000300)=ANY=[@ANYBLOB="78587417f1dc7a1c", @ANYBLOB="c9f64faea6195210ddc9df9d8dd6f72674f25a1cac3d223928be7ad28b135406ca2d6ff9b8fedee615a600bb2ea70351a3acd55caef15f39f5c966280932416b511c303abb8bcf6c1a223e25a71d26708f4f33094a25d541ea7bf15ca8707e4ed9bf33115c2c8da1f4ab79f39f14ac3713e7985594f8d6a5341361bc864faaf3b437658204c4b3eadb52423d3a5235a2feea7fe226b56fc127d3cde211f250bf9eae76c2909408489f11b8abc0284cc3826485520b70dc41c28288ed3c7efe8cd84698f6d71227521a7671f7ba4f2a77080fe5eeb610308402bdf1f7fd", @ANYRESHEX=r3, @ANYBLOB="31fc27f6f8a49d144f44a69cec1e3d51d6b515ef511a30622473f9dc6635f15ccbe0b83ff118002400edb037818244d418272173e57478a44a2438bbe9e4aad991f7e87adfb6a6931ddc846090db600551f7464497f88c5153594f9c8bd3f2606c58db7397a99784487c65ddb69f615b9faf7069c73fe2ad12373458b519de3421a7d8207d482d6dc59e2b99e50a941670b9630681639c377e477f27cc4382b561c3bda8c2af20d1d08cadbd3a6a001e6ef3d2f9358e1e6b2a959db6a7e79ce0a8618a8a9b990470cd3305c9ea98e839a248fb9ebec1e75931055f6738e08273291c5ebf3619a2a706607b3eeddb220224fe95555433"], 0x20}, 0x1, 0x0, 0x0, 0xc0440d0}, 0x4000804)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1d, 0x2, 0x6)
bind$auto(r1, &(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x6a)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r2, &(0x7f0000000000)='*\x00', 0xfd)

5m37.753739032s ago: executing program 3 (id=1845):
mmap$auto(0x2, 0x40009, 0xa, 0xff, 0xffffffffffffffff, 0xffffffffffff8009)
prctl$auto(0x1000000003b, 0xfffffffffffffffe, 0x4, 0x5, 0x7)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
flock$auto(r0, 0x6)
open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
socket(0x2, 0x3, 0x100)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x860241, 0x0)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/smaps\x00', 0x400, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000001a00), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110026bd7000ffdbdf250300000014000100ff010000000000000000000000000001e010e5152001d534f9049c6c145278c0e3de7d9ab7b82a655623d605643ea23aeb461d8d478b8503e3b7b4ea67e85bc0b2d305dcd6e59596b73d2c9a38b84836c7d0c76e0d4d48f045ba4e4b3604427dcc8eeb0266b3d755b2b3fffa8d9bb8197f1d63b10ec827ac60ea6f65cb6baae83d522f8145aae41312c20da9fb4eeb7fc00d7dfe90f49a77317efdc3a7bc09afd93b603ca3ea"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x44892)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
shmctl$auto(0xcb, 0x4, &(0x7f0000000140)={{0xf3, 0x0, 0xee00, 0x317c000, 0xb, 0x0, 0x4}, 0x1, 0x8, 0x8, 0x9, @inferred, @inferred, 0xad, 0x0, 0x0, 0x0})
mq_open$auto(&(0x7f0000000080)='\x9f\xb14\xdf\x16\x95kx\x15\xb0vV\x93\xb4E\xee\xc5}l(\xab*\x91d\xd7\x98\f\xed\x96ic\xc6\x88\xb0\\\x9e\xb5\x03\xcc\xed\x18\x81\xea\xbe\xf26\xe0\x00V\x04\xbc\xa4ae\xe9\xb1\x91ag\x93\x92\xb8\x15\x141\xa0\x81T=\\\xccb\xcd\x85\xf7\xdc\xe3\xd5\x88#*(\xa8\xbc/x\x87\xc3\xecGG)\x8e\'\xc1s\xe3\xc8+\x8d\xbf\xeb\xe5y\xfb\xed9\x98u>\x00\x00\x00\x00\x00\x00', 0x400056a, 0x9, 0x0)
poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0x80, 0x400400)
socketpair$auto(0x1d, 0x2, 0x2, 0x0)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0x80000002, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x82)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x7fff, &(0x7f0000000100)={&(0x7f0000000440)="b3450bf5e939024fc8f6f1655fd25949d8736a99a3cf43b27a952f61e4013a10c1b82ad39d88ba0d95ff", 0xfc2}, 0x2, &(0x7f0000000400)="c1bca65b502d6ec4d73a", 0x7, 0xa505}, 0x40800}, 0x7, 0x873)
socket(0xa, 0x3, 0x3a)

5m37.233988837s ago: executing program 3 (id=1848):
sysfs$auto(0x2, 0x10000000000048, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioprio_get$auto(0x3, 0x9)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth0_to_team/disable_policy\x00', 0x2002, 0x0)
pread64$auto(r0, 0x0, 0x54e3, 0x80000001)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto(0x3, 0x4010ae68, 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = pipe2$auto(&(0x7f00000000c0)=<r3=>r0, 0x9)
mq_timedreceive$auto(r3, &(0x7f0000000100)='/dev/snapshot\x00', 0x24, &(0x7f0000000440)=0x3, &(0x7f0000000180)={0x6, 0x81})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x8000000, 0xf0ffff, 0x1000000016, 0x13, 0x3, 0x180000000)
r4 = prctl$auto(0x3, 0x2, 0xffffffffffffffff, 0x4, 0x2)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x164, r5, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_CQM={0xbe, 0x5e, 0x0, 0x1, [@generic="069ae9cc4922823aac28cb5dddfb360c24960df6d98ee02a657da1fb15cf61b305c526940cdc3bf747c8e5438e7d3d9b7f3763710a8430140139677b14dcd22aba7007af5749af10b31a182836514f3fbb78905be4f60621dad8f7ead0f81d6704c024269b63114ed38819b9eb98b649a7508691acbd9ec787f67b7775fbe8a48ca305670234a8791fde597b763eea6ed12f7f48d97060b93859b91a9805be0cc0b7487557de845e31157b828812201cebe1a7135a99f853012f"]}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_MAC_HINT={0x8b, 0xc8, "5b86dcb7dbbfb1a0f1927133d829891b4823acb5576ea626e1617f63001b828709d6f9cc452ed266872a943697c60b153e71653a8472fc6023ebd760f5120333d5e0742db453a8fff833ae4a6932127845773d278be548c551a6bb19f36b63f278b13c4e1333044eadc67b0807895e32de935d070edaeeac5d53b4a2694666f0df72e7e805619c"}]}, 0x164}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000005)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$auto(0x3, 0xaece, 0xfffffffffffff4e0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x26102, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000003240), 0x20001, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/phonet\x00', 0x80c00, 0x0)
mmap$auto(0x0, 0xe983, 0xe2, 0xeb5, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
tkill$auto(0x1, 0x7)
madvise$auto(0x0, 0xffffffffffff0004, 0x7)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x400004, 0xe0, 0x9b70, r1, 0xdb)

5m35.053707173s ago: executing program 3 (id=1855):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
clock_gettime$auto(0x8, 0x0)
socket(0x2, 0x80002, 0x0)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

5m34.527735894s ago: executing program 37 (id=1855):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
clock_gettime$auto(0x8, 0x0)
socket(0x2, 0x80002, 0x0)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

3m26.073489785s ago: executing program 8 (id=2396):
mmap$auto(0x0, 0x2, 0x5, 0xeb1, 0xffffffffffffffff, 0x8008000)
mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x800008000)
socket(0x29, 0x5, 0x0)
capset$auto(0x0, &(0x7f00000000c0)={0x400, 0x2, 0x80})
r0 = geteuid()
setreuid$auto(r0, 0x0)
statx$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x4, 0x2, &(0x7f0000000480)={0x5, 0xf, 0x7, 0x7, r0, 0xffffffffffffffff, 0x7, 0xa1c9, 0x8, 0x1ff, 0x2, 0x6, {0x9, 0x80}, {0x2, 0x1}, {0x9, 0xfffffc00}, {0x5, 0x2}, 0x11, 0xdfa, 0x7, 0x2, 0x4, 0x855a, 0x4, 0xfffffffffffffff8, 0x4, 0x0, 0x87, 0x5, [0x8, 0x2d52, 0x8, 0x9, 0x0, 0x9, 0xfffffffffffffffc, 0x3, 0x3391]})
semctl$auto(0x1ff, 0x2, 0x13, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000040", @ANYRES16=r2, @ANYBLOB="01172cbd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x844)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x200002, &(0x7f0000000040)={0x0, 0x34000}, 0x3ff, 0x0, 0x1}, 0xed71388}, 0x2, 0x9)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
fsconfig$auto(r3, 0x2, &(0x7f00000003c0)='\x00*\xbc\xf5\'\xde\xf1\xd2`{\x87e\xf1\x9e\xba\x10X\xe3r\x82\x81e\xaal\x8f\xcf\xed~0c\xeb\xd5|\xffB\xf1\xc0?@\x16\xed\x8a\xfbm\xbf\x00\x99\xb1\xd4:s]\xccs\xc5\xe6\x8c\x9b\x85\xdc\xd2\tIP\x90L\x9bo\xe1}u\t\xe1.C\f\xe5\x1cb\xd0|\x8f\xb1LB\xfa\xcf>N\xac\xe9\xf6\x9e\x83p\xff\xe8\x8d\xbf\xe6>\xd5sG\x8c\xdb\xe6J@\x93?z\xb36\xb8H\xd2\xc7J\x8d\x9d5\xdc\x03xS\xe4\xfc,\x11<\xb3a\xbe\x8d1\x9cu\xcdt\xe9\x7f\r\tXb\x94\xb5\xb0\x17\nT\x15\xd8\x15\xe2\xda,B\xe5)\xd4\x99e\xac\x1d\xf9\x84m{\xea_Y\x1d\xedD\a\x9f\xae\xd3\x05\x9aA\x96\x12Q+', &(0x7f0000000140), 0x0)
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
r4 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000080), 0x141002, 0x0)
ioperm$auto(0x2000000000000007, 0x10000, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x7ffb)
syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0xab20)
r5 = io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mprotect$auto(0x1ffff000, 0x7fff, 0x0)
write$auto(r4, 0x0, 0xc3)
bpf$auto(0x5, &(0x7f0000000240)=@bpf_attr_1={r5, 0x2, @next_key=0x4, 0xfff}, 0x61)
r6 = socket$auto(0x4, 0x5, 0x2)
r7 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3ce3ff00", @ANYRES16=r7, @ANYBLOB="100626bd7000fedbdf250300000008000400010000801700028059967d6b73d5ac88d26cfbd3ba12ebed786f70000800040000000080"], 0x3c}, 0x1, 0x0, 0x0, 0xc048}, 0x40)

3m25.39352926s ago: executing program 8 (id=2397):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000180), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfd)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0)
pread64$auto(r3, 0x0, 0x100000000008, 0x8)
ioctl$auto(0x3, 0xc0105512, 0x1) (async)
ioctl$auto(0x3, 0xc0105512, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5bf7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendto$auto(0x3, 0x0, 0x13, 0x7, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x20) (async)
sendto$auto(0x3, 0x0, 0x13, 0x7, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x20)

3m25.183650738s ago: executing program 8 (id=2398):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000700)=""/4096, 0x1000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
socket(0x2, 0x5, 0x0)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
socket(0xa, 0x2, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
setrlimit$auto(0x2, &(0x7f0000000080)={0x0, 0x6})
mprotect$auto(0x20000000, 0xeb, 0x6)

3m24.168376405s ago: executing program 8 (id=2400):
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x129800, 0x0)
mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x400000, 0x0)
mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x10010, r1, 0x8c)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x262400, 0xb5d1af1605322c72)
r3 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_gtp(0x0, r3)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f00000000c0)={&(0x7f0000002780)={0x22b0, r4, 0x228b1f65e365497b, 0x70bd27, 0x25dfdbfd, {}, [@MACSEC_ATTR_OFFLOAD={0x117, 0x9, 0x0, 0x1, [@generic="84b37a852d7fbe38572511c3996f536b9cc27ada5616974fca49270031dab2801d4f703cde7049bed2c580b25ada66d701b8af30e0b5e1c4ebaac11c6560bc24e4182f547a060029506657a59fc3de9fad0440b1ddf72f71503d13c07b178cd38919cb6f5769b2395c2ae6eac58a5c452d7bdf94530843185cbe6e0fed9722", @nested={0x91, 0x19, 0x0, 0x1, [@typed={0x5, 0xb4, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x44, 0x0, 0x0, @u64=0x9}, @generic="53f88bffbd5e1313f640fa428147aba3cd672270241d91a7f836b23477ee3c6a37ba1e3116de064cd813a137f8c2842ff045d8e33a30e64f3f19d2c06e3044bba6d9e72521504a42dd8bc9f7620f33f2d66f24a13edd66cd0b0b8f2fecb11cc792b59e570ad60c582bf7a1bbaef4239fde", @nested={0x4, 0x12d}, @nested={0x4, 0x4b}]}]}, @MACSEC_ATTR_OFFLOAD={0x2184, 0x9, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @fd=r3}, @nested={0x2040, 0x76, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x85}, @generic="8c6218bbc2c8e4a2845381e886044ba1f0de32d71234bc331d6aedfa7db7d8cd4311c4a60e4ba7e71d312caff911fa63e0489ecec9b6b5d4e9d0b8f10266524bd72ad23d3d394223bf274655cdb5eebfbc75a22a569d70f82a9b6846bf43494a99c96b4fc4cd8e7616466e65c1c29f7c367d3e7149497bff409f44650cf9690f266a371049e31e9255c97a080c37d9a6a809f6faf0170783f44cef04dbe7ce73dd4d07bd61e1b02bbd4168920db301a380dd0bd0ec40b0c750322d1edf287f564228554b49b4dde50a392b6f4dd05553374d71f6f58d39c4c6b59ae4c5f725335a645f4677b4e92eab15ac3c8a4afe6612bc51089634c5a21c93e5ce7f513bf6c1f3212b6b7e2fc877ad8b700406d39d941fc7fd03a9443666119576ddd7b740a34bd36520ca17f17f6b35364df30f600f4d993dfbf92c2f0169dc292909e636c0c6a2bbb2f5560c3686e9db1e22ada5675a65857e1d3e7e193acd7c6740da98baa3b19a69098b809904d61c1c1bc717084361c08fd9445019b4273585497d3c93278ad9f5dc4b672bad2903d4cf758d55cd0748e5fc7e8aaf29a516d97753a9b0241cf09cfa9c1d1c4d830a92cc1dab95eab024f8651bc22c45c3ed404ebcbd8af0d41a718747be724b3fb8a649cb5391599877cae32cc37cd0a9f0e0468189650fa8e22c0d5e26c97bd2deeee1caa93bc1f0c006c7966ac0ca3d823f3d09c2b0728c145a9cb406eb24150a87bcc31a4d1173fe1858012c8569b6ed74e106ec8f861a06a17b1882df78fd07e8609f0c86126673148e72791d4b2db82ba669ab9a5e6e1396b102d4a69acf3c173f7c5168f02851c3029d5ad18182c7f1da0839078015274d63bfc2d19a235480b2e1ca76ec7ac3cf263ca9ea86fe53d3f4e80a28cde9700b37c16182466320477fad5e8431f65390abb13537e49e2b69261a4db8270a458128203eb2f57e72ccc8360f1f524f728d0cf3c7b88593424edc16b775013a75f187dc31099baa85afdfcaf23bc9611d64ec86875eb6b04cb21058f1bdc869e15ae975828cf6d9b628b9ec29925b0999fa33905372b880adc5bc54a7f7437e52a1b6f253ab285d4b3541e1899fbc4278550b6304381842f43307130642a35cbdb3f63d0b65b1d904beca353d39017c1094db3fde37795cc2fe0d93f970e558de28febc1e8ec988b7032a0d7c67eb6604475b531e678c684f8d53353d448a1c94cff2cb15075cf186cdc5789d59ce7e19d1929926d46711012c37f285164a529b8ee617bb1420bd4c47e355f857c20ae56a3866c2cb5e708c292db66d2426eda849e7b7e7bc21bfbd4d16cc82a71dac8963c0a639798072e6b3a760f0b3d1edb97b198d8ccb8ea1b05d16f31ffad6c1ca4f35d7f6e630d12fce2d1b5d1ac5a356faaf53b13588b9851b289dadbec5114eded97325ab320db32d7b639d4eae4ca6939750ada0f5c31279e368ea92a76877b7bd781f986f169d9af1ff6c7a73d6b3ff9ccad54f78d1e83dfe5aa45fdb1a27a0dfb9b9dc0fa2b94b40539a4de2e4a91df301095a09584ba4c9b6cfba61a65ea5be687ce8cc4cc7f50dedbdeef300c1a0fb613e427c96f00c506d834eb78935edd11e507ebe4a6667d3b1082374d51f94e914799ed16ef961cb4479977cbd66290160340641d8e9f3b18eef56c5d5a0966c0c0d5d9a9a87cca67f1f5e4d78b0aae64188693ee8b1985650d402bd45faed228278d49dd4f3989572d7dd2e95bcdfb7c27713cae274a446201cece347cc011097593c495018af7b8ba08f10193301abe58b95d3b422ab367555d5c90b9377fe17261b2aa5d97b648b83f09d21dab2865e0832333812ee909addeccd1d59fe93ef81ba42f5c57d65e43a35db903aa08524288b00c483f996ef186dc8bc7411166146b0b6c6ca733869e6f5567bdedcae4674c2dab71d08f971ad1338b34814971114a545188109d6968c79306c55cc04ff9a578571caf71f56b026ab753c2b2adc840257c309309c11eb09a08469fad4c74bf2fb946d06f5c5b55fef5be565e620effe8ff9dc13002df6dbbdca1cfce98b7499c6e928da02e3c3aa7ae248a276fb49e55bc5b67611f3aaa380d6168c864956dfe59e012b8b1a88212fc924a3f673d798d0162a58fa3e78def7c8b20468d362b8acd67a4665e8b0c67cb9621bb993a1ad5591013978b91c7282536e531d3891a68d105881db543f55dd569cf340132a97d3e49628e2b094b3ad976d8fd689d5b18b72c3f398c3fe00d8328beaf43759b14585e0ab9643aedd7e179b4d843b0c79bd69f346d7d5b79441fc0e762c5be66a85ed300070e303557bb06a068cb6a984bbe3b373084211004fe46bf296d94f12286eafc852c4b58b40d3151ce5e4b994a4110f4983365ecdee49a25cfcde21544b463837bdc57f16064e00a4cd6309bb4a56eee900bd1ceadb7e6b185e28cef130b6f5794886327b33afcf19c1c67a082fc12c8a2819171e78a06b00a000e7284edf00cd7004b105df96f325032b7a1970b909dce6e9953eb4975f1f117530fd5334a220c58447fd3e2d64485d42fde096062a588a4cbcd9b77c4091d6960c2e7b81a8edf3b3326dea9a3554b6b827f47a4889dc48fe9c77fb7a997e2730c61f01a4213f7e38520f190c3436cf7fcc2d6568311620ec1978e9128e9965ab56371e97e457d25ac655b51baf95d5358d1aa397dcc19b4dcfd173d5affef50e71ec79816018574277ec918a85f116bf6450d7ac6745b86a317d48b5e42b7d2c946f5a6f8447b3692cb549cd2551a371a0fc0c684f32a86ad9b8c94e6398b5e2094ed4cb60c4808d374d56304b6f18f87f5362faae15cff8adddf070dbfaf646c9d2cc38f1c99c1423b7a3e29b3fc7ecf3e3bdbce6f6922564a060c5fbda46f22909124dcd090adcc45209d19448aa860ff7e77c0fa503892fc1e086d0da44a72858a54d7d3b4c34ef3db0ce09c7da2c75f2cd7cac33077cd462370e3e2cc78d50f70ba4a0831bc1dd9340ad7f015189e873f57cea87282effcfc87b27eeca712c22bf66a2a9d03d5f9bcb5765abd1f751e4477619c0ac11b0a4ac520fefa9ffcd61fe39c0bf712f017d68e0648588cabffd5f3c74f9db5643501e1c7479287070aad5b757fd896648b094e30369668aa552d84db55b1d6bfe6eb1584352ac89dc26ea3d69bf15acc054683454f04f5f66c432873f6807918e8731c222e248670ba8c111c200d98583eeb1058cc1deafda6de3dc817500fbe11101463f981de9413e29f6f3a3bc123c6aef6169c93d4fae735f0036cec726c79fd174e9f27179773fadddf5572b36046271afa091a1beaf5719d2d7a655635368de1bcea9c7c255c4d2ce4a1c38b881b4f82a34425741a6c1b11480876cb000922b9fcc917782873ca7989cb00c6f2c3efc2cc48430c751c329e9bf2cf68c1717170ce93b42de26cc65f0630c73de7e9a3ee1a7c5a7d0f447a9871508be0ea7fcf7015e8cb64eeac1a1817cf3322d655c5d535244f8f59ed51207ce78eaa2df31c2237d6914bdc1c4eabca587b6e3c0b48a60ed18883aa47fbec6fe040ce57d332a17324afec04cdf46929f96ab7f7d1f11b6b339a1adb7e25428577a6a0b03cca395310aed731e35dc672335df2db12bde2797e20abee64da679289c0e95ca06b952f91fac469e823fbfc5b65cfe731dd01de401ebf1ccda395cf2c54fd813f5d24daa96d86a907c900b9c74ba781bf64a795b9695baa51281b8c5dc429d59e27af4047a35814ab90e7f1d8a6430030963c0e8771786796eb8b63ea0393b310dc5cc07082b581ff710a6240b60e5cac7e520d3c368b8d1f44912246b884841b6a97d0e6e53f8c8ffec4a0a30ca9ba2e7aa7703b0159fc2df3d8c08a42131fd2dd885411db625185d3cb4b19eb6493daa8828ce4f6065a2093a037d529966886c0799509718559ba2b87e8670340e63e5148f9dba15bdbeab1cbb8b7aeceecf9c3b862fdcaa12588d9aac26e0e1b2bc98afa6fe979493c6f78392c341a0dd9b62832279436ce6e4d08a10383e48ceea333a0e42487e120bd00a7e28cc47ea85a5dff3ff2c69f6998decfc5ccc4ad3c7c5fb5f0e8845b2d7735812809c709c8a1c3d8a117980d7f8cf08755b82ee7e074843e4be42cae3f4aab9454ee5b12bd0d57e4cb25af08ec6274cad0e69d63e9ea2bc655ea8c6dbb039cae84d796fb44da8e2b4ca9b86bd7ca3c3932f5c230afc39e0debf65b0fab97a136dd177e1ca2dce8777087b339ddb6a78d93c14134e70f95a9c0a71e408e84146fce1a72bcd6055b77263102d863207f99e0ff0311801c64eae5ff7670d9d452ace87447edb0b5be7721b5309ff7e602d98aebda8524b2def8ecb28d248e76a9468241083c0e37ebb2d0f12555657b0b4281a7a24609225c3703b027d1065a29788154524c502144b6d584009cbf15163a915d34bc509975b932ca0da21d9eeb64376c7d84e9f6a5a2c69fcfc64e8b4db7c475fc921c76944d46c1c3766249f4831116918b984c19b3d036a886866346a7efbaae32449a0f2624e9d4bbd68ff833f725d42ea3371f067fb361356584044665c07f28baa98213e4a60562bd0fe5b896f71fa7ded772ee559f4e6fbb3c8f931f835a8e5d4918e6fee1f02ad0c9421b6797550445b35c562a435ca03fff9e86b08428cf59546758a35ccc8fe7b7b1a1d09983872ceab445c1cb3ef300c898f35ff51e021c2b5d2eb2330f3cbdfbced353cd0efa57f23b230ab814eeaa5241f4607db5ac06b6ca78a7c7078f75f91b3317ab3e1accd99bf1308535819b31e201df94a5387ab16a3e9286efec8760e0cef2401c11b62451e8b70d6b332ae739adc24587994e64f1159c4fd8fc25b6b469ebde73d65844a8bbe18d9021b37aeb0816f593803edbecfde86827d943971b2934b439569c92993f18eb794e54a54fbe00bbd3109af2fd0fef041e9ebcab153c502cda47ca8e72233b7cb374ffbd873b70b5ef002c6305bec2723d8dba56d0d4816a96178ba52de41cadfaec8d558422f2050b3eee7189b240b6b117b3dc9e135e577f6da9e78fa4026bc8a45a23e0e49792da235acaf8903c2cdaea9aa20f660ace01c0eef4a2cda6657cece365795294a501f5f9fdac0bca29089372cec2000ed32a9ba1623de0a9baaf7aaff5830c321abcce2731c471e0b7061f55edeeca86278255ee39289be3d316d7d28a3a6bbaccd530c4851d4e9b4431f9a9d43dcbfeda7195d12a27d216c1954e7730f936119e248cf8a47bbc7c095ea67becf37c6c6931f3a17382c281e904d6ee59c1bc76696099f0125bcc09269d96ed4019872a7e40cd174095c39fbeca5d19fa52d9a25ccee6be6ecbc8f4fee315bee430a8421231874c3616e5f57b08c3f0f10ec08f3faceaa19adb42dde159c17c75997b48c623ae75fd77f965a1ec16abc812f3d3dd703a173c0b645a17ce75a43fdc77ebb74aa8facda94e2f8a9c86171a452ee9654c6f09f7eb91bfa6804da63570d0f9f9b947a95653c65f26c9389301458284279283e018cad14d764a972261975395c591d9a8eb87964d2fba06e7eed13ecf94299e814b57dacef30fd4c3915d9e28c9c73d330fb827f6b022ec4bfbc89e39a486884cab92cf991e411b37927410e14fa8f1669495bc31a18af9e86dfed30101a1bca51bb2254961d58c47df28b3fc928b26be41fb12d97459b87e26edebcca2178f221856220378aaf013ce644eb82623173b672aad469520a690a9fc579de59260533933ff4e1d444c5b0c2a3374c886497d3", @nested={0x4, 0x109}, @typed={0x4, 0x4a}, @generic="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", @typed={0xc, 0x12e, 0x0, 0x0, @u64=0x701e12d0}, @typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @typed={0x8, 0x147, 0x0, 0x0, @u32=0x1}]}, @nested={0x11d, 0x50, 0x0, 0x1, [@generic="9fc90afa6161f0602e996634bd59a025d4", @generic="95a32aad280e685771ef56e69d92509ca98f79095cff66f9b64b44eddcb4f800bfaba9cfdc6c31cfe8014b8cc8c7d3a18af40e64bcaa4726f7c70cf77250fb6bf1c275302605abd2572be81044169798f13495c887ed0d05d248d6f737002b7b8b742f77b16f1c1d2ccd0ff85f9ca3d40e1ac617783a759e488ac514a39d4518278e562a02f0f7879b23441af2550e8a65536aa7019f16e83697db265fba5ccddf79b669306a7dc834a53d717470e957bf4edf070a2acf922d5297f1bea293a97cafdd4efcfb3c00743641bb05a1e8cdf582348f50efe2abe4f6fac632b0eb5082e55d75814d52166ab6f49a", @nested={0x4, 0x43}, @nested={0x4, 0x97}, @typed={0x4, 0xff}, @nested={0x4, 0x110}, @nested={0x4, 0x97}, @nested={0x4, 0x4}, @typed={0x4, 0x131}]}, @typed={0x18, 0xe4, 0x0, 0x0, @str='/dev/dri/renderD128\x00'}]}]}, 0x22b0}, 0x1, 0x0, 0x0, 0x10}, 0x24000084)
r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
pwrite64$auto(r5, &(0x7f0000000180)='/dev/dri/card0\x00', 0x6, 0x7)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1)
ioctl$auto(r0, 0x9210641f, 0xd)
ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000100)={@padding, 0x6})

