last executing test programs: 4m18.906949963s ago: executing program 0 (id=1355): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0x4, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0xfffffffffffffffe, 0x7, 0x6, 0x7f, 0x400, 0x1, 0xa, 0x4, 0x200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x42, 0xfffffffffffffffe, 0x4, 0x7, 0x0, 0x8, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0x83, 0x1, 0x6, 0x0, 0x0, 0x7, 0x6, 0x3, 0x3]}, 0x1fe, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async) setfsuid$auto(0xee01) (async) msgctl$auto_MSG_STAT_ANY(0x762a, 0xd, &(0x7f0000000680)={{0x2, 0xee01, 0x0, 0x4, 0x8, 0x1, 0xb280}, &(0x7f0000000600)=0x2, 0x0, 0x7, 0x7, 0x9, 0x2, 0x2, 0x3, 0x12, 0x9a, @raw=0x7}) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'gretap0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x33, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x800) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r4, 0x3) bpf$auto(0xffffffff, 0x0, 0x6f3) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x4004000) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) (async) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) (async) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) (async) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x2, 0xffffffffffffffff, r2, r3, 0x1) (async) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) (async) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) 4m18.360442729s ago: executing program 0 (id=1356): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x1, &(0x7f0000000000)=',#+!\\\x00', 0x39c2) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) msgctl$auto_MSG_STAT(0x6, 0xb, &(0x7f00000001c0)={{0x7ff, 0xee00, 0x0, 0x8, 0x8, 0x7a, 0x127}, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x9, 0x518, 0x7, 0x0, 0x100, 0x9, 0xfffa, 0x8, 0xc58a, @raw=0xf2df}) sendmsg$auto_NFC_CMD_SE_IO(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x84, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0x3a, 0x1f, "0774bb5340b769dca50c50a6cf95a91d11e1be8daa89b3cf92c5aace86e26f57e7ea7183085d03f19fca8f0383d38cb6bc892437088f"}, @NFC_ATTR_LLC_SDP={0x24, 0x13, 0x0, 0x1, [@nested={0x14, 0xe8, 0x0, 0x1, [@typed={0x8, 0x11b, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0xfc, 0x0, 0x0, @uid=r2}]}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x7}]}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x7}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\''}]}, 0x84}, 0x1, 0x0, 0x0, 0x400c801}, 0x5) sendmsg$auto_NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000a02}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x80000000}, @NFC_ATTR_VENDOR_DATA={0x63, 0x1f, "bd288ec94e898e3a6c4e58a722e078b07f0a5efd249c588032a224cd7338b6325445984cb4ca9e98a5ff54c6d746ef4e4bba27f154a2c272eb01af6cebd1ac191c43a2a9070e6cce5f91f8b11428f2480924b7c2296747d00b7f3fe2231c2e"}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x9}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0xf}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 4m17.989569359s ago: executing program 0 (id=1357): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) mmap$auto(0x5, 0x4020009, 0x9, 0xeb1, r0, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r2 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x80402, 0x0) fsconfig$auto_SHMEM_HUGE_ADVISE(r2, 0x8, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', &(0x7f0000000140)="d33e126382c1ed677a2b5744f5e7af17df87cc29239cbe9abdfcc2eca5", 0x3) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) ioctl$auto_FS_IOC_SETFLAGS2(0xffffffffffffffff, 0x40086602, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(r0, &(0x7f0000000400)={0x0, 0x4000000003d}, 0x6) (async, rerun: 64) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) (rerun: 64) ppoll$auto(&(0x7f00000002c0)={r3, 0x101, 0x2}, 0x6, 0x0, 0x0, 0x8) (async) semctl$auto_SETALL(0x0, 0xc, 0x11, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async, rerun: 64) syz_clone(0x8000000, &(0x7f0000000000)="c0ba79a4aebfb004012460df", 0xc, 0x0, &(0x7f0000000080), 0x0) (async, rerun: 64) madvise$auto(0x0, 0x200007, 0x19) 4m16.388771082s ago: executing program 0 (id=1363): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000040)={0x400, 0x8, 0xff, 0x4, 0x9, 0xffffffffffffffff}) waitid$auto_P_PID(0x1, r0, &(0x7f00000002c0)={@_si_pad}, 0xc, &(0x7f00000003c0)={{0xfffffffffffffffb, 0xfffffffffffffffa}, {0x0, 0x40004000}, 0x5, 0x5, 0x6, 0x5, 0x81, 0xfffffffffffffffb, 0x9, 0x200000000006, 0x4, 0x0, 0x7ff, 0x4b83a5f6, 0x3, 0xf9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop3\x00', 0x14000, 0x0) ioperm$auto(0x800, 0x5, 0xd) setxattrat$auto(r1, 0x0, 0xa, 0x0, 0x0, 0x1) r2 = socket(0x1e, 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="100029bd7000fedbdf650400000008001301ac0f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000881}, 0x20000014) unshare$auto(0x40000080) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(r1, r2) r5 = socket(0x8, 0x2, 0x2) splice$auto(0x4, 0x0, r5, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x8000000037, 0x0, 0x5, 0x9, 0xffffffffffffffff, 0x6, 0x5852}, 0x1b) 4m1.102910965s ago: executing program 32 (id=1363): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000040)={0x400, 0x8, 0xff, 0x4, 0x9, 0xffffffffffffffff}) waitid$auto_P_PID(0x1, r0, &(0x7f00000002c0)={@_si_pad}, 0xc, &(0x7f00000003c0)={{0xfffffffffffffffb, 0xfffffffffffffffa}, {0x0, 0x40004000}, 0x5, 0x5, 0x6, 0x5, 0x81, 0xfffffffffffffffb, 0x9, 0x200000000006, 0x4, 0x0, 0x7ff, 0x4b83a5f6, 0x3, 0xf9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop3\x00', 0x14000, 0x0) ioperm$auto(0x800, 0x5, 0xd) setxattrat$auto(r1, 0x0, 0xa, 0x0, 0x0, 0x1) r2 = socket(0x1e, 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="100029bd7000fedbdf650400000008001301ac0f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000881}, 0x20000014) unshare$auto(0x40000080) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(r1, r2) r5 = socket(0x8, 0x2, 0x2) splice$auto(0x4, 0x0, r5, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x8000000037, 0x0, 0x5, 0x9, 0xffffffffffffffff, 0x6, 0x5852}, 0x1b) 2m52.158887733s ago: executing program 2 (id=1625): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1241000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) r1 = socketcall$auto(0x2, &(0x7f0000000140)=0x3) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x18203, 0x0) sendmsg$auto_NL80211_CMD_START_NAN(r1, &(0x7f0000000680)={&(0x7f00000001c0), 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x420, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_CSA_IES={0x3ef, 0xb9, 0x0, 0x1, [@typed={0xc, 0x47, 0x0, 0x0, @u64=0x2}, @generic="7ee6af69e37abdf1e88639830fcbe451bf6ed2844b4d26ce77df30e9c0983de9bdbbede0a17f009b16027ac4a94c689f6c755b2eb07629fe545128909f0a609d5a71840f3659ed91f1c58d54497fd38b91d80de222b127e1a5d53ceec4720c8d0e99191a9088cb9dd564a088232cbd7e4c59878ba75067819a35c1eb479f7cc2e3de4cce615725fa94c6d1069a3b5b4fd742dbe7ae8c52ac09f592d2ba827675e19d9b40b3f1d6d14666ef6bb17fba05fd7e", @generic="27ee72f35badaccb2788d8e1e80c4568849dbb1a46a1525223ba983d91a17c0d5866b0aae07982d716f9c23f71308c3a203fa7e4d69594109204ad5b32b11f576c9bf033983d0ca4a6648d66cf83fafcf0c25e907af8e4e048b8cf859eae9809257a4bc19a5ecaca77fd6c", @typed={0x8, 0x120, 0x0, 0x0, @fd=r1}, @generic="9637cf5b80174354d884ac3c1d3162a429f22139e108fb9a4781fe262f14b42dd6481456c35c34394a586f3d9d8b599a0635a161d15ba4a0e2d1ce306beb4f4c8ca60869f309f00a7978f11eaee530de86b1aa04e3c0c92d4dca9ed9b2b0ac1ffb1d6cc46f488b371eb19378e1c6a475b2db6f8a30a4b310ef691e7bd4bc17dd4e848fea0ee6237c6d78090dd8034a7d627281ae8ae1bae593a79a4a36561cb791ada8797da1ff8b871ff88a71ff4ec713f1549b8cb8bfdeccbd2dc72b7c09e2f23c97b8e4d0b25d8d5744007c28001ba8031e05fab370b88a0f78dbfc05a30d0168be82faaec8bf9572", @typed={0x14, 0xc3, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x8, 0x33, 0x0, 0x1, [@nested={0x4, 0x11}]}, @typed={0xa2, 0x12b, 0x0, 0x0, @binary="884d5dd58a5df9ffe5d698f82eebc8319a90476cff1e9b18de1021d7a6c0d5ac8092bb1b3cdecc8f8a1e4b8dcf4d27bd0be4b8b33d7219e56779dc96a7088505fb2d7460d38eeb240f5dc1e7060d8d0f3251c4920a0aa9436b85c4e8559c948144c71e68261d7c78b895ee4c9fa8eb59f38a96095039ebc4639464aa9ae5e30cb77076295a61558b799704b874dd8c426f4a843b3be7d7f63a6659aeda1a"}, @typed={0x8, 0x112, 0x0, 0x0, @fd=r2}, @nested={0x108, 0x12a, 0x0, 0x1, [@typed={0x14, 0x35, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="60e8426e28aabd8204234c00ec792eb0f5d7c89508cd9ebbc7deae7a6f79b09390ced29164fb999ff9ab0f142a2e868640efada303baf865810044dd32f682e97c7ce887deed2bfe1880313e1e422d7e9d936ea11ea9368accf95a11e3fd8bd1851ee2346e2b2d9f3736bf32258b5984d7bb303523061c833d22270c8bc21f550298db81c09929bfe703280ea7558c11542311efbe4e22e3d38f86fedc637ae7e0f7de5eef8b3ef553a06bbf4af8ecace3a3e53bd846b1554dfc7ba083c82b0a7249c542314b8fe8f07839a37624002f3d294424b3914a50b2b8d5bb5aed7a4fd7010ace61b6894a2aeee27062ab73bd"]}]}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xe}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x420}, 0x1, 0x0, 0x0, 0x40004}, 0x1) r3 = clone3$auto(&(0x7f00000006c0)={0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x7, 0x5, 0x9, 0x7fffffffffffffff, 0x4}, 0x61c7) r4 = fcntl$auto(r1, 0x401, r3) read$auto_null_fops_mem(r4, &(0x7f0000000740)=""/61, 0x3d) mmap$auto(0x9, 0x1, 0xffffffffffff8f7b, 0x12, r1, 0xfffffffffffffff8) shmctl$auto_SHM_STAT_ANY(0x401, 0xf, &(0x7f0000001880)={{0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x85b8, 0x401, 0x6}, 0x6, 0x621, 0x200, 0x7f14, @raw=0xff, @raw=0x7, 0xda, 0x0, &(0x7f0000000780)="55452b6f78d78c17c38184e15fbf5f02ad1e7ba400aa68f46c67a8f4e0e288cb71db2b3ed36e482390f9d44b908534d7346052fc16d266fd51b205b4083dca32cf4628f147a046caafd145c7356a01429c3993bc4ba42dea577965e9c153aecbadf6ea6ec599c0c948f0294ffa1792d6d987bfc6570936ba71e0fe54e0b085f8eb942c1465f37a2c51313e83f7f6991ff205568e3ae911114cb7ce2bde83a7490177da373db04d646ff54741e133f79b5f32fb6454bba58341e061133b7a33f1b02b5fd0a0067476398e", &(0x7f0000000880)="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"}) shmctl$auto_SHM_INFO(0x5, 0xe, &(0x7f0000001980)={{0x0, 0xee00, r5, 0xffffffff, 0x3, 0x6, 0x3}, 0x8, 0xffffffffffff58c7, 0xde, 0x10, @inferred=r3, @raw=0x2, 0x1, 0x0, &(0x7f0000001900), &(0x7f0000001940)="dae728c30ed4747d58baab6e9a597311665d8ae11eaf5015cd8f3f30710acd604dabf5011c088ae5a6814fe72a8429f15bbb72b7829487ed8d14e4"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001a40), r4) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x24, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_SCOPE={0x6, 0x4, '\'\x00'}]}, 0x24}}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r4) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r8, &(0x7f0000001d40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x104, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xea, 0x2, "d99ddeec3657fa82f232d06b53399d9b586d64d59bb3310a9a941cf2b760655ad140b8bd3e2eb659e67f91ed006770371fed7200ad6319872fa78364e46948c46bf502bb6026a3c1afc8b08921a5aff014ee08b128923436069f87a359c07270413058449d1d43da84362185eab1cc0245c1994bbe421a450e94dc2bb76325b9d9953456770c809baf6daea03a46a4d3af62e1dd2fdf54f799bfdf8760d7908bb4f83e33f92495cdd74c3fb665caec006ea10caa74ab869761198786aa0f5d73452b0ad6b1d7cba236bdf351ee83c7d7043cefb06e591f11da686c33ea953edbcd9ee65e3261"}]}, 0x104}, 0x1, 0x0, 0x0, 0x40084}, 0x800) getgroups$auto(0x6, &(0x7f0000001d80)) r10 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001dc0), 0x48c0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r10, 0xc008aec1, &(0x7f0000001e00)={0x9, 0x0, [{0x6, 0x699, 0x179, 0x2, 0xf, 0x7, 0x7}, {0x3, 0x1, 0x8, 0xe3ff, 0x1, 0x380, 0x9}, {0x9, 0x101, 0x3, 0x8e, 0x80, 0x5, 0x1400}, {0x52f, 0xe3, 0x0, 0x4, 0x6, 0xfb8, 0x8}]}) setsockopt$auto(r1, 0x7fff, 0x1, &(0x7f0000001ec0)='nfsd\x00', 0xffff) r11 = prctl$auto_PR_SET_SECCOMP(0x16, 0x3, 0x100, 0x8, 0xf3f4) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r11, &(0x7f0000001f00)=""/242, 0xf2) mbind$auto(0x8, 0x9, 0x100000000, &(0x7f0000002000)=0xb, 0xfff, 0x100) write$auto_proc_oom_score_adj_operations_base(r4, &(0x7f0000002040)="e4c0ef612933d307b4c63ed33e8cfd8ede2106443b2dc99e0684b9e97f632c66b7c2d464837af66a16493c628f93290c1c13a2dc5a185dcb25ae48604ef986c028e0d5eeea78824abbe8c865d247d89880a5ef7658ac4a45c303f7edaad74c6f34d09de7f6", 0x65) ppoll$auto(&(0x7f00000020c0)={r6, 0x0, 0x7}, 0x7, &(0x7f0000002100)={0x8, 0x3}, &(0x7f0000002140)={0x81}, 0x8) r12 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000021c0), r1) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, r12, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0xca}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10044040}, 0x240088c4) r13 = pidfd_getfd$auto(r1, r8, 0x1000) ioctl$auto_CEC_RECEIVE(r13, 0xc0386106, &(0x7f00000022c0)={0x6, 0x6, 0x1, 0x6, 0x8, 0x742d, "02759f77d5f9cccb3be656023755b876", 0x7, 0x3, 0x1, 0x7, 0xa, 0x38, 0x1}) 2m51.147185026s ago: executing program 2 (id=1629): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb4, r0, 0x7) (async, rerun: 64) setrlimit$auto(0x8, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={0x0}}, 0x4040850) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000440)={0x304, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x2e4, 0x4, 0x0, 0x1, [@nested={0x4, 0x45}, @typed={0x4, 0xdf}, @nested={0x2cf, 0x107, 0x0, 0x1, [@nested={0xf5, 0xf3, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x4, 0x103}, @generic="4feb97a976e914bb133f5a2d6ae41c0f84266dd968a36be1d3b51b9b77bf9ccfa2a35897816b375f5a85003d3749d668101014701496ab6645eeed16b9c3de8f7c964faf12b7916761590804ec030e82b3332a8675d03b260cbd59e3cc2bb8f9784f38aeacee190cf48064211220e320a79e54c13e0a08565221593eb779539688168498aef2a86952d100a6fe7c641665d9b6fdc8ac33bfa9b96ea78974c5f9749296dbc3b021a4a201b21f7ac74eb21cd81d893edefdf3b899ca64ab0213b2d15d621dc7346cec4da620b39063fa32741ea67669fd05b22cc4b7d88630d681794f3f1761", @nested={0x4, 0x1f}]}, @generic="9a16108ff4f4aabfc5898b43bdf0ec0e2ecf6147d49d09facdb0690e2bc61de6b5d7cb6e4426e794c5256c442140699fbf8f8d2bf732a368860abe9e6fd7228e3b52e832497be44dc5c577a2b0d51f8536060c596365f5712238841c0e61694ddcd4394e3d621ac25dd93fc316b955d589febc4b74b2a431745845752e61f5b7bf8156dccab4e9a510e0bd259e57fc32e025897c5575c2c173ec42bef06c98a27cfacf7396a19ffa4fb344eebe966e0f6be5ef280e28dc8296aa27f1790490c0b5be9ed9a49ce686dae2b5e81d5e13f57f048ca144cbc7b51a", @typed={0xff82, 0xc5, 0x0, 0x0, @fd=r1}, @generic="ac82f2f5073b8f23772a27b17fd9c2b21f3ec6af076afb89543cdf9c1efed656aefa82824009b053ec330ba1dfe11a3ddaa38ebc66a44abb9c4960068df61418571322c5a5a1f972ed541823dec50dcd6828591b297c5a897b1e26a7b747e7e0a158ddea4e921f7a89a2c789bad0bd7891cbbc86af29c40f06cf037a8849e38add30f6348009144935c766d5ea754a01e2d82313f4d5e719d2074844fa7daa7a29ea3ed6c848623cc98dbec38a806df878e4368e9e93e516b337d19e8d2a2d062ca0900092244cb27fa69990e088ce96c9a40a78b06e8be26ac0f1531eb3d8512557c155b2f9f31ba2a35a94a298eaa0cedd"]}, @typed={0x8, 0xa3, 0x0, 0x0, @uid}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x304}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap$auto(0x7fffffffe000, 0x61, 0x100001000000004, 0xfa31, 0x403, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyyc\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) getsockopt$auto_SO_TIMESTAMPING_OLD(r3, 0x8, 0x25, &(0x7f0000000140)='\x00', &(0x7f0000000180)=0x401) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x7fff, 0x8000000000000000, 0x0) fcntl$auto(0x0, 0x407, 0x1) (async, rerun: 64) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, &(0x7f0000000080)="4bb7aa8264d36ec3970d0c8336fdf3ea2dd7636a28bd1487d99e4a1e9a193a487db8c5a2e7b2fa6d549f86334e6461001ffc76df44bdd4421dfc29fa8b906f5a43a658bc81189f779d67acc88de112363d4755") (async, rerun: 64) socket(0x2, 0x1, 0x6) syslog$auto_SYSLOG_ACTION_READ(0x2, 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), r4) (async, rerun: 64) socket(0x2, 0x1, 0x106) (rerun: 64) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) (async) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r6 = socket(0x2, 0x1, 0x106) shutdown$auto(r6, 0x8) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 2m49.556852872s ago: executing program 2 (id=1634): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) write$auto(r0, 0x0, 0x0) getsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x2, 0x43, &(0x7f0000000200)='SMC_GEN_NETLINK\x00', &(0x7f0000000240)=0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_add_watch$auto(r0, &(0x7f0000000100)='./file0\x00', 0x280) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x8000006, 0x4, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x77fffffb, 0x101, 0xb0d, 0x3}, {0x100, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0xb, 0x100000000}}) r1 = socket(0x2, 0x5, 0x0) getsockopt$auto_SO_LOCK_FILTER(r1, 0x0, 0x2c, 0x0, &(0x7f0000000100)=0x8) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) r3 = socket(0xa, 0x1, 0x84) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000000c0), r3) sendmsg$auto_SMC_NETLINK_GET_LGR_SMCR(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000829bd7000fedbdf250200000023eb0f98e83ab6fa41d3bdcbc4ffb2711fc2bb39d343a5c148f61b79bea9da3fb3fcabeb6f62469a4ca9abee0055c17772c665c4c270d5b7413c0fcc4f29e40b8000244804f132154848a8ae6972f18bf37db6825da648eb14371a584e028fa74ecc02adfb000000a6ca429ececeda5012c9b010"], 0x7c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) connect$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x2}}, 0x54) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) 2m49.13809088s ago: executing program 2 (id=1637): close_range$auto(0xffffffffffffffff, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(r3, &(0x7f0000000140)={0x0, 0x22000008}, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x8, 0x1, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r4, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f00000005c0)="2f34b2626eecd5d362d4f4ce77bca69ad3688b505465bfaf70eab515d26037f246bc757eb69b598f9e3b8ce5561ea5dd5ecb155f037b8bdf05587605acb72a4d69bc65e839af8687af6579daff7aa45e71ad3552d1108e48179c611c01074603283470c0cf725831b934ed9034a04c1c9d15cf99b59a51d609b7e294d6834d2437d866705a6aa63a3b289971a673a9d6c0b315b6dee8df7f7d22d0d4bab624af8a897b7bd03a66e6") ioctl$auto(0xc8, 0x800454e1, 0x5c8d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2m38.59628799s ago: executing program 3 (id=1685): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000002c0)={0x74, 0x1, 0x401, 0x1ff, &(0x7f0000000180)="79dd5d1ee26c9b39d800c4e3e192ffef3081359c985a1a6ff5a27bf3fc10caef7fcc3d62f965bc3530b8f332a2a2494b547cd0a84eae81676fa08041bb8fd8724af33a9633491d2544177c4542e4a3a2c9754f77ef55d1c274989b96eb3e11504ba451a24a60413dd9204aed4a9b55899e0a5baf069b5f7f7ac3ea26145336d8ca3eff3e4ce2dd789dc880a0d7b890311b0827f37c1b812d2c7d3216753451808ebdd961ff72ec1ce87c84a5e08efcba1a849aa8ba594d9d3986a5ff65afd8bdf0d4dd4c5abe90b63d2d1c83c08f946a5f4a640de378c17e30172b7d3f393bfa4c055f6eae64ef55e4f14e", 0x25649c0a, 0x4, 0x7fffffff, @number_of_packets=0xfff, 0x0, 0x8, &(0x7f0000000280)="8ec01466c273d81585c7c362d4a9c5c4fd191f1d", [{0x8b25, 0x400, 0x8}, {0x400, 0x9, 0x2}, {0xffffff8a, 0x9, 0x6}, {0x2, 0x96, 0x8}, {0x6, 0x7, 0x1}, {0xd, 0x0, 0x5}, {0x1, 0x80000000, 0x6}, {0xfffffc00, 0x1ff, 0x1}]}) socket(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101140, 0x0) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/358, @ANYRES16=0x0, @ANYBLOB="3b0727bd7000fddbdf2503000000"], 0xffcc}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x800, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r4 = semctl$auto(0x36000, 0x5, 0x799a, 0x7540) move_pages$auto(r4, 0x7, &(0x7f00000003c0)=&(0x7f0000000280)="3dc780d153032759044b61a80a01d0eae985436975538882b1903051566ff504a9518130eda36c831dbdd46d5a68d93e69885608a21ba36d04b2601437cffc9897516ea8f5038ddf04972c39e0e1006e6eb0ea34e417961d722f8c797e4078685f23716805deac45ab2dcb0ebcda8dff7d2b87ae4c52d6207ba491194d5b77f9ecb1acb701992881a181828731791c91200df9f9be1fc41d12eaa54be1537cde1dbeb472c61de3f207435032613c9a4b3672a29db80ab77cc7f1943628e650445c05fd44b088cbd5194b00", 0x0, &(0x7f0000000440)=0x17ae77a0, 0xd) mremap$auto(0x204002, 0x7, 0x3fd6, 0x3, 0x200000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x6}, @NL80211_ATTR_FILS_KEK={0x1e, 0xf2, "ea676a053cf9c397cccecb756ef0574bf31ab2e2290d7f194499"}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0x18, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_NO_VIF={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x2, 0x0) 2m38.179444917s ago: executing program 3 (id=1688): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, 0x0, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0x16, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x3, 0x200000000005, 0x7, 0x7, 0x0, 0x80000000000000, 0xc, 0x6, 0x0, 0xb82, 0xe34c, 0x8000, 0x3, 0xfffffffffffff954, 0xfffffffffffffff4, 0xfff]}, 0x0, &(0x7f0000000080)={0x80000000000201, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0xe01, 0x0) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) write$auto(0xffffffffffffffff, &(0x7f0000001440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xb8\xc0\x1f\xe6\x9f\x9cy\xa9\xad\x96\x19Fy\x11}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdf\x17\xe4\xcbA\xa5[\x1aG\xa6\x94\xe0\xdf\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(W| \xce\xcc\xdd%\xcf\xab\xa8\xafhM\x0f%\xc4C9~\xfe\x02]\xedVfQ', 0xf) write$auto(r1, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x9b2, 0x400007, 0xdd, 0x9b72, 0x2, 0x8000) 2m37.262265392s ago: executing program 3 (id=1693): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) (async) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) (async) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) (async) r1 = open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'nr0\x00'}) (async, rerun: 64) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) open(0x0, 0x0, 0x408) (async, rerun: 64) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async, rerun: 64) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) eventfd$auto(0x7) (async, rerun: 32) lseek$auto(0x3, 0x8, 0x3) (rerun: 32) sendmsg$auto_TCP_METRICS_CMD_DEL(r2, 0x0, 0x40) (async) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x64004401}, 0x800) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000) landlock_restrict_self$auto(r5, 0x1) bpf$auto(0xfffffffd, &(0x7f0000000580)=@link_detach={r5}, 0x6f4) (async) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) 2m37.092366531s ago: executing program 3 (id=1695): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) r0 = prctl$auto(0x8, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = socket(0x2, 0x6, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0x8) setresuid$auto(0x0, 0x0, 0xee01) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r2 = socket(0xa, 0x3, 0x3a) close_range$auto(0x2, 0xa, 0x0) (async) ioctl$auto_BLKDISCARD(r0, 0x1277, 0x0) (async) socket(0x18, 0xa, 0x1) (async) r3 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r3, 0x29, 0x4b, &(0x7f00000000c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x98\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) (async) bind$auto(r2, &(0x7f0000000040)=@generic={0xa, "2c55000000ac5600"}, 0x66) bind$auto(0xffffffffffffffff, 0x0, 0x6b) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) 2m35.799163624s ago: executing program 3 (id=1700): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/tunl0/addr_assign_type\x00', 0x40c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000800)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r1 = memfd_secret$auto(0x101) getdents$auto(r1, &(0x7f0000000000)={0x5, 0x10000, 0x34b, "8e54365832e62e9549c39eff19b5434160446d7c13d5e040d7b15450896d9e1fd5199fcfb0cf4a5be623392a0948d28f29ea1d0c0fb028873ad43db7d3cfba4c5827d2d4bbea5a33ef9940fb3fb35e864665be4b562b3d9b999da43cc8e0f4c4"}, 0xfe1) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) 2m35.513499225s ago: executing program 3 (id=1701): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, &(0x7f0000000040)=@bpf_attr_0={0x7fffffff, 0x6, 0x40, 0x0, 0x8000, 0xffffffffffffffff, 0x101, "ee910b2fdc06eeb6e4a7f3b08ee7718c", 0x0, r0, 0x1, 0x1c0400, 0x6, 0xfffffffffffffff8, r0, r1}, 0xa) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, 0x0, 0x50) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000011c0)=ANY=[@ANYBLOB="30050000118cf3a6cc00e2f0b700000000e00e89aafbfd70ed927dbadf5ce52159dd5ae02de1a34f7e233ed3f8c6ba7d7678320ec63eea24329d7a603ae6acf1f5b7032872915b514ad35f8a4bb569c292385a631864021f6a3b28c75bee6282a4ed39047e40f0cf82300b11e1b8866f49d8cb14249612", @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto_SHM_STAT(0x2, 0xd, &(0x7f00000005c0)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffd, 0x5, 0x5, 0xfc00}, 0x8001, 0x2, 0x8, 0x2, @raw=0x3, @inferred=0x0, 0x5, 0x0, &(0x7f0000000380)="26694a421dd78197592ea7e7540344c7078b9149381be6313ceb98ae4625ec0f687adbba968f29cec261db1af1cc8fc4d3ce67a875334bfda126b0ddc3297945a467d1630b7b17d603c3111eb8b50ae07001554a2bfccfe769f8edf889c030e280e31a14cf1e440c6a0d6c4f4b934e5a7080f9803a88dd5316728a96fb395542a632746c7fbcac031f5a0e8bb45507994410f77901d88a799143c4f67f7ac3891360f6901b66b69af957e2ab4ab29c8b07a96d", &(0x7f00000004c0)="9d9a0c4a210d7bd7d750c9164a9095d8e12d89d205074afdfb4381ab7f1d234d31d302621bc6bfa720bcd92f30db9f016fdf450812becfaba4f4ed7e76863f2620671f2e13c1063dd02789f750fa656d8f273b409875c58c794370b5ac03bb4517a160aaec58151d717ce564066107bfff6d8be4c2554083209b9327bfa01b888a8597af74b6138b55b2283a3b00d18ff0d59b4cc5e5398d9209d276297422ff1dcaf37fc00d92ba6bfbcf4d3be0af0919aec0ffcff35447fa4c76028f1b222c375d05d6607c7789df28d6a2efbb880e561b248ddba72ad637b5d36f3f"}) sendmsg$auto_TIPC_NL_LINK_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0xb5c, r5, 0xc8b61cca5f1dec27, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NAME_TABLE={0x111, 0x8, 0x0, 0x1, [@nested={0xc, 0x29, 0x0, 0x1, [@typed={0x8, 0x144, 0x0, 0x0, @ipv4=@remote}]}, @nested={0x9e, 0xbf, 0x0, 0x1, [@generic="a8f78735748dce58e1ab473b038cb2061d8201b8d2e20a1887984311d13e6ceedd9290d7bdde9c16674b6e165c4ec9c79d0622b595e15233252e6efe395c4fe9fd6fde921330361e7071e287", @generic="5a19151e384bfa926834eeb9835d8cb858d0edab7f0185997103fac9df12922a6e351d78a19cffd67675c752a5b3856aa8d5d976a617562640cef4f56ee0b155387163e59875683269e6", @nested={0x4, 0x168}]}, @typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x16a, 0x0, 0x0, @ipv4=@multicast2}, @generic="320ccdfa205bb249a02c3bac4db0d376e3537e20e0c2aa819c6fe700bb9c8d28b8f76a2939d18580ab8399838c4b599857f361b60dac7fa2783a0c60e70b5bb05ea1ba1456931b9f1c", @typed={0x8, 0x71, 0x0, 0x0, @uid=r7}]}, @TIPC_NLA_BEARER={0x4c8, 0x1, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @fd}, @nested={0x20e, 0x7, 0x0, 0x1, [@generic="e32b64afa66a0d4ed5a8d5a9212b4d6e832d748c9cb79afb4ab3b97895947ebbb18afd717437ccc8025702b6a6d97c2c9aba0f2875b4cd3b7ba76ae700e97b3bf667b379e30238108c9b727892f767fc79a4cd16554d148f0f74a14350e48feed59cb8dd793667e4f1c291e920311e6d5ea2f572af410bcb6ed1e3a27806ce23faca6f8a56de8ae1e247744fa02092530e5b97711cdc0008903774a04046d2e158ba8171d17e452f3cc06b91f980b4232126a86196ff32035ade8518caef4beaac977e3a793409b4f0de49b1b156061f66b27a6e4418a4fba4", @nested={0x4, 0x128}, @generic="7d593b40a3855de92bf72a37ebaa82162ef93f29aff30aa601b0e92d508a68edb28f428979bd8371ce9fe6507aaf43f4c57ecfcf291031ff7e63e00dc470c5f1fa402dbf1f393442979d15bf16b1c77b", @generic="f9d0038f31530d6f5fb18ea2393de19b7137864eb7837492d812fd2b7f8d40b9fa1050152d03b11d8720a4eea6162bd9a0097a257d6d62f4dce7b6d8bcb813630ee5df1af333818825619c936c1b3afb4a71e511574cd735b9991b2f4bcb095868869b70073fc167cf61d4424465f7588a9de23068821379cd800eea15effadc3f7cb0a99ae05f107a3cc6d313e49709bce64518387a2fac01d8015a15c7307391f9d13c37eeb5931dc506c4f740de37a4dc272291f6a083317847fc5d23f382b062a2a227dcaab737caa6157de67b3520d9b80db8660180dd", @nested={0x4, 