3m23.553056686s ago: executing program 8 (id=2403):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r0 = prctl$auto(0x3f, 0x4, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000000)="0e625f3922af74973ac6421a55271120431dd6f3d3370ef8a48a14d47249da170c461c7714f44646bee5a994211e8cd80cb5e6e508caa90b90f92cf9d13c5e94feaa7f84b639f86cf5cd09f66dd002e03db0789191a914e967478a2ca41341e0c674c76284e48562895037d95b89e443a9942353ce8c92cdb55f1c38c7e13948223eed38297614cdade8b798a9509d839eab5771945f663c8baac280495ae8b987449e59931f", 0x4b}, 0xfff) (async)
tkill$auto(0x80000000000001, 0x7)

3m20.693492396s ago: executing program 8 (id=2412):
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c9180, 0x0)
openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x100, 0x0)
mmap$auto(0x7, 0xb351, 0xdf, 0x9b72, 0x47, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x3, 0x100)
bpf$auto(0xc000, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0x0, 0xffff, 0xfe, 0xac1, 0x2, 0x8, 0x7ff, 0x3bb, 0x5, 0xfff, 0x1, 0x81, 0x68198}, 0x6f2)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
socket(0x10, 0x2, 0x4)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, &(0x7f00000000c0)=0x7ffffffc)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0xa0900, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x21601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.rpcsec.context/flush\x00', 0x60400, 0x0)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket(0x2, 0x5, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
r0 = getpgid(0x0)
pidfd_open$auto(r0, 0x0)
socket(0xa, 0x3, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)

3m20.261564558s ago: executing program 38 (id=2412):
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c9180, 0x0)
openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x100, 0x0)
mmap$auto(0x7, 0xb351, 0xdf, 0x9b72, 0x47, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x3, 0x100)
bpf$auto(0xc000, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0x0, 0xffff, 0xfe, 0xac1, 0x2, 0x8, 0x7ff, 0x3bb, 0x5, 0xfff, 0x1, 0x81, 0x68198}, 0x6f2)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
socket(0x10, 0x2, 0x4)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, &(0x7f00000000c0)=0x7ffffffc)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0xa0900, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x21601, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.rpcsec.context/flush\x00', 0x60400, 0x0)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket(0x2, 0x5, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
r0 = getpgid(0x0)
pidfd_open$auto(r0, 0x0)
socket(0xa, 0x3, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)

2m58.713544876s ago: executing program 5 (id=2459):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000100), 0xa8380, 0x0)

2m54.238728905s ago: executing program 5 (id=2470):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mounts\x00', 0x28040, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0)
ioctl$auto(r0, 0x40085112, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x204180, 0x0)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
socket(0x18, 0x5, 0x2)
r1 = accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd)
socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = io_uring_setup$auto(0x1, 0x0)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r1)
sendmsg$auto_L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x300, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x8001}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
r4 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)

2m45.68559471s ago: executing program 5 (id=2504):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0)
poll$auto(&(0x7f0000000000)={<r1=>r0, 0x435, 0x2}, 0x0, 0x3)
write$auto_msr_fops_msr(r1, &(0x7f00000002c0)="2cdde02c4a23d0bfa2f142fd75faff3d3af64fae342cbe43", 0x18)
r2 = socket(0x2, 0x3, 0x6)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88ds\x1cJ\x99\x12:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xc1\xa8\xd5\xf9.=(\xeb\xd1\x14^\xbe\xa2', 0x19b5, 0x3)
r3 = socket(0x2, 0x80002, 0x73)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r3, 0x7ff, 0x6, 0x0, 0x100000b, 0x5f, 0x2}, 0x10)
mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd)
bpf$auto(0x1a, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x2, 0x8, 0xffffffffffffffff, @relative_fd, 0x441b5c1ff}, 0x92)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
open(0x0, 0x22240, 0x154)
ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0xc002)
r4 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/ns/cgroup\x00', 0x80, 0x0)
ioctl$auto_NS_GET_USERNS(r4, 0xb701, 0x0)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0)
chown$auto(&(0x7f0000000080)='}[,&*}\x00', 0x0, 0xffffffffffffffff)
socket(0x1f, 0x6, 0x2)

2m39.504484237s ago: executing program 5 (id=2520):
r0 = socket(0xa, 0x5, 0x84)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/vm/compact_unevictable_allowed\x00', 0xa00, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_TSINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44810}, 0x40000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x1, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x7)
pread64$auto(r1, 0x0, 0xb20, 0x9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0)
sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x10}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x9}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x24008070)
io_setup$auto(0x1, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c)

2m32.550013563s ago: executing program 5 (id=2553):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x4000004)
sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="20062abd7000fddbdf25020000006d"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80)
sendmsg$auto_NCSI_CMD_PKG_INFO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8020000", @ANYRES16, @ANYBLOB="00022abd7000fbdbdf2501000000080007000500000092020500e2d935253c49ff0a9ad6b83f45"], 0x2b8}, 0x1, 0x0, 0x0, 0x20}, 0x8004)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
ppoll$auto(0x0, 0x4007f, 0x0, &(0x7f00000001c0)={0x6}, 0x8)
mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'pimreg0\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) (async)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r3, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB], 0x4d0}}, 0x4000000) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=<r5=>r3, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB], 0x4d0}}, 0x4000000)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r8, @ANYRESOCT=r5], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00'})
r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r11=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r9, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0xfd}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000084)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x5ff4, 0x1) (async)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x5ff4, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)

2m25.40162687s ago: executing program 5 (id=2583):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00'})
shutdown$auto(r0, 0xffff)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x200000c1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2m10.421963337s ago: executing program 39 (id=2583):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00'})
shutdown$auto(r0, 0xffff)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x200000c1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

1m19.125490239s ago: executing program 7 (id=2765):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14d243, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x40, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r1 = creat$auto(&(0x7f0000000000)='++\x00', 0xfff6)
write$auto(r1, &(0x7f0000000100)='/d7\x00.*\xd9%\x00\x00\x00\x00\x00rF\xaf\xa5\xe7\xbe\x01\x05\x7f\x8e^\x9d\xd56V\xd0\xb3F\x97\r$\xd5\xa7\xa0\xc1\xdfx\x94\x0e\xc8\xb2\r\x16\xc4X\xd2\xa4\t\xc8\xf4\x04\xcc\x82\x97\x9c&#fK\xca\x0fR\x12\xad\xea\xbe\x96\n\x99\xc0N\xe5e\xa1,V\xe3\x8c\xa2UG\xf8R\xd9\xb5\x8fh2\xbdh\x81\xb2\x05\xad\x97>\n\xc1\xc3\xdaq\x12\v\xf9\x05\x00'/120, 0x5)
madvise$auto(0x108000, 0x2, 0x200000b)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x3, 0x8400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0x80000011, r0, 0x8000)
r2 = socket(0xa, 0x3, 0x3b)
r3 = getsockopt$auto(r2, 0x29, 0x30, 0x0, 0x0)
socket(0x15, 0x3, 0x0)
adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4})
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
mmap$auto(0x6876a3b0, 0x4, 0xdf, 0x9b72, 0x2, 0x8)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r6=>0x0})
sendmsg$auto_BATADV_CMD_SET_MESH(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="0500296001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20044094}, 0x140080e4)
io_uring_register$auto(0x2, 0x1a, 0x0, 0x1)

1m18.150760067s ago: executing program 7 (id=2767):
r0 = socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x100008, 0x1000000004, 0x9b72, 0x2, 0x8000) (async)
ioctl$auto(0x3, 0x8914, 0x91)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x1, 0x1, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x200000c4) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x2000c880) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xfffffffe) (async)
r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$auto_TUNSETQUEUE(r1, 0x400454d9, 0x0) (async)
bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8200, 0x1, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "7829000000000000000200", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7)
socket(0x1, 0x2, 0x0) (async)
r2 = socket(0x10, 0x2, 0x4)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x0, 0x221, 0x70bd2c, 0x25dfdbeb}, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async)
write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) (async)
pread64$auto(r1, 0x0, 0x2, 0x6) (async)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
ioctl$auto(r3, 0x80045503, r3)

1m16.44030146s ago: executing program 7 (id=2772):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000)
r0 = io_uring_setup$auto(0x6, 0x0)
r1 = socket(0x2, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x2c, 0x0, 0x13, 0x70bd2c, 0x25dfdbda, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7ffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid$auto(r4, 0x0)
sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x51c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x36b, 0x7f, "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"}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8}, @NL80211_ATTR_BSS_SELECT={0xcf, 0xe3, 0x0, 0x1, [@typed={0x99, 0x135, 0x0, 0x0, @binary="d09b4760f2db694ffff0bde13cb4b6ef17ced21197cd8fd90fd871f80de22574ce483979655fe142a78ab8e60ae47e68375bbdea65e44983c46a84524262ff7ecaf22baf3b487e9d10f8a0ed345172d1d0eec1c3c98d26ea0bef11517c5f37f40193b47996fc516bcf0af74ed5055a839114db52b6913519f486c889c136f75aecfd7d47725d81c4b9f48c38ae9ae7d23b1b94d919"}, @generic="412887", @generic="17b66394f06ba1ad", @nested={0xf, 0x41, 0x0, 0x1, [@generic="d752eb01d52e34ec726f41"]}, @typed={0x14, 0xc5, 0x0, 0x0, @ipv6=@loopback}]}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xbf, 0xbb, "55295cd7d8b96a5b5b36e16d9383433b639b6e2e5b374f812b3357e9798a1172e67007a5c686167934b5ac10c45abf100a00ce27e42c341acd892fb3c520dd8bf55b9e3ea5c0c8ef464cc68062362f92aa8218cbc27f0451950254ce00825c79791f0cadccecb1c11de4d6a2fd647d58bbbc4399d4b0e5eb2db4dc67f5820c753ca4186b7336aea9b868eb834d6e10897a569698b8fecebde91f51a0a9d81222153407b178a6794ad95092ce83247e58b507acdf6caf672c5d3677"}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x51c}, 0x1, 0x0, 0x0, 0x240000d4}, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
semctl$auto(0x7ff, 0x2, 0x13, 0x3)
setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14)
umount2$auto(&(0x7f0000000000)='($\\\x00', 0x80000001)
umount2$auto(0x0, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(0x0, r5)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(0x0, r5)
openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x81, 0x0)
sendmsg$auto_NL80211_CMD_JOIN_IBSS(r5, 0x0, 0x4000054)
umount2$auto(0x0, 0x2)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200402, 0x28, 0x4}, 0x18)
open_tree$auto(r6, &(0x7f00000000c0)='./file0\x00', 0x6)
madvise$auto(0x5b6, 0x7fffffffffffffff, 0xa)
mmap$auto(0x9, 0x9, 0x3, 0x9b72, 0x8000000000000000, 0x8000)

1m15.980784657s ago: executing program 7 (id=2775):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a)
socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x10000000008}, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9ae, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0)
r0 = socket(0xa, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008)
r1 = socket(0xa, 0x3, 0x5)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x8, 0x80000000}, 0x5}, 0x1, 0xa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a) (async)
socket(0x29, 0x2, 0x0) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x10000000008}, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9ae, 0x0) (async)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) (async)
socket(0xa, 0x2, 0x0) (async)
sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) (async)
socket(0xa, 0x3, 0x5) (async)
io_uring_setup$auto(0x6, 0x0) (async)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async)
sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x8, 0x80000000}, 0x5}, 0x1, 0xa) (async)

1m14.152828684s ago: executing program 7 (id=2778):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0)
r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
r2 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x5, 0x37, 0x10000}) (async)
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) (async)
bind$auto(r0, &(0x7f0000000000)=@l2={0x1f, 0x7, @none, 0x8, 0x2}, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
io_uring_setup$auto(0x1, 0x0) (async)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
tkill$auto(0x1, 0x7) (async)
ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0)
ioctl$auto(r0, 0x80044dfe, 0x9) (async)
madvise$auto(0x0, 0x20000a, 0x4)

1m12.813493113s ago: executing program 7 (id=2783):
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
ioctl$auto(r0, 0x9200643b, 0xffffffffffffffff)
memfd_secret$auto(0x1)
mmap$auto(0x0, 0x20009, 0xdf, 0x20eb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mremap$auto(0xa90, 0x1fffe00, 0x3fd6, 0x3, 0xfffff000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
setresuid$auto(0x909b, 0x1, 0x0)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x100)
socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
getsockopt$auto(0x6, 0x107, 0x14, 0x0, 0x0)
r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x101901, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x9, "ce7009002ce100", '\x00', "0201ccb7", '\x00', ["00000f0008b330ac007abfc1", "70d900001100", "0800000000000000000000ec", "00deff1000"]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r2, 0x104000000000010e, 0x8, 0x0, 0x4)

1m12.50397831s ago: executing program 40 (id=2783):
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
ioctl$auto(r0, 0x9200643b, 0xffffffffffffffff)
memfd_secret$auto(0x1)
mmap$auto(0x0, 0x20009, 0xdf, 0x20eb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mremap$auto(0xa90, 0x1fffe00, 0x3fd6, 0x3, 0xfffff000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
setresuid$auto(0x909b, 0x1, 0x0)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x100)
socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
getsockopt$auto(0x6, 0x107, 0x14, 0x0, 0x0)
r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x101901, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x9, "ce7009002ce100", '\x00', "0201ccb7", '\x00', ["00000f0008b330ac007abfc1", "70d900001100", "0800000000000000000000ec", "00deff1000"]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r2, 0x104000000000010e, 0x8, 0x0, 0x4)

10.09084608s ago: executing program 9 (id=3052):
mmap$auto(0x0, 0x5de7fb0, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0)
mmap$auto(0x5, 0x23c040000000000, 0x4000000000df, 0xeb1, 0x401, 0x100000003ff)
mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x383802, 0x0)
write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\x00\x00\x00\xf0I\xba\xc9\xae\x80HcH\x00\xe8VF\x9e', 0x8587)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x15, 0x5, 0x0)
socket(0xa, 0x6, 0x7)
sendmsg$auto_NL80211_CMD_STOP_AP(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x2, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/029/001\x00', 0xa101, 0x0) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/029/001\x00', 0xa101, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffff9, 0xc, 0x948b, 0x4, 0x15f4da0a, 0x1, 0xe, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2, 0x7]}, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4044}, 0x4054)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x8000000001, 0x0, 0x0, 0x9}, 0x7}, 0x81, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
pidfd_send_signal$auto(r2, 0x5, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x401, 0x8, @_timer={0x0, 0x1, @sival_int=0x9, 0x9}}}, 0xffffff7f) (async)
pidfd_send_signal$auto(r2, 0x5, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x401, 0x8, @_timer={0x0, 0x1, @sival_int=0x9, 0x9}}}, 0xffffff7f)
close_range$auto(0x2, 0x8, 0x0)
futex_waitv$auto(&(0x7f0000000100)={0xf, 0x5d95, 0x6, 0x4}, 0x75, 0x0, 0x0, 0x62bd) (async)
futex_waitv$auto(&(0x7f0000000100)={0xf, 0x5d95, 0x6, 0x4}, 0x75, 0x0, 0x0, 0x62bd)
mprotect$auto(0x1ffff000, 0x8000000000000005, 0x4) (async)
mprotect$auto(0x1ffff000, 0x8000000000000005, 0x4)
io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0xffffffffffffffff, [0x9, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x0, 0x1, 0x5, 0x3}, {0x4, 0x6b93, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x800000, 0x3}})

6.163637836s ago: executing program 9 (id=3063):
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xfffd, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
open(&(0x7f0000000080)='.\x00', 0x0, 0x1f2)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
open(0x0, 0x22240, 0x155)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/rcutree/parameters/rcu_resched_ns\x00', 0x88282, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="5e80", 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/node/node1/compact\x00', 0x101800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00')
acct$auto(0x0)

5.17712845s ago: executing program 2 (id=3068):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fstat$auto(0x2, 0x0)
ioctl$auto(0xc8, 0x401054d5, 0x0) (async)
open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a)

5.131734401s ago: executing program 9 (id=3069):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) (async)
sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
setreuid$auto(0x3, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x29d, 0x7, @old_map_fd=0x3ff}, 0xa3)
mprotect$auto(0x1ffff000, 0x8000000080000001, 0x4) (async)
r2 = socket(0x23, 0x80805, 0x0)
poll$auto(&(0x7f0000000000)={r2, 0x1, 0x8}, 0x5, 0x400) (async)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) (async)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) (async)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x8, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4009) (async)
r3 = socket(0x29, 0x2, 0x0) (async)
r4 = socket(0x1e, 0xa, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async)
recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r3, 0x89f1, 0x24)
openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0x5, &(0x7f0000000300)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x2000000080000001, 0x3) (async)
ioperm$auto(0x162, 0x6, 0xfffffff2)
munmap$auto(0xc, 0x4) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x9) (async)
mlockall$auto(0x3) (async)
socket(0x2000000000000021, 0x2, 0x10000000000002) (async)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)

5.008101312s ago: executing program 0 (id=3070):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/net/nr5/queues/rx-0/rps_flow_cnt\x00', 0x182b02, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket(0xa, 0x3, 0x87)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
mq_notify$auto(0x5cf5, &(0x7f0000000100)={@sival_ptr=0x0, @inferred=r1, 0x2, @_sigev_thread={0x0, 0x0}})
r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen_full\x00', 0x3c340, 0x0)
read$auto_lru_gen_rw_fops_vmscan(r2, &(0x7f0000000040)=""/246, 0xf6)
sendfile$auto(r0, r0, 0x0, 0x3)