0x9f}]}, @nested={0x132, 0xd1, 0x0, 0x1, [@typed={0x14, 0x166, 0x0, 0x0, @ipv6=@loopback}, @generic="a1f18d28a9bd6b078b22fe50baa576a007a71dd522936570076e5eb197ac4589d665488390679ff687b96839ce63e88ea3327b639b87df9113bc5c88a261df92189f0ea3391fedf14e5beda585ba6a66c58cb8961fce3b984dd75160a796e1663272ce8c93433ee8327d1d675b58a4cbe01992d703b86534e6b72256d3746bfaceedc7bf5657b032abf94452f9e1bd6d289ce2c7073f0205edeb07dede5369ed5e5f4ce75b75fa", @typed={0x8, 0x23, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x108}, @generic="b3ee415b23574bfed1609960a54880405aba39a3a858a21399fe17fccc8e695493670e5dfcfa01de577bd20d1d33676f7207bc1392b90b6f4af8f18cec25d400aa242dfedbb81fd3f556b10e382c4af9cf2593114e1f860bc1b5fa6f5b1040", @typed={0x8, 0xdd, 0x0, 0x0, @fd=r1}]}, @nested={0x14, 0x114, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2d}}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @typed={0x8, 0x152, 0x0, 0x0, @fd=r6}, @generic="6b34224b3497e884b5fd665cefa24d42901648906463a280572318d99ddad270b698be902e9437bc7babee4f12ff8352a13190f1cc7200d12748bc585cb38f7584f008ed1cda138c5fb53c699e309eebf504b75b790d266c7389e08afc410051db23884f147200721293bfdce58d394b94eab094fb1d8296045e129f134f2edea5885a8fa0c23feee90f1857b00cc7cf26b862d70bbffcc78c1ea87f19a8dea0c9b52006e9434d7e23bec65e37e2653a3b4ebc23db801f353679952629894a052355060603cd3fa95473c04a77c1f159758b63ac556a25a16791642cfebbe3872adf9f09ff355a85a0a83b87ccdf7e3504b9b8", @typed={0x8, 0x5, 0x0, 0x0, @u32=0x8000}, @generic, @generic="402d158396a4540f3d82f3d6293ab7d0c2b42e06d9b0e48429b23bf3e1ffb9fa40d04ca0fc4adcfd7961115523d603921af3181529a5e9f526b2292228fbbd28532aa05635db48b81fc8d358df5896fad7c7cd81b2fd43b96167f92e4b52dd4978"]}, @TIPC_NLA_NAME_TABLE={0x228, 0x8, 0x0, 0x1, [@typed={0x8, 0xc4, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x0, 0x0, 0x0, @u32=0x800}, @typed={0xba, 0x109, 0x0, 0x0, @binary="3437a420a1100d5f033a524b86f86cc8b9050040190c8d1259c6463f61353c2c149ead8d3d699de8082de59dddbf2fc451fef55a2cce29746a6ea5c0cc11945e580207785eceb18b335192cd31a6b0eb61bef9a4b595e18271461239564c273170bbc36eb97c4f6841a242cb1892205db20db42cef8b26cfbb600b7af729d8f23212e099cb95e0996c0c2c09ec127d3f12704fa14b822242c2132c5176f1fd70f74e60bf0e00caeb564736e95eabb3c6297aff87875b"}, @typed={0x14, 0x34, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x13b, 0x60, 0x0, 0x1, [@nested={0x4, 0xf1}, @typed={0x14, 0x150, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @typed={0x8, 0x14e, 0x0, 0x0, @u32=0xa}, @typed={0x8, 0xa2, 0x0, 0x0, @uid=r7}, @generic="975c443aa427aa81bbdd2b057352adcc6af8e60091d44ce5d128322044919c7c3dfc575cc4426619bf65133de3433be78125773674e684746b6a18ffce047c7731a5db303397e7c6b7d4a50c78c8745c40b954ac4d75a4084b0cf0daf9a532117691caed48ef6d982660804d5d81624b70477d5164ef838c84489c3782005cf90c9828f0b333cbb2863f48cbd442f3bdaa0ea292625630aa9e8d9a59ae57d90e5b8f4c2ece4340c91c797dbc34e587f60be8ffb34bb4b0df6764ff44de76c40d16783bcb2ae30e7c7fb75a58f6c9500a5e6c4b70eac8a1c1f4412928f981f38ed874434f5f436f46a037665de384236a", @typed={0x8, 0xc2, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x84, 0x0, 0x0, @ipv4=@multicast1}, @generic="b7e487dc5f4303277fcde5cb5bea03"]}, @typed={0x8, 0x145, 0x0, 0x0, @pid=r8}]}, @TIPC_NLA_UNSPEC={0xcb, 0x0, "17e0209c583ba8a30f39a1de11dc7a6cf827b72c03af80bcd5e526845587b50700930e82b1d11deaba7d1762421a19a47768ca071f32ea2455da792caad7b6dfec3e1d7684e2e5874f159551b1e82d5e2af52259e4b7134438ec816a23762ff121dce8ae7d611a595009122aa6424ffed2184660649d7b2a2ea9acc00b57b26cf479ab748da2117944980f73565d7922a544b83c604e8ff007fba379ec93cd72989de6dcc512b843a1e936f94cdfe520ab2cad0bf736701b37eee53f2ecb3cdd79d488bc5bf251"}, @TIPC_NLA_SOCK={0x269, 0x2, 0x0, 0x1, [@generic="04dbdf27fd8beadab5317f8ddcc112845e5a833c6cd3260a1acbdcea7011b53a3a78dad7895605e6da520f5a33b6f358816423b3867561325dfd778bfc819ab8b0abf53e0f7b256beb0021cdcdcfa938bea79c4f61adbf8cabc14837d351bf809c0792685a6882f94f0afe0fb3df801671003caa3020de97fd61381eb5142bfc2d156125a2eaf04cfe871e1912c8e38d088e5d8c09209b8bb851b0b5f5c76430839d6e518db7c96e0a3349ae453c1cd41aeb1a07b4f98afdfb778c2a0f0c7c9f2fbd59692e0112ebaeb1c7986c6d63f6a113587884eee7", @typed={0x8b, 0xa8, 0x0, 0x0, @binary="649f539d50401008a76e314f7970eed414afedd76cd36c353ab43c90c489389bc25651290c80b0630af212cf05c3357a0ba2340d2849dee71f7ed0ce444bde2dc8683442c45edeffe9297d89d81d47cff73d4d3735937d9df6a40efe95277e5b0a87efbffe264f4de8518e7a12859a41135403268b7eb4d609b9f0a32e79aea4b0e70c79a71393"}, @generic="3e5c8e0f14ac82909ea57f84096b34fad5056eee323e1da44cd860c8f2130d36fd7ddd93935b3728fc2bee424f8530458a90b8a0", @nested={0x4, 0xde}, @typed={0x8, 0xfe, 0x0, 0x0, @uid=r7}, @generic="5b8b6ddbcfee10e79a3bc347184a549ac1209635b25c3b012bc6c43d47620e6687c34beda97178a1bdef5cb07be65358a5414a95d9d48c4f3edd97832cdec4e8a6a8b63c3916dbad3c9be9387fd60edd2d9757884224840afca930b1a13571b591176db52111f0e60b0a1d79beaabee40ad5aa37e3157d3f12743b1c74c149dad31ee287518371adefb5f9ac551ac925ec2c6da21011851cc88683b4683fc65a671373e09a4dd5afcbb3e864172449f88f681b83bd956275e966bcdcc45599d7066d"]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @uid=r7}]}]}, 0xb5c}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) (async) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) (async) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) ioctl$auto_FIDEDUPERANGE(r9, 0xc0189436, 0x3) (async) sysfs$auto(0x2, 0x10000000000002f, 0x0) (async) fsopen$auto(0x0, 0x1) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) 2m34.149698507s ago: executing program 33 (id=1637): close_range$auto(0xffffffffffffffff, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(r3, &(0x7f0000000140)={0x0, 0x22000008}, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x8, 0x1, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r4, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f00000005c0)="2f34b2626eecd5d362d4f4ce77bca69ad3688b505465bfaf70eab515d26037f246bc757eb69b598f9e3b8ce5561ea5dd5ecb155f037b8bdf05587605acb72a4d69bc65e839af8687af6579daff7aa45e71ad3552d1108e48179c611c01074603283470c0cf725831b934ed9034a04c1c9d15cf99b59a51d609b7e294d6834d2437d866705a6aa63a3b289971a673a9d6c0b315b6dee8df7f7d22d0d4bab624af8a897b7bd03a66e6") ioctl$auto(0xc8, 0x800454e1, 0x5c8d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2m25.668517887s ago: executing program 1 (id=1740): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/capcache/hard_limit\x00', 0x82042, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000000)="2dc2", 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x6, 0x80) r1 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @loopback}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) rename$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./cgroup\x00') listen$auto(0x3, 0x81) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\t/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9\xc8\xd9\xe0\x80V\xb4\xd6\xc9\xc7\xf6*\xc6\x9a\xee\xb1\xaa\xbf\xab\xef\xbe\x1a\xcb*\x9aD\x8e\xfc]D\n\x13lx&\x0e\x84\xa8U^\xd0\xc1\x97\xe2\x97\x82', 0x3f, 0x200001000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x82, 0x0) write$auto(0x3, 0x0, 0x100000000) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x800000, 0x0, 0x6) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/dmi/id/uevent\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x4, 0x7fff, 0x1a000, 0x80000948b, 0x5f70, 0x8, 0x400000006, 0x7ff, 0xc, 0x9, 0x3, 0x27fffffff, 0x400005, 0x3]}, 0x0) socket(0x15, 0x5, 0x0) 2m24.707165428s ago: executing program 1 (id=1744): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = io_uring_setup$auto(0x208001, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioprio_set$auto(0x2, 0x800000000, 0x8) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x710f}, 0xa) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) ioctl$auto(0xffffffffffffffff, 0xc0845658, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040890) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) r3 = ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000180)={0x8000, &(0x7f00000000c0)={0x2, 0x3, 0x5, @raw=0xa77}}) socket(0x1d, 0x3, 0x1) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r4, 0x4004743d, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) ioctl$auto_PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000040)=0x12fa) io_uring_setup$auto(0x386, &(0x7f0000000000)={0x5, 0x1, 0x4c, 0x0, 0x1, 0x8, 0xffffffffffffffff, [0xfffffffa, 0x8, 0xa], {0x8, 0x8, 0x3fc000, 0x4, 0x751, 0x3, 0x3b, 0xec5, 0xffff}, {0xd5, 0x80000000, 0x1bee, 0x5d, 0x400, 0x9, 0x7, 0x8000, 0x7f}}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x3, 0x9, 0x7fffffffffffffff) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000001900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000018c0)={&(0x7f0000000340)={0x1544, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x152e, 0x9, 0x0, 0x1, [@generic="87fd4666113abafdcd36e8cc6c7ad75e2c649029e4e4f9b39c407a857d8de19a07fbab6c894b251376ac1c64e937aeb08f1f4b8628adffaaea04b0616fd4ae89f951d68e646d36890db0c19f97b9acf05356f7ce38bb476d6398d12fbfb1de9d0a1527cb49839f23b90a1fd0441e58cb699b33ce", @nested={0x1324, 0xb6, 0x0, 0x1, [@generic="037aed9dc0a2803b437fc3b785d75ac3cc0513c4ee4c386c7a2e0d2e3036c37841b3bc365b350b5d7e12e950a764f3eb296a3e", @typed={0x14, 0x143, 0x0, 0x0, @ipv6=@private0}, @generic="25b209db77859c0e1b876b1584779c9ea7bb9f2e2547f40b6abb0804897009167647e51759d087c77b59c547aaba4fb4ab9cd680e22b8d5cca8d768cec83bbb7bc9f6d67441e27040084e9cf817906474a8138d1333d61c9ca6af514feb642a2320f9d13465267a78bff988f599ba8f91d2f2777ce2331f32bceac5ad7ef5796880191fd8a732305c891d8449de445601ab4ba8d676a8ee4283368e801ab895f5e88948440743390cd4d21f055d5bcb218f951", @typed={0x4, 0x85}, @nested={0x4, 0x49}, @generic="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", @generic="f1d67657c830a9b5633fe25d55b0e8d17231b916ea23819b8648e717a42de62374eabc98ad3c246bd70e3b8a6c0525c2ca712b8c9283e3938f663d608e8670333ac49b818259df0140d7a0dd77d7af9cc5ed5ce8710bb732a44c6c1bd1e52763669937bb990993216fb43f3299fd0e93d7e1b48d6c8ca2ad782af9164f3db7baec62ffceb1bf6833e9dbc3619b0c8b292be2", @generic="9c2d97220d2f2ce6810d2ed309fb963228ca330509e027ad903a96e51644ae8cfc953d715a1d48bb58c492a37d4f6738fcff49878d9b1e9584c43ee4d7c254262e8a98ed7216123b2a21c78a749bf8f148a2e2fa003d308bc028d4ab2d157b548726316724f25017d7c969e855f913fdb0da9a1596853fc87468a47933a4c21de1c55b9b88b1e5926b960a5e63610c1baf7631b94548444cef5dcc3c03b7b207cb3e0830eeaccfc49de4def08b0959328a7045302a40f9ffe0af71c6ba33b1cf37628fcad6dbca35916c809e21c4b0a1e61b9a84b3a4e59d", @generic="696bb2845ef81e032ffc32c991da4a92aa7b731d22afe1628bea375ec2879ff8fd3b9cd419cc7f6df62bf6cd2df9919929dce32055b51cb129e8418cd97a8d02eb2428e47be15c40f92ee7051a50de9b54dfec29a9f80298dfb7ddc3d10417adfd2894f8fc3f47cd72317ae2332f9c0ef9bd379edcf9f8338010d334fb453cde8d76d128874edef0da0d625cb404ce0a46210bee9cb621635ee49423bc88d056ac6dcc8fda216982b6927e3cf3d89536a5c9c02e"]}, @nested={0x5f, 0xf1, 0x0, 0x1, [@generic="4188a2ab33435b0008e5380ba30a9f187cca51ba453d198c3ecd13bb036236e78c2e85e8e3857e7b928473a0483d12fbe178ecc5ceac34317b1e62", @typed={0x8, 0x25, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0xba}, @typed={0x8, 0x5e, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x4, 0x42}, @typed={0x5, 0x12b, 0x0, 0x0, @binary="de"}]}, @typed={0x4, 0xe8}, @typed={0x8, 0x123, 0x0, 0x0, @u32=0x3}, @generic="657230a8359216efbf58c7f1ec60103b09911b41b03cb9b609730fe8890c04505281e4f9ba3510edee9bb3218acf98ea32f492bd7b2d4f7c801b74d3fcd4058bda6bf01051b014c1b8177a0d671de65c53cdeaf761239b0ddf4f1d3e7bf54d83e46a9cab7174e7c130bae439b885f3a0a3fcb9df378d30630737fb10fd75339866c99b7e68c446f0fb29ecd3ed0030dda7d4884d8091c69c1128c1421364545e4a553ce72ab017387050fb8e56d80b2bff8c94e3be3a4a3d", @typed={0x8, 0x82, 0x0, 0x0, @fd=r6}, @typed={0x4, 0x9c}, @generic="3e00115d34794c36663b47a76c75a27ba1b088b548604ea73ebb0b1132c72701f25b4dba8e31ef268f0898ad3165f93690b4a081bc3facd1111137d3695c9f03c00f805882a3d40db5c657bbba04823d1634440b5e34106d87e6ac927a12e1c04f61"]}]}, 0x1544}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x6, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m24.155317745s ago: executing program 1 (id=1746): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x22041, 0xcb) write$auto(r0, 0x0, 0xfffffdf1) fsetxattr$auto(r0, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) r1 = socket(0x8, 0x800, 0x10000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x11, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r2, 0x0, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) pwrite64$auto(r3, &(0x7f0000000100)='Q\xd2aM.\xf4\xea+\xfa\x1cy\x9a,^\x00', 0x3ff, 0xa) r4 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r4, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/stack\x00', 0x501080, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000b80), r6) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c400200", @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf25050000000800040003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40040) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000ac0)=""/4096, 0x1000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) r8 = socket(0x15, 0x5, 0x0) recvmmsg$auto(r8, &(0x7f0000001180)={{0x0, 0x3, &(0x7f0000000140)={0x0, 0x100}, 0x3, 0x0, 0x9, 0xc201}, 0x100}, 0x3, 0xb9, &(0x7f00000011c0)={0x0, 0x7}) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x4000840) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) close_range$auto(0x2, 0xa, 0x0) 2m22.489762707s ago: executing program 1 (id=1750): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r0, 0x5408, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r1, 0x6a, 0x4, 0x0, 0x3) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x420c80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000001c0)={{@inferred=r2, 0xfffffffd, 0x7, 0xfffffeff, "63bd06037563c800d4190abbf2b7750a572f4b8f656e7318b4e19766a4d1957f3b7981689d90996587d30906", @raw=0x3}, 0x8000, 0x5, 0x8, @inferred=r2, @enumerated={0x8, 0xfedf, "00d52bdc1ffaf635a1d853437a1c67a1af5343a29457993981c2f830af3e82e0db3111b1437fdf59356c006d45037600a566006229f36621196ba1398cab6d4f", 0x100, 0x2}, "c302cd95bb9d7cc5742b6a0f2b6fb9d25ece41831bc642296f25982a311aab8f94208aa8b060f3f519a79dc4cba6665457aedde00c1a656bee79cff8232fbcd9"}) socket(0xa, 0x800, 0xe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x10, 0x3, 0x9) write$auto(r4, 0x0, 0x5) madvise$auto(0x9, 0x7fffffffffffffff, 0x1) getsockopt$auto_SO_SNDTIMEO_OLD(r3, 0x80000000, 0x15, &(0x7f0000000080)='\x00', &(0x7f0000000140)=0x80000001) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14ba02, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x80000000, 0xe, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x20009, 0x7f, 0xeb2, 0x8, 0x1008000) 2m20.914538627s ago: executing program 1 (id=1756): mmap$auto(0x0, 0x402200d, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010329bd700002dcdf25050000000c00010000000100000000000c00010005"], 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x81) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) socket(0x2, 0x3, 0x100) (async) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600070001000000"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000000400)={0x40081200, 0x0, 0x0, &(0x7f0000000200), {0x41}, &(0x7f0000000240)=""/129, 0x81, &(0x7f0000000300)=""/179, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) process_madvise$auto_MADV_PAGEOUT(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x1) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) fcntl$auto(0x2, 0x401, 0x80000001) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) (async) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) (async) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) preadv$auto(r1, &(0x7f0000000180)={&(0x7f0000000140), 0x5}, 0x2, 0x3, 0xf7) mprotect$auto(0x0, 0x8000000000000001, 0x8) (async) mprotect$auto(0x0, 0x8000000000000001, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x5, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x5, 0x9}, 0x7}, 0x3, 0x0) 2m20.461811569s ago: executing program 1 (id=1759): mmap$auto(0x1, 0x2020009, 0x1, 0xebd, 0xffffffffffffffff, 0x8000) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000000c0)=0x10000) pidfd_open$auto(0x0, 0x5) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x110c230000, 0x8031ca, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r1) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbff, {0x6, 0x0, 0x300}, [@MACSEC_ATTR_SA_CONFIG={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r4 = socket(0xa, 0x801, 0x106) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00000000000000000000000000000000000000000000000000cadb00", 0x3ff, 0x408, 0xf, 0x400001, 0x200000000040000d}) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) mseal$auto(0x1000000000000000, 0x0, 0x0) r6 = getsockopt$auto(r4, 0x6, 0x5, 0x0, 0x0) statx$auto(r6, &(0x7f0000000080)='./file0\x00', 0xd0c6, 0x1ff, &(0x7f00000024c0)={0x1c32b497, 0xfffffff8, 0x40, 0x7, 0x0, 0xffffffffffffffff, 0xf, 0xe, 0x6, 0x10, 0x4, 0x0, {0xae60, 0x1000}, {0x5, 0x7}, {0x4, 0x1}, {0x3, 0x3}, 0x1, 0xc197, 0x1ff, 0x5, 0x7, 0x3, 0x10000, 0x2, 0x0, 0x5, 0x8, 0x3, [0x4, 0xd6, 0x8, 0x9, 0x4, 0x0, 0x3, 0x2, 0x6]}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2b80, 0x0) 2m20.443392947s ago: executing program 34 (id=1701): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, &(0x7f0000000040)=@bpf_attr_0={0x7fffffff, 0x6, 0x40, 0x0, 0x8000, 0xffffffffffffffff, 0x101, "ee910b2fdc06eeb6e4a7f3b08ee7718c", 0x0, r0, 0x1, 0x1c0400, 0x6, 0xfffffffffffffff8, r0, r1}, 0xa) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, 0x0, 0x50) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000011c0)=ANY=[@ANYBLOB="30050000118cf3a6cc00e2f0b700000000e00e89aafbfd70ed927dbadf5ce52159dd5ae02de1a34f7e233ed3f8c6ba7d7678320ec63eea24329d7a603ae6acf1f5b7032872915b514ad35f8a4bb569c292385a631864021f6a3b28c75bee6282a4ed39047e40f0cf82300b11e1b8866f49d8cb14249612", @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto_SHM_STAT(0x2, 0xd, &(0x7f00000005c0)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffd, 0x5, 0x5, 0xfc00}, 0x8001, 0x2, 0x8, 0x2, @raw=0x3, @inferred=0x0, 0x5, 0x0, &(0x7f0000000380)="26694a421dd78197592ea7e7540344c7078b9149381be6313ceb98ae4625ec0f687adbba968f29cec261db1af1cc8fc4d3ce67a875334bfda126b0ddc3297945a467d1630b7b17d603c3111eb8b50ae07001554a2bfccfe769f8edf889c030e280e31a14cf1e440c6a0d6c4f4b934e5a7080f9803a88dd5316728a96fb395542a632746c7fbcac031f5a0e8bb45507994410f77901d88a799143c4f67f7ac3891360f6901b66b69af957e2ab4ab29c8b07a96d", &(0x7f00000004c0)="9d9a0c4a210d7bd7d750c9164a9095d8e12d89d205074afdfb4381ab7f1d234d31d302621bc6bfa720bcd92f30db9f016fdf450812becfaba4f4ed7e76863f2620671f2e13c1063dd02789f750fa656d8f273b409875c58c794370b5ac03bb4517a160aaec58151d717ce564066107bfff6d8be4c2554083209b9327bfa01b888a8597af74b6138b55b2283a3b00d18ff0d59b4cc5e5398d9209d276297422ff1dcaf37fc00d92ba6bfbcf4d3be0af0919aec0ffcff35447fa4c76028f1b222c375d05d6607c7789df28d6a2efbb880e561b248ddba72ad637b5d36f3f"}) sendmsg$auto_TIPC_NL_LINK_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0xb5c, r5, 0xc8b61cca5f1dec27, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NAME_TABLE={0x111, 0x8, 0x0, 0x1, [@nested={0xc, 0x29, 0x0, 0x1, [@typed={0x8, 0x144, 0x0, 0x0, @ipv4=@remote}]}, @nested={0x9e, 0xbf, 0x0, 0x1, [@generic="a8f78735748dce58e1ab473b038cb2061d8201b8d2e20a1887984311d13e6ceedd9290d7bdde9c16674b6e165c4ec9c79d0622b595e15233252e6efe395c4fe9fd6fde921330361e7071e287", @generic="5a19151e384bfa926834eeb9835d8cb858d0edab7f0185997103fac9df12922a6e351d78a19cffd67675c752a5b3856aa8d5d976a617562640cef4f56ee0b155387163e59875683269e6", @nested={0x4, 0x168}]}, @typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x16a, 0x0, 0x0, @ipv4=@multicast2}, @generic="320ccdfa205bb249a02c3bac4db0d376e3537e20e0c2aa819c6fe700bb9c8d28b8f76a2939d18580ab8399838c4b599857f361b60dac7fa2783a0c60e70b5bb05ea1ba1456931b9f1c", @typed={0x8, 0x71, 0x0, 0x0, @uid=r7}]}, @TIPC_NLA_BEARER={0x4c8, 0x1, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @fd}, @nested={0x20e, 0x7, 0x0, 0x1, [@generic="e32b64afa66a0d4ed5a8d5a9212b4d6e832d748c9cb79afb4ab3b97895947ebbb18afd717437ccc8025702b6a6d97c2c9aba0f2875b4cd3b7ba76ae700e97b3bf667b379e30238108c9b727892f767fc79a4cd16554d148f0f74a14350e48feed59cb8dd793667e4f1c291e920311e6d5ea2f572af410bcb6ed1e3a27806ce23faca6f8a56de8ae1e247744fa02092530e5b97711cdc0008903774a04046d2e158ba8171d17e452f3cc06b91f980b4232126a86196ff32035ade8518caef4beaac977e3a793409b4f0de49b1b156061f66b27a6e4418a4fba4", @nested={0x4, 0x128}, @generic="7d593b40a3855de92bf72a37ebaa82162ef93f29aff30aa601b0e92d508a68edb28f428979bd8371ce9fe6507aaf43f4c57ecfcf291031ff7e63e00dc470c5f1fa402dbf1f393442979d15bf16b1c77b", @generic="f9d0038f31530d6f5fb18ea2393de19b7137864eb7837492d812fd2b7f8d40b9fa1050152d03b11d8720a4eea6162bd9a0097a257d6d62f4dce7b6d8bcb813630ee5df1af333818825619c936c1b3afb4a71e511574cd735b9991b2f4bcb095868869b70073fc167cf61d4424465f7588a9de23068821379cd800eea15effadc3f7cb0a99ae05f107a3cc6d313e49709bce64518387a2fac01d8015a15c7307391f9d13c37eeb5931dc506c4f740de37a4dc272291f6a083317847fc5d23f382b062a2a227dcaab737caa6157de67b3520d9b80db8660180dd", @nested={0x4, 0x9f}]}, @nested={0x132, 0xd1, 0x0, 0x1, [@typed={0x14, 0x166, 0x0, 0x0, @ipv6=@loopback}, @generic="a1f18d28a9bd6b078b22fe50baa576a007a71dd522936570076e5eb197ac4589d665488390679ff687b96839ce63e88ea3327b639b87df9113bc5c88a261df92189f0ea3391fedf14e5beda585ba6a66c58cb8961fce3b984dd75160a796e1663272ce8c93433ee8327d1d675b58a4cbe01992d703b86534e6b72256d3746bfaceedc7bf5657b032abf94452f9e1bd6d289ce2c7073f0205edeb07dede5369ed5e5f4ce75b75fa", @typed={0x8, 0x23, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x108}, @generic="b3ee415b23574bfed1609960a54880405aba39a3a858a21399fe17fccc8e695493670e5dfcfa01de577bd20d1d33676f7207bc1392b90b6f4af8f18cec25d400aa242dfedbb81fd3f556b10e382c4af9cf2593114e1f860bc1b5fa6f5b1040", @typed={0x8, 0xdd, 0x0, 0x0, @fd=r1}]}, @nested={0x14, 0x114, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2d}}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @typed={0x8, 0x152, 0x0, 0x0, @fd=r6}, @generic="6b34224b3497e884b5fd665cefa24d42901648906463a280572318d99ddad270b698be902e9437bc7babee4f12ff8352a13190f1cc7200d12748bc585cb38f7584f008ed1cda138c5fb53c699e309eebf504b75b790d266c7389e08afc410051db23884f147200721293bfdce58d394b94eab094fb1d8296045e129f134f2edea5885a8fa0c23feee90f1857b00cc7cf26b862d70bbffcc78c1ea87f19a8dea0c9b52006e9434d7e23bec65e37e2653a3b4ebc23db801f353679952629894a052355060603cd3fa95473c04a77c1f159758b63ac556a25a16791642cfebbe3872adf9f09ff355a85a0a83b87ccdf7e3504b9b8", @typed={0x8, 0x5, 0x0, 0x0, @u32=0x8000}, @generic, @generic="402d158396a4540f3d82f3d6293ab7d0c2b42e06d9b0e48429b23bf3e1ffb9fa40d04ca0fc4adcfd7961115523d603921af3181529a5e9f526b2292228fbbd28532aa05635db48b81fc8d358df5896fad7c7cd81b2fd43b96167f92e4b52dd4978"]}, @TIPC_NLA_NAME_TABLE={0x228, 0x8, 0x0, 0x1, [@typed={0x8, 0xc4, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x0, 0x0, 0x0, @u32=0x800}, @typed={0xba, 0x109, 0x0, 0x0, @binary="3437a420a1100d5f033a524b86f86cc8b9050040190c8d1259c6463f61353c2c149ead8d3d699de8082de59dddbf2fc451fef55a2cce29746a6ea5c0cc11945e580207785eceb18b335192cd31a6b0eb61bef9a4b595e18271461239564c273170bbc36eb97c4f6841a242cb1892205db20db42cef8b26cfbb600b7af729d8f23212e099cb95e0996c0c2c09ec127d3f12704fa14b822242c2132c5176f1fd70f74e60bf0e00caeb564736e95eabb3c6297aff87875b"}, @typed={0x14, 0x34, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x13b, 0x60, 0x0, 0x1, [@nested={0x4, 0xf1}, @typed={0x14, 0x150, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @typed={0x8, 0x14e, 0x0, 0x0, @u32=0xa}, @typed={0x8, 0xa2, 0x0, 0x0, @uid=r7}, @generic="975c443aa427aa81bbdd2b057352adcc6af8e60091d44ce5d128322044919c7c3dfc575cc4426619bf65133de3433be78125773674e684746b6a18ffce047c7731a5db303397e7c6b7d4a50c78c8745c40b954ac4d75a4084b0cf0daf9a532117691caed48ef6d982660804d5d81624b70477d5164ef838c84489c3782005cf90c9828f0b333cbb2863f48cbd442f3bdaa0ea292625630aa9e8d9a59ae57d90e5b8f4c2ece4340c91c797dbc34e587f60be8ffb34bb4b0df6764ff44de76c40d16783bcb2ae30e7c7fb75a58f6c9500a5e6c4b70eac8a1c1f4412928f981f38ed874434f5f436f46a037665de384236a", @typed={0x8, 0xc2, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x84, 0x0, 0x0, @ipv4=@multicast1}, @generic="b7e487dc5f4303277fcde5cb5bea03"]}, @typed={0x8, 0x145, 0x0, 0x0, @pid=r8}]}, @TIPC_NLA_UNSPEC={0xcb, 0x0, "17e0209c583ba8a30f39a1de11dc7a6cf827b72c03af80bcd5e526845587b50700930e82b1d11deaba7d1762421a19a47768ca071f32ea2455da792caad7b6dfec3e1d7684e2e5874f159551b1e82d5e2af52259e4b7134438ec816a23762ff121dce8ae7d611a595009122aa6424ffed2184660649d7b2a2ea9acc00b57b26cf479ab748da2117944980f73565d7922a544b83c604e8ff007fba379ec93cd72989de6dcc512b843a1e936f94cdfe520ab2cad0bf736701b37eee53f2ecb3cdd79d488bc5bf251"}, @TIPC_NLA_SOCK={0x269, 0x2, 0x0, 0x1, [@generic="04dbdf27fd8beadab5317f8ddcc112845e5a833c6cd3260a1acbdcea7011b53a3a78dad7895605e6da520f5a33b6f358816423b3867561325dfd778bfc819ab8b0abf53e0f7b256beb0021cdcdcfa938bea79c4f61adbf8cabc14837d351bf809c0792685a6882f94f0afe0fb3df801671003caa3020de97fd61381eb5142bfc2d156125a2eaf04cfe871e1912c8e38d088e5d8c09209b8bb851b0b5f5c76430839d6e518db7c96e0a3349ae453c1cd41aeb1a07b4f98afdfb778c2a0f0c7c9f2fbd59692e0112ebaeb1c7986c6d63f6a113587884eee7", @typed={0x8b, 0xa8, 0x0, 0x0, @binary="649f539d50401008a76e314f7970eed414afedd76cd36c353ab43c90c489389bc25651290c80b0630af212cf05c3357a0ba2340d2849dee71f7ed0ce444bde2dc8683442c45edeffe9297d89d81d47cff73d4d3735937d9df6a40efe95277e5b0a87efbffe264f4de8518e7a12859a41135403268b7eb4d609b9f0a32e79aea4b0e70c79a71393"}, @generic="3e5c8e0f14ac82909ea57f84096b34fad5056eee323e1da44cd860c8f2130d36fd7ddd93935b3728fc2bee424f8530458a90b8a0", @nested={0x4, 0xde}, @typed={0x8, 0xfe, 0x0, 0x0, @uid=r7}, @generic="5b8b6ddbcfee10e79a3bc347184a549ac1209635b25c3b012bc6c43d47620e6687c34beda97178a1bdef5cb07be65358a5414a95d9d48c4f3edd97832cdec4e8a6a8b63c3916dbad3c9be9387fd60edd2d9757884224840afca930b1a13571b591176db52111f0e60b0a1d79beaabee40ad5aa37e3157d3f12743b1c74c149dad31ee287518371adefb5f9ac551ac925ec2c6da21011851cc88683b4683fc65a671373e09a4dd5afcbb3e864172449f88f681b83bd956275e966bcdcc45599d7066d"]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @uid=r7}]}]}, 0xb5c}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) (async) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) (async) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) ioctl$auto_FIDEDUPERANGE(r9, 0xc0189436, 0x3) (async) sysfs$auto(0x2, 0x10000000000002f, 0x0) (async) fsopen$auto(0x0, 0x1) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) 2m18.784869494s ago: executing program 5 (id=1764): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) (async) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x0) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) io_uring_setup$auto(0x6, 0x0) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 64) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) (rerun: 64) 2m18.540255368s ago: executing program 5 (id=1765): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, 0x0, 0x405b) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/ram1/queue/chunk_sectors\x00', 0xbee5998d065192e1, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) open(0x0, 0x700680, 0xa0) r2 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x40014}, 0x44091) socket(0x2, 0xa, 0xa) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x300000a3db) mmap$auto(0x7, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid\x00') ioctl$auto(r5, 0x8004510c, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES16=r7, @ANYRESHEX=r2], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4c8d4) ioctl$auto(r4, 0x900064b0, 0x2000000000000c38) ioctl$auto_SIOCSIFHWADDR2(r3, 0x8924, &(0x7f0000000200)) r8 = socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x0, 0x8, 0x1, 0x948a, 0xf, 0x200000015f4da07, 0x2007, 0x2, 0x64, 0x80000022, 0x7, 0x1, 0x1000000000000009, 0x7, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r8) 2m17.46083526s ago: executing program 5 (id=1767): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x18, 0x7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/device\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="cfd549c917a877503e315d77ab255cbccc13573d"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) read$auto(r1, 0x0, 0x3) mlock$auto(0x7c88, 0x7fff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x0) setrlimit$auto(0x1000000007, 0x0) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = getpid() process_vm_readv$auto(r5, &(0x7f00000001c0)={0x0, 0xfff}, 0x3, &(0x7f0000000280)={&(0x7f0000000100)="6c4bc022f1a924305022a30137693a982a453ee9ff2946c55588f6e6", 0xffffffff}, 0x6, 0x0) 2m16.425672045s ago: executing program 5 (id=1770): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vivid.0/video4linux/swradio15/name\x00', 0xe80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001280)=""/4124, 0x101c) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mlockall$auto(0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x4224c0, 0x20) ioctl$auto_KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x80) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2) 2m16.193425508s ago: executing program 5 (id=1771): sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) (async) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) (async) ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000080)='/dev/media2\x00', 0x400, 0x0) poll$auto(&(0x7f0000000200)={r0, 0x9, 0x3}, 0x3, 0x3) (async) unshare$auto(0x40000080) (async) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x101d4}, 0x400) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x0, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x48a82, 0x0) (async) r1 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x7}, 0x9, 0xfffffffc) landlock_restrict_self$auto(r1, 0x3) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) r2 = socket(0x2, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) (async) preadv$auto(0x40000000000003, &(0x7f0000000000)={0x0, 0xf15a}, 0x0, 0x8, 0x1) (async) write$auto(0xffffffffffffffff, &(0x7f0000000280)='\adev/audio\x921\r$D\xa8g\xe8$n\xeep\xd9\xdbU\x87M\xe3}\x1a\xdf\xec\x94Y\xc3\xcf\xb0\xa4\x90\xdat\x16\x03\xf16\x16W\xff\x03\xd2^\x00p\xb3\xfc\x9e&FZ\x1b\aFr\xc6\x92', 0x2) (async, rerun: 32) write$auto(0x3, 0x0, 0xffd8) (async, rerun: 32) madvise$auto(0x6, 0x1, 0x19) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mknod$auto(&(0x7f0000000180)='./file0\x00', 0xf800, 0x6) (async) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) msgctl$auto_IPC_INFO(0xa94, 0x3, 0x0) 2m16.00837252s ago: executing program 5 (id=1772): r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) writev$auto(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x8}, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r1) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="07031abd70250c00587b22"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x81}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x100006, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r4 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x4, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe640, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x10100000000}}) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(r4, 0x10000000084, 0x23, 0x0, 0x8) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES16=r8, @ANYBLOB="01002606000008ae2af05b5e1b6544c530b15576f61d4efab0d9f862ca21ea3e05a3daa47cf3e20aeddaebf4244c43bb00dd549213e1add150f2bf2c9f4a1e77ac07fc5cf42dc50b487bfa98c0c9d2891446ecb39b566438dd1822c03bf0951da8db178ed918239d9b607b47d666493c24e46f0431734654da405c"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) sendmsg$auto_IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7080fddbdf252b0000009d7ad483e492af317593d93a9e7a9e3711001f007565616d5f736c6176655f300000000006000b00080000000500110005000000080014000800000005002b000300000006000e00f2ff000005002a00070000000500210000000000050003006a000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8050) 2m5.220269072s ago: executing program 35 (id=1759): mmap$auto(0x1, 0x2020009, 0x1, 0xebd, 0xffffffffffffffff, 0x8000) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000000c0)=0x10000) pidfd_open$auto(0x0, 0x5) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x110c230000, 0x8031ca, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r1) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbff, {0x6, 0x0, 0x300}, [@MACSEC_ATTR_SA_CONFIG={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r4 = socket(0xa, 0x801, 0x106) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00000000000000000000000000000000000000000000000000cadb00", 0x3ff, 0x408, 0xf, 0x400001, 0x200000000040000d}) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) mseal$auto(0x1000000000000000, 0x0, 0x0) r6 = getsockopt$auto(r4, 0x6, 0x5, 0x0, 0x0) statx$auto(r6, &(0x7f0000000080)='./file0\x00', 0xd0c6, 0x1ff, &(0x7f00000024c0)={0x1c32b497, 0xfffffff8, 0x40, 0x7, 0x0, 0xffffffffffffffff, 0xf, 0xe, 0x6, 0x10, 0x4, 0x0, {0xae60, 0x1000}, {0x5, 0x7}, {0x4, 0x1}, {0x3, 0x3}, 0x1, 0xc197, 0x1ff, 0x5, 0x7, 0x3, 0x10000, 0x2, 0x0, 0x5, 0x8, 0x3, [0x4, 0xd6, 0x8, 0x9, 0x4, 0x0, 0x3, 0x2, 0x6]}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2b80, 0x0) 2m0.364415618s ago: executing program 36 (id=1772): r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) writev$auto(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x8}, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r1) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="07031abd70250c00587b22"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x81}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x100006, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r4 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x4, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe640, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x10100000000}}) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(r4, 0x10000000084, 0x23, 0x0, 0x8) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES16=r8, @ANYBLOB="01002606000008ae2af05b5e1b6544c530b15576f61d4efab0d9f862ca21ea3e05a3daa47cf3e20aeddaebf4244c43bb00dd549213e1add150f2bf2c9f4a1e77ac07fc5cf42dc50b487bfa98c0c9d2891446ecb39b566438dd1822c03bf0951da8db178ed918239d9b607b47d666493c24e46f0431734654da405c"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) sendmsg$auto_IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7080fddbdf252b0000009d7ad483e492af317593d93a9e7a9e3711001f007565616d5f736c6176655f300000000006000b00080000000500110005000000080014000800000005002b000300000006000e00f2ff000005002a00070000000500210000000000050003006a000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8050) 1m46.810674602s ago: executing program 6 (id=1848): r0 = socket(0x25, 0x2, 0x2) bind$auto(r0, 0x0, 0x6a) ioctl$auto(0x3, 0x80108907, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x1ff, r0, 0xfd) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x21100, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000000c0)={{0x1, 0x40, 0x4202, 0x3}, 0x2, 0xfffffffffffffffe, "72e00d838b24ff6fd5411f43301c8fa23cf2b9541b346600"}) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r2, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) mmap$auto(0x0, 0x80000000000007, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x7, 0xeb1, 0x404, 0x10008004) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x4, 0x100000000) bpf$auto(0x0, 0x0, 0x10) ptrace$auto_ARCH_SET_GS(0x3, r4, 0x8, 0x1001) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) socket(0x5df9e8884bbc96f, 0x3, 0x10005) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') io_uring_setup$auto(0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 1m44.853522363s ago: executing program 6 (id=1853): mmap$auto(0xca, 0x40009, 0x1, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x40014) r1 = wait4$auto(0xfffffff9, 0x0, 0x3, 0x0) r2 = prctl$auto(0x7ff, 0x80000000, r1, 0x8000, 0x1ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) r3 = fcntl$auto_F_GETOWN(r2, 0x9, 0x0) pidfd_open$auto(r3, 0x9) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x101200, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0, 0x31}, 0x50) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x8, 0x100000000000000c, 0xb, 0x4, 0xfca, 0x9, 0x2, 0x291805d9]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0xffffffffffffffff, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x4000103f, 0x1, r3, 0xe, 0xb) mmap$auto(0x7, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x1) unshare$auto(0x40000080) 1m43.182732661s ago: executing program 6 (id=1856): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/mcfilter\x00', 0x40080, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000200), 0x6240, 0x0) mmap$auto(0x0, 0x2020009, 0x200000000000003, 0xeb5, 0xfffffffffffffffa, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0x123801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0xa, 0x5, 0x0) fcntl$auto(0x8000000000000001, 0x5, 0x8) ioctl$auto(r1, 0x8941, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000841) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x9, 0x0) semctl$auto(0x0, 0x9, 0x0, 0x2) clock_settime$auto(0x9fb, &(0x7f0000000140)={0x7e0, 0x15}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev5\x00', 0x8a240, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) connect$auto(r0, &(0x7f0000000000)=@generic={0x10, "0000e100"}, 0x58) write$auto(0xffffffffffffffff, 0x0, 0xc6) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) 1m42.4592891s ago: executing program 6 (id=1861): mmap$auto(0x0, 0x40000c, 0xffffffff, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r1 = prctl$auto_PR_SCHED_CORE_GET(0x6, 0x0, 0xffffffffffffffff, 0xffffffffffffffdf, 0x0) landlock_restrict_self$auto(r1, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) 1m41.93095006s ago: executing program 6 (id=1862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0xb4000, 0x0) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0) poll$auto(&(0x7f0000000040)={r2, 0x1000, 0x1c9}, 0x2, 0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) sendfile$auto(r4, r5, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r6, r6, 0x0, 0x10000800000003) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x6, @number_of_packets=0xfffffff3, 0x45a, 0x0, 0x0}) r8 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0xff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, "aa85261b8b14924ea2216fe4d94fc9938462e5c166957f680cc700b98f246661833162612f29828f39b1fc0d93353c716086ae61544af0f17787ecbf0e0ba6e8403bfdff5ea8a3fa98c30f89e9e36626b0138ebe5dae2fc33305539ef5eb7db9a43e6b6fb183b7c55e5ba9cc784749fcfb1f560948c4650130fa38a719a15d6b215ca9ece5dc99a9a181275d6c724f"}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x40840) fsetxattr$auto(r8, &(0x7f0000000280)='/dek\x85bus/usb/003/001\x00', &(0x7f00000001c0)="d9f6fd8f976809ec5affb5a0a3322d0a082b2b685a8e624d23fefa5ebd13269c7ed4f2a00da29f085217b737337fa6cb2a29ec02ecccc25406c6f6e50cac197d4e3988d74810ca0710cabbdde584064cff537696ffe35f24839c44e41cce1f19fe30c1", 0xfffffffffffffff7, 0x91d) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd28, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m39.769461065s ago: executing program 6 (id=1866): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) mmap$auto(0x1000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x1000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x1000000003b, 0x7fffffff, 0x0, 0x2, 0x33) (async) r0 = prctl$auto(0x1000000003b, 0x7fffffff, 0x0, 0x2, 0x33) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) (async) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) mmap$auto(0xffffffffffffffff, 0x4000002, 0x7, 0x8051, r0, 0x0) (async) mmap$auto(0xffffffffffffffff, 0x4000002, 0x7, 0x8051, r0, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(r2, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a") (async) ioctl$auto_SG_GET_RESERVED_SIZE2(r2, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a") ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2, 0x2) write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r4 = socket(0x2, 0x80002, 0x73) getsockopt$auto_SO_RCVTIMEO_OLD(r4, 0x1, 0x14, &(0x7f0000000000)='\x00', &(0x7f0000000100)=0x68) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) (async) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0x808e8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) mlockall$auto(0x800000000000005) (async) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) mmap$auto(0x0, 0x8f8, 0xffffffffffffffff, 0x200000000000eb1, 0xfffffffffffffffa, 0x400000000008000) close_range$auto(0x2, 0x8, 0x0) 1m24.7040369s ago: executing program 37 (id=1866): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) mmap$auto(0x1000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x1000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x1000000003b, 0x7fffffff, 0x0, 0x2, 0x33) (async) r0 = prctl$auto(0x1000000003b, 0x7fffffff, 0x0, 0x2, 0x33) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) (async) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) mmap$auto(0xffffffffffffffff, 0x4000002, 0x7, 0x8051, r0, 0x0) (async) mmap$auto(0xffffffffffffffff, 0x4000002, 0x7, 0x8051, r0, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(r2, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a") (async) ioctl$auto_SG_GET_RESERVED_SIZE2(r2, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a") ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2, 0x2) write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r4 = socket(0x2, 0x80002, 0x73) getsockopt$auto_SO_RCVTIMEO_OLD(r4, 0x1, 0x14, &(0x7f0000000000)='\x00', &(0x7f0000000100)=0x68) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) (async) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0x808e8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) mlockall$auto(0x800000000000005) (async) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) mmap$auto(0x0, 0x8f8, 0xffffffffffffffff, 0x200000000000eb1, 0xfffffffffffffffa, 0x400000000008000) close_range$auto(0x2, 0x8, 0x0) 57.057904616s ago: executing program 4 (id=1969): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/defrag\x00', 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x3, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xc, 0xffffffffffffffff, 0x6, 0x10, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x20000000000, 0x3, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x9, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)=0x81) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0xa) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x8800, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='-\x00', 0xffffffffffffffff) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01012bbd7000fddbdf250d000000050007"], 0x1c}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r5, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24020881}, 0x1) close_range$auto(0x2, 0x8, 0x0) 54.937072339s ago: executing program 4 (id=1980): setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) r0 = socket(0xa, 0x2, 0x88) socket(0x2, 0x80002, 0x73) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f0000001640)=@bpf_attr_1={0xffffffffffffffff, 0x7, @next_key=0x8, 0x7}, 0x400) setsockopt$auto(0x3, 0x0, 0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r1, r2, 0x4, 0x1ff, r0, @relative_fd, 0xe600}, 0xf) 54.416795082s ago: executing program 4 (id=1975): socket(0xa, 0x801, 0x20000084) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = memfd_create$auto(&(0x7f0000000000)='\x00', 0x6) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x11) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sched_setaffinity$auto(0x0, 0x5, 0x0) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x400000000000021, 0xe, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xd) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r2, 0x0) mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0) close_range$auto(r0, r0, 0x5) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), r0) fcntl$getown(r2, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={"066d3970917268f77ce910cc79bac67915f7f5439753e9d53263c6412d09fa6a", 0x8, 0x1, 0x80000000, 0xff, 0xffff}) socket(0x2d, 0x2, 0x0) mkdir$auto(&(0x7f0000000040)='./cgroup.net/\f\x00\x00\x00\x00', 0xa3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) 52.178323633s ago: executing program 4 (id=1979): unshare$auto(0x40000080) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r1 = wait4$auto(0x0, &(0x7f0000000200)=0x1, 0x981, &(0x7f0000000340)={{0x279, 0xca1}, {0x3, 0x9}, 0x22, 0x8, 0x700cdf95, 0x1000005, 0x80, 0x97ec, 0x1, 0x9d00000000000000, 0xfffffffffffffffd, 0x26, 0x5, 0x5, 0x10, 0x10001}) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000440)=ANY=[@ANYBLOB="c8040000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x4c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x329301, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000100)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf2502000000e4000a80cea3b1eb5035f2ad07a6b369d9cae80000ce4557f0a5750e99a779e2b15337c19c29137b08003300ffffffffa2e51c731e48c1c636ffffe1588d1951c13ab2c929acd06187008e8014000500fe8800000000000000000000000000015ff77e4ad204002b80adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac572e354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc720014001c0000000000000000000000ffffe0000001fba8aa74c34db8"], 0xf8}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r4 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r4, 0x0, 0x0) r5 = open(0x0, 0xc0842, 0x95) sendfile$auto(r5, r5, 0x0, 0x1) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001e80)=@bpf_attr_7={@map_id, 0x8}, 0x4) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd8]}, 0x0) select$auto(0x20000e, 0x0, 0x0, &(0x7f00000002c0)={[0x4, 0x400, 0x1, 0x1000000000000bc3, 0x7fd, 0x3, 0x3, 0xfffffffffffffffe, 0x400000000003, 0x3, 0xf90, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x0, 0x0) socket(0x2, 0x2, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/loginuid\x00', 0x2, 0x0) r6 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/gid_map\x00', 0x680481, 0x0) writev$auto(r6, &(0x7f0000000cc0)={0x0, 0x2}, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xa, 0x3, 0xef1, 0xfffffffffffffffa, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0x15, 0x5, 0x0) 49.917037423s ago: executing program 4 (id=1984): ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f00000000c0)={{0x1, 0x40, 0x4202, 0x3}, 0x2, 0xfffffffffffffffe, "72e00d838b24ff6fd5411f43301c8fa23cf2b9541b346600"}) 49.728687316s ago: executing program 4 (id=1985): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/mcfilter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$auto_proc_pagemap_operations_internal(r0, &(0x7f0000001540)=""/209, 0xd1) mknod$auto(&(0x7f0000000240)=':,\x00', 0xfff, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) close_range$auto(0x2, r1, 0x8001) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) ioctl$auto(0x3, 0x4020565b, 0x38) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f0000000280)=""/106, 0x6a) socket(0x1e, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_SOCK_GET(r5, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)={0x14, r6, 0xe77c815741d6438d, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x48cc) 34.585474783s ago: executing program 38 (id=1985): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/mcfilter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$auto_proc_pagemap_operations_internal(r0, &(0x7f0000001540)=""/209, 0xd1) mknod$auto(&(0x7f0000000240)=':,\x00', 0xfff, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) close_range$auto(0x2, r1, 0x8001) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) ioctl$auto(0x3, 0x4020565b, 0x38) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f0000000280)=""/106, 0x6a) socket(0x1e, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_SOCK_GET(r5, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)={0x14, r6, 0xe77c815741d6438d, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x48cc) 31.71014507s ago: executing program 8 (id=2039): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x202000b, 0xfffffffffffffffe, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) userfaultfd$auto(0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) keyctl$auto(0x9, 0xfffffffffffffffb, 0x7ffffffffffffffd, 0xb, 0x8000000000000000) r2 = epoll_create$auto(0x4) socket(0x2c, 0x80000, 0x3) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x48101, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/58, 0x3a) r4 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2000, 0x0) ioctl$auto_FIONREAD(r4, 0x541b, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x9, 0xd3e, 0x3, 0x949b, 0x2, 0x95f4da0a, 0x7f3, 0x79, 0x8000000000000001, 0x2a61, 0x14, 0x8, 0x1209, 0xe09, 0x4]}, 0x0) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20104000}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40881}, 0x10004800) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000001080)=ANY=[@ANYBLOB="050011000000000005001f07000000006416d174c780932d4fc3d192e9d04f5cae017d09fe460579fac969527f18a7013b9ac9eaddd70de7c950048d1b968760178c44b1418795617f8eaa1771157268601fa2445447bd26d8d848d6aae7e0dc9668be52eeb56b5c4f1690311adf6f7e5f8e3fb1f2559aeb2fa5bdc9cd83d9ab5f55b679da784dda7def888ac453a4adcd346c1036a5e61f40f41bf9a19413b54de6471daef0b6bcc5da1b001c", @ANYBLOB="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", @ANYRES8=r3, @ANYBLOB="20050000", @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESOCT=r4, @ANYRES16, @ANYRES16=r2, @ANYRES64=r1, @ANYRESHEX=r1], 0x520}, 0x1, 0x0, 0x0, 0x11}, 0x24040880) write$auto(r3, &(0x7f0000000400)=' \x00\x00\x00\xf7\xff\xff\xff\xff\xff\xff\xff', 0x100000a3d9) select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x1fa, 0xfffffffffffffffe, 0x8f, 0x3, 0x9487, 0x8, 0x15f4da09, 0x0, 0xfffffffffffffff7, 0x20000000000005e, 0x6, 0x1040000000000007, 0x6d41, 0x3, 0x7, 0x7]}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40ebf, 0x401, 0x300020000000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff02c}}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.clone_children\x00', 0xb02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) unshare$auto(0x40000080) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) 30.030819523s ago: executing program 8 (id=2045): close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x2800, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r1) (async, rerun: 32) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x5, 0x0, [{0xc0000101, 0x7, 0x1000}]}) (rerun: 32) 29.829173584s ago: executing program 8 (id=2046): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x1, &(0x7f0000000000)="8d9588be350e9e808820bae98c813068e8c27d37a83892f4d58917f81f5da5bf0cb448aea0e823c32c07bb547b532595fcd3f543cf27e9eb5700f933c2eba0fc1d088ffdcac57a4df9e229951ec6a996240e02dc187459ac4935c2d66a393b9021e0e4a8072dd28d6bc467") (async) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) setsockopt$auto(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x6f7250c4) 29.592431605s ago: executing program 8 (id=2048): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x4, 0xffffffffffffffff, 0x0, 0x0, 0xf0) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/encoder-0/bridges\x00', 0x80000, 0x0) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x20010090) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x82, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) socket(0x29, 0x2, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) 29.065801935s ago: executing program 8 (id=2050): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRESOCT=r2, @ANYRES8, @ANYRESHEX=r1, @ANYRES64=0x0, @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x24040080) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0xffff) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open$dir(&(0x7f00000002c0)='}[,&*}\x00', 0x2000, 0x71) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x80, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/192, 0xc0) bind$auto(0x3, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x1) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x280, 0x0) r4 = getpid() process_vm_readv$auto(r4, 0x0, 0x5, &(0x7f0000000380)={&(0x7f00000003c0)="5d4846965d0b30daa3e6601c064002004ef4e3449da9de6d8e81b8ef5ba7539963c8a299f8bf8f816d2fd597aff09165fb11db610530b5ff686981cc7cb546f1a6192dc51d47abb1d077af445519b9844596b7f246681246ac9d2c851ac3803d504a303643768bea050522be34f77c5e0127fe6b3aeb745f71b0d241ed3a8abec0e46b13b787c00958c3d840b59099cb02f74d9cce7e86f05e60a70ef0a00d046c010000000000000000"}, 0x6, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000fc0)=0xa) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x1000008003) unshare$auto(0x40000080) write$auto(0xca, 0x0, 0x7f) mmap$auto(0xb, 0x100004000c, 0x1000, 0x80000000000014, 0x7, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x12) r6 = socket(0x15, 0x5, 0x0) setsockopt$auto(r6, 0x114, 0x1005, 0x0, 0x7) 27.461528157s ago: executing program 8 (id=2055): prctl$auto(0x21, 0xfffffffffffffffd, 0x2, 0x0, 0x0) timer_settime$auto(0x5, 0x2, &(0x7f0000000580)={{0x5, 0x4}, {0xfff, 0x5}}, &(0x7f00000005c0)={{0x0, 0x10001}, {0x6, 0x80}}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/adsp1\x00', 0x105000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf250100000006000a0029250000040007800c0002000400000000000004"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r3 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x40000, 0x0) pread64$auto(r3, 0x0, 0x2, 0x7a) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r0, 0x9, 0x0, 0x4) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) modify_ldt$auto(0x4, &(0x7f0000000440), 0x4) prctl$auto_PR_SET_MDWE(0x41, 0x8, 0x4, 0x154c, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x202, 0x0) setitimer$auto_ITIMER_REAL(0x0, &(0x7f00000001c0)={{0x1, 0x10001}, {0x7fffffffffffffff}}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0) pread64$auto(r5, 0x0, 0x682c3390, 0xcff) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2c00, 0x0) ioctl$auto_EVIOCSMASK(r6, 0x40104593, 0x0) socket(0x2b, 0x1, 0x1) r7 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/smaps\x00', 0x2140c0, 0x0) read$auto_proc_pid_smaps_operations_internal(r7, &(0x7f0000000080)=""/28, 0x1c) 17.754740289s ago: executing program 0 (id=2028): socket(0x1d, 0x2, 0x7) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffe11, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.14/usb38/power/runtime_active_time\x00', 0x80002, 0x0) sendfile$auto(0x3, r0, 0x0, 0x400000000007) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0x4000000000eb1, 0x401, 0x8000) unshare$auto(0x20404) r1 = socket(0xa, 0x5, 0x0) r2 = getsockopt$auto(r1, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r2, r2, 0x8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop11\x00', 0x38b41, 0x0) mmap$auto(0x0, 0x810004, 0xffffffff, 0x8000000008011, 