4.625346414s ago: executing program 2 (id=3071):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async)
write$auto(0x3, 0x0, 0xfffffdef) (async)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async)
r2 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x2, 0x0)
readv$auto(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0x8}, 0x2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'tunl0\x00', <r5=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6erspan0\x00', <r6=>0x0}) (async)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000680), r3)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa8, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_FREQ_KHZ={0x87, 0x124, 0x0, 0x1, [@typed={0x8, 0x90, 0x0, 0x0, @u32=0xffff}, @generic="f0bc0aea21f7ebd0d5888a74a1bedf3f648370cd27c318ecfcb74a4f15124c19844fd6932b08cdfefe1be330dc9e70c812e9ccdef656d7dd7b165bb47b1821045e46266b1f87c72aa3e9df245520ce7e496a3749f348235c523f9aae068360c06d3f82b448c492539bba3d99a0c7c1bcf5f2afa89a646b849de506"]}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc000}, 0x1) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'pimreg\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', <r10=>0x0}) (async)
r11 = open_tree$auto(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0xfff)
read$auto_aoe_fops_aoechr(r11, &(0x7f0000000580)=""/139, 0x8b) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macsec0\x00', <r12=>0x0})
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r4, @ANYBLOB="060a29bd7000fbdbdf25290000000c0001800800040002000000300001800800040019000000080004000900000008000100", @ANYRES32=r5, @ANYBLOB="1400020069705f7674693000000000000000000028000180140002006d61637365633000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3800018008000100", @ANYRES32=r8, @ANYBLOB="080004000010000008000100", @ANYRES32=r9, @ANYBLOB="14000200677265746170300000000000000000000800040008000000280001801400020069705f7674693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="0c00018008000300030000002c000180080003000500000008000400fbffffff0800030000000081080003002cffffff08000400ff7f000028000180140002007663616e300000000000000000000000080004004399000008000400030000006c000180080003000101000008000400be0c000008000100", @ANYRES32=r12, @ANYBLOB="1400020076657468315f766c616e0000000000001400020076657468315f746f5f68737200000000140002007663616e30000000000000000000000014000200627269646765300000000000000000000c0001800800040001000000"], 0x1b0}, 0x1, 0x0, 0x0, 0x41}, 0xa5a712559d94048c)
sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd700002dcdf250300000004000800080001800400558004000800"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800)

3.872575801s ago: executing program 0 (id=3073):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x5, 0x1, 0x82)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
setresgid$auto(0x0, 0xee01, 0xffffffffffffffff)
r1 = getegid()
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\xff\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
setregid$auto(r1, r1)
sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x14044890)
socket(0x23, 0x2, 0x0)
settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x801}, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyv0\x00', 0x109201, 0x0)
read$auto(r2, &(0x7f0000000040)='\x00', 0x80000001)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x7, 0x0, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioperm$auto(0xfb, 0x5, 0xe)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
madvise$auto(0x1000, 0x7fffffffffffffff, 0xa)
mlockall$auto(0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x3)
mprotect$auto(0x9, 0x81, 0x0)
prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video29\x00', 0x80002, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)

3.477459318s ago: executing program 2 (id=3074):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/usb/usbmon/32u\x00', 0x82000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x3)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xf, 0x3, 0x1)
socket(0x1d, 0x2, 0x2)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf25530000009700ba0081759f0c437df448927cffc8880eb6b95b4ea04c952f68bf4dd9fb2f0b4d3e12d611e829d47b937f81cdf40a6839217ffba97367bcb35a6235210fe2568db84ae2584521b345de1656a65947d11a552ae8fe5521fae2cf066b9a9edf7a08a4bbb728a9db2222659056154e915b3b7c9986d4b5e1efee866fed8ccc066fa05ba7c8fd023002968687c3c8ea659120ccb77ea5d8000400440005008a00020000000600144d08384400"], 0xc0}, 0x1, 0x0, 0x0, 0x400c004}, 0x40000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000004, 0x2, 0x9, 0x5, 0x2, 0x7, 0xac, 0x9, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1020000000]}, 0x3, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
memfd_secret$auto(0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000240), 0x141, 0x0)
socket(0x2, 0x80002, 0x73)
truncate$auto(&(0x7f0000000000)='./file0\x00', 0x4)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
prctl$auto(0x22, 0x0, 0x2008, 0x4000000d, 0x81002)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x4)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x40)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x54)
setsockopt$auto(0x4, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0x9)
close_range$auto(0x2, 0x8, 0x0)

3.325026508s ago: executing program 4 (id=3075):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) (async)
setuid$auto(0x800000000008) (async)
iopl$auto(0x3) (async)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)

2.773045815s ago: executing program 4 (id=3076):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async)
r0 = socket(0x15, 0x5, 0x5) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/media5\x00', 0x101000, 0x0)
ioctl$auto_media_devnode_fops_mc_devnode(r1, 0xc1007c00, 0x0) (async)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xd}, 0x800009}, 0x2, 0x20000000) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) (rerun: 32)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES16=r2, @ANYBLOB="00012bd97000fddbdf252800000005023e000800000031004801a289c1c1f3026f75a4d3a66a76f9f65578159c8a96f55e156e69b5114d65bb95000000000000e432bb9c533f930000000600ed000008000001009800090000001f08965c9104acfabad6574eb146004c5750b5860f2e8a1d731f90f3fffabc9738c26e3c7bdd459be5cdd03545c6aa0cd41089d155527e38644f20bd7f57288e045f567ee315a50d0c808fe1018cd7c25b1a7f8daf3854328e920e435536c0695cd7f0c10dac268c2cc90000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40054}, 0x1) (async)
close_range$auto(r0, 0x8, 0x1) (async)
mmap$auto(0x20000000000004, 0x400008, 0xdf, 0x9b73, 0xffffffffffffffff, 0x8000) (async)
close_range$auto(r0, 0x8, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket(0x28, 0x1, 0x0)
setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b) (async)
ioperm$auto(0x3, 0x5, 0x149) (async)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x18, 0x2, 0x8000) (async, rerun: 64)
bind$auto(0x3, 0x0, 0x6b) (rerun: 64)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async)
connect$auto(0x3, 0x0, 0x54) (async, rerun: 64)
ioctl$auto_USB_RAW_IOCTL_INIT(0xffffffffffffffff, 0x41015500, 0x0) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0xa, 0x2, 0x0)
socket(0x23, 0x80805, 0x0)
listen$auto(0x3, 0x83) (async)
listen$auto(0xffffffffffffffff, 0x85) (async)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0)
socket(0x25, 0x1, 0x0)

2.321442148s ago: executing program 4 (id=3077):
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r0, 0x83c0550b, 0x0) (async)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r1) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r4=>0x0}) (async)
mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) (async)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/sg/device_strs\x00', 0x80, 0x0) (async)
prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x8}, 0x9, 0x0) (async)
landlock_restrict_self$auto(r5, 0x0) (async)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty11\x00', 0x40001, 0x0) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8)
write$auto(r7, 0x0, 0xeffd) (async)
ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000140)=ANY=[@ANYBLOB="30e224aaee0bdfb595b5d7a3843e3e0000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf251200000008000900010000000c00018008000100", @ANYRES32=r4, @ANYBLOB="0800080006000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800) (async)
io_uring_register$auto(0x2, 0xc, 0x0, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event2\x00', 0x18080, 0x0)

2.293922759s ago: executing program 2 (id=3078):
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
move_pages$auto(0x1, 0x2000000000003, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
io_submit$auto(0x408, 0x7fff, &(0x7f0000000000)=&(0x7f00000000c0)={0x180000003, 0x3, 0x13, 0x1ff, 0xf24d, 0xffffffffffffffff, 0x5, 0x3, 0x10, 0x0, 0x1})
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000040)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xf}, 0x6, 0x0)
r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
ioctl$auto_I2C_SMBUS(r1, 0x720, 0x4)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
setsockopt$auto(0x3, 0x29, 0x39, 0xffffffffffffffff, 0x1)
mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91)
read$auto(r2, 0x0, 0x1)
r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r4, 0x0, 0x20044840)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, 0x0, 0x10)
write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b)

2.245164473s ago: executing program 0 (id=3079):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
signalfd$auto(r0, &(0x7f0000000040)={0x7ac56fe4}, 0x0)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
socket(0x23, 0x5, 0x2000000)
madvise$auto(0x8000000, 0x2000040080000004, 0xc)
madvise$auto(0x0, 0x10, 0xc)
sched_setaffinity$auto(0x9, 0x0, 0xfffffffffffffffe)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
mremap$auto(0x0, 0x2, 0x8, 0x3, 0x7effffffb000)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c044}, 0x80000)
write$auto(0x3, 0x0, 0x7fffffff)
tkill$auto(0x0, 0x7)
syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0)
read$auto(r5, 0x0, 0x39b8)
ioctl$auto(0x3, 0x80845663, 0x38)

1.669149277s ago: executing program 2 (id=3080):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/nbd9/queue/physical_block_size\x00', 0x88800, 0x0)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0xd1f03, 0x0)
rseq$auto(&(0x7f0000000300)={0x200000e, 0x401, 0x0, 0x6, 0xffffffff, 0x6}, 0x5, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mlockall$auto(0x7)
socket(0xa, 0x2, 0x73)
fcntl$auto(r0, 0x401, 0x100000)
mlockall$auto(0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0x401, 0x8000)
pipe2$auto(0x0, 0x80)
io_uring_setup$auto(0x1, 0x0)
ioctl$auto(0x1, 0x5761, 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vidtv.0/i2c-0/name\x00', 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2)
open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x2, '\t\x00\x00\x00\x00\x00\x00\x00'}, 0x2)
read$auto(0x3, 0x0, 0xf34)
sendfile$auto(r1, r1, 0x0, 0x2)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/fib_trie\x00', 0xc00, 0x0)

1.521521775s ago: executing program 4 (id=3081):
userfaultfd$auto(0x1) (async)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000041c0)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) (async)
r2 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0xa, 0x1000}, 0x800009}, 0x5, 0x20000000) (async)
setsockopt$auto(0x3, 0x6, 0x13, 0x0, 0xfb3)

1.185964336s ago: executing program 9 (id=3082):
mmap$auto(0x20000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x108000)
init_module$auto(0x0, 0xffff6, 0x0) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0x21e, 0x88) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_ima_htable_violations_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
read$auto_ima_htable_violations_ops_ima_fs(r0, &(0x7f0000000100)=""/157, 0x9d)
madvise$auto(0x7, 0x0, 0xa)

978.715537ms ago: executing program 9 (id=3083):
mmap$auto(0x0, 0x20009, 0x200, 0xeb1, 0x401, 0x6)
socket(0x15, 0x5, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x15)
mmap$auto(0x0, 0x2020006, 0x1ff, 0xeb1, 0x9, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000126bd7000fbdbdf25020000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000)
r0 = socket(0xf, 0x6, 0x2b)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='r', @ANYBLOB], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa501}, 0x800}, 0x7, 0x4008)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_TCP_METRICS_CMD_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4)
r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x12040, 0x0)
ioctl$auto_SIOCSIFHWADDR(r3, 0x8924, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x100}, 0x7}, 0x3, 0x0)

741.863168ms ago: executing program 0 (id=3084):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
fadvise64$auto(r0, 0x7fff, 0x6, 0x1)
mmap$auto(0xffffffffffffffff, 0x400002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x25)
io_uring_register$auto(0xffffffffffffffff, 0xb1, &(0x7f0000000080)="991d5bd609356891a9e3f1cd1f3c35661e2bc876946dc83a19bc41de78a9550596716c63ba8b1b8e3b0f8ca3e68aa87f4e1adf3fb9fea384ff62d8196a030657719528b3ad04020fa81ffc26c2a4f9", 0xfffffffd)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x44, 0x0)
fsopen$auto(0x0, 0x1)
io_uring_register$auto(0x2, 0x17, &(0x7f00000000c0), 0x1)

565.425173ms ago: executing program 4 (id=3085):
clock_adjtime$auto(0x0, &(0x7f0000000080)={0x4, 0x0, 0xfff, 0x4, 0xe, 0x0, 0x4, 0x0, 0xf, 0x9, 0x0, {0xc, 0x56}, 0x80000000, 0x10, 0x4, 0xc, 0x0, 0x9, 0x3, 0x7fffffffffffffff, 0x900000000, 0x9, 0x28d})
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram4\x00', 0x349303, 0x0)
ioctl$auto_def_blk_fops_fs(r0, 0x1261, 0x0)
capset$auto(0x0, &(0x7f0000000180)={0x0, 0x3, 0x800})
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x2, 0x0)
io_uring_register$auto(0x2, 0x16, &(0x7f0000000180), 0x1)
getsockopt$auto(0xffffffffffffffff, 0x0, 0x29, 0x0, &(0x7f0000000040)=0xdbb)
mmap$auto(0x0, 0x1, 0xdf, 0xeb2, 0x401, 0x8000)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0xc0303e03, 0x0)
r4 = openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x302, 0x0)
ioctl$auto(r4, 0x5, r1)

545.561298ms ago: executing program 0 (id=3086):
select$auto(0x2, &(0x7f0000000000)={[0x5, 0x8eac, 0x6, 0x9, 0x8, 0x2, 0x0, 0x0, 0x3, 0x4, 0x9e3d, 0x6, 0x80000000, 0x8, 0x10000001, 0x3]}, 0x0, &(0x7f0000000100)={[0xa, 0x5, 0xfffffffffffffff7, 0x8, 0x7, 0xf, 0x1, 0x10001, 0xe, 0x7, 0x7, 0x8000, 0x4, 0x9, 0xf963, 0x3]}, &(0x7f0000000180)={0xffffffffffffffff, 0x35}) (async)
select$auto(0x2, &(0x7f0000000000)={[0x5, 0x8eac, 0x6, 0x9, 0x8, 0x2, 0x0, 0x0, 0x3, 0x4, 0x9e3d, 0x6, 0x80000000, 0x8, 0x10000001, 0x3]}, 0x0, &(0x7f0000000100)={[0xa, 0x5, 0xfffffffffffffff7, 0x8, 0x7, 0xf, 0x1, 0x10001, 0xe, 0x7, 0x7, 0x8000, 0x4, 0x9, 0xf963, 0x3]}, &(0x7f0000000180)={0xffffffffffffffff, 0x35})
openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000006700), 0x181c00, 0x0) (async)
r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000006700), 0x181c00, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000000), 0x68)
connect$auto(0x3, &(0x7f0000000000), 0x55) (async)
connect$auto(0x3, &(0x7f0000000000), 0x55)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fdc6df2502000000662274b5924d270ca5780375f3a5ef964f65f1f2255f275c558561a0532ffef54580c9736df48b7bd19f877bf20915ce0c58b7a0f7858e9a0735"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fdc6df2502000000662274b5924d270ca5780375f3a5ef964f65f1f2255f275c558561a0532ffef54580c9736df48b7bd19f877bf20915ce0c58b7a0f7858e9a0735"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000)
getpeername$auto(0x3, 0x0, 0x0)
r2 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x8800, 0x0)
r3 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
setsockopt$auto(r3, 0x0, 0x80000001, &(0x7f00000000c0)='@/\x00', 0xb) (async)
setsockopt$auto(r3, 0x0, 0x80000001, &(0x7f00000000c0)='@/\x00', 0xb)
read$auto_ftrace_event_filter_fops_trace_events(r2, 0x0, 0x0)
rmdir$auto(&(0x7f0000000000)='./file0\x00')
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
sysfs$auto(0x2, 0x200000001d, 0x0) (async)
sysfs$auto(0x2, 0x200000001d, 0x0)
fsopen$auto(0x0, 0x1)
fsconfig$auto(r4, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0)
socket(0x11, 0x3, 0x80000) (async)
socket(0x11, 0x3, 0x80000)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0)
ioctl$auto_RNDADDTOENTCNT2(r0, 0x40045201, 0x0) (async)
ioctl$auto_RNDADDTOENTCNT2(r0, 0x40045201, 0x0)
close_range$auto(0x2, 0x8, 0x0)

278.360597ms ago: executing program 9 (id=3087):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram1\x00', 0x40000, 0x0)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf252800000005003e000800000031004801a289c1c1f3026f75a4d3a66a76f9f65578159c8a96f55e156e69b5114d651d9ec494a3d7791ee432bb9c"], 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1)
r2 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
io_uring_setup$auto(0x81c5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
getsockopt$auto(r2, 0x84, 0x1b, 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x2, 0x1, 0x0)
sendmmsg$auto(r3, 0x0, 0x5, 0x20000000)
write$auto(0x3, 0x0, 0xfffffdef)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0x2c5c)

195.505801ms ago: executing program 2 (id=3088):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', <r5=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="20002dbd7000fcdbdf2522000000640001801400020076657468305f746f5f6261746164760008000300fdffffff08000100", @ANYRES32=r2, @ANYBLOB="080003000400000000000000725fb9f5b5cb4fac5f1d9e6d7504a73462709f1519e30786d6c0f89efc0d8d94e176eba79d3a57f6c3673c1ee53df0feff4ff9072ecbfb44e1b4a005940205f29796ea3a979e4d2768489fb5f13ae580535a27fdd78591b1b790150cd7289ada2667df1fdee4339ff52275a078447491362aa5b7c1c4ea0b96735c560eae8bf2cef588e6759028", @ANYRES32=0x0, @ANYBLOB="080003000600000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="14000200697036677265300000000000000000002000018008000100", @ANYRES32=r5, @ANYBLOB="140002006d616373656330000000000000000000180001801400020069703667726574617030000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8081}, 0x800)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0)
select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x0)
r6 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000004f40)='/sys/kernel/debug/tracing/trace_clock\x00', 0x1, 0x0)
write$auto_trace_clock_fops_trace(r6, 0x0, 0x0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0x200007, 0x8)

101.418404ms ago: executing program 0 (id=3089):
r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon37\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fadbdf250600000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40080)
mmap$auto(0x7, 0x1, 0x8000000000000001, 0x7fff, r0, 0x9)
ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
flock$auto(r5, 0x5)
ioctl$auto_USB_RAW_IOCTL_EP_READ(r5, 0xc0085508, &(0x7f0000000000)={0x6, 0x8, 0x6, "d22a6ed45be63cdd23b8984cee7604721dd3d759e72d54ed3862867ea6f26ae3e5f200"})
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon37\x00', 0x0, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fadbdf250600000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40080) (async)
mmap$auto(0x7, 0x1, 0x8000000000000001, 0x7fff, r0, 0x9) (async)
ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0x0) (async)
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) (async)
flock$auto(r5, 0x5) (async)
ioctl$auto_USB_RAW_IOCTL_EP_READ(r5, 0xc0085508, &(0x7f0000000000)={0x6, 0x8, 0x6, "d22a6ed45be63cdd23b8984cee7604721dd3d759e72d54ed3862867ea6f26ae3e5f200"}) (async)

0s ago: executing program 4 (id=3090):
sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x801, 0x100)
sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x100) (async, rerun: 64)
connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @multicast1}, 0x55) (rerun: 64)
mq_timedsend$auto(r0, &(0x7f0000000040)='^\x00', 0x2, 0xf, &(0x7f0000000080)={0x36, 0x7}) (async, rerun: 32)
connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @multicast1}, 0x55) (rerun: 32)

kernel console output (not intermixed with test programs):

1:0: device reset
[  545.331066][T13896] total_mapped_file 23437312
[  545.335711][T13896] total_dirty 0
[  545.343219][T14280] sd 0:0:1:0: device reset
[  545.348031][T14280] sd 0:0:1:0: device reset
[  545.350079][T13896] total_writeback 0
[  545.357668][T14280] sd 0:0:1:0: device reset
[  545.371269][T14280] sd 0:0:1:0: device reset
[  545.382054][T14280] sd 0:0:1:0: device reset
[  545.396723][T13896] total_workingset_refault_anon 7238
[  545.403541][T14280] sd 0:0:1:0: device reset
[  545.411246][T14280] sd 0:0:1:0: device reset
[  545.418263][T13896] total_workingset_refault_file 43
[  545.436943][T14280] sd 0:0:1:0: device reset
[  545.441673][T13896] total_swap 127889408
[  545.446921][T14280] sd 0:0:1:0: device reset
[  545.458654][T13896] total_swapcached 20480
[  545.463526][T14280] sd 0:0:1:0: device reset
[  545.470326][T13896] total_pgpgin 921769
[  545.472738][T14280] sd 0:0:1:0: device reset
[  545.477600][T13896] total_pgpgout 852216
[  545.500842][T14280] sd 0:0:1:0: device reset
[  545.502328][T13896] total_pgfault 369676
[  545.509026][T14280] sd 0:0:1:0: device reset
[  545.521094][T13896] total_pgmajfault 686
[  545.529892][T13896] total_inactive_anon 210288640
[  545.534874][T13896] total_active_anon 72060928
[  545.535785][T14280] sd 0:0:1:0: device reset
[  545.559844][T13896] total_inactive_file 0
[  545.564812][T14280] sd 0:0:1:0: device reset
[  545.569726][T13896] total_active_file 0
[  545.582770][T13896] total_unevictable 27394048
[  545.583609][T14280] sd 0:0:1:0: device reset
[  545.597473][T13896] anon_cost 0
[  545.607817][T13896] file_cost 0
[  545.617288][T13896] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1618,pid=13919,uid=0
[  545.624426][T14280] sd 0:0:1:0: device reset
[  545.649678][T14280] sd 0:0:1:0: device reset
[  545.659422][T14280] sd 0:0:1:0: device reset
[  545.692873][T13896] Memory cgroup out of memory: Killed process 13919 (syz.1.1618) total-vm:33428kB, anon-rss:0kB, file-rss:0kB, shmem-rss:22720kB, UID:0 pgtables:68kB oom_score_adj:1000
[  545.733904][T14280] sd 0:0:1:0: device reset
[  545.769804][T14280] sd 0:0:1:0: device reset
[  545.788803][T14280] sd 0:0:1:0: device reset
[  545.809136][T14280] sd 0:0:1:0: device reset
[  545.834393][T14280] sd 0:0:1:0: device reset
[  545.858685][T14280] sd 0:0:1:0: device reset
[  545.868398][T14280] sd 0:0:1:0: device reset
[  545.878883][T14280] sd 0:0:1:0: device reset
[  545.888297][T14280] sd 0:0:1:0: device reset
[  545.898195][T14280] sd 0:0:1:0: device reset
[  545.906746][T14280] sd 0:0:1:0: device reset
[  545.932930][T14280] sd 0:0:1:0: device reset
[  545.945823][T14280] sd 0:0:1:0: device reset
[  545.968241][T14280] sd 0:0:1:0: device reset
[  545.981677][T14280] sd 0:0:1:0: device reset
[  545.994189][T14280] sd 0:0:1:0: device reset
[  546.039534][T14280] sd 0:0:1:0: device reset
[  546.105237][T14280] sd 0:0:1:0: device reset
[  546.166995][T14280] sd 0:0:1:0: device reset
[  546.179776][T14280] sd 0:0:1:0: device reset
[  546.239211][T14280] sd 0:0:1:0: device reset
[  546.311435][T14280] sd 0:0:1:0: device reset
[  546.362446][T14280] sd 0:0:1:0: device reset
[  546.383495][T14280] sd 0:0:1:0: device reset
[  546.982551][T13904] syz.1.1618 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  547.396315][T13904] CPU: 1 UID: 0 PID: 13904 Comm: syz.1.1618 Tainted: G     U             6.13.0-syzkaller #0
[  547.406552][T13904] Tainted: [U]=USER
[  547.410380][T13904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  547.420482][T13904] Call Trace:
[  547.423811][T13904]  <TASK>
[  547.426765][T13904]  dump_stack_lvl+0x16c/0x1f0
[  547.431483][T13904]  dump_header+0x101/0x900
[  547.435943][T13904]  oom_kill_process+0x270/0xa60
[  547.440824][T13904]  ? mem_cgroup_out_of_memory+0x8d/0x270
[  547.446485][T13904]  out_of_memory+0x351/0x1700
[  547.451197][T13904]  ? __pfx_out_of_memory+0x10/0x10
[  547.456318][T13904]  ? rcu_read_unlock+0x17/0x60
[  547.461097][T13904]  ? find_held_lock+0x2d/0x110
[  547.465873][T13904]  mem_cgroup_out_of_memory+0x207/0x270
[  547.471426][T13904]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  547.477509][T13904]  ? do_raw_spin_unlock+0x172/0x230
[  547.482717][T13904]  try_charge_memcg+0x54c/0xaf0
[  547.487580][T13904]  ? __pfx_try_charge_memcg+0x10/0x10
[  547.492963][T13904]  ? get_mem_cgroup_from_mm+0x87/0x5f0
[  547.498431][T13904]  ? get_mem_cgroup_from_mm+0x87/0x5f0
[  547.503905][T13904]  ? get_mem_cgroup_from_mm+0x131/0x5f0
[  547.509477][T13904]  __mem_cgroup_charge+0x9b/0x280
[  547.514519][T13904]  shmem_alloc_and_add_folio+0x507/0xc00
[  547.520172][T13904]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  547.526340][T13904]  ? shmem_allowable_huge_orders+0xd0/0x410
[  547.532255][T13904]  shmem_get_folio_gfp+0x689/0x1530
[  547.537474][T13904]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  547.543112][T13904]  ? find_held_lock+0x2d/0x110
[  547.547895][T13904]  shmem_write_begin+0x161/0x300
[  547.552848][T13904]  ? __pfx_shmem_write_begin+0x10/0x10
[  547.558311][T13904]  ? timestamp_truncate+0x21f/0x2e0
[  547.563518][T13904]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1270
[  547.570385][T13904]  generic_perform_write+0x2ba/0x920
[  547.575685][T13904]  ? __pfx_generic_perform_write+0x10/0x10
[  547.581496][T13904]  ? inode_needs_update_time.part.0+0x191/0x270
[  547.587761][T13904]  shmem_file_write_iter+0x10e/0x140
[  547.593061][T13904]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  547.598877][T13904]  __kernel_write_iter+0x318/0xa80
[  547.604002][T13904]  ? __pfx___kernel_write_iter+0x10/0x10
[  547.609641][T13904]  ? get_dump_page+0x15b/0x230
[  547.614418][T13904]  ? __pfx___might_resched+0x10/0x10
[  547.619711][T13904]  ? kasan_check_range+0x1b/0x1a0
[  547.624769][T13904]  dump_user_range+0x389/0x8c0
[  547.629559][T13904]  ? __pfx_dump_user_range+0x10/0x10
[  547.634859][T13904]  ? elf_coredump_extra_notes_write+0xbe/0x430
[  547.641024][T13904]  ? __pfx_writenote+0x10/0x10
[  547.645815][T13904]  elf_core_dump+0x2787/0x3880
[  547.650610][T13904]  ? __pfx_elf_core_dump+0x10/0x10
[  547.655735][T13904]  ? kasan_save_stack+0x42/0x60
[  547.660605][T13904]  ? kasan_save_stack+0x33/0x60
[  547.665470][T13904]  ? kasan_save_track+0x14/0x30
[  547.670333][T13904]  ? __kasan_kmalloc+0xaa/0xb0
[  547.675110][T13904]  ? __kvmalloc_node_noprof+0xad/0x1a0
[  547.680604][T13904]  ? do_coredump+0x1665/0x43e0
[  547.685403][T13904]  ? get_signal+0x23f3/0x2610
[  547.690146][T13904]  ? rcu_is_watching+0x12/0xc0
[  547.694923][T13904]  ? trace_lock_acquire+0x14e/0x1f0
[  547.700137][T13904]  ? __pfx_sort+0x10/0x10
[  547.704494][T13904]  ? get_signal+0x23f3/0x2610
[  547.709203][T13904]  ? do_coredump+0x2dd5/0x43e0
[  547.713988][T13904]  do_coredump+0x2dd5/0x43e0
[  547.718607][T13904]  ? __pfx_do_coredump+0x10/0x10
[  547.723562][T13904]  ? irqentry_exit_to_user_mode+0x13f/0x280
[  547.729521][T13904]  get_signal+0x23f3/0x2610
[  547.734049][T13904]  ? force_sig_fault+0xad/0xf0
[  547.738828][T13904]  ? __pfx_get_signal+0x10/0x10
[  547.743704][T13904]  arch_do_signal_or_restart+0x90/0x7e0
[  547.749264][T13904]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  547.755428][T13904]  ? __bad_area_nosemaphore+0x334/0x6a0
[  547.760995][T13904]  ? do_user_addr_fault+0x920/0x13f0
[  547.766298][T13904]  irqentry_exit_to_user_mode+0x13f/0x280
[  547.772036][T13904]  asm_exc_page_fault+0x26/0x30
[  547.776898][T13904] RIP: 0033:0x7fb07d585d29
[  547.781321][T13904] Code: Unable to access opcode bytes at 0x7fb07d585cff.
[  547.788337][T13904] RSP: 002b:0000000000000009 EFLAGS: 00010246
[  547.794408][T13904] RAX: 0000000000000000 RBX: 00007fb07d7764e0 RCX: 00007fb07d585d29
[  547.802382][T13904] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000000000021
[  547.810356][T13904] RBP: 00007fb07d601b08 R08: 0000000000000006 R09: 0000000000000000
[  547.818328][T13904] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000
[  547.826305][T13904] R13: 0000000000000001 R14: 00007fb07d7764e0 R15: 00007fff2f302418
[  547.834641][T13904]  ? 0xffffffff81000000
[  547.838821][T13904]  </TASK>
[  547.868079][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  547.877930][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  548.166263][T13904] memory: usage 305408kB, limit 307200kB, failcnt 18517
[  548.173263][T13904] memory+swap: usage 427464kB, limit 9007199254740988kB, failcnt 0
[  548.584079][T13904] kmem: usage 4360kB, limit 9007199254740988kB, failcnt 0
[  548.591242][T13904] Memory cgroup stats for /syz1:
[  548.591588][T13904] cache 305180672
[  549.065947][T13904] rss 360448
[  549.199731][T13904] rss_huge 0
[  549.354570][T13904] shmem 277786624
[  549.358249][T13904] mapped_file 25362432
[  549.624082][T13904] dirty 0
[  549.627159][T13904] writeback 0
[  549.807850][T13904] workingset_refault_anon 7238
[  549.812680][T13904] workingset_refault_file 43
[  549.817283][T13904] swap 125685760
[  550.199382][T13919] syz.1.1618 (13919) used greatest stack depth: 19456 bytes left
[  550.773165][T13904] swapcached 24576
[  550.776949][T13904] pgpgin 922165
[  550.780431][T13904] pgpgout 853696
[  550.963311][T14368] can: request_module (can-proto-3) failed.
[  551.191719][T13904] pgfault 369701
[  551.195815][T13904] pgmajfault 686
[  551.199390][T13904] inactive_anon 173318144
[  551.203816][T13904] active_anon 103829504
[  551.207986][T13904] inactive_file 0
[  551.211679][T13904] active_file 0
[  551.215155][T13904] unevictable 27394048
[  551.219237][T13904] hierarchical_memory_limit 314572800
[  551.230344][T13904] hierarchical_memsw_limit 9223372036854771712
[  551.236556][T13904] total_cache 305180672
[  551.240780][T13904] total_rss 360448
[  551.244517][T13904] total_rss_huge 0
[  551.248263][T13904] total_shmem 277786624
[  551.252813][T13904] total_mapped_file 25362432
[  551.257513][T13904] total_dirty 0
[  551.261384][T13904] total_writeback 0
[  551.265216][T13904] total_workingset_refault_anon 7238
[  551.564369][T13904] total_workingset_refault_file 43
[  551.811505][T13904] total_swap 125685760
[  551.815778][T13904] total_swapcached 24576
[  552.030452][T13904] total_pgpgin 922165
[  552.192179][T13904] total_pgpgout 853696
[  552.275332][T13904] total_pgfault 369701
[  552.405158][T13904] total_pgmajfault 686
[  552.573465][T13904] total_inactive_anon 173318144
[  552.881726][T13904] total_active_anon 103829504
[  553.078815][T13904] total_inactive_file 0
[  553.160410][T13904] total_active_file 0
[  553.164443][T13904] total_unevictable 27394048
[  553.169044][T13904] anon_cost 0
[  553.597067][T13904] file_cost 0
[  553.711888][T13904] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1618,pid=13898,uid=0
[  553.849264][T13904] Memory cgroup out of memory: Killed process 13898 (syz.1.1618) total-vm:33428kB, anon-rss:0kB, file-rss:0kB, shmem-rss:20444kB, UID:0 pgtables:72kB oom_score_adj:1000
[  554.011148][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  554.020713][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  554.046133][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  554.075384][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  554.089311][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  554.105600][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  556.180930][T12545] Bluetooth: hci2: command tx timeout
[  557.332254][T14396] chnl_net:caif_netlink_parms(): no params data found
[  557.456028][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  557.466397][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  557.474860][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  557.484289][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  557.498032][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  557.507884][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  558.252815][ T5841] Bluetooth: hci2: command tx timeout
[  558.623456][T13908] syz.1.1618 (13908) used greatest stack depth: 18496 bytes left
[  559.063901][ T6248] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.105750][T14396] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.117242][T14396] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.130464][T14396] bridge_slave_0: entered allmulticast mode
[  559.137523][T14396] bridge_slave_0: entered promiscuous mode
[  559.181225][ T6248] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.204525][T14396] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.212357][T14396] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.220023][T14396] bridge_slave_1: entered allmulticast mode
[  559.227096][T14396] bridge_slave_1: entered promiscuous mode
[  559.521178][ T5841] Bluetooth: hci3: command tx timeout
[  559.529968][ T6248] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.569345][T14396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  559.604503][T14396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  559.712500][ T6248] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.786912][T14396] team0: Port device team_slave_0 added
[  559.825292][T14396] team0: Port device team_slave_1 added
[  559.937072][T14396] batman_adv: batadv0: Adding interface: batadv_slave_0
[  559.944057][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  559.970875][T14396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  559.993622][T14396] batman_adv: batadv0: Adding interface: batadv_slave_1
[  560.003518][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  560.030706][T14396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  560.065546][T14406] chnl_net:caif_netlink_parms(): no params data found
[  560.302212][T14396] hsr_slave_0: entered promiscuous mode
[  560.320770][T14396] hsr_slave_1: entered promiscuous mode
[  560.343280][ T5841] Bluetooth: hci2: command tx timeout
[  560.362608][T14396] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  560.387569][T14396] Cannot create hsr debugfs directory
[  560.543365][ T6248] bond0: left promiscuous mode
[  560.548185][ T6248] bond_slave_0: left promiscuous mode
[  560.582479][ T6248] bond_slave_1: left promiscuous mode
[  560.589365][ T6248] bridge0: port 3(bond0) entered disabled state
[  560.603574][ T6248] bridge_slave_1: left allmulticast mode
[  560.609253][ T6248] bridge_slave_1: left promiscuous mode
[  560.618352][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.634997][ T6248] bridge_slave_0: left allmulticast mode
[  560.641172][ T6248] bridge_slave_0: left promiscuous mode
[  560.649788][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.587528][ T5841] Bluetooth: hci3: command tx timeout
[  561.591125][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  561.602448][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  561.650238][ T6248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  561.677175][ T6248] bond_slave_0: left allmulticast mode
[  561.685074][ T6248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  561.706366][ T6248] bond_slave_1: left allmulticast mode
[  561.725045][ T6248] bond0 (unregistering): Released all slaves
[  562.284027][ T6248] HfR: left promiscuous mode
[  562.314054][T14406] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.329842][T14406] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.340069][T14406] bridge_slave_0: entered allmulticast mode
[  562.354542][T14406] bridge_slave_0: entered promiscuous mode
[  562.372703][ T6248] HSR: left promiscuous mode
[  562.392365][T12545] Bluetooth: hci2: command tx timeout
[  562.436668][T14406] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.464632][T14406] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.477910][T14406] bridge_slave_1: entered allmulticast mode
[  562.519065][T14406] bridge_slave_1: entered promiscuous mode
[  562.856681][T14406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  563.005977][T14406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  563.135395][T14474] could not allocate digest TFM handle 
[  563.244008][T14479] could not allocate digest TFM handle 
[  563.353322][T14406] team0: Port device team_slave_0 added
[  563.379087][T14406] team0: Port device team_slave_1 added
[  563.414811][ T6248] hsr_slave_0: left promiscuous mode
[  563.423206][ T6248] hsr_slave_1: left promiscuous mode
[  563.443571][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  563.466711][ T6248] batman_adv: batadv0: Removing interface: batadv_slave_0
[  563.522096][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  563.535925][ T6248] batman_adv: batadv0: Removing interface: batadv_slave_1
[  563.588950][ T6248] veth1_macvtap: left promiscuous mode
[  563.594515][ T6248] veth0_macvtap: left promiscuous mode
[  563.616070][ T6248] veth1_vlan: left promiscuous mode
[  563.621411][ T6248] veth0_vlan: left promiscuous mode
[  563.655773][T12545] Bluetooth: hci3: command tx timeout
[  564.877392][ T6248] team0 (unregistering): Port device team_slave_1 removed
[  564.980117][ T6248] team0 (unregistering): Port device team_slave_0 removed
[  565.729386][T12545] Bluetooth: hci3: command tx timeout
[  566.097475][T14406] batman_adv: batadv0: Adding interface: batadv_slave_0
[  566.113307][T14406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  566.162603][T14406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  566.183719][T14396] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  566.213449][T14396] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  566.275321][T14406] batman_adv: batadv0: Adding interface: batadv_slave_1
[  566.283665][T14406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  566.345797][T14406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  566.396338][T14396] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  566.418662][T14396] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  566.616652][T14406] hsr_slave_0: entered promiscuous mode
[  566.632515][T14406] hsr_slave_1: entered promiscuous mode
[  566.638618][T14406] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  566.656183][T14406] Cannot create hsr debugfs directory
[  567.017770][T14396] 8021q: adding VLAN 0 to HW filter on device bond0
[  567.139817][T14396] 8021q: adding VLAN 0 to HW filter on device team0
[  567.470571][T14406] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  567.535820][T14406] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  567.592611][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.599781][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  567.662542][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.669726][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  567.803292][T14406] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  568.036952][T14406] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  568.307522][T14406] 8021q: adding VLAN 0 to HW filter on device bond0
[  568.382252][T14406] 8021q: adding VLAN 0 to HW filter on device team0
[  568.453406][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.460544][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state
[  568.479306][T14530] QAT: Stopping all acceleration devices.
[  568.567674][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.574893][ T8321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  568.745010][T14396] 8021q: adding VLAN 0 to HW filter on device batadv0
[  569.361051][T14406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  569.502588][T14396] veth0_vlan: entered promiscuous mode
[  569.551077][T14396] veth1_vlan: entered promiscuous mode
[  569.657972][T14396] veth0_macvtap: entered promiscuous mode
[  569.683980][T14396] veth1_macvtap: entered promiscuous mode
[  569.767660][T14565] nbd: must specify at least one socket
[  569.791243][T14396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  569.819414][T14396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.842540][T14396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  569.865325][T14396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.895480][T14396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  569.918113][T14396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.957676][T14396] batman_adv: batadv0: Interface activated: batadv_slave_0
[  569.999833][T14396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.046445][T14396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.082402][T14396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.116536][T14396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.141846][T14396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.161923][T14396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.184523][T14396] batman_adv: batadv0: Interface activated: batadv_slave_1
[  570.265147][T14396] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  570.301301][T14396] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  570.341044][T14396] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  570.370871][T14396] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.447452][T14406] veth0_vlan: entered promiscuous mode
[  570.517637][T14406] veth1_vlan: entered promiscuous mode
[  570.702389][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.717739][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.755606][T14406] veth0_macvtap: entered promiscuous mode
[  570.787803][T14406] veth1_macvtap: entered promiscuous mode
[  570.819823][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.828148][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.835200][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  570.879733][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.908007][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  570.928852][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.978113][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.027447][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.063999][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.097037][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.154219][T14406] batman_adv: batadv0: Interface activated: batadv_slave_0
[  571.194426][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  571.232588][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.266090][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  571.305970][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.337744][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  571.385652][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.415446][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  571.463110][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.511766][T14406] batman_adv: batadv0: Interface activated: batadv_slave_1
[  571.602539][T14406] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  571.642104][T14406] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  571.677536][T14406] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  571.695620][T14406] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  571.952677][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  571.960536][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.085784][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.177142][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  573.498960][T14654] netlink: 'syz.8.1761': attribute type 3 has an invalid length.
[  573.525487][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1761'.
[  576.945320][T14730] netlink: 103 bytes leftover after parsing attributes in process `syz.8.1772'.
[  581.033070][T14791] : Can't lookup blockdev
[  584.099742][T14811] kAFS: bad VL server IP address
[  585.002217][T14845] netlink: 'syz.5.1792': attribute type 1 has an invalid length.
[  585.308628][T14852] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1793'.
[  585.871795][T14852] bond0: (slave bond_slave_1): Releasing backup interface
[  586.309268][T14867] FAULT_INJECTION: forcing a failure.
[  586.309268][T14867] name failslab, interval 1, probability 0, space 0, times 0
[  586.378287][T14863] nbd: socks must be embedded in a SOCK_ITEM attr
[  586.400391][T14867] CPU: 0 UID: 0 PID: 14867 Comm: syz.8.1799 Tainted: G     U             6.13.0-syzkaller #0
[  586.410626][T14867] Tainted: [U]=USER
[  586.414451][T14867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  586.424536][T14867] Call Trace:
[  586.427844][T14867]  <TASK>
[  586.430791][T14867]  dump_stack_lvl+0x16c/0x1f0
[  586.435491][T14867]  should_fail_ex+0x497/0x5b0
[  586.440176][T14867]  ? fs_reclaim_acquire+0xae/0x150
[  586.445306][T14867]  should_failslab+0xc2/0x120
[  586.450000][T14867]  __kmalloc_node_noprof+0xd1/0x520
[  586.455220][T14867]  ? __kvmalloc_node_noprof+0xad/0x1a0
[  586.460694][T14867]  __kvmalloc_node_noprof+0xad/0x1a0
[  586.465992][T14867]  seq_read_iter+0x82a/0x12b0
[  586.470685][T14867]  ? __mutex_trylock_common+0xea/0x250