0x3, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_TXTIME(r6, 0x1, 0x3d, &(0x7f00000006c0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000700)=0x5) getrlimit$auto(0x3, 0x0) ioctl$auto_BLKPBSZGET(r5, 0x127b, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop12\x00', 0x60742, 0x0) inotify_init1$auto(0x39) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x401, 0x408, 0xf4b, 0x20000400004, 0x200000000040000d, 0x0}) r8 = wait4$auto(r7, &(0x7f0000000080)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0xd9f}, 0xc63e, 0x3, 0x4189, 0x1, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x8, 0x80ac, 0x2, 0xa, 0x0, 0x6}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYBLOB, @ANYRES32=r8, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c73cbaacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c4580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8040) 16.729792414s ago: executing program 0 (id=2087): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) mmap$auto(0x1000004, 0x20009, 0x6, 0xeb1, 0x401, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r0 = prctl$auto(0x2, 0x4, 0x0, 0x400000003, 0xf1) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) mmap$auto(0xffffffffffffffff, 0x4000002, 0x7, 0x8051, r0, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(r2, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a") ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x12, 0x6, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffff9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x11, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bpq1/statistics/rx_nohandler\x00', 0x839057c813caf318, 0x0) write$auto(r5, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x7, 0x4, 0x0, 0x6, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) 12.472403386s ago: executing program 39 (id=2055): prctl$auto(0x21, 0xfffffffffffffffd, 0x2, 0x0, 0x0) timer_settime$auto(0x5, 0x2, &(0x7f0000000580)={{0x5, 0x4}, {0xfff, 0x5}}, &(0x7f00000005c0)={{0x0, 0x10001}, {0x6, 0x80}}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/adsp1\x00', 0x105000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf250100000006000a0029250000040007800c0002000400000000000004"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r3 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x40000, 0x0) pread64$auto(r3, 0x0, 0x2, 0x7a) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r0, 0x9, 0x0, 0x4) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) modify_ldt$auto(0x4, &(0x7f0000000440), 0x4) prctl$auto_PR_SET_MDWE(0x41, 0x8, 0x4, 0x154c, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x202, 0x0) setitimer$auto_ITIMER_REAL(0x0, &(0x7f00000001c0)={{0x1, 0x10001}, {0x7fffffffffffffff}}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0) pread64$auto(r5, 0x0, 0x682c3390, 0xcff) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2c00, 0x0) ioctl$auto_EVIOCSMASK(r6, 0x40104593, 0x0) socket(0x2b, 0x1, 0x1) r7 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/smaps\x00', 0x2140c0, 0x0) read$auto_proc_pid_smaps_operations_internal(r7, &(0x7f0000000080)=""/28, 0x1c) 3.055134791s ago: executing program 7 (id=2121): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0x1, 0x40, 0x4202, 0x3}, 0x2, 0xfffffffffffffffe, "72e00d838b24ff6fd5411f43301c8fa23cf2b9541b3466000000000300"}) 2.909497927s ago: executing program 2 (id=2095): mmap$auto(0x0, 0x20009, 0xe3, 0x200100000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xd561, 0x8b, 0xeb2, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) inotify_init1$auto(0x7a28) r0 = prctl$auto(0x0, 0x9, 0x0, 0x4, 0x7) socket(0xa, 0x1, 0x106) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x6117, 0x0, 0x2e5, 0x0, 0xfffffffffffffff7, 0x82}, 0x1}, 0x70000000, 0xffffffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x5, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x5, 0x5, 0x2, 0x2000003, 0xa, 0x2000000000000400, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x0, 0xffffffdf, 0x8000007, 0x2003, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x7, 0x4, [0xffffffc, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x4, 0x2, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x6, 0x0, 0x8000000000000000, 0xb8a0, 0x0, 0xfffffffffffffffd, 0x101, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0x200c) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1ac}}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) unshare$auto(0x40000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vivid.0/video4linux/vbi12/index\x00', 0x88282, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r4, &(0x7f0000000500)="0a1b9a3c3e3e006e163b99d4d7c3e76dc04c0bcdcd1cb044b3162cb440886d8ebcc2574c58e9867ecec3371cadb848770dc8f745d1c76eedba12b9f694da9dbcf3401910bb713aca465c9bbc23b5d40a", 0x50) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x3, 0x14, 0x1000000081, 0xf0, r2, 0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xebe, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x80140, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x6051) read$auto(0x3, 0x0, 0x8) 2.863726649s ago: executing program 7 (id=2122): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000540)="258fde12f001", 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x7) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2a8}, 0x1, 0x0, 0x218, 0x4008000}, 0x4040811) 2.839588358s ago: executing program 9 (id=2123): preadv$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9, 0x402) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) mmap$auto(0x0, 0x8, 0x80004000000000df, 0x10004000eb1, 0xffffffffffffffff, 0x8000008000) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x12b82, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1854c2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x0, 0xa, 0x76) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0x7fffffff) close_range$auto(r1, 0xffffffffffffffff, 0x2) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0xc2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) listmount$auto(&(0x7f0000000080)={0x23, @inferred, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x4) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x8, 0x0, 0x0, 0x5, 0x800008) r2 = waitid$auto_P_ALL(0x0, 0x8000, &(0x7f0000000340)={@_si_pad}, 0x6, &(0x7f00000003c0)={{0x8001, 0x80000000}, {0x3, 0x20000001}, 0x0, 0xd, 0x1, 0xae0, 0x1, 0x2, 0xfffffffffffffff8, 0xf5f, 0x5dcac2d0, 0x100000000, 0x5, 0x0, 0x2, 0x3}) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) prlimit64$auto(r2, 0x7, &(0x7f0000000cc0)={0xfff, 0xf1c6}, 0x0) poll$auto(&(0x7f0000000f80)={0xffffffffffffffff, 0xa06}, 0x3ff, 0xe) 2.702820252s ago: executing program 7 (id=2124): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') io_uring_setup$auto(0x6, 0x0) (async) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) (async) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(0x0, r3) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000380)=""/11, 0xb) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000380)=""/11, 0xb) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x80) (async) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x80) listen$auto(r1, 0x8) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) poll$auto(&(0x7f0000000000)={r1}, 0x200, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r4) (async) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r4) sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x70, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_UNSPEC={0x59, 0x0, "94fb335faee976b7bb649056e28d986acd3f2411e884ad46ac4e85422995325436da1d8fdf3613e3269a320c66135060516c874f6b586331c1189b0262d6e3c7fe51e0fec87576bd929907ec8eaa2a30d9589cc63d"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) (async) sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x70, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_UNSPEC={0x59, 0x0, "94fb335faee976b7bb649056e28d986acd3f2411e884ad46ac4e85422995325436da1d8fdf3613e3269a320c66135060516c874f6b586331c1189b0262d6e3c7fe51e0fec87576bd929907ec8eaa2a30d9589cc63d"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) close_range$auto(0x2, 0x8, 0x0) 2.228397123s ago: executing program 7 (id=2125): r0 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/comm\x00', 0x100002, 0x0) write$auto_proc_pid_set_comm_operations_base(r0, &(0x7f0000000180)="6276201aabce9978193ab594e7231ad29d869fee3ddc9c96ff6dd08c8c67900234b05b6f105b75b8ec165d7ce0ec895800a7d73b1d71bd857a583636f4a106fb744bc001852d69c717da7b7000c2bc1d6c94ddc08907648adb92511797f554e6be6c40bb65e6573e46875a366d30f975696f", 0x72) 2.202767193s ago: executing program 7 (id=2126): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'netpci0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20000020) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000180)={0x0, 0x3}, 0x3) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x14, 0xfffffffffffffffa, 0xfffffffffffffff7) r6 = socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r7 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r7, 0x11e, 0x1, 0xfffffffffffffffe, 0x0) getsockopt$auto(r6, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c804) unshare$auto(0x40000080) mmap$auto(0x2, 0x8, 0x3, 0xeb1, r5, 0x10000000007ffe) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0p/sub1/xrun_injection\x00', 0x701000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x101862, 0x0) 2.033480878s ago: executing program 2 (id=2127): ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0x401, 0x38, &(0x7f00000001c0)='-)\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x40) unshare$auto(0x40000080) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sysfs$auto(0x2, 0x3b, 0x0) fsopen$auto(0x0, 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20080000004, 0x80000001, 0x1000000000000bc3, 0x800, 0x4, 0xfc, 0x10001, 0x400000000003, 0x1ae9, 0xfffffffffffffffc, 0xfffffffffffffffa, 0x80000000, 0x1, 0xffffdfffffffff81, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 1.815231492s ago: executing program 9 (id=2128): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x400007, 0xde, 0x9b72, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x2, 0x1, 0x106) (rerun: 32) socket(0xa, 0x1, 0x84) (async) uname$auto(0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x486, 0x400, 0x9}]}) (async) mremap$auto(0x1, 0xffffffffffffffff, 0x1, 0x3, 0x0) 1.466166723s ago: executing program 40 (id=2087): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) mmap$auto(0x1000004, 0x20009, 0x6, 0xeb1, 0x401, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r0 = prctl$auto(0x2, 0x4, 0x0, 0x400000003, 0xf1) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) mmap$auto(0xffffffffffffffff, 0x4000002, 0x7, 0x8051, r0, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(r2, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a") ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x12, 0x6, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffff9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x11, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bpq1/statistics/rx_nohandler\x00', 0x839057c813caf318, 0x0) write$auto(r5, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x7, 0x4, 0x0, 0x6, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) 1.427955962s ago: executing program 7 (id=2130): ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) unshare$auto(0x40000080) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0x401, 0x38, &(0x7f00000001c0)='-)\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x40) unshare$auto(0x40000080) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sysfs$auto(0x2, 0x3b, 0x0) fsopen$auto(0x0, 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20080000004, 0x80000001, 0x1000000000000bc3, 0x800, 0x4, 0xfc, 0x10001, 0x400000000003, 0x1ae9, 0xfffffffffffffffc, 0xfffffffffffffffa, 0x80000000, 0x1, 0xffffdfffffffff81, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 1.376514968s ago: executing program 9 (id=2131): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0x1, 0x40, 0x4202, 0x3}, 0x2, 0xfffffffffffffffe, "72e00d838b24ff6fd5411f43301c8fa23cf2b9541b3466000000000000000003"}) 1.241831423s ago: executing program 9 (id=2132): openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0xa, 0x9) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='`k\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fcdbdf25020000000b0001"], 0x20}, 0x1, 0x0, 0x0, 0x20041040}, 0x44c0) (async) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='`k\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fcdbdf25020000000b0001"], 0x20}, 0x1, 0x0, 0x0, 0x20041040}, 0x44c0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) sysfs$auto(0x2, 0x1c, 0x0) (async) sysfs$auto(0x2, 0x1c, 0x0) fsopen$auto(0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x70f807, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/set_event\x00', 0x2000, 0x0) (async) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/set_event\x00', 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x1) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/kvm/insn_emulation_fail\x00', 0xa2540, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) r0 = io_uring_setup$auto(0x86, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0) ioctl$auto(r1, 0xc0205647, r0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x8961, 0x0) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x8961, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x50, 0x1d, 0xa9, 0x0, 0x4, 0x9, 0x9, 0xb, 0x6}, 0x0) (async) sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x50, 0x1d, 0xa9, 0x0, 0x4, 0x9, 0x9, 0xb, 0x6}, 0x0) 701.883589ms ago: executing program 9 (id=2133): r0 = socket(0x1e, 0x4, 0x0) connect$auto(r0, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) read$auto(0xffffffffffffffff, 0x0, 0x10001) timer_create$auto(0x4, &(0x7f0000000140)={@sival_ptr=0x0, @raw=0x6, 0xe}, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) unshare$auto(0x20000) r1 = socket(0x2, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/hsr_slave_0/hop_limit\x00', 0x6c0200, 0x0) ptrace$auto_PTRACE_INTERRUPT(0x4207, 0x0, 0x0, 0xffffffffffffffff) r2 = landlock_create_ruleset$auto(0x0, 0x9, 0x0) r3 = syz_genetlink_get_family_id$auto_net_shaper(0x0, r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'dvmrp0\x00'}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0090000", @ANYRES16=r4, @ANYBLOB="131f2cbd700023723ab36bf877ac08000300", @ANYRES32=r6], 0x9c0}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gre0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00'}) prctl$auto(0x35, 0x1, 0x2, 0x0, 0x0) sendmsg$auto_NET_SHAPER_CMD_GET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x5090) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 0s ago: executing program 9 (id=2134): r0 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/comm\x00', 0x100002, 0x0) write$auto_proc_pid_set_comm_operations_base(r0, &(0x7f0000000180)="6276201aabce9978193ab594e7231ad29d869fee3ddc9c96ff6dd08c8c67900234b05b6f105b75b8ec165d7ce0ec895800a7d73b1d71bd857a", 0x39) kernel console output (not intermixed with test programs): 0'. [ 373.487902][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'. [ 374.196715][T11760] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1225'. [ 374.282622][T11760] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 374.492295][T11773] can: request_module (can-proto-0) failed. [ 375.097240][T11786] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1232'. [ 376.460951][ T29] audit: type=1800 audit(4294969690.178:12): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1239" name="dbroot" dev="configfs" ino=48065 res=0 errno=0 [ 376.789802][T11834] netlink: 'syz.3.1240': attribute type 10 has an invalid length. [ 376.857234][T11834] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1240'. [ 376.927129][T11843] netlink: 'syz.3.1240': attribute type 10 has an invalid length. [ 376.962985][T11843] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1240'. [ 377.046266][T11856] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1241'. [ 377.344014][T11864] No such timeout policy "" [ 377.383492][T11864] netlink: Failed to associated timeout policy '' [ 377.662163][T11870] zswap: compressor not available [ 378.242914][T11883] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1246'. [ 378.277609][T11883] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 378.378780][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.390321][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.719651][T11910] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1252'. [ 379.738190][T11903] HfR: entered promiscuous mode [ 380.249912][T11883] Process accounting resumed [ 382.043869][T11958] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1261'. [ 382.069156][T11956] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 382.157462][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1260'. [ 382.729774][T11966] FAULT_INJECTION: forcing a failure. [ 382.729774][T11966] name failslab, interval 1, probability 0, space 0, times 0 [ 382.837360][T11966] CPU: 0 UID: 0 PID: 11966 Comm: syz.0.1260 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.837389][T11966] Tainted: [L]=SOFTLOCKUP [ 382.837395][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.837404][T11966] Call Trace: [ 382.837411][T11966] [ 382.837417][T11966] dump_stack_lvl+0x100/0x190 [ 382.837440][T11966] should_fail_ex.cold+0x5/0xa [ 382.837459][T11966] should_failslab+0xc2/0x120 [ 382.837478][T11966] __kmalloc_cache_noprof+0x91/0x6c0 [ 382.837505][T11966] ? tty_alloc_file+0x3f/0xa0 [ 382.837525][T11966] ? __pfx_ptmx_open+0x10/0x10 [ 382.837547][T11966] tty_alloc_file+0x3f/0xa0 [ 382.837563][T11966] ptmx_open+0x61/0x360 [ 382.837588][T11966] ? __pfx_ptmx_open+0x10/0x10 [ 382.837610][T11966] chrdev_open+0x234/0x6a0 [ 382.837632][T11966] ? __pfx_apparmor_file_open+0x10/0x10 [ 382.837785][T11966] ? __pfx_chrdev_open+0x10/0x10 [ 382.837809][T11966] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 382.837828][T11966] do_dentry_open+0x6ab/0x14d0 [ 382.837852][T11966] ? __pfx_chrdev_open+0x10/0x10 [ 382.837877][T11966] vfs_open+0x82/0x3f0 [ 382.837896][T11966] path_openat+0x2873/0x4280 [ 382.837925][T11966] ? __pfx_path_openat+0x10/0x10 [ 382.837952][T11966] do_file_open+0x20e/0x430 [ 382.837975][T11966] ? __pfx_do_file_open+0x10/0x10 [ 382.838010][T11966] ? alloc_fd+0x471/0x7a0 [ 382.838033][T11966] ? do_getname+0x191/0x390 [ 382.838050][T11966] do_sys_openat2+0x10f/0x1e0 [ 382.838074][T11966] ? __pfx_do_sys_openat2+0x10/0x10 [ 382.838094][T11966] ? do_raw_spin_lock+0x128/0x260 [ 382.838114][T11966] __x64_sys_openat+0x12d/0x210 [ 382.838133][T11966] ? __pfx___x64_sys_openat+0x10/0x10 [ 382.838158][T11966] do_syscall_64+0x115/0x840 [ 382.838180][T11966] ? clear_bhb_loop+0x40/0x90 [ 382.838199][T11966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.838215][T11966] RIP: 0033:0x7ff71999de59 [ 382.838230][T11966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.838245][T11966] RSP: 002b:00007ff717bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 382.838260][T11966] RAX: ffffffffffffffda RBX: 00007ff719c26180 RCX: 00007ff71999de59 [ 382.838270][T11966] RDX: 00000000000c2b80 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 382.838280][T11966] RBP: 00007ff719a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 382.838290][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.838299][T11966] R13: 00007ff719c26218 R14: 00007ff719c26180 R15: 00007ffd1ab49c18 [ 382.838318][T11966] [ 385.669025][T12008] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1270'. [ 386.180477][T12016] HfR: entered promiscuous mode [ 386.439019][T12027] netlink: 'syz.2.1274': attribute type 1 has an invalid length. [ 386.552338][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1274'. [ 387.014175][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1271'. [ 387.155500][T12038] FAULT_INJECTION: forcing a failure. [ 387.155500][T12038] name failslab, interval 1, probability 0, space 0, times 0 [ 387.338615][T12038] CPU: 0 UID: 0 PID: 12038 Comm: syz.2.1274 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.338645][T12038] Tainted: [L]=SOFTLOCKUP [ 387.338651][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 387.338667][T12038] Call Trace: [ 387.338672][T12038] [ 387.338680][T12038] dump_stack_lvl+0x100/0x190 [ 387.338703][T12038] should_fail_ex.cold+0x5/0xa [ 387.338721][T12038] should_failslab+0xc2/0x120 [ 387.338741][T12038] __kmalloc_cache_noprof+0x91/0x6c0 [ 387.338764][T12038] ? tty_alloc_file+0x3f/0xa0 [ 387.338784][T12038] ? __pfx_ptmx_open+0x10/0x10 [ 387.338806][T12038] tty_alloc_file+0x3f/0xa0 [ 387.338823][T12038] ptmx_open+0x61/0x360 [ 387.338844][T12038] ? __pfx_ptmx_open+0x10/0x10 [ 387.338865][T12038] chrdev_open+0x234/0x6a0 [ 387.338887][T12038] ? __pfx_apparmor_file_open+0x10/0x10 [ 387.338911][T12038] ? __pfx_chrdev_open+0x10/0x10 [ 387.338933][T12038] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 387.338952][T12038] do_dentry_open+0x6ab/0x14d0 [ 387.338973][T12038] ? __pfx_chrdev_open+0x10/0x10 [ 387.338999][T12038] vfs_open+0x82/0x3f0 [ 387.339017][T12038] path_openat+0x2873/0x4280 [ 387.339047][T12038] ? __pfx_path_openat+0x10/0x10 [ 387.339073][T12038] do_file_open+0x20e/0x430 [ 387.339096][T12038] ? __pfx_do_file_open+0x10/0x10 [ 387.339130][T12038] ? alloc_fd+0x471/0x7a0 [ 387.339153][T12038] ? do_getname+0x191/0x390 [ 387.339170][T12038] do_sys_openat2+0x10f/0x1e0 [ 387.339187][T12038] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.339211][T12038] __x64_sys_openat+0x12d/0x210 [ 387.339228][T12038] ? __pfx___x64_sys_openat+0x10/0x10 [ 387.339252][T12038] do_syscall_64+0x115/0x840 [ 387.339275][T12038] ? clear_bhb_loop+0x40/0x90 [ 387.339292][T12038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.339308][T12038] RIP: 0033:0x7f296e99de59 [ 387.339321][T12038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.339336][T12038] RSP: 002b:00007f296f8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.339350][T12038] RAX: ffffffffffffffda RBX: 00007f296ec26180 RCX: 00007f296e99de59 [ 387.339361][T12038] RDX: 00000000000c2b80 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 387.339371][T12038] RBP: 00007f296ea33e6f R08: 0000000000000000 R09: 0000000000000000 [ 387.339380][T12038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.339389][T12038] R13: 00007f296ec26218 R14: 00007f296ec26180 R15: 00007fff747af3f8 [ 387.339408][T12038] [ 389.131928][T12072] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1280'. [ 389.356396][ T4942] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 390.353311][T12099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1287'. [ 390.647078][T12108] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1289'. [ 391.624674][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1287'. [ 391.720485][T12123] ima: Unable to open file: /surit‹¯Ròy/integrity?iqa/policy (-2) [ 392.018135][T12123] ima: policy update failed [ 392.038340][ T29] audit: type=1802 audit(4294967302.861:13): pid=12123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1293" res=0 errno=0 [ 393.148586][T12150] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1299'. [ 393.410676][T12158] openvswitch: netlink: Message has 4 unknown bytes. [ 394.602470][T12172] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1303'. [ 395.084386][T12187] FAULT_INJECTION: forcing a failure. [ 395.084386][T12187] name failslab, interval 1, probability 0, space 0, times 0 [ 395.185162][T12187] CPU: 0 UID: 0 PID: 12187 Comm: syz.3.1305 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.185189][T12187] Tainted: [L]=SOFTLOCKUP [ 395.185195][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 395.185205][T12187] Call Trace: [ 395.185210][T12187] [ 395.185217][T12187] dump_stack_lvl+0x100/0x190 [ 395.185243][T12187] should_fail_ex.cold+0x5/0xa [ 395.185262][T12187] should_failslab+0xc2/0x120 [ 395.185284][T12187] kmem_cache_alloc_noprof+0x91/0x6a0 [ 395.185302][T12187] ? do_getname+0x35/0x390 [ 395.185323][T12187] do_getname+0x35/0x390 [ 395.185343][T12187] user_path_at+0x26/0x60 [ 395.185363][T12187] inotify_find_inode+0x2e/0x160 [ 395.185459][T12187] __x64_sys_inotify_add_watch+0x20a/0x370 [ 395.185482][T12187] ? __pfx___x64_sys_inotify_add_watch+0x10/0x10 [ 395.185509][T12187] do_syscall_64+0x115/0x840 [ 395.185535][T12187] ? clear_bhb_loop+0x40/0x90 [ 395.185553][T12187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.185568][T12187] RIP: 0033:0x7fbc33b9de59 [ 395.185583][T12187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.185597][T12187] RSP: 002b:00007fbc34b28028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 395.185612][T12187] RAX: ffffffffffffffda RBX: 00007fbc33e26090 RCX: 00007fbc33b9de59 [ 395.185622][T12187] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 000000000000000a [ 395.185631][T12187] RBP: 00007fbc33c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 395.185640][T12187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.185649][T12187] R13: 00007fbc33e26128 R14: 00007fbc33e26090 R15: 00007ffd709f03c8 [ 395.185668][T12187] [ 396.773004][T12188] HfR: entered promiscuous mode [ 397.241727][T12188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'. [ 397.540511][T12231] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1310'. [ 399.219005][T12264] netlink: 'syz.1.1317': attribute type 1 has an invalid length. [ 399.311785][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'. [ 400.872743][T12266] kexec: Could not allocate control_code_buffer [ 403.756989][T12343] Process accounting resumed [ 403.780311][ T29] audit: type=1800 audit(4294967314.673:14): pid=12350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1333" name="dbroot" dev="configfs" ino=51352 res=0 errno=0 [ 405.561515][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1342'. [ 405.632164][T12404] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.641281][T12404] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.728207][T12415] random: crng reseeded on system resumption [ 405.772223][T12404] bridge0: entered promiscuous mode [ 407.441837][T12438] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1351'. [ 407.805866][T12455] netlink: 'syz.2.1353': attribute type 1 has an invalid length. [ 408.113861][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 408.302064][T12460] device-mapper: ioctl: name not supplied when creating device [ 410.224955][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 411.143206][T12508] ICMPv6: process `syz.3.1366' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 411.766518][T12521] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1370'. [ 412.105379][T12523] netlink: 'syz.3.1369': attribute type 1 has an invalid length. [ 415.038806][T12563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1376'. [ 416.336953][T12582] zswap: compressor 000 not available [ 416.364084][T12596] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 417.990132][T12612] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 418.126124][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1384'. [ 418.389085][T12608] team0: Port device team_slave_0 removed [ 418.604850][T12610] Process accounting resumed [ 420.127402][T12639] syz_tun: tun_chr_ioctl cmd 21731 [ 426.004924][T12735] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 426.107648][T12735] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 426.236087][T12735] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 426.876897][T12046] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 