[  586.476159][T14867]  kernfs_fop_read_iter+0x414/0x580
[  586.481368][T14867]  ? rw_verify_area+0xd0/0x700
[  586.486144][T14867]  vfs_read+0x87f/0xbe0
[  586.490317][T14867]  ? __pfx_vfs_read+0x10/0x10
[  586.495020][T14867]  ksys_read+0x12b/0x250
[  586.499363][T14867]  ? __pfx_ksys_read+0x10/0x10
[  586.504141][T14867]  do_syscall_64+0xcd/0x250
[  586.508662][T14867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.514567][T14867] RIP: 0033:0x7f4235785d29
[  586.518996][T14867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  586.538608][T14867] RSP: 002b:00007f423662e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  586.547033][T14867] RAX: ffffffffffffffda RBX: 00007f4235975fa0 RCX: 00007f4235785d29
[  586.555011][T14867] RDX: 00000000000000de RSI: 0000000020000280 RDI: 0000000000000003
[  586.562982][T14867] RBP: 00007f423662e090 R08: 0000000000000000 R09: 0000000000000000
[  586.570954][T14867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  586.578926][T14867] R13: 0000000000000000 R14: 00007f4235975fa0 R15: 00007ffc66a40ec8
[  586.586912][T14867]  </TASK>
[  586.624757][T14863] block nbd0: shutting down sockets
[  587.873523][T14891] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1802'.
[  587.908124][T14891] ipvlan1: entered allmulticast mode
[  587.949566][T14891] veth0_vlan: entered allmulticast mode
[  588.995460][T14924] FAULT_INJECTION: forcing a failure.
[  588.995460][T14924] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  589.082779][T14924] CPU: 0 UID: 0 PID: 14924 Comm: syz.3.1811 Tainted: G     U             6.13.0-syzkaller #0
[  589.093011][T14924] Tainted: [U]=USER
[  589.096841][T14924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  589.106919][T14924] Call Trace:
[  589.110217][T14924]  <TASK>
[  589.113256][T14924]  dump_stack_lvl+0x16c/0x1f0
[  589.117974][T14924]  should_fail_ex+0x497/0x5b0
[  589.122694][T14924]  _copy_to_iter+0x29b/0x1400
[  589.127412][T14924]  ? trace_lock_acquire+0x14e/0x1f0
[  589.132648][T14924]  ? __pfx_lock_release+0x10/0x10
[  589.137699][T14924]  ? __pfx__copy_to_iter+0x10/0x10
[  589.142842][T14924]  ? __virt_addr_valid+0x1a4/0x590
[  589.147994][T14924]  ? __virt_addr_valid+0x5e/0x590
[  589.153075][T14924]  ? __phys_addr_symbol+0x30/0x80
[  589.158133][T14924]  ? __check_object_size+0x488/0x710
[  589.163460][T14924]  seq_read_iter+0xd00/0x12b0
[  589.168179][T14924]  kernfs_fop_read_iter+0x414/0x580
[  589.173412][T14924]  ? rw_verify_area+0xd0/0x700
[  589.178206][T14924]  vfs_read+0x87f/0xbe0
[  589.182400][T14924]  ? __pfx_vfs_read+0x10/0x10
[  589.187130][T14924]  ksys_read+0x12b/0x250
[  589.191405][T14924]  ? __pfx_ksys_read+0x10/0x10
[  589.196220][T14924]  do_syscall_64+0xcd/0x250
[  589.200763][T14924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.206692][T14924] RIP: 0033:0x7f501ad85d29
[  589.211133][T14924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  589.230777][T14924] RSP: 002b:00007f5018bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  589.239232][T14924] RAX: ffffffffffffffda RBX: 00007f501af75fa0 RCX: 00007f501ad85d29
[  589.247235][T14924] RDX: 00000000000000de RSI: 0000000020000280 RDI: 0000000000000003
[  589.255231][T14924] RBP: 00007f5018bf6090 R08: 0000000000000000 R09: 0000000000000000
[  589.263227][T14924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  589.271221][T14924] R13: 0000000000000000 R14: 00007f501af75fa0 R15: 00007ffcad6301e8
[  589.279232][T14924]  </TASK>
[  592.182345][T15003] <
[  592.486453][T15014] FAULT_INJECTION: forcing a failure.
[  592.486453][T15014] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  592.603533][T15014] CPU: 1 UID: 0 PID: 15014 Comm: syz.7.1822 Tainted: G     U             6.13.0-syzkaller #0
[  592.613759][T15014] Tainted: [U]=USER
[  592.617586][T15014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  592.627669][T15014] Call Trace:
[  592.630978][T15014]  <TASK>
[  592.633939][T15014]  dump_stack_lvl+0x16c/0x1f0
[  592.638659][T15014]  should_fail_ex+0x497/0x5b0
[  592.643382][T15014]  _copy_to_user+0x32/0xd0
[  592.647839][T15014]  simple_read_from_buffer+0xd0/0x160
[  592.653253][T15014]  proc_fail_nth_read+0x198/0x270
[  592.658318][T15014]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  592.664003][T15014]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  592.669594][T15014]  vfs_read+0x1df/0xbe0
[  592.673788][T15014]  ? __fget_files+0x1fc/0x3a0
[  592.678528][T15014]  ? __pfx___mutex_lock+0x10/0x10
[  592.683593][T15014]  ? __pfx_vfs_read+0x10/0x10
[  592.688335][T15014]  ? __fget_files+0x206/0x3a0
[  592.693055][T15014]  ksys_read+0x12b/0x250
[  592.697332][T15014]  ? __pfx_ksys_read+0x10/0x10
[  592.702138][T15014]  do_syscall_64+0xcd/0x250
[  592.706680][T15014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.712607][T15014] RIP: 0033:0x7fbeb1f8473c
[  592.717046][T15014] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  592.736686][T15014] RSP: 002b:00007fbeb2e80030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  592.745138][T15014] RAX: ffffffffffffffda RBX: 00007fbeb2175fa0 RCX: 00007fbeb1f8473c
[  592.753144][T15014] RDX: 000000000000000f RSI: 00007fbeb2e800a0 RDI: 0000000000000004
[  592.761319][T15014] RBP: 00007fbeb2e80090 R08: 0000000000000000 R09: 0000000000000000
[  592.769324][T15014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  592.777325][T15014] R13: 0000000000000000 R14: 00007fbeb2175fa0 R15: 00007ffe93c1e578
[  592.785332][T15014]  </TASK>
[  594.245161][T15032] Invalid input. Must be >= 4608
[  595.138334][T15062] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1829'.
[  595.198820][T15062] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1829'.
[  595.222155][T15062] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1829'.
[  595.261924][T15066] netlink: 350 bytes leftover after parsing attributes in process `syz.7.1829'.
[  596.954034][T15097] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request
[  600.114315][T15191] FAULT_INJECTION: forcing a failure.
[  600.114315][T15191] name failslab, interval 1, probability 0, space 0, times 0
[  600.156038][T15191] CPU: 1 UID: 0 PID: 15191 Comm: syz.5.1843 Tainted: G     U             6.13.0-syzkaller #0
[  600.166263][T15191] Tainted: [U]=USER
[  600.170084][T15191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  600.180163][T15191] Call Trace:
[  600.183466][T15191]  <TASK>
[  600.186417][T15191]  dump_stack_lvl+0x16c/0x1f0
[  600.191136][T15191]  should_fail_ex+0x497/0x5b0
[  600.195844][T15191]  ? fs_reclaim_acquire+0xae/0x150
[  600.200995][T15191]  should_failslab+0xc2/0x120
[  600.205723][T15191]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  600.211123][T15191]  ? rcu_is_watching+0x12/0xc0
[  600.215896][T15191]  ? security_file_alloc+0x34/0x2b0
[  600.221109][T15191]  security_file_alloc+0x34/0x2b0
[  600.226149][T15191]  init_file+0x93/0x480
[  600.230322][T15191]  alloc_empty_file+0x91/0x1e0
[  600.235096][T15191]  alloc_file_pseudo+0x13d/0x200
[  600.240045][T15191]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  600.245515][T15191]  ? apparmor_socket_post_create+0x1d6/0x8e0
[  600.251507][T15191]  ? bpf_lsm_socket_post_create+0x9/0x10
[  600.257157][T15191]  sock_alloc_file+0x50/0x1d0
[  600.261853][T15191]  __sys_socketpair+0x34f/0x5a0
[  600.266709][T15191]  ? __pfx___sys_socketpair+0x10/0x10
[  600.272089][T15191]  ? xfd_validate_state+0x5d/0x180
[  600.277209][T15191]  ? rcu_is_watching+0x12/0xc0
[  600.282068][T15191]  __x64_sys_socketpair+0x96/0x100
[  600.287190][T15191]  ? lockdep_hardirqs_on+0x7c/0x110
[  600.292399][T15191]  do_syscall_64+0xcd/0x250
[  600.296915][T15191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.302817][T15191] RIP: 0033:0x7fa333d85d29
[  600.307236][T15191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  600.326856][T15191] RSP: 002b:00007fa334b5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  600.335276][T15191] RAX: ffffffffffffffda RBX: 00007fa333f75fa0 RCX: 00007fa333d85d29
[  600.343596][T15191] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  600.351568][T15191] RBP: 00007fa333e01b08 R08: 0000000000000000 R09: 0000000000000000
[  600.359539][T15191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  600.367510][T15191] R13: 0000000000000000 R14: 00007fa333f75fa0 R15: 00007ffecec2a2b8
[  600.375494][T15191]  </TASK>
[  601.784914][T15222] random: crng reseeded on system resumption
[  602.236308][T15241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  604.667397][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  604.692431][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  604.712746][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  604.750871][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  604.768489][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  604.775977][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  605.321533][T15273] Ignoring unsupported numa_zonelist_order value:  
[  605.321533][T15273] 
[  605.639023][T15268] chnl_net:caif_netlink_parms(): no params data found
[  606.818869][T15268] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.850569][T15268] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.871083][ T5841] Bluetooth: hci0: command tx timeout
[  606.898574][T15268] bridge_slave_0: entered allmulticast mode
[  606.911996][T15268] bridge_slave_0: entered promiscuous mode
[  607.319125][T15268] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.347167][T15268] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.378589][T15268] bridge_slave_1: entered allmulticast mode
[  607.385655][T15268] bridge_slave_1: entered promiscuous mode
[  607.629263][T15268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  608.205968][T15268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  608.377783][T15268] team0: Port device team_slave_0 added
[  608.426736][T15268] team0: Port device team_slave_1 added
[  608.653429][T15268] batman_adv: batadv0: Adding interface: batadv_slave_0
[  608.660565][T15268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  608.731362][T15268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  608.792185][T15268] batman_adv: batadv0: Adding interface: batadv_slave_1
[  608.799188][T15268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  608.920390][T15268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  608.940699][ T5841] Bluetooth: hci0: command tx timeout
[  609.138275][T15268] hsr_slave_0: entered promiscuous mode
[  609.159470][T15268] hsr_slave_1: entered promiscuous mode
[  609.176916][T15268] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  609.198939][T15268] Cannot create hsr debugfs directory
[  609.509544][T15323] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1864'.
[  609.820417][T15329] Ignoring unsupported numa_zonelist_order value:  
[  609.820417][T15329] 
[  609.850666][T15268] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  609.919290][T15330] netlink: 338 bytes leftover after parsing attributes in process `syz.7.1865'.
[  610.035204][T15268] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  610.236972][T15268] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  610.263187][T15268] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  610.524108][T15268] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.575825][T15268] 8021q: adding VLAN 0 to HW filter on device team0
[  610.618793][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.625977][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.691298][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.698446][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.009657][ T5841] Bluetooth: hci0: command tx timeout
[  612.303192][T15268] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.078807][ T5841] Bluetooth: hci0: command tx timeout
[  613.287292][T15268] veth0_vlan: entered promiscuous mode
[  613.315531][T15268] veth1_vlan: entered promiscuous mode
[  613.461831][T15268] veth0_macvtap: entered promiscuous mode
[  613.473565][T15268] veth1_macvtap: entered promiscuous mode
[  613.520925][T15268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.555691][T15268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.584352][T15268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.615828][T15268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.635955][T15268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.685996][T15268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.723710][T15268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.753294][T15268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.755524][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1876'.
[  613.795301][T15268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.817222][T15268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.853435][T15268] batman_adv: batadv0: Interface activated: batadv_slave_0
[  613.880295][T15268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  613.891273][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1876'.
[  613.977032][T15268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.992185][T15268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.021678][T15268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.052858][T15268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.083831][T15268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.103638][T15268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.123409][T15268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.143584][T15268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.172473][T15268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.213965][T15268] batman_adv: batadv0: Interface activated: batadv_slave_1
[  614.330441][T15268] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  614.362050][T15268] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  614.370810][T15268] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  614.398800][T15268] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  614.607620][ T6242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.637369][ T6242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.735573][ T6258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.757554][ T6258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  615.831370][T15418] syz.7.1890: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  615.944261][T15418] CPU: 0 UID: 0 PID: 15418 Comm: syz.7.1890 Tainted: G     U             6.13.0-syzkaller #0
[  615.954495][T15418] Tainted: [U]=USER
[  615.958317][T15418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  615.968436][T15418] Call Trace:
[  615.971751][T15418]  <TASK>
[  615.974707][T15418]  dump_stack_lvl+0x16c/0x1f0
[  615.979430][T15418]  warn_alloc+0x24d/0x3a0
[  615.983818][T15418]  ? __pfx_warn_alloc+0x10/0x10
[  615.988708][T15418]  ? __pfx_mark_lock+0x10/0x10
[  615.993510][T15418]  ? lock_acquire.part.0+0x11b/0x380
[  615.998818][T15418]  __vmalloc_node_range_noprof+0x10df/0x1530
[  616.004814][T15418]  ? rcu_is_watching+0x12/0xc0
[  616.009592][T15418]  ? trace_contention_end+0xee/0x140
[  616.014890][T15418]  ? dvb_demux_do_ioctl+0x54d/0x1340
[  616.020191][T15418]  ? dvb_demux_do_ioctl+0x496/0x1340
[  616.025497][T15418]  ? __pfx___mutex_lock+0x10/0x10
[  616.030540][T15418]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  616.036887][T15418]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  616.042793][T15418]  ? dvb_demux_do_ioctl+0x54d/0x1340
[  616.048097][T15418]  vmalloc_noprof+0x6b/0x90
[  616.052615][T15418]  ? dvb_demux_do_ioctl+0x54d/0x1340
[  616.057915][T15418]  dvb_demux_do_ioctl+0x54d/0x1340
[  616.063051][T15418]  dvb_usercopy+0x165/0x320
[  616.067565][T15418]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  616.073136][T15418]  ? __pfx_dvb_usercopy+0x10/0x10
[  616.078186][T15418]  ? __pfx_lock_release+0x10/0x10
[  616.083231][T15418]  ? __fget_files+0x206/0x3a0
[  616.087927][T15418]  dvb_demux_ioctl+0x29/0x40
[  616.092528][T15418]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  616.097831][T15418]  __x64_sys_ioctl+0x190/0x200
[  616.102608][T15418]  do_syscall_64+0xcd/0x250
[  616.107133][T15418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.113044][T15418] RIP: 0033:0x7fbeb1f85d29
[  616.117465][T15418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  616.137087][T15418] RSP: 002b:00007fbeb2e80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  616.145514][T15418] RAX: ffffffffffffffda RBX: 00007fbeb2175fa0 RCX: 00007fbeb1f85d29
[  616.153493][T15418] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003
[  616.161466][T15418] RBP: 00007fbeb2001b08 R08: 0000000000000000 R09: 0000000000000000
[  616.169443][T15418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  616.177454][T15418] R13: 0000000000000000 R14: 00007fbeb2175fa0 R15: 00007ffe93c1e578
[  616.185451][T15418]  </TASK>
[  616.302069][T15418] Mem-Info:
[  616.305380][T15418] active_anon:32430 inactive_anon:0 isolated_anon:0
[  616.305380][T15418]  active_file:7770 inactive_file:41363 isolated_file:0
[  616.305380][T15418]  unevictable:8807 dirty:537 writeback:0
[  616.305380][T15418]  slab_reclaimable:11395 slab_unreclaimable:103086
[  616.305380][T15418]  mapped:30784 shmem:14296 pagetables:1146
[  616.305380][T15418]  sec_pagetables:0 bounce:0
[  616.305380][T15418]  kernel_misc_reclaimable:0
[  616.305380][T15418]  free:1295329 free_pcp:1458 free_cma:0
[  616.503795][T15418] Node 0 active_anon:131720kB inactive_anon:0kB active_file:31080kB inactive_file:165320kB unevictable:33692kB isolated(anon):0kB isolated(file):0kB mapped:125384kB dirty:2148kB writeback:0kB shmem:57648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12736kB pagetables:4584kB sec_pagetables:0kB all_unreclaimable? no
[  616.620319][T15418] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  616.937027][T15418] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  617.215646][T15418] lowmem_reserve[]: 0 2491 2492 0 0
[  617.234943][T15418] Node 0 DMA32 free:1254016kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:115260kB inactive_anon:0kB active_file:31080kB inactive_file:164484kB unevictable:33692kB writepending:2396kB present:3129332kB managed:2551312kB mlocked:32156kB bounce:0kB free_pcp:17932kB local_pcp:15300kB free_cma:0kB
[  617.324765][T15418] lowmem_reserve[]: 0 0 0 0 0
[  617.342801][T15418] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  617.450142][T15418] lowmem_reserve[]: 0 0 0 0 0
[  617.484595][T15418] Node 1 Normal free:3913784kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:200kB local_pcp:200kB free_cma:0kB
[  617.570989][T15418] lowmem_reserve[]: 0 0 0 0 0
[  617.595744][T15418] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  617.649311][T15418] Node 0 DMA32: 4256*4kB (UME) 2752*8kB (UME) 2678*16kB (UM) 1739*32kB (UME) 764*64kB (UME) 404*128kB (UM) 171*256kB (UME) 69*512kB (UME) 69*1024kB (UME) 24*2048kB (UM) 203*4096kB (UM) = 1268544kB
[  617.711544][T15418] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  617.762382][T15418] Node 1 Normal: 204*4kB (U) 71*8kB (UME) 27*16kB (UME) 203*32kB (UME) 107*64kB (UME) 38*128kB (UME) 16*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 948*4096kB (ME) = 3913784kB
[  617.840515][T15418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  617.883724][T15418] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  617.910614][T15418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  617.953143][T15418] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  617.973065][T15418] 68929 total pagecache pages
[  617.978462][T15418] 0 pages in swap cache
[  617.982635][T15418] Free swap  = 124540kB
[  618.004968][T15418] Total swap = 124996kB
[  618.054632][T15418] 2097051 pages RAM
[  618.058498][T15418] 0 pages HighMem/MovableOnly
[  618.059484][T15452] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  618.072359][T15418] 427373 pages reserved
[  618.114823][T15418] 0 pages cma reserved
[  618.602350][T15462] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  618.643246][T15462] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  620.704360][T15513] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1905'.
[  621.512884][T15537] __vm_enough_memory: pid: 15537, comm: syz.9.1912, bytes: 4503599627366400 not enough memory for the allocation
[  621.771820][T15543] HfR: entered promiscuous mode
[  621.780527][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1913'.
[  621.796164][T15541] HfR: left promiscuous mode
[  622.712997][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  622.719647][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  624.340756][T15577] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  624.884808][T15588] netlink: 334 bytes leftover after parsing attributes in process `syz.7.1924'.
[  625.216770][T15608] openvswitch: netlink: IP tunnel attribute has 10 unknown bytes.
[  625.580545][T15623] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  625.657311][T15628] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1930'.
[  627.883326][T15671] scsi_dev_info_list_add_str: bad dev info string '' '' ''
[  628.241584][T15681] scsi_dev_info_list_add_str: bad dev info string '�' '' ''
[  629.676796][T15711] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE�r��҄y�*�"�l-���y–��
[  631.577453][T15762] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1965'.
[  631.642169][T15762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  631.706786][T15762] batman_adv: batadv0: Removing interface: batadv_slave_0
[  631.742671][T15762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  631.811359][T15762] batman_adv: batadv0: Removing interface: batadv_slave_1
[  632.320367][T15773] netlink: 'syz.7.1968': attribute type 11 has an invalid length.
[  632.825232][T15763] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  634.758676][T15815] could not allocate digest TFM handle 
[  634.976052][T15826] debugfs: Directory '!PjE�r��҄y�*�"�l-���y–��L̓���]' with parent 'ieee80211' already present!
[  635.039977][T15817] could not allocate digest TFM handle 
[  636.574777][T15854] Invalid ELF header magic: != ELF
[  636.818613][T15854] vcan0: tx drop: invalid da for name 0x000000000000003f
[  642.858628][T15957] netlink: 330 bytes leftover after parsing attributes in process `syz.7.2003'.
[  642.868156][T15957] mac80211_hwsim hwsim24 �: renamed from wlan0 (while UP)
[  646.087719][T16008] Invalid ELF header magic: != ELF
[  646.972840][T16015] ptrace attach of "./syz-executor exec"[14406] was attempted by "./syz-executor exec"[16015]
[  651.711138][T16103] FAULT_INJECTION: forcing a failure.
[  651.711138][T16103] name failslab, interval 1, probability 0, space 0, times 0
[  651.777442][T16103] CPU: 0 UID: 0 PID: 16103 Comm: syz.8.2038 Tainted: G     U             6.13.0-syzkaller #0
[  651.787702][T16103] Tainted: [U]=USER
[  651.791545][T16103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  651.801662][T16103] Call Trace:
[  651.804976][T16103]  <TASK>
[  651.807939][T16103]  dump_stack_lvl+0x16c/0x1f0
[  651.812668][T16103]  should_fail_ex+0x497/0x5b0
[  651.817396][T16103]  ? fs_reclaim_acquire+0xae/0x150
[  651.822556][T16103]  should_failslab+0xc2/0x120
[  651.827288][T16103]  __kmalloc_noprof+0xce/0x4f0
[  651.832102][T16103]  ? ptp_open+0x103/0x520
[  651.836482][T16103]  ptp_open+0x103/0x520
[  651.840693][T16103]  ? __pfx_ptp_open+0x10/0x10
[  651.845434][T16103]  ? __pfx_ptp_open+0x10/0x10
[  651.850162][T16103]  posix_clock_open+0x157/0x260
[  651.855046][T16103]  ? __pfx_posix_clock_open+0x10/0x10
[  651.860441][T16103]  chrdev_open+0x237/0x6a0
[  651.864876][T16103]  ? __pfx_apparmor_file_open+0x10/0x10
[  651.870430][T16103]  ? __pfx_chrdev_open+0x10/0x10
[  651.875387][T16103]  do_dentry_open+0xf59/0x1ea0
[  651.880200][T16103]  ? __pfx_chrdev_open+0x10/0x10
[  651.885161][T16103]  vfs_open+0x82/0x3f0
[  651.889245][T16103]  ? may_open+0x1f2/0x400
[  651.893590][T16103]  path_openat+0x1e6a/0x2d60
[  651.898205][T16103]  ? __pfx_path_openat+0x10/0x10
[  651.903157][T16103]  ? __pfx___lock_acquire+0x10/0x10
[  651.908374][T16103]  ? lock_acquire.part.0+0x11b/0x380
[  651.913678][T16103]  ? find_held_lock+0x2d/0x110
[  651.918456][T16103]  do_filp_open+0x20c/0x470
[  651.922973][T16103]  ? __pfx_do_filp_open+0x10/0x10
[  651.928022][T16103]  ? find_held_lock+0x2d/0x110
[  651.932818][T16103]  ? alloc_fd+0x41f/0x760
[  651.937169][T16103]  do_sys_openat2+0x17a/0x1e0
[  651.941864][T16103]  ? __pfx_do_sys_openat2+0x10/0x10
[  651.947085][T16103]  ? do_fcntl+0x1ec/0x15b0
[  651.951523][T16103]  __x64_sys_openat+0x175/0x210
[  651.956389][T16103]  ? __pfx___x64_sys_openat+0x10/0x10
[  651.961797][T16103]  do_syscall_64+0xcd/0x250
[  651.966336][T16103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.972249][T16103] RIP: 0033:0x7f4235785d29
[  651.976676][T16103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  651.996294][T16103] RSP: 002b:00007f423662e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  652.004724][T16103] RAX: ffffffffffffffda RBX: 00007f4235975fa0 RCX: 00007f4235785d29
[  652.012702][T16103] RDX: 0000000000040400 RSI: 0000000020005280 RDI: ffffffffffffff9c
[  652.020677][T16103] RBP: 00007f4235801b08 R08: 0000000000000000 R09: 0000000000000000
[  652.028743][T16103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  652.036725][T16103] R13: 0000000000000000 R14: 00007f4235975fa0 R15: 00007ffc66a40ec8
[  652.044710][T16103]  </TASK>
[  656.283343][T16174] debugfs: Directory '!PjE�r��҄y�*�"�l-���y–��L̓���]' with parent 'ieee80211' already present!
[  656.692721][T16185] netlink: 342 bytes leftover after parsing attributes in process `syz.9.2056'.
[  656.726495][T16185] netlink: 'syz.9.2056': attribute type 64 has an invalid length.
[  656.744383][T16185] netlink: 74 bytes leftover after parsing attributes in process `syz.9.2056'.
[  656.810263][T16189] netlink: 'syz.9.2056': attribute type 64 has an invalid length.
[  656.818917][T16189] netlink: 74 bytes leftover after parsing attributes in process `syz.9.2056'.
[  657.143449][T16187] netlink: 342 bytes leftover after parsing attributes in process `syz.9.2056'.
[  657.159539][T16185] netlink: 'syz.9.2056': attribute type 64 has an invalid length.
[  657.169754][T16187] netlink: 'syz.9.2056': attribute type 64 has an invalid length.
[  657.178483][T16185] netlink: 74 bytes leftover after parsing attributes in process `syz.9.2056'.
[  657.209286][T16187] netlink: 74 bytes leftover after parsing attributes in process `syz.9.2056'.
[  657.443644][T16189] netlink: 'syz.9.2056': attribute type 64 has an invalid length.
[  657.468096][T16189] netlink: 74 bytes leftover after parsing attributes in process `syz.9.2056'.
[  657.665545][T16200] cougar: G6 mapped to F18
[  658.420132][T16208] netlink: 'syz.7.2060': attribute type 9 has an invalid length.
[  660.214375][T16251] afs: Unknown parameter '��P4�'
[  661.047230][T16274] mtrr: base(0x7bee8358000) is not aligned on a size(0xa48607f0000) boundary
[  662.019885][T16300] cifs: Unknown parameter '�'
[  663.364373][T16312] FAULT_INJECTION: forcing a failure.
[  663.364373][T16312] name failslab, interval 1, probability 0, space 0, times 0
[  663.428884][T16312] CPU: 1 UID: 0 PID: 16312 Comm: syz.5.2084 Tainted: G     U             6.13.0-syzkaller #0
[  663.439103][T16312] Tainted: [U]=USER
[  663.442910][T16312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  663.453063][T16312] Call Trace:
[  663.456349][T16312]  <TASK>
[  663.459291][T16312]  dump_stack_lvl+0x16c/0x1f0
[  663.463993][T16312]  should_fail_ex+0x497/0x5b0
[  663.468680][T16312]  ? fs_reclaim_acquire+0xae/0x150
[  663.473809][T16312]  should_failslab+0xc2/0x120
[  663.478508][T16312]  __kmalloc_cache_noprof+0x68/0x420
[  663.483813][T16312]  ptp_open+0xe3/0x520
[  663.487903][T16312]  ? __pfx_ptp_open+0x10/0x10
[  663.492604][T16312]  ? __pfx_ptp_open+0x10/0x10
[  663.497298][T16312]  posix_clock_open+0x157/0x260
[  663.502164][T16312]  ? __pfx_posix_clock_open+0x10/0x10
[  663.507573][T16312]  chrdev_open+0x237/0x6a0
[  663.512014][T16312]  ? __pfx_apparmor_file_open+0x10/0x10
[  663.517569][T16312]  ? __pfx_chrdev_open+0x10/0x10
[  663.522525][T16312]  do_dentry_open+0xf59/0x1ea0
[  663.527306][T16312]  ? __pfx_chrdev_open+0x10/0x10
[  663.532264][T16312]  vfs_open+0x82/0x3f0
[  663.536355][T16312]  ? may_open+0x1f2/0x400
[  663.540706][T16312]  path_openat+0x1e6a/0x2d60
[  663.545317][T16312]  ? __pfx_path_openat+0x10/0x10
[  663.550265][T16312]  ? __pfx___lock_acquire+0x10/0x10
[  663.555483][T16312]  ? lock_acquire.part.0+0x11b/0x380
[  663.560790][T16312]  ? find_held_lock+0x2d/0x110
[  663.565589][T16312]  do_filp_open+0x20c/0x470
[  663.570113][T16312]  ? __pfx_do_filp_open+0x10/0x10
[  663.575173][T16312]  ? find_held_lock+0x2d/0x110
[  663.579993][T16312]  ? alloc_fd+0x41f/0x760
[  663.584353][T16312]  do_sys_openat2+0x17a/0x1e0
[  663.589051][T16312]  ? __pfx_do_sys_openat2+0x10/0x10
[  663.594270][T16312]  ? do_fcntl+0x1ec/0x15b0
[  663.598715][T16312]  __x64_sys_openat+0x175/0x210
[  663.603601][T16312]  ? __pfx___x64_sys_openat+0x10/0x10
[  663.609091][T16312]  do_syscall_64+0xcd/0x250
[  663.613615][T16312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.619521][T16312] RIP: 0033:0x7fa333d85d29
[  663.623938][T16312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  663.643561][T16312] RSP: 002b:00007fa334b5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  663.651984][T16312] RAX: ffffffffffffffda RBX: 00007fa333f75fa0 RCX: 00007fa333d85d29
[  663.659960][T16312] RDX: 0000000000040400 RSI: 0000000020005280 RDI: ffffffffffffff9c
[  663.667956][T16312] RBP: 00007fa333e01b08 R08: 0000000000000000 R09: 0000000000000000
[  663.675933][T16312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  663.683916][T16312] R13: 0000000000000000 R14: 00007fa333f75fa0 R15: 00007ffecec2a2b8
[  663.691909][T16312]  </TASK>
[  665.403763][T16346] svc: failed to register nfsdv3 RPC service (errno 111).
[  665.439155][T16346] svc: failed to register nfsaclv3 RPC service (errno 111).
[  667.892310][T16393] Invalid ELF header magic: != ELF
[  671.433781][T16424] lo: entered allmulticast mode
[  672.097810][T16415] lo: left allmulticast mode
[  672.653980][T16472] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2115'.
[  672.939718][T16472] bond0: (slave bond_slave_1): Releasing backup interface
[  673.429975][T16490] netlink: 452 bytes leftover after parsing attributes in process `syz.7.2120'.
[  673.462078][T16490] netlink: 452 bytes leftover after parsing attributes in process `syz.7.2120'.
[  674.501972][T16515] netlink: 'syz.5.2126': attribute type 1 has an invalid length.
[  674.951682][T16517] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  675.713060][T12545] Bluetooth: hci2: command 0x0406 tx timeout
[  676.132906][T16537] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  676.139129][T16537] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  676.171037][T16537] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  676.215314][T16537] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  676.230405][T16537] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  676.291489][T16537] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  676.299266][T16537] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  676.319939][T16537] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  676.350777][T16537] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  676.620810][T16567] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2141'.
[  677.481535][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout
[  678.186162][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  678.259964][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout
[  678.339505][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout
[  680.249490][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  680.329142][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout
[  680.408670][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout
[  680.496419][T16593] lo: entered allmulticast mode
[  680.626219][T16638] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2159'.
[  680.720819][T16638] veth0_macvtap: entered allmulticast mode
[  681.027669][T16586] lo: left allmulticast mode
[  682.401235][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout
[  682.477874][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout
[  683.837679][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  683.844431][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  685.289195][T16733] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2181'.
[  685.544306][T16741] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2183'.
[  685.639572][T16741] veth1_macvtap: left promiscuous mode
[  686.248244][T16747] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  687.001170][T16748] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  688.373514][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2196'.
[  688.593901][T16802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2198'.
[  690.406924][T16840] mkiss: ax0: crc mode is auto.
[  691.328806][T16854] [U] 
[  691.331569][T16854] [U] 
[  691.334299][T16854] [U] 
[  691.337118][T16854] [U] 
[  691.370597][T16854] [U] 
[  691.373352][T16854] [U] 
[  691.376074][T16854] [U] 
[  691.378789][T16854] [U] 
[  691.402526][T16854] [U] 
[  691.405290][T16854] [U] 
[  691.408014][T16854] [U] 
[  691.410744][T16854] [U] 
[  691.441539][T16854] [U] 
[  691.444291][T16854] [U] 
[  691.447010][T16854] [U] 
[  691.449728][T16854] [U] 
[  691.467753][T16858] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2217'.
[  691.482773][T16854] [U] 
[  691.485535][T16854] [U] 
[  691.488270][T16854] [U] 
[  691.490994][T16854] [U] 
[  691.571341][T16854] [U] 
[  691.574123][T16854] [U] 
[  691.576875][T16854] [U] 
[  691.579606][T16854] [U] 
[  691.635618][T16854] [U] 
[  691.638380][T16854] [U] 
[  691.641110][T16854] [U] 
[  691.643835][T16854] [U] 
[  691.700469][T16854] [U] 
[  691.703222][T16854] [U] 
[  691.705939][T16854] [U] 
[  691.708656][T16854] [U] 
[  691.763076][T16854] [U] 
[  691.765837][T16854] [U] 
[  691.768577][T16854] [U] 
[  691.771307][T16854] [U] 
[  691.829363][T16854] [U] 
[  691.832130][T16854] [U] 
[  691.834881][T16854] [U] 
[  691.837609][T16854] [U] 
[  691.874747][T16854] [U] 
[  691.877525][T16854] [U] 
[  691.880261][T16854] [U] 
[  691.882993][T16854] [U] 
[  691.928822][T16854] [U] 
[  691.931676][T16854] [U] 
[  691.934419][T16854] [U] 
[  691.937147][T16854] [U] 
[  691.961520][T16854] [U] 
[  691.964287][T16854] [U] 
[  691.967014][T16854] [U] 
[  691.969740][T16854] [U] 
[  692.046998][T16854] [U] 
[  692.049744][T16854] [U] 
[  692.052447][T16854] [U] 
[  692.055151][T16854] [U] 
[  692.117685][T16854] [U] 
[  695.078752][T16926] netlink: 1204 bytes leftover after parsing attributes in process `syz.9.2233'.
[  695.182825][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2233'.
[  695.378274][T16934] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2237'.
[  695.389038][T16934] nbd: must specify at least one socket
[  695.788955][T16935] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2236'.
[  697.053576][T16962] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2244'.
[  697.083771][T16962] IPv6: NLM_F_CREATE should be specified when creating new route
[  697.730497][T16977] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2248'.
[  697.922799][T16975] Process accounting resumed
[  698.285981][T16985] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  698.292113][T16985] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  698.440485][T16985] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  698.466731][T16985] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  700.315396][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  700.315402][T12545] Bluetooth: hci4: command 0x0c1a tx timeout
[  700.465098][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout
[  700.471199][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout
[  702.015070][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2268'.
[  703.242621][T17081] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2274'.
[  704.190652][T17097] netlink: 1204 bytes leftover after parsing attributes in process `syz.5.2278'.
[  704.585802][T17101] FAULT_INJECTION: forcing a failure.
[  704.585802][T17101] name failslab, interval 1, probability 0, space 0, times 0
[  704.631696][T17101] CPU: 1 UID: 0 PID: 17101 Comm: syz.9.2279 Tainted: G     U             6.13.0-syzkaller #0
[  704.643600][T17101] Tainted: [U]=USER
[  704.643665][T17101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  704.643682][T17101] Call Trace:
[  704.643692][T17101]  <TASK>
[  704.643704][T17101]  dump_stack_lvl+0x16c/0x1f0
[  704.643739][T17101]  should_fail_ex+0x497/0x5b0
[  704.643771][T17101]  ? fs_reclaim_acquire+0xae/0x150
[  704.643804][T17101]  should_failslab+0xc2/0x120
[  704.643844][T17101]  kmem_cache_alloc_lru_noprof+0x73/0x3b0
[  704.643880][T17101]  ? __d_alloc+0x35/0x8c0
[  704.643920][T17101]  __d_alloc+0x35/0x8c0
[  704.643958][T17101]  d_alloc+0x4a/0x1e0
[  704.643995][T17101]  d_alloc_parallel+0xe9/0x12b0
[  704.644037][T17101]  ? __pfx_d_alloc_parallel+0x10/0x10
[  704.644063][T17101]  ? lockdep_init_map_type+0x16d/0x7d0
[  704.644088][T17101]  ? mark_lock+0xb5/0xc60
[  704.644126][T17101]  ? lockdep_init_map_type+0x16d/0x7d0
[  704.644164][T17101]  __lookup_slow+0x194/0x460
[  704.644207][T17101]  ? __pfx___lookup_slow+0x10/0x10
[  704.644244][T17101]  ? __pfx_lock_release+0x10/0x10
[  704.644290][T17101]  ? d_lookup+0xe9/0x180
[  704.644320][T17101]  lookup_one_len+0x181/0x1b0
[  704.644367][T17101]  ? __pfx_lookup_one_len+0x10/0x10
[  704.644409][T17101]  ? mntput+0x10/0x90
[  704.644442][T17101]  start_creating.part.0+0x12f/0x3a0
[  704.644484][T17101]  debugfs_create_dir+0x6c/0x5f0
[  704.644526][T17101]  kvm_dev_ioctl+0x1223/0x1aa0
[  704.644570][T17101]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  704.644607][T17101]  ? __fget_files+0x206/0x3a0
[  704.644641][T17101]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  704.644675][T17101]  __x64_sys_ioctl+0x190/0x200
[  704.644704][T17101]  do_syscall_64+0xcd/0x250
[  704.644741][T17101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.644775][T17101] RIP: 0033:0x7f4c3c385d29
[  704.644797][T17101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  704.644821][T17101] RSP: 002b:00007f4c3d130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  704.644849][T17101] RAX: ffffffffffffffda RBX: 00007f4c3c575fa0 RCX: 00007f4c3c385d29
[  704.644868][T17101] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004
[  704.644885][T17101] RBP: 00007f4c3c401b08 R08: 0000000000000000 R09: 0000000000000000
[  704.644903][T17101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  704.644920][T17101] R13: 0000000000000000 R14: 00007f4c3c575fa0 R15: 00007ffdd228da58
[  704.644956][T17101]  </TASK>
[  705.254030][    C1] vkms_vblank_simulate: vblank timer overrun
[  705.521682][T17106] tty tty56: ldisc open failed (-12), clearing slot 55
[  705.866972][T17127] cifs: Unknown parameter 'T.�����żc[���$⁍��)��U�ÑnE�-ʙ�l���-��	�-�_������5Z�o��m��fwY�h�*/�xD
lݩ���g�kǐA����7���9���X�a/f�_�AR������xM	�v��p��$^;��q�3���n���-
6��+e�k�����<�k�c�)n.�eM��Na��t��SM��1,'
[  709.291664][T17189] can: request_module (can-proto-0) failed.
[  709.859698][T17200] Invalid ELF header magic: != ELF
[  711.110894][T17221] netlink: 334 bytes leftover after parsing attributes in process `syz.8.2307'.
[  711.997766][T17243] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2313'.
[  712.007753][T17243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  712.015307][T17243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  712.041288][T17243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  712.087000][T17243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  715.037933][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2327'.
[  715.281547][T17307] can: request_module (can-proto-0) failed.
[  717.516042][T17366] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  717.635443][T17366] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  717.641514][T17366] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  717.792534][T17366] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  718.059978][T17378] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma?
[  718.379925][T17391] netlink: 326 bytes leftover after parsing attributes in process `syz.9.2345'.
[  718.469257][T17394] netlink: 326 bytes leftover after parsing attributes in process `syz.9.2345'.
[  719.361135][T17413] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  719.565102][T12545] Bluetooth: hci4: command 0x0c1a tx timeout
[  719.644572][T12545] Bluetooth: hci2: command 0x0406 tx timeout
[  719.656296][T12545] Bluetooth: hci3: command 0x0c1a tx timeout
[  719.725003][T17417] netlink: 322 bytes leftover after parsing attributes in process `syz.8.2351'.
[  719.813862][T12545] Bluetooth: hci0: command 0x0c1a tx timeout
[  721.537900][T17449] netlink: zone id is out of range
[  721.546295][T17450] netlink: zone id is out of range
[  724.087432][T17497] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2368'.
[  725.353692][T17518] cgroup: fork rejected by pids controller in /syz5
[  728.928096][T17599] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  729.216679][T17599] kafs: addr_prefs: Invalid Command
[  730.266953][T17599] HSR: entered promiscuous mode
[  734.880529][T17677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  735.950096][T17688] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2405'.
[  736.675433][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  736.682012][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  737.434766][    C0] vcan0: j1939_tp_rxtimer: 0xffff888033546c00: rx timeout, send abort
[  737.940559][    C0] vcan0: j1939_tp_rxtimer: 0xffff888033546c00: abort rx timeout. Force session deactivation
[  738.507337][T17706] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2409'.
[  738.563868][T17706] bridge_slave_1: left allmulticast mode
[  738.589046][T17706] bridge_slave_1: left promiscuous mode
[  738.621758][T17706] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.736029][T17706] bridge_slave_0: left allmulticast mode
[  738.742315][T17706] bridge_slave_0: left promiscuous mode
[  738.849851][T17706] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.997261][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  739.013057][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  739.023822][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  739.037664][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  739.047232][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  739.054898][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  739.886901][T17711] chnl_net:caif_netlink_parms(): no params data found
[  740.330117][T17711] bridge0: port 1(bridge_slave_0) entered blocking state
[  740.340422][T17711] bridge0: port 1(bridge_slave_0) entered disabled state
[  740.367956][T17711] bridge_slave_0: entered allmulticast mode
[  740.375175][T17711] bridge_slave_0: entered promiscuous mode
[  740.400063][T17711] bridge0: port 2(bridge_slave_1) entered blocking state
[  740.416633][T17711] bridge0: port 2(bridge_slave_1) entered disabled state
[  740.434119][T17711] bridge_slave_1: entered allmulticast mode
[  740.444633][T17711] bridge_slave_1: entered promiscuous mode
[  740.603514][T17711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  740.686854][T17711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  740.888713][T17711] team0: Port device team_slave_0 added
[  740.911759][T17711] team0: Port device team_slave_1 added
[  741.085815][T17711] batman_adv: batadv0: Adding interface: batadv_slave_0
[  741.093109][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  741.139480][T12545] Bluetooth: hci1: command tx timeout
[  741.219091][T17711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  741.295977][T17711] batman_adv: batadv0: Adding interface: batadv_slave_1
[  741.313562][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  741.386053][T17711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  741.581772][T17711] hsr_slave_0: entered promiscuous mode
[  741.607177][T17711] hsr_slave_1: entered promiscuous mode
[  741.641309][T17711] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  741.664653][T17711] Cannot create hsr debugfs directory
[  743.202167][T12545] Bluetooth: hci1: command tx timeout
[  743.533925][T17767] Invalid ELF header magic: != ELF
[  744.960033][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  744.966768][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  745.119405][T17711] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  745.229981][T17711] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  745.271773][T12545] Bluetooth: hci1: command tx timeout
[  745.291645][T17711] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  745.361329][T17711] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  745.798305][T17711] 8021q: adding VLAN 0 to HW filter on device bond0
[  745.860476][T17767] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  745.882748][T17711] 8021q: adding VLAN 0 to HW filter on device team0
[  745.930335][T15651] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.937504][T15651] bridge0: port 1(bridge_slave_0) entered forwarding state
[  746.069716][T15651] bridge0: port 2(bridge_slave_1) entered blocking state
[  746.076871][T15651] bridge0: port 2(bridge_slave_1) entered forwarding state
[  746.542681][T17823] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  746.672525][T17823] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  746.684252][T17823] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  746.704517][T17823] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  746.737489][T17823] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  746.837064][T17823] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  746.870017][T17711] 8021q: adding VLAN 0 to HW filter on device batadv0
[  747.110643][T17711] veth0_vlan: entered promiscuous mode
[  747.148223][T17711] veth1_vlan: entered promiscuous mode
[  747.421632][T17711] veth0_macvtap: entered promiscuous mode
[  747.608361][T17711] veth1_macvtap: entered promiscuous mode
[  747.713694][T17851] Invalid ELF header magic: != ELF
[  747.813525][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  747.849847][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.897714][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  747.937415][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.966947][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  747.977795][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.989215][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  748.001617][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.018439][T17711] batman_adv: batadv0: Interface activated: batadv_slave_0
[  748.066390][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.096608][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.132372][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.166792][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.192323][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.233380][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.262873][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.297074][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.343815][T17711] batman_adv: batadv0: Interface activated: batadv_slave_1
[  748.397228][T17711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  748.429278][T17711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  748.446837][T17711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  748.486080][T17711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  748.615274][T12545] Bluetooth: hci4: command 0x0c1a tx timeout
[  748.693763][T12545] Bluetooth: hci0: command 0x0c1a tx timeout
[  748.694495][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  748.773536][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout
[  748.937272][T15936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  748.967948][T15936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.064722][T15936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.104372][T15936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  750.846618][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout
[  752.636265][T17959] HfR: entered promiscuous mode
[  752.793258][T17959] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2440'.
[  752.878690][T17959] HfR: left promiscuous mode
[  752.921806][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout
[  754.219280][T17992] FAULT_INJECTION: forcing a failure.
[  754.219280][T17992] name fail_futex, interval 1, probability 0, space 0, times 1
[  754.344092][T17992] CPU: 0 UID: 0 PID: 17992 Comm: syz.2.2444 Tainted: G     U             6.13.0-syzkaller #0
[  754.354322][T17992] Tainted: [U]=USER
[  754.358216][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  754.368323][T17992] Call Trace:
[  754.371651][T17992]  <TASK>
[  754.374611][T17992]  dump_stack_lvl+0x16c/0x1f0
[  754.379332][T17992]  should_fail_ex+0x497/0x5b0
[  754.384049][T17992]  ? __pfx_lock_release+0x10/0x10