426.886551][T12046] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 426.895945][T12046] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 426.904663][T12046] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 426.922055][T12046] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 428.249585][T12774] ovs_ÿþÿþ?: entered promiscuous mode [ 428.987876][ T4942] Bluetooth: hci4: command tx timeout [ 429.400668][T12754] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.445719][T12754] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.487346][T12754] bridge_slave_0: entered allmulticast mode [ 429.517895][T12754] bridge_slave_0: entered promiscuous mode [ 429.561683][T12754] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.607788][T12754] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.650681][T12754] bridge_slave_1: entered allmulticast mode [ 429.698153][T12754] bridge_slave_1: entered promiscuous mode [ 429.861270][T12754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.938108][T12754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.211672][T12754] team0: Port device team_slave_0 added [ 430.259080][T12754] team0: Port device team_slave_1 added [ 430.636018][T12754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.682532][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.820536][T12754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.911191][T12754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.945471][T12816] vivid-011: ================= START STATUS ================= [ 430.962507][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.064240][ T4942] Bluetooth: hci4: command tx timeout [ 431.096459][T12816] vivid-011: Radio HW Seek Mode: Bounded [ 431.110747][T12754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.264508][T12816] vivid-011: Radio Programmable HW Seek: false [ 431.338290][T12816] vivid-011: RDS Rx I/O Mode: Block I/O [ 431.400747][T12816] vivid-011: Generate RBDS Instead of RDS: false [ 431.492519][T12816] vivid-011: RDS Reception: true [ 431.589374][T12816] vivid-011: RDS Program Type: 0 inactive [ 431.678621][T12816] vivid-011: RDS PS Name: inactive [ 431.707074][T12754] hsr_slave_0: entered promiscuous mode [ 431.741539][T12754] hsr_slave_1: entered promiscuous mode [ 431.763191][T12816] vivid-011: RDS Radio Text: inactive [ 431.781483][T12754] debugfs: 'hsr0' already exists in 'hsr' [ 431.810355][T12754] Cannot create hsr debugfs directory [ 431.865250][T12816] vivid-011: RDS Traffic Announcement: false inactive [ 431.952283][T12816] vivid-011: RDS Traffic Program: false inactive [ 432.059269][T12816] vivid-011: RDS Music: false inactive [ 432.151387][T12816] vivid-011: ================== END STATUS ================== [ 433.093179][T12754] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 433.126481][ T4942] Bluetooth: hci4: command tx timeout [ 433.192132][T12754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.236356][T12754] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 433.300751][T12754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.343800][T12754] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 433.412116][T12754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.461295][T12754] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 433.529809][T12754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.781029][T12832] overlayfs: missing 'lowerdir' [ 434.011386][T12754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.120782][T12754] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.182358][ T8840] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.189543][ T8840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.213394][T12850] kafs: addr_prefs: Invalid Command [ 434.276229][ T8840] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.283399][ T8840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.195699][ T4942] Bluetooth: hci4: command tx timeout [ 435.348383][T12867] kafs: addr_prefs: Invalid Command [ 436.098583][T12754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.025732][T12877] misc userio: Invalid payload size [ 437.514081][T12754] veth0_vlan: entered promiscuous mode [ 437.599911][T12754] veth1_vlan: entered promiscuous mode [ 437.750368][T12754] veth0_macvtap: entered promiscuous mode [ 437.804954][T12754] veth1_macvtap: entered promiscuous mode [ 437.894104][T12754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.956453][T12754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.059443][ T6231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.137550][ T6231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.192733][ T6231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.430590][ T6231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.897232][ T8840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.963266][ T8840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.123717][T10699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.173608][T10699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.403852][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1439'. [ 439.447948][T12754] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 439.500892][T12917] veth0_macvtap: left promiscuous mode [ 439.509368][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.522314][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.568302][T12917] macvtap0: entered promiscuous mode [ 439.600193][T12917] macvtap0: entered allmulticast mode [ 440.358745][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1443'. [ 440.800848][T12953] netlink: 'syz.4.1446': attribute type 1 has an invalid length. [ 440.901718][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'. [ 441.240583][T12509] Process accounting paused [ 441.303719][T12959] FAULT_INJECTION: forcing a failure. [ 441.303719][T12959] name failslab, interval 1, probability 0, space 0, times 0 [ 441.487189][T12959] CPU: 0 UID: 0 PID: 12959 Comm: syz.4.1446 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.487218][T12959] Tainted: [L]=SOFTLOCKUP [ 441.487223][T12959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 441.487233][T12959] Call Trace: [ 441.487238][T12959] [ 441.487244][T12959] dump_stack_lvl+0x100/0x190 [ 441.487267][T12959] should_fail_ex.cold+0x5/0xa [ 441.487285][T12959] should_failslab+0xc2/0x120 [ 441.487303][T12959] __kmalloc_cache_noprof+0x91/0x6c0 [ 441.487326][T12959] ? tty_alloc_file+0x3f/0xa0 [ 441.487348][T12959] ? __pfx_ptmx_open+0x10/0x10 [ 441.487372][T12959] tty_alloc_file+0x3f/0xa0 [ 441.487389][T12959] ptmx_open+0x61/0x360 [ 441.487411][T12959] ? __pfx_ptmx_open+0x10/0x10 [ 441.487433][T12959] chrdev_open+0x234/0x6a0 [ 441.487455][T12959] ? __pfx_apparmor_file_open+0x10/0x10 [ 441.487480][T12959] ? __pfx_chrdev_open+0x10/0x10 [ 441.487502][T12959] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 441.487521][T12959] do_dentry_open+0x6ab/0x14d0 [ 441.487543][T12959] ? __pfx_chrdev_open+0x10/0x10 [ 441.487569][T12959] vfs_open+0x82/0x3f0 [ 441.487588][T12959] path_openat+0x2873/0x4280 [ 441.487617][T12959] ? __pfx_path_openat+0x10/0x10 [ 441.487644][T12959] do_file_open+0x20e/0x430 [ 441.487667][T12959] ? __pfx_do_file_open+0x10/0x10 [ 441.487702][T12959] ? alloc_fd+0x471/0x7a0 [ 441.487725][T12959] ? do_getname+0x191/0x390 [ 441.487742][T12959] do_sys_openat2+0x10f/0x1e0 [ 441.487759][T12959] ? __pfx_do_sys_openat2+0x10/0x10 [ 441.487777][T12959] ? do_raw_spin_lock+0x128/0x260 [ 441.487797][T12959] __x64_sys_openat+0x12d/0x210 [ 441.487815][T12959] ? __pfx___x64_sys_openat+0x10/0x10 [ 441.487840][T12959] do_syscall_64+0x115/0x840 [ 441.487861][T12959] ? clear_bhb_loop+0x40/0x90 [ 441.487880][T12959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.487895][T12959] RIP: 0033:0x7fbb1499de59 [ 441.487915][T12959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.487930][T12959] RSP: 002b:00007fbb157b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 441.487946][T12959] RAX: ffffffffffffffda RBX: 00007fbb14c26180 RCX: 00007fbb1499de59 [ 441.487957][T12959] RDX: 00000000000c2b80 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 441.487967][T12959] RBP: 00007fbb14a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 441.487976][T12959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.487985][T12959] R13: 00007fbb14c26218 R14: 00007fbb14c26180 R15: 00007ffc78f8c378 [ 441.488005][T12959] [ 442.322238][T12839] Process accounting resumed [ 442.620342][T12969] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 442.802775][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.347801][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.682621][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.762282][ T35] veth1: left allmulticast mode [ 444.809110][ T35] veth1: left promiscuous mode [ 444.857517][ T35] bridge0: port 3(veth1) entered disabled state [ 444.898666][T13015] FAULT_INJECTION: forcing a failure. [ 444.898666][T13015] name failslab, interval 1, probability 0, space 0, times 0 [ 444.961612][ T35] bridge_slave_1: left allmulticast mode [ 444.974184][T13015] CPU: 0 UID: 0 PID: 13015 Comm: syz.2.1458 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.974211][T13015] Tainted: [L]=SOFTLOCKUP [ 444.974217][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.974226][T13015] Call Trace: [ 444.974232][T13015] [ 444.974238][T13015] dump_stack_lvl+0x100/0x190 [ 444.974260][T13015] should_fail_ex.cold+0x5/0xa [ 444.974278][T13015] should_failslab+0xc2/0x120 [ 444.974297][T13015] __kmalloc_cache_noprof+0x91/0x6c0 [ 444.974321][T13015] ? usbdev_open+0x9d/0x870 [ 444.974460][T13015] usbdev_open+0x9d/0x870 [ 444.974481][T13015] ? kobject_get_unless_zero+0x156/0x200 [ 444.974508][T13015] ? __pfx_usbdev_open+0x10/0x10 [ 444.974526][T13015] ? chrdev_open+0x10b/0x6a0 [ 444.974556][T13015] ? chrdev_open+0x10b/0x6a0 [ 444.974581][T13015] ? __pfx_usbdev_open+0x10/0x10 [ 444.974601][T13015] chrdev_open+0x234/0x6a0 [ 444.974622][T13015] ? __pfx_apparmor_file_open+0x10/0x10 [ 444.974646][T13015] ? __pfx_chrdev_open+0x10/0x10 [ 444.974669][T13015] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 444.974688][T13015] do_dentry_open+0x6ab/0x14d0 [ 444.974711][T13015] ? __pfx_chrdev_open+0x10/0x10 [ 444.974737][T13015] vfs_open+0x82/0x3f0 [ 444.974755][T13015] path_openat+0x2873/0x4280 [ 444.974784][T13015] ? __pfx_path_openat+0x10/0x10 [ 444.974811][T13015] do_file_open+0x20e/0x430 [ 444.974834][T13015] ? __pfx_do_file_open+0x10/0x10 [ 444.974868][T13015] ? alloc_fd+0x471/0x7a0 [ 444.974890][T13015] ? do_getname+0x191/0x390 [ 444.974908][T13015] do_sys_openat2+0x10f/0x1e0 [ 444.974924][T13015] ? __pfx_do_sys_openat2+0x10/0x10 [ 444.974943][T13015] ? do_raw_spin_lock+0x128/0x260 [ 444.974962][T13015] __x64_sys_openat+0x12d/0x210 [ 444.974979][T13015] ? __pfx___x64_sys_openat+0x10/0x10 [ 444.975004][T13015] do_syscall_64+0x115/0x840 [ 444.975024][T13015] ? clear_bhb_loop+0x40/0x90 [ 444.975043][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.975057][T13015] RIP: 0033:0x7f296e99de59 [ 444.975071][T13015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.975086][T13015] RSP: 002b:00007f296f91f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 444.975101][T13015] RAX: ffffffffffffffda RBX: 00007f296ec26090 RCX: 00007f296e99de59 [ 444.975111][T13015] RDX: 000000000000a901 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 444.975121][T13015] RBP: 00007f296ea33e6f R08: 0000000000000000 R09: 0000000000000000 [ 444.975130][T13015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.975139][T13015] R13: 00007f296ec26128 R14: 00007f296ec26090 R15: 00007fff747af3f8 [ 444.975161][T13015] [ 445.518755][ T35] bridge_slave_1: left promiscuous mode [ 445.524509][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.864848][ T35] bridge_slave_0: left allmulticast mode [ 445.907394][ T35] bridge_slave_0: left promiscuous mode [ 445.913794][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.024089][T13035] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 446.080652][T13034] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 446.767800][T13013] FAULT_INJECTION: forcing a failure. [ 446.767800][T13013] name fail_futex, interval 1, probability 0, space 0, times 1 [ 446.834090][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.875524][ T35] bond0 (unregistering): Released all slaves [ 446.969012][T13013] CPU: 0 UID: 0 PID: 13013 Comm: syz.3.1456 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.969036][T13013] Tainted: [L]=SOFTLOCKUP [ 446.969041][T13013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 446.969050][T13013] Call Trace: [ 446.969055][T13013] [ 446.969060][T13013] dump_stack_lvl+0x100/0x190 [ 446.969081][T13013] should_fail_ex.cold+0x5/0xa [ 446.969097][T13013] get_futex_key+0xf74/0x14f0 [ 446.969122][T13013] ? __pfx_get_futex_key+0x10/0x10 [ 446.969142][T13013] ? lock_acquire+0x1b9/0x370 [ 446.969166][T13013] futex_wake+0xf4/0x5e0 [ 446.969184][T13013] ? __pfx_futex_wake+0x10/0x10 [ 446.969200][T13013] ? find_held_lock+0x2b/0x80 [ 446.969216][T13013] ? exit_mm_release+0x19/0x30 [ 446.969267][T13013] do_futex+0x2b2/0x440 [ 446.969281][T13013] ? __pfx_do_futex+0x10/0x10 [ 446.969293][T13013] ? __might_fault+0xc5/0x140 [ 446.969325][T13013] mm_release+0x24a/0x2f0 [ 446.969348][T13013] do_exit+0x707/0x2ae0 [ 446.969367][T13013] ? __pfx_do_exit+0x10/0x10 [ 446.969384][T13013] ? do_raw_spin_lock+0x128/0x260 [ 446.969397][T13013] ? find_held_lock+0x2b/0x80 [ 446.969412][T13013] ? get_signal+0x7e0/0x21e0 [ 446.969428][T13013] do_group_exit+0xd5/0x2a0 [ 446.969446][T13013] get_signal+0x1ec7/0x21e0 [ 446.969467][T13013] ? __pfx_get_signal+0x10/0x10 [ 446.969482][T13013] ? do_futex+0x190/0x440 [ 446.969497][T13013] arch_do_signal_or_restart+0x91/0x7a0 [ 446.969525][T13013] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 446.969556][T13013] exit_to_user_mode_loop+0x139/0x6f0 [ 446.969577][T13013] ? rcu_is_watching+0x12/0xc0 [ 446.969593][T13013] do_syscall_64+0x652/0x840 [ 446.969615][T13013] ? clear_bhb_loop+0x40/0x90 [ 446.969632][T13013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.969646][T13013] RIP: 0033:0x7fbc33b9de59 [ 446.969659][T13013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.969672][T13013] RSP: 002b:00007fbc34b070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 446.969686][T13013] RAX: fffffffffffffe00 RBX: 00007fbc33e26188 RCX: 00007fbc33b9de59 [ 446.969696][T13013] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbc33e26188 [ 446.969704][T13013] RBP: 00007fbc33e26180 R08: 0000000000000000 R09: 0000000000000000 [ 446.969713][T13013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.969721][T13013] R13: 00007fbc33e26218 R14: 00007ffd709f02e0 R15: 00007ffd709f03c8 [ 446.969739][T13013] [ 447.595783][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 447.641583][ T35] HfR: left promiscuous mode [ 448.235926][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1467'. [ 449.852229][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 450.255667][ T35] hsr_slave_0: left promiscuous mode [ 450.302369][ T35] hsr_slave_1: left promiscuous mode [ 450.351179][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.408902][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.470531][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.478780][T13126] phram: not enough arguments [ 450.520524][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.646789][T13133] netlink: 'syz.4.1477': attribute type 1 has an invalid length. [ 450.689657][ T35] veth1_macvtap: left promiscuous mode [ 450.725270][ T35] veth0_macvtap: left promiscuous mode [ 451.236887][ T35] team0 (unregistering): Port device team_slave_0 removed [ 451.526490][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 452.180597][T13158] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 452.751498][T13187] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 452.820016][T13187] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1483'. [ 453.714704][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 454.737040][T13233] netlink: 'syz.2.1490': attribute type 1 has an invalid length. [ 454.748226][T13222] vhci_hcd: not connected 4 [ 456.627287][T13265] vivid-007: ================= START STATUS ================= [ 456.653071][T13265] vivid-007: Generate PTS: true [ 456.673073][T13265] vivid-007: Generate SCR: true [ 456.689662][T13265] tpg source WxH: 320x240 (Y'CbCr) [ 456.727133][T13265] tpg field: 1 [ 456.739462][T13265] tpg crop: (0,0)/320x240 [ 456.757574][T13265] tpg compose: (0,0)/320x240 [ 456.772949][T13265] tpg colorspace: 8 [ 456.792530][T13265] tpg transfer function: 0/0 [ 456.818115][T13265] tpg Y'CbCr encoding: 0/0 [ 456.839029][T13265] tpg quantization: 0/0 [ 456.852674][T13265] tpg RGB range: 0/2 [ 456.876382][T13265] vivid-007: ================== END STATUS ================== [ 460.442643][T13338] ima: policy update failed [ 460.479078][ T29] audit: type=1802 audit(4294968394.661:15): pid=13338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1509" res=0 errno=0 [ 460.593594][T13381] vivid-008: ================= START STATUS ================= [ 460.874726][T13381] vivid-008: ================== END STATUS ================== [ 462.265225][T13424] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 462.329234][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 463.500763][T13428] FAULT_INJECTION: forcing a failure. [ 463.500763][T13428] name failslab, interval 1, probability 0, space 0, times 0 [ 463.579013][T13428] CPU: 0 UID: 0 PID: 13428 Comm: syz.2.1524 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.579055][T13428] Tainted: [L]=SOFTLOCKUP [ 463.579064][T13428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 463.579080][T13428] Call Trace: [ 463.579089][T13428] [ 463.579099][T13428] dump_stack_lvl+0x100/0x190 [ 463.579134][T13428] should_fail_ex.cold+0x5/0xa [ 463.579162][T13428] should_failslab+0xc2/0x120 [ 463.579180][T13428] kmem_cache_alloc_noprof+0x91/0x6a0 [ 463.579196][T13428] ? __pfx_acct_collect+0x10/0x10 [ 463.579213][T13428] ? taskstats_exit+0x6d3/0xca0 [ 463.579266][T13428] taskstats_exit+0x6d3/0xca0 [ 463.579282][T13428] ? __pfx_acct_update_integrals+0x10/0x10 [ 463.579301][T13428] ? __pfx_taskstats_exit+0x10/0x10 [ 463.579319][T13428] ? rcu_read_lock_any_held+0x6a/0xa0 [ 463.579339][T13428] do_exit+0x65c/0x2ae0 [ 463.579359][T13428] ? __pfx_do_exit+0x10/0x10 [ 463.579375][T13428] ? do_raw_spin_lock+0x128/0x260 [ 463.579389][T13428] ? find_held_lock+0x2b/0x80 [ 463.579404][T13428] ? get_signal+0x7e0/0x21e0 [ 463.579419][T13428] do_group_exit+0xd5/0x2a0 [ 463.579438][T13428] get_signal+0x1ec7/0x21e0 [ 463.579458][T13428] ? __pfx_get_signal+0x10/0x10 [ 463.579473][T13428] ? do_futex+0x190/0x440 [ 463.579488][T13428] arch_do_signal_or_restart+0x91/0x7a0 [ 463.579510][T13428] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 463.579535][T13428] ? __x64_sys_openat+0x12d/0x210 [ 463.579557][T13428] exit_to_user_mode_loop+0x139/0x6f0 [ 463.579577][T13428] ? rcu_is_watching+0x12/0xc0 [ 463.579594][T13428] do_syscall_64+0x652/0x840 [ 463.579615][T13428] ? clear_bhb_loop+0x40/0x90 [ 463.579632][T13428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.579647][T13428] RIP: 0033:0x7f296e99de59 [ 463.579659][T13428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.579673][T13428] RSP: 002b:00007f296f9400e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 463.579687][T13428] RAX: fffffffffffffe00 RBX: 00007f296ec25fa8 RCX: 00007f296e99de59 [ 463.579696][T13428] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f296ec25fa8 [ 463.579704][T13428] RBP: 00007f296ec25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 463.579713][T13428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.579721][T13428] R13: 00007f296ec26038 R14: 00007fff747af310 R15: 00007fff747af3f8 [ 463.579739][T13428] [ 465.772540][T13483] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1531'. [ 466.559015][T13407] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 3515 with max blocks 69 with error 117 [ 466.651794][T13407] EXT4-fs (sda1): This should not happen!! Data will be lost [ 466.651794][T13407] [ 470.394911][T13613] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1545'. [ 470.655076][T13615] netlink: 'syz.4.1546': attribute type 1 has an invalid length. [ 470.753429][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 473.956244][T13662] kexec: Could not allocate control_code_buffer [ 475.325269][T13703] netlink: 2404 bytes leftover after parsing attributes in process `syz.2.1557'. [ 477.448276][T13732] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.1564'. [ 478.044959][T13731] Process accounting paused [ 478.431768][T13751] netlink: 'syz.4.1566': attribute type 11 has an invalid length. [ 478.479785][T13751] netlink: 'syz.4.1566': attribute type 11 has an invalid length. [ 478.525403][T13751] netlink: 'syz.4.1566': attribute type 11 has an invalid length. [ 478.698334][T13758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1567'. [ 479.910205][T13412] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 481.290227][ T29] audit: type=1807 audit(4294968415.559:16): UNKNOWN=nl80211 res=0 [ 481.417155][ T29] audit: type=1802 audit(4294968415.689:17): pid=13813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1576" res=0 errno=0 [ 481.440138][T13819] sd 0:0:1:0: PR command failed: 1026 [ 481.466483][T13819] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 481.492416][T13819] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 481.867299][T13807] ima: policy update failed [ 481.889837][ T29] audit: type=1802 audit(4294968416.171:18): pid=13807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1576" res=0 errno=0 [ 482.260952][T13839] MTRR 1 not used [ 484.021287][T13860] zswap: compressor 000 not available [ 485.677206][T13885] random: crng reseeded on system resumption [ 485.854865][T13887] bridge0: port 3(netdevsim3) entered blocking state [ 485.898766][T13887] bridge0: port 3(netdevsim3) entered disabled state [ 485.933390][T13887] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 485.972236][T13887] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 486.039249][T13887] bridge0: port 3(netdevsim3) entered blocking state [ 486.046077][T13887] bridge0: port 3(netdevsim3) entered forwarding state [ 486.628624][T13899] Process accounting resumed [ 488.166478][T13931] netlink: 202 bytes leftover after parsing attributes in process `syz.4.1600'. [ 488.909624][T13949] ecryptfs_parse_packet_length: Error parsing packet length [ 488.942950][T13949] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 490.393650][T13971] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.1610'. [ 491.822936][T14002] ima: policy update failed [ 491.861434][ T29] audit: type=1802 audit(4294968426.188:19): pid=14002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1617" res=0 errno=0 [ 491.893361][T14002] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1617'. [ 492.786414][T14012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1618'. [ 493.063854][T14012] bond0: (slave bond_slave_1): Releasing backup interface [ 493.489415][T14019] netlink: 'syz.2.1620': attribute type 1 has an invalid length. [ 493.669702][T14025] FAULT_INJECTION: forcing a failure. [ 493.669702][T14025] name failslab, interval 1, probability 0, space 0, times 0 [ 493.840775][T14025] CPU: 0 UID: 0 PID: 14025 Comm: syz.2.1620 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.840807][T14025] Tainted: [L]=SOFTLOCKUP [ 493.840814][T14025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 493.840824][T14025] Call Trace: [ 493.840830][T14025] [ 493.840837][T14025] dump_stack_lvl+0x100/0x190 [ 493.840865][T14025] should_fail_ex.cold+0x5/0xa [ 493.840884][T14025] should_failslab+0xc2/0x120 [ 493.840905][T14025] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 493.840924][T14025] ? __d_alloc+0x35/0xa50 [ 493.840944][T14025] __d_alloc+0x35/0xa50 [ 493.840980][T14025] d_alloc+0x4a/0x1e0 [ 493.840998][T14025] lookup_one_qstr_excl+0x171/0x250 [ 493.841019][T14025] start_dirop+0x59/0xb0 [ 493.841043][T14025] simple_start_creating+0xf9/0x110 [ 493.841067][T14025] ? __pfx_simple_start_creating+0x10/0x10 [ 493.841089][T14025] ? mntput+0x70/0xa0 [ 493.841109][T14025] ? simple_pin_fs+0xa3/0x190 [ 493.841159][T14025] debugfs_start_creating.part.0+0x82/0x170 [ 493.841264][T14025] __debugfs_create_file+0xb3/0x4f0 [ 493.841288][T14025] debugfs_create_file_full+0x41/0x60 [ 493.841310][T14025] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 493.841372][T14025] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 493.841410][T14025] ? kasan_save_track+0x14/0x30 [ 493.841429][T14025] ? __kasan_kmalloc+0xaa/0xb0 [ 493.841447][T14025] ? lockdep_init_map_type+0x5c/0x250 [ 493.841473][T14025] preinit_net.part.0+0x43b/0x920 [ 493.841536][T14025] copy_net_ns+0x339/0x7c0 [ 493.841560][T14025] create_new_namespaces+0x3ea/0xac0 [ 493.841593][T14025] unshare_nsproxy_namespaces+0xf2/0x220 [ 493.841620][T14025] ksys_unshare+0x438/0xab0 [ 493.841639][T14025] ? __pfx_ksys_unshare+0x10/0x10 [ 493.841663][T14025] __x64_sys_unshare+0x31/0x40 [ 493.841679][T14025] do_syscall_64+0x115/0x840 [ 493.841704][T14025] ? clear_bhb_loop+0x40/0x90 [ 493.841726][T14025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.841742][T14025] RIP: 0033:0x7f296e99de59 [ 493.841759][T14025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.841775][T14025] RSP: 002b:00007f296f91f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 493.841795][T14025] RAX: ffffffffffffffda RBX: 00007f296ec26090 RCX: 00007f296e99de59 [ 493.841806][T14025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 493.841817][T14025] RBP: 00007f296ea33e6f R08: 0000000000000000 R09: 0000000000000000 [ 493.841827][T14025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.841837][T14025] R13: 00007f296ec26128 R14: 00007f296ec26090 R15: 00007fff747af3f8 [ 493.841858][T14025] [ 497.437236][T14103] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1633'. [ 499.309022][T14131] random: crng reseeded on system resumption [ 499.381162][T14132] RDS: rds_bind could not find a transport for fe80::736d:2f73:7461:626c, load rds_tcp or rds_rdma? [ 500.496378][T14154] FAULT_INJECTION: forcing a failure. [ 500.496378][T14154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.526742][T14154] CPU: 0 UID: 0 PID: 14154 Comm: syz.3.1646 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.526769][T14154] Tainted: [L]=SOFTLOCKUP [ 500.526774][T14154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.526783][T14154] Call Trace: [ 500.526788][T14154] [ 500.526795][T14154] dump_stack_lvl+0x100/0x190 [ 500.526818][T14154] should_fail_ex.cold+0x5/0xa [ 500.526836][T14154] _copy_from_user+0x2e/0xd0 [ 500.526971][T14154] kstrtoint_from_user+0xd6/0x1d0 [ 500.526987][T14154] ? __pfx_kstrtoint_from_user+0x10/0x10 [ 500.527007][T14154] ? __lock_acquire+0x49f/0x1a40 [ 500.527030][T14154] nsim_dev_hwstats_do_write+0xb6/0xbb0 [ 500.527112][T14154] ? __debugfs_file_get+0x1fc/0x860 [ 500.527165][T14154] ? __pfx_nsim_dev_hwstats_do_write+0x10/0x10 [ 500.527193][T14154] short_proxy_write+0x133/0x1a0 [ 500.527209][T14154] vfs_write+0x2aa/0x1050 [ 500.527230][T14154] ? __pfx_short_proxy_write+0x10/0x10 [ 500.527246][T14154] ? __pfx_vfs_write+0x10/0x10 [ 500.527264][T14154] ? __fget_files+0x215/0x3d0 [ 500.527288][T14154] ? __fget_files+0x21f/0x3d0 [ 500.527313][T14154] ksys_write+0x12a/0x250 [ 500.527332][T14154] ? __pfx_ksys_write+0x10/0x10 [ 500.527356][T14154] do_syscall_64+0x115/0x840 [ 500.527379][T14154] ? clear_bhb_loop+0x40/0x90 [ 500.527398][T14154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.527412][T14154] RIP: 