[  754.389109][T17992]  get_futex_key+0x4a3/0x1000
[  754.393833][T17992]  ? __pfx_get_futex_key+0x10/0x10
[  754.398995][T17992]  ? psi_group_change+0x6dc/0xd20
[  754.404053][T17992]  ? find_held_lock+0x2d/0x110
[  754.408864][T17992]  futex_wait_setup+0x72/0x290
[  754.413657][T17992]  ? __pfx_lock_release+0x10/0x10
[  754.418718][T17992]  __futex_wait+0x267/0x3c0
[  754.423264][T17992]  ? __pfx___futex_wait+0x10/0x10
[  754.428325][T17992]  ? try_to_wake_up+0x158/0x1490
[  754.433306][T17992]  ? __pfx_futex_wake_mark+0x10/0x10
[  754.438652][T17992]  futex_wait+0xe9/0x380
[  754.442932][T17992]  ? __pfx_futex_wait+0x10/0x10
[  754.447833][T17992]  do_futex+0x22b/0x350
[  754.452036][T17992]  ? __pfx_do_futex+0x10/0x10
[  754.456760][T17992]  ? __pfx___might_resched+0x10/0x10
[  754.462084][T17992]  __x64_sys_futex+0x1e1/0x4c0
[  754.466893][T17992]  ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[  754.473364][T17992]  ? __pfx___x64_sys_futex+0x10/0x10
[  754.478690][T17992]  ? ksys_mmap_pgoff+0x85/0x5c0
[  754.483585][T17992]  ? rcu_is_watching+0x12/0xc0
[  754.488401][T17992]  do_syscall_64+0xcd/0x250
[  754.492953][T17992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.498886][T17992] RIP: 0033:0x7f9a07785d29
[  754.503330][T17992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  754.522980][T17992] RSP: 002b:00007f9a0852d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  754.531434][T17992] RAX: ffffffffffffffda RBX: 00007f9a07975fa8 RCX: 00007f9a07785d29
[  754.539437][T17992] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9a07975fa8
[  754.547438][T17992] RBP: 00007f9a07975fa0 R08: 0000000000000000 R09: 0000000000000000
[  754.555531][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a07975fac
[  754.563535][T17992] R13: 0000000000000000 R14: 00007ffe6cec3d30 R15: 00007ffe6cec3e18
[  754.571552][T17992]  </TASK>
[  757.469360][T18071] ptrace attach of "./syz-executor exec"[17711] was attempted by "���5�S\x0a��~��᝼�V�`z�o�x�'�Ǜ��O�m;���UF�3o��a���b�\x09�����X���2�T���!y�5B�1��,`�!�*���WZ�q\x0bFrk��!
ū�Z��ĵ�(��m�h�J$L�$�Jv� ��ɚ�zj�^00������A\x0c�6ci\x09��Oz������R4rY\x0a#ȷ-�l������L�,��\x1b瘹ŝ�[�\x0d�L4��K��\x07�[;G��$�7.�_�G�\x22cA��=����pG�MfH�9��t�a������!%��gb�H�JE��*#Ö���\x0a򟳴��������o.v�6t��=�,3�U�b�}�$V)�`:0�=x����\x09�Т�����-����ύ�E����~�!1�*�+Zu�N�R�W� ��x��*��m\x5cXN��q�N�V������3d�,��0�؂���q� �K;��)���9 ��V�S�k>��x}�l3M�`�G���Ew
80���„0��!��ݛ��bz�br�?!d�1\x1b(1O�Vt�~�U�G�7�`�Q��g̟,T�T\x09��޹y�:�`\x09\x0dQ�i����W@�-�m��7�=���� By�<������_;�B�R\x0cH� ��K�`�8`��=�i&�\x0c�*L5�\x1b����'��a6��$UQX�z䮢 ߍf��)UR�sƮr�SL$8\x09>��bjh|�]��8\x0a�zo��Ɔc PK- �r��'���bO#\x1bYB�8�I˂\x1bh���e�����2s�\x0a�ӝ�9G`�(\x0c�\x09�h��ƨ�>��[��M�~���EC������,�k�Zv���\x09��!�0�^쪅������P�mZ��s�����p ��\x1b1�y�{{��\x07���O���O8�T�t�ΐ�����Ϊ�M�y;d���
[  763.335351][T18189] smc: net device syz_tun applied user defined pnetid ETHTOOL
[  765.028188][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2476'.
[  765.307463][T18256] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2477'.
[  765.776281][T18268] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2480'.
[  767.358492][T18323] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2488'.
[  767.721210][T18333] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2490'.
[  768.621937][T18355] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2492'.
[  768.641912][T18349] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2491'.
[  768.795552][T18356] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2491'.
[  771.331484][T18426] netlink: 'syz.7.2500': attribute type 5 has an invalid length.
[  771.355618][T18426] netlink: 314 bytes leftover after parsing attributes in process `syz.7.2500'.
[  772.154933][T18447] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2502'.
[  773.473484][T18469] netlink: 242 bytes leftover after parsing attributes in process `syz.9.2508'.
[  774.762805][T18481] Invalid ELF header magic: != ELF
[  775.700090][T18489] kAFS: bad VL server IP address
[  776.638451][T18481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2512'.
[  776.855357][T18481] bond0: entered allmulticast mode
[  777.006275][T18481] bond_slave_0: entered allmulticast mode
[  777.085849][T18481] bond_slave_1: entered allmulticast mode
[  778.825015][T18522] sctp: [Deprecated]: syz.2.2519 (pid 18522) Use of int in maxseg socket option.
[  778.825015][T18522] Use struct sctp_assoc_value instead
[  778.884841][T18522] sctp: [Deprecated]: syz.2.2519 (pid 18522) Use of int in maxseg socket option.
[  778.884841][T18522] Use struct sctp_assoc_value instead
[  783.582520][T18629] netlink: 342 bytes leftover after parsing attributes in process `syz.9.2542'.
[  784.478482][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'.
[  784.527919][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'.
[  784.588693][   T29] audit: type=1800 audit(8277292230.672:15): pid=18642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2547" name="lu_gp_id" dev="configfs" ino=67982 res=0 errno=0
[  785.051822][T18648] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2549'.
[  785.363957][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2550'.
[  785.393997][T18655] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  785.422134][T18655] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  791.221977][T18752] 
: entered promiscuous mode
[  792.053758][   T29] audit: type=1326 audit(4294967299.196:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.7.2579" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbeb1f85d29 code=0x0
[  792.568502][T18772] netlink: 330 bytes leftover after parsing attributes in process `syz.9.2580'.
[  798.214854][T18846] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2596'.
[  798.223225][T18846] bridge_slave_1: left allmulticast mode
[  798.228514][T18846] bridge_slave_1: left promiscuous mode
[  798.256759][T18846] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.362625][T18846] bridge_slave_0: left allmulticast mode
[  798.413917][T18846] bridge_slave_0: left promiscuous mode
[  798.496587][T18846] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.244211][T18861] erspan0: entered allmulticast mode
[  801.302321][T18872] netlink: Conntrack attr type has unexpected length (type=0, length=3, expected=0)
[  802.155542][T18879] sp0: Synchronizing with TNC
[  806.083864][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  806.089710][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  808.854159][T12545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  808.863727][T12545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  808.873962][T12545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  808.912277][T12545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  808.931017][T12545] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  808.942912][T12545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  809.586490][T18940] chnl_net:caif_netlink_parms(): no params data found
[  810.250035][T18940] bridge0: port 1(bridge_slave_0) entered blocking state
[  810.267317][T18940] bridge0: port 1(bridge_slave_0) entered disabled state
[  810.284168][T18940] bridge_slave_0: entered allmulticast mode
[  810.304861][T18940] bridge_slave_0: entered promiscuous mode
[  810.320272][T18940] bridge0: port 2(bridge_slave_1) entered blocking state
[  810.362908][T18940] bridge0: port 2(bridge_slave_1) entered disabled state
[  810.369516][T18940] bridge_slave_1: entered allmulticast mode
[  810.401040][T18940] bridge_slave_1: entered promiscuous mode
[  810.646982][T18940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  810.684247][T18940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  811.026197][T12545] Bluetooth: hci3: command tx timeout
[  811.093328][T18940] team0: Port device team_slave_0 added
[  811.239145][T18940] team0: Port device team_slave_1 added
[  811.886152][T18940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  811.892563][T18940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  811.972795][T18940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  812.005554][T18940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  812.011838][T18940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  812.112524][T18940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  813.078765][T12545] Bluetooth: hci3: command tx timeout
[  813.622866][T18940] hsr_slave_0: entered promiscuous mode
[  813.725175][T18940] hsr_slave_1: entered promiscuous mode
[  813.847586][T18940] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  813.864601][T18940] Cannot create hsr debugfs directory
[  815.148758][T12545] Bluetooth: hci3: command tx timeout
[  816.249246][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2622'.
[  816.485504][T18994] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2622'.
[  817.218676][T12545] Bluetooth: hci3: command tx timeout
[  820.842014][T18940] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  820.881868][T18940] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  820.909788][T18940] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  820.938337][T18940] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  821.155956][T18940] 8021q: adding VLAN 0 to HW filter on device bond0
[  821.200584][T18940] 8021q: adding VLAN 0 to HW filter on device team0
[  821.259871][ T6250] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.266353][ T6250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  821.309647][ T6250] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.316105][ T6250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  821.738330][T19078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2631'.
[  821.907058][T19078] hsr_slave_0: entered allmulticast mode
[  822.200029][T18940] 8021q: adding VLAN 0 to HW filter on device batadv0
[  822.959024][T19118] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2635'.
[  823.067640][T19121] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2637'.
[  823.257472][T18940] veth0_vlan: entered promiscuous mode
[  823.286838][T18940] veth1_vlan: entered promiscuous mode
[  823.417560][T18940] veth0_macvtap: entered promiscuous mode
[  823.451843][T18940] veth1_macvtap: entered promiscuous mode
[  823.458764][T19110] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2635'.
[  823.546073][T18940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  823.585326][T18940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.620869][T18940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  823.673676][T18940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.709023][T18940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  823.732014][T18940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.753155][T18940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  823.779927][T18940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.806992][T18940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  823.827068][T18940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.856224][T18940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  823.920973][T18940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  823.951129][T18940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.981478][T18940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  824.017444][T18940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.028706][T18940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  824.044572][T18940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.061697][T18940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  824.077889][T18940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.101383][T18940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  824.153308][T18940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.191885][T18940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  824.431891][T18940] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  824.454379][T18940] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  824.487212][T18940] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  824.515123][T18940] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  824.747001][ T6245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  824.777852][ T6245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  824.888421][ T6245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  824.925770][ T6245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  825.209407][T19185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2614'.
[  827.212765][T19247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2651'.
[  827.359779][T19247] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.366649][T19247] bridge0: port 1(bridge_slave_0) entered disabled state
[  827.531581][T19247] bridge0: entered promiscuous mode
[  827.615065][T19247] bridge0: entered allmulticast mode
[  828.079201][T19247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2651'.
[  831.378458][T19374] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2669'.
[  831.408459][T19374] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2669'.
[  831.453358][T19377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2668'.
[  836.281206][T19471] netlink: 'syz.9.2678': attribute type 1 has an invalid length.
[  836.413550][T19471] netlink: 'syz.9.2678': attribute type 1 has an invalid length.
[  836.988627][T19471] HfR: entered promiscuous mode
[  837.162472][T19471] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2678'.
[  840.906569][   T29] audit: type=1807 audit(4294967345.772:17): UNKNOWN=0"{]$|K1jk0B|d9}S	O,+vW/IixTsHuWS&S^84gq%HLrjO res=0
[  840.954068][T19551] ima: policy update failed
[  840.959824][   T29] audit: type=1802 audit(4294967345.822:18): pid=19550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.2687" res=0 errno=0
[  841.020022][   T29] audit: type=1802 audit(4294967345.872:19): pid=19551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2687" res=0 errno=0
[  843.129802][T19599] ptrace attach of "./syz-executor exec"[14396] was attempted by "./syz-executor exec"[19599]
[  843.184148][T19599] ptrace attach of "./syz-executor exec"[14396] was attempted by "./syz-executor exec"[19599]
[  843.341460][   T29] audit: type=1800 audit(4294967348.214:20): pid=19608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2693" name="discovery_nqn" dev="configfs" ino=70601 res=0 errno=0
[  846.196979][T19704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2708'.
[  848.626984][T19792] delete_channel: no stack
[  852.345006][T19843] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2732'.
[  852.820953][T19865] Invalid ELF header magic: != ELF
[  853.241790][T19873] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2741'.
[  853.288299][T19873] ip_vti0: entered promiscuous mode
[  856.575732][T19927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2747'.
[  856.769725][T19927] veth0_macvtap: left promiscuous mode
[  856.900890][T19927] macvtap0: entered allmulticast mode
[  857.607375][T19948] nfs: Unknown parameter '+Kk	'
[  858.327353][T19967] Process accounting resumed
[  864.787284][T20095] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2781'.
[  865.095415][T20094] Invalid ELF header magic: != ELF
[  866.624738][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  866.634073][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  866.642751][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  866.649972][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  866.656914][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  866.665168][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  867.171230][T20124] Process accounting resumed
[  867.202583][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  867.208676][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  867.447596][T20110] chnl_net:caif_netlink_parms(): no params data found
[  868.035718][T20110] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.089200][T20110] bridge0: port 1(bridge_slave_0) entered disabled state
[  868.111610][T20110] bridge_slave_0: entered allmulticast mode
[  868.132601][T20110] bridge_slave_0: entered promiscuous mode
[  868.193108][T20110] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.199905][T20110] bridge0: port 2(bridge_slave_1) entered disabled state
[  868.208925][T20110] bridge_slave_1: entered allmulticast mode
[  868.218060][T20110] bridge_slave_1: entered promiscuous mode
[  868.443302][T20110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  868.550689][T20110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  868.680240][T20110] team0: Port device team_slave_0 added
[  868.692053][T20110] team0: Port device team_slave_1 added
[  868.709835][ T5841] Bluetooth: hci2: command tx timeout
[  868.744933][T20110] batman_adv: batadv0: Adding interface: batadv_slave_0
[  868.765192][T20110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  868.860210][T20110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  868.891946][T20110] batman_adv: batadv0: Adding interface: batadv_slave_1
[  868.917114][T20110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  868.977001][T20110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  869.256211][T20110] hsr_slave_0: entered promiscuous mode
[  869.264131][T20110] hsr_slave_1: entered promiscuous mode
[  869.291126][T20110] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  869.326342][T20110] Cannot create hsr debugfs directory
[  869.422746][T20168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  869.432025][T20165] Invalid ELF header magic: != ELF
[  869.475975][T20168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  869.980141][T20178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2796'.
[  870.224854][T20178] geneve1: entered allmulticast mode
[  870.780705][ T5841] Bluetooth: hci2: command tx timeout
[  871.531187][T20110] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  871.571265][T20110] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  871.630325][T20110] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  871.663407][T20110] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  871.864329][T20110] 8021q: adding VLAN 0 to HW filter on device bond0
[  871.923969][T20110] 8021q: adding VLAN 0 to HW filter on device team0
[  871.969973][T15651] bridge0: port 1(bridge_slave_0) entered blocking state
[  871.976441][T15651] bridge0: port 1(bridge_slave_0) entered forwarding state
[  872.042839][T15651] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.049330][T15651] bridge0: port 2(bridge_slave_1) entered forwarding state
[  872.579976][T20110] 8021q: adding VLAN 0 to HW filter on device batadv0
[  872.691619][T20110] veth0_vlan: entered promiscuous mode
[  872.749266][T20110] veth1_vlan: entered promiscuous mode
[  872.850789][ T5841] Bluetooth: hci2: command tx timeout
[  872.899281][T20110] veth0_macvtap: entered promiscuous mode
[  872.911017][T20110] veth1_macvtap: entered promiscuous mode
[  872.940676][T20110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  872.958599][T20110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.979230][T20110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  873.027146][T20110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  873.036035][T20110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  873.070118][T20110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  873.116961][T20110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  873.156249][T20110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  873.165153][T20110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  873.235946][T20110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  873.244855][T20110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  873.276201][T20110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  873.410623][T20110] batman_adv: batadv0: Interface activated: batadv_slave_0
[  873.663505][T20110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  873.716630][T20110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  873.763442][T20110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  873.772874][T20110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  873.862571][T20110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  873.872003][T20110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  873.897526][T20110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  873.931697][T20110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  873.955865][T20110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  874.061629][T20110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  874.070547][T20110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  874.111291][T20110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  874.142158][T20110] batman_adv: batadv0: Interface activated: batadv_slave_1
[  874.189955][T20110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  874.230806][T20110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  874.238810][T20110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  874.290528][T20110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  874.480288][T20279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2809'.
[  874.718150][T15657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  874.748694][T15657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  874.795981][ T6263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  874.808593][ T6263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  874.917500][ T5841] Bluetooth: hci2: command tx timeout
[  876.290675][T20336] program syz.9.2815 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  876.300699][T20337] futex_wake_op: syz.9.2815 tries to shift op by 64; fix this program
[  880.243831][T20426] Invalid ELF header magic: != ELF
[  881.349342][T20447] Invalid ELF header magic: != ELF
[  881.828795][T20429] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  882.361665][   T29] audit: type=1807 audit(4294967387.447:21): UNKNOWN=0"{]$|K1jk0B|d9}S	O,+vW/IixTsHuWS&S^84gq%HLrjO res=0
[  882.377719][T20477] ima: policy update failed
[  882.388294][   T29] audit: type=1802 audit(4294967387.447:22): pid=20477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.9.2834" res=0 errno=0
[  882.462229][   T29] audit: type=1802 audit(4294967387.508:23): pid=20477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.2834" res=0 errno=0
[  883.813792][T20517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2838'.
[  884.173005][T20517] hsr_slave_0 (unregistering): left promiscuous mode
[  885.497096][T20554] FAULT_INJECTION: forcing a failure.
[  885.497096][T20554] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  885.635591][T20554] CPU: 1 UID: 0 PID: 20554 Comm: syz.2.2844 Tainted: G     U             6.13.0-syzkaller #0
[  885.644813][T20554] Tainted: [U]=USER
[  885.648298][T20554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  885.657389][T20554] Call Trace:
[  885.660457][T20554]  <TASK>
[  885.663130][T20554]  dump_stack_lvl+0x16c/0x1f0
[  885.667398][T20554]  should_fail_ex+0x497/0x5b0
[  885.671671][T20554]  ? fs_reclaim_acquire+0xae/0x150
[  885.676322][T20554]  should_fail_alloc_page+0xe7/0x130
[  885.681135][T20554]  prepare_alloc_pages.constprop.0+0x16f/0x560
[  885.686728][T20554]  ? mark_lock+0xb5/0xc60
[  885.690681][T20554]  ? __pfx_mark_lock+0x10/0x10
[  885.695033][T20554]  __alloc_pages_noprof+0x190/0x25b0
[  885.699923][T20554]  ? __pfx_mark_lock+0x10/0x10
[  885.704270][T20554]  ? hlock_class+0x4e/0x130
[  885.708399][T20554]  ? mark_lock+0xb5/0xc60
[  885.712361][T20554]  ? __pfx_mark_lock+0x10/0x10
[  885.716698][T20554]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  885.722002][T20554]  ? hlock_class+0x4e/0x130
[  885.726103][T20554]  ? mark_lock+0xb5/0xc60
[  885.730068][T20554]  ? hlock_class+0x4e/0x130
[  885.734158][T20554]  ? __lock_acquire+0xcc5/0x3c40
[  885.738646][T20554]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  885.743999][T20554]  ? policy_nodemask+0xea/0x4e0
[  885.748420][T20554]  alloc_pages_mpol_noprof+0x2c8/0x620
[  885.753370][T20554]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  885.758770][T20554]  ? hlock_class+0x4e/0x130
[  885.762852][T20554]  folio_alloc_mpol_noprof+0x36/0xd0
[  885.767627][T20554]  vma_alloc_folio_noprof+0xee/0x1b0
[  885.772405][T20554]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  885.777725][T20554]  ? find_held_lock+0x2d/0x110
[  885.782053][T20554]  do_pte_missing+0x2017/0x3e00
[  885.786453][T20554]  __handle_mm_fault+0x103c/0x2a40
[  885.791089][T20554]  ? find_held_lock+0x2d/0x110
[  885.795408][T20554]  ? __pfx___handle_mm_fault+0x10/0x10