0033:0x7fbc33b9de59 [ 500.527426][T14154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.527440][T14154] RSP: 002b:00007fbc34b49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 500.527454][T14154] RAX: ffffffffffffffda RBX: 00007fbc33e25fa0 RCX: 00007fbc33b9de59 [ 500.527464][T14154] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 500.527472][T14154] RBP: 00007fbc34b49090 R08: 0000000000000000 R09: 0000000000000000 [ 500.527481][T14154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.527488][T14154] R13: 00007fbc33e26038 R14: 00007fbc33e25fa0 R15: 00007ffd709f03c8 [ 500.527507][T14154] [ 500.753409][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.759967][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.949654][T14190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1655'. [ 504.614854][T14245] nbd: illegal input index -1024 [ 504.641691][T14244] nbd: illegal input index -1024 [ 504.899300][T14254] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1672'. [ 504.949932][ T29] audit: type=1804 audit(4294968439.340:20): pid=14234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1666" name="/newroot/452/file0" dev="tmpfs" ino=2362 res=1 errno=0 [ 505.025286][ T29] audit: type=1804 audit(4294968439.380:21): pid=14251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1666" name="/newroot/452/file0" dev="tmpfs" ino=2362 res=1 errno=0 [ 506.065590][T14272] sysfs_service_op_store: Client not running :-5: [ 506.355068][T14283] random: crng reseeded on system resumption [ 506.832235][T14287] bond0: option packets_per_slave: invalid value () [ 506.903228][T14287] bond0: option packets_per_slave: allowed values 0 - 65535 [ 507.183308][T14294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1681'. [ 508.809620][T14324] netlink: 354 bytes leftover after parsing attributes in process `syz.4.1687'. [ 510.270174][T14357] syz_tun: tun_chr_ioctl cmd 1074025676 [ 510.307134][T14357] syz_tun: owner set to 111 [ 511.083905][T14379] Process accounting resumed [ 511.406407][T14384] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 512.406357][T14410] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 512.570700][T14405] zswap: compressor FÛâ(_ not available [ 512.744702][T14424] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1707'. [ 513.053981][T14431] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 513.067922][T14431] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 513.084342][T14431] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 513.096217][T14431] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 513.105475][T14431] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 513.659812][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 513.698602][T14456] random: crng reseeded on system resumption [ 514.379225][T14430] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.394237][T14430] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.417587][T14430] bridge_slave_0: entered allmulticast mode [ 514.445512][T14430] bridge_slave_0: entered promiscuous mode [ 514.469858][T14430] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.488760][T14430] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.505503][T14430] bridge_slave_1: entered allmulticast mode [ 514.529112][T14430] bridge_slave_1: entered promiscuous mode [ 514.811970][T14430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.861408][T14430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.987554][T14430] team0: Port device team_slave_0 added [ 515.011667][T14430] team0: Port device team_slave_1 added [ 515.154802][T14430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.180758][T14430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.220355][T13412] Bluetooth: hci1: command tx timeout [ 515.285503][T14430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.377874][T14430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.402250][T14430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.487073][T14430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.654944][T14430] hsr_slave_0: entered promiscuous mode [ 515.674409][T14430] hsr_slave_1: entered promiscuous mode [ 515.690257][T14430] debugfs: 'hsr0' already exists in 'hsr' [ 515.703195][T14430] Cannot create hsr debugfs directory [ 516.007408][T14494] can: request_module (can-proto-4) failed. [ 516.384376][T14501] aoe: could not set interface list: too many interfaces [ 516.810345][T14430] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 516.873485][T14430] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.912644][T14430] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 516.946607][T14430] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.973340][T14430] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 517.006298][T14430] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.028836][T14430] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 517.072193][T14430] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.278609][T13412] Bluetooth: hci1: command tx timeout [ 517.429107][T14430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.476942][T14430] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.516043][T14124] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.523225][T14124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.595232][T14124] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.602411][T14124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.936826][T14430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.277245][T14430] veth0_vlan: entered promiscuous mode [ 519.294789][T14430] veth1_vlan: entered promiscuous mode [ 519.340839][T14430] veth0_macvtap: entered promiscuous mode [ 519.349334][T13412] Bluetooth: hci1: command tx timeout [ 519.361410][T14430] veth1_macvtap: entered promiscuous mode [ 519.381774][T14430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.397671][T14430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.416676][T13386] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.450399][T13386] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.485359][T13386] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.515981][T13386] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.660861][T14124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.692246][T14124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.865122][T14124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.881148][T14583] vivid-007: ================= START STATUS ================= [ 519.900875][T14124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.969437][T14583] vivid-007: Enable Output Cropping: true grabbed [ 520.061505][T14583] vivid-007: Enable Output Composing: true grabbed [ 520.125597][T14583] vivid-007: Enable Output Scaler: true grabbed [ 520.183393][T14583] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 520.246509][T14583] vivid-007: Transmit Mode: HDMI grabbed [ 520.290114][T14583] vivid-007: Hotplug Present: 0x00000000 [ 520.329914][T14583] vivid-007: RxSense Present: 0x00000000 [ 520.359935][T14583] vivid-007: EDID Present: 0x00000000 [ 520.375897][T14588] capability: warning: `syz.5.1708' uses deprecated v2 capabilities in a way that may be insecure [ 520.414801][T14583] vivid-007: ================== END STATUS ================== [ 520.764805][T14606] netlink: 354 bytes leftover after parsing attributes in process `syz.4.1737'. [ 521.385237][T14625] sysfs_service_op_store: Client not running :-5: [ 521.419237][T13412] Bluetooth: hci1: command tx timeout [ 521.755729][T14632] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 523.126924][T14663] Setting dangerous option i915.mitigations - tainting kernel [ 523.207490][T14663] Bad "i915.mitigations=QÒaM.ôê+úyš,^", 'QÒaM.ôê+úyš' is unknown [ 525.026817][T14686] Â: entered promiscuous mode [ 525.458062][T14699] FAULT_INJECTION: forcing a failure. [ 525.458062][T14699] name failslab, interval 1, probability 0, space 0, times 0 [ 525.524836][T14699] CPU: 0 UID: 0 PID: 14699 Comm: syz.5.1754 Tainted: G U L syzkaller #0 PREEMPT(full) [ 525.524877][T14699] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 525.524883][T14699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.524894][T14699] Call Trace: [ 525.524904][T14699] [ 525.524912][T14699] dump_stack_lvl+0x100/0x190 [ 525.524944][T14699] should_fail_ex.cold+0x5/0xa [ 525.524964][T14699] should_failslab+0xc2/0x120 [ 525.524988][T14699] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 525.525010][T14699] ? kasan_enable_current+0x20/0x20 [ 525.525048][T14699] ? vidtv_psi_short_event_desc_init+0x429/0x5f0 [ 525.525184][T14699] kstrdup+0x51/0xe0 [ 525.525203][T14699] vidtv_psi_short_event_desc_init+0x429/0x5f0 [ 525.525236][T14699] vidtv_psi_desc_clone+0x33f/0x5d0 [ 525.525262][T14699] vidtv_channel_si_init+0x76c/0x18f0 [ 525.525286][T14699] vidtv_mux_init+0x522/0xbf0 [ 525.525306][T14699] vidtv_start_feed+0x34e/0x500 [ 525.525329][T14699] ? __pfx_vidtv_start_feed+0x10/0x10 [ 525.525354][T14699] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 525.525388][T14699] dmx_section_feed_start_filtering+0x3a8/0x660 [ 525.525471][T14699] dvb_dmxdev_filter_start+0x767/0xdd0 [ 525.525501][T14699] dvb_demux_do_ioctl+0xe64/0x1200 [ 525.525537][T14699] dvb_usercopy+0x167/0x340 [ 525.525556][T14699] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 525.525578][T14699] ? __pfx_dvb_usercopy+0x10/0x10 [ 525.525604][T14699] ? __fget_files+0x21f/0x3d0 [ 525.525631][T14699] dvb_demux_ioctl+0x29/0x40 [ 525.525649][T14699] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 525.525668][T14699] __x64_sys_ioctl+0x18e/0x210 [ 525.525689][T14699] do_syscall_64+0x115/0x840 [ 525.525712][T14699] ? clear_bhb_loop+0x40/0x90 [ 525.525734][T14699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.525749][T14699] RIP: 0033:0x7fb4b859de59 [ 525.525766][T14699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.525781][T14699] RSP: 002b:00007fb4b9416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.525797][T14699] RAX: ffffffffffffffda RBX: 00007fb4b8826090 RCX: 00007fb4b859de59 [ 525.525808][T14699] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000009 [ 525.525818][T14699] RBP: 00007fb4b8633e6f R08: 0000000000000000 R09: 0000000000000000 [ 525.525828][T14699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.525837][T14699] R13: 00007fb4b8826128 R14: 00007fb4b8826090 R15: 00007ffe52f91048 [ 525.525860][T14699] [ 526.438776][T14723] netlink: 'syz.5.1758': attribute type 1 has an invalid length. [ 526.550426][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1758'. [ 527.028506][T14431] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 527.048766][T14431] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 527.057448][T14431] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 527.069031][T14431] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 527.077707][T14431] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 527.825466][T14744] netlink: Conntrack attr has 4 unknown bytes [ 528.802177][T14730] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.820419][T14730] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.835714][T14730] bridge_slave_0: entered allmulticast mode [ 528.851288][T14730] bridge_slave_0: entered promiscuous mode [ 528.868072][T14730] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.886940][T14730] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.902785][T14730] bridge_slave_1: entered allmulticast mode [ 528.921399][T14730] bridge_slave_1: entered promiscuous mode [ 528.989497][T14730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.025611][T14730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.089295][T14730] team0: Port device team_slave_0 added [ 529.111839][T14730] team0: Port device team_slave_1 added [ 529.143979][T14431] Bluetooth: hci5: command tx timeout [ 529.198100][T14730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.215559][T14730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.277273][T14730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.308528][T14730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.328553][T14730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.384029][T14730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.540504][T14730] hsr_slave_0: entered promiscuous mode [ 529.571063][T14730] hsr_slave_1: entered promiscuous mode [ 529.593718][T14730] debugfs: 'hsr0' already exists in 'hsr' [ 529.610310][T14730] Cannot create hsr debugfs directory [ 529.959715][T14780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1767'. [ 530.841611][T14730] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 530.883075][T14730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.918040][T14730] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 530.979946][T14730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.998442][T14730] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 531.032373][T14730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.054285][T14730] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 531.088453][T14730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.217861][T14431] Bluetooth: hci5: command tx timeout [ 531.295931][T14730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.339839][T14730] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.367462][T13420] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.374618][T13420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.419633][T13420] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.426825][T13420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.038259][T14818] netlink: 62 bytes leftover after parsing attributes in process `syz.4.1774'. [ 532.184163][T14730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.730342][T14730] veth0_vlan: entered promiscuous mode [ 532.767700][T14730] veth1_vlan: entered promiscuous mode [ 532.843272][T14730] veth0_macvtap: entered promiscuous mode [ 532.870357][T14730] veth1_macvtap: entered promiscuous mode [ 532.913067][T14730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.940823][T14730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.990178][T13420] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.018967][T13420] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.143004][T13420] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.189800][T13420] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.284986][T14431] Bluetooth: hci5: command tx timeout [ 533.430571][T13420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.463965][T13420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.541338][T13406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.557910][T13406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.354437][T14431] Bluetooth: hci5: command tx timeout [ 535.768459][T14900] random: crng reseeded on system resumption [ 535.909336][ T29] audit: type=1800 audit(4294968470.435:22): pid=14903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1785" name="filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 536.348420][T14916] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 537.487073][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'. [ 537.517576][T14932] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1792'. [ 538.284146][T14952] zswap: compressor û not available [ 538.421508][T14958] input: 00 [ 538.421508][T14958] as /devices/virtual/input/input12 [ 538.446659][T14958] FAULT_INJECTION: forcing a failure. [ 538.446659][T14958] name failslab, interval 1, probability 0, space 0, times 0 [ 538.480831][T14958] CPU: 0 UID: 0 PID: 14958 Comm: syz.4.1798 Tainted: G U L syzkaller #0 PREEMPT(full) [ 538.480860][T14958] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 538.480866][T14958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 538.480876][T14958] Call Trace: [ 538.480882][T14958] [ 538.480888][T14958] dump_stack_lvl+0x100/0x190 [ 538.480913][T14958] should_fail_ex.cold+0x5/0xa [ 538.480935][T14958] should_failslab+0xc2/0x120 [ 538.480955][T14958] __kmalloc_cache_noprof+0x91/0x6c0 [ 538.480979][T14958] ? device_add+0xd3f/0x1970 [ 538.481102][T14958] device_add+0xd3f/0x1970 [ 538.481124][T14958] ? __pfx_device_add+0x10/0x10 [ 538.481148][T14958] ? kobject_get+0xbb/0x150 [ 538.481168][T14958] cdev_device_add+0x12b/0x270 [ 538.481192][T14958] evdev_connect+0x3a8/0x4b0 [ 538.481279][T14958] input_attach_handler.isra.0+0x177/0x1e0 [ 538.481325][T14958] input_register_device.cold+0x139/0x375 [ 538.481361][T14958] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 538.481418][T14958] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 538.481439][T14958] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 538.481474][T14958] ? xfd_validate_state+0x129/0x190 [ 538.481492][T14958] ? __pfx_uinput_ioctl+0x10/0x10 [ 538.481514][T14958] __x64_sys_ioctl+0x18e/0x210 [ 538.481534][T14958] do_syscall_64+0x115/0x840 [ 538.481555][T14958] ? clear_bhb_loop+0x40/0x90 [ 538.481573][T14958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.481588][T14958] RIP: 0033:0x7fbb1499de59 [ 538.481602][T14958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.481617][T14958] RSP: 002b:00007fbb157f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.481632][T14958] RAX: ffffffffffffffda RBX: 00007fbb14c25fa0 RCX: 00007fbb1499de59 [ 538.481642][T14958] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 538.481651][T14958] RBP: 00007fbb14a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 538.481660][T14958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.481668][T14958] R13: 00007fbb14c26038 R14: 00007fbb14c25fa0 R15: 00007ffc78f8c378 [ 538.481694][T14958] [ 538.839254][T14958] input: failed to attach handler evdev to device input12, error: -12 [ 540.292493][T14975] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 540.341974][T14975] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 540.377848][T14975] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 540.398353][T14975] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 540.448986][T14975] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 540.505979][T14975] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 540.544840][T14975] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 540.568118][T14975] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 540.613144][T14975] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 540.628914][T14975] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 540.643611][T14975] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 541.848251][T14991] netlink: 'syz.4.1806': attribute type 1 has an invalid length. [ 541.880519][T14991] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1806'. [ 541.964381][T14431] Bluetooth: hci3: command 0x0c1a tx timeout [ 542.103040][T13412] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 542.118461][T13412] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 542.127722][T13412] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 542.142308][T13412] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 542.153001][T13412] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 542.360911][T13412] Bluetooth: hci0: command 0x0c1a tx timeout [ 542.441477][T13412] Bluetooth: hci4: command 0x0c1a tx timeout [ 542.519925][T13412] Bluetooth: hci1: command 0x0c1a tx timeout [ 542.679156][T13412] Bluetooth: hci5: command 0x0c1a tx timeout [ 544.211731][T13412] Bluetooth: hci6: command tx timeout [ 544.512330][T13412] Bluetooth: hci4: command 0x0c1a tx timeout [ 544.593457][T14431] Bluetooth: hci1: command 0x0c1a tx timeout [ 544.719692][T15050] blktrace: Concurrent blktraces are not allowed on ram10 [ 544.749337][T13412] Bluetooth: hci5: command 0x0c1a tx timeout [ 546.013473][T14994] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.118646][T14994] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.262498][T13412] Bluetooth: hci6: command tx timeout [ 546.286866][T14994] bridge_slave_0: entered allmulticast mode [ 546.319408][T14994] bridge_slave_0: entered promiscuous mode [ 546.349426][T14994] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.356877][T14994] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.366154][T14994] bridge_slave_1: entered allmulticast mode [ 546.373669][T14994] bridge_slave_1: entered promiscuous mode [ 546.486246][T14994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.521372][T14994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.583871][T13412] Bluetooth: hci4: command 0x0c1a tx timeout [ 546.660211][T13412] Bluetooth: hci1: command 0x0c1a tx timeout [ 546.714090][T14994] team0: Port device team_slave_0 added [ 546.778982][T14994] team0: Port device team_slave_1 added [ 546.820099][T13412] Bluetooth: hci5: command 0x0c1a tx timeout [ 546.861960][T14994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.891964][T14994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.953551][T14431] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 546.975076][T14431] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 546.986305][T14431] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 546.994219][T14431] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 547.002201][T14431] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 547.064620][T14994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.103061][T14994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.127018][T14994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.250114][T14994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.462714][T15080] netlink: 2468 bytes leftover after parsing attributes in process `syz.4.1820'. [ 547.524555][T14994] hsr_slave_0: entered promiscuous mode [ 547.547964][T14994] hsr_slave_1: entered promiscuous mode [ 547.576407][T14994] debugfs: 'hsr0' already exists in 'hsr' [ 547.603674][T14994] Cannot create hsr debugfs directory [ 547.976636][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1821'. [ 548.332361][T14431] Bluetooth: hci6: command tx timeout [ 549.050167][T14431] Bluetooth: hci7: command tx timeout [ 549.263832][T14994] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 549.285416][T14994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.326538][T14994] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 549.339152][T14994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.382702][T14994] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 549.394434][T14994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 549.425743][T14994] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 549.435592][T14994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 549.590990][T15066] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.610012][T15066] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.625707][T15066] bridge_slave_0: entered allmulticast mode [ 549.642766][T15066] bridge_slave_0: entered promiscuous mode [ 549.673210][T15066] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.690561][T15066] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.704131][T15066] bridge_slave_1: entered allmulticast mode [ 549.714117][T15066] bridge_slave_1: entered promiscuous mode [ 549.938392][T15066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.993787][T15066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.149656][T15066] team0: Port device team_slave_0 added [ 550.186479][T15066] team0: Port device team_slave_1 added [ 550.402634][T14431] Bluetooth: hci6: command tx timeout [ 550.477874][T15138] FAULT_INJECTION: forcing a failure. [ 550.477874][T15138] name failslab, interval 1, probability 0, space 0, times 0 [ 550.516427][T15066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.563331][T15066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.650169][T15138] CPU: 0 UID: 0 PID: 15138 Comm: syz.4.1827 Tainted: G U L syzkaller #0 PREEMPT(full) [ 550.650199][T15138] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 550.650205][T15138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 550.650214][T15138] Call Trace: [ 550.650219][T15138] [ 550.650226][T15138] dump_stack_lvl+0x100/0x190 [ 550.650248][T15138] should_fail_ex.cold+0x5/0xa [ 550.650266][T15138] should_failslab+0xc2/0x120 [ 550.650285][T15138] kmem_cache_alloc_noprof+0x91/0x6a0 [ 550.650301][T15138] ? d_instantiate+0x8a/0xb0 [ 550.650316][T15138] ? d_instantiate+0x8a/0xb0 [ 550.650331][T15138] ? alloc_empty_file+0x5b/0x1c0 [ 550.650351][T15138] alloc_empty_file+0x5b/0x1c0 [ 550.650369][T15138] alloc_file_pseudo+0x183/0x290 [ 550.650386][T15138] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 550.650409][T15138] ioctx_alloc+0x5d6/0x21a0 [ 550.650515][T15138] ? find_held_lock+0x2b/0x80 [ 550.650535][T15138] ? __pfx_ioctx_alloc+0x10/0x10 [ 550.650554][T15138] __x64_sys_io_setup+0xc9/0x220 [ 550.650570][T15138] do_syscall_64+0x115/0x840 [ 550.650592][T15138] ? clear_bhb_loop+0x40/0x90 [ 550.650611][T15138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.650626][T15138] RIP: 0033:0x7fbb1499de59 [ 550.650640][T15138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.650655][T15138] RSP: 002b:00007fbb157b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 550.650669][T15138] RAX: ffffffffffffffda RBX: 00007fbb14c26180 RCX: 00007fbb1499de59 [ 550.650680][T15138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 550.650690][T15138] RBP: 00007fbb14a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 550.650699][T15138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.650708][T15138] R13: 00007fbb14c26218 R14: 00007fbb14c26180 R15: 00007ffc78f8c378 [ 550.650728][T15138] [ 551.045531][T15066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.067633][T15066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.084787][T15066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.146034][T14431] Bluetooth: hci7: command tx timeout [ 551.157831][T15066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.742591][T15066] hsr_slave_0: entered promiscuous mode [ 551.771884][T15066] hsr_slave_1: entered promiscuous mode [ 551.794438][T15066] debugfs: 'hsr0' already exists in 'hsr' [ 551.828922][T15066] Cannot create hsr debugfs directory [ 551.955424][T14994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.970222][T15147] netlink: 2468 bytes leftover after parsing attributes in process `syz.4.1829'. [ 552.097446][T14994] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.161683][T14839] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.168851][T14839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.276885][T14839] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.284097][T14839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.192077][T13412] Bluetooth: hci7: command tx timeout [ 553.285964][T15066] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 553.326140][T15066] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 553.367203][T15066] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 553.414113][T15066] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.462033][T15066] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 553.503095][T15066] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.535766][T15066] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 553.594610][T15066] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 553.918985][T15066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.980752][T15066] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.017676][T14994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.039714][T13416] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.046880][T13416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.104378][T13416] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.111858][T13416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.917162][T15204] can: request_module (can-proto-4) failed. [ 554.939637][T14994] veth0_vlan: entered promiscuous mode [ 555.039255][T14994] veth1_vlan: entered promiscuous mode [ 555.185121][T14994] veth0_macvtap: entered promiscuous mode [ 555.246229][T14994] veth1_macvtap: entered promiscuous mode [ 555.260205][T13412] Bluetooth: hci7: command tx timeout [ 555.364479][T14994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.428704][T14994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.503289][T15188] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.544767][T15188] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.605282][T15188] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.663777][T15188] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.897805][T15066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.952452][T13416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.995203][T13416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.154112][T13420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.192254][T13420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.297952][T15226] netlink: 2468 bytes leftover after parsing attributes in process `syz.6.1837'. [ 556.687701][T15235] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 556.847183][T15066] veth0_vlan: entered promiscuous mode [ 556.887033][T15066] veth1_vlan: entered promiscuous mode [ 557.008419][T15066] veth0_macvtap: entered promiscuous mode [ 557.053468][T15066] veth1_macvtap: entered promiscuous mode [ 557.064033][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1839'. [ 557.337225][T15066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.573185][T15066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.053742][T14124] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.104066][T14124] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.134295][T14124] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.210612][T14124] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.749944][T15253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1841'. [ 558.762983][T14124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.798328][T14124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.859809][T15253] veth1_macvtap: left promiscuous mode [ 558.945003][T13420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.961627][T13420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.835577][T15279] netlink: 2468 bytes leftover after parsing attributes in process `syz.7.1846'. [ 560.466282][T15293] random: crng reseeded on system resumption [ 561.799063][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.805440][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.423381][T15325] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1852'. [ 562.613389][T15325] veth1_macvtap: left promiscuous mode [ 563.967874][T15341] netlink: 2468 bytes leftover after parsing attributes in process `syz.8.1857'. [ 565.536459][T15372] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 565.619573][T15365] zswap: compressor 000 not available [ 566.536521][T15380] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1863'. [ 566.621874][T15380] veth1_macvtap: left promiscuous mode [ 568.108572][T15416] netlink: 2468 bytes leftover after parsing attributes in process `syz.8.1869'. [ 569.642607][T15445] random: crng reseeded on system resumption [ 571.012742][T15457] zswap: compressor 000 not available [ 571.067483][T15463] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 572.403364][T15483] netlink: 2468 bytes leftover after parsing attributes in process `syz.7.1882'. [ 572.679460][T15485] FAULT_INJECTION: forcing a failure. [ 572.679460][T15485] name failslab, interval 1, probability 0, space 0, times 0 [ 572.725161][T15485] CPU: 0 UID: 0 PID: 15485 Comm: syz.4.1883 Tainted: G U L syzkaller #0 PREEMPT(full) [ 572.725192][T15485] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 572.725198][T15485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 572.725207][T15485] Call Trace: [ 572.725213][T15485] [ 572.725218][T15485] dump_stack_lvl+0x100/0x190 [ 572.725241][T15485] should_fail_ex.cold+0x5/0xa [ 572.725259][T15485] should_failslab+0xc2/0x120 [ 572.725279][T15485] kmem_cache_alloc_noprof+0x91/0x6a0 [ 572.725297][T15485] ? __kernfs_new_node+0xd2/0xa10 [ 572.725427][T15485] __kernfs_new_node+0xd2/0xa10 [ 572.725452][T15485] ? __pfx___kernfs_new_node+0x10/0x10 [ 572.725479][T15485] ? find_held_lock+0x2b/0x80 [ 572.725495][T15485] ? kernfs_root+0xee/0x2a0 [ 572.725513][T15485] ? kernfs_root+0xee/0x2a0 [ 572.725537][T15485] kernfs_new_node+0x117/0x150 [ 572.725561][T15485] __kernfs_create_file+0x53/0x350 [ 572.725580][T15485] sysfs_add_file_mode_ns+0x207/0x3c0 [ 572.725633][T15485] internal_create_group+0x593/0xfb0 [ 572.725659][T15485] ? __pfx_internal_create_group+0x10/0x10 [ 572.725683][T15485] ? kernfs_create_link+0x1bd/0x240 [ 572.725703][T15485] internal_create_groups+0x9d/0x150 [ 572.725726][T15485] device_add+0x71a/0x1970 [ 572.725747][T15485] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 572.725768][T15485] ? __pfx_device_add+0x10/0x10 [ 572.725788][T15485] ? lockdep_init_map_type+0x5c/0x250 [ 572.725809][T15485] ? __init_waitqueue_head+0xca/0x150 [ 572.725857][T15485] netdev_register_kobject+0x1a9/0x3d0 [ 572.725951][T15485] register_netdevice+0x15b6/0x25a0 [ 572.726016][T15485] ? __pfx_register_netdevice+0x10/0x10 [ 572.726039][T15485] ? __pfx_loopback_net_init+0x10/0x10 [ 572.726121][T15485] register_netdev+0x34/0x50 [ 572.726138][T15485] loopback_net_init+0x7a/0x170 [ 572.726161][T15485] ? __pfx_loopback_net_init+0x10/0x10 [ 572.726180][T15485] ops_init+0x1e2/0x5f0 [ 572.726200][T15485] setup_net+0x118/0x3a0 [ 572.726217][T15485] ? __pfx_setup_net+0x10/0x10 [ 572.726234][T15485] ? mutex_init_lockdep+0xf1/0x120 [ 572.726259][T15485] copy_net_ns+0x46f/0x7c0 [ 572.726279][T15485] create_new_namespaces+0x3ea/0xac0 [ 572.726308][T15485] unshare_nsproxy_namespaces+0xf2/0x220 [ 572.726333][T15485] ksys_unshare+0x438/0xab0 [ 572.726352][T15485] ? __pfx_ksys_unshare+0x10/0x10 [ 572.726376][T15485] __x64_sys_unshare+0x31/0x40 [ 572.726393][T15485] do_syscall_64+0x115/0x840 [ 572.726416][T15485] ? clear_bhb_loop+0x40/0x90 [ 572.726436][T15485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.726452][T15485] RIP: 0033:0x7fbb1499de59 [ 572.726466][T15485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.726481][T15485] RSP: 002b:00007fbb157f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 572.726496][T15485] RAX: ffffffffffffffda RBX: 00007fbb14c25fa0 RCX: 00007fbb1499de59 [ 572.726506][T15485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 572.726515][T15485] RBP: 00007fbb14a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 572.726524][T15485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.726533][T15485] R13: 00007fbb14c26038 R14: 00007fbb14c25fa0 R15: 00007ffc78f8c378 [ 572.726554][T15485] [ 577.175906][T15558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1896'. [ 579.210502][T15570] bond0: option slaves: interface -Âô]àæ©=,Dço does not exist! [ 579.896373][T15608] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 581.391814][T15636] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 581.448580][T15636] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 581.475059][T15636] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 581.509255][T15636] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 581.552270][T15636] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 581.588043][T15636] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 581.681753][T15636] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 581.802704][T15636] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 582.108689][T15636] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 582.190940][T15636] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 582.287359][T15662] FAULT_INJECTION: forcing a failure. [ 582.287359][T15662] name failslab, interval 1, probability 0, space 0, times 0 [ 582.405367][T15662] CPU: 0 UID: 0 PID: 15662 Comm: syz.8.1914 Tainted: G U L syzkaller #0 PREEMPT(full) [ 582.405402][T15662] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 582.405407][T15662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 582.405417][T15662] Call Trace: [ 582.405423][T15662] [ 582.405429][T15662] dump_stack_lvl+0x100/0x190 [ 582.405451][T15662] should_fail_ex.cold+0x5/0xa [ 582.405470][T15662] should_failslab+0xc2/0x120 [ 582.405489][T15662] __kmalloc_cache_noprof+0x91/0x6c0 [ 582.405512][T15662] ? percpu_ref_init+0xec/0x3f0 [ 582.405532][T15662] ? __pfx_obj_cgroup_release+0x10/0x10 [ 582.405550][T15662] percpu_ref_init+0xec/0x3f0 [ 582.405567][T15662] mem_cgroup_css_online+0x177/0xbf0 [ 582.405585][T15662] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 582.405601][T15662] online_css+0xb2/0x350 [ 582.405617][T15662] cgroup_apply_control_enable+0xa8d/0xdd0 [ 582.405643][T15662] cgroup_mkdir+0x57f/0x1330 [ 582.405664][T15662] ? __pfx_cgroup_mkdir+0x10/0x10 [ 582.405684][T15662] kernfs_iop_mkdir+0x111/0x190 [ 582.405705][T15662] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 582.405753][T15662] vfs_mkdir+0x361/0x850 [ 582.405775][T15662] filename_mkdirat+0x48b/0x5e0 [ 582.405793][T15662] ? __pfx_filename_mkdirat+0x10/0x10 [ 582.405807][T15662] ? strncpy_from_user+0x19d/0x2d0 [ 582.405834][T15662] ? do_getname+0x191/0x390 [ 582.405852][T15662] __x64_sys_mkdir+0x6b/0x90 [ 582.405866][T15662] do_syscall_64+0x115/0x840 [ 582.405888][T15662] ? clear_bhb_loop+0x40/0x90 [ 582.405907][T15662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.405923][T15662] RIP: 0033:0x7fa19d79de59 [ 582.405937][T15662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.405951][T15662] RSP: 002b:00007fa19e6ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 582.405966][T15662] RAX: ffffffffffffffda RBX: 00007fa19da25fa0 RCX: 00007fa19d79de59 [ 582.405976][T15662] RDX: 0000000000000000 RSI: 00000000000003ff RDI: 0000200000000140 [ 582.405985][T15662] RBP: 00007fa19d833e6f R08: 0000000000000000 R09: 0000000000000000 [ 582.405993][T15662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.406002][T15662] R13: 00007fa19da26038 R14: 00007fa19da25fa0 R15: 00007ffed2774848 [ 582.406022][T15662] [ 582.987836][T15636] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 583.496938][T13412] Bluetooth: hci0: command 0x0c1a tx timeout [ 583.504640][T13412] Bluetooth: hci3: command 0x0c1a tx timeout [ 583.572423][T14431] Bluetooth: hci1: command 0x0c1a tx timeout [ 583.582142][T14431] Bluetooth: hci4: command 0x0c1a tx timeout [ 583.664898][T13412] Bluetooth: hci6: command 0x0c1a tx timeout [ 583.671000][T13412] Bluetooth: hci5: command 0x0c1a tx timeout [ 584.083047][T14431] Bluetooth: hci7: command 0x0c1a tx timeout [ 584.381439][T13412] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 584.409370][T13412] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 584.422743][T13412] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 584.430773][T13412] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 584.438330][T13412] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 585.300866][T15637] kexec: Could not allocate control_code_buffer [ 585.673582][T13412] Bluetooth: hci6: command 0x0c1a tx timeout [ 586.150947][T13412] Bluetooth: hci7: command 0x0c1a tx timeout [ 586.469703][T13412] Bluetooth: hci8: command tx timeout [ 587.750059][T13412] Bluetooth: hci6: command 0x0c1a tx timeout [ 588.193925][T15746] sysfs_service_op_store: Client not running :-5: [ 588.221829][T13412] Bluetooth: hci7: command 0x0c1a tx timeout [ 588.415310][T15738] ima: policy update failed [ 588.433462][ T29] audit: type=1802 audit(4294968523.216:23): pid=15738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1924" res=0 errno=0 [ 588.474250][T15692] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.509585][T15692] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.538963][T15692] bridge_slave_0: entered allmulticast mode [ 588.548197][T14431] Bluetooth: hci8: command tx timeout [ 588.583512][T15692] bridge_slave_0: entered promiscuous mode [ 588.626991][T15692] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.653763][T15692] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.670335][T15692] bridge_slave_1: entered allmulticast mode [ 588.698142][T15692] bridge_slave_1: entered promiscuous mode [ 588.800025][T15692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.863422][T15692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.875574][T15755] netlink: 'syz.7.1926': attribute type 1 has an invalid length. [ 588.972928][T15766] blktrace: Concurrent blktraces are not allowed on sda1 [ 589.061169][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1926'. [ 589.205210][T15766] FAULT_INJECTION: forcing a failure. [ 589.205210][T15766] name failslab, interval 1, probability 0, space 0, times 0 [ 589.240099][T15768] FAULT_INJECTION: forcing a failure. [ 589.240099][T15768] name failslab, interval 1, probability 0, space 0, times 0 [ 589.284444][T15768] CPU: 0 UID: 0 PID: 15768 Comm: syz.8.1928 Tainted: G U L syzkaller #0 PREEMPT(full) [ 589.284476][T15768] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 589.284550][T15768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.284570][T15768] Call Trace: [ 589.284581][T15768] [ 589.284590][T15768] dump_stack_lvl+0x100/0x190 [ 589.284614][T15768] should_fail_ex.cold+0x5/0xa [ 589.284633][T15768] should_failslab+0xc2/0x120 [ 589.284656][T15768] __kmalloc_noprof+0xfc/0x820 [ 589.284672][T15768] ? __register_sysctl_table+0xbc8/0x1650 [ 589.284695][T15768] ? __register_sysctl_table+0xbc8/0x1650 [ 589.284717][T15768] ? __register_sysctl_table+0xbe4/0x1650 [ 589.284742][T15768] __register_sysctl_table+0xbe4/0x1650 [ 589.284768][T15768] ? __pfx___register_sysctl_table+0x10/0x10 [ 589.284789][T15768] ? is_module_address+0x69/0xf0 [ 589.284811][T15768] ? register_net_sysctl_sz+0x222/0x430 [ 589.284935][T15768] ? __asan_memmove+0x50/0x60 [ 589.284950][T15768] ? kmemdup_noprof+0x49/0x60 [ 589.284969][T15768] ipv6_sysctl_net_init+0x136/0x2b0 [ 589.285052][T15768] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 589.285075][T15768] ops_init+0x1e2/0x5f0 [ 589.285095][T15768] setup_net+0x118/0x3a0 [ 589.285112][T15768] ? __pfx_setup_net+0x10/0x10 [ 589.285129][T15768] ? mutex_init_lockdep+0xf1/0x120 [ 589.285168][T15768] copy_net_ns+0x46f/0x7c0 [ 589.285189][T15768] create_new_namespaces+0x3ea/0xac0 [ 589.285217][T15768] unshare_nsproxy_namespaces+0xf2/0x220 [ 589.285242][T15768] ksys_unshare+0x438/0xab0 [ 589.285260][T15768] ? __pfx_ksys_unshare+0x10/0x10 [ 589.285284][T15768] __x64_sys_unshare+0x31/0x40 [ 589.285300][T15768] do_syscall_64+0x115/0x840 [ 589.285322][T15768] ? clear_bhb_loop+0x40/0x90 [ 589.285340][T15768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.285356][T15768] RIP: 0033:0x7fa19d79de59 [ 589.285371][T15768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.285386][T15768] RSP: 002b:00007fa19e6ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 589.285401][T15768] RAX: ffffffffffffffda RBX: 00007fa19da25fa0 RCX: 00007fa19d79de59 [ 589.285412][T15768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 589.285421][T15768] RBP: 00007fa19d833e6f R08: 0000000000000000 R09: 0000000000000000 [ 589.285430][T15768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.285439][T15768] R13: 00007fa19da26038 R14: 00007fa19da25fa0 R15: 00007ffed2774848 [ 589.285460][T15768] [ 589.536652][T15768] sysctl could not get directory: /net/ipv6/route -12 [ 589.681343][T15766] CPU: 0 UID: 0 PID: 15766 Comm: syz.7.1926 Tainted: G U L syzkaller #0 PREEMPT(full) [ 589.681371][T15766] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 589.681377][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.681387][T15766] Call Trace: [ 589.681393][T15766] [ 589.681399][T15766] dump_stack_lvl+0x100/0x190 [ 589.681443][T15766] should_fail_ex.cold+0x5/0xa [ 589.681462][T15766] should_failslab+0xc2/0x120 [ 589.681481][T15766] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 589.681500][T15766] ? __d_alloc+0x35/0xa50 [ 589.681518][T15766] __d_alloc+0x35/0xa50 [ 589.681535][T15766] d_alloc+0x4a/0x1e0 [ 589.681549][T15766] lookup_one_qstr_excl+0x171/0x250 [ 589.681569][T15766] start_dirop+0x59/0xb0 [ 589.681589][T15766] simple_start_creating+0xf9/0x110 [ 589.681612][T15766] ? __pfx_simple_start_creating+0x10/0x10 [ 589.681634][T15766] ? mntput+0x70/0xa0 [ 589.681653][T15766] ? simple_pin_fs+0xa3/0x190 [ 589.681673][T15766] debugfs_start_creating.part.0+0x82/0x170 [ 589.681694][T15766] __debugfs_create_file+0xb3/0x4f0 [ 589.681715][T15766] debugfs_create_file_full+0x41/0x60 [ 589.681735][T15766] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 589.681757][T15766] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 589.681791][T15766] ? kasan_save_track+0x14/0x30 [ 589.681810][T15766] ? __kasan_kmalloc+0xaa/0xb0 [ 589.681827][T15766] ? lockdep_init_map_type+0x5c/0x250 [ 589.681851][T15766] preinit_net.part.0+0x43b/0x920 [ 589.681871][T15766] copy_net_ns+0x339/0x7c0 [ 589.681891][T15766] create_new_namespaces+0x3ea/0xac0 [ 589.681919][T15766] unshare_nsproxy_namespaces+0xf2/0x220 [ 589.681943][T15766] ksys_unshare+0x438/0xab0 [ 589.681961][T15766] ? __pfx_ksys_unshare+0x10/0x10 [ 589.681985][T15766] __x64_sys_unshare+0x31/0x40 [ 589.682001][T15766] do_syscall_64+0x115/0x840 [ 589.682024][T15766] ? clear_bhb_loop+0x40/0x90 [ 589.682041][T15766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.682058][T15766] RIP: 0033:0x7fad92b9de59 [ 589.682072][T15766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.682086][T15766] RSP: 002b:00007fad93989028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 589.682108][T15766] RAX: ffffffffffffffda RBX: 00007fad92e26180 RCX: 00007fad92b9de59 [ 589.682119][T15766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 589.682128][T15766] RBP: 00007fad92c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 589.682137][T15766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.682147][T15766] R13: 00007fad92e26218 R14: 00007fad92e26180 R15: 00007ffde64db3b8 [ 589.682168][T15766] [ 590.140142][T15692] team0: Port device team_slave_0 added [ 590.386765][T15692] team0: Port device team_slave_1 added [ 590.516485][T15692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.531591][T15692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.559224][T15692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.602005][T15692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.618760][T13412] Bluetooth: hci8: command tx timeout [ 590.656301][T15692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.688695][T15692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.937418][T15692] hsr_slave_0: entered promiscuous mode [ 590.952724][T15692] hsr_slave_1: entered promiscuous mode [ 590.963060][T15692] debugfs: 'hsr0' already exists in 'hsr' [ 590.969561][T15692] Cannot create hsr debugfs directory [ 592.572590][T15797] bridge0: port 4(team0) entered blocking state [ 592.589248][T15797] bridge0: port 4(team0) entered disabled state [ 592.607588][T15797] team0: entered allmulticast mode [ 592.625114][T15797] team_slave_0: entered allmulticast mode [ 592.635775][T15797] team_slave_1: entered allmulticast mode [ 592.650393][T15797] FAULT_INJECTION: forcing a failure. [ 592.650393][T15797] name failslab, interval 1, probability 0, space 0, times 0 [ 592.678275][T15797] CPU: 0 UID: 0 PID: 15797 Comm: syz.4.1933 Tainted: G U L syzkaller #0 PREEMPT(full) [ 592.678304][T15797] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 592.678310][T15797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.678320][T15797] Call Trace: [ 592.678326][T15797] [ 592.678332][T15797] dump_stack_lvl+0x100/0x190 [ 592.678355][T15797] should_fail_ex.cold+0x5/0xa [ 592.678383][T15797] should_failslab+0xc2/0x120 [ 592.678403][T15797] kmem_cache_alloc_noprof+0x91/0x6a0 [ 592.678421][T15797] ? __kernfs_new_node+0xd2/0xa10 [ 592.678446][T15797] __kernfs_new_node+0xd2/0xa10 [ 592.678469][T15797] ? __pfx___kernfs_new_node+0x10/0x10 [ 592.678495][T15797] ? find_held_lock+0x2b/0x80 [ 592.678512][T15797] ? kernfs_root+0xee/0x2a0 [ 592.678530][T15797] ? kernfs_root+0xee/0x2a0 [ 592.678553][T15797] kernfs_new_node+0x117/0x150 [ 592.678577][T15797] __kernfs_create_file+0x53/0x350 [ 592.678595][T15797] sysfs_add_file_mode_ns+0x207/0x3c0 [ 592.678619][T15797] sysfs_create_file_ns+0x145/0x1e0 [ 592.678637][T15797] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 592.678655][T15797] ? kernfs_create_link+0x1bd/0x240 [ 592.678671][T15797] ? kernfs_put+0x3f/0x60 [ 592.678690][T15797] ? sysfs_do_create_link_sd+0xbb/0x140 [ 592.678712][T15797] br_sysfs_addif+0xe4/0x210 [ 592.678825][T15797] br_add_if+0x82c/0x1c80 [ 592.678868][T15797] ? security_capable+0x80/0x260 [ 592.678923][T15797] add_del_if+0x114/0x160 [ 592.678942][T15797] br_dev_siocdevprivate+0x8b5/0x1660 [ 592.678963][T15797] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 592.678985][T15797] ? do_raw_spin_lock+0x128/0x260 [ 592.679001][T15797] ? find_held_lock+0x2b/0x80 [ 592.679017][T15797] ? debug_mutex_remove_waiter+0xa0/0x320 [ 592.679033][T15797] ? debug_mutex_remove_waiter+0xa0/0x320 [ 592.679056][T15797] ? netdev_name_node_lookup+0x107/0x150 [ 592.679103][T15797] ? __mutex_lock+0x82c/0x1bd0 [ 592.679129][T15797] dev_ifsioc+0xc2f/0x1f10 [ 592.679171][T15797] ? __pfx_dev_ifsioc+0x10/0x10 [ 592.679185][T15797] ? __pfx___mutex_lock+0x10/0x10 [ 592.679214][T15797] ? dev_load+0x8e/0x240 [ 592.679228][T15797] ? dev_load+0x8e/0x240 [ 592.679247][T15797] dev_ioctl+0x70e/0x1070 [ 592.679266][T15797] sock_ioctl+0x494/0x6b0 [ 592.679328][T15797] ? __pfx_sock_ioctl+0x10/0x10 [ 592.679349][T15797] ? hook_file_ioctl_common+0x140/0x440 [ 592.679402][T15797] ? __fget_files+0x21f/0x3d0 [ 592.679428][T15797] ? __pfx_sock_ioctl+0x10/0x10 [ 592.679451][T15797] __x64_sys_ioctl+0x18e/0x210 [ 592.679472][T15797] do_syscall_64+0x115/0x840 [ 592.679493][T15797] ? clear_bhb_loop+0x40/0x90 [ 592.679511][T15797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.679526][T15797] RIP: 0033:0x7fbb1499de59 [ 592.679540][T15797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.679555][T15797] RSP: 002b:00007fbb157f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.679570][T15797] RAX: ffffffffffffffda RBX: 00007fbb14c25fa0 RCX: 00007fbb1499de59 [ 592.679580][T15797] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000005 [ 592.679591][T15797] RBP: 00007fbb14a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 592.679600][T15797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.679611][T15797] R13: 00007fbb14c26038 R14: 00007fbb14c25fa0 R15: 00007ffc78f8c378 [ 592.679631][T15797] [ 593.018501][T15797] team0: left allmulticast mode [ 593.024836][T15797] team_slave_0: left allmulticast mode [ 593.031122][T15797] team_slave_1: left allmulticast mode [ 593.037064][T13412] Bluetooth: hci8: command tx timeout [ 593.191065][T15692] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 593.214377][T15692] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.464363][T15692] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 593.479558][T15692] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.507066][T15692] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 593.544044][T15692] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.660008][T15692] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 593.743595][T15692] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.881011][T15817] netlink: 2468 bytes leftover after parsing attributes in process `syz.8.1935'. [ 594.158332][T15692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.280494][T15692] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.349031][T13420] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.356235][T13420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.430216][T14839] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.437458][T14839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.499672][T15877] vivid-007: ================= START STATUS ================= [ 596.594810][T15877] vivid-007: Generate PTS: true [ 596.655572][T15877] vivid-007: Generate SCR: true [ 596.722280][T15877] tpg source WxH: 320x240 (Y'CbCr) [ 596.788623][T15877] tpg field: 1 [ 596.832593][T15877] tpg crop: (0,0)/320x240 [ 596.877139][T15877] tpg compose: (0,0)/320x240 [ 596.939922][T15877] tpg colorspace: 8 [ 596.944480][T15692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.970962][T15877] tpg transfer function: 0/0 [ 597.035853][T15877] tpg Y'CbCr encoding: 0/0 [ 597.071747][T15877] tpg quantization: 0/0 [ 597.121066][T15877] tpg RGB range: 0/2 [ 597.182362][T15877] vivid-007: ================== END STATUS ================== [ 597.263690][T15889] netlink: 2468 bytes leftover after parsing attributes in process `syz.7.1948'. [ 597.673317][T15895] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1949'. [ 598.315730][T15692] veth0_vlan: entered promiscuous mode [ 598.409631][T15692] veth1_vlan: entered promiscuous mode [ 598.533349][T15692] veth0_macvtap: entered promiscuous mode [ 598.581915][T15692] veth1_macvtap: entered promiscuous mode [ 598.592458][T15912] MTRR 1 not used [ 598.663109][T15692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.723304][T15692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.799171][T13420] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.837547][T13420] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.938714][T13420] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.974830][T13420] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.779746][T14124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.820786][T14124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.240379][T15188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.293919][T15188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.070140][T13412] Bluetooth: hci7: SCO packet for unknown connection handle 0 [ 602.226775][T15933] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 603.185992][T15956] netlink: 2468 bytes leftover after parsing attributes in process `syz.8.1958'. [ 604.015604][T15965] netlink: 2404 bytes leftover after parsing attributes in process `syz.4.1959'. [ 606.737007][T15997] MTRR 1 not used [ 610.249487][T16023] blktrace: Concurrent blktraces are not allowed on nbd8 [ 612.726258][T16043] bridge0: port 3(team0) entered blocking state [ 612.764453][T16043] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 612.823864][T16043] bridge0: port 3(team0) entered disabled state [ 612.863283][T16043] team0: entered allmulticast mode [ 612.898660][T16043] team_slave_0: entered allmulticast mode [ 612.925757][T16043] team_slave_1: entered allmulticast mode [ 612.961177][T16043] team0: entered promiscuous mode [ 612.984252][T16043] team_slave_0: entered promiscuous mode [ 613.015794][T16043] team_slave_1: entered promiscuous mode [ 613.042534][T16043] bridge0: port 3(team0) entered blocking state [ 613.048974][T16043] bridge0: port 3(team0) entered forwarding state [ 613.469926][ T29] audit: type=1804 audit(4294968548.364:24): pid=16050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1975" name="/newroot/183/file0" dev="tmpfs" ino=969 res=1 errno=0 [ 613.576203][ T29] audit: type=1804 audit(4294968548.394:25): pid=16058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1975" name="/newroot/183/file0" dev="tmpfs" ino=969 