[  885.800354][T20554]  ? follow_page_pte+0x3c3/0x1b20
[  885.804918][T20554]  ? __pfx_lock_release+0x10/0x10
[  885.809464][T20554]  ? follow_page_pte+0x3f7/0x1b20
[  885.814014][T20554]  handle_mm_fault+0x3fa/0xaa0
[  885.818339][T20554]  __get_user_pages+0x8d9/0x3b50
[  885.822890][T20554]  ? __pfx_mt_find+0x10/0x10
[  885.827041][T20554]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  885.832123][T20554]  ? __pfx___get_user_pages+0x10/0x10
[  885.836978][T20554]  ? __mm_populate+0x21d/0x380
[  885.841295][T20554]  populate_vma_page_range+0x27f/0x3a0
[  885.846235][T20554]  ? __pfx_populate_vma_page_range+0x10/0x10
[  885.851643][T20554]  ? __pfx_find_vma_intersection+0x10/0x10
[  885.856884][T20554]  ? vm_mmap_pgoff+0x25b/0x360
[  885.861195][T20554]  __mm_populate+0x1d6/0x380
[  885.865349][T20554]  ? __pfx___mm_populate+0x10/0x10
[  885.869968][T20554]  ? up_write+0x1b2/0x520
[  885.873880][T20554]  vm_mmap_pgoff+0x293/0x360
[  885.878050][T20554]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  885.882673][T20554]  ? __x64_sys_futex+0x1e1/0x4c0
[  885.887212][T20554]  ? __x64_sys_futex+0x1ea/0x4c0
[  885.891723][T20554]  ksys_mmap_pgoff+0x7d/0x5c0
[  885.895948][T20554]  ? rcu_is_watching+0x12/0xc0
[  885.900259][T20554]  __x64_sys_mmap+0x125/0x190
[  885.904483][T20554]  do_syscall_64+0xcd/0x250
[  885.908558][T20554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.913879][T20554] RIP: 0033:0x7f9a07785d29
[  885.917874][T20554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  885.935551][T20554] RSP: 002b:00007f9a0852d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  885.943153][T20554] RAX: ffffffffffffffda RBX: 00007f9a07975fa0 RCX: 00007f9a07785d29
[  885.950339][T20554] RDX: 00000000000000e3 RSI: 0000000000400008 RDI: 0000000000000000
[  885.957533][T20554] RBP: 00007f9a07801b08 R08: 0000000000000002 R09: 0000000000008000
[  885.964716][T20554] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  885.971895][T20554] R13: 0000000000000000 R14: 00007f9a07975fa0 R15: 00007ffe6cec3e18
[  885.979101][T20554]  </TASK>
[  887.673951][T20606] netlink: 350 bytes leftover after parsing attributes in process `syz.9.2850'.
[  888.170390][   T29] audit: type=1326 audit(4294967393.288:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20621 comm="syz.0.2855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f613f785d29 code=0x0
[  889.631418][T20659] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2863'.
[  889.780970][T20686] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2867'.
[  889.819965][T20689] ovsscu9[u: entered promiscuous mode
[  889.914872][T20660] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  889.974403][T20660] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  890.029067][T20660] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  890.291761][T20660] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  890.437857][T20660] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  890.567204][T20660] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  890.655521][T20660] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  890.737858][T20660] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  890.957686][T20736] Invalid ELF header magic: != ELF
[  891.560548][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout
[  892.038366][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout
[  892.044055][T12545] Bluetooth: hci1: command 0x0c1a tx timeout
[  892.595371][T20766] Bluetooth: hci2: command 0x0c1a tx timeout
[  892.618872][T20761] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2877'.
[  894.098305][T20766] Bluetooth: hci3: command 0x0c1a tx timeout
[  894.666902][T20766] Bluetooth: hci2: command 0x0c1a tx timeout
[  895.261527][T20857] block mtdblock0: the capability attribute has been deprecated.
[  896.167809][T20766] Bluetooth: hci3: command 0x0c1a tx timeout
[  896.723809][T20766] Bluetooth: hci2: command 0x0c1a tx timeout
[  897.390898][T20943] Invalid ELF header magic: != ELF
[  897.397098][T20936] __vm_enough_memory: pid: 20936, comm: syz.4.2904, bytes: 4503599627366400 not enough memory for the allocation
[  897.473303][T20944] Invalid ELF header magic: != ELF
[  897.606336][T20945] could not allocate digest TFM handle 
[  897.789968][T20939] tipc: Started in network mode
[  897.794409][T20939] tipc: Node identity ee00, cluster identity 4711
[  897.801605][T20939] tipc: Node number set to 60928
[  898.442521][T20993] mkiss: ax0: crc mode is auto.
[  899.607809][T21029] netlink: 338 bytes leftover after parsing attributes in process `syz.9.2919'.
[  899.943528][T21043] ima: Unable to open file: /surit/Rry/integrity?iqa/policy (-2)
[  899.943939][T21042] ima: policy update failed
[  900.004763][   T29] audit: type=1802 audit(4294968428.163:25): pid=21042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2922" res=0 errno=0
[  900.204370][T21049] syz.0.2924 (21049): /proc/21048/oom_adj is deprecated, please use /proc/21048/oom_score_adj instead.
[  902.171413][T21091] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2933'.
[  902.796402][T21109] bridge0: port 3(team0) entered blocking state
[  902.826659][T21109] bridge0: port 3(team0) entered disabled state
[  902.832801][T21109] team0: entered allmulticast mode
[  902.922117][T21109] team_slave_0: entered allmulticast mode
[  902.983479][T21109] team_slave_1: entered allmulticast mode
[  902.990267][T21109] team0: entered promiscuous mode
[  903.093318][T21109] team_slave_0: entered promiscuous mode
[  903.108791][T21109] team_slave_1: entered promiscuous mode
[  903.212915][T21109] bridge0: port 3(team0) entered blocking state
[  903.218685][T21109] bridge0: port 3(team0) entered forwarding state
[  906.860360][T21182] Invalid ELF header magic: != ELF
[  907.064752][T21197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2952'.
[  908.874053][T21247] can: request_module (can-proto-3) failed.
[  909.592936][T21253] lo: entered allmulticast mode
[  909.641625][T21263] Line length is too long: Should be less than 4094
[  909.665227][T21263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2963'.
[  909.944131][T21263] smc: removing net device syz_tun with user defined pnetid ETHTOOL
[  910.021521][T21237] lo: left allmulticast mode
[  912.444665][T21307] program syz.9.2977 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  912.921321][T21315] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2978'.
[  915.015993][T21370] Invalid ELF header magic: != ELF
[  917.736026][T21417] netlink: zone id is out of range
[  920.688409][T21464] syz.9.3011: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  920.742300][T21464] CPU: 1 UID: 0 PID: 21464 Comm: syz.9.3011 Tainted: G     U             6.13.0-syzkaller #0
[  920.751532][T21464] Tainted: [U]=USER
[  920.755008][T21464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  920.764095][T21464] Call Trace:
[  920.767087][T21464]  <TASK>
[  920.769747][T21464]  dump_stack_lvl+0x16c/0x1f0
[  920.774003][T21464]  warn_alloc+0x24d/0x3a0
[  920.777948][T21464]  ? __pfx_warn_alloc+0x10/0x10
[  920.782372][T21464]  ? __get_vm_area_node+0x1b0/0x2f0
[  920.787094][T21464]  ? __get_vm_area_node+0x1dc/0x2f0
[  920.791821][T21464]  __vmalloc_node_range_noprof+0x1105/0x1530
[  920.797261][T21464]  ? __do_sys_listmount+0x1be/0xe70
[  920.801996][T21464]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  920.807735][T21464]  ? rcu_is_watching+0x12/0xc0
[  920.812067][T21464]  ? trace_kmalloc+0x2d/0xd0
[  920.816234][T21464]  ? __kmalloc_node_noprof.cold+0x5a/0x5f
[  920.821426][T21464]  ? __do_sys_listmount+0x1be/0xe70
[  920.826148][T21464]  __kvmalloc_node_noprof+0x14f/0x1a0
[  920.831030][T21464]  ? __do_sys_listmount+0x1be/0xe70
[  920.835748][T21464]  __do_sys_listmount+0x1be/0xe70
[  920.840305][T21464]  ? __pfx___might_resched+0x10/0x10
[  920.845110][T21464]  ? __pfx___do_sys_listmount+0x10/0x10
[  920.850139][T21464]  ? xfd_validate_state+0x5d/0x180
[  920.854788][T21464]  do_syscall_64+0xcd/0x250
[  920.858883][T21464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  920.864234][T21464] RIP: 0033:0x7f4c3c385d29
[  920.868240][T21464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  920.885931][T21464] RSP: 002b:00007f4c3d130038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[  920.893556][T21464] RAX: ffffffffffffffda RBX: 00007f4c3c575fa0 RCX: 00007f4c3c385d29
[  920.900766][T21464] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000020000100
[  920.908056][T21464] RBP: 00007f4c3c401b08 R08: 0000000000000000 R09: 0000000000000000
[  920.915265][T21464] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  920.922477][T21464] R13: 0000000000000000 R14: 00007f4c3c575fa0 R15: 00007ffdd228da58
[  920.929707][T21464]  </TASK>
[  920.967568][T21464] Mem-Info:
[  921.104946][T21464] active_anon:41938 inactive_anon:64 isolated_anon:0
[  921.104946][T21464]  active_file:10404 inactive_file:45096 isolated_file:0
[  921.104946][T21464]  unevictable:768 dirty:292 writeback:0
[  921.104946][T21464]  slab_reclaimable:12205 slab_unreclaimable:112979
[  921.104946][T21464]  mapped:37653 shmem:20864 pagetables:975
[  921.104946][T21464]  sec_pagetables:0 bounce:0
[  921.104946][T21464]  kernel_misc_reclaimable:0
[  921.104946][T21464]  free:1268689 free_pcp:9757 free_cma:0
[  921.278883][T21464] Node 0 active_anon:170552kB inactive_anon:256kB active_file:41616kB inactive_file:180976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130912kB dirty:1868kB writeback:0kB shmem:83820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13552kB pagetables:3900kB sec_pagetables:0kB all_unreclaimable? no
[  921.365798][T21464] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  921.458591][T21464] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  921.551027][T21464] lowmem_reserve[]: 0 2491 2492 0 0
[  921.653847][T21492] bridge0: port 3(bond0) entered blocking state
[  921.744045][T21464] Node 0 DMA32 free:1170940kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:163544kB inactive_anon:256kB active_file:41672kB inactive_file:182844kB unevictable:1536kB writepending:1112kB present:3129332kB managed:2551312kB mlocked:0kB bounce:0kB free_pcp:15136kB local_pcp:10240kB free_cma:0kB
[  921.843975][T21492] bridge0: port 3(bond0) entered disabled state
[  921.896403][T21492] bond0: entered promiscuous mode
[  921.901041][T21492] bond_slave_0: entered promiscuous mode
[  921.914921][T21464] lowmem_reserve[]: 0 0 0 0 0
[  921.919243][T21464] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  921.993060][T21464] lowmem_reserve[]: 0 0 0 0 0
[  922.053157][T21464] Node 1 Normal free:3886664kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:25920kB local_pcp:2148kB free_cma:0kB
[  922.076765][T21492] bond_slave_1: entered promiscuous mode
[  922.103624][T21464] lowmem_reserve[]: 0 0 0 0 0
[  922.107951][T21464] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  922.132167][T21464] Node 0 DMA32: 5608*4kB (UME) 2579*8kB (UME) 2261*16kB (UME) 1933*32kB (UME) 1315*64kB (UME) 708*128kB (UME) 359*256kB (UM) 128*512kB (UME) 67*1024kB (UM) 3*2048kB (UM) 158*4096kB (UM) = 1195240kB
[  922.181662][T21464] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  922.220835][T21502] netlink: 'syz.4.3020': attribute type 1 has an invalid length.
[  922.246958][T21464] Node 1 Normal: 207*4kB (UM) 76*8kB (UME) 32*16kB (UME) 157*32kB (UME) 107*64kB (UM) 35*128kB (UM) 15*256kB (UM) 4*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 941*4096kB (M) = 3886716kB
[  922.349482][T21464] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  922.384169][T21464] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  922.401438][T21464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  922.414189][T21464] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  922.514781][T21464] 72717 total pagecache pages
[  922.534953][T21464] 70 pages in swap cache
[  922.552398][T21464] Free swap  = 123180kB
[  922.576487][T21464] Total swap = 124996kB
[  922.595871][T21464] 2097051 pages RAM
[  922.618871][T21464] 0 pages HighMem/MovableOnly
[  922.640287][T21464] 427373 pages reserved
[  922.663351][T21464] 0 pages cma reserved
[  922.796056][T21497] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  922.802027][T21497] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  922.816022][T21497] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  922.885452][T21497] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  923.129554][T21521] Invalid ELF header magic: != ELF
[  923.545144][T21526] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3024'.
[  923.689619][T21526] geneve1: entered allmulticast mode
[  924.283219][T20766] Bluetooth: hci0: command 0x0c1a tx timeout
[  924.831572][T20766] Bluetooth: hci3: command 0x0c1a tx timeout
[  924.831581][T17713] Bluetooth: hci1: command 0x0c1a tx timeout
[  924.911260][T17713] Bluetooth: hci2: command 0x0c1a tx timeout
[  927.190969][T21605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3042'.
[  927.324551][T21608] netlink: 74 bytes leftover after parsing attributes in process `syz.0.3043'.
[  928.344580][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  928.350295][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  931.850436][T21683] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3059'.
[  932.584959][T21695] nfs: Unknown parameter 'w>C`_`{OI+;}a
	QvHYx :;7+OLuu>>KUuh
*`iC<+0p@['
[  932.609681][T21693] Process accounting resumed
[  933.611677][T21709] netlink: 322 bytes leftover after parsing attributes in process `syz.4.3065'.
[  934.853394][T21749] can: request_module (can-proto-3) failed.
[  935.306612][T21761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3074'.
[  938.431818][T21820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'.
[  938.451820][T21820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'.
[  938.534707][T21818] 
[  938.536856][T21818] ======================================================
[  938.543188][T21818] WARNING: possible circular locking dependency detected
[  938.549520][T21818] 6.13.0-syzkaller #0 Tainted: G     U            
[  938.555387][T21818] ------------------------------------------------------
[  938.561717][T21818] syz.9.3087/21818 is trying to acquire lock:
[  938.567195][T21818] ffff888142b10a70 (&q->q_usage_counter(io)#2){++++}-{0:0}, at: submit_bio_noacct_nocheck+0x892/0xd70
[  938.577145][T21818] 
[  938.577145][T21818] but task is already holding lock:
[  938.583782][T21818] ffff888023482040 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750
[  938.593554][T21818] 
[  938.593554][T21818] which lock already depends on the new lock.
[  938.593554][T21818] 
[  938.602931][T21818] 
[  938.602931][T21818] the existing dependency chain (in reverse order) is:
[  938.611059][T21818] 
[  938.611059][T21818] -> #4 (mapping.invalidate_lock#2){++++}-{4:4}:
[  938.618776][T21818]        down_read+0x9a/0x330
[  938.623049][T21818]        page_cache_ra_unbounded+0x173/0x750
[  938.628468][T21818]        page_cache_ra_order+0x8f2/0xc80
[  938.633571][T21818]        page_cache_async_ra+0x5cb/0x8a0
[  938.638755][T21818]        filemap_fault+0xd69/0x2820
[  938.643471][T21818]        __do_fault+0x10a/0x490
[  938.647892][T21818]        do_pte_missing+0xebd/0x3e00
[  938.652686][T21818]        __handle_mm_fault+0x103c/0x2a40
[  938.657795][T21818]        handle_mm_fault+0x3fa/0xaa0
[  938.662602][T21818]        __get_user_pages+0x8d9/0x3b50
[  938.667555][T21818]        get_dump_page+0xff/0x230
[  938.672120][T21818]        dump_user_range+0x135/0x8c0
[  938.676920][T21818]        elf_core_dump+0x2787/0x3880
[  938.681705][T21818]        do_coredump+0x2dd5/0x43e0
[  938.686420][T21818]        get_signal+0x23f3/0x2610
[  938.690974][T21818]        arch_do_signal_or_restart+0x90/0x7e0
[  938.696481][T21818]        irqentry_exit_to_user_mode+0x13f/0x280
[  938.702250][T21818]        asm_exc_page_fault+0x26/0x30
[  938.707125][T21818] 
[  938.707125][T21818] -> #3 (&mm->mmap_lock){++++}-{4:4}:
[  938.713966][T21818]        __might_fault+0x11b/0x190
[  938.718593][T21818]        _copy_from_user+0x29/0xd0
[  938.723232][T21818]        __blk_trace_setup+0xa8/0x180
[  938.728098][T21818]        blk_trace_setup+0x47/0x70
[  938.732728][T21818]        sg_ioctl+0x7a3/0x26b0
[  938.737063][T21818]        __x64_sys_ioctl+0x190/0x200
[  938.741847][T21818]        do_syscall_64+0xcd/0x250
[  938.746404][T21818]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.752215][T21818] 
[  938.752215][T21818] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}:
[  938.759289][T21818]        __mutex_lock+0x19b/0xa60
[  938.763839][T21818]        blk_register_queue+0x13c/0x4f0
[  938.768851][T21818]        add_disk_fwnode+0x785/0x1300
[  938.773701][T21818]        brd_alloc.isra.0+0x50a/0x7c0
[  938.778575][T21818]        brd_init+0x12b/0x1d0
[  938.782821][T21818]        do_one_initcall+0x128/0x630
[  938.787617][T21818]        kernel_init_freeable+0x58f/0x8b0
[  938.792801][T21818]        kernel_init+0x1c/0x2b0
[  938.797207][T21818]        ret_from_fork+0x45/0x80
[  938.801681][T21818]        ret_from_fork_asm+0x1a/0x30
[  938.803729][T21835] Unable to find swap-space signature
[  938.806458][T21818] 
[  938.806458][T21818] -> #1 (&q->sysfs_lock){+.+.}-{4:4}:
[  938.806491][T21818]        __mutex_lock+0x19b/0xa60
[  938.806521][T21818]        queue_attr_store+0xe2/0x170
[  938.806545][T21818]        sysfs_kf_write+0x117/0x170
[  938.806573][T21818]        kernfs_fop_write_iter+0x33d/0x500
[  938.806606][T21818]        vfs_write+0x5ae/0x1150
[  938.806630][T21818]        ksys_write+0x12b/0x250
[  938.806654][T21818]        do_syscall_64+0xcd/0x250
[  938.806682][T21818]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.806713][T21818] 
[  938.806713][T21818] -> #0 (&q->q_usage_counter(io)#2){++++}-{0:0}:
[  938.806752][T21818]        __lock_acquire+0x249e/0x3c40
[  938.868981][T21818]        lock_acquire.part.0+0x11b/0x380
[  938.874071][T21818]        __submit_bio+0x49c/0x540
[  938.878607][T21818]        submit_bio_noacct_nocheck+0x892/0xd70
[  938.884158][T21818]        submit_bio_noacct+0x93a/0x1e20
[  938.889174][T21818]        mpage_readahead+0x41d/0x590
[  938.893945][T21818]        read_pages+0x1a8/0xdc0
[  938.898333][T21818]        page_cache_ra_unbounded+0x3dc/0x750
[  938.903721][T21818]        page_cache_ra_order+0x8f2/0xc80
[  938.908798][T21818]        page_cache_sync_ra+0x4b4/0x9c0
[  938.913799][T21818]        filemap_get_pages+0xd7b/0x1be0
[  938.918801][T21818]        filemap_splice_read+0x5cc/0xd00
[  938.923884][T21818]        do_splice_read+0x282/0x370
[  938.928564][T21818]        splice_file_to_pipe+0x109/0x120
[  938.933644][T21818]        do_sendfile+0x3fd/0xe30
[  938.938095][T21818]        __x64_sys_sendfile64+0x1da/0x220
[  938.943253][T21818]        do_syscall_64+0xcd/0x250
[  938.947784][T21818]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.953572][T21818] 
[  938.953572][T21818] other info that might help us debug this:
[  938.953572][T21818] 
[  938.962772][T21818] Chain exists of:
[  938.962772][T21818]   &q->q_usage_counter(io)#2 --> &mm->mmap_lock --> mapping.invalidate_lock#2
[  938.962772][T21818] 
[  938.976094][T21818]  Possible unsafe locking scenario:
[  938.976094][T21818] 
[  938.982791][T21818]        CPU0                    CPU1
[  938.987622][T21818]        ----                    ----
[  938.992447][T21818]   rlock(mapping.invalidate_lock#2);
[  938.997293][T21818]                                lock(&mm->mmap_lock);
[  939.003465][T21818]                                lock(mapping.invalidate_lock#2);
[  939.010497][T21818]   rlock(&q->q_usage_counter(io)#2);
[  939.015351][T21818] 
[  939.015351][T21818]  *** DEADLOCK ***
[  939.015351][T21818] 
[  939.022678][T21818] 2 locks held by syz.9.3087/21818:
[  939.027355][T21818]  #0: ffff888028989068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80
[  939.035218][T21818]  #1: ffff888023482040 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750
[  939.045352][T21818] 
[  939.045352][T21818] stack backtrace:
[  939.050654][T21818] CPU: 1 UID: 0 PID: 21818 Comm: syz.9.3087 Tainted: G     U             6.13.0-syzkaller #0
[  939.059801][T21818] Tainted: [U]=USER
[  939.063221][T21818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  939.072271][T21818] Call Trace:
[  939.075228][T21818]  <TASK>
[  939.077872][T21818]  dump_stack_lvl+0x116/0x1f0
[  939.082095][T21818]  print_circular_bug+0x41c/0x610
[  939.086637][T21818]  check_noncircular+0x31a/0x400
[  939.091099][T21818]  ? __pfx_check_noncircular+0x10/0x10
[  939.096025][T21818]  ? __bfs+0x2fa/0x670
[  939.099698][T21818]  ? __pfx_hlock_conflict+0x10/0x10
[  939.104389][T21818]  ? lockdep_lock+0xc6/0x200
[  939.108530][T21818]  ? __pfx_lockdep_lock+0x10/0x10
[  939.113068][T21818]  __lock_acquire+0x249e/0x3c40
[  939.117446][T21818]  ? __pfx___lock_acquire+0x10/0x10
[  939.122191][T21818]  lock_acquire.part.0+0x11b/0x380
[  939.126808][T21818]  ? submit_bio_noacct_nocheck+0x892/0xd70
[  939.132054][T21818]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  939.137130][T21818]  ? rcu_is_watching+0x12/0xc0
[  939.141430][T21818]  ? trace_lock_acquire+0x14e/0x1f0
[  939.146118][T21818]  ? submit_bio_noacct_nocheck+0x892/0xd70
[  939.151360][T21818]  ? lock_acquire+0x2f/0xb0
[  939.155500][T21818]  ? submit_bio_noacct_nocheck+0x892/0xd70
[  939.160742][T21818]  __submit_bio+0x49c/0x540
[  939.164809][T21818]  ? submit_bio_noacct_nocheck+0x892/0xd70
[  939.170051][T21818]  ? __pfx___submit_bio+0x10/0x10
[  939.174585][T21818]  ? trace_lock_acquire+0x14e/0x1f0
[  939.179278][T21818]  ? submit_bio_noacct_nocheck+0x892/0xd70
[  939.184526][T21818]  submit_bio_noacct_nocheck+0x892/0xd70
[  939.189609][T21818]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  939.195162][T21818]  ? __pfx___might_resched+0x10/0x10
[  939.199925][T21818]  ? __pfx_xa_load+0x10/0x10
[  939.204072][T21818]  submit_bio_noacct+0x93a/0x1e20
[  939.208609][T21818]  mpage_readahead+0x41d/0x590
[  939.212916][T21818]  ? __pfx_mpage_readahead+0x10/0x10
[  939.217704][T21818]  ? __pfx_blkdev_get_block+0x10/0x10
[  939.222548][T21818]  ? __folio_batch_add_and_move+0x5f3/0xc60
[  939.227866][T21818]  ? __pfx_lock_release+0x10/0x10
[  939.232393][T21818]  ? __pfx_blkdev_readahead+0x10/0x10
[  939.237234][T21818]  read_pages+0x1a8/0xdc0
[  939.241138][T21818]  ? __folio_batch_add_and_move+0x689/0xc60
[  939.246454][T21818]  ? __folio_batch_add_and_move+0x612/0xc60
[  939.251768][T21818]  ? __pfx_read_pages+0x10/0x10
[  939.256143][T21818]  ? find_held_lock+0x2d/0x110
[  939.260445][T21818]  page_cache_ra_unbounded+0x3dc/0x750
[  939.265374][T21818]  page_cache_ra_order+0x8f2/0xc80
[  939.269987][T21818]  page_cache_sync_ra+0x4b4/0x9c0
[  939.274526][T21818]  filemap_get_pages+0xd7b/0x1be0
[  939.279058][T21818]  ? hlock_class+0x4e/0x130
[  939.283124][T21818]  ? __pfx_filemap_get_pages+0x10/0x10
[  939.288055][T21818]  ? __pfx___might_resched+0x10/0x10
[  939.292818][T21818]  filemap_splice_read+0x5cc/0xd00
[  939.297435][T21818]  ? find_held_lock+0x2d/0x110
[  939.301735][T21818]  ? __pfx_filemap_splice_read+0x10/0x10
[  939.306816][T21818]  ? __pfx___mutex_trylock_common+0x10/0x10
[  939.312126][T21818]  ? pipe_lock+0x64/0x80
[  939.315965][T21818]  ? trace_lock_acquire+0x14e/0x1f0
[  939.320656][T21818]  ? lock_acquire+0x2f/0xb0
[  939.324710][T21818]  ? __fget_files+0x40/0x3a0
[  939.328857][T21818]  ? __pfx_filemap_splice_read+0x10/0x10
[  939.333942][T21818]  do_splice_read+0x282/0x370
[  939.338160][T21818]  splice_file_to_pipe+0x109/0x120
[  939.342773][T21818]  do_sendfile+0x3fd/0xe30
[  939.346758][T21818]  ? __pfx_do_sendfile+0x10/0x10
[  939.351236][T21818]  ? __x64_sys_futex+0x1e1/0x4c0
[  939.355698][T21818]  ? __x64_sys_futex+0x1ea/0x4c0
[  939.360157][T21818]  __x64_sys_sendfile64+0x1da/0x220
[  939.364848][T21818]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  939.370017][T21818]  do_syscall_64+0xcd/0x250
[  939.374398][T21818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.379716][T21818] RIP: 0033:0x7f4c3c385d29
[  939.383695][T21818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  939.401361][T21818] RSP: 002b:00007f4c3d130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  939.408963][T21818] RAX: ffffffffffffffda RBX: 00007f4c3c575fa0 RCX: 00007f4c3c385d29
[  939.416153][T21818] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001
[  939.423344][T21818] RBP: 00007f4c3c401b08 R08: 0000000000000000 R09: 0000000000000000
[  939.430526][T21818] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000
[  939.437707][T21818] R13: 0000000000000000 R14: 00007f4c3c575fa0 R15: 00007ffdd228da58
[  939.444896][T21818]  </TASK>