res=1 errno=0 [ 614.083576][T13412] Bluetooth: hci8: unexpected subevent 0x01 length: 123 > 18 [ 615.847900][T16061] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 616.009140][T16061] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 616.131960][T16061] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 616.291867][T16061] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 616.394735][T16061] page dumped because: unmovable page [ 616.460189][T16061] page_owner tracks the page as allocated [ 616.520749][T16061] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1655679580, free_ts 0 [ 616.677249][T16061] register_early_stack+0x74/0xaf [ 616.752829][T16061] init_page_owner+0x4c/0xa10 [ 616.791179][T16061] page_ext_init+0x71d/0x780 [ 616.815065][T16061] mm_core_init+0x229/0x270 [ 616.840188][T16061] page_owner free stack trace missing [ 618.076644][T16116] netlink: 2468 bytes leftover after parsing attributes in process `syz.7.1988'. [ 622.702139][T16172] HfR: entered promiscuous mode [ 622.940998][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.947420][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.787665][T13412] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 624.352785][T16189] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 624.376983][T16189] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 624.400364][T16189] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 624.520652][T16189] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 624.588501][T16189] page dumped because: unmovable page [ 624.588577][T16189] page_owner tracks the page as allocated [ 624.588597][T16189] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1655679580, free_ts 0 [ 624.588622][T16189] register_early_stack+0x74/0xaf [ 624.588645][T16189] init_page_owner+0x4c/0xa10 [ 624.588660][T16189] page_ext_init+0x71d/0x780 [ 624.588677][T16189] mm_core_init+0x229/0x270 [ 624.588697][T16189] page_owner free stack trace missing [ 624.668561][T16212] netlink: 2468 bytes leftover after parsing attributes in process `syz.8.2006'. [ 625.508465][T16216] Process accounting resumed [ 628.358215][T16269] blktrace: Concurrent blktraces are not allowed on loop2 [ 628.570263][T16273] netlink: 2468 bytes leftover after parsing attributes in process `syz.8.2017'. [ 629.427016][ T29] audit: type=1800 audit(4294968564.399:26): pid=16288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2020" name="dbroot" dev="configfs" ino=78045 res=0 errno=0 [ 629.471849][T16288] db_root: cannot open: /dev/audio1 [ 629.491416][T16288] db_root: not a directory: /dev/audio1 [ 631.200824][T16307] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2023'. [ 631.314336][T16307] ipvlan1: entered promiscuous mode [ 631.331969][T16307] ipvlan1: entered allmulticast mode [ 631.348984][T16307] veth0_vlan: entered allmulticast mode [ 632.170535][T16321] netlink: 2468 bytes leftover after parsing attributes in process `syz.9.2026'. [ 632.850814][T14431] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 632.865743][T14431] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 632.881409][T14431] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 632.894421][T14431] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 632.907299][T14431] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 634.475617][T16375] blktrace: Concurrent blktraces are not allowed on ram10 [ 634.943973][T16380] netlink: 2468 bytes leftover after parsing attributes in process `syz.8.2038'. [ 634.961370][T14431] Bluetooth: hci9: command tx timeout [ 635.860196][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2040'. [ 636.025829][T16404] netlink: 330 bytes leftover after parsing attributes in process `syz.7.2042'. [ 636.740653][T16410] netlink: 350 bytes leftover after parsing attributes in process `syz.7.2043'. [ 636.766600][T16410] tc_dump_action: action bad kind [ 636.805751][T16331] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.833544][T16331] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.867838][T16331] bridge_slave_0: entered allmulticast mode [ 636.878980][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2044'. [ 636.906643][T16331] bridge_slave_0: entered promiscuous mode [ 636.946873][T16331] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.000384][T16331] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.032448][T14431] Bluetooth: hci9: command tx timeout [ 637.041027][T16331] bridge_slave_1: entered allmulticast mode [ 637.075683][T16331] bridge_slave_1: entered promiscuous mode [ 637.367809][T16331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.542345][T16331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.002588][T16331] team0: Port device team_slave_0 added [ 638.021912][T16331] team0: Port device team_slave_1 added [ 638.160134][T16331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.179025][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.304068][T16331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.332097][T16445] netlink: 212 bytes leftover after parsing attributes in process `syz.9.2051'. [ 638.362212][T16331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.406783][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.503878][T16447] blktrace: Concurrent blktraces are not allowed on nbd5 [ 638.543246][T16331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.043018][T16331] hsr_slave_0: entered promiscuous mode [ 639.049646][T16331] hsr_slave_1: entered promiscuous mode [ 639.059679][T16331] debugfs: 'hsr0' already exists in 'hsr' [ 639.065904][T16331] Cannot create hsr debugfs directory [ 639.102479][T14431] Bluetooth: hci9: command tx timeout [ 640.563863][T16480] netlink: 2468 bytes leftover after parsing attributes in process `syz.9.2060'. [ 641.180394][T14431] Bluetooth: hci9: command tx timeout [ 642.171789][T16331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 642.254625][T16331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.284972][T16331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 642.332270][T16331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 642.375649][T16331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 642.430628][T16331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 642.474467][T16331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 642.520967][T16331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 643.540477][T16331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.620376][T16331] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.686481][T15188] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.693673][T15188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.974432][T15188] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.981651][T15188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.689698][T16572] netlink: 2468 bytes leftover after parsing attributes in process `syz.9.2069'. [ 645.292356][T16588] FAULT_INJECTION: forcing a failure. [ 645.292356][T16588] name failslab, interval 1, probability 0, space 0, times 0 [ 645.357043][T16588] CPU: 0 UID: 0 PID: 16588 Comm: syz.9.2071 Tainted: G U L syzkaller #0 PREEMPT(full) [ 645.357072][T16588] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 645.357078][T16588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 645.357088][T16588] Call Trace: [ 645.357093][T16588] [ 645.357100][T16588] dump_stack_lvl+0x100/0x190 [ 645.357125][T16588] should_fail_ex.cold+0x5/0xa [ 645.357144][T16588] should_failslab+0xc2/0x120 [ 645.357165][T16588] __kmalloc_cache_noprof+0x91/0x6c0 [ 645.357188][T16588] ? percpu_ref_init+0xec/0x3f0 [ 645.357208][T16588] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 645.357227][T16588] percpu_ref_init+0xec/0x3f0 [ 645.357244][T16588] io_uring_setup.cold+0x2be/0x1c2e [ 645.357266][T16588] ? ksys_write+0x190/0x250 [ 645.357287][T16588] ? ksys_write+0x190/0x250 [ 645.357308][T16588] ? __pfx_io_uring_setup+0x10/0x10 [ 645.357425][T16588] ? do_futex+0x190/0x440 [ 645.357442][T16588] ? __pfx_do_futex+0x10/0x10 [ 645.357478][T16588] ? xfd_validate_state+0x129/0x190 [ 645.357507][T16588] __x64_sys_io_uring_setup+0xc2/0x170 [ 645.357530][T16588] do_syscall_64+0x115/0x840 [ 645.357559][T16588] ? clear_bhb_loop+0x40/0x90 [ 645.357578][T16588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.357593][T16588] RIP: 0033:0x7fbd4239de59 [ 645.357609][T16588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.357623][T16588] RSP: 002b:00007fbd432a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 645.357641][T16588] RAX: ffffffffffffffda RBX: 00007fbd42625fa0 RCX: 00007fbd4239de59 [ 645.357651][T16588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 645.357661][T16588] RBP: 00007fbd42433e6f R08: 0000000000000000 R09: 0000000000000000 [ 645.357671][T16588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.357690][T16588] R13: 00007fbd42626038 R14: 00007fbd42625fa0 R15: 00007fff6b44f268 [ 645.357714][T16588] [ 646.241584][T16609] can: request_module (can-proto-5) failed. [ 646.688235][T16331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.219951][T16331] veth0_vlan: entered promiscuous mode [ 647.330698][T16331] veth1_vlan: entered promiscuous mode [ 647.543704][ T29] audit: type=1800 audit(4294968582.594:27): pid=16644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2079" name="lu_gp_id" dev="configfs" ino=80532 res=0 errno=0 [ 647.717426][T16331] veth0_macvtap: entered promiscuous mode [ 647.954356][T16331] veth1_macvtap: entered promiscuous mode [ 648.083205][T16331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.186774][T16331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.253680][T13416] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.306295][T13416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.356831][T13416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.429934][T13416] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.734479][T15188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.794282][T15188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.932020][T13416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.972238][T13416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.412953][T16682] blktrace: Concurrent blktraces are not allowed on loop2 [ 649.510492][T16687] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1831055008.3209917635.3098749936), cmd(2) [ 649.556185][T16688] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1831055008.3209917635.3098749936), cmd(2) [ 649.782335][T16697] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2086'. [ 649.880463][T16700] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2086'. [ 649.916670][T16700] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.7.2086: iget: checksum invalid [ 649.984820][T16700] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 650.086893][T16700] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.7.2086: iget: checksum invalid [ 650.260499][T16700] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 650.334073][T16700] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.7.2086: iget: checksum invalid [ 650.390590][T16700] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 650.447007][T16700] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.7.2086: iget: checksum invalid [ 650.521287][T16700] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 650.576179][T16700] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 650.647288][T16700] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 653.401393][ T29] audit: type=1800 audit(4294968588.492:28): pid=16772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2091" name="lu_gp_id" dev="configfs" ino=81039 res=0 errno=0 [ 654.833209][T13412] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 654.848289][T13412] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 654.858919][T13412] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 654.867151][T13412] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 654.877687][T13412] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 655.979747][T16802] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.987121][T16802] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.995333][T16802] bridge_slave_0: entered allmulticast mode [ 656.004148][T16802] bridge_slave_0: entered promiscuous mode [ 656.015906][T16802] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.023447][T16802] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.030703][T16802] bridge_slave_1: entered allmulticast mode [ 656.041333][T16802] bridge_slave_1: entered promiscuous mode [ 656.118491][T16802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.172829][T16802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.299217][T16802] team0: Port device team_slave_0 added [ 656.328141][T16802] team0: Port device team_slave_1 added [ 656.483248][T16802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.512999][T16802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.581698][T16802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.637281][T16802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.652038][T16802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.716079][T16802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.880135][T16802] hsr_slave_0: entered promiscuous mode [ 656.901966][T16802] hsr_slave_1: entered promiscuous mode [ 656.935779][T16802] debugfs: 'hsr0' already exists in 'hsr' [ 656.941839][T13412] Bluetooth: hci10: command tx timeout [ 656.968831][T16802] Cannot create hsr debugfs directory [ 657.544044][T16849] netlink: 78 bytes leftover after parsing attributes in process `syz.9.2105'. [ 657.698700][T16849] netlink: 78 bytes leftover after parsing attributes in process `syz.9.2105'. [ 657.712466][T16802] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.988595][T16802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.236376][T16802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.438630][T16802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.603846][T16802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.008215][T13412] Bluetooth: hci10: command tx timeout [ 659.329021][T13407] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 3583 with max blocks 1 with error 117 [ 659.401731][T13407] EXT4-fs (sda1): This should not happen!! Data will be lost [ 659.401731][T13407] [ 659.602117][T16802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 659.630036][T16802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 659.732574][T16802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 659.775306][T16802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 659.812736][T16802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 659.848132][T16802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 659.908485][T16802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 659.973404][T16802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 660.507382][T16802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.552656][T16802] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.577398][T14124] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.584583][T14124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.639468][T13407] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.646762][T13407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.078698][T13412] Bluetooth: hci10: command tx timeout [ 661.648462][T16913] futex_wake_op: syz.9.2115 tries to shift op by -2048; fix this program [ 661.681036][T16913] 0x000000000001-0x000000020000 : "" [ 661.846732][T16802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.873938][T16913] ftl_cs: FTL header corrupt! [ 662.048639][T16802] veth0_vlan: entered promiscuous mode [ 662.086750][T16802] veth1_vlan: entered promiscuous mode [ 662.357327][T16802] veth0_macvtap: entered promiscuous mode [ 662.470905][T16802] veth1_macvtap: entered promiscuous mode [ 662.663610][T16802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.747449][T16802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.796605][T13416] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.817954][T13416] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.840876][T13416] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.875895][T13416] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.151009][T13412] Bluetooth: hci10: command tx timeout [ 663.345263][T13420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.381177][T16934] sd 0:0:1:0: PR command failed: 1026 [ 663.426649][T13420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.436139][T16934] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 663.516468][T16934] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 663.656146][T13407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.705388][T13407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.021723][T14431] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 666.040985][T14431] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 666.050816][T14431] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 666.059985][T14431] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 666.088043][T14431] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 666.388618][T17009] netlink: 2468 bytes leftover after parsing attributes in process `syz.9.2133'. [ 666.892262][ T30] INFO: task syz-executor:5625 blocked for more than 143 seconds. [ 666.909759][ T30] Tainted: G U L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 666.947940][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 666.996600][ T30] task:syz-executor state:D stack:23080 pid:5625 tgid:5625 ppid:1 task_flags:0x400140 flags:0x00080002 [ 667.067653][ T30] Call Trace: [ 667.085925][ T30] [ 667.101604][ T30] __schedule+0x125c/0x6730 [ 667.138022][ T30] ? do_raw_spin_lock+0x128/0x260 [ 667.168243][ T30] ? __pfx___schedule+0x10/0x10 [ 667.191154][ T30] ? find_held_lock+0x2b/0x80 [ 667.212351][ T30] ? schedule+0x225/0x2c0 [ 667.234754][ T30] schedule+0xdd/0x2c0 [ 667.255315][ T30] schedule_preempt_disabled+0x13/0x30 [ 667.279280][ T30] __mutex_lock+0xccc/0x1bd0 [ 667.296180][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 667.346755][ T30] ? __lock_acquire+0x49f/0x1a40 [ 667.405814][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 667.441489][ T30] ? net_generic+0xea/0x2a0 [ 667.463229][ T30] ? net_generic+0xea/0x2a0 [ 667.481399][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 667.499871][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 667.514454][ T30] nfsd_umount+0x3b/0x60 [ 667.530713][ T30] deactivate_locked_super+0xc1/0x1b0 [ 667.548052][ T30] deactivate_super+0xe7/0x110 [ 667.552908][ T30] cleanup_mnt+0x21f/0x450 [ 667.557331][ T30] task_work_run+0x150/0x240 [ 667.571553][ T30] ? __pfx_task_work_run+0x10/0x10 [ 667.589854][ T30] exit_to_user_mode_loop+0x1d8/0x6f0 [ 667.595306][ T30] ? rcu_is_watching+0x12/0xc0 [ 667.609016][ T30] do_syscall_64+0x652/0x840 [ 667.618376][ T30] ? clear_bhb_loop+0x40/0x90 [ 667.632657][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.648629][ T30] RIP: 0033:0x7fbc33b9f097 [ 667.654674][ T30] RSP: 002b:00007ffd709ef638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 667.680063][ T30] RAX: 0000000000000000 RBX: 00007fbc33c332ca RCX: 00007fbc33b9f097 [ 667.711899][ T30] RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007ffd709f0780 [ 667.732583][ T30] RBP: 00007ffd709f076c R08: 0000000000000000 R09: 0000000000000000 [ 667.743042][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd709f0780 [ 667.751393][ T30] R13: 00007fbc33c332ca R14: 000000000007d187 R15: 00007ffd709f07c0 [ 667.760901][ T30] [ 667.814243][ T30] [ 667.814243][ T30] Showing all locks held in the system: [ 667.845744][ T30] 1 lock held by khungtaskd/30: [ 667.869089][ T30] #0: ffffffff8ebe5f00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 667.894906][ T30] 2 locks held by syz-executor/5623: [ 667.900570][ T30] #0: ffff88802abd20d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 667.912294][ T30] #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 667.923770][ T30] 2 locks held by syz-executor/5625: [ 667.932010][ T30] #0: ffff88807edf80d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 667.947466][ T30] #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 667.958574][ T30] 3 locks held by kworker/0:4/5712: [ 667.963812][ T30] #0: ffff88801bc07140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 667.974728][ T30] #1: ffffc900041efd08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 667.986729][ T30] #2: ffffffff8ebf1878 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 668.000023][ T30] 2 locks held by getty/8844: [ 668.004747][ T30] #0: ffff888036bcf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 668.017480][ T30] #1: ffffc90005d532e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 668.031172][ T30] 2 locks held by kworker/u10:0/13386: [ 668.041275][ T30] #0: ffff88801ef0a140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 668.053118][ T30] #1: ffffc9000340fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 668.064855][ T30] 2 locks held by syz.2.1637/14113: [ 668.071405][ T30] #0: ffffffff90b4c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.081459][ T30] #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 668.092529][ T30] 2 locks held by syz.5.1772/14798: [ 668.098804][ T30] #0: ffffffff90b4c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.107386][ T30] #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 668.117804][ T30] 4 locks held by kworker/u10:6/14839: [ 668.123296][ T30] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 668.140830][ T30] #1: ffffc9000418fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 668.151897][ T30] #2: ffffffff90a851e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 668.162561][ T30] #3: ffffffff90a9de00 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_notifier_net+0x1c/0xf0 [ 668.173788][T13412] Bluetooth: hci11: command tx timeout [ 668.185365][ T30] 2 locks held by syz-executor/15066: [ 668.190792][ T30] #0: ffff88807af900d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 668.201535][ T30] #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 668.212227][ T30] 1 lock held by syz.6.1866/15398: [ 668.217614][ T30] #0: ffff888079995970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 668.226995][ T30] 3 locks held by syz.6.1866/15399: [ 668.232232][ T30] #0: ffff888079995970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 668.249290][ T30] #1: ffff888058fa6450 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 668.259323][ T30] #2: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 668.269444][ T30] 2 locks held by syz-executor/15692: [ 668.275072][ T30] #0: ffff88808d1c8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 668.286183][ T30] #1: ffff88808d1c80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0 [ 668.296252][ T30] 2 locks held by syz.4.1985/16098: [ 668.301475][ T30] #0: ffffffff90b4c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.310046][ T30] #1: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 668.321812][ T30] 3 locks held by syz.0.2087/16710: [ 668.328610][ T30] #0: ffff888086b2f970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 668.337995][ T30] #1: ffff888083ae6450 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 668.350836][ T30] #2: ffffffff8f06f1e0 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 668.362522][ T30] 2 locks held by syz.2.2127/16984: [ 668.369192][ T30] #0: ffffffff90a851e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 668.379616][ T30] #1: ffffffff90a9de00 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x15/0xa0 [ 668.389817][ T30] 2 locks held by syz.7.2130/16990: [ 668.398164][ T30] #0: ffffffff90a851e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 668.409321][ T30] #1: ffffffff90a9de00 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 668.418797][ T30] 3 locks held by syz.7.2130/16993: [ 668.425192][ T30] #0: ffffffff90a851e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 668.435121][ T30] #1: ffffffff90a9de00 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 668.448140][ T30] #2: ffffffff8ebf19a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 668.458668][ T30] 1 lock held by syz.7.2130/16999: [ 668.467525][ T30] #0: ffffffff90a851e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 668.477782][ T30] 1 lock held by syz-executor/17000: [ 668.483101][ T30] #0: ffffffff8ebf19a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 668.502005][ T30] [ 668.519945][ T30] ============================================= [ 668.519945][ T30] [ 668.562385][ T30] NMI backtrace for cpu 0 [ 668.562404][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 668.562426][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 668.562431][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 668.562440][ T30] Call Trace: [ 668.562446][ T30] [ 668.562453][ T30] dump_stack_lvl+0x100/0x190 [ 668.562474][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 668.562491][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 668.562508][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 668.562624][ T30] sys_info+0x141/0x190 [ 668.562642][ T30] watchdog+0xcb1/0x1030 [ 668.562665][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 668.562713][ T30] ? __pfx_watchdog+0x10/0x10 [ 668.562731][ T30] ? __kthread_parkme+0x18c/0x230 [ 668.562747][ T30] ? kthread+0x13a/0x450 [ 668.562762][ T30] ? __pfx_watchdog+0x10/0x10 [ 668.562778][ T30] kthread+0x370/0x450 [ 668.562793][ T30] ? __pfx_kthread+0x10/0x10 [ 668.562811][ T30] ret_from_fork+0x72b/0xd50 [ 668.562827][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 668.562843][ T30] ? __switch_to+0x800/0x10f0 [ 668.562862][ T30] ? __switch_to_asm+0x39/0x70 [ 668.562879][ T30] ? __pfx_kthread+0x10/0x10 [ 668.562896][ T30] ret_from_fork_asm+0x1a/0x30 [ 668.562922][ T30] [ 669.064918][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 669.071802][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 669.082484][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 669.087768][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.097836][ T30] Call Trace: [ 669.101125][ T30] [ 669.104067][ T30] dump_stack_lvl+0x100/0x190 [ 669.108761][ T30] vpanic+0x552/0x970 [ 669.112730][ T30] ? __pfx_vpanic+0x10/0x10 [ 669.117221][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 669.123387][ T30] panic+0xd1/0xe0 [ 669.127111][ T30] ? __pfx_panic+0x10/0x10 [ 669.131517][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 669.137743][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 669.143911][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 669.150092][ T30] ? watchdog.cold+0x1ec/0x234 [ 669.154870][ T30] ? watchdog+0xcc1/0x1030 [ 669.159339][ T30] watchdog.cold+0x1fd/0x234 [ 669.163938][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 669.169749][ T30] ? __pfx_watchdog+0x10/0x10 [ 669.174437][ T30] ? __kthread_parkme+0x18c/0x230 [ 669.179449][ T30] ? kthread+0x13a/0x450 [ 669.183679][ T30] ? __pfx_watchdog+0x10/0x10 [ 669.188364][ T30] kthread+0x370/0x450 [ 669.192439][ T30] ? __pfx_kthread+0x10/0x10 [ 669.197027][ T30] ret_from_fork+0x72b/0xd50 [ 669.201634][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 669.206771][ T30] ? __switch_to+0x800/0x10f0 [ 669.211453][ T30] ? __switch_to_asm+0x39/0x70 [ 669.216216][ T30] ? __pfx_kthread+0x10/0x10 [ 669.220837][ T30] ret_from_fork_asm+0x1a/0x30 [ 669.225621][ T30] [ 669.228696][ T30] Kernel Offset: disabled [ 669.233021][ T30] Rebooting in 86